last executing test programs: 15.294473797s ago: executing program 3 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010058000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x6) 15.240498203s ago: executing program 3 (id=441): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="6400000010000106000000000000000000000002000000000000000000001000d900736574683000000000000000240012000800010076657468180002001420010000000000000800000000000000c6b744604cd47f00001000fa5230000000000200e2", 0x64}], 0x1}, 0x4000000) 15.180564589s ago: executing program 3 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000010000000001ff02000000000000000000000000000120e620e6"], 0x64) 15.134550254s ago: executing program 3 (id=443): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 32) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) (rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) (async, rerun: 32) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) (async, rerun: 32) rename(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00') ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, 0x0) 14.925855785s ago: executing program 3 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='27', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000000c000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, r1, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0)) 14.890457569s ago: executing program 3 (id=447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x72, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x53, 0x2f, 0xff, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "1d13094a290fb1d156dbdd2c002ed4"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x4, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x85) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x20000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setuid(0xee01) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f20e035002000000f22e0f0f79311b700000fa58f0c470000650f01cbb9800000c00f3235010000000f30360fae95003800000f019a0100000066b84d000f00d0dbe10f78ce", 0x46}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.952224747s ago: executing program 1 (id=570): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/4096, 0x9ec}, {&(0x7f0000001800)=""/161, 0xa1}, {&(0x7f00000018c0)=""/134, 0x3a}, {&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/128, 0x37}, {&(0x7f0000001ac0)=""/260, 0x111}, {&(0x7f0000001c00)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 2.904571592s ago: executing program 1 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000300000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 2.838445988s ago: executing program 1 (id=574): mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) 2.832741939s ago: executing program 1 (id=575): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="6400000010000106000000000000000000000002000000000000000000001000d900736574683000000000000000240012000800010076657468180002001420010000000000000800000000000000c6b744604cd47f00001000fa5230000000000001e2", 0x64}], 0x1}, 0x4000000) 2.832693009s ago: executing program 1 (id=576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.832564139s ago: executing program 1 (id=577): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902120001070000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000140)={0x20, 0x7, 0x6, "c0ec22193ac9"}, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)={0x20, 0x14, 0x2, "e2cf"}, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x20, 0x21, 0x6d, {0x6d, 0x0, "5a8132913e0328b4e9c618fca19a2735ebf888a9f6082b75fac6ed0afdc9685fe8c9ef0fc0e74c4ea015e79513993283506130242530686ab64bc806ef72c663b3b794abb81fc72b883a6ae6a54438674238d60277b0217a521a8084d4a2584d0ded54dd02f7e66ddbc736"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x20, 0xa, 0x36, "bf075092f49513d83c431a88889d1a23601345d207d90e0fdf44077ddc10dd39117015c99b92e427c3268cae4341b12a7003caa64018"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xaf}}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.965807778s ago: executing program 0 (id=595): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/4096, 0x9ec}, {&(0x7f0000001800)=""/161, 0xa1}, {&(0x7f00000018c0)=""/134, 0x3a}, {&(0x7f0000001980)=""/146, 0x92}, {&(0x7f0000001a40)=""/128, 0x37}, {&(0x7f0000001ac0)=""/260, 0x111}, {&(0x7f0000001c00)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 1.902512775s ago: executing program 0 (id=596): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xc9}}}, &(0x7f0000000480)=0x0) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x9d, 0x80, 0x1, 0x30b}, 0x0, 0x1, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000d00)={0x43, 0x9, 0x1, {0x5, 0x58b, 0x100000000, 0x3, 0x3d0c, 0xfffffffffffffffe, 0x8, 0x0, 0x7fff}}, 0x43) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x10, 0x701, 0x0, 0x0, {0x1b, 0x0, 0xd00}}, 0x14}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000), 0x0) 1.662610819s ago: executing program 0 (id=599): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="656e633d6f61657020686173683df7"], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)=' hash=', 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a440000102020109025c000201a225550904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401"], 0xfffffffffffffffc) 1.626469573s ago: executing program 2 (id=602): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x100000000) (fail_nth: 1) 1.246613062s ago: executing program 2 (id=603): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) nanosleep(&(0x7f0000001a80)={0x5}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="000000000000000000000000000060ff00"}}, 0x0) 577.166301ms ago: executing program 0 (id=604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@private1, {0x4, 0x8001, 0x0, 0xffffffffffffff45, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x8}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x51, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x28, 0x40, "5d5a425e02"}}]}, 0x144}, 0x1, 0x1100000000000000}, 0x20040084) 563.466233ms ago: executing program 0 (id=605): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$nbd(r1, 0x0, 0x4b) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='t', 0x1}, {&(0x7f00000000c0)="1b2d535b9044575f4fbdb2e1da1baabee196873eee04b2ac1bbfdaa7cf2fbddc4f", 0x21}, {&(0x7f0000000a80)="cebc1fb255d9068426931a651130343188f30813f5bc17af6acb88aed3962a68989cf615dfacc610566b2293b71439c80319c8890049a729780e2ac8d86ee5afed0c6c733e17ee7061e74932cfc24acd099cd673e005dfe683971600d4e0a983225d25b1748069dc1c94ad948c8da944de67ce8e5d90134fb56953e745fa0323b624cad72ec2157d1580e620979ee13e976a18f6347c8b78ac473772640a7aeddcac0768c5810b336a08fe5b561af21a310aae8c3c19eb4ea185459150bb2fa9a8047f8ce36aca97e80b7bc73e98d483fc68bcb36ed82aae74f03916fce1a7c7e53120716383a4fb896b70b1694fbb83d2f8d3ef2233d0da4c132c13753af6e5b6d0430014b6564d6e31dff288ccb79502641a9046d0d535a20d5fa03cc756fe67da32d4102603cd979da1b137c245a86604696e3d7144dc57fdf36d749f8cd12c5de3b5840dbf4a64073c080bb5bc85322222df5e59bb129ec58e63573be6b1d6fddaa85f36eb9f17264362a050e69298215b3f7f0e4f6cf12295dbb61e41100da1fcee9d1534bde1abe0b3cff00b7c436d2b0f74c7c9d358680e7e6cfd42b4b9cf54599f44c49c752232a47b737bf41efb3c024e7d858070bac5fb2e3f1038c846aa026db52eba13da2b2c2b7440d59f8035462841d413a4c5fdb4ca0b17767128e33ac87febc398e636690438fb051045ed5c3ef404ed461b07ae7297790ac8a909f721a6b726eeb6a335fc5aa389a929b6c5f85ba1b45b45162fca1eeced2c0684c533c96660d48dd4314b389f58fd2191121cc01a1febc7bebcdf8b1ed5edbd63b82cef521ef802bcd404fcde7ad5de0aff755fb48e7a22e38b183bfd8a4251d578b865dde1a6b92ba0938b6d6ea5df10cf6476e5566b9fd517f9cab97f2f8e373aeb461ea6d713b64ceff0e64429d52bfd38443fadcb0c73b822b5a0f888b0e06a2663382bbba19add40b7ca4c509042345e7f2b48338b23078525f69d5243adb183b85aa1151d4e5189d884ee9f96d508928104e32367c271272e97f6fa695863093dbfea948be69553ab4aafe0891e18b653f7980acf599b737f25d8b117aeb3dd4a286ef644765ec864b2ab14763645110df459ab3347f4f12c044c8d29b6992fc2f38ac0d70c54c79fa1e955e8baf29e5e77da500da3d113f20084891e92f596c1bca48a5c78280c9b0ef0cdc1ad85ecfcca9f322416310ffae2944b19df1fb5cbad23bf59146b57cfd000ef5ce21c498e9a80ee065a6867e989d449d7b421f668447cf30c510dd93e731f8399fc74ac2f2376a4ca812bec7bc112a20d8baf0af78fa3b407147e6ede3bd21bab8f3fc3e275d7f04a04f2192769a1492a38a26b4a1f426e77eec3576bb88fbead822dbfd3244bc3aaf80570cae8928f9c85721dc63ee58f041a916232abdb642679cd2bd2111852a20952079560037e35e3be5d7af06dba3d74d50eef7344d4ee1afc3063cb9928bc40a59ed99d7af2bf79a3fa3fc70733d76072683101a3cdc370dfdb04d6974fbd8cd660df1513113922837289220fc08777a80a0ff710c9777ad1ea9aaf02c0920aeac086a5d79ad6b9ce2ba322b855d55a128cb3838cbe01ded77a577f0868d689df8a44bcfc07732116e5afee6e0ec337a5a0074287f5dbead1e111872f43b2c93198f71360dde6512863ff4e1b79609f8527caf697f1ad0c000fbf8609c597932cba6b687d24f02348a4a1c31c911ceb987d86960e8159fa9c1950a08ae2448ee78e10eae81ef6e86e73de79fc5f7af7e8f5560f1267bb9abeb75d7409f102bc3d47022a348b45909f3064fecdbaed804a095de1b193c06a423d88c223f9de44f9fa058dc688819f9db48b04e0b7770ec97d23c73c11c7c70c24ff23eb6ef54987a1ff28fc0c2527791d9bee6b223553df82ab8ef69d3051d9d669222ddf1923ea272fe8a92701477cfb1209a64737f0d34f7232ba4dd01ccadb20fdceec9dca4b3f90ff11b5749a0e9a6de140e0752b507e2c2d12e5c166bf745c893f7cb1954b98a08bcca687d080929eb6128cbbdbd6cda6e8e1218a6c3e252e9e80409092ae800a5f42b0d0ccc2cbbce24663da03ebfb8a6b58da070d6cd63e21b122eb845382075bdfe6357af1055dcc94973451672501306d811b6a949d97551dc6e0a5e364b768b21ff36ba4b64601281106812a1b83d546df1b845482a63cee17bfdf997172ff2bdbcb63d58c5dcb319ae7a29c64b3954c730aae5f71d9d6c88ab07d7e9466b557d99639e5d363e4b2ef8987abba4dda8c2285f2534c2eb3410d2b88e675e2af0c2b80eeae53c7d7dc6a54ef32da9b74bc9741745bbbe6ac326288dc8eacedec247ac7741709a32730a64d10327d4133ccd425547613710531fe6c4b8c30943f3e4b0845d949976c4ac6f35a9f5b90b155432059ba1b42a176a497a69b5d727d82b8da5898e248e6f4569ba31e6103961d448fa8471a4bc54a1cecb98e2fb88773ccfb1df21bc4ad2f755a91245ac58f50bbd0065c028d8d10466065e95e39610d54d344ce93ebb3ce7e6666cdae5b4f59602bf37a633c50c7c0a5333b968401fa36026329f545c2cd0a02575d2007818185d6687c252ce7ae7528cf30ad4e9bb3425b78223dead53642829873d4a3781d137355f143476cd6b4acc6cfade58166d1b22522b74afb6d2f8e759244569342cd95c22c3716ead0bbaf4ee9386761fc3e36df29e6bfc763aa705159b2742afdec42d399162d8f9626efd5b231a53d40f2fc9f711102dc271a50fd842b02bdaa414396dd67514bce37be8add6f9ce11c426bc44c64e9de81cf4339d8cd6d7974cd25e8e9ad956af60d8f2dcb52d4a534b8df17d39220e7e2ae61154b92df9e14b5fb8ca5bf483d38ba5dca6c3532bb914fa5032ae10aa62ac5e59135d88b5199fbb89f19cc21373290471a8397c11169fc326cf35e1015e6d70d9dff2a2ceebf364582b4a1c3902fc602dcdb014353d26817f7e5b98f55da647be767b700c76dd9f2c17ee2c690f531ddbc1cceacf016ba92089b16e866fc2a3d5597107e180b38446f7edd36d7e252822b60825606a7c9f439132c0e27e60544816f0e306a4f89034885b85d4cb29dcdb3d506ec965002bc88511327eee5c067cc03942627a6fcfbdf7e20ae9a8fff0c325fc5e54feb9fc443e952ef37c0b1e6cbb65d5d4b35e31a482fa0531cb81c43ffd11a42c8345b79574a71892317e4fab4a792c7ecafd7e010be20a2526423e22eea71e655b1b3ba2d8a110bd56dccfa9b15757a0c0429bbf0ca1d3caa01ba763bd45631466cdb9d2f44b073bd94a50ec9d25ef059f3b2e326c28f022e77ea6e2be18fd274080bfb909fa05b52c0e74d75a8d61e368bff15476c404bb3b09ff4cba238bd5ccafb660207df47b0ef2e92eb11f0127a83026d6186027db514577997b6c304f87b47880b2f2310726e67537c6263e680fbec8bc24416846c47ee86c5074677ad907c71b1beae878df9013980f5317f0fd33bd7f2cad4ab9ac2893884df77e9176bed69d2942be77e487480730411eb0807369b327277c8827c174429994b208a834ccdea04deee3d541f7e3f3d07fa6baef422dc02bac3e3d68c0ef7a0e9666002dc667636adf555840a602221e6115766b48fe195dc5dda0c2c57d70ab256964f70ed0855b4fcbd7944f44f0842cfa61491c387dcd91b6acb23d2da1ca7032412d3cab6b8e376e4ddd8ffb9bdc12e142a0498a050e8de930c1db2baaadb92b0853003402977e67578953029a42e895758829a80cf2916794036491683d2017c76b56e61c09717638d22f479c1e3b1c42fc1ca3cadf3b43f3870442f7da5d220e813e4717bd36c5ed0c3d6ee7c070ee586823df093853e7cbfd6be564fa22196c966437309b33aa7c500dfd0955d8ff54faf5de7afcb03c9d0caa0e0f55b1892d1fb6faf5e819faf87c099b438cab67013869453a3612aa1da21d353462a9e4b6e6b7c74ef29a8a9a33d58128cc6110c5cfebce597e5488554913cbfe80635fcf72af7793484131d8bf3f70e3568fe8b7969b91ca8a8d0b5dabd44c5694b0b04018ee90df866fd334ec5d7796ce494b3fcf2e388d75b36db07bf06e92ba316e0c8e43122b25cbd4b6007b9c72f25e797d94121cd5d6522e830efd10580d675f632f6b2de3142e7ab1e4f001c74732bf52e5ad431f0c2c58e4dfb4dd6099357bad02a5269dd0845742685e6ec059cdb5e20fe5a50b1c6861cfec58f78273a64d8e0ed8544cfdb352dab52c2cf46611ca59837c8ca7586684ffe3e9795939a560b3cd8bb8c0abf3d713124470244dcdb147f5dbdb4c6e3ede79d0e85a0fab07746ec853752012aef24a314a2c985c63a7186455e47489bc46b32dcc2388975de7cfac6d051117e6390fad50440d1d30f3c33935d6af1fc079035d01d915a56f281d74754bdfb97e624d559fc81cd64b6baf9246bebc8bc4ad3bf5cbc7863d244968f63691a35cdb0bae568e227d03cfb7d9458c6c6fe0f36c978b8dfc37a85bb3607c74976825a239b2c253eda47507c8988f67d8eb74cadb2cef1291cc478983ec8f810941467a6a3674cb50a9837a881be68cba252bb9b5291d83f91c8984d618f233e83c8983cffb22fef33a7b092bc5b7b6d556ee6547664f46845a147de935b069888618de9f671f3b85878455e85cc0714687fbffe75e27553c5a817fdc42763ce39873241beaa74fd02a70995fdc92975cbd73fa7aefa626af16ba65c04d8cab967fa8342896b11ac5896196a2e2c57ad7f1c1448345b9ab6fa9bea66e038a342bbeb90ac8f50cf85555b10c606086c9af71e2639c146a8ac42ac6baf242676985b157065ed10176e493f74dfa1954c4900ff7e52044c2128ca2e0539f2a78cd1fa4b122cc2bd6fc6152c7811349fc0e3f21f520ffd5870eaa82553547e18710476f4b57ffb77a66b9500582b9430ab80e7f04b42ae636d36e0aeae187166f08a7dff0f07fb594ba06eb6b02f26a2b0f09ce8ea806cef83346f091ca7c5b20d599f97559273c56410ddb8cd3d0ced3838884a271b37f1bfcac1eccfff2eb01e71f270c53324fbc962596184751dc381b480ff0e4f408339ec243d0be176eb4f6e45a60d6d5200bd31b053884cf43ba0942eee63d241c802a73ff2ec24a706e7e3b83f59857959a29cfad777fee63df557089ed978499dd66f7f05d257b28c40bf9b290e4addd5e8713209e6dd366a84bee1f6d9dc98c9d350f7be1df1d967659d5a7e620e4dd95162fa9e3d426c8605f6c3f753a26292da01206b1ffae97bf47ddf8a0577e45655f2b80cdb0d4ea2835dcc323f883f57341ece6845efbbf79ac5b6b5a00527174595061daa2bacc92cb7898d35d97fb4390e1af471e636eeeb2673f70b86ad912d5e7cbf86a62fbb309b11ec45076065ee81d455500b0505fecc4df0f0ca8284a7ca62f99551bd967cc1c3ae0c17c5fd3b5a2af2afe5044001047d193c0e016f726d94d5cfc83cf159a4dd2cfb83d1466902d3f8311ca8fbd328f6bcd8594435805b1f855072f1ae1b4f63773dcf67efad684411d43b254a0c2ede3be09723be9bd817899bd021dc010b97dbc8bc45403fdaddd865ebb60023ecb864396348aa762be610294c1d3015e5b96ec69769e78f4bfee4051d7b0fc9c0e154a3e2f33117305c313226035615eb9c06c3c6bd8c03989f24bc0033c43bde723d982c9956c67d5e4347e68407419ac53407a552493f10c40c569dd3", 0xfdf}], 0x3) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101400, 0xe5) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000400)={@any, 0xffffffff}) (async) flock(0xffffffffffffffff, 0x1) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={[{@userxattr}, {@metacopy_on}]}) (async, rerun: 32) read$FUSE(r0, &(0x7f0000001a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003ac0)={0x0, 0x0, 0x0}, &(0x7f0000003b00)=0xc) setregid(0xffffffffffffffff, r5) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003b40)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000003c40)=0xe8) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003c80)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000003d80)=0xe8) mount$bpf(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x2008840, &(0x7f0000003dc0)={[{@gid={'gid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0xffffffffffff2a7e}}, {@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x1}}, {@gid}, {@uid={'uid', 0x3d, r6}}], [{@fowner_gt={'fowner>', r7}}]}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f00007e0000/0x2000)=nil, &(0x7f00008db000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ae000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00005d0000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000ef000/0x3000)=nil, &(0x7f0000e67000/0x1000)=nil, 0x0}, 0x68) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 32) syz_io_uring_setup(0x2bf3, &(0x7f00000002c0)={0x0, 0x1321, 0x4000, 0x3, 0x3cb, 0x0, r2}, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x8994, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) 394.63054ms ago: executing program 2 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000400)={0xb, 0x0, [{0xffff, 0x0, 0x100000001}, {0x3, 0x0, 0x6}, {0x2, 0x0, 0xfffffffffffffffd}, {0x9, 0x0, 0x80}, {0x202, 0x0, 0x2c}, {0x0, 0x0, 0x2}, {0x6e6, 0x0, 0xb8}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x80000000}, {0xfffffff9, 0x0, 0xfffffffffffffffd}, {0xfffffff8, 0x0, 0x2}, {0x4, 0x0, 0x8}, {0x40, 0x0, 0x2}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000600)={0x5, 0x0, [{0x1, 0x2, 0x1, 0x40, 0x4c5, 0x0, 0x7fff}, {0x80000001, 0x1, 0x1, 0x3, 0x7, 0x5, 0x2}, {0xd, 0x4000, 0x4, 0xfffffff7, 0x3, 0x9, 0x6}, {0x1, 0x1, 0x3, 0x5, 0x6, 0x8}, {0xb, 0x4, 0x0, 0x7a53, 0xffffffff, 0xa, 0x40}]}) 303.732399ms ago: executing program 2 (id=607): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000001300)={0xa, 0x4e22, 0xfffffffc, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003080)=ANY=[@ANYBLOB="580000000000000029000000370000002c070000000000000502fffc01050000000000110100c910fc02000000e8ffff0300000000000000c20400000005c91000000000000200000000ffffac14143ff70100000000000014"], 