last executing test programs: 26.336971816s ago: executing program 3 (id=402): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)=ANY=[], 0x2a) 26.336093996s ago: executing program 3 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = eventfd(0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x804) write$eventfd(r5, &(0x7f00000000c0)=0x4, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, r2, 0x27cc2000) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x16) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000001040)={0x3, 0x0, [{0x80000007, 0x10, 0x4, 0xffff8a4f, 0x7, 0x41f, 0x9}, {0xa, 0x3, 0x4, 0x7, 0x5, 0x10000, 0x6}, {0x6, 0xfffffff6, 0x2, 0xc, 0x3, 0x4, 0x9}]}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000180)={0xe18, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xdec, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff62c942c8f316126075b51975cacc9506b595122107502b423c875e3df2df13"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c4904703965ff0903b21cf79ade0b94e638681b48f31f6ea60e6d8b1412ca407"}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6262699a3e1c6bb7e3d2fc26751a9364deb0ebdd93218f069e94c7d1e40256c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "45b5ca35607db44becaa02ea3c73a7d10ecb39a14fb59f2e108f216f05812142"}]}, {0x368, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_ALLOWEDIPS={0x350, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4da1c774}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "09473f6748f35ca9a9eaff93d265fe48565be846bb9c403fa5565bbae70e91de"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f6461cc1fab30a726aeead102b4ffab6b3c7ae958e2a11d9a449ad868762104"}]}, {0x6b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x19c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0xfe}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x50c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xad}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0xe18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 26.291899127s ago: executing program 3 (id=404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e0ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d", 0x24}, {0x0}], 0x2}}], 0x1, 0x4c000) 26.291466747s ago: executing program 3 (id=405): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x13b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) (fail_nth: 11) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$inet6_tcp(0xa, 0x1, 0x0) 26.234993678s ago: executing program 3 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='196\n\x00', 0x4) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000100)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/169, 0xa9}], 0x2}, 0x9c4e6df51fb592af) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xf2, 0x3}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x4, 0xe9, 0x4, 0xfc, 0x38}}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000}) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r10, r10, 0x0, 0x2000009) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000200)="0f23f2640f7889c5b90f16b30080b81e018ed00f7941090f20e06635200000000f22e00fc7b300003c340fae4d89f20f120a", 0x32}], 0xaaaaaaaaaaaaaee, 0x47, 0x0, 0x0) 25.925338645s ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{r1, r2/1000+60000}, {r3, r4/1000+60000}}, 0x100) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x128}) openat$incfs(r5, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 10.519274556s ago: executing program 32 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{r1, r2/1000+60000}, {r3, r4/1000+60000}}, 0x100) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x128}) openat$incfs(r5, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.912443939s ago: executing program 1 (id=606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 2.912115259s ago: executing program 1 (id=607): r0 = inotify_init() r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) syz_ublk_setup_io_uring(0x2e15, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x5, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x763, 0x201a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x20, 0xe, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x79}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x2, 0x9, {0xa, 0x25, 0x25, 0x40004, 0x5, 0x15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x80, 0x3, {0xa, 0x25, 0x25, 0x0, 0xb}}}}}}}}]}}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x145}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r12 = dup(r11) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x40000002, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0xfffc, 0xff, 0x8, 0x25, 0x4, 0xf0, 0x5, 0xf, 0x4, 0x6, 0x4, 0xc19}, {0xffffff01, 0x8, 0x9, 0x60, 0x9, 0x6, 0xe, 0xf8, 0x2, 0x67, 0x2, 0x4, 0x2}, {0x5, 0x0, 0xa, 0x2, 0x8, 0x1, 0x7f, 0x6, 0x65, 0x8, 0x2a, 0xde}], 0xffffffff}) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000022c0211"], 0x27c}}, 0x0) setsockopt$inet_opts(r4, 0x29, 0x6, &(0x7f0000000380)='\a', 0x1) r13 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r14, 0x204) r15 = socket$netlink(0x10, 0x3, 0x4) writev(r15, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, 0x0) 1.830870616s ago: executing program 2 (id=614): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x804c7, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c540, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x80a0000, 0x4, 0xffffffffffffffff, 0x6}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$cgroup_ro(r4, &(0x7f0000001200)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) unshare(0x62020680) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1.824884116s ago: executing program 2 (id=615): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)}, 0x20060) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = inotify_init() r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) syz_ublk_setup_io_uring(0x2e15, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, 0x0, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff200000000000000058000b4824ca945f64009400ff0325010ebc00000000000089a400f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x5fef6bec6acdc423}], 0x1) read(r0, 0x0, 0x0) 1.799833836s ago: executing program 0 (id=616): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) unshare(0x60000600) r1 = timerfd_create(0x1, 0x80000) timerfd_gettime(r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) 1.730931698s ago: executing program 0 (id=617): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.713736839s ago: executing program 2 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 1.696329249s ago: executing program 2 (id=619): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x13b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) (fail_nth: 12) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$inet6_tcp(0xa, 0x1, 0x0) 1.434065285s ago: executing program 2 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x309, 0x7c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x81) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x309, 0x7c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x81) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041044}, 0x44044) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041044}, 0x44044) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280)={0x81, 0xac73, 0xa66, 0x5cd9, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004850}, 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x101001, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000480)) ioctl$FIBMAP(r4, 0x1, &(0x7f00000004c0)=0x1775) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "8f92c856fbf94a895d01d7f3a398660cd832ce50971599d2cf37e17eac54533997eb5c9007e92873860095740e90b905977b0c539785a4c7a1394d479dfbff550c1a97ab49ef49e1cbd0ff4d813954986e703a7c4cea27364bb101502dc77a919a0a625904ab2b", ["", "", "", "", "", "", ""]}, 0x78}}, 0x20004000) (async) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "8f92c856fbf94a895d01d7f3a398660cd832ce50971599d2cf37e17eac54533997eb5c9007e92873860095740e90b905977b0c539785a4c7a1394d479dfbff550c1a97ab49ef49e1cbd0ff4d813954986e703a7c4cea27364bb101502dc77a919a0a625904ab2b", ["", "", "", "", "", "", ""]}, 0x78}}, 0x20004000) syz_ublk_setup_io_uring(0x429a, &(0x7f0000000640)={0x0, 0xbd9e, 0x2, 0x1, 0x2cc, 0x0, r4}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) (async) syz_ublk_setup_io_uring(0x429a, &(0x7f0000000640)={0x0, 0xbd9e, 0x2, 0x1, 0x2cc, 0x0, r4}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) landlock_create_ruleset(&(0x7f0000000780)={0x2, 0x4, 0x5, 0x10000, 0x8, 0x1}, 0x30, 0x3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r5, r2, &(0x7f00000007c0)=0xffffffffffffffff, 0x2) sendto$inet_nvme_of_msg(r4, &(0x7f0000000840)={@data_h2c_no_hdigest={{0x6, 0x1, 0x18, 0x18, 0x1}, 0x101, 0xfff, 0x40, 0x8, "941b3063"}, @val=&(0x7f0000000800)="5d98dea8ec8094c60e27f3297f801cb2ef3b9bcc15eec8a07683371b"}, 0x88, 0x0, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000900)={0x0, r4, r5, 0x5, 0x2, '\x00', {0x8, 0x30, 0xd5, 0x0, 0x6, 0x1, 0x0, 0x8, {0x4, 0x7}, {0x10000, 0x1000}, {0xfa, 0x6}, 0x5, 0x6, 0x200, 0x42, 0x4, 0x5, 0xdd, 0x0, 0x3, 0x1, '\x00', 0x0, 0x9, 0x1, 0x7}}) (async) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000900)={0x0, r4, r5, 0x5, 0x2, '\x00', {0x8, 0x30, 0xd5, 0x0, 0x6, 0x1, 0x0, 0x8, {0x4, 0x7}, {0x10000, 0x1000}, {0xfa, 0x6}, 0x5, 0x6, 0x200, 0x42, 0x4, 0x5, 0xdd, 0x0, 0x3, 0x1, '\x00', 0x0, 0x9, 0x1, 0x7}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000ac0)={'tunl0\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x2, 0xc49, {{0xe, 0x4, 0x3, 0x3c, 0x38, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x47, 0x3, 0x4, [{@multicast1, 0x8000}, {@loopback, 0x6}]}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0xf, [0x1, 0x7, 0xf2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x8, 0x7, 0x0, 0x6, {{0x1e, 0x4, 0x1, 0x34, 0x78, 0x65, 0x0, 0xe, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x1b, 0x90, [@local, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x97, 0x3, 0xa, [{@broadcast, 0x5}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x6}, {@empty, 0x9}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}, {@private=0xa010101, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000c40)={'gretap0\x00', 0x0, 0x10, 0x78a0, 0x9, 0x80000001, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x2, [0x5, 0x6, 0xfff, 0x80000000, 0x80000000]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0x5, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @loopback, {[@noop, @cipso={0x86, 0x10, 0x3, [{0x0, 0xa, "7f095b4f247a3dc5"}]}, @lsrr={0x83, 0x7, 0x5d, [@broadcast]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0x5, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @loopback, {[@noop, @cipso={0x86, 0x10, 0x3, [{0x0, 0xa, "7f095b4f247a3dc5"}]}, @lsrr={0x83, 0x7, 0x5d, [@broadcast]}, @end]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000dc0)={@private2, 0x0}, &(0x7f0000000e00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x31, 0xffff, {{0x6, 0x4, 0x1, 0xc, 0x18, 0x68, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, {[@end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x31, 0xffff, {{0x6, 0x4, 0x1, 0xc, 0x18, 0x68, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, {[@end]}}}}}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000ec0)={@empty, @multicast2, 0x0}, &(0x7f0000000f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x29, 0xc4, 0x67, 0x7fff, 0x22, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x40, 0x3a209ab6, 0xc}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x29, 0xc4, 0x67, 0x7fff, 0x22, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x40, 0x40, 0x3a209ab6, 0xc}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000012c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x234, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8091}, 0x4010) 1.422766806s ago: executing program 1 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.392393666s ago: executing program 2 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080), 0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24088045, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x14, 0x301, 0x70bd2d, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x40000) 1.384574807s ago: executing program 1 (id=623): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x200500, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000020}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(r2, 0x4, 0x400) fcntl$setstatus(r2, 0x4, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r3, &(0x7f0000000040)=0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="90010000100013070000000000000000ff01000000000000000000000000000100000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e0001000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000005800010078636263286165732900"], 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r4, r4, 0x0, 0x80000000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setns(0xc9, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) dup(r5) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000000c0)={0x0, {0x20, 0x4, 0x7fff, 0x1, 0x7}}) 874.772679ms ago: executing program 0 (id=624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000002c0)={{0xffffffffffffffff, 0xfffffffe}, {0x0, 0x5}, 0xfffffe29, 0x6}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0) r3 = inotify_init1(0x80400) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x28) brk(0x20000000000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x9, 0x0, 0x200, 0x40008000, 0xf, "ff0f00e08ee2ece7536d00"}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x20}], 0x1}, 0x0) close_range(r4, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r6, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='https://example.com\n\x00', 0x15) 874.568139ms ago: executing program 0 (id=625): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400f0ff11000100000100dffddbdf250700"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 626.364965ms ago: executing program 0 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x400}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'ipvlan1\x00', @local}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@local, 0x40, r3}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000123340fe80770000000000000000000000124014bbd035fdb45b7379e3f70000aa3b140000000004d2000000010000000000000000000000000000000000000000007ad712f9e6693460c5a9a798ad0efb"], 0x3a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x400d4) pwritev2(r4, 0x0, 0xffffffffffffff90, 0xa, 0x800, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) fchmod(r0, 0x83) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0x8001, 0x12) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x40, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x2, 0x3e, 0x9, 0x7f, 0x3, 0x5, 0x0, 0x3}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x8}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0xffffffff, 0x70000, 0xc, 0x2, 0x15, 0x16, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x2a22ffff, 0xdddd1000, 0x8, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8}, {0x1111d004, 0x1, 0xa, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xe, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0xb, 0xf0, 0x7}, {0x0, 0x2f}, {0x3000, 0xfffd}, 0xc0000025, 0x0, 0x6000, 0x2024, 0x7, 0x0, 0x50000, [0x4, 0x8, 0x60, 0x4132]}) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 286.870423ms ago: executing program 0 (id=629): syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000020ca15010140000102030109022800010106a07f09040000010103000d09059366"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:crond_unit_file_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3ff}, 0x5a) 170.531216ms ago: executing program 4 (id=635): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001380)={0x40041500, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x3d}, &(0x7f0000000180)=""/242, 0xf2, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0], 0x1, {r5}}, 0x58) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f00000002c0), 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000003000000000005200", 0x1c) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000001e40)=""/4103, 0x1005}, {&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000a00)=""/132, 0x84}, {&(0x7f0000000880)=""/139, 0x8b}, {&(0x7f0000000580)=""/272, 0x110}, {&(0x7f00000004c0)=""/95, 0x5f}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x7, 0x140, 0x0) 116.379187ms ago: executing program 4 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 103.319697ms ago: executing program 4 (id=637): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r1, &(0x7f0000009680)={@val={0x0, 0xa76b46610d92c08d}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x14, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @echo={0x8, 0x0, 0x0, 0x7, 0x40}}}}}}, 0x36) (async) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) preadv2(r4, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/5, 0x5}], 0x4, 0x9, 0xd, 0x14) (async) fcntl$lock(r0, 0x24, &(0x7f0000002780)={0x2, 0x0, 0x7, 0xf}) 34.523169ms ago: executing program 1 (id=638): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x400, &(0x7f0000000180)=[0x6bd1a30f, 0xec66, 0xace, 0x8, 0x98bd, 0x8, 0x7, 0x4, 0x10000, 0x7, 0x0, 0x9, 0x6, 0x9, 0x5, 0x3f2, 0x3ff, 0x5, 0x2, 0x4000000001, 0x8, 0x1, 0xc1, 0x1, 0x2, 0x2, 0x800000006, 0x1000000000, 0x96, 0xffffffff, 0xffffffff00000000, 0x3, 0x5, 0x7, 0x4, 0x3541, 0x9, 0x888f, 0x1000, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3df, 0x20000000006, 0x0, 0x8, 0x3fe, 0x0, 0xfffffffffffffff7, 0xd, 0x2, 0xe, 0x1, 0x4, 0xf5, 0xfd, 0x7, 0x9, 0xfffffffffffffffc, 0x9, 0x7, 0x40000005, 0xffffffff00000000, 0x9, 0xd, 0x10001, 0x6, 0x10000000200000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x0, 0x2, 0xfff, 0x6, 0x3, 0x1, 0xab6, 0xa, 0x0, 0x0, 0xffffffffffffff84, 0x9, 0x8d, 0x3, 0x3ff, 0x6, 0x8, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x203, 0x7, 0x5a0, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x1e, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0x470ddba2, 0x8, 0xd, 0x5, 0x8, 0x1, 0xfffffffffffffff9, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0x142, 0x8, 0x1000003]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x702, &(0x7f0000000500)={0x0, 0xfffffffc, 0x8, 0x7, 0x1e6}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200050b03000000000000000700000008000700010000000c00008008001d0098"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001300192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unshare(0x60000600) sendmsg$SEG6_CMD_SET_TUNSRC(r6, 0x0, 0x2004014) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x69fe, "0f9d0027002020000000b80cf000"}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 34.293569ms ago: executing program 1 (id=639): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4210, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0, 0x110}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ptrace$getregset(0x4204, r7, 0x6, &(0x7f0000003fc0)={&(0x7f0000002fc0)=""/4096, 0x1000}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000002580)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/59, 0x3b}], 0x2, &(0x7f00000024c0)=""/157, 0x9d}, 0x60000200) read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x2020) 28.801369ms ago: executing program 4 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 12.846189ms ago: executing program 4 (id=641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 0s ago: executing program 4 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g2\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g2\x00') write(r0, &(0x7f0000000c00)='1', 0x1) kernel console output (not intermixed with test programs): e_slave_0) entered blocking state [ 24.931387][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.953042][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.960104][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.967396][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.974441][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.996241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.003545][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.010871][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.018698][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.025905][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.033271][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.040623][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.047919][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.063535][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.070599][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.083936][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.090977][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.098740][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.105796][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.113371][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.120393][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.154144][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.161279][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.170595][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.177673][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.207197][ T293] veth0_vlan: entered promiscuous mode [ 25.215571][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.222621][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.237110][ T295] veth0_vlan: entered promiscuous mode [ 25.249119][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.256298][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.269633][ T293] veth1_macvtap: entered promiscuous mode [ 25.290854][ T295] veth1_macvtap: entered promiscuous mode [ 25.302057][ T296] veth0_vlan: entered promiscuous mode [ 25.334907][ T294] veth0_vlan: entered promiscuous mode [ 25.344379][ T296] veth1_macvtap: entered promiscuous mode [ 25.355108][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.388536][ T294] veth1_macvtap: entered promiscuous mode [ 25.479752][ T323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.632593][ T328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=328 comm=syz.2.5 [ 25.646878][ T328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5'. [ 25.892763][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.942716][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.042727][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 26.048903][ T310] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.057250][ T310] usb 3-1: config 179 has no interface number 0 [ 26.063622][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.074974][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.086309][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.097495][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.108959][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 26.114133][ T310] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.127460][ T310] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.136550][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.145480][ T31] usb 4-1: config 2 has an invalid interface number: 123 but max is 1 [ 26.153717][ T31] usb 4-1: config 2 has an invalid interface number: 137 but max is 1 [ 26.161899][ T31] usb 4-1: config 2 has no interface number 0 [ 26.168236][ T31] usb 4-1: config 2 has no interface number 1 [ 26.174674][ T31] usb 4-1: config 2 interface 123 altsetting 252 bulk endpoint 0x8 has invalid maxpacket 32 [ 26.184890][ T31] usb 4-1: config 2 interface 137 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 26.184932][ T328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.195954][ T31] usb 4-1: config 2 interface 137 altsetting 11 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 26.216130][ T31] usb 4-1: config 2 interface 137 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 26.227398][ T31] usb 4-1: config 2 interface 137 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 26.238545][ T31] usb 4-1: config 2 interface 137 altsetting 11 bulk endpoint 0x4 has invalid maxpacket 32 [ 26.248614][ T31] usb 4-1: config 2 interface 137 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 26.259512][ T31] usb 4-1: config 2 interface 137 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 26.270401][ T31] usb 4-1: config 2 interface 137 altsetting 11 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 26.281561][ T31] usb 4-1: config 2 interface 137 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 26.292440][ T31] usb 4-1: config 2 interface 137 altsetting 11 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 26.304226][ T31] usb 4-1: config 2 interface 123 has no altsetting 0 [ 26.311074][ T31] usb 4-1: config 2 interface 137 has no altsetting 0 [ 26.319426][ T31] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff4c, bcdDevice=b5.19 [ 26.328623][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.336719][ T31] usb 4-1: Product: 䭯ཀᛛჯ艳ì®Ñ¢áƒå žá¡§ã¹§â’šçƒ¹é“ìšë¹¥é®ªåšŒà¨â½›è•–춭ਵΓ斓✔뎅榗é…뷢秿ìŸä²Ší‰Ÿæ¿µá…Žã¦¸î¹±á‘Žê§³ç·²á·»ì©™âŠ—æ´êˆ§ä¬–ë¾Õ‚ⶬ귎䇉ä£â¤ê–±ì±ˆà¾Ÿè¥§ï¨­ãµ¤æ¼¡í—†ë®†åºê‰„혅앥㎟âˆç™¹à²®à¯–릯婖⢷ẚ嘀主픳䖨쒃귶믌젺﮶ж隥롙ꉘ綾鵫è®æœ–硳煷 [ 26.375159][ T31] usb 4-1: Manufacturer: Ы [ 26.379749][ T31] usb 4-1: SerialNumber: syz [ 26.392108][ T333] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 26.394034][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.431488][ T337] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 26.637557][ T337] usb 3-1: USB disconnect, device number 2 [ 26.637600][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 26.637630][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 26.661045][ T337] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 27.133747][ T31] usb 4-1: USB disconnect, device number 2 [ 27.181098][ T360] batadv_slave_1: entered promiscuous mode [ 27.189433][ T360] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14'. [ 27.247378][ T358] batadv_slave_1: left promiscuous mode [ 27.458307][ T367] FAULT_INJECTION: forcing a failure. [ 27.458307][ T367] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.471455][ T367] CPU: 0 UID: 0 PID: 367 Comm: syz.1.17 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 27.471482][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.471504][ T367] Call Trace: [ 27.471511][ T367] [ 27.471517][ T367] __dump_stack+0x21/0x30 [ 27.471549][ T367] dump_stack_lvl+0x140/0x1c0 [ 27.471572][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.471594][ T367] ? check_stack_object+0x138/0x150 [ 27.471613][ T367] dump_stack+0x19/0x20 [ 27.471634][ T367] should_fail_ex+0x3c2/0x510 [ 27.471653][ T367] should_fail+0xf/0x20 [ 27.471669][ T367] should_fail_usercopy+0x1e/0x30 [ 27.471689][ T367] _copy_to_user+0x24/0xa0 [ 27.471711][ T367] simple_read_from_buffer+0xed/0x160 [ 27.471735][ T367] proc_fail_nth_read+0x1aa/0x220 [ 27.471759][ T367] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 27.471781][ T367] ? add_device_randomness+0xc6/0x110 [ 27.471822][ T367] ? __cfi_add_device_randomness+0x10/0x10 [ 27.471869][ T367] ? bpf_lsm_file_permission+0xd/0x20 [ 27.471892][ T367] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 27.471918][ T367] vfs_read+0x28b/0xc70 [ 27.471935][ T367] ? do_settimeofday64+0x892/0x960 [ 27.471954][ T367] ? __cfi_vfs_read+0x10/0x10 [ 27.471970][ T367] ? __kasan_check_write+0x18/0x20 [ 27.471987][ T367] ? mutex_lock+0x97/0x1d0 [ 27.472011][ T367] ? __cfi_mutex_lock+0x10/0x10 [ 27.472036][ T367] ksys_read+0x145/0x260 [ 27.472053][ T367] ? xfd_validate_state+0x68/0x140 [ 27.472078][ T367] ? __cfi_ksys_read+0x10/0x10 [ 27.472095][ T367] ? __kasan_check_write+0x18/0x20 [ 27.472111][ T367] ? fpregs_restore_userregs+0x11c/0x260 [ 27.472133][ T367] __x64_sys_read+0x7f/0x90 [ 27.472151][ T367] x64_sys_call+0x2638/0x2ee0 [ 27.472167][ T367] do_syscall_64+0x57/0xf0 [ 27.472185][ T367] ? clear_bhb_loop+0x50/0xa0 [ 27.472209][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.472231][ T367] RIP: 0033:0x7f905f75e84e [ 27.472246][ T367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 27.472261][ T367] RSP: 002b:00007f90605dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 27.472284][ T367] RAX: ffffffffffffffda RBX: 00007f90605e06c0 RCX: 00007f905f75e84e [ 27.472297][ T367] RDX: 000000000000000f RSI: 00007f90605e00a0 RDI: 0000000000000009 [ 27.472307][ T367] RBP: 00007f90605e0090 R08: 0000000000000000 R09: 0000000000000000 [ 27.472319][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.472329][ T367] R13: 00007f905fa26038 R14: 00007f905fa25fa0 R15: 00007ffe0d1fcf48 [ 27.472346][ T367] [ 27.475658][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.765789][ T370] overlayfs: missing 'lowerdir' [ 27.818147][ T374] Zero length message leads to an empty skb [ 27.887697][ T384] input: syz1 as /devices/virtual/input/input5 [ 27.902698][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 27.908963][ T384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 27.919514][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.933496][ T31] usb 4-1: config 10 has an invalid interface number: 188 but max is 0 [ 27.949297][ T31] usb 4-1: config 10 has no interface number 0 [ 27.957241][ T31] usb 4-1: config 10 interface 188 has no altsetting 0 [ 27.966587][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 27.975942][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.984125][ T31] usb 4-1: Product: syz [ 27.988394][ T31] usb 4-1: Manufacturer: syz [ 27.993273][ T31] usb 4-1: SerialNumber: syz [ 28.092712][ T337] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.192535][ T394] Config c/1 of g1 needs at least one function. [ 28.198943][ T394] udc dummy_udc.0: failed to start g1: -22 [ 28.205822][ T394] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 28.218320][ T394] UDC core: g1: couldn't find an available UDC or it's busy [ 28.225795][ T357] capability: warning: `syz.3.13' uses deprecated v2 capabilities in a way that may be insecure [ 28.241486][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 28.241500][ T36] audit: type=1400 audit(28.222:185): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 28.271472][ T337] usb 2-1: Using ep0 maxpacket: 8 [ 28.276967][ T337] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 28.285621][ T36] audit: type=1400 audit(28.272:186): avc: denied { create } for pid=395 comm="syz.2.29" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.306589][ T36] audit: type=1400 audit(28.292:187): avc: denied { ioctl } for pid=395 comm="syz.2.29" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4369 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.332763][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.343911][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.354498][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.364980][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.374884][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.385532][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.413473][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.424850][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.434590][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.444949][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.454646][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.465287][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.475036][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.485365][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.496415][ T337] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 28.506961][ T337] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 28.516594][ T31] snd-usb-audio 4-1:10.188: probe with driver snd-usb-audio failed with error -2 [ 28.527213][ T31] usb 4-1: USB disconnect, device number 3 [ 28.535615][ T337] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 28.544923][ T337] usb 2-1: New USB device strings: Mfr=0, Product=51, SerialNumber=243 [ 28.553240][ T337] usb 2-1: Product: syz [ 28.557413][ T337] usb 2-1: SerialNumber: syz [ 28.562641][ T337] usb 2-1: config 0 descriptor?? [ 28.573553][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:10.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.592700][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.742701][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 28.749191][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.757782][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 28.768911][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 28.779357][ T65] usb 2-1: USB disconnect, device number 2 [ 28.780723][ T45] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 28.794889][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.802945][ T45] usb 3-1: Product: syz [ 28.807145][ T45] usb 3-1: Manufacturer: syz [ 28.811762][ T45] usb 3-1: SerialNumber: syz [ 28.817398][ T396] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 29.026334][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.041424][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.054942][ T36] audit: type=1400 audit(29.042:188): avc: denied { setattr } for pid=409 comm="syz.3.32" name="UDPLITEv6" dev="sockfs" ino=5156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.088903][ T36] audit: type=1400 audit(29.042:189): avc: denied { write } for pid=409 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.091547][ T414] overlayfs: missing 'lowerdir' [ 29.109017][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 29.136283][ T45] usb 3-1: USB disconnect, device number 3 [ 29.149594][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.300172][ T36] audit: type=1400 audit(29.282:190): avc: denied { mount } for pid=421 comm="syz.1.37" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 30.077939][ T438] overlayfs: missing 'workdir' [ 30.134642][ T442] FAULT_INJECTION: forcing a failure. [ 30.134642][ T442] name failslab, interval 1, probability 0, space 0, times 1 [ 30.147920][ T442] CPU: 0 UID: 0 PID: 442 Comm: syz.0.45 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 30.147940][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.147949][ T442] Call Trace: [ 30.147953][ T442] [ 30.147958][ T442] __dump_stack+0x21/0x30 [ 30.147981][ T442] dump_stack_lvl+0x140/0x1c0 [ 30.147999][ T442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.148020][ T442] dump_stack+0x19/0x20 [ 30.148038][ T442] should_fail_ex+0x3c2/0x510 [ 30.148054][ T442] should_failslab+0xac/0x100 [ 30.148071][ T442] __kmalloc_cache_node_noprof+0x46/0x430 [ 30.148086][ T442] ? __get_vm_area_node+0x150/0x390 [ 30.148106][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.148126][ T442] ? __kasan_slab_alloc+0x73/0x90 [ 30.148142][ T442] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 30.148156][ T442] __get_vm_area_node+0x150/0x390 [ 30.148183][ T442] __vmalloc_node_range_noprof+0x340/0x1300 [ 30.148203][ T442] ? copy_process+0x57c/0x3350 [ 30.148223][ T442] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 30.148244][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.148264][ T442] ? __kasan_slab_alloc+0x73/0x90 [ 30.148279][ T442] ? arch_dup_task_struct+0x5b/0xe0 [ 30.148300][ T442] ? __asan_memcpy+0x5a/0x80 [ 30.148312][ T442] dup_task_struct+0x5d6/0xd80 [ 30.148328][ T442] ? copy_process+0x57c/0x3350 [ 30.148345][ T442] ? _raw_spin_lock_irq+0x93/0x120 [ 30.148360][ T442] ? copy_process+0x3350/0x3350 [ 30.148376][ T442] ? __kasan_check_write+0x18/0x20 [ 30.148390][ T442] copy_process+0x57c/0x3350 [ 30.148408][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.148428][ T442] ? __cfi_copy_process+0x10/0x10 [ 30.148444][ T442] ? __kmalloc_cache_noprof+0x23c/0x470 [ 30.148458][ T442] ? __kasan_check_write+0x18/0x20 [ 30.148470][ T442] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 30.148504][ T442] vhost_task_create+0x1f7/0x3f0 [ 30.148523][ T442] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 30.148550][ T442] ? __cfi_vhost_task_create+0x10/0x10 [ 30.148565][ T442] ? __cfi_vhost_task_fn+0x10/0x10 [ 30.148579][ T442] ? __kasan_check_write+0x18/0x20 [ 30.148591][ T442] ? mutex_lock+0x97/0x1d0 [ 30.148609][ T442] ? __cfi_mutex_lock+0x10/0x10 [ 30.148626][ T442] ? kernel_text_address+0xa9/0xe0 [ 30.148645][ T442] kvm_mmu_post_init_vm+0x161/0x300 [ 30.148667][ T442] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 30.148686][ T442] ? _parse_integer_limit+0x195/0x1e0 [ 30.148700][ T442] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 30.148718][ T442] ? kstrtoull+0x13b/0x1e0 [ 30.148743][ T442] ? kstrtouint+0x78/0xf0 [ 30.148762][ T442] ? ioctl_has_perm+0x1bc/0x500 [ 30.148781][ T442] ? __asan_memcpy+0x5a/0x80 [ 30.148794][ T442] ? ioctl_has_perm+0x408/0x500 [ 30.148806][ T442] ? has_cap_mac_admin+0xd0/0xd0 [ 30.148818][ T442] ? __kasan_check_write+0x18/0x20 [ 30.148831][ T442] ? mutex_lock_killable+0x97/0x1d0 [ 30.148849][ T442] ? __cfi_mutex_lock_killable+0x10/0x10 [ 30.148868][ T442] ? proc_fail_nth_write+0x184/0x220 [ 30.148888][ T442] kvm_vcpu_ioctl+0xa43/0x1000 [ 30.148902][ T442] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.148914][ T442] ? __cfi_vfs_write+0x10/0x10 [ 30.148928][ T442] ? __kasan_check_write+0x18/0x20 [ 30.148940][ T442] ? mutex_unlock+0x90/0x240 [ 30.148957][ T442] ? __cfi_mutex_unlock+0x10/0x10 [ 30.148977][ T442] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.148995][ T442] ? security_file_ioctl+0x3e/0x110 [ 30.149015][ T442] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.149027][ T442] __se_sys_ioctl+0x132/0x1b0 [ 30.149043][ T442] __x64_sys_ioctl+0x7f/0xa0 [ 30.149059][ T442] x64_sys_call+0x1878/0x2ee0 [ 30.149071][ T442] do_syscall_64+0x57/0xf0 [ 30.149085][ T442] ? clear_bhb_loop+0x50/0xa0 [ 30.149103][ T442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.149120][ T442] RIP: 0033:0x7fe5def9e019 [ 30.149132][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.149142][ T442] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.149157][ T442] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 30.149173][ T442] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 30.149181][ T442] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 30.149189][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.149197][ T442] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 30.149208][ T442] [ 30.149326][ T442] syz.0.45: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 30.613950][ T442] CPU: 1 UID: 0 PID: 442 Comm: syz.0.45 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 30.613983][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.613996][ T442] Call Trace: [ 30.614003][ T442] [ 30.614011][ T442] __dump_stack+0x21/0x30 [ 30.614053][ T442] dump_stack_lvl+0x140/0x1c0 [ 30.614082][ T442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.614113][ T442] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.614152][ T442] dump_stack+0x19/0x20 [ 30.614178][ T442] warn_alloc+0x1e7/0x2c0 [ 30.614206][ T442] ? __kasan_kmalloc+0x28/0xb0 [ 30.614231][ T442] ? __cfi_warn_alloc+0x10/0x10 [ 30.614258][ T442] ? __get_vm_area_node+0x150/0x390 [ 30.614286][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.614317][ T442] ? __get_vm_area_node+0x382/0x390 [ 30.614346][ T442] __vmalloc_node_range_noprof+0x365/0x1300 [ 30.614382][ T442] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 30.614412][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.614442][ T442] ? __kasan_slab_alloc+0x73/0x90 [ 30.614465][ T442] ? arch_dup_task_struct+0x5b/0xe0 [ 30.614495][ T442] ? __asan_memcpy+0x5a/0x80 [ 30.614516][ T442] dup_task_struct+0x5d6/0xd80 [ 30.614542][ T442] ? copy_process+0x57c/0x3350 [ 30.614567][ T442] ? _raw_spin_lock_irq+0x93/0x120 [ 30.614590][ T442] ? copy_process+0x3350/0x3350 [ 30.614615][ T442] ? __kasan_check_write+0x18/0x20 [ 30.614654][ T442] copy_process+0x57c/0x3350 [ 30.614683][ T442] ? kasan_save_alloc_info+0x3a/0x50 [ 30.614715][ T442] ? __cfi_copy_process+0x10/0x10 [ 30.614742][ T442] ? __kmalloc_cache_noprof+0x23c/0x470 [ 30.614766][ T442] ? __kasan_check_write+0x18/0x20 [ 30.614787][ T442] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 30.614812][ T442] vhost_task_create+0x1f7/0x3f0 [ 30.614835][ T442] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 30.614861][ T442] ? __cfi_vhost_task_create+0x10/0x10 [ 30.614897][ T442] ? __cfi_vhost_task_fn+0x10/0x10 [ 30.614918][ T442] ? __kasan_check_write+0x18/0x20 [ 30.614939][ T442] ? mutex_lock+0x97/0x1d0 [ 30.614966][ T442] ? __cfi_mutex_lock+0x10/0x10 [ 30.614993][ T442] ? kernel_text_address+0xa9/0xe0 [ 30.615029][ T442] kvm_mmu_post_init_vm+0x161/0x300 [ 30.615060][ T442] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 30.615088][ T442] ? _parse_integer_limit+0x195/0x1e0 [ 30.615111][ T442] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 30.615139][ T442] ? kstrtoull+0x13b/0x1e0 [ 30.615160][ T442] ? kstrtouint+0x78/0xf0 [ 30.615180][ T442] ? ioctl_has_perm+0x1bc/0x500 [ 30.615218][ T442] ? __asan_memcpy+0x5a/0x80 [ 30.615240][ T442] ? ioctl_has_perm+0x408/0x500 [ 30.615261][ T442] ? has_cap_mac_admin+0xd0/0xd0 [ 30.615293][ T442] ? __kasan_check_write+0x18/0x20 [ 30.615313][ T442] ? mutex_lock_killable+0x97/0x1d0 [ 30.615360][ T442] ? __cfi_mutex_lock_killable+0x10/0x10 [ 30.615391][ T442] ? proc_fail_nth_write+0x184/0x220 [ 30.615425][ T442] kvm_vcpu_ioctl+0xa43/0x1000 [ 30.615448][ T442] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.615469][ T442] ? __cfi_vfs_write+0x10/0x10 [ 30.615492][ T442] ? __kasan_check_write+0x18/0x20 [ 30.615513][ T442] ? mutex_unlock+0x90/0x240 [ 30.615543][ T442] ? __cfi_mutex_unlock+0x10/0x10 [ 30.615576][ T442] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.615605][ T442] ? security_file_ioctl+0x3e/0x110 [ 30.615638][ T442] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.615659][ T442] __se_sys_ioctl+0x132/0x1b0 [ 30.615686][ T442] __x64_sys_ioctl+0x7f/0xa0 [ 30.615713][ T442] x64_sys_call+0x1878/0x2ee0 [ 30.615733][ T442] do_syscall_64+0x57/0xf0 [ 30.615757][ T442] ? clear_bhb_loop+0x50/0xa0 [ 30.615787][ T442] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.615816][ T442] RIP: 0033:0x7fe5def9e019 [ 30.615834][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.615852][ T442] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.615876][ T442] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 30.615893][ T442] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 30.615907][ T442] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 30.615924][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.615938][ T442] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 30.615957][ T442] [ 30.621533][ T442] Mem-Info: [ 30.912862][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.942775][ T442] active_anon:6056 inactive_anon:48 isolated_anon:0 [ 30.942775][ T442] active_file:5981 inactive_file:2340 isolated_file:0 [ 30.942775][ T442] unevictable:0 dirty:217 writeback:0 [ 30.942775][ T442] slab_reclaimable:4145 slab_unreclaimable:70835 [ 30.942775][ T442] mapped:24427 shmem:164 pagetables:814 [ 30.942775][ T442] sec_pagetables:0 bounce:0 [ 30.942775][ T442] kernel_misc_reclaimable:0 [ 30.942775][ T442] free:1544704 free_pcp:1897 free_cma:0 [ 31.112294][ T442] Node 0 active_anon:24216kB inactive_anon:192kB active_file:23924kB inactive_file:9360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97728kB dirty:868kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4284kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no [ 31.146351][ T442] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5168kB free_cma:0kB [ 31.181013][ T442] lowmem_reserve[]: 0 3921 3921 [ 31.185991][ T442] Normal free:3219376kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28716kB inactive_anon:192kB active_file:23924kB inactive_file:9360kB unevictable:0kB writepending:868kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:744kB local_pcp:340kB free_cma:0kB [ 31.193626][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.218314][ T442] lowmem_reserve[]: 0 0 0 [ 31.231156][ T442] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 31.254850][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.256489][ T442] Normal: [ 31.268351][ T9] usb 2-1: config 220 has no interface number 2 [ 31.268698][ T442] 1*4kB [ 31.271867][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.292742][ T442] (U) 1*8kB (U) 2*16kB (ME) 13*32kB (UE) 37*64kB (UE) 11*128kB (UME) 30*256kB (UME) 23*512kB (UME) 12*1024kB (ME) 9*2048kB (UME) 771*4096kB (UM) = 3212428kB [ 31.294112][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 31.316534][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 31.323429][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 31.330368][ T442] 8522 total pagecache pages [ 31.335113][ T442] 41 pages in swap cache [ 31.339518][ T442] Free swap = 124252kB [ 31.344010][ T442] Total swap = 124996kB [ 31.348438][ T442] 2097051 pages RAM [ 31.353062][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.362181][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.372295][ T442] 0 pages HighMem/MovableOnly [ 31.378133][ T9] usb 2-1: Product: syz [ 31.382314][ T9] usb 2-1: Manufacturer: syz [ 31.382377][ T442] 352235 pages reserved [ 31.391288][ T9] usb 2-1: SerialNumber: syz [ 31.395960][ T442] 0 pages cma reserved [ 31.402443][ T442] Memory allocations: [ 31.406947][ T442] 0 B 0 init/main.c:1477 func:do_initcalls [ 31.416858][ T442] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 31.425294][ T442] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 31.433037][ T442] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 31.441060][ T442] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 31.449036][ T442] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 31.459193][ T442] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 31.468136][ T442] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 31.476228][ T442] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 31.484240][ T442] 0 B 0 init/initramfs.c:101 func:find_link [ 31.494749][ T36] audit: type=1400 audit(31.482:191): avc: denied { map } for pid=459 comm="syz.2.52" path="socket:[4509]" dev="sockfs" ino=4509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.531993][ T462] overlayfs: missing 'workdir' [ 31.616015][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.624669][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.643137][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 31.649741][ T9] usb 2-1: No valid video chain found. [ 31.657753][ T9] usb 2-1: selecting invalid altsetting 0 [ 31.676115][ T9] usb 2-1: USB disconnect, device number 3 [ 31.732315][ T36] audit: type=1400 audit(31.712:192): avc: denied { read } for pid=480 comm="syz.1.60" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.755594][ T36] audit: type=1400 audit(31.712:193): avc: denied { open } for pid=480 comm="syz.1.60" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.779481][ T36] audit: type=1400 audit(31.712:194): avc: denied { ioctl } for pid=480 comm="syz.1.60" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.832711][ T451] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.860124][ T485] FAULT_INJECTION: forcing a failure. [ 31.860124][ T485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.873205][ T485] CPU: 1 UID: 0 PID: 485 Comm: syz.1.62 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 31.873232][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.873244][ T485] Call Trace: [ 31.873254][ T485] [ 31.873260][ T485] __dump_stack+0x21/0x30 [ 31.873283][ T485] dump_stack_lvl+0x140/0x1c0 [ 31.873301][ T485] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.873331][ T485] ? check_stack_object+0x138/0x150 [ 31.873353][ T485] dump_stack+0x19/0x20 [ 31.873379][ T485] should_fail_ex+0x3c2/0x510 [ 31.873401][ T485] should_fail+0xf/0x20 [ 31.873426][ T485] should_fail_usercopy+0x1e/0x30 [ 31.873467][ T485] _copy_to_user+0x24/0xa0 [ 31.873492][ T485] simple_read_from_buffer+0xed/0x160 [ 31.873515][ T485] proc_fail_nth_read+0x1aa/0x220 [ 31.873546][ T485] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 31.873566][ T485] ? bpf_lsm_file_permission+0xd/0x20 [ 31.873583][ T485] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 31.873602][ T485] vfs_read+0x28b/0xc70 [ 31.873616][ T485] ? __cfi_vfs_read+0x10/0x10 [ 31.873628][ T485] ? __kasan_check_write+0x18/0x20 [ 31.873641][ T485] ? mutex_lock+0x97/0x1d0 [ 31.873659][ T485] ? __cfi_mutex_lock+0x10/0x10 [ 31.873678][ T485] ksys_read+0x145/0x260 [ 31.873691][ T485] ? xfd_validate_state+0x68/0x140 [ 31.873710][ T485] ? __cfi_ksys_read+0x10/0x10 [ 31.873723][ T485] ? __kasan_check_write+0x18/0x20 [ 31.873736][ T485] ? fpregs_restore_userregs+0x11c/0x260 [ 31.873752][ T485] __x64_sys_read+0x7f/0x90 [ 31.873766][ T485] x64_sys_call+0x2638/0x2ee0 [ 31.873778][ T485] do_syscall_64+0x57/0xf0 [ 31.873792][ T485] ? clear_bhb_loop+0x50/0xa0 [ 31.873811][ T485] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.873828][ T485] RIP: 0033:0x7f905f75e84e [ 31.873839][ T485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 31.873850][ T485] RSP: 002b:00007f90605dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 31.873864][ T485] RAX: ffffffffffffffda RBX: 00007f90605e06c0 RCX: 00007f905f75e84e [ 31.873874][ T485] RDX: 000000000000000f RSI: 00007f90605e00a0 RDI: 0000000000000004 [ 31.873883][ T485] RBP: 00007f90605e0090 R08: 0000000000000000 R09: 0000000000000000 [ 31.873891][ T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.873899][ T485] R13: 00007f905fa26038 R14: 00007f905fa25fa0 R15: 00007ffe0d1fcf48 [ 31.873910][ T485] [ 32.133108][ T451] usb 3-1: Using ep0 maxpacket: 32 [ 32.149865][ T451] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.160896][ T488] overlayfs: missing 'workdir' [ 32.166543][ T451] usb 3-1: config 8 has an invalid interface number: 131 but max is 0 [ 32.182704][ T451] usb 3-1: config 8 has no interface number 0 [ 32.194561][ T451] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 32.204143][ T451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.226173][ T451] usb 3-1: Product: syz [ 32.237001][ T451] usb 3-1: Manufacturer: syz [ 32.248318][ T451] usb 3-1: SerialNumber: syz [ 32.477845][ T451] usb_ehset_test 3-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 32.497795][ T451] usb 3-1: USB disconnect, device number 4 [ 32.520574][ T521] netlink: 5892 bytes leftover after parsing attributes in process `syz.0.75'. [ 32.762708][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.912692][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 32.918969][ T9] usb 1-1: config 32 has an invalid interface number: 64 but max is 0 [ 32.927299][ T9] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 32.937670][ T9] usb 1-1: config 32 has no interface number 0 [ 32.943893][ T9] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 32.952970][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.963203][ T9] usb 1-1: Found UVC 0.00 device (0bd3:0569) [ 32.970071][ T9] usb 1-1: No valid video chain found. [ 33.134134][ T561] netlink: 'syz.2.92': attribute type 28 has an invalid length. [ 33.171527][ T521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=521 comm=syz.0.75 [ 33.559194][ T602] fuse: Bad value for 'fd' [ 33.616723][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 33.616740][ T36] audit: type=1400 audit(33.602:209): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.711046][ T36] audit: type=1400 audit(33.692:210): avc: denied { ioctl } for pid=612 comm="syz.3.114" path="socket:[5083]" dev="sockfs" ino=5083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.860936][ T631] fuse: Bad value for 'fd' [ 34.689708][ T658] fuse: Bad value for 'fd' [ 34.728176][ T36] audit: type=1400 audit(34.712:211): avc: denied { write } for pid=661 comm="syz.3.136" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.754814][ T36] audit: type=1400 audit(34.742:212): avc: denied { ioctl } for pid=661 comm="syz.3.136" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.115351][ T686] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 35.183717][ T36] audit: type=1400 audit(35.172:213): avc: denied { read } for pid=685 comm="syz.3.146" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 35.207164][ T36] audit: type=1400 audit(35.172:214): avc: denied { open } for pid=685 comm="syz.3.146" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 35.231130][ T36] audit: type=1400 audit(35.212:215): avc: denied { ioctl } for pid=685 comm="syz.3.146" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 35.418221][ T36] audit: type=1400 audit(35.402:216): avc: denied { create } for pid=701 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.437277][ T36] audit: type=1400 audit(35.422:217): avc: denied { write } for pid=701 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.457078][ T702] fuse: Unknown parameter 'ootmode' [ 35.462898][ T36] audit: type=1400 audit(35.452:218): avc: denied { execute } for pid=701 comm="syz.1.153" name="file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.524098][ T337] usb 1-1: USB disconnect, device number 2 [ 35.921446][ T736] netlink: 'syz.2.169': attribute type 27 has an invalid length. [ 36.304063][ T800] netlink: 'syz.0.192': attribute type 29 has an invalid length. [ 36.312281][ T800] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.192'. [ 36.437385][ T814] input: syz1 as /devices/virtual/input/input7 [ 36.533435][ T825] netlink: 1 bytes leftover after parsing attributes in process `syz.1.203'. [ 36.712694][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.863780][ T45] usb 3-1: config 0 has no interfaces? [ 36.883981][ T45] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 36.896317][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.905444][ T45] usb 3-1: Product: syz [ 36.909758][ T45] usb 3-1: Manufacturer: syz [ 36.914668][ T45] usb 3-1: SerialNumber: syz [ 36.924581][ T45] usb 3-1: config 0 descriptor?? [ 37.574852][ T873] FAULT_INJECTION: forcing a failure. [ 37.574852][ T873] name failslab, interval 1, probability 0, space 0, times 0 [ 37.609388][ T873] CPU: 0 UID: 0 PID: 873 Comm: syz.1.221 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 37.609424][ T873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.609440][ T873] Call Trace: [ 37.609447][ T873] [ 37.609457][ T873] __dump_stack+0x21/0x30 [ 37.609495][ T873] dump_stack_lvl+0x140/0x1c0 [ 37.609531][ T873] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.609570][ T873] dump_stack+0x19/0x20 [ 37.609604][ T873] should_fail_ex+0x3c2/0x510 [ 37.609633][ T873] should_failslab+0xac/0x100 [ 37.609664][ T873] __kmalloc_cache_noprof+0x41/0x470 [ 37.609692][ T873] ? alloc_fs_context+0x6f/0x800 [ 37.609725][ T873] ? __asan_memcpy+0x5a/0x80 [ 37.609755][ T873] alloc_fs_context+0x6f/0x800 [ 37.609787][ T873] ? __kasan_check_write+0x18/0x20 [ 37.609814][ T873] fs_context_for_mount+0x26/0x40 [ 37.609847][ T873] do_new_mount+0x116/0xb40 [ 37.609870][ T873] ? security_capable+0x44/0x130 [ 37.609897][ T873] path_mount+0x66a/0xff0 [ 37.609920][ T873] ? putname+0x113/0x150 [ 37.609952][ T873] __se_sys_mount+0x2bf/0x480 [ 37.609979][ T873] ? ksys_write+0x1f3/0x260 [ 37.610005][ T873] ? __x64_sys_mount+0xf0/0xf0 [ 37.610033][ T873] __x64_sys_mount+0xc3/0xf0 [ 37.610059][ T873] x64_sys_call+0x2021/0x2ee0 [ 37.610083][ T873] do_syscall_64+0x57/0xf0 [ 37.610110][ T873] ? clear_bhb_loop+0x50/0xa0 [ 37.610144][ T873] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.610176][ T873] RIP: 0033:0x7f905f79e019 [ 37.610197][ T873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.610218][ T873] RSP: 002b:00007f90605e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.610244][ T873] RAX: ffffffffffffffda RBX: 00007f905fa25fa0 RCX: 00007f905f79e019 [ 37.610268][ T873] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 37.610285][ T873] RBP: 00007f90605e0090 R08: 0000200000000100 R09: 0000000000000000 [ 37.610303][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.610319][ T873] R13: 00007f905fa26038 R14: 00007f905fa25fa0 R15: 00007ffe0d1fcf48 [ 37.610341][ T873] [ 38.177092][ T910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 38.215334][ T912] fuse: Bad value for 'fd' [ 38.552706][ T337] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 38.682703][ T337] usb 1-1: device descriptor read/64, error -71 [ 38.854489][ T925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.888630][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 38.888645][ T36] audit: type=1326 audit(38.872:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=922 comm="syz.1.241" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f905f79e019 code=0x0 [ 38.932754][ T337] usb 1-1: device descriptor read/64, error -71 [ 38.961664][ T36] audit: type=1400 audit(38.942:246): avc: denied { nlmsg_write } for pid=930 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.961796][ T932] fuse: Bad value for 'fd' [ 39.172716][ T337] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 39.298775][ T937] fuse: Bad value for 'fd' [ 39.303316][ T337] usb 1-1: device descriptor read/64, error -71 [ 39.471600][ T31] usb 3-1: USB disconnect, device number 5 [ 39.542694][ T337] usb 1-1: device descriptor read/64, error -71 [ 