0x70}}], 0x1, 0x801) 277.792262ms ago: executing program 2 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="0201fd020206637a"], 0x10}, 0x1, 0x7}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x3c}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x14, {0x2, 0x0, 0xcf, "31e1fd0ae36d3095053ef898767bed682c"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='d', 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000003c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0xc002, 0x0) chdir(&(0x7f00000004c0)='./bus\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) write$P9_RSETATTR(r7, &(0x7f0000000540)={0x7, 0x1b, 0x2}, 0x7) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) 186.576701ms ago: executing program 0 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x200}, 0x72) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8810) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x4) mkdir(&(0x7f0000000500)='./file1\x00', 0x13b) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000640)='./bus\x00') r4 = open(&(0x7f0000000680)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f00000006c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000780), 0x7f03) 0s ago: executing program 2 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000280000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x6) kernel console output (not intermixed with test programs): mpute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.154484][ T910] Call Trace: [ 36.154493][ T910] [ 36.154500][ T910] __dump_stack+0x21/0x30 [ 36.154532][ T910] dump_stack_lvl+0x140/0x1c0 [ 36.154558][ T910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.154585][ T910] dump_stack+0x19/0x20 [ 36.154608][ T910] should_fail_ex+0x3c2/0x510 [ 36.154629][ T910] should_failslab+0xac/0x100 [ 36.154647][ T910] __kmalloc_cache_noprof+0x41/0x470 [ 36.154672][ T910] ? kvm_dev_ioctl+0x953/0x14c0 [ 36.154690][ T910] kvm_dev_ioctl+0x953/0x14c0 [ 36.154708][ T910] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 36.154728][ T910] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.154745][ T910] ? security_file_ioctl+0x3e/0x110 [ 36.154769][ T910] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 36.154785][ T910] __se_sys_ioctl+0x123/0x1b0 [ 36.154803][ T910] __x64_sys_ioctl+0x7f/0xa0 [ 36.154822][ T910] x64_sys_call+0x1878/0x2ee0 [ 36.154840][ T910] do_syscall_64+0x57/0xf0 [ 36.154861][ T910] ? clear_bhb_loop+0x50/0xa0 [ 36.154885][ T910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.154908][ T910] RIP: 0033:0x7f41c839f559 [ 36.154924][ T910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.154939][ T910] RSP: 002b:00007f41c9224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.154960][ T910] RAX: ffffffffffffffda RBX: 00007f41c8626090 RCX: 00007f41c839f559 [ 36.154975][ T910] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 36.154986][ T910] RBP: 00007f41c8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 36.154999][ T910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.155010][ T910] R13: 00007f41c8626128 R14: 00007f41c8626090 R15: 00007ffe244e6448 [ 36.155026][ T910] [ 36.892597][ T45] usb 4-1: USB disconnect, device number 6 [ 37.092304][ T384] usb 1-1: USB disconnect, device number 5 [ 37.134648][ T928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.203'. [ 37.481344][ T384] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.491367][ T590] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 37.632434][ T384] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 37.642590][ T384] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 37.652840][ T384] usb 1-1: config 1 interface 0 has no altsetting 0 [ 37.659983][ T590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.670286][ T590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 37.679222][ T590] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.689283][ T590] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 37.698377][ T590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.706474][ T384] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 37.715936][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.724218][ T384] usb 1-1: Product: syz [ 37.728414][ T384] usb 1-1: Manufacturer: syz [ 37.733575][ T590] hub 2-1:1.0: bad descriptor, ignoring hub [ 37.739486][ T590] hub 2-1:1.0: probe with driver hub failed with error -5 [ 37.746897][ T590] cdc_wdm 2-1:1.0: skipping garbage [ 37.752173][ T384] usb 1-1: SerialNumber: syz [ 37.757007][ T590] cdc_wdm 2-1:1.0: skipping garbage [ 37.762547][ T590] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 37.770746][ T930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.778015][ T930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.041415][ T45] usb 2-1: USB disconnect, device number 8 [ 38.082701][ T944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.211508][ T948] netlink: 388 bytes leftover after parsing attributes in process `syz.2.210'. [ 38.235737][ T950] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 38.243498][ T950] netlink: 17 bytes leftover after parsing attributes in process `syz.2.211'. [ 38.250572][ T384] rtl8150 1-1:1.0: couldn't reset the device [ 38.258748][ T384] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 38.268653][ T384] usb 1-1: USB disconnect, device number 6 [ 38.465865][ T957] netlink: 'syz.1.214': attribute type 3 has an invalid length. [ 38.473608][ T957] netlink: 'syz.1.214': attribute type 3 has an invalid length. [ 38.496991][ T961] syzkaller1: entered promiscuous mode [ 38.502643][ T961] syzkaller1: entered allmulticast mode [ 38.560158][ T963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 38.611348][ T934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.761457][ T934] usb 3-1: Using ep0 maxpacket: 16 [ 38.770378][ T934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.788779][ T934] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 38.808335][ T934] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 38.817446][ T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.825508][ T384] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.831989][ T981] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 38.833229][ T934] usb 3-1: Product: syz [ 38.845180][ T934] usb 3-1: Manufacturer: syz [ 38.846529][ T981] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 38.858032][ T934] usb 3-1: SerialNumber: syz [ 38.860835][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 38.860848][ T36] audit: type=1400 audit(1793392825.129:261): avc: denied { write } for pid=977 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.888309][ T36] audit: type=1400 audit(1793392825.139:262): avc: denied { read } for pid=977 comm="syz.3.224" dev="sockfs" ino=7949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.912244][ T983] input: syz1 as /devices/virtual/input/input5 [ 38.920040][ T36] audit: type=1400 audit(1793392825.189:263): avc: denied { write } for pid=982 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.939579][ T36] audit: type=1400 audit(1793392825.199:264): avc: denied { bind } for pid=982 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.958759][ T36] audit: type=1400 audit(1793392825.199:265): avc: denied { read } for pid=982 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.973438][ T984] rust_binder: Write failure EFAULT in pid:127 [ 38.985638][ T986] rust_binder: Write failure EFAULT in pid:127 [ 39.031334][ T384] usb 2-1: Using ep0 maxpacket: 8 [ 39.037559][ T384] usb 2-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 39.048117][ T384] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 39.057249][ T384] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 39.066524][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.075494][ T384] usb 2-1: config 0 descriptor?? [ 39.283092][ T965] 9pnet: Could not find request transport: rdma [ 39.293273][ T36] audit: type=1400 audit(1793392825.569:266): avc: denied { mounton } for pid=964 comm="syz.1.218" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 39.316790][ T36] audit: type=1400 audit(1793392825.569:267): avc: denied { mount } for pid=964 comm="syz.1.218" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.831856][ T36] audit: type=1400 audit(1793392826.109:268): avc: denied { listen } for pid=1001 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.862743][ T384] rust_binder: 989: undelivered death notification, 0000000000000000 [ 39.882827][ T36] audit: type=1400 audit(1793392826.159:269): avc: denied { accept } for pid=1001 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.002030][ T1011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 40.010929][ T1011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 40.281318][ T45] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 40.421340][ T311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.432369][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.442548][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.451453][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.461208][ T45] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 40.470308][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.481774][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 40.487819][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 40.495391][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 40.500611][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 40.506078][ T45] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 40.582688][ T311] usb 4-1: not running at top speed; connect to a high speed hub [ 40.791441][ T384] usb 1-1: USB disconnect, device number 7 [ 41.193583][ T1028] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 41.201329][ T1028] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 41.247676][ T934] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.254697][ T934] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 41.256931][ T1034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 41.267455][ T934] usb 3-1: USB disconnect, device number 4 [ 41.319644][ T36] audit: type=1400 audit(1793392827.589:270): avc: denied { bind } for pid=1040 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.609827][ T45] usb 2-1: USB disconnect, device number 9 [ 41.917859][ T1060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.252'. [ 42.260092][ T1074] netlink: 388 bytes leftover after parsing attributes in process `syz.0.259'. [ 42.319979][ T1082] syzkaller1: entered promiscuous mode [ 42.326483][ T1082] syzkaller1: entered allmulticast mode [ 42.391441][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 42.440150][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 42.450678][ T1095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.463020][ T1095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.480902][ T1107] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 42.493796][ T1107] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 42.641351][ T934] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 42.681336][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.792441][ T934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.802763][ T934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.811757][ T934] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.822116][ T384] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.829623][ T934] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 42.831300][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 42.838800][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.845295][ T45] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 42.859179][ T934] hub 2-1:1.0: bad descriptor, ignoring hub [ 42.862282][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.869486][ T934] hub 2-1:1.0: probe with driver hub failed with error -5 [ 42.877829][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 42.884548][ T934] cdc_wdm 2-1:1.0: skipping garbage [ 42.893357][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.898680][ T934] cdc_wdm 2-1:1.0: skipping garbage [ 42.906571][ T45] usb 1-1: SerialNumber: syz [ 42.911876][ T934] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 42.922969][ T45] usb 1-1: 0:2 : does not exist [ 43.001318][ T384] usb 3-1: Using ep0 maxpacket: 16 [ 43.007555][ T384] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.015636][ T384] usb 3-1: config 0 has no interface number 0 [ 43.022179][ T384] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.033134][ T384] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.043024][ T384] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 43.052298][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.061538][ T384] usb 3-1: config 0 descriptor?? [ 43.122505][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.131072][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.139368][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.147980][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.156141][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.164731][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.172943][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.181481][ T934] usb 2-1: USB disconnect, device number 10 [ 43.182164][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.200472][ T45] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 43.208226][ T311] usb 4-1: string descriptor 0 read error: -71 [ 43.216142][ T311] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice= 0.40 [ 43.225354][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.235125][ T311] usb 4-1: can't set config #1, error -71 [ 43.241830][ T45] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 43.249350][ T311] usb 4-1: USB disconnect, device number 7 [ 43.260050][ T45] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 43.271917][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 43.283579][ T45] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 43.293533][ T45] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 43.303405][ T45] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 43.313295][ T45] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 43.323158][ T45] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 43.333001][ T45] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 43.342921][ T45] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.352739][ T45] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.362813][ T45] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 43.373818][ T45] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 43.384790][ T45] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 43.396141][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 43.407520][ T45] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 43.417386][ T45] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 43.428640][ T45] usb 1-1: USB disconnect, device number 8 [ 43.670038][ T384] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71 [ 43.679373][ T384] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71 [ 43.687575][ T384] uclogic 0003:28BD:0071.0003: pen probing failed: -71 [ 43.694670][ T384] uclogic 0003:28BD:0071.0003: failed probing parameters: -71 [ 43.702455][ T384] uclogic 0003:28BD:0071.0003: probe with driver uclogic failed with error -71 [ 43.712636][ T384] usb 3-1: USB disconnect, device number 5 [ 43.876270][ T1142] netlink: 'syz.1.281': attribute type 63 has an invalid length. [ 43.884120][ T1142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 43.925262][ T1148] netlink: 388 bytes leftover after parsing attributes in process `syz.0.284'. [ 44.032438][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 44.032453][ T36] audit: type=1326 audit(1793392830.309:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1155 comm="syz.0.287" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843039f559 code=0x0 [ 44.119838][ T1160] netlink: 'syz.3.288': attribute type 4 has an invalid length. [ 44.127813][ T1160] netlink: 'syz.3.288': attribute type 4 has an invalid length. [ 44.211310][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.211622][ T1171] FAULT_INJECTION: forcing a failure. [ 44.211622][ T1171] name failslab, interval 1, probability 0, space 0, times 0 [ 44.231672][ T1171] CPU: 0 UID: 0 PID: 1171 Comm: syz.3.292 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 44.231700][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.231709][ T1171] Call Trace: [ 44.231713][ T1171] [ 44.231718][ T1171] __dump_stack+0x21/0x30 [ 44.231743][ T1171] dump_stack_lvl+0x140/0x1c0 [ 44.231763][ T1171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.231781][ T1171] dump_stack+0x19/0x20 [ 44.231798][ T1171] should_fail_ex+0x3c2/0x510 [ 44.231811][ T1171] should_failslab+0xac/0x100 [ 44.231824][ T1171] kmem_cache_alloc_noprof+0x42/0x410 [ 44.231840][ T1171] ? security_inode_alloc+0x51/0x230 [ 44.231854][ T1171] security_inode_alloc+0x51/0x230 [ 44.231867][ T1171] inode_init_always_gfp+0x756/0x9e0 [ 44.231881][ T1171] ? __cfi_proc_alloc_inode+0x10/0x10 [ 