39.584574][ T36] audit: type=1400 audit(39.572:247): avc: denied { execute } for pid=946 comm="syz.2.250" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.662765][ T337] usb usb1-port1: attempt power cycle [ 39.668324][ T36] audit: type=1400 audit(39.652:248): avc: denied { ioctl } for pid=946 comm="syz.2.250" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.728458][ T36] audit: type=1400 audit(39.712:249): avc: denied { create } for pid=952 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.747268][ T954] netlink: 148 bytes leftover after parsing attributes in process `syz.2.252'. [ 39.797684][ T961] fuse: Bad value for 'fd' [ 39.814219][ T36] audit: type=1400 audit(39.802:250): avc: denied { bind } for pid=962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.834056][ T36] audit: type=1400 audit(39.802:251): avc: denied { listen } for pid=962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.861782][ T36] audit: type=1400 audit(39.842:252): avc: denied { bind } for pid=962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.882699][ T36] audit: type=1400 audit(39.852:253): avc: denied { accept } for pid=962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.901967][ T36] audit: type=1400 audit(39.852:254): avc: denied { write } for pid=962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.022721][ T337] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 40.043702][ T337] usb 1-1: device descriptor read/8, error -71 [ 40.181163][ T337] usb 1-1: device descriptor read/8, error -71 [ 40.253367][ T975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=975 comm=syz.3.262 [ 40.422718][ T337] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 40.447424][ T337] usb 1-1: device descriptor read/8, error -71 [ 40.467871][ T989] kvm: Disabled LAPIC found during irq injection [ 40.585251][ T337] usb 1-1: device descriptor read/8, error -71 [ 40.627365][ T1003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.636720][ T1003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.700503][ T337] usb usb1-port1: unable to enumerate USB device [ 40.717010][ T1018] tipc: Started in network mode [ 40.721966][ T1018] tipc: Node identity , cluster identity 4711 [ 41.373648][ T451] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.402004][ T1052] netlink: 'syz.0.294': attribute type 16 has an invalid length. [ 41.502752][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 41.533209][ T451] usb 2-1: Using ep0 maxpacket: 16 [ 41.539588][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.550790][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.560709][ T451] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.573826][ T451] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.585436][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.602906][ T451] usb 2-1: config 0 descriptor?? [ 41.642687][ T31] usb 4-1: device descriptor read/64, error -71 [ 41.833163][ T1072] ======================================================= [ 41.833163][ T1072] WARNING: The mand mount option has been deprecated and [ 41.833163][ T1072] and is ignored by this kernel. Remove the mand [ 41.833163][ T1072] option from the mount to silence this warning. [ 41.833163][ T1072] ======================================================= [ 41.882871][ T31] usb 4-1: device descriptor read/64, error -71 [ 41.975995][ T451] usbhid 2-1:0.0: can't add hid device: -71 [ 41.986482][ T451] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.998078][ T451] usb 2-1: USB disconnect, device number 4 [ 42.152729][ T31] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 42.282714][ T31] usb 4-1: device descriptor read/64, error -71 [ 42.522701][ T31] usb 4-1: device descriptor read/64, error -71 [ 42.632781][ T31] usb usb4-port1: attempt power cycle [ 42.722724][ T337] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.788908][ T1095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=1095 comm=syz.0.312 [ 42.801907][ T1096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=1096 comm=syz.0.312 [ 42.822703][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.872686][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 42.878967][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.890107][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.900119][ T337] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.909522][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.921704][ T337] usb 3-1: config 0 descriptor?? [ 42.930720][ T337] hub 3-1:0.0: USB hub found [ 42.972724][ T31] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 42.982731][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 42.988797][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 42.999640][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 43.010679][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 43.023796][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 43.033074][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.041687][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.048511][ T45] usb 2-1: config 0 descriptor?? [ 43.173774][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.422695][ T31] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 43.443722][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.458211][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.465235][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.472107][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.479025][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.485962][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.492872][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.499848][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.506821][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.513745][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.520645][ T337] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 43.528668][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.536084][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.543052][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.549963][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.557053][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.564025][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.570937][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.577891][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.585192][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.592145][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.599140][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.606111][ T45] wacom 0003:056A:00C7.0001: unknown main item tag 0x0 [ 43.613057][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.620361][ T45] wacom 0003:056A:00C7.0001: hidraw0: USB HID v5.40 Device [HID 056a:00c7] on usb-dummy_hcd.1-1/input0 [ 43.659861][ T1089] netlink: 'syz.1.309': attribute type 11 has an invalid length. [ 43.673640][ T45] usb 2-1: USB disconnect, device number 5 [ 43.722797][ T31] usb usb4-port1: unable to enumerate USB device [ 43.766245][ T1100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.775631][ T1100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.243550][ T1120] kvm: user requested TSC rate below hardware speed [ 44.309570][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 44.309588][ T36] audit: type=1400 audit(44.292:263): avc: denied { read } for pid=1119 comm="syz.1.320" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.552696][ T525] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.645406][ T36] audit: type=1400 audit(44.632:264): avc: denied { set_context_mgr } for pid=1128 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 44.646279][ T1129] rust_binder: Write failure EINVAL in pid:196 [ 44.665937][ T1129] rust_binder: Write failure EFAULT in pid:196 [ 44.700317][ T1133] FAULT_INJECTION: forcing a failure. [ 44.700317][ T1133] name failslab, interval 1, probability 0, space 0, times 0 [ 44.712733][ T525] usb 2-1: Using ep0 maxpacket: 32 [ 44.719184][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.0.325 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 44.719287][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.719336][ T1133] Call Trace: [ 44.719359][ T1133] [ 44.719394][ T1133] __dump_stack+0x21/0x30 [ 44.719490][ T1133] dump_stack_lvl+0x140/0x1c0 [ 44.719574][ T1133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.719651][ T1133] ? stack_depot_save_flags+0x399/0x800 [ 44.719730][ T1133] dump_stack+0x19/0x20 [ 44.719805][ T1133] should_fail_ex+0x3c2/0x510 [ 44.719868][ T1133] should_failslab+0xac/0x100 [ 44.719949][ T1133] __kmalloc_cache_noprof+0x41/0x470 [ 44.720011][ T1133] ? netlink_unicast+0x8bf/0xa70 [ 44.720236][ T1133] ? netlink_sendmsg+0x7d1/0xad0 [ 44.720311][ T1133] ? __kthread_create_on_node+0x13c/0x4d0 [ 44.720394][ T1133] ? __cfi_cryptomgr_probe+0x10/0x10 [ 44.720470][ T1133] __kthread_create_on_node+0x13c/0x4d0 [ 44.720534][ T1133] ? kthread_create_on_node+0x160/0x160 [ 44.720599][ T1133] ? __cfi_cryptomgr_probe+0x10/0x10 [ 44.720690][ T1133] ? __cfi_cryptomgr_probe+0x10/0x10 [ 44.720787][ T1133] kthread_create_on_node+0xec/0x160 [ 44.720852][ T1133] ? __cfi_kthread_create_on_node+0x10/0x10 [ 44.720901][ T1133] ? __kmalloc_cache_noprof+0x23c/0x470 [ 44.720971][ T1133] cryptomgr_notify+0x7ad/0xa80 [ 44.721047][ T1133] ? __cfi_cryptomgr_notify+0x10/0x10 [ 44.721116][ T1133] notifier_call_chain+0x106/0x2b0 [ 44.721179][ T1133] blocking_notifier_call_chain+0x6a/0x90 [ 44.721236][ T1133] crypto_alg_mod_lookup+0x3aa/0x5a0 [ 44.721329][ T1133] crypto_find_alg+0x9a/0x100 [ 44.721426][ T1133] crypto_type_has_alg+0x2f/0x70 [ 44.721493][ T1133] crypto_has_ahash+0x2e/0x40 [ 44.721567][ T1133] xfrm_aalg_get_byname+0x1a2/0x240 [ 44.721647][ T1133] attach_auth+0x39/0x480 [ 44.721710][ T1133] ? __asan_memcpy+0x5a/0x80 [ 44.721765][ T1133] xfrm_add_sa+0x1f5a/0x37b0 [ 44.721821][ T1133] ? __cfi_xfrm_add_sa+0x10/0x10 [ 44.721879][ T1133] xfrm_user_rcv_msg+0x696/0x900 [ 44.721933][ T1133] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 44.722004][ T1133] ? __asan_memcpy+0x5a/0x80 [ 44.722074][ T1133] ? avc_has_perm_noaudit+0x289/0x360 [ 44.722162][ T1133] ? avc_has_perm+0x155/0x240 [ 44.722234][ T1133] netlink_rcv_skb+0x24a/0x4e0 [ 44.722295][ T1133] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 44.722358][ T1133] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 44.722420][ T1133] ? __kasan_check_write+0x18/0x20 [ 44.722475][ T1133] ? mutex_lock+0x97/0x1d0 [ 44.722556][ T1133] ? __cfi_mutex_lock+0x10/0x10 [ 44.722631][ T1133] ? netlink_autobind+0x1c0/0x1c0 [ 44.722688][ T1133] xfrm_netlink_rcv+0x76/0x90 [ 44.722743][ T1133] netlink_unicast+0x8bf/0xa70 [ 44.722838][ T1133] netlink_sendmsg+0x7d1/0xad0 [ 44.722887][ T1133] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.722949][ T1133] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 44.723014][ T1133] ? security_socket_sendmsg+0x3d/0x100 [ 44.723088][ T1133] ____sys_sendmsg+0x99e/0xa00 [ 44.723159][ T1133] ? __import_iovec+0x5b9/0x7d0 [ 44.723233][ T1133] ? __sys_sendmsg_sock+0x50/0x50 [ 44.723295][ T1133] ? import_iovec+0x80/0xb0 [ 44.723388][ T1133] ___sys_sendmsg+0x2a6/0x370 [ 44.723457][ T1133] ? __sys_sendmsg+0x2a0/0x2a0 [ 44.723525][ T1133] ? proc_fail_nth_write+0x184/0x220 [ 44.723614][ T1133] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.723706][ T1133] ? __fget_files+0x2bc/0x330 [ 44.723781][ T1133] __x64_sys_sendmsg+0x206/0x2e0 [ 44.723836][ T1133] ? fput+0x1a4/0x230 [ 44.723903][ T1133] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.723962][ T1133] ? ksys_write+0x1f3/0x260 [ 44.724024][ T1133] ? __kasan_check_read+0x15/0x20 [ 44.724089][ T1133] x64_sys_call+0x2a4c/0x2ee0 [ 44.724142][ T1133] do_syscall_64+0x57/0xf0 [ 44.724202][ T1133] ? clear_bhb_loop+0x50/0xa0 [ 44.724283][ T1133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.724334][ T1133] RIP: 0033:0x7fe5def9e019 [ 44.724359][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.724378][ T1133] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.724402][ T1133] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 44.724475][ T1133] RDX: 0000000000040082 RSI: 0000200000000180 RDI: 0000000000000003 [ 44.724522][ T1133] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 44.724562][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.724606][ T1133] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 44.724649][ T1133] [ 45.063506][ T36] audit: type=1400 audit(45.052:265): avc: denied { append } for pid=1136 comm="syz.0.327" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.067365][ T525] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.070603][ T1137] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 45.083546][ T525] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.221360][ T525] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.233011][ T525] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 45.242127][ T525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.257625][ T525] usb 2-1: Product: syz [ 45.262083][ T525] usb 2-1: Manufacturer: syz [ 45.268435][ T525] usb 2-1: SerialNumber: syz [ 45.344812][ T36] audit: type=1400 audit(45.332:266): avc: denied { ioctl } for pid=1143 comm="syz.0.329" path="socket:[9688]" dev="sockfs" ino=9688 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.474113][ T1151] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 45.481983][ T1152] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=153 sclass=netlink_xfrm_socket pid=1152 comm=syz.0.332 [ 45.506395][ T337] usbhid 3-1:0.0: can't add hid device: -71 [ 45.512475][ T337] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.562972][ T337] usb 3-1: USB disconnect, device number 6 [ 45.859020][ T1175] fuse: Bad value for 'user_id' [ 45.864072][ T1175] fuse: Bad value for 'user_id' [ 46.122720][ T451] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 46.199925][ T36] audit: type=1400 audit(46.182:267): avc: denied { ioctl } for pid=1180 comm="syz.3.344" path="mnt:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.273961][ T451] usb 1-1: config 154 has an invalid interface number: 128 but max is 0 [ 46.283151][ T451] usb 1-1: config 154 has no interface number 0 [ 46.289459][ T451] usb 1-1: config 154 interface 128 has no altsetting 0 [ 46.304005][ T451] usb 1-1: string descriptor 0 read