44.231897][ T1171] alloc_inode+0xc5/0x270 [ 44.231910][ T1171] new_inode+0x25/0x1e0 [ 44.231923][ T1171] proc_pid_make_inode+0x25/0x140 [ 44.231934][ T1171] proc_pident_instantiate+0x6d/0x2c0 [ 44.231947][ T1171] proc_pident_lookup+0x1c7/0x270 [ 44.231959][ T1171] proc_tid_base_lookup+0x2f/0x40 [ 44.231974][ T1171] __lookup_slow+0x2e2/0x420 [ 44.231987][ T1171] ? lookup_one_len+0x300/0x300 [ 44.231999][ T1171] ? down_read+0x7f/0xe0 [ 44.232016][ T1171] lookup_slow+0x57/0x80 [ 44.232028][ T1171] link_path_walk+0x991/0xeb0 [ 44.232045][ T1171] path_openat+0x298/0x35a0 [ 44.232059][ T1171] ? kasan_save_alloc_info+0x3a/0x50 [ 44.232074][ T1171] ? __kasan_slab_alloc+0x73/0x90 [ 44.232086][ T1171] ? getname+0x1b/0x30 [ 44.232130][ T1171] ? x64_sys_call+0xe69/0x2ee0 [ 44.232146][ T1171] ? do_syscall_64+0x57/0xf0 [ 44.232161][ T1171] ? do_filp_open+0x440/0x440 [ 44.232176][ T1171] do_filp_open+0x1f2/0x440 [ 44.232189][ T1171] ? __cfi_do_filp_open+0x10/0x10 [ 44.232203][ T1171] ? __cfi_kfree_link+0x10/0x10 [ 44.232217][ T1171] ? alloc_fd+0x4c1/0x570 [ 44.232235][ T1171] do_sys_openat2+0x134/0x1d0 [ 44.232250][ T1171] ? do_sys_open+0x100/0x100 [ 44.232264][ T1171] __x64_sys_openat+0x13a/0x170 [ 44.232278][ T1171] x64_sys_call+0xe69/0x2ee0 [ 44.232290][ T1171] do_syscall_64+0x57/0xf0 [ 44.232303][ T1171] ? clear_bhb_loop+0x50/0xa0 [ 44.232320][ T1171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.232347][ T1171] RIP: 0033:0x7f9b05b5fd8e [ 44.232366][ T1171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.232384][ T1171] RSP: 002b:00007f9b06a0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.232406][ T1171] RAX: ffffffffffffffda RBX: 00007f9b06a106c0 RCX: 00007f9b05b5fd8e [ 44.232422][ T1171] RDX: 0000000000000002 RSI: 00007f9b06a0ff90 RDI: ffffffffffffff9c [ 44.232436][ T1171] RBP: 00007f9b05c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 44.232446][ T1171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.232455][ T1171] R13: 00007f9b05e26038 R14: 00007f9b05e25fa0 R15: 00007ffec0f7b9a8 [ 44.232465][ T1171] [ 44.501375][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 44.542105][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.549801][ T45] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 44.559283][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 44.566954][ T45] usb 2-1: can't read configurations, error -61 [ 44.585015][ T1176] netlink: 'syz.3.294': attribute type 3 has an invalid length. [ 44.592729][ T1176] netlink: 'syz.3.294': attribute type 3 has an invalid length. [ 44.612681][ T1178] FAULT_INJECTION: forcing a failure. [ 44.612681][ T1178] name failslab, interval 1, probability 0, space 0, times 0 [ 44.625375][ T1178] CPU: 1 UID: 0 PID: 1178 Comm: syz.3.295 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 44.625406][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.625417][ T1178] Call Trace: [ 44.625424][ T1178] [ 44.625432][ T1178] __dump_stack+0x21/0x30 [ 44.625452][ T1178] dump_stack_lvl+0x140/0x1c0 [ 44.625466][ T1178] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.625482][ T1178] dump_stack+0x19/0x20 [ 44.625495][ T1178] should_fail_ex+0x3c2/0x510 [ 44.625506][ T1178] should_failslab+0xac/0x100 [ 44.625515][ T1178] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 44.625529][ T1178] ? __d_lookup_rcu+0x334/0x3c0 [ 44.625542][ T1178] ? proc_alloc_inode+0x48/0x150 [ 44.625556][ T1178] proc_alloc_inode+0x48/0x150 [ 44.625568][ T1178] ? __cfi_proc_alloc_inode+0x10/0x10 [ 44.625580][ T1178] alloc_inode+0x7d/0x270 [ 44.625590][ T1178] new_inode+0x25/0x1e0 [ 44.625599][ T1178] proc_pid_make_inode+0x25/0x140 [ 44.625608][ T1178] proc_pident_instantiate+0x6d/0x2c0 [ 44.625618][ T1178] proc_pident_lookup+0x1c7/0x270 [ 44.625630][ T1178] proc_tid_base_lookup+0x2f/0x40 [ 44.625642][ T1178] __lookup_slow+0x2e2/0x420 [ 44.625652][ T1178] ? lookup_one_len+0x300/0x300 [ 44.625661][ T1178] ? down_read+0x7f/0xe0 [ 44.625674][ T1178] lookup_slow+0x57/0x80 [ 44.625683][ T1178] link_path_walk+0x991/0xeb0 [ 44.625697][ T1178] path_openat+0x298/0x35a0 [ 44.625708][ T1178] ? kasan_save_alloc_info+0x3a/0x50 [ 44.625720][ T1178] ? __kasan_slab_alloc+0x73/0x90 [ 44.625729][ T1178] ? getname+0x1b/0x30 [ 44.625741][ T1178] ? x64_sys_call+0xe69/0x2ee0 [ 44.625751][ T1178] ? do_syscall_64+0x57/0xf0 [ 44.625762][ T1178] ? do_filp_open+0x440/0x440 [ 44.625773][ T1178] do_filp_open+0x1f2/0x440 [ 44.625783][ T1178] ? __cfi_do_filp_open+0x10/0x10 [ 44.625794][ T1178] ? __cfi_kfree_link+0x10/0x10 [ 44.625812][ T1178] ? alloc_fd+0x4c1/0x570 [ 44.625827][ T1178] do_sys_openat2+0x134/0x1d0 [ 44.625839][ T1178] ? do_sys_open+0x100/0x100 [ 44.625851][ T1178] __x64_sys_openat+0x13a/0x170 [ 44.625863][ T1178] x64_sys_call+0xe69/0x2ee0 [ 44.625873][ T1178] do_syscall_64+0x57/0xf0 [ 44.625883][ T1178] ? clear_bhb_loop+0x50/0xa0 [ 44.625898][ T1178] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.625911][ T1178] RIP: 0033:0x7f9b05b5fd8e [ 44.625921][ T1178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.625929][ T1178] RSP: 002b:00007f9b06a0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 44.625941][ T1178] RAX: ffffffffffffffda RBX: 00007f9b06a106c0 RCX: 00007f9b05b5fd8e [ 44.625948][ T1178] RDX: 0000000000000002 RSI: 00007f9b06a0ff90 RDI: ffffffffffffff9c [ 44.625955][ T1178] RBP: 00007f9b05c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 44.625961][ T1178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.625967][ T1178] R13: 00007f9b05e26038 R14: 00007f9b05e25fa0 R15: 00007ffec0f7b9a8 [ 44.625975][ T1178] [ 44.631343][ T384] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 44.711370][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.851335][ T384] usb 3-1: device descriptor read/64, error -71 [ 45.001357][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 45.008233][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.015956][ T45] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 45.031826][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.040803][ T45] usb 2-1: can't read configurations, error -61 [ 45.047520][ T45] usb usb2-port1: attempt power cycle [ 45.075023][ T1192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.302'. [ 45.094636][ T1196] input: syz0 as /devices/virtual/input/input6 [ 45.103894][ T36] audit: type=1400 audit(1793392831.379:274): avc: denied { append } for pid=1195 comm="syz.3.304" name="event3" dev="devtmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.107517][ T1198] FAULT_INJECTION: forcing a failure. [ 45.107517][ T1198] name failslab, interval 1, probability 0, space 0, times 0 [ 45.139436][ T1198] CPU: 1 UID: 0 PID: 1198 Comm: syz.0.305 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 45.139475][ T1198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.139488][ T1198] Call Trace: [ 45.139494][ T1198] [ 45.139501][ T1198] __dump_stack+0x21/0x30 [ 45.139547][ T1198] dump_stack_lvl+0x140/0x1c0 [ 45.139578][ T1198] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.139603][ T1198] ? kasan_save_alloc_info+0x3a/0x50 [ 45.139629][ T1198] ? __kasan_slab_alloc+0x73/0x90 [ 45.139647][ T1198] dump_stack+0x19/0x20 [ 45.139672][ T1198] should_fail_ex+0x3c2/0x510 [ 45.139694][ T1198] should_failslab+0xac/0x100 [ 45.139713][ T1198] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 45.139740][ T1198] ? make_vfsuid+0x4d/0xa0 [ 45.139763][ T1198] ? proc_alloc_inode+0x48/0x150 [ 45.139787][ T1198] proc_alloc_inode+0x48/0x150 [ 45.139807][ T1198] ? __cfi_proc_alloc_inode+0x10/0x10 [ 45.139828][ T1198] alloc_inode+0x7d/0x270 [ 45.139846][ T1198] new_inode+0x25/0x1e0 [ 45.139863][ T1198] proc_pid_make_inode+0x25/0x140 [ 45.139880][ T1198] proc_ns_dir_lookup+0x5b7/0x700 [ 45.139901][ T1198] path_openat+0x1127/0x35a0 [ 45.139923][ T1198] ? do_filp_open+0x440/0x440 [ 45.139946][ T1198] do_filp_open+0x1f2/0x440 [ 45.139966][ T1198] ? __cfi_do_filp_open+0x10/0x10 [ 45.139987][ T1198] ? __cfi_kfree_link+0x10/0x10 [ 45.140012][ T1198] ? alloc_fd+0x4c1/0x570 [ 45.140039][ T1198] do_sys_openat2+0x134/0x1d0 [ 45.140060][ T1198] ? do_sys_open+0x100/0x100 [ 45.140084][ T1198] __x64_sys_openat+0x13a/0x170 [ 45.140106][ T1198] x64_sys_call+0xe69/0x2ee0 [ 45.140127][ T1198] do_syscall_64+0x57/0xf0 [ 45.140149][ T1198] ? clear_bhb_loop+0x50/0xa0 [ 45.140174][ T1198] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.140198][ T1198] RIP: 0033:0x7f843035fd8e [ 45.140215][ T1198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.140230][ T1198] RSP: 002b:00007f84312a5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 45.140251][ T1198] RAX: ffffffffffffffda RBX: 00007f84312a66c0 RCX: 00007f843035fd8e [ 45.140266][ T1198] RDX: 0000000000000002 RSI: 00007f84312a5f90 RDI: ffffffffffffff9c [ 45.140281][ T1198] RBP: 00007f8430436b20 R08: 0000000000000000 R09: 0000000000000000 [ 45.140294][ T1198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.140308][ T1198] R13: 00007f8430626038 R14: 00007f8430625fa0 R15: 00007ffd23b25248 [ 45.140324][ T1198] [ 45.181306][ T384] usb 3-1: device descriptor read/64, error -71 [ 45.401346] T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.419047][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 45.432598][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 45.439367][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.447175][ T45] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 45.453155][ T36] audit: type=1400 audit(1793392831.729:275): avc: denied { create } for pid=1203 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 45.457913][ T1208] syzkaller1: entered promiscuous mode [ 45.480525][ T1208] syzkaller1: entered allmulticast mode [ 45.492569][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.500304][ T45] usb 2-1: can't read configurations, error -61 [ 45.631411][ T384] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 45.641473][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.671732][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 45.678438][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.686296][ T45] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 45.695234][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 45.702862][ T45] usb 2-1: can't read configurations, error -61 [ 45.709218][ T45] usb usb2-port1: unable to enumerate USB device [ 45.761331][ T384] usb 3-1: device descriptor read/64, error -71 [ 46.001351][ T384] usb 3-1: device descriptor read/64, error -71 [ 46.111449][ T384] usb usb3-port1: attempt power cycle [ 46.401340][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.451367][ T384] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 46.472463][ T384] usb 3-1: device descriptor read/8, error -71 [ 46.552489][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.563414][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.573269][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.586314][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.595397][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.603848][ T45] usb 1-1: config 0 descriptor?? [ 46.612415][ T384] usb 3-1: device descriptor read/8, error -71 [ 46.721355][ T934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.851372][ T384] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 46.872712][ T934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.879349][ T934] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 46.888437][ T384] usb 3-1: device descriptor read/8, error -71 [ 46.894636][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.903282][ T934] usb 4-1: config 0 descriptor?? [ 46.958315][ T36] audit: type=1400 audit(1793392833.229:276): avc: denied { create } for pid=1232 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.983811][ T1235] netlink: 388 bytes leftover after parsing attributes in process `syz.1.321'. [ 47.014265][ T45] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 47.022612][ T384] usb 3-1: device descriptor read/8, error -71 [ 47.026897][ T45] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.062513][ T36] audit: type=1400 audit(1793392833.339:277): avc: denied { mounton } for pid=1240 comm="syz.1.324" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 47.095630][ T36] audit: type=1400 audit(1793392833.369:278): avc: denied { append } for pid=1240 comm="syz.1.324" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 47.131457][ T384] usb usb3-port1: unable to enumerate USB device [ 47.197584][ T36] audit: type=1400 audit(1793392833.469:279): avc: denied { mounton } for pid=1246 comm="syz.2.326" path="/57/file0" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 47.228035][ T1250] FAULT_INJECTION: forcing a failure. [ 47.228035][ T1250] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.241233][ T1250] CPU: 0 UID: 0 PID: 1250 Comm: syz.1.327 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 47.241263][ T1250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.241273][ T1250] Call Trace: [ 47.241280][ T1250] [ 47.241287][ T1250] __dump_stack+0x21/0x30 [ 47.241316][ T1250] dump_stack_lvl+0x140/0x1c0 [ 47.241335][ T1250] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.241350][ T1250] dump_stack+0x19/0x20 [ 47.241363][ T1250] should_fail_ex+0x3c2/0x510 [ 47.241377][ T1250] should_fail+0xf/0x20 [ 47.241389][ T1250] should_fail_usercopy+0x1e/0x30 [ 47.241399][ T1250] strncpy_from_user+0x29/0x280 [ 47.241409][ T1250] getname_flags+0x106/0x6b0 [ 47.241424][ T1250] getname+0x1b/0x30 [ 47.241437][ T1250] do_sys_openat2+0xda/0x1d0 [ 47.241448][ T1250] ? fput+0x1a4/0x230 [ 47.241458][ T1250] ? do_sys_open+0x100/0x100 [ 47.241469][ T1250] ? ksys_write+0x1f3/0x260 [ 47.241482][ T1250] ? __cfi_ksys_write+0x10/0x10 [ 47.241495][ T1250] __x64_sys_openat+0x13a/0x170 [ 47.241507][ T1250] x64_sys_call+0xe69/0x2ee0 [ 47.241517][ T1250] do_syscall_64+0x57/0xf0 [ 47.241528][ T1250] ? clear_bhb_loop+0x50/0xa0 [ 47.241542][ T1250] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.241555][ T1250] RIP: 0033:0x7f41c835fd8e [ 47.241565][ T1250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 47.241573][ T1250] RSP: 002b:00007f41c9244ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.241586][ T1250] RAX: ffffffffffffffda RBX: 00007f41c92456c0 RCX: 00007f41c835fd8e [ 47.241593][ T1250] RDX: 0000000000000002 RSI: 00007f41c9244f90 RDI: ffffffffffffff9c [ 47.241601][ T1250] RBP: 00007f41c9245090 R08: 0000000000000000 R09: 0000000000000000 [ 47.241607][ T1250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.241614][ T1250] R13: 00007f41c8626038 R14: 00007f41c8625fa0 R15: 00007ffe244e6448 [ 47.241622][ T1250] [ 47.320097][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.323011][ T384] usb 1-1: USB disconnect, device number 9 [ 47.331778][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.476444][ T934] hid (null): unknown global tag 0xfd [ 47.484146][ T934] hid (null): unknown global tag 0xc [ 47.490126][ T934] hid (null): unknown global tag 0xe [ 47.500911][ T934] waltop 0003:172F:0034.0005: unexpected long global item [ 47.508305][ T934] waltop 0003:172F:0034.0005: probe with driver waltop failed with error -22 [ 47.568693][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 47.584801][ T36] audit: type=1400 audit(1793392833.859:280): avc: denied { map } for pid=1255 comm="syz.1.329" path="socket:[10828]" dev="sockfs" ino=10828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.653804][ T1262] rust_binder: 1261:1262 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 47.662654][ T934] rust_binder: 1261: undelivered freeze notification, 0000000000000001 [ 47.741869][ T31] usb 4-1: USB disconnect, device number 8 [ 47.809094][ T36] audit: type=1400 audit(1793392834.079:281): avc: denied { create } for pid=1268 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.811009][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.837397][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.856431][ T1274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6174 sclass=netlink_route_socket pid=1274 comm=syz.0.337 [ 47.878942][ T1276] FAULT_INJECTION: forcing a failure. [ 47.878942][ T1276] name failslab, interval 1, probability 0, space 0, times 0 [ 47.891881][ T1276] CPU: 0 UID: 0 PID: 1276 Comm: syz.2.338 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 47.891914][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.891925][ T1276] Call Trace: [ 47.891931][ T1276] [ 47.891940][ T1276] __dump_stack+0x21/0x30 [ 47.891968][ T1276] dump_stack_lvl+0x140/0x1c0 [ 47.891982][ T1276] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.891998][ T1276] dump_stack+0x19/0x20 [ 47.892012][ T1276] should_fail_ex+0x3c2/0x510 [ 47.892023][ T1276] should_failslab+0xac/0x100 [ 47.892033][ T1276] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 47.892048][ T1276] ? kstrdup_const+0x45/0x60 [ 47.892059][ T1276] ? __kasan_check_write+0x18/0x20 [ 47.892072][ T1276] ? _raw_spin_lock+0x92/0x120 [ 47.892083][ T1276] kstrdup+0x4d/0x130 [ 47.892093][ T1276] ? kstrdup_const+0x3a/0x60 [ 47.892105][ T1276] kstrdup_const+0x45/0x60 [ 47.892115][ T1276] __kernfs_new_node+0xaa/0x740 [ 47.892126][ T1276] ? kernfs_new_node+0x280/0x280 [ 47.892135][ T1276] ? down_write+0xee/0x2b0 [ 47.892148][ T1276] ? __cfi_down_write+0x10/0x10 [ 47.892162][ T1276] ? __kasan_check_write+0x18/0x20 [ 47.892174][ T1276] ? up_write+0x66/0x280 [ 47.892186][ T1276] kernfs_new_node+0x154/0x280 [ 47.892196][ T1276] kernfs_create_link+0xa8/0x200 [ 47.892209][ T1276] sysfs_do_create_link_sd+0x8a/0x120 [ 47.892223][ T1276] sysfs_create_link+0x6c/0x90 [ 47.892235][ T1276] device_add_class_symlinks+0x1dd/0x260 [ 47.892248][ T1276] device_add+0x4b8/0xbf0 [ 47.892259][ T1276] netdev_register_kobject+0x196/0x330 [ 47.892275][ T1276] register_netdevice+0x1042/0x1a80 [ 47.892285][ T1276] ? __cfi_register_netdevice+0x10/0x10 [ 47.892296][ T1276] tun_set_iff+0x828/0xec0 [ 47.892310][ T1276] __tun_chr_ioctl+0x852/0x1fb0 [ 47.892323][ T1276] ? tun_flow_create+0x400/0x400 [ 47.892337][ T1276] ? __fget_files+0x2bc/0x330 [ 47.892346][ T1276] tun_chr_ioctl+0x2e/0x40 [ 47.892359][ T1276] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 47.892371][ T1276] __se_sys_ioctl+0x123/0x1b0 [ 47.892381][ T1276] __x64_sys_ioctl+0x7f/0xa0 [ 47.892390][ T1276] x64_sys_call+0x1878/0x2ee0 [ 47.892399][ T1276] do_syscall_64+0x57/0xf0 [ 47.892410][ T1276] ? clear_bhb_loop+0x50/0xa0 [ 47.892423][ T1276] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.892436][ T1276] RIP: 0033:0x7ff6d159f559 [ 47.892447][ T1276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.892455][ T1276] RSP: 002b:00007ff6d23d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.892468][ T1276] RAX: ffffffffffffffda RBX: 00007ff6d1825fa0 RCX: 00007ff6d159f559 [ 47.892476][ T1276] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000006 [ 47.892482][ T1276] RBP: 00007ff6d1636b20 R08: 0000000000000000 R09: 0000000000000000 [ 47.892489][ T1276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.892495][ T1276] R13: 00007ff6d1826038 R14: 00007ff6d1825fa0 R15: 00007fff823b8d48 [ 47.892503][ T1276] [ 47.894748][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 48.051305][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.262788][ T1288] netlink: 'syz.2.342': attribute type 2 has an invalid length. [ 48.334254][ T1298] netlink: 68 bytes leftover after parsing attributes in process `syz.3.346'. [ 48.349892][ T1300] mmap: syz.3.347 (1300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.361802][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 48.369241][ T45] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 48.382168][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.388771][ T45] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 48.391890][ T36] audit: type=1400 audit(1793392834.669:282): avc: denied { name_bind } for pid=1299 comm="syz.3.347" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 48.397985][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.432403][ T45] usb 2-1: config 0 descriptor?? [ 48.511312][ T384] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.682803][ T384] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 48.692418][ T384] usb 3-1: can't read configurations, error -61 [ 48.749689][ T1312] FAULT_INJECTION: forcing a failure. [ 48.749689][ T1312] name failslab, interval 1, probability 0, space 0, times 0 [ 48.762561][ T1312] CPU: 1 UID: 0 PID: 1312 Comm: syz.0.351 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 48.762597][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.762609][ T1312] Call Trace: [ 48.762616][ T1312] [ 48.762624][ T1312] __dump_stack+0x21/0x30 [ 48.762655][ T1312] dump_stack_lvl+0x140/0x1c0 [ 48.762681][ T1312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.762707][ T1312] dump_stack+0x19/0x20 [ 48.762732][ T1312] should_fail_ex+0x3c2/0x510 [ 48.762752][ T1312] should_failslab+0xac/0x100 [ 48.762771][ T1312] kmem_cache_alloc_noprof+0x42/0x410 [ 48.762794][ T1312] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 48.762822][ T1312] ? alloc_empty_file+0xbf/0x270 [ 48.762840][ T1312] ? arch_stack_walk+0x10a/0x170 [ 48.762862][ T1312] alloc_empty_file+0xbf/0x270 [ 48.762880][ T1312] path_openat+0xf4/0x35a0 [ 48.762901][ T1312] ? stack_depot_save_flags+0x38/0x800 [ 48.762921][ T1312] ? kasan_save_track+0x4f/0x80 [ 48.762948][ T1312] ? kasan_save_track+0x3e/0x80 [ 48.762990][ T1312] ? kasan_save_alloc_info+0x3a/0x50 [ 48.763011][ T1312] ? __kasan_slab_alloc+0x73/0x90 [ 48.763029][ T1312] ? getname+0x1b/0x30 [ 48.763051][ T1312] ? do_sys_openat2+0xda/0x1d0 [ 48.763072][ T1312] ? __x64_sys_openat+0x13a/0x170 [ 48.763092][ T1312] ? x64_sys_call+0xe69/0x2ee0 [ 48.763110][ T1312] ? do_syscall_64+0x57/0xf0 [ 48.763131][ T1312] ? do_filp_open+0x440/0x440 [ 48.763152][ T1312] do_filp_open+0x1f2/0x440 [ 48.763171][ T1312] ? __cfi_do_filp_open+0x10/0x10 [ 48.763192][ T1312] ? alloc_fd+0x4c1/0x570 [ 48.763219][ T1312] do_sys_openat2+0x134/0x1d0 [ 48.763249][ T1312] ? fput+0x1a4/0x230 [ 48.763267][ T1312] ? do_sys_open+0x100/0x100 [ 48.763287][ T1312] ? ksys_write+0x1f3/0x260 [ 48.763310][ T1312] ? __cfi_ksys_write+0x10/0x10 [ 48.763342][ T1312] __x64_sys_openat+0x13a/0x170 [ 48.763364][ T1312] x64_sys_call+0xe69/0x2ee0 [ 48.763383][ T1312] do_syscall_64+0x57/0xf0 [ 48.763401][ T1312] ? clear_bhb_loop+0x50/0xa0 [ 48.763427][ T1312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.763450][ T1312] RIP: 0033:0x7f843035fd8e [ 48.763467][ T1312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.763483][ T1312] RSP: 002b:00007f84312a5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.763504][ T1312] RAX: ffffffffffffffda RBX: 00007f84312a66c0 RCX: 00007f843035fd8e [ 48.763518][ T1312] RDX: 0000000000000002 RSI: 00007f84312a5f90 RDI: ffffffffffffff9c [ 48.763531][ T1312] RBP: 00007f84312a6090 R08: 0000000000000000 R09: 0000000000000000 [ 48.763543][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.763556][ T1312] R13: 00007f8430626038 R14: 00007f8430625fa0 R15: 00007ffd23b25248 [ 48.763572][ T1312] [ 48.821335][ T384] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.851668][ T45] input: HID 1532:011d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1532:011D.0006/input/input8 [ 49.002672][ T384] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 49.010595][ T45] hid-rmi 0003:1532:011D.0006: input,hiddev96,hidraw0: USB HID vff.f9 Device [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 49.029931][ T384] usb 3-1: can't read configurations, error -61 [ 49.079617][ T45] usb 2-1: USB disconnect, device number 15 [ 49.087065][ T384] usb usb3-port1: attempt power cycle [ 49.145884][ T1317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 49.170065][ T1319] syzkaller1: entered promiscuous mode [ 49.175715][ T1319] syzkaller1: entered allmulticast mode [ 49.236233][ T36] audit: type=1400 audit(1793392835.509:283): avc: denied { write } for pid=1320 comm="syz.0.355" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.259458][ T1321] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888118000dc0 pfn:0x118000 [ 49.270109][ T1321] flags: 0x4000000000000000(zone=1) [ 49.275693][ T1321] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 49.284630][ T1321] raw: ffff888118000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 49.293946][ T1321] page dumped because: unmovable page [ 49.301468][ T1321] page_owner tracks the page as allocated [ 49.307294][ T1321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 384, tgid 384 (kworker/0:3), ts 42684197683, free_ts 42231638735 [ 49.326499][ T36] audit: type=1400 audit(1793392835.609:284): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.351335][ T1321] post_alloc_hook+0x37d/0x3b0 [ 49.359868][ T1321] prep_new_page+0x2d/0x180 [ 49.364684][ T36] audit: type=1400 audit(1793392835.609:285): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.371325][ T1321] get_page_from_freelist+0x4aea/0x4ba0 [ 49.392198][ T1321] __alloc_pages_noprof+0x35a/0x7e0 [ 49.397441][ T1321] __vmalloc_node_range_noprof+0x8e5/0x1300 [ 49.403428][ T1321] vmalloc_noprof+0x103/0x1d0 [ 49.408201][ T1321] kcov_remote_start+0x208/0x3c0 [ 49.413169][ T1321] hub_event+0x157/0x4360 [ 49.417511][ T1321] process_scheduled_works+0x7f4/0x1060 [ 49.423078][ T1321] worker_thread+0xc99/0x13f0 [ 49.427752][ T1321] kthread+0x2c4/0x360 [ 49.431927][ T1321] ret_from_fork+0x64/0xa0 [ 49.436361][ T1321] ret_from_fork_asm+0x1a/0x30 [ 49.441118][ T1321] page last free pid 33 tgid 33 stack trace: [ 49.447109][ T1321] free_unref_page+0xb99/0xf50 [ 49.451875][ T1321] __free_pages+0x6b/0x3b0 [ 49.456281][ T1321] __free_slab+0xb2/0x110 [ 49.460593][ T1321] rcu_free_slab+0x18/0x30 [ 49.465008][ T1321] rcu_do_batch+0x56d/0xcb0 [ 49.469501][ T1321] rcu_nocb_cb_kthread+0x533/0xb60 [ 49.474613][ T1321] kthread+0x2c4/0x360 [ 49.478850][ T1321] ret_from_fork+0x64/0xa0 [ 49.483272][ T1321] ret_from_fork_asm+0x1a/0x30 [ 49.495115][ T36] audit: type=1400 audit(1793392835.609:286): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.528297][ T36] audit: type=1400 audit(1793392835.609:287): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.549103][ T36] audit: type=1400 audit(1793392835.609:288): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.569802][ T384] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.577755][ T36] audit: type=1400 audit(1793392835.609:289): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.601491][ T36] audit: type=1400 audit(1793392835.609:290): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.638189][ T384] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 49.640073][ T1328] netlink: 'syz.0.357': attribute type 3 has an invalid length. [ 49.645902][ T384] usb 3-1: can't read configurations, error -61 [ 49.666386][ T1328] netlink: 'syz.0.357': attribute type 3 has an invalid length. [ 49.748507][ T1336] netlink: 'syz.0.361': attribute type 4 has an invalid length. [ 49.757728][ T1336] netlink: 'syz.0.361': attribute type 4 has an invalid length. [ 49.774836][ T36] audit: type=1400 audit(1793392836.049:291): avc: denied { mounton } for pid=1337 comm="syz.0.362" path="/93/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 49.780919][ T1338] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 49.800134][ T384] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.833140][ T384] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 49.840744][ T384] usb 3-1: can't read configurations, error -61 [ 49.847404][ T384] usb usb3-port1: unable to enumerate USB device [ 49.920620][ T36] audit: type=1400 audit(1793392836.189:292): avc: denied { create } for pid=1350 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.956504][ T1359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.370'. [ 49.994352][ T1366] FAULT_INJECTION: forcing a failure. [ 49.994352][ T1366] name failslab, interval 1, probability 0, space 0, times 0 [ 50.007088][ T1366] CPU: 1 UID: 0 PID: 1366 Comm: syz.3.373 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 50.007121][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.007132][ T1366] Call Trace: [ 50.007137][ T1366] [ 50.007144][ T1366] __dump_stack+0x21/0x30 [ 50.007170][ T1366] dump_stack_lvl+0x140/0x1c0 [ 50.007190][ T1366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.007212][ T1366] dump_stack+0x19/0x20 [ 50.007232][ T1366] should_fail_ex+0x3c2/0x510 [ 50.007250][ T1366] should_failslab+0xac/0x100 [ 50.007267][ T1366] kmem_cache_alloc_noprof+0x42/0x410 [ 50.007290][ T1366] ? security_file_alloc+0x49/0x220 [ 50.007309][ T1366] ? kasan_save_alloc_info+0x3a/0x50 [ 50.007327][ T1366] security_file_alloc+0x49/0x220 [ 50.007345][ T1366] init_file+0x9e/0x210 [ 50.007360][ T1366] alloc_empty_file+0xd9/0x270 [ 50.007378][ T1366] path_openat+0xf4/0x35a0 [ 50.007396][ T1366] ? stack_depot_save_flags+0x38/0x800 [ 50.007415][ T1366] ? kasan_save_track+0x4f/0x80 [ 50.007435][ T1366] ? kasan_save_track+0x3e/0x80 [ 50.007465][ T1366] ? kasan_save_alloc_info+0x3a/0x50 [ 50.007485][ T1366] ? __kasan_slab_alloc+0x73/0x90 [ 50.007498][ T1366] ? getname+0x1b/0x30 [ 50.007511][ T1366] ? do_sys_openat2+0xda/0x1d0 [ 50.007522][ T1366] ? __x64_sys_openat+0x13a/0x170 [ 50.007533][ T1366] ? x64_sys_call+0xe69/0x2ee0 [ 50.007543][ T1366] ? do_syscall_64+0x57/0xf0 [ 50.007554][ T1366] ? do_filp_open+0x440/0x440 [ 50.007566][ T1366] do_filp_open+0x1f2/0x440 [ 50.007576][ T1366] ? __cfi_do_filp_open+0x10/0x10 [ 50.007588][ T1366] ? alloc_fd+0x4c1/0x570 [ 50.007603][ T1366] do_sys_openat2+0x134/0x1d0 [ 50.007614][ T1366] ? fput+0x1a4/0x230 [ 50.007623][ T1366] ? do_sys_open+0x100/0x100 [ 50.007634][ T1366] ? ksys_write+0x1f3/0x260 [ 50.007653][ T1366] ? __cfi_ksys_write+0x10/0x10 [ 50.007666][ T1366] __x64_sys_openat+0x13a/0x170 [ 50.007678][ T1366] x64_sys_call+0xe69/0x2ee0 [ 50.007687][ T1366] do_syscall_64+0x57/0xf0 [ 50.007697][ T1366] ? clear_bhb_loop+0x50/0xa0 [ 50.007712][ T1366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.007725][ T1366] RIP: 0033:0x7f9b05b5fd8e [ 50.007734][ T1366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.007743][ T1366] RSP: 002b:00007f9b06a0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 50.007755][ T1366] RAX: ffffffffffffffda RBX: 00007f9b06a106c0 RCX: 00007f9b05b5fd8e [ 50.007763][ T1366] RDX: 0000000000000002 RSI: 00007f9b06a0ff90 RDI: ffffffffffffff9c [ 50.007770][ T1366] RBP: 00007f9b06a10090 R08: 0000000000000000 R09: 0000000000000000 [ 50.007777][ T1366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.007787][ T1366] R13: 00007f9b05e26038 R14: 00007f9b05e25fa0 R15: 00007ffec0f7b9a8 [ 50.007795][ T1366] [ 50.561308][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 50.711316][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 50.718176][ T312] usb 4-1: config 7 has an invalid interface number: 87 but max is 0 [ 50.726516][ T312] usb 4-1: config 7 has no interface number 0 [ 50.732710][ T312] usb 4-1: config 7 interface 87 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 50.743718][ T312] usb 4-1: config 7 interface 87 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 50.754557][ T312] usb 4-1: config 7 interface 87 has no altsetting 0 [ 50.762401][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 50.763073][ T312] usb 4-1: New USB device found, idVendor=0403, idProduct=d738, bcdDevice= 1.74 [ 50.780363][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.788444][ T312] usb 4-1: Product: syz [ 50.792974][ T312] usb 4-1: Manufacturer: syz [ 50.797555][ T312] usb 4-1: SerialNumber: syz [ 51.005004][ T1371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.013544][ T1371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.061333][ T384] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.143182][ T1379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 51.153414][ T1379] .N: renamed from veth0_to_bond (while UP) [ 51.212543][ T384] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 51.220758][ T384] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.232040][ T384] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 51.241110][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.249264][ T384] usb 1-1: Product: syz [ 51.253480][ T384] usb 1-1: Manufacturer: syz [ 51.258080][ T384] usb 1-1: SerialNumber: syz [ 51.279761][ T1387] netlink: 'syz.2.382': attribute type 16 has an invalid length. [ 51.300952][ T1391] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 51.314871][ T1391] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 51.328310][ T1396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 51.471292][ T384] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 51.486698][ T384] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 51.499547][ T384] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 51.512003][ T384] usb 1-1: USB disconnect, device number 10 [ 51.522996][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.546549][ T312] ftdi_sio 4-1:7.87: FTDI USB Serial Device converter detected [ 51.555127][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.555289][ T312] usb 4-1: Detected SIO [ 51.565364][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.568429][ T312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 51.580289][ T1412] FAULT_INJECTION: forcing a failure. [ 51.580289][ T1412] name failslab, interval 1, probability 0, space 0, times 0 [ 51.586900][ T312] usb 4-1: USB disconnect, device number 9 [ 51.597469][ T1412] CPU: 0 UID: 0 PID: 1412 Comm: syz.1.393 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 51.597498][ T1412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.597511][ T1412] Call Trace: [ 51.597517][ T1412] [ 51.597524][ T1412] __dump_stack+0x21/0x30 [ 51.597558][ T1412] dump_stack_lvl+0x140/0x1c0 [ 51.597584][ T1412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.597610][ T1412] ? kasan_save_alloc_info+0x3a/0x50 [ 51.597632][ T1412] ? __kasan_slab_alloc+0x73/0x90 [ 51.597650][ T1412] dump_stack+0x19/0x20 [ 51.597672][ T1412] should_fail_ex+0x3c2/0x510 [ 51.597690][ T1412] should_failslab+0xac/0x100 [ 51.597707][ T1412] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 51.597730][ T1412] ? make_vfsuid+0x4d/0xa0 [ 51.597752][ T1412] ? proc_alloc_inode+0x48/0x150 [ 51.597774][ T1412] proc_alloc_inode+0x48/0x150 [ 51.597795][ T1412] ? __cfi_proc_alloc_inode+0x10/0x10 [ 51.597817][ T1412] alloc_inode+0x7d/0x270 [ 51.597836][ T1412] new_inode+0x25/0x1e0 [ 51.597854][ T1412] proc_pid_make_inode+0x25/0x140 [ 51.597869][ T1412] proc_ns_dir_lookup+0x5b7/0x700 [ 51.597890][ T1412] path_openat+0x1127/0x35a0 [ 51.597912][ T1412] ? do_filp_open+0x440/0x440 [ 51.597932][ T1412] do_filp_open+0x1f2/0x440 [ 51.597951][ T1412] ? __cfi_do_filp_open+0x10/0x10 [ 51.597971][ T1412] ? __cfi_kfree_link+0x10/0x10 [ 51.597991][ T1412] ? alloc_fd+0x4c1/0x570 [ 51.598016][ T1412] do_sys_openat2+0x134/0x1d0 [ 51.598046][ T1412] ? do_sys_open+0x100/0x100 [ 51.598068][ T1412] __x64_sys_openat+0x13a/0x170 [ 51.598090][ T1412] x64_sys_call+0xe69/0x2ee0 [ 51.598109][ T1412] do_syscall_64+0x57/0xf0 [ 51.598129][ T1412] ? clear_bhb_loop+0x50/0xa0 [ 51.598154][ T1412] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.598177][ T1412] RIP: 0033:0x7f41c835fd8e [ 51.598193][ T1412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.598208][ T1412] RSP: 002b:00007f41c9244ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.598228][ T1412] RAX: ffffffffffffffda RBX: 00007f41c92456c0 RCX: 00007f41c835fd8e [ 51.598242][ T1412] RDX: 0000000000000002 RSI: 00007f41c9244f90 RDI: ffffffffffffff9c [ 51.598254][ T1412] RBP: 00007f41c8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.598266][ T1412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.598277][ T1412] R13: 00007f41c8626038 R14: 00007f41c8625fa0 R15: 00007ffe244e6448 [ 51.598292][ T1412] [ 51.711295][ T63] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.717152][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 51.865610][ T312] ftdi_sio 4-1:7.87: device disconnected [ 51.882436][ T63] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 51.892379][ T63] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 51.902327][ T63] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 51.913361][ T63] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 51.923318][ T63] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 51.932881][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.942137][ T1408] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 51.949317][ T1408] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 51.957482][ T63] pl2303 3-1:1.0: pl2303 converter detected [ 52.012535][ T1426] netlink: 68 bytes leftover after parsing attributes in process `syz.0.399'. [ 52.072336][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 52.080550][ T63] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 52.088769][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 52.097232][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 52.105310][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 52.113593][ T63] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 52.117659][ T1434] bridge: RTM_NEWNEIGH with invalid ether address [ 52.122179][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 52.136120][ T63] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 52.144170][ T63] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 52.152346][ T63] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 52.160581][ T63] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 52.170036][ T63] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 52.179548][ T63] usb 3-1: USB disconnect, device number 14 [ 52.186457][ T63] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 52.191333][ T312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.195198][ T63] pl2303 3-1:1.0: device disconnected [ 52.221323][ T311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.352328][ T312] usb 4-1: config index 0 descriptor too short (expected 214, got 36) [ 52.360562][ T312] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 52.369145][ T312] usb 4-1: can't read configurations, error -22 [ 52.376448][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.387581][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.397338][ T311] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.406379][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.414917][ T311] usb 2-1: config 0 descriptor?? [ 52.511352][ T312] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.662256][ T312] usb 4-1: config index 0 descriptor too short (expected 214, got 36) [ 52.670496][ T312] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 52.679239][ T312] usb 4-1: can't read configurations, error -22 [ 52.685695][ T312] usb usb4-port1: attempt power cycle [ 52.836630][ T1422] netlink: 'syz.1.397': attribute type 16 has an invalid length. [ 52.844456][ T1422] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.397'. [ 52.854479][ T1422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.863181][ T1422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.958657][ T1441] netlink: 388 bytes leftover after parsing attributes in process `syz.0.405'. [ 53.032721][ T312] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.054529][ T312] usb 4-1: config index 0 descriptor too short (expected 214, got 36) [ 53.062785][ T312] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 53.071358][ T312] usb 4-1: can't read configurations, error -22 [ 53.201334][ T312] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.222689][ T312] usb 4-1: config index 0 descriptor too short (expected 214, got 36) [ 53.230930][ T312] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 40 [ 53.239500][ T312] usb 4-1: can't read configurations, error -22 [ 53.245920][ T312] usb usb4-port1: unable to enumerate USB device [ 53.538099][ T1454] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 53.551916][ T1454] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 53.569991][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 53.585703][ T311] usb 2-1: string descriptor 0 read error: -71 [ 53.594801][ T311] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 53.599612][ T1460] syzkaller1: entered promiscuous mode [ 53.604765][ T1458] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 53.609227][ T1460] syzkaller1: entered allmulticast mode [ 53.618891][ T311] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 53.624440][ T1458] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 53.632546][ T311] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 53.649523][ T311] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 53.657220][ T311] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 53.663193][ T1458] FAULT_INJECTION: forcing a failure. [ 53.663193][ T1458] name failslab, interval 1, probability 0, space 0, times 0 [ 53.668914][ T311] usb 2-1: USB disconnect, device number 16 [ 53.680993][ T1458] CPU: 0 UID: 0 PID: 1458 Comm: syz.1.412 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 53.681024][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 53.681036][ T1458] Call Trace: [ 53.681042][ T1458] [ 53.681050][ T1458] __dump_stack+0x21/0x30 [ 53.681083][ T1458] dump_stack_lvl+0x140/0x1c0 [ 53.681108][ T1458] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.681137][ T1458] dump_stack+0x19/0x20 [ 53.681160][ T1458] should_fail_ex+0x3c2/0x510 [ 53.681178][ T1458] should_failslab+0xac/0x100 [ 53.681196][ T1458] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 53.681220][ T1458] ? __d_alloc+0x42/0x8c0 [ 53.681241][ T1458] ? __kasan_check_write+0x18/0x20 [ 53.681267][ T1458] __d_alloc+0x42/0x8c0 [ 53.681288][ T1458] d_alloc_parallel+0xe4/0x1370 [ 53.681310][ T1458] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 53.681330][ T1458] ? __wake_up+0x169/0x190 [ 53.681353][ T1458] ? __d_add+0x636/0xac0 [ 53.681376][ T1458] ? __cfi_d_alloc_parallel+0x10/0x10 [ 53.681398][ T1458] ? avc_has_perm_noaudit+0x26b/0x360 [ 53.681417][ T1458] ? __kasan_check_write+0x18/0x20 [ 53.681448][ T1458] ? rwsem_read_trylock+0x275/0x5a0 [ 53.681470][ T1458] __lookup_slow+0x150/0x420 [ 53.681488][ T1458] ? lookup_one_len+0x300/0x300 [ 53.681506][ T1458] ? down_read+0x7f/0xe0 [ 53.681530][ T1458] ? __cfi_down_read+0x10/0x10 [ 53.681555][ T1458] lookup_slow+0x57/0x80 [ 53.681572][ T1458] walk_component+0x308/0x450 [ 53.681597][ T1458] link_path_walk+0x723/0xeb0 [ 53.681622][ T1458] path_openat+0x298/0x35a0 [ 53.681642][ T1458] ? kasan_save_alloc_info+0x3a/0x50 [ 53.681663][ T1458] ? __kasan_slab_alloc+0x73/0x90 [ 53.681679][ T1458] ? getname+0x1b/0x30 [ 53.681701][ T1458] ? x64_sys_call+0xe69/0x2ee0 [ 53.681719][ T1458] ? do_syscall_64+0x57/0xf0 [ 53.681739][ T1458] ? do_filp_open+0x440/0x440 [ 53.681758][ T1458] do_filp_open+0x1f2/0x440 [ 53.681777][ T1458] ? __cfi_do_filp_open+0x10/0x10 [ 53.681797][ T1458] ? __cfi_kfree_link+0x10/0x10 [ 53.681819][ T1458] ? alloc_fd+0x4c1/0x570 [ 53.681844][ T1458] do_sys_openat2+0x134/0x1d0 [ 53.681865][ T1458] ? do_sys_open+0x100/0x100 [ 53.681885][ T1458] __x64_sys_openat+0x13a/0x170 [ 53.681905][ T1458] x64_sys_call+0xe69/0x2ee0 [ 53.681922][ T1458] do_syscall_64+0x57/0xf0 [ 53.681946][ T1458] ? clear_bhb_loop+0x50/0xa0 [ 53.681972][ T1458] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.681997][ T1458] RIP: 0033:0x7f41c835fd8e [ 53.682013][ T1458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.682028][ T1458] RSP: 002b:00007f41c9244ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.682048][ T1458] RAX: ffffffffffffffda RBX: 00007f41c92456c0 RCX: 00007f41c835fd8e [ 53.682061][ T1458] RDX: 0000000000000002 RSI: 00007f41c9244f90 RDI: ffffffffffffff9c [ 53.682074][ T1458] RBP: 00007f41c8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 53.682087][ T1458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.682098][ T1458] R13: 00007f41c8626038 R14: 00007f41c8625fa0 R15: 00007ffe244e6448 [ 53.682113][ T1458] [ 54.006802][ T1462] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 3 (only 8 groups) [ 54.068748][ T1468] netlink: 'syz.2.417': attribute type 3 has an invalid length. [ 54.080791][ T1468] netlink: 'syz.2.417': attribute type 3 has an invalid length. [ 54.351396][ T1112] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 54.391383][ T934] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 54.501343][ T1112] usb 3-1: Using ep0 maxpacket: 32 [ 54.506535][ T311] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.515176][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.526108][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 54.537301][ T1112] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.546655][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.555582][ T1112] usb 3-1: config 0 descriptor?? [ 54.560905][ T1476] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 54.569356][ T934] usb 1-1: not running at top speed; connect to a high speed hub [ 54.571838][ T1112] hub 3-1:0.0: USB hub found [ 54.577835][ T934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.592440][ T934] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 54.594226][ T1484] FAULT_INJECTION: forcing a failure. [ 54.594226][ T1484] name failslab, interval 1, probability 0, space 0, times 0 [ 54.601517][ T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.614420][ T1484] CPU: 1 UID: 0 PID: 1484 Comm: syz.3.425 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 54.614446][ T1484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.614458][ T1484] Call Trace: [ 54.614463][ T1484] [ 54.614470][ T1484] __dump_stack+0x21/0x30 [ 54.614498][ T1484] dump_stack_lvl+0x140/0x1c0 [ 54.614523][ T1484] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.614548][ T1484] dump_stack+0x19/0x20 [ 54.614569][ T1484] should_fail_ex+0x3c2/0x510 [ 54.614586][ T1484] should_failslab+0xac/0x100 [ 54.614603][ T1484] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 54.614626][ T1484] ? __d_lookup_rcu+0x334/0x3c0 [ 54.614649][ T1484] ? proc_alloc_inode+0x48/0x150 [ 54.614671][ T1484] proc_alloc_inode+0x48/0x150 [ 54.614691][ T1484] ? __cfi_proc_alloc_inode+0x10/0x10 [ 54.614712][ T1484] alloc_inode+0x7d/0x270 [ 54.614730][ T1484] new_inode+0x25/0x1e0 [ 54.614746][ T1484] proc_pid_make_inode+0x25/0x140 [ 54.614762][ T1484] proc_pident_instantiate+0x6d/0x2c0 [ 54.614779][ T1484] proc_pident_lookup+0x1c7/0x270 [ 54.614796][ T1484] proc_tid_base_lookup+0x2f/0x40 [ 54.614816][ T1484] __lookup_slow+0x2e2/0x420 [ 54.614832][ T1484] ? lookup_one_len+0x300/0x300 [ 54.614849][ T1484] ? down_read+0x7f/0xe0 [ 54.614872][ T1484] lookup_slow+0x57/0x80 [ 54.614887][ T1484] link_path_walk+0x991/0xeb0 [ 54.614911][ T1484] path_openat+0x298/0x35a0 [ 54.614929][ T1484] ? kasan_save_alloc_info+0x3a/0x50 [ 54.614949][ T1484] ? __kasan_slab_alloc+0x73/0x90 [ 54.614965][ T1484] ? getname+0x1b/0x30 [ 54.614986][ T1484] ? x64_sys_call+0xe69/0x2ee0 [ 54.615003][ T1484] ? do_syscall_64+0x57/0xf0 [ 54.615022][ T1484] ? do_filp_open+0x440/0x440 [ 54.615041][ T1484] do_filp_open+0x1f2/0x440 [ 54.615060][ T1484] ? __cfi_do_filp_open+0x10/0x10 [ 54.615077][ T1484] ? __cfi_kfree_link+0x10/0x10 [ 54.615097][ T1484] ? alloc_fd+0x4c1/0x570 [ 54.615121][ T1484] do_sys_openat2+0x134/0x1d0 [ 54.615140][ T1484] ? fput+0x1a4/0x230 [ 54.615157][ T1484] ? do_sys_open+0x100/0x100 [ 54.615174][ T1484] ? ksys_write+0x1f3/0x260 [ 54.615195][ T1484] ? __cfi_ksys_write+0x10/0x10 [ 54.615217][ T1484] __x64_sys_openat+0x13a/0x170 [ 54.615237][ T1484] x64_sys_call+0xe69/0x2ee0 [ 54.615253][ T1484] do_syscall_64+0x57/0xf0 [ 54.615270][ T1484] ? clear_bhb_loop+0x50/0xa0 [ 54.615292][ T1484] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.615314][ T1484] RIP: 0033:0x7f9b05b5fd8e [ 54.615335][ T1484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.615349][ T1484] RSP: 002b:00007f9b06a0fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.615367][ T1484] RAX: ffffffffffffffda RBX: 00007f9b06a106c0 RCX: 00007f9b05b5fd8e [ 54.615380][ T1484] RDX: 0000000000000002 RSI: 00007f9b06a0ff90 RDI: ffffffffffffff9c [ 54.615392][ T1484] RBP: 00007f9b06a10090 R08: 0000000000000000 R09: 0000000000000000 [ 54.615404][ T1484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.615414][ T1484] R13: 00007f9b05e26038 R14: 00007f9b05e25fa0 R15: 00007ffec0f7b9a8 [ 54.615430][ T1484] [ 54.661324][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 54.672406][ T934] usb 1-1: Found UVC 1.00 device (046d:0825) [ 54.678184][ T311] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 54.683907][ T934] usb 1-1: No streaming interface found for terminal 2. [ 54.691680][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.881628][ T934] usb 1-1: USB disconnect, device number 11 [ 54.886759][ T1112] hub 3-1:0.0: 1 port detected [ 54.976223][ T311] usb 2-1: Product: syz [ 54.980491][ T311] usb 2-1: Manufacturer: syz [ 54.985249][ T311] usb 2-1: SerialNumber: syz [ 54.992200][ T311] usb 2-1: config 0 descriptor?? [ 54.998851][ T311] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 55.007184][ T311] usb 2-1: Detected FT2233HP [ 55.037592][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 55.037608][ T36] audit: type=1400 audit(1793392841.309:300): avc: denied { sqpoll } for pid=1487 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.191456][ T36] audit: type=1400 audit(1793392841.469:301): avc: denied { setopt } for pid=1474 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.302143][ T311] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 55.309130][ T311] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 55.316596][ T311] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 55.326720][ T311] usb 2-1: USB disconnect, device number 17 [ 55.333459][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 55.343286][ T311] ftdi_sio 2-1:0.0: device disconnected [ 55.409899][ T1491] netlink: 388 bytes leftover after parsing attributes in process `syz.0.428'. [ 55.426550][ T1112] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 55.434139][ T1112] usb 3-1: Failed to suspend device, error -71 [ 55.440519][ T45] usb 3-1: USB disconnect, device number 15 [ 55.761361][ T1112] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 55.819446][ T36] audit: type=1400 audit(1793392842.089:302): avc: denied { execute } for pid=1501 comm="syz.1.431" path="/selinux/user" dev="selinuxfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 55.870010][ T1508] FAULT_INJECTION: forcing a failure. [ 55.870010][ T1508] name failslab, interval 1, probability 0, space 0, times 0 [ 55.882657][ T1508] CPU: 1 UID: 0 PID: 1508 Comm: syz.1.434 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 55.882688][ T1508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.882696][ T1508] Call Trace: [ 55.882701][ T1508] [ 55.882706][ T1508] __dump_stack+0x21/0x30 [ 55.882732][ T1508] dump_stack_lvl+0x140/0x1c0 [ 55.882747][ T1508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.882762][ T1508] ? stack_trace_save+0xaa/0x100 [ 55.882777][ T1508] dump_stack+0x19/0x20 [ 55.882790][ T1508] should_fail_ex+0x3c2/0x510 [ 55.882800][ T1508] should_failslab+0xac/0x100 [ 55.882810][ T1508] kmem_cache_alloc_noprof+0x42/0x410 [ 55.882823][ T1508] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.882834][ T1508] ? vm_area_dup+0x3f/0x560 [ 55.882847][ T1508] vm_area_dup+0x3f/0x560 [ 55.882858][ T1508] ? __split_vma+0x1b8/0xc10 [ 55.882872][ T1508] __split_vma+0x1ce/0xc10 [ 55.882885][ T1508] ? kvm_mmu_notifier_invalidate_range_start+0xa71/0xbe0 [ 55.882897][ T1508] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 55.882911][ T1508] ? __cfi_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 55.882923][ T1508] vms_gather_munmap_vmas+0x2a2/0xd90 [ 55.882936][ T1508] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.882946][ T1508] ? vma_link+0x51f/0x6c0 [ 55.882959][ T1508] ? rcuwait_wake_up+0x60/0x70 [ 55.882972][ T1508] do_vmi_align_munmap+0x251/0x5f0 [ 55.882987][ T1508] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 55.883002][ T1508] do_vmi_munmap+0x245/0x2e0 [ 55.883015][ T1508] move_vma+0xac3/0x1210 [ 55.883026][ T1508] ? vma_expandable+0x100/0x100 [ 55.883037][ T1508] ? cap_mmap_addr+0x169/0x2e0 [ 55.883050][ T1508] ? security_mmap_addr+0x31/0xe0 [ 55.883064][ T1508] mremap_to+0x544/0x610 [ 55.883075][ T1508] __se_sys_mremap+0x898/0x10f0 [ 55.883085][ T1508] ? do_futex+0x32a/0x510 [ 55.883095][ T1508] ? __x64_sys_mremap+0xf0/0xf0 [ 55.883105][ T1508] ? __cfi_do_futex+0x10/0x10 [ 55.883115][ T1508] ? __se_sys_futex+0x13c/0x320 [ 55.883125][ T1508] ? fput+0x1a4/0x230 [ 55.883135][ T1508] ? __x64_sys_futex+0x110/0x110 [ 55.883144][ T1508] ? __cfi_ksys_write+0x10/0x10 [ 55.883158][ T1508] ? __kasan_check_write+0x18/0x20 [ 55.883170][ T1508] ? fpregs_restore_userregs+0x11c/0x260 [ 55.883183][ T1508] __x64_sys_mremap+0xc3/0xf0 [ 55.883193][ T1508] x64_sys_call+0x2ac4/0x2ee0 [ 55.883204][ T1508] do_syscall_64+0x57/0xf0 [ 55.883214][ T1508] ? clear_bhb_loop+0x50/0xa0 [ 55.883231][ T1508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.883244][ T1508] RIP: 0033:0x7f41c839f559 [ 55.883254][ T1508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.883262][ T1508] RSP: 002b:00007f41c9245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 55.883275][ T1508] RAX: ffffffffffffffda RBX: 00007f41c8625fa0 RCX: 00007f41c839f559 [ 55.883283][ T1508] RDX: 0000000000002000 RSI: 0000000000001000 RDI: 000020000040b000 [ 55.883290][ T1508] RBP: 00007f41c8436b20 R08: 000020000000c000 R09: 0000000000000000 [ 55.883297][ T1508] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 55.883303][ T1508] R13: 00007f41c8626038 R14: 00007f41c8625fa0 R15: 00007ffe244e6448 [ 55.883311][ T1508] [ 56.206207][ T1112] usb 1-1: device descriptor read/64, error -71 [ 56.225564][ T1512] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 56.233410][ T1512] netlink: 'syz.3.435': attribute type 3 has an invalid length. [ 56.358863][ T1525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.441'. [ 56.424064][ T1535] incfs: mount failed -22 [ 56.424425][ T36] audit: type=1400 audit(1793392842.699:303): avc: denied { mounton } for pid=1531 comm="syz.3.443" path="/126/file0" dev="incremental-fs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.428552][ T1535] incfs: mount failed -22 [ 56.456382][ T1112] usb 1-1: device descriptor read/64, error -71 [ 56.462180][ T1535] incfs: mount failed -22 [ 56.467206][ T1535] incfs: mount failed -22 [ 56.476483][ T36] audit: type=1400 audit(1793392842.749:304): avc: denied { read } for pid=1531 comm="syz.3.443" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.477558][ T1535] incfs: mount failed -22 [ 56.500841][ T36] audit: type=1400 audit(1793392842.749:305): avc: denied { open } for pid=1531 comm="syz.3.443" path="/126/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.504499][ T1535] incfs: mount failed -22 [ 56.529974][ T36] audit: type=1400 audit(1793392842.779:306): avc: denied { ioctl } for pid=1531 comm="syz.3.443" path=2F3132362F66696C65302F2E70656E64696E675F7265616473202864656C6574656429 dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.533217][ T1535] incfs: mount failed -22 [ 56.567260][ T1535] incfs: mount failed -22 [ 56.572192][ T1535] incfs: mount failed -22 [ 56.576685][ T1535] incfs: mount failed -22 [ 56.581369][ T1535] incfs: mount failed -22 [ 56.585975][ T1535] incfs: mount failed -22 [ 56.590495][ T1535] incfs: mount failed -22 [ 56.595203][ T1535] incfs: mount failed -22 [ 56.599645][ T1535] incfs: mount failed -22 [ 56.604176][ T1535] incfs: mount failed -22 [ 56.608723][ T1535] incfs: mount failed -22 [ 56.613406][ T1535] incfs: mount failed -22 [ 56.617946][ T1535] incfs: mount failed -22 [ 56.622657][ T1535] incfs: mount failed -22 [ 56.627192][ T1535] incfs: mount failed -22 [ 56.631719][ T1535] incfs: mount failed -22 [ 56.636254][ T1535] incfs: mount failed -22 [ 56.640772][ T1535] incfs: mount failed -22 [ 56.645323][ T1535] incfs: mount failed -22 [ 56.649811][ T1535] incfs: mount failed -22 [ 56.654366][ T1535] incfs: mount failed -22 [ 56.658857][ T1535] incfs: mount failed -22 [ 56.678708][ T1542] FAULT_INJECTION: forcing a failure. [ 56.678708][ T1542] name failslab, interval 1, probability 0, space 0, times 0 [ 56.691446][ T1542] CPU: 1 UID: 0 PID: 1542 Comm: syz.3.446 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 56.691480][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 56.691492][ T1542] Call Trace: [ 56.691499][ T1542] [ 56.691507][ T1542] __dump_stack+0x21/0x30 [ 56.691531][ T1542] dump_stack_lvl+0x140/0x1c0 [ 56.691546][ T1542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.691561][ T1542] ? stack_trace_save+0xaa/0x100 [ 56.691576][ T1542] dump_stack+0x19/0x20 [ 56.691589][ T1542] should_fail_ex+0x3c2/0x510 [ 56.691600][ T1542] should_failslab+0xac/0x100 [ 56.691610][ T1542] kmem_cache_alloc_noprof+0x42/0x410 [ 56.691638][ T1542] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.691654][ T1542] ? vm_area_dup+0x3f/0x560 [ 56.691667][ T1542] vm_area_dup+0x3f/0x560 [ 56.691679][ T1542] ? __split_vma+0x1b8/0xc10 [ 56.691695][ T1542] __split_vma+0x1ce/0xc10 [ 56.691709][ T1542] ? kvm_mmu_notifier_invalidate_range_start+0xa71/0xbe0 [ 56.691722][ T1542] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 56.691736][ T1542] ? __cfi_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 56.691747][ T1542] vms_gather_munmap_vmas+0x2a2/0xd90 [ 56.691761][ T1542] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.691770][ T1542] ? vma_link+0x51f/0x6c0 [ 56.691784][ T1542] ? rcuwait_wake_up+0x60/0x70 [ 56.691797][ T1542] do_vmi_align_munmap+0x251/0x5f0 [ 56.691812][ T1542] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 56.691827][ T1542] do_vmi_munmap+0x245/0x2e0 [ 56.691840][ T1542] move_vma+0xac3/0x1210 [ 56.691851][ T1542] ? vma_expandable+0x100/0x100 [ 56.691862][ T1542] ? cap_mmap_addr+0x169/0x2e0 [ 56.691875][ T1542] ? security_mmap_addr+0x31/0xe0 [ 56.691888][ T1542] mremap_to+0x544/0x610 [ 56.691898][ T1542] __se_sys_mremap+0x898/0x10f0 [ 56.691910][ T1542] ? do_futex+0x32a/0x510 [ 56.691919][ T1542] ? __x64_sys_mremap+0xf0/0xf0 [ 56.691930][ T1542] ? __cfi_do_futex+0x10/0x10 [ 56.691940][ T1542] ? __se_sys_futex+0x13c/0x320 [ 56.691949][ T1542] ? fput+0x1a4/0x230 [ 56.691959][ T1542] ? __x64_sys_futex+0x110/0x110 [ 56.691969][ T1542] ? __cfi_ksys_write+0x10/0x10 [ 56.691982][ T1542] ? __kasan_check_write+0x18/0x20 [ 56.691994][ T1542] ? fpregs_restore_userregs+0x11c/0x260 [ 56.692007][ T1542] __x64_sys_mremap+0xc3/0xf0 [ 56.692018][ T1542] x64_sys_call+0x2ac4/0x2ee0 [ 56.692028][ T1542] do_syscall_64+0x57/0xf0 [ 56.692038][ T1542] ? clear_bhb_loop+0x50/0xa0 [ 56.692051][ T1542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.692067][ T1542] RIP: 0033:0x7f9b05b9f559 [ 56.692077][ T1542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.692085][ T1542] RSP: 002b:00007f9b06a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 56.692098][ T1542] RAX: ffffffffffffffda RBX: 00007f9b05e25fa0 RCX: 00007f9b05b9f559 [ 56.692105][ T1542] RDX: 0000000000002000 RSI: 0000000000001000 RDI: 000020000040b000 [ 56.692112][ T1542] RBP: 00007f9b05c36b20 R08: 000020000000c000 R09: 0000000000000000 [ 56.692119][ T1542] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 56.692125][ T1542] R13: 00007f9b05e26038 R14: 00007f9b05e25fa0 R15: 00007ffec0f7b9a8 [ 56.692158][ T1542] [ 57.015879][ T1112] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 57.151298][ T1112] usb 1-1: device descriptor read/64, error -71 [ 57.297617][ T1552] overlay: Unknown parameter 'mask' [ 57.391319][ T1112] usb 1-1: device descriptor read/64, error -71 [ 57.501408][ T1112] usb usb1-port1: attempt power cycle [ 57.581333][ T934] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.711316][ T934] usb 3-1: device descriptor read/64, error -71 [ 57.851323][ T1112] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 57.872360][ T1112] usb 1-1: device descriptor read/8, error -71 [ 57.961323][ T934] usb 3-1: device descriptor read/64, error -71 [ 58.002329][ T1112] usb 1-1: device descriptor read/8, error -71 [ 58.211321][ T934] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 58.251382][ T1112] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.272390][ T1112] usb 1-1: device descriptor read/8, error -71 [ 58.351319][ T934] usb 3-1: device descriptor read/64, error -71 [ 58.412330][ T1112] usb 1-1: device descriptor read/8, error -71 [ 58.521414][ T1112] usb usb1-port1: unable to enumerate USB device [ 58.558812][ T36] audit: type=1400 audit(1793392844.829:307): avc: denied { mount } for pid=1564 comm="syz.0.454" name="/" dev="configfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.598228][ T36] audit: type=1400 audit(1793392844.869:308): avc: denied { mounton } for pid=1566 comm="syz.0.455" path="/116/proc/308/task/309/fail-nth" dev="proc" ino=13962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 58.632700][ T934] usb 3-1: device descriptor read/64, error -71 [ 58.672777][ T1569] netlink: 388 bytes leftover after parsing attributes in process `syz.0.456'. [ 58.717395][ T36] audit: type=1400 audit(1793392844.989:309): avc: denied { connect } for pid=1572 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.741391][ T934] usb usb3-port1: attempt power cycle [ 58.979625][ T1587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.463'. [ 59.081317][ T934] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.112318][ T934] usb 3-1: device descriptor read/8, error -71 [ 59.242318][ T934] usb 3-1: device descriptor read/8, error -71 [ 59.351301][ T1112] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 59.481300][ T934] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 59.512317][ T934] usb 3-1: device descriptor read/8, error -71 [ 59.512320][ T1112] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.513642][ T1112] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 59.550604][ T1112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.568979][ T1112] usb 1-1: Product: syz [ 59.573431][ T1112] usb 1-1: Manufacturer: syz [ 59.578087][ T1112] usb 1-1: SerialNumber: syz [ 59.596698][ T1112] rtl8150 1-1:1.0: couldn't find required endpoints [ 59.605163][ T1112] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 59.652298][ T934] usb 3-1: device descriptor read/8, error -71 [ 59.761481][ T934] usb usb3-port1: unable to enumerate USB device [ 59.799154][ T1591] batadv_slave_1: entered promiscuous mode [ 59.807733][ T1590] batadv_slave_1: left promiscuous mode [ 59.814015][ T1112] usb 1-1: USB disconnect, device number 16 [ 59.891329][ T384] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 60.042464][ T384] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 60.053757][ T384] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 60.065096][ T384] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.078130][ T384] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.084886][ T384] usb 2-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 60.094245][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.104548][ T384] usb 2-1: config 0 descriptor?? [ 60.109980][ T1595] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.335194][ T384] microsoft 0003:045E:00E3.0008: ignoring exceeding usage max [ 60.367247][ T384] microsoft 0003:045E:00E3.0008: No inputs registered, leaving [ 60.380089][ T384] microsoft 0003:045E:00E3.0008: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.1-1/input0 [ 60.382618][ T1602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 60.400635][ T384] microsoft 0003:045E:00E3.0008: no inputs found [ 60.407174][ T384] microsoft 0003:045E:00E3.0008: could not initialize ff, continuing anyway [ 60.412137][ T1603] udevd[1603]: open /dev/null failed: No such file or directory [ 60.451357][ T1601] overlayfs: statfs failed on './file0' [ 60.489531][ T1610] netlink: 'syz.0.473': attribute type 28 has an invalid length. [ 60.522639][ T1613] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 60.532222][ T36] audit: type=1400 audit(1793392846.809:310): avc: denied { create } for pid=1594 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.541611][ T1613] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 60.599860][ T36] audit: type=1400 audit(1793392846.869:311): avc: denied { connect } for pid=1615 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.648244][ T36] audit: type=1400 audit(1793392846.869:312): avc: denied { write } for pid=1615 comm="syz.0.475" path="socket:[14161]" dev="sockfs" ino=14161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.695523][ T36] audit: type=1400 audit(1793392846.869:313): avc: denied { setopt } for pid=1615 comm="syz.0.475" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.737823][ T36] audit: type=1400 audit(1793392846.869:314): avc: denied { read } for pid=1615 comm="syz.0.475" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.782246][ T36] audit: type=1400 audit(1793392846.869:315): avc: denied { write } for pid=1615 comm="syz.0.475" name="raw" dev="proc" ino=4026532325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.805220][ T36] audit: type=1400 audit(1793392846.969:316): avc: denied { setopt } for pid=1594 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.862548][ T1625] netlink: 'syz.0.478': attribute type 3 has an invalid length. [ 60.870219][ T1625] netlink: 'syz.0.478': attribute type 3 has an invalid length. [ 60.910694][ T1629] netlink: 388 bytes leftover after parsing attributes in process `syz.0.480'. [ 60.995648][ T1633] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 61.009947][ T1633] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 61.077520][ T1639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.485'. [ 61.110500][ T1637] FAULT_INJECTION: forcing a failure. [ 61.110500][ T1637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.124181][ T36] audit: type=1400 audit(1793392847.379:317): avc: denied { write } for pid=1636 comm="syz.0.484" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.147172][ T1637] CPU: 0 UID: 0 PID: 1637 Comm: syz.0.484 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 61.147205][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.147219][ T1637] Call Trace: [ 61.147226][ T1637] [ 61.147233][ T1637] __dump_stack+0x21/0x30 [ 61.147267][ T1637] dump_stack_lvl+0x140/0x1c0 [ 61.147293][ T1637] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.147318][ T1637] dump_stack+0x19/0x20 [ 61.147342][ T1637] should_fail_ex+0x3c2/0x510 [ 61.147360][ T1637] should_fail+0xf/0x20 [ 61.147377][ T1637] should_fail_usercopy+0x1e/0x30 [ 61.147396][ T1637] _copy_from_iter+0x1a6/0x1520 [ 61.147416][ T1637] ? __cfi__copy_from_iter+0x10/0x10 [ 61.147434][ T1637] ? __kasan_check_write+0x18/0x20 [ 61.147458][ T1637] copy_page_from_iter+0x1e5/0x2a0 [ 61.147479][ T1637] pipe_write+0x774/0x18d0 [ 61.147505][ T1637] ? __cfi_pipe_write+0x10/0x10 [ 61.147529][ T1637] ? __cfi_futex_wake+0x10/0x10 [ 61.147549][ T1637] ? expand_files+0xda/0x6f0 [ 61.147570][ T1637] vfs_write+0x762/0xfd0 [ 61.147594][ T1637] ? __cfi_vfs_write+0x10/0x10 [ 61.147620][ T1637] ksys_write+0x145/0x260 [ 61.147643][ T1637] ? xfd_validate_state+0x68/0x140 [ 61.147669][ T1637] ? __cfi_ksys_write+0x10/0x10 [ 61.147692][ T1637] ? __kasan_check_write+0x18/0x20 [ 61.147715][ T1637] ? fpregs_restore_userregs+0x11c/0x260 [ 61.147739][ T1637] __x64_sys_write+0x7f/0x90 [ 61.147762][ T1637] x64_sys_call+0x271c/0x2ee0 [ 61.147781][ T1637] do_syscall_64+0x57/0xf0 [ 61.147800][ T1637] ? clear_bhb_loop+0x50/0xa0 [ 61.147837][ T1637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.147861][ T1637] RIP: 0033:0x7f843039f559 [ 61.147877][ T1637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.147893][ T1637] RSP: 002b:00007f84312a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.147913][ T1637] RAX: ffffffffffffffda RBX: 00007f8430625fa0 RCX: 00007f843039f559 [ 61.147927][ T1637] RDX: 00000000ffffff9a RSI: 0000200000000400 RDI: 000000000000000b [ 61.147940][ T1637] RBP: 00007f8430436b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.147952][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.147964][ T1637] R13: 00007f8430626038 R14: 00007f8430625fa0 R15: 00007ffd23b25248 [ 61.147982][ T1637] [ 61.149018][ T1637] ip_vti0: entered promiscuous mode [ 61.261370][ T36] audit: type=1400 audit(1793392847.419:318): avc: denied { ioctl } for pid=1636 comm="syz.0.484" path="socket:[14845]" dev="sockfs" ino=14845 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.415053][ T934] usb 2-1: USB disconnect, device number 18 [ 61.771333][ T1112] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 61.811469][ T934] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 61.871317][ T384] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 61.921327][ T1112] usb 3-1: Using ep0 maxpacket: 32 [ 61.927667][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.938893][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.949090][ T1112] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.958327][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.969405][ T1112] usb 3-1: config 0 descriptor?? [ 61.972144][ T934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.975504][ T1112] hub 3-1:0.0: USB hub found [ 61.984570][ T934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.997986][ T934] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.007846][ T934] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 62.017013][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.031570][ T384] usb 1-1: Using ep0 maxpacket: 32 [ 62.037672][ T934] hub 2-1:1.0: bad descriptor, ignoring hub [ 62.044129][ T934] hub 2-1:1.0: probe with driver hub failed with error -5 [ 62.051873][ T934] cdc_wdm 2-1:1.0: skipping garbage [ 62.057420][ T934] cdc_wdm 2-1:1.0: skipping garbage [ 62.062782][ T934] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 62.070783][ T384] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 62.082522][ T384] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.096008][ T384] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.102666][ T384] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 62.112545][ T384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.131507][ T384] usb 1-1: config 0 descriptor?? [ 62.175490][ T1112] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 62.351391][ T45] usb 2-1: USB disconnect, device number 19 [ 62.541225][ T384] wacom 0003:056A:00DA.0009: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 62.561452][ T384] wacom 0003:056A:00DA.0009: hidraw0: USB HID v10.01 Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0 [ 62.576425][ T1661] udevd[1661]: open /dev/null failed: No such file or directory [ 62.582298][ T384] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DA.0009/input/input10 [ 62.594922][ T1112] usbhid 3-1:0.0: can't add hid device: -71 [ 62.611290][ T36] audit: type=1400 audit(1793392848.879:319): avc: denied { search } for pid=95 comm="acpid" name="dev" dev="sda1" ino=1262 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 62.632518][ T1112] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.662333][ T1112] usb 3-1: USB disconnect, device number 20 [ 62.742511][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.751212][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.761511][ T384] usb 1-1: USB disconnect, device number 17 [ 63.299718][ T1672] syzkaller1: entered promiscuous mode [ 63.305476][ T1672] syzkaller1: entered allmulticast mode [ 63.440163][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 63.617422][ T1686] FAULT_INJECTION: forcing a failure. [ 63.617422][ T1686] name failslab, interval 1, probability 0, space 0, times 0 [ 63.645466][ T1686] CPU: 1 UID: 0 PID: 1686 Comm: syz.2.504 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 63.645502][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.645515][ T1686] Call Trace: [ 63.645522][ T1686] [ 63.645529][ T1686] __dump_stack+0x21/0x30 [ 63.645563][ T1686] dump_stack_lvl+0x140/0x1c0 [ 63.645590][ T1686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.645615][ T1686] ? crng_make_state+0x157/0x2e0 [ 63.645640][ T1686] dump_stack+0x19/0x20 [ 63.645664][ T1686] should_fail_ex+0x3c2/0x510 [ 63.645684][ T1686] should_failslab+0xac/0x100 [ 63.645703][ T1686] __kmalloc_cache_noprof+0x41/0x470 [ 63.645728][ T1686] ? assoc_array_insert+0x9b/0x3660 [ 63.645748][ T1686] assoc_array_insert+0x9b/0x3660 [ 63.645765][ T1686] ? key_set_index_key+0x390/0x550 [ 63.645799][ T1686] ? __kasan_check_write+0x18/0x20 [ 63.645823][ T1686] ? mutex_lock+0x97/0x1d0 [ 63.645848][ T1686] ? __cfi_mutex_lock+0x10/0x10 [ 63.645873][ T1686] ? __cfi_key_set_index_key+0x10/0x10 [ 63.645895][ T1686] __key_link_begin+0xe5/0x220 [ 63.645919][ T1686] __key_create_or_update+0x4dd/0xa90 [ 63.645941][ T1686] ? security_key_permission+0x3d/0x100 [ 63.645965][ T1686] ? key_create_or_update+0x70/0x70 [ 63.645989][ T1686] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 63.646010][ T1686] key_create_or_update+0x47/0x70 [ 63.646031][ T1686] __se_sys_add_key+0x355/0x4b0 [ 63.646057][ T1686] ? __x64_sys_add_key+0xf0/0xf0 [ 63.646082][ T1686] ? __kasan_check_write+0x18/0x20 [ 63.646104][ T1686] ? fpregs_restore_userregs+0x11c/0x260 [ 63.646127][ T1686] __x64_sys_add_key+0xc3/0xf0 [ 63.646151][ T1686] x64_sys_call+0x195f/0x2ee0 [ 63.646170][ T1686] do_syscall_64+0x57/0xf0 [ 63.646186][ T1686] ? clear_bhb_loop+0x50/0xa0 [ 63.646210][ T1686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.646235][ T1686] RIP: 0033:0x7ff6d159f559 [ 63.646251][ T1686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.646265][ T1686] RSP: 002b:00007ff6d23d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 63.646286][ T1686] RAX: ffffffffffffffda RBX: 00007ff6d1825fa0 RCX: 00007ff6d159f559 [ 63.646300][ T1686] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 00002000000003c0 [ 63.646314][ T1686] RBP: 00007ff6d1636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 63.646327][ T1686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.646339][ T1686] R13: 00007ff6d1826038 R14: 00007ff6d1825fa0 R15: 00007fff823b8d48 [ 63.646355][ T1686] [ 64.058298][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 64.149241][ T1716] netlink: 'syz.1.510': attribute type 4 has an invalid length. [ 64.190717][ T1716] netlink: 'syz.1.510': attribute type 4 has an invalid length. [ 64.273830][ T1721] FAULT_INJECTION: forcing a failure. [ 64.273830][ T1721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.308527][ T1721] CPU: 1 UID: 0 PID: 1721 Comm: syz.1.513 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 64.308557][ T1721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.308568][ T1721] Call Trace: [ 64.308574][ T1721] [ 64.308581][ T1721] __dump_stack+0x21/0x30 [ 64.308612][ T1721] dump_stack_lvl+0x140/0x1c0 [ 64.308648][ T1721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.308674][ T1721] ? check_stack_object+0x10f/0x150 [ 64.308701][ T1721] dump_stack+0x19/0x20 [ 64.308725][ T1721] should_fail_ex+0x3c2/0x510 [ 64.308742][ T1721] should_fail+0xf/0x20 [ 64.308759][ T1721] should_fail_usercopy+0x1e/0x30 [ 64.308777][ T1721] _copy_from_user+0x20/0xa0 [ 64.308799][ T1721] kstrtouint_from_user+0xde/0x170 [ 64.308815][ T1721] ? __x64_sys_openat+0x13a/0x170 [ 64.308837][ T1721] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 64.308854][ T1721] ? selinux_file_permission+0x318/0xb60 [ 64.308878][ T1721] ? __cfi_selinux_file_permission+0x10/0x10 [ 64.308903][ T1721] proc_fail_nth_write+0x8f/0x220 [ 64.308925][ T1721] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.308945][ T1721] ? bpf_lsm_file_permission+0xd/0x20 [ 64.308966][ T1721] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.308986][ T1721] vfs_write+0x3c4/0xfd0 [ 64.309010][ T1721] ? __cfi_vfs_write+0x10/0x10 [ 64.309033][ T1721] ? __kasan_check_write+0x18/0x20 [ 64.309056][ T1721] ? mutex_lock+0x97/0x1d0 [ 64.309078][ T1721] ? __cfi_mutex_lock+0x10/0x10 [ 64.309103][ T1721] ksys_write+0x145/0x260 [ 64.309127][ T1721] ? __cfi_ksys_write+0x10/0x10 [ 64.309149][ T1721] ? __kasan_check_read+0x15/0x20 [ 64.309172][ T1721] __x64_sys_write+0x7f/0x90 [ 64.309197][ T1721] x64_sys_call+0x271c/0x2ee0 [ 64.309215][ T1721] do_syscall_64+0x57/0xf0 [ 64.309235][ T1721] ? clear_bhb_loop+0x50/0xa0 [ 64.309259][ T1721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.309282][ T1721] RIP: 0033:0x7f41c835fd8e [ 64.309300][ T1721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.309314][ T1721] RSP: 002b:00007f41c9244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.309336][ T1721] RAX: ffffffffffffffda RBX: 00007f41c92456c0 RCX: 00007f41c835fd8e [ 64.309350][ T1721] RDX: 0000000000000002 RSI: 00007f41c9245090 RDI: 0000000000000006 [ 64.309364][ T1721] RBP: 00007f41c9245090 R08: 0000000000000000 R09: 0000000000000000 [ 64.309375][ T1721] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 64.309386][ T1721] R13: 00007f41c8626038 R14: 00007f41c8625fa0 R15: 00007ffe244e6448 [ 64.309403][ T1721] [ 64.631359][ T1725] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 64.653592][ T1727] hub 1-0:1.0: USB hub found [ 64.662713][ T1727] hub 1-0:1.0: 1 port detected [ 64.668457][ T1725] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 64.724291][ T1730] netlink: 388 bytes leftover after parsing attributes in process `syz.0.517'. [ 64.779428][ T1733] rust_binder: Write failure EFAULT in pid:267 [ 64.834722][ T1744] syzkaller1: entered promiscuous mode [ 64.857943][ T1744] syzkaller1: entered allmulticast mode [ 64.870492][ T1746] overlayfs: failed to resolve './file1/file0': -2 [ 64.945469][ T1754] loop5: detected capacity change from 0 to 7 [ 64.953093][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 64.953623][ T414] udevd[414]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 65.002354][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 65.062484][ T1767] pim6reg1: entered promiscuous mode [ 65.068081][ T1767] pim6reg1: entered allmulticast mode [ 65.221319][ T311] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 65.372426][ T311] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 65.380813][ T311] usb 2-1: config 0 has no interface number 0 [ 65.388677][ T311] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 65.397925][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.406392][ T311] usb 2-1: Product: syz [ 65.410707][ T311] usb 2-1: Manufacturer: syz [ 65.415602][ T311] usb 2-1: SerialNumber: syz [ 65.423946][ T311] usb 2-1: config 0 descriptor?? [ 65.594420][ T1774] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 65.608218][ T1774] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 65.928556][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 65.928573][ T36] audit: type=1400 audit(1793392852.199:324): avc: denied { create } for pid=1789 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.954136][ T36] audit: type=1400 audit(1793392852.199:325): avc: denied { setcurrent } for pid=1789 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.981082][ T36] audit: type=1400 audit(1793392852.199:326): avc: denied { lock } for pid=1789 comm="syz.0.540" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.030524][ T311] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 66.051266][ T311] asix 2-1:0.251: probe with driver asix failed with error -524 [ 66.075074][ T1803] fuse: Bad value for 'fd' [ 66.268295][ T1807] netlink: 'syz.2.545': attribute type 3 has an invalid length. [ 66.276247][ T1807] netlink: 'syz.2.545': attribute type 3 has an invalid length. [ 66.285052][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.293798][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.304449][ T934] usb 2-1: USB disconnect, device number 20 [ 66.318751][ T414] udevd[414]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 66.330566][ T414] udevd[414]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 66.561305][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 66.712456][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.723524][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.733793][ T311] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 66.743077][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.752034][ T311] usb 3-1: config 0 descriptor?? [ 67.023937][ T1819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 67.173076][ T311] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 67.180519][ T311] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 67.211322][ T311] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 67.218751][ T311] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 67.231485][ T311] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 67.239823][ T311] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 67.252169][ T1823] udevd[1823]: open /dev/null failed: No such file or directory [ 67.371915][ T311] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 20 got 0 [ 67.391326][ T311] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 67.411511][ T311] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 67.420277][ T311] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 67.428827][ T311] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 67.575043][ T311] usb 3-1: USB disconnect, device number 21 [ 68.063629][ T1839] netlink: 388 bytes leftover after parsing attributes in process `syz.1.556'. [ 68.089308][ T1841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.557'. [ 68.104852][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 68.127485][ T1845] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 68.140370][ T1845] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 68.187998][ T1849] syzkaller1: entered promiscuous mode [ 68.199249][ T1849] syzkaller1: entered allmulticast mode [ 68.243528][ T1851] netlink: 'syz.2.562': attribute type 3 has an invalid length. [ 68.251201][ T1851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 68.351848][ T1867] FAULT_INJECTION: forcing a failure. [ 68.351848][ T1867] name failslab, interval 1, probability 0, space 0, times 0 [ 68.364884][ T1867] CPU: 0 UID: 0 PID: 1867 Comm: syz.2.569 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 68.364917][ T1867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.364931][ T1867] Call Trace: [ 68.364937][ T1867] [ 68.364944][ T1867] __dump_stack+0x21/0x30 [ 68.364979][ T1867] dump_stack_lvl+0x140/0x1c0 [ 68.365006][ T1867] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.365034][ T1867] ? __d_add+0x636/0xac0 [ 68.365059][ T1867] dump_stack+0x19/0x20 [ 68.365084][ T1867] should_fail_ex+0x3c2/0x510 [ 68.365103][ T1867] should_failslab+0xac/0x100 [ 68.365122][ T1867] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 68.365147][ T1867] ? __d_alloc+0x42/0x8c0 [ 68.365170][ T1867] __d_alloc+0x42/0x8c0 [ 68.365192][ T1867] d_alloc_parallel+0xe4/0x1370 [ 68.365215][ T1867] ? make_vfsuid+0x4d/0xa0 [ 68.365239][ T1867] ? __kasan_check_write+0x18/0x20 [ 68.365262][ T1867] ? security_inode_permission+0x77/0x150 [ 68.365283][ T1867] ? downgrade_write+0x470/0x470 [ 68.365304][ T1867] ? __d_lookup+0x4e8/0x550 [ 68.365329][ T1867] ? __cfi_d_alloc_parallel+0x10/0x10 [ 68.365353][ T1867] ? down_read+0x7f/0xe0 [ 68.365376][ T1867] ? __cfi_down_read+0x10/0x10 [ 68.365401][ T1867] path_openat+0xa09/0x35a0 [ 68.365423][ T1867] ? x64_sys_call+0xe69/0x2ee0 [ 68.365443][ T1867] ? do_filp_open+0x440/0x440 [ 68.365461][ T1867] do_filp_open+0x1f2/0x440 [ 68.365478][ T1867] ? __cfi_do_filp_open+0x10/0x10 [ 68.365498][ T1867] ? __cfi_kfree_link+0x10/0x10 [ 68.365520][ T1867] ? alloc_fd+0x4c1/0x570 [ 68.365546][ T1867] do_sys_openat2+0x134/0x1d0 [ 68.365568][ T1867] ? do_sys_open+0x100/0x100 [ 68.365589][ T1867] __x64_sys_openat+0x13a/0x170 [ 68.365611][ T1867] x64_sys_call+0xe69/0x2ee0 [ 68.365628][ T1867] do_syscall_64+0x57/0xf0 [ 68.365647][ T1867] ? clear_bhb_loop+0x50/0xa0 [ 68.365671][ T1867] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.365695][ T1867] RIP: 0033:0x7ff6d155fd8e [ 68.365711][ T1867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.365727][ T1867] RSP: 002b:00007ff6d23d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.365747][ T1867] RAX: ffffffffffffffda RBX: 00007ff6d23d56c0 RCX: 00007ff6d155fd8e [ 68.365762][ T1867] RDX: 0000000000000002 RSI: 00007ff6d23d4f90 RDI: ffffffffffffff9c [ 68.365786][ T1867] RBP: 00007ff6d1636b20 R08: 0000000000000000 R09: 0000000000000000 [ 68.365798][ T1867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.365810][ T1867] R13: 00007ff6d1826038 R14: 00007ff6d1825fa0 R15: 00007fff823b8d48 [ 68.365827][ T1867] [ 68.697226][ T1873] netlink: 388 bytes leftover after parsing attributes in process `syz.2.572'. [ 68.780507][ T1886] bpf: Bad value for 'gid' [ 68.873658][ T1886] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.881814][ T1886] rust_binder: Read failure Err(EFAULT) in pid:328 [ 69.001851][ T1899] netlink: 'syz.0.582': attribute type 11 has an invalid length. [ 69.012989][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 69.041962][ T36] audit: type=1400 audit(1793392855.319:327): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.121157][ T45] rust_binder: 1885: undelivered death notification, 0000000000000000 [ 69.190157][ T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.204420][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.218810][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.231282][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.239403][ T311] usb 2-1: SerialNumber: syz [ 69.245350][ T1882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.290410][ T1911] syzkaller1: entered promiscuous mode [ 69.295964][ T1911] syzkaller1: entered allmulticast mode [ 69.456079][ T1882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.472715][ T1928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.484276][ T1927] bpf: Bad value for 'gid' [ 69.496503][ T1928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.523681][ T311] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -32 [ 69.653809][ T36] audit: type=1400 audit(1793392855.929:328): avc: denied { cmd } for pid=1938 comm="iou-wrk-1939" path="socket:[17686]" dev="sockfs" ino=17686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.716850][ T1943] __nla_validate_parse: 2 callbacks suppressed [ 69.716870][ T1943] netlink: 388 bytes leftover after parsing attributes in process `syz.2.597'. [ 69.942480][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 69.973060][ T1956] FAULT_INJECTION: forcing a failure. [ 69.973060][ T1956] name failslab, interval 1, probability 0, space 0, times 0 [ 69.985869][ T1956] CPU: 1 UID: 0 PID: 1956 Comm: syz.2.602 Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 69.985901][ T1956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.985912][ T1956] Call Trace: [ 69.985918][ T1956] [ 69.985925][ T1956] __dump_stack+0x21/0x30 [ 69.985953][ T1956] dump_stack_lvl+0x140/0x1c0 [ 69.985977][ T1956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.986000][ T1956] ? proc_pident_instantiate+0x6d/0x2c0 [ 69.986019][ T1956] ? do_filp_open+0x1f2/0x440 [ 69.986037][ T1956] ? __x64_sys_openat+0x13a/0x170 [ 69.986057][ T1956] ? x64_sys_call+0xe69/0x2ee0 [ 69.986074][ T1956] ? do_syscall_64+0x57/0xf0 [ 69.986093][ T1956] dump_stack+0x19/0x20 [ 69.986114][ T1956] should_fail_ex+0x3c2/0x510 [ 69.986133][ T1956] should_failslab+0xac/0x100 [ 69.986150][ T1956] kmem_cache_alloc_noprof+0x42/0x410 [ 69.986173][ T1956] ? vm_area_dup+0x3f/0x560 [ 69.986195][ T1956] vm_area_dup+0x3f/0x560 [ 69.986214][ T1956] ? __split_vma+0x1b8/0xc10 [ 69.986238][ T1956] __split_vma+0x1ce/0xc10 [ 69.986261][ T1956] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 69.986286][ T1956] ? mas_find+0x415/0x620 [ 69.986309][ T1956] vms_gather_munmap_vmas+0x446/0xd90 [ 69.986333][ T1956] mmap_region+0x621/0x1d10 [ 69.986355][ T1956] ? __kernel_text_address+0x11/0x40 [ 69.986379][ T1956] ? unwind_get_return_address+0x51/0x90 [ 69.986401][ T1956] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.986426][ T1956] ? __cfi_mmap_region+0x10/0x10 [ 69.986450][ T1956] ? __kasan_check_read+0x15/0x20 [ 69.986471][ T1956] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 69.986496][ T1956] ? shmem_mapping+0x11/0x50 [ 69.986518][ T1956] do_mmap+0xa47/0x1370 [ 69.986540][ T1956] ? __cfi_do_mmap+0x10/0x10 [ 69.986560][ T1956] ? __kasan_check_write+0x18/0x20 [ 69.986582][ T1956] ? down_write_killable+0xee/0x2d0 [ 69.986612][ T1956] ? __cfi_down_write_killable+0x10/0x10 [ 69.986636][ T1956] vm_mmap_pgoff+0x367/0x4b0 [ 69.986657][ T1956] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 69.986678][ T1956] ? __fget_files+0x2bc/0x330 [ 69.986697][ T1956] ksys_mmap_pgoff+0x165/0x1e0 [ 69.986719][ T1956] __x64_sys_mmap+0x121/0x140 [ 69.986737][ T1956] x64_sys_call+0x13bf/0x2ee0 [ 69.986754][ T1956] do_syscall_64+0x57/0xf0 [ 69.986772][ T1956] ? clear_bhb_loop+0x50/0xa0 [ 69.986796][ T1956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.986818][ T1956] RIP: 0033:0x7ff6d159f559 [ 69.986834][ T1956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.986848][ T1956] RSP: 002b:00007ff6d23d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.986871][ T1956] RAX: ffffffffffffffda RBX: 00007ff6d1825fa0 RCX: 00007ff6d159f559 [ 69.986885][ T1956] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000000000 [ 69.986896][ T1956] RBP: 00007ff6d23d5090 R08: 0000000000000003 R09: 0000000100000000 [ 69.986909][ T1956] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 69.986920][ T1956] R13: 00007ff6d1826038 R14: 00007ff6d1825fa0 R15: 00007fff823b8d48 [ 69.986936][ T1956] [ 70.181326][ T384] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 70.451295][ T384] usb 1-1: Using ep0 maxpacket: 16 [ 70.461975][ T384] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.472146][ T384] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.483046][ T384] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.495385][ T384] usb 1-1: string descriptor 0 read error: -71 [ 70.502492][ T384] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.511576][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 70.531966][ T384] usb 1-1: can't set config #1, error -71 [ 70.542504][ T384] usb 1-1: USB disconnect, device number 18 [ 71.037340][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.046772][ T1966] bpf: Bad value for 'mode' [ 71.055255][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.063048][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.070305][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.077769][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.085167][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.092527][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.100745][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.121562][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.132807][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.140093][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.156079][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.164944][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.172289][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.179535][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.190604][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.208030][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.215931][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.223381][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.230578][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.238696][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.246048][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.257623][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.273202][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.283347][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.290959][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.299941][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.309224][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.316923][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.326822][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.334080][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.341363][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.348568][ T1964] overlayfs: conflicting options: userxattr,metacopy=on [ 71.369186][ T36] audit: type=1400 audit(1793392857.639:329): avc: denied { mounton } for pid=1975 comm="syz.2.608" path="/139/file0/config" dev="ramfs" ino=17211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 71.421391][ T36] audit: type=1400 audit(1793392857.639:330): avc: denied { search } for pid=1975 comm="syz.2.608" name="/" dev="configfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.454693][ T36] audit: type=1400 audit(1793392857.639:331): avc: denied { write } for pid=1975 comm="syz.2.608" name="usb_gadget" dev="configfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.490484][ T36] audit: type=1400 audit(1793392857.639:332): avc: denied { add_name } for pid=1975 comm="syz.2.608" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.510898][ T36] audit: type=1400 audit(1793392857.639:333): avc: denied { create } for pid=1975 comm="syz.2.608" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 71.595236][ T36] audit: type=1400 audit(1793392857.869:334): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.615411][ T296] ------------[ cut here ]------------ [ 71.620897][ T296] WARNING: CPU: 0 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 71.628843][ T296] Modules linked in: [ 71.632780][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 71.644777][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.654976][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 71.660023][ T296] Code: 04 00 00 be 08 00 00 00 e8 8f 08 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a2 72 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 71.679695][ T296] RSP: 0018:ffffc9000b6cfc68 EFLAGS: 00010293 [ 71.685789][ T296] RAX: ffffffff81f4e32e RBX: ffff88811c20a700 RCX: ffff88810270cf00 [ 71.693803][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.701886][ T296] RBP: ffffc9000b6cfc90 R08: 0000000000000003 R09: 0000000000000004 [ 71.710014][ T296] R10: dffffc0000000000 R11: fffff520016d9f84 R12: dffffc0000000000 [ 71.718031][ T296] R13: 1ffff110238414e9 R14: ffff88811c20a748 R15: 0000000000000000 [ 71.726034][ T296] FS: 00005555685a9500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 71.735202][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.741819][ T296] CR2: 00005555685d4998 CR3: 000000012ae18000 CR4: 00000000003526b0 [ 71.749817][ T296] Call Trace: [ 71.753153][ T296] [ 71.756105][ T296] simple_rmdir+0x152/0x260 [ 71.760632][ T296] vfs_rmdir+0x3de/0x560 [ 71.764937][ T296] incfs_kill_sb+0x102/0x220 [ 71.768708][ T1112] usb 2-1: USB disconnect, device number 21 [ 71.769547][ T296] deactivate_locked_super+0xd5/0x270 [ 71.780857][ T296] deactivate_super+0xb8/0xe0 [ 71.785581][ T296] cleanup_mnt+0x438/0x4d0 [ 71.790018][ T296] __cleanup_mnt+0x1d/0x40 [ 71.794477][ T296] task_work_run+0x1e8/0x260 [ 71.799082][ T296] ? __cfi_task_work_run+0x10/0x10 [ 71.804239][ T296] ? __x64_sys_umount+0x12e/0x180 [ 71.809451][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 71.814887][ T296] ? __kasan_check_read+0x15/0x20 [ 71.819922][ T296] resume_user_mode_work+0x35/0x50 [ 71.825118][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 71.830589][ T296] do_syscall_64+0x63/0xf0 [ 71.835493][ T296] ? clear_bhb_loop+0x50/0xa0 [ 71.840179][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.846157][ T296] RIP: 0033:0x7ff6d15a0797 [ 71.850588][ T296] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 71.870236][ T296] RSP: 002b:00007fff823b6ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.878738][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6d15a0797 [ 71.886763][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff823b6f80 [ 71.894770][ T296] RBP: 00007fff823b6f80 R08: 00007fff823b7f80 R09: 00000000ffffffff [ 71.902782][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff823b8070 [ 71.910779][ T296] R13: 00007ff6d1635f63 R14: 000000000001174b R15: 00007fff823b9140 [ 71.918818][ T296] [ 71.921867][ T296] ---[ end trace 0000000000000000 ]--- [ 71.928454][ T296] ================================================================== [ 71.936540][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 71.942802][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 71.950789][ T296] [ 71.953230][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 71.953263][ T296] Tainted: [W]=WARN [ 71.953270][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.953282][ T296] Call Trace: [ 71.953289][ T296] [ 71.953296][ T296] __dump_stack+0x21/0x30 [ 71.953326][ T296] dump_stack_lvl+0x140/0x1c0 [ 71.953351][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.953377][ T296] print_report+0x3d/0x70 [ 71.953401][ T296] kasan_report+0x162/0x1a0 [ 71.953419][ T296] ? ihold+0x24/0x70 [ 71.953437][ T296] ? ihold+0x24/0x70 [ 71.953453][ T296] kasan_check_range+0x25a/0x2b0 [ 71.953473][ T296] __kasan_check_write+0x18/0x20 [ 71.953494][ T296] ihold+0x24/0x70 [ 71.953510][ T296] vfs_rmdir+0x25c/0x560 [ 71.953530][ T296] incfs_kill_sb+0x102/0x220 [ 71.953554][ T296] deactivate_locked_super+0xd5/0x270 [ 71.953574][ T296] deactivate_super+0xb8/0xe0 [ 71.953593][ T296] cleanup_mnt+0x438/0x4d0 [ 71.953610][ T296] __cleanup_mnt+0x1d/0x40 [ 71.953626][ T296] task_work_run+0x1e8/0x260 [ 71.953649][ T296] ? __cfi_task_work_run+0x10/0x10 [ 71.953670][ T296] ? __x64_sys_umount+0x12e/0x180 [ 71.953691][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 71.953712][ T296] ? __kasan_check_read+0x15/0x20 [ 71.953734][ T296] resume_user_mode_work+0x35/0x50 [ 71.953754][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 71.953779][ T296] do_syscall_64+0x63/0xf0 [ 71.953797][ T296] ? clear_bhb_loop+0x50/0xa0 [ 71.953820][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.953843][ T296] RIP: 0033:0x7ff6d15a0797 [ 71.953860][ T296] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 71.953875][ T296] RSP: 002b:00007fff823b6ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.953895][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6d15a0797 [ 71.953907][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff823b6f80 [ 71.953918][ T296] RBP: 00007fff823b6f80 R08: 00007fff823b7f80 R09: 00000000ffffffff [ 71.953932][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff823b8070 [ 71.953944][ T296] R13: 00007ff6d1635f63 R14: 000000000001174b R15: 00007fff823b9140 [ 71.953959][ T296] [ 71.953966][ T296] ================================================================== [ 72.194393][ T296] Disabling lock debugging due to kernel taint [ 72.200589][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 72.208483][ T296] #PF: supervisor write access in kernel mode [ 72.214551][ T296] #PF: error_code(0x0002) - not-present page [ 72.220537][ T296] PGD 800000011036e067 P4D 800000011036e067 PUD 0 [ 72.227064][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 72.233147][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 04b5f10b80d13b0533bf6aaa302b886c75cf6d37 [ 72.246277][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 72.251303][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.261391][ T296] RIP: 0010:ihold+0x2a/0x70 [ 72.265927][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 69 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 4c ff ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 72.285545][ T296] RSP: 0018:ffffc9000b6cfcc8 EFLAGS: 00010246 [ 72.291716][ T296] RAX: ffff88810270cf00 RBX: 0000000000000000 RCX: ffff88810270cf00 [ 72.299710][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.307690][ T296] RBP: ffffc9000b6cfcd8 R08: ffffffff893cf947 R09: 1ffffffff1279f28 [ 72.315676][ T296] R10: dffffc0000000000 R11: fffffbfff1279f29 R12: 0000000000000000 [ 72.323662][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 72.331649][ T296] FS: 00005555685a9500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 72.340597][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.347195][ T296] CR2: 0000000000000168 CR3: 000000012ae18000 CR4: 00000000003526b0 [ 72.355183][ T296] Call Trace: [ 72.358473][ T296] [ 72.361409][ T296] vfs_rmdir+0x25c/0x560 [ 72.365672][ T296] incfs_kill_sb+0x102/0x220 [ 72.370281][ T296] deactivate_locked_super+0xd5/0x270 [ 72.375664][ T296] deactivate_super+0xb8/0xe0 [ 72.380353][ T296] cleanup_mnt+0x438/0x4d0 [ 72.384786][ T296] __cleanup_mnt+0x1d/0x40 [ 72.389210][ T296] task_work_run+0x1e8/0x260 [ 72.393814][ T296] ? __cfi_task_work_run+0x10/0x10 [ 72.398942][ T296] ? __x64_sys_umount+0x12e/0x180 [ 72.403979][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 72.409365][ T296] ? __kasan_check_read+0x15/0x20 [ 72.414415][ T296] resume_user_mode_work+0x35/0x50 [ 72.419536][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 72.425010][ T296] do_syscall_64+0x63/0xf0 [ 72.429441][ T296] ? clear_bhb_loop+0x50/0xa0 [ 72.434135][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.440045][ T296] RIP: 0033:0x7ff6d15a0797 [ 72.444468][ T296] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 72.464086][ T296] RSP: 002b:00007fff823b6ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.472514][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6d15a0797 [ 72.480504][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff823b6f80 [ 72.488497][ T296] RBP: 00007fff823b6f80 R08: 00007fff823b7f80 R09: 00000000ffffffff [ 72.496482][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff823b8070 [ 72.504475][ T296] R13: 00007ff6d1635f63 R14: 000000000001174b R15: 00007fff823b9140 [ 72.512463][ T296] [ 72.515497][ T296] Modules linked in: [ 72.519422][ T296] CR2: 0000000000000168 [ 72.523576][ T296] ---[ end trace 0000000000000000 ]--- [ 72.529034][ T296] RIP: 0010:ihold+0x2a/0x70 [ 72.533558][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 8d 69 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 4c ff ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 9d [ 72.553259][ T296] RSP: 0018:ffffc9000b6cfcc8 EFLAGS: 00010246 [ 72.559432][ T296] RAX: ffff88810270cf00 RBX: 0000000000000000 RCX: ffff88810270cf00 [ 72.567419][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.575403][ T296] RBP: ffffc9000b6cfcd8 R08: ffffffff893cf947 R09: 1ffffffff1279f28 [ 72.583392][ T296] R10: dffffc0000000000 R11: fffffbfff1279f29 R12: 0000000000000000 [ 72.591382][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 72.599365][ T296] FS: 00005555685a9500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 72.608307][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.614900][ T296] CR2: 0000000000000168 CR3: 000000012ae18000 CR4: 00000000003526b0 [ 72.622891][ T296] Kernel panic - not syncing: Fatal exception [ 72.629238][ T296] Kernel Offset: disabled [ 72.633554][ T296] Rebooting in 86400 seconds..