error: -22 [ 46.315152][ T451] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 46.324323][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.335607][ T451] ums-datafab 1-1:154.128: USB Mass Storage device detected [ 46.386236][ T451] ums-sddr55 1-1:154.128: USB Mass Storage device detected [ 46.546665][ T31] usb 1-1: USB disconnect, device number 7 [ 46.772718][ T451] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 46.923424][ T451] usb 4-1: not running at top speed; connect to a high speed hub [ 46.931952][ T451] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 46.940279][ T451] usb 4-1: config 0 has no interface number 0 [ 46.947830][ T451] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 46.957069][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.965104][ T451] usb 4-1: Product: syz [ 46.969333][ T451] usb 4-1: Manufacturer: syz [ 46.974008][ T451] usb 4-1: SerialNumber: syz [ 46.979699][ T451] usb 4-1: config 0 descriptor?? [ 47.187813][ T451] usb-storage 4-1:0.56: USB Mass Storage device detected [ 47.196713][ T451] usb-storage 4-1:0.56: Quirks match for vid 054c pid 002e: 1 [ 47.232264][ T525] usb 2-1: unit 255 not found! [ 47.248893][ T525] usb 2-1: USB disconnect, device number 6 [ 47.254852][ T451] usb 4-1: USB disconnect, device number 8 [ 47.276531][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.304441][ T36] audit: type=1400 audit(47.282:268): avc: denied { mount } for pid=1225 comm="syz.1.360" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 47.364306][ T1230] kvm: Disabled LAPIC found during irq injection [ 47.389041][ T36] audit: type=1400 audit(47.372:269): avc: denied { ioctl } for pid=1231 comm="syz.0.363" path="socket:[10253]" dev="sockfs" ino=10253 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.509426][ T36] audit: type=1400 audit(47.492:270): avc: denied { map } for pid=1239 comm="syz.2.366" path="socket:[10333]" dev="sockfs" ino=10333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.535641][ T36] audit: type=1400 audit(47.492:271): avc: denied { read accept } for pid=1239 comm="syz.2.366" path="socket:[10333]" dev="sockfs" ino=10333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.692696][ T45] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 47.785202][ T36] audit: type=1400 audit(47.772:272): avc: denied { getopt } for pid=1251 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.822701][ T45] usb 2-1: device descriptor read/64, error -71 [ 47.913353][ T1256] FAULT_INJECTION: forcing a failure. [ 47.913353][ T1256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.926552][ T1256] CPU: 1 UID: 0 PID: 1256 Comm: syz.0.372 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 47.926585][ T1256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.926598][ T1256] Call Trace: [ 47.926605][ T1256] [ 47.926614][ T1256] __dump_stack+0x21/0x30 [ 47.926649][ T1256] dump_stack_lvl+0x140/0x1c0 [ 47.926680][ T1256] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.926711][ T1256] ? __kasan_check_read+0x15/0x20 [ 47.926733][ T1256] ? filemap_get_pages+0x1a2c/0x1c20 [ 47.926762][ T1256] dump_stack+0x19/0x20 [ 47.926791][ T1256] should_fail_ex+0x3c2/0x510 [ 47.926816][ T1256] should_fail+0xf/0x20 [ 47.926839][ T1256] should_fail_usercopy+0x1e/0x30 [ 47.926865][ T1256] _copy_to_iter+0x1a6/0x1520 [ 47.926903][ T1256] ? filemap_read+0x1250/0x1250 [ 47.926930][ T1256] ? __cfi__copy_to_iter+0x10/0x10 [ 47.926958][ T1256] ? __kasan_check_write+0x18/0x20 [ 47.926979][ T1256] ? folio_mark_accessed+0x1d2/0x620 [ 47.927008][ T1256] ? __cfi_folio_mark_accessed+0x10/0x10 [ 47.927037][ T1256] copy_page_to_iter+0x211/0x2f0 [ 47.927067][ T1256] filemap_read+0x743/0x1250 [ 47.927093][ T1256] ? arch_stack_walk+0x10a/0x170 [ 47.927119][ T1256] ? __cfi_filemap_read+0x10/0x10 [ 47.927149][ T1256] ? down_read+0x7f/0xe0 [ 47.927180][ T1256] ? __cfi_down_read+0x10/0x10 [ 47.927212][ T1256] ? __kasan_check_write+0x18/0x20 [ 47.927234][ T1256] blkdev_read_iter+0x2f0/0x420 [ 47.927265][ T1256] vfs_read+0x60e/0xc70 [ 47.927289][ T1256] ? __cfi_vfs_read+0x10/0x10 [ 47.927313][ T1256] ksys_read+0x145/0x260 [ 47.927335][ T1256] ? __cfi_ksys_read+0x10/0x10 [ 47.927358][ T1256] ? __kasan_check_read+0x15/0x20 [ 47.927380][ T1256] __x64_sys_read+0x7f/0x90 [ 47.927403][ T1256] x64_sys_call+0x2638/0x2ee0 [ 47.927423][ T1256] do_syscall_64+0x57/0xf0 [ 47.927447][ T1256] ? clear_bhb_loop+0x50/0xa0 [ 47.927476][ T1256] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.927505][ T1256] RIP: 0033:0x7fe5def9e019 [ 47.927523][ T1256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.927541][ T1256] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.927564][ T1256] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 47.927581][ T1256] RDX: 0000000000002020 RSI: 0000200000000440 RDI: 0000000000000003 [ 47.927596][ T1256] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 47.927610][ T1256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.927624][ T1256] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 47.927644][ T1256] [ 48.322715][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.562710][ T45] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 48.694479][ T45] usb 2-1: device descriptor read/64, error -71 [ 48.862735][ T399] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.942714][ T45] usb 2-1: device descriptor read/64, error -71 [ 49.013915][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.024911][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.034740][ T399] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 49.043857][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.052815][ T45] usb usb2-port1: attempt power cycle [ 49.058398][ T399] usb 3-1: config 0 descriptor?? [ 49.402690][ T45] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 49.423642][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.452693][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 49.471263][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 49.471288][ T36] audit: type=1400 audit(49.452:275): avc: denied { write } for pid=1288 comm="syz.2.384" name="config" dev="proc" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.499489][ T36] audit: type=1400 audit(49.462:276): avc: denied { bind } for pid=1288 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.534278][ T1289] kvm: kvm [1288]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 49.543190][ T1289] kvm: kvm [1288]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 49.572217][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.603736][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 49.613868][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.627841][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.637045][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.645264][ T31] usb 4-1: SerialNumber: syz [ 49.651532][ T1305] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 49.685633][ T399] usbhid 3-1:0.0: can't add hid device: -71 [ 49.691621][ T399] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 49.700562][ T399] usb 3-1: USB disconnect, device number 7 [ 49.812695][ T45] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 49.833691][ T45] usb 2-1: device descriptor read/8, error -71 [ 49.866313][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.875783][ T31] usb 4-1: USB disconnect, device number 9 [ 49.963850][ T45] usb 2-1: device descriptor read/8, error -71 [ 50.072788][ T45] usb usb2-port1: unable to enumerate USB device [ 50.514173][ T36] audit: type=1400 audit(50.502:277): avc: denied { map } for pid=1341 comm="syz.3.403" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.565627][ T1347] FAULT_INJECTION: forcing a failure. [ 50.565627][ T1347] name failslab, interval 1, probability 0, space 0, times 0 [ 50.579961][ T1347] CPU: 0 UID: 0 PID: 1347 Comm: syz.3.405 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 50.579990][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.580002][ T1347] Call Trace: [ 50.580009][ T1347] [ 50.580017][ T1347] __dump_stack+0x21/0x30 [ 50.580048][ T1347] dump_stack_lvl+0x140/0x1c0 [ 50.580075][ T1347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.580105][ T1347] dump_stack+0x19/0x20 [ 50.580130][ T1347] should_fail_ex+0x3c2/0x510 [ 50.580160][ T1347] should_failslab+0xac/0x100 [ 50.580184][ T1347] __kmalloc_node_noprof+0x69/0x500 [ 50.580206][ T1347] ? __kvmalloc_node_noprof+0x128/0x300 [ 50.580237][ T1347] __kvmalloc_node_noprof+0x128/0x300 [ 50.580267][ T1347] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 50.580297][ T1347] ? percpu_ref_init+0x1a0/0x4d0 [ 50.580319][ T1347] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 50.580340][ T1347] io_ring_ctx_alloc+0x4f6/0x1dc0 [ 50.580361][ T1347] io_uring_create+0x2e0/0x13f0 [ 50.580380][ T1347] ? __kasan_check_write+0x18/0x20 [ 50.580401][ T1347] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 50.580429][ T1347] ? __kasan_check_write+0x18/0x20 [ 50.580448][ T1347] ? __x64_sys_io_uring_setup+0x80/0x80 [ 50.580489][ T1347] ? __kasan_check_read+0x15/0x20 [ 50.580507][ T1347] __x64_sys_io_uring_setup+0x5f/0x80 [ 50.580545][ T1347] x64_sys_call+0x22c0/0x2ee0 [ 50.580561][ T1347] do_syscall_64+0x57/0xf0 [ 50.580580][ T1347] ? clear_bhb_loop+0x50/0xa0 [ 50.580604][ T1347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.580626][ T1347] RIP: 0033:0x7f2b3bb9e019 [ 50.580641][ T1347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.580657][ T1347] RSP: 002b:00007f2b3cb30ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.580677][ T1347] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f2b3bb9e019 [ 50.580708][ T1347] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 50.580721][ T1347] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 50.580752][ T1347] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 50.580764][ T1347] R13: 0000200000000890 R14: 00007f2b3cb30fd8 R15: 0000000000000000 [ 50.580779][ T1347] [ 50.582772][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.872716][ T525] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 50.952688][ T45] usb 3-1: device descriptor read/64, error -71 [ 51.022735][ T525] usb 2-1: device descriptor read/64, error -71 [ 51.192731][ T45] usb 3-1: device descriptor read/64, error -71 [ 51.272708][ T525] usb 2-1: device descriptor read/64, error -71 [ 51.402872][ T1357] FAULT_INJECTION: forcing a failure. [ 51.402872][ T1357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.416363][ T1357] CPU: 1 UID: 0 PID: 1357 Comm: syz.0.409 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 51.416396][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.416410][ T1357] Call Trace: [ 51.416418][ T1357] [ 51.416426][ T1357] __dump_stack+0x21/0x30 [ 51.416462][ T1357] dump_stack_lvl+0x140/0x1c0 [ 51.416494][ T1357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.416526][ T1357] ? __kasan_check_write+0x18/0x20 [ 51.416550][ T1357] dump_stack+0x19/0x20 [ 51.416579][ T1357] should_fail_ex+0x3c2/0x510 [ 51.416606][ T1357] should_fail_alloc_page+0xec/0x110 [ 51.416634][ T1357] __alloc_pages_noprof+0x1c0/0x7e0 [ 51.416667][ T1357] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.416711][ T1357] ? folio_add_lru+0x116/0x400 [ 51.416739][ T1357] ? __cfi_folio_add_lru+0x10/0x10 [ 51.416769][ T1357] __folio_alloc_noprof+0x14/0x80 [ 51.416801][ T1357] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 51.416832][ T1357] ? shmem_replace_folio+0x9b0/0x9b0 [ 51.416860][ T1357] ? shmem_huge_global_enabled+0x2da/0x360 [ 51.416886][ T1357] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 51.416913][ T1357] shmem_get_folio_gfp+0x5cd/0x12e0 [ 51.416941][ T1357] ? shmem_get_folio+0xc0/0xc0 [ 51.416965][ T1357] ? inode_to_bdi+0x6d/0x100 [ 51.416998][ T1357] shmem_write_begin+0xf4/0x260 [ 51.417026][ T1357] generic_perform_write+0x329/0x970 [ 51.417060][ T1357] ? __cfi_generic_perform_write+0x10/0x10 [ 51.417090][ T1357] ? down_write+0xee/0x2b0 [ 51.417125][ T1357] ? mnt_put_write_access_file+0xc2/0x100 [ 51.417157][ T1357] ? file_update_time+0x1de/0x210 [ 51.417189][ T1357] shmem_file_write_iter+0x105/0x130 [ 51.417220][ T1357] vfs_iocb_iter_write+0x389/0x9a0 [ 51.417247][ T1357] backing_file_write_iter+0x5d4/0x890 [ 51.417280][ T1357] ovl_write_iter+0x3c0/0x4c0 [ 51.417311][ T1357] ? __cfi_ovl_write_iter+0x10/0x10 [ 51.417340][ T1357] ? __cfi_ovl_file_end_write+0x10/0x10 [ 51.417375][ T1357] ? security_file_permission+0x38/0xf0 [ 51.417409][ T1357] ? rw_verify_area+0xac/0x230 [ 51.417432][ T1357] aio_write+0x4e2/0x720 [ 51.417461][ T1357] ? aio_read+0x500/0x500 [ 51.417493][ T1357] ? __fget_files+0x2bc/0x330 [ 51.417519][ T1357] io_submit_one+0xc74/0x19e0 [ 51.417551][ T1357] ? lookup_ioctx+0x360/0x360 [ 51.417579][ T1357] ? asm_exc_page_fault+0x2b/0x30 [ 51.417609][ T1357] ? __asan_memset+0x39/0x50 [ 51.417631][ T1357] ? blk_start_plug+0x71/0x1c0 [ 51.417667][ T1357] __se_sys_io_submit+0x17f/0x3f0 [ 51.417692][ T1357] ? __x64_sys_io_submit+0xa0/0xa0 [ 51.417723][ T1357] ? ksys_write+0x1f3/0x260 [ 51.417746][ T1357] ? __kasan_check_read+0x15/0x20 [ 51.417784][ T1357] __x64_sys_io_submit+0x7f/0xa0 [ 51.417811][ T1357] x64_sys_call+0x1c95/0x2ee0 [ 51.417831][ T1357] do_syscall_64+0x57/0xf0 [ 51.417855][ T1357] ? clear_bhb_loop+0x50/0xa0 [ 51.417885][ T1357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.417914][ T1357] RIP: 0033:0x7fe5def9e019 [ 51.417933][ T1357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.417952][ T1357] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 51.417976][ T1357] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 51.417994][ T1357] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007fe5df1f7000 [ 51.418010][ T1357] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 51.418025][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.418039][ T1357] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 51.418059][ T1357] [ 51.522764][ T525] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 51.527040][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.662747][ T525] usb 2-1: device descriptor read/64, error -71 [ 51.802747][ T45] usb 3-1: device descriptor read/64, error -71 [ 51.860208][ T1361] syzkaller1: entered promiscuous mode [ 51.865955][ T1361] syzkaller1: entered allmulticast mode [ 52.043126][ T525] usb 2-1: device descriptor read/64, error -71 [ 52.052691][ T45] usb 3-1: device descriptor read/64, error -71 [ 52.162720][ T525] usb usb2-port1: attempt power cycle [ 52.167020][ T45] usb usb3-port1: attempt power cycle [ 52.332729][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 52.502714][ T525] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 52.504385][ T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 52.519589][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.527799][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.536195][ T525] usb 2-1: device descriptor read/8, error -71 [ 52.536768][ T31] usb 1-1: config 0 descriptor?? [ 52.573801][ T45] usb 3-1: device descriptor read/8, error -71 [ 52.673676][ T525] usb 2-1: device descriptor read/8, error -71 [ 52.713759][ T45] usb 3-1: device descriptor read/8, error -71 [ 52.757235][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.766812][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.912698][ T525] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 52.953731][ T525] usb 2-1: device descriptor read/8, error -71 [ 52.982707][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.003740][ T45] usb 3-1: device descriptor read/8, error -71 [ 53.085093][ T525] usb 2-1: device descriptor read/8, error -71 [ 53.153724][ T45] usb 3-1: device descriptor read/8, error -71 [ 53.212756][ T525] usb usb2-port1: unable to enumerate USB device [ 53.263223][ T45] usb usb3-port1: unable to enumerate USB device [ 53.365671][ T1374] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1374 comm=syz.2.416 [ 53.380033][ T31] usb 1-1: Cannot set autoneg [ 53.385225][ T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 53.385335][ T36] audit: type=1400 audit(53.372:278): avc: denied { write } for pid=1373 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.419559][ T31] usb 1-1: USB disconnect, device number 8 [ 53.896813][ T1379] input: syz1 as /devices/virtual/input/input13 [ 54.042377][ T36] audit: type=1400 audit(54.022:279): avc: denied { mounton } for pid=1384 comm="syz.0.421" path="/118/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.042569][ T1385] overlayfs: failed to resolve 'redirect_dir=nofollow': -2 [ 54.093276][ T36] audit: type=1400 audit(54.082:280): avc: denied { setattr } for pid=1384 comm="syz.0.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.317541][ T36] audit: type=1400 audit(54.302:281): avc: denied { read } for pid=1392 comm="syz.2.424" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.368314][ T36] audit: type=1400 audit(54.322:282): avc: denied { open } for pid=1392 comm="syz.2.424" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.559829][ T1395] tipc: Started in network mode [ 54.566232][ T1395] tipc: Node identity , cluster identity 4711 [ 54.572334][ T1395] tipc: Failed to obtain node identity [ 54.577908][ T1395] tipc: Enabling of bearer rejected, failed to enable media [ 54.592723][ T451] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 54.692444][ T36] audit: type=1400 audit(54.672:283): avc: denied { read write } for pid=1399 comm="syz.1.427" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.716233][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.741632][ T31] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.761984][ T36] audit: type=1400 audit(54.672:284): avc: denied { open } for pid=1399 comm="syz.1.427" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.773617][ T451] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 54.842723][ T451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.863904][ T451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.882716][ T451] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 54.921381][ T451] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.940079][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.948189][ T451] usb 3-1: SerialNumber: syz [ 55.004224][ T36] audit: type=1400 audit(54.992:285): avc: denied { getopt } for pid=1410 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.173197][ T451] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 55.183718][ T451] usb 3-1: USB disconnect, device number 12 [ 55.796271][ T36] audit: type=1400 audit(55.782:286): avc: denied { create } for pid=1421 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 55.824318][ T1422] rust_binder: Write failure EFAULT in pid:306 [ 55.865998][ T36] audit: type=1400 audit(55.812:287): avc: denied { setopt } for pid=1421 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.070845][ T36] audit: type=1400 audit(56.052:288): avc: denied { write } for pid=1431 comm="syz.1.438" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 56.115194][ T36] audit: type=1400 audit(56.052:289): avc: denied { open } for pid=1431 comm="syz.1.438" path="/96/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 56.222695][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 56.409108][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.420280][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.430384][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 56.433866][ T1438] process 'syz.1.440' launched './file0' with NULL argv: empty string added [ 56.440098][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.460873][ T45] usb 1-1: config 0 descriptor?? [ 56.466536][ T1438] Invalid argument reading file caps for ./file0 [ 56.467156][ T36] audit: type=1400 audit(56.452:290): avc: denied { execute_no_trans } for pid=1436 comm="syz.1.440" path="/98/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.700053][ T45] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 56.708029][ T45] arvo 0003:1E7D:30D4.0003: parse failed [ 56.713790][ T45] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 57.232920][ T1450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.444'. [ 57.260100][ T36] audit: type=1400 audit(57.242:291): avc: denied { getopt } for pid=1451 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.663538][ T451] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.832689][ T451] usb 2-1: Using ep0 maxpacket: 32 [ 57.843440][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.865056][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.874847][ T451] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 57.887693][ T451] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 57.896802][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.906473][ T451] usb 2-1: config 0 descriptor?? [ 58.115727][ T451] hid (null): nested delimiters [ 58.121623][ T451] hid (null): unknown global tag 0xd [ 58.127109][ T451] hid (null): bogus close delimiter [ 58.142725][ T451] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0004/input/input14 [ 58.158594][ T451] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0004/input/input15 [ 58.192893][ T451] kye 0003:0458:5011.0004: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 58.315351][ T399] usb 2-1: USB disconnect, device number 15 [ 58.789996][ T36] audit: type=1400 audit(58.772:292): avc: denied { write } for pid=1476 comm="syz.2.452" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.848804][ T1477] can: request_module (can-proto-0) failed. [ 58.984866][ T45] usb 1-1: USB disconnect, device number 9 [ 59.092672][ T399] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 59.252687][ T399] usb 2-1: Using ep0 maxpacket: 16 [ 59.263441][ T399] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 59.274623][ T31] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 59.286116][ T399] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 59.305318][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.322665][ T399] usb 2-1: Product: syz [ 59.332670][ T399] usb 2-1: Manufacturer: syz [ 59.337553][ T399] usb 2-1: SerialNumber: syz [ 59.443764][ T31] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 59.462659][ T31] usb 3-1: config 0 has no interface number 0 [ 59.468794][ T31] usb 3-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 59.492664][ T31] usb 3-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 59.522318][ T31] usb 3-1: config 0 interface 49 has no altsetting 0 [ 59.530898][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 59.540093][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.548338][ T31] usb 3-1: Product: syz [ 59.553305][ T31] usb 3-1: Manufacturer: syz [ 59.558154][ T31] usb 3-1: SerialNumber: syz [ 59.566370][ T31] usb 3-1: config 0 descriptor?? [ 59.571395][ T1479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.603763][ T1479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.613130][ T1479] GUP no longer grows the stack in syz.1.453 (1479): 200000005000-200000008000 (200000004000) [ 59.623913][ T1479] CPU: 1 UID: 0 PID: 1479 Comm: syz.1.453 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 59.623965][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.623981][ T1479] Call Trace: [ 59.623989][ T1479] [ 59.623998][ T1479] __dump_stack+0x21/0x30 [ 59.624039][ T1479] dump_stack_lvl+0x140/0x1c0 [ 59.624074][ T1479] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.624108][ T1479] ? find_vma+0xd3/0x120 [ 59.624136][ T1479] dump_stack+0x19/0x20 [ 59.624168][ T1479] fixup_user_fault+0x616/0x6a0 [ 59.624202][ T1479] fault_in_user_writeable+0x75/0xe0 [ 59.624235][ T1479] futex_lock_pi+0x2ed/0xa70 [ 59.624270][ T1479] ? futex_unqueue+0x136/0x160 [ 59.624303][ T1479] ? __cfi_futex_lock_pi+0x10/0x10 [ 59.624342][ T1479] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.624382][ T1479] ? futex_setup_timer+0xb4/0xd0 [ 59.624412][ T1479] ? __cfi_futex_wake_mark+0x10/0x10 [ 59.624454][ T1479] do_futex+0x270/0x510 [ 59.624487][ T1479] ? __cfi_do_futex+0x10/0x10 [ 59.624519][ T1479] ? __vm_munmap+0x30d/0x3d0 [ 59.624547][ T1479] __se_sys_futex+0x13c/0x320 [ 59.624582][ T1479] ? __x64_sys_futex+0x110/0x110 [ 59.624616][ T1479] ? __kasan_check_write+0x18/0x20 [ 59.624640][ T1479] __x64_sys_futex+0xe9/0x110 [ 59.624673][ T1479] x64_sys_call+0x227f/0x2ee0 [ 59.624696][ T1479] do_syscall_64+0x57/0xf0 [ 59.624723][ T1479] ? clear_bhb_loop+0x50/0xa0 [ 59.624757][ T1479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.624790][ T1479] RIP: 0033:0x7f905f79e019 [ 59.624822][ T1479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.624845][ T1479] RSP: 002b:00007f90605e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.624872][ T1479] RAX: ffffffffffffffda RBX: 00007f905fa25fa0 RCX: 00007f905f79e019 [ 59.624892][ T1479] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 59.624909][ T1479] RBP: 00007f905f83500c R08: 0000000000000000 R09: 0000000000000001 [ 59.624926][ T1479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.624942][ T1479] R13: 00007f905fa26038 R14: 00007f905fa25fa0 R15: 00007ffe0d1fcf48 [ 59.624963][ T1479] [ 59.632184][ T399] usb 2-1: USB disconnect, device number 16 [ 59.899238][ T31] ftdi_sio 3-1:0.49: FTDI USB Serial Device converter detected [ 59.907549][ T31] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 59.917205][ T31] usb 3-1: USB disconnect, device number 13 [ 59.929155][ T31] ftdi_sio 3-1:0.49: device disconnected [ 59.945842][ T1506] syzkaller0: entered promiscuous mode [ 60.396136][ T1516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.445706][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 60.445723][ T36] audit: type=1400 audit(60.432:295): avc: denied { mount } for pid=1521 comm="syz.2.463" name="/" dev="configfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.475337][ T1523] rust_binder: Got transaction with invalid offset. [ 60.475383][ T1523] rust_binder: Failure in copy_transaction_data: EINVAL [ 60.483062][ T1523] rust_binder: 1521:1523 transaction to 1521 failed: EINVAL [ 60.493129][ T1523] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 60.533692][ T36] audit: type=1400 audit(60.462:296): avc: denied { map } for pid=1521 comm="syz.2.463" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.558907][ T1523] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 60.572792][ T1523] udc dummy_udc.0: failed to start g1: -22 [ 60.588000][ T1523] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 60.599480][ T36] audit: type=1400 audit(60.462:297): avc: denied { write } for pid=1521 comm="syz.2.463" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.621911][ T1523] UDC core: g1: couldn't find an available UDC or it's busy [ 60.630779][ T36] audit: type=1400 audit(60.462:298): avc: denied { call } for pid=1521 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 60.675242][ T1532] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 60.682240][ T1532] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 60.690546][ T1532] udc dummy_udc.0: failed to start g1: -22 [ 60.696554][ T1532] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 60.707401][ T1532] UDC core: g1: couldn't find an available UDC or it's busy [ 60.737486][ T1534] input: syz1 as /devices/virtual/input/input16 [ 60.780191][ T1537] FAULT_INJECTION: forcing a failure. [ 60.780191][ T1537] name failslab, interval 1, probability 0, space 0, times 0 [ 60.793018][ T1537] CPU: 1 UID: 0 PID: 1537 Comm: syz.0.469 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 60.793047][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.793060][ T1537] Call Trace: [ 60.793067][ T1537] [ 60.793074][ T1537] __dump_stack+0x21/0x30 [ 60.793106][ T1537] dump_stack_lvl+0x140/0x1c0 [ 60.793134][ T1537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.793164][ T1537] dump_stack+0x19/0x20 [ 60.793190][ T1537] should_fail_ex+0x3c2/0x510 [ 60.793214][ T1537] should_failslab+0xac/0x100 [ 60.793238][ T1537] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 60.793262][ T1537] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 60.793295][ T1537] krealloc_noprof+0x8d/0x130 [ 60.793317][ T1537] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x56/0x3d0 [ 60.793347][ T1537] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x5b4/0x18e0 [ 60.793384][ T1537] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 60.793419][ T1537] ? avc_has_extended_perms+0x7fb/0xe60 [ 60.793443][ T1537] ? __asan_memcpy+0x5a/0x80 [ 60.793462][ T1537] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 60.793492][ T1537] ? __asan_set_shadow_00+0x12/0x20 [ 60.793521][ T1537] ? do_vfs_ioctl+0x182d/0x2010 [ 60.793545][ T1537] ? arch_stack_walk+0x10a/0x170 [ 60.793565][ T1537] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 60.793591][ T1537] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 60.793621][ T1537] ? _parse_integer+0x2e/0x40 [ 60.793644][ T1537] ? ioctl_has_perm+0x39a/0x500 [ 60.793662][ T1537] ? has_cap_mac_admin+0xd0/0xd0 [ 60.793682][ T1537] ? proc_fail_nth_write+0x184/0x220 [ 60.793712][ T1537] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.793742][ T1537] ? selinux_file_ioctl+0x732/0x1480 [ 60.793760][ T1537] ? vfs_write+0xbcf/0xfd0 [ 60.793780][ T1537] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 60.793824][ T1537] ? __cfi_vfs_write+0x10/0x10 [ 60.793844][ T1537] ? __kasan_check_write+0x18/0x20 [ 60.793863][ T1537] ? mutex_unlock+0x90/0x240 [ 60.793890][ T1537] ? __cfi_mutex_unlock+0x10/0x10 [ 60.793919][ T1537] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.793944][ T1537] ? security_file_ioctl+0x3e/0x110 [ 60.793974][ T1537] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 60.794003][ T1537] __se_sys_ioctl+0x132/0x1b0 [ 60.794032][ T1537] __x64_sys_ioctl+0x7f/0xa0 [ 60.794056][ T1537] x64_sys_call+0x1878/0x2ee0 [ 60.794074][ T1537] do_syscall_64+0x57/0xf0 [ 60.794095][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 60.794123][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.794148][ T1537] RIP: 0033:0x7fe5def9e019 [ 60.794165][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.794183][ T1537] RSP: 002b:00007fe5dfd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.794204][ T1537] RAX: ffffffffffffffda RBX: 00007fe5df225fa0 RCX: 00007fe5def9e019 [ 60.794219][ T1537] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 60.794233][ T1537] RBP: 00007fe5dfd84090 R08: 0000000000000000 R09: 0000000000000000 [ 60.794246][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.794258][ T1537] R13: 00007fe5df226038 R14: 00007fe5df225fa0 R15: 00007ffd47e6d248 [ 60.794276][ T1537] [ 61.161312][ T36] audit: type=1400 audit(61.142:299): avc: denied { compute_member } for pid=1541 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.522468][ T1553] tipc: Started in network mode [ 61.532700][ T1553] tipc: Node identity , cluster identity 4711 [ 61.852516][ T1567] tmpfs: Unknown parameter 'anode32' [ 62.202707][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 62.362670][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 62.373006][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.385523][ T31] usb 3-1: config 0 has no interface number 0 [ 62.403303][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 62.412453][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.429270][ T31] usb 3-1: Product: syz [ 62.438027][ T31] usb 3-1: Manufacturer: syz [ 62.452669][ T31] usb 3-1: SerialNumber: syz [ 62.462381][ T31] usb 3-1: config 0 descriptor?? [ 62.483944][ T31] smsc95xx v2.0.0 [ 62.795417][ T1578] tipc: Started in network mode [ 62.800358][ T1578] tipc: Node identity , cluster identity 4711 [ 62.899125][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 62.922704][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.005671][ T36] audit: type=1400 audit(62.992:300): avc: denied { setopt } for pid=1588 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.027270][ T1589] netlink: 84 bytes leftover after parsing attributes in process `syz.0.489'. [ 63.098671][ T36] audit: type=1400 audit(63.082:301): avc: denied { map } for pid=1594 comm="syz.1.492" path="socket:[13791]" dev="sockfs" ino=13791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.121707][ T36] audit: type=1400 audit(63.112:302): avc: denied { accept } for pid=1594 comm="syz.1.492" path="socket:[13791]" dev="sockfs" ino=13791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.182672][ T36] audit: type=1400 audit(63.162:303): avc: denied { block_suspend } for pid=1594 comm="syz.1.492" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.012661][ T36] audit: type=1400 audit(63.992:304): avc: denied { search } for pid=1605 comm="syz.0.496" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.628124][ T1630] size and base must be multiples of 4 kiB [ 64.636650][ T1630] CPU: 1 UID: 0 PID: 1630 Comm: syz.2.506 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 64.636683][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.636698][ T1630] Call Trace: [ 64.636705][ T1630] [ 64.636713][ T1630] __dump_stack+0x21/0x30 [ 64.636752][ T1630] dump_stack_lvl+0x140/0x1c0 [ 64.636782][ T1630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.636814][ T1630] dump_stack+0x19/0x20 [ 64.636841][ T1630] mtrr_del+0xcd/0xf0 [ 64.636866][ T1630] mtrr_ioctl+0xbf8/0x1170 [ 64.636891][ T1630] ? do_futex+0x37d/0x510 [ 64.636919][ T1630] ? __cfi_mtrr_ioctl+0x10/0x10 [ 64.636947][ T1630] ? __cfi_mtrr_ioctl+0x10/0x10 [ 64.636973][ T1630] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 64.636997][ T1630] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 64.637019][ T1630] __se_sys_ioctl+0x132/0x1b0 [ 64.637045][ T1630] __x64_sys_ioctl+0x7f/0xa0 [ 64.637070][ T1630] x64_sys_call+0x1878/0x2ee0 [ 64.637090][ T1630] do_syscall_64+0x57/0xf0 [ 64.637114][ T1630] ? clear_bhb_loop+0x50/0xa0 [ 64.637142][ T1630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.637169][ T1630] RIP: 0033:0x7f0ea7f9e019 [ 64.637188][ T1630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.637206][ T1630] RSP: 002b:00007f0ea8eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.637229][ T1630] RAX: ffffffffffffffda RBX: 00007f0ea8225fa0 RCX: 00007f0ea7f9e019 [ 64.637245][ T1630] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000007 [ 64.637261][ T1630] RBP: 00007f0ea803500c R08: 0000000000000000 R09: 0000000000000000 [ 64.637275][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.637288][ T1630] R13: 00007f0ea8226038 R14: 00007f0ea8225fa0 R15: 00007ffe9baea8b8 [ 64.637305][ T1630] [ 64.927934][ T1634] capability: warning: `syz.2.508' uses 32-bit capabilities (legacy support in use) [ 65.152721][ T451] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 65.312722][ T451] usb 2-1: Using ep0 maxpacket: 32 [ 65.319159][ T451] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.327548][ T451] usb 2-1: config 0 has no interface number 0 [ 65.335436][ T451] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.344827][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.354774][ T451] usb 2-1: Product: syz [ 65.362350][ T451] usb 2-1: Manufacturer: syz [ 65.367208][ T451] usb 2-1: SerialNumber: syz [ 65.376414][ T451] usb 2-1: config 0 descriptor?? [ 65.383846][ T451] smsc95xx v2.0.0 [ 65.514809][ T1637] FAULT_INJECTION: forcing a failure. [ 65.514809][ T1637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.527943][ T1637] CPU: 1 UID: 0 PID: 1637 Comm: syz.2.509 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 65.527973][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.527986][ T1637] Call Trace: [ 65.527992][ T1637] [ 65.528000][ T1637] __dump_stack+0x21/0x30 [ 65.528050][ T1637] dump_stack_lvl+0x140/0x1c0 [ 65.528083][ T1637] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.528123][ T1637] ? clockevents_program_event+0x254/0x350 [ 65.528146][ T1637] dump_stack+0x19/0x20 [ 65.528171][ T1637] should_fail_ex+0x3c2/0x510 [ 65.528195][ T1637] should_fail+0xf/0x20 [ 65.528214][ T1637] should_fail_usercopy+0x1e/0x30 [ 65.528253][ T1637] fpu__restore_sig+0x1ff/0x10b0 [ 65.528301][ T1637] ? __cfi_fpu__restore_sig+0x10/0x10 [ 65.528336][ T1637] ? __kasan_check_write+0x18/0x20 [ 65.528361][ T1637] __ia32_sys_rt_sigreturn+0x6e9/0x830 [ 65.528384][ T1637] ? _raw_spin_unlock_irq+0x45/0x70 [ 65.528414][ T1637] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 65.528443][ T1637] ? __kasan_check_read+0x15/0x20 [ 65.528467][ T1637] x64_sys_call+0x2c14/0x2ee0 [ 65.528489][ T1637] do_syscall_64+0x57/0xf0 [ 65.528514][ T1637] ? clear_bhb_loop+0x50/0xa0 [ 65.528547][ T1637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.528577][ T1637] RIP: 0033:0x7f0ea7f9e017 [ 65.528595][ T1637] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 65.528616][ T1637] RSP: 002b:00007f0ea8e94028 EFLAGS: 00000246 [ 65.528636][ T1637] RAX: 0000000000000010 RBX: 00007f0ea8226090 RCX: 00007f0ea7f9e019 [ 65.528654][ T1637] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 65.528670][ T1637] RBP: 00007f0ea8e94090 R08: 0000000000000000 R09: 0000000000000000 [ 65.528685][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.528699][ T1637] R13: 00007f0ea8226128 R14: 00007f0ea8226090 R15: 00007ffe9baea8b8 [ 65.528720][ T1637] [ 65.929594][ T451] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 65.962663][ T451] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.172622][ T451] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 66.192748][ T451] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 66.326621][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 66.326638][ T36] audit: type=1400 audit(66.312:310): avc: denied { setattr } for pid=1638 comm="syz.2.510" name="sda1" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.427445][ T36] audit: type=1400 audit(66.412:311): avc: denied { create } for pid=1643 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.480471][ T36] audit: type=1400 audit(66.452:312): avc: denied { mounton } for pid=1645 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.542226][ T1645] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.549492][ T1645] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.557095][ T1645] bridge_slave_0: entered allmulticast mode [ 66.564507][ T1645] bridge_slave_0: entered promiscuous mode [ 66.571303][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.578533][ T1645] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.585625][ T1645] bridge_slave_1: entered allmulticast mode [ 66.591897][ T1645] bridge_slave_1: entered promiscuous mode [ 66.602683][ T563] bridge_slave_1: left allmulticast mode [ 66.608960][ T563] bridge_slave_1: left promiscuous mode [ 66.614690][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.622300][ T563] bridge_slave_0: left allmulticast mode [ 66.628159][ T563] bridge_slave_0: left promiscuous mode [ 66.633868][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.664780][ T36] audit: type=1400 audit(66.652:313): avc: denied { create } for pid=1654 comm="syz.2.516" name="wHeight" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 66.684806][ T36] audit: type=1400 audit(66.672:314): avc: denied { getopt } for pid=1654 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.786514][ T563] veth1_macvtap: left promiscuous mode [ 66.792113][ T563] veth0_vlan: left promiscuous mode [ 66.854465][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.861551][ T1645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.868877][ T1645] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.875946][ T1645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.899037][ T1491] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.906424][ T1491] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.916414][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.923470][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.934311][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.941357][ T1491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.970833][ T1645] veth0_vlan: entered promiscuous mode [ 66.983495][ T1645] veth1_macvtap: entered promiscuous mode [ 67.013628][ T36] audit: type=1400 audit(67.002:315): avc: denied { mounton } for pid=1645 comm="syz-executor" path="/root/syzkaller.ELgEV2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.095779][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 67.305404][ T36] audit: type=1400 audit(67.292:316): avc: denied { mount } for pid=1680 comm="syz.0.523" name="/" dev="ramfs" ino=14218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 67.609109][ T36] audit: type=1400 audit(67.592:317): avc: denied { accept } for pid=1702 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.852712][ T451] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.920775][ T10] usb 2-1: USB disconnect, device number 17 [ 68.003918][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.014916][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.024952][ T451] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 68.041441][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.051408][ T451] usb 5-1: config 0 descriptor?? [ 68.092610][ T1732] netlink: 'syz.2.541': attribute type 8 has an invalid length. [ 68.622832][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 68.634092][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -110 [ 68.664579][ T451] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -71 [ 68.675141][ T451] usb 5-1: USB disconnect, device number 2 [ 68.787064][ T36] audit: type=1400 audit(68.772:318): avc: denied { setopt } for pid=1735 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.942336][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.951517][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.017729][ T1738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.026492][ T31] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 69.185129][ T31] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.196373][ T31] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.206455][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.213932][ T31] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 69.223256][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.233096][ T31] usb 2-1: config 0 descriptor?? [ 69.346391][ T36] audit: type=1400 audit(69.332:319): avc: denied { read } for pid=1757 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.800912][ T31] a4tech 0003:09DA:022B.0006: ignoring exceeding usage max [ 69.809808][ T31] a4tech 0003:09DA:022B.0006: unknown main item tag 0x0 [ 69.816832][ T31] a4tech 0003:09DA:022B.0006: unknown main item tag 0x0 [ 69.823815][ T31] a4tech 0003:09DA:022B.0006: unknown main item tag 0x0 [ 69.831539][ T31] a4tech 0003:09DA:022B.0006: hidraw0: USB HID v0.08 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 70.002980][ T31] usb 2-1: USB disconnect, device number 18 [ 70.695426][ T1792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.562'. [ 70.704478][ T1792] netlink: 19 bytes leftover after parsing attributes in process `syz.1.562'. [ 70.713482][ T1792] netlink: 'syz.1.562': attribute type 6 has an invalid length. [ 70.721154][ T1792] netlink: 'syz.1.562': attribute type 5 has an invalid length. [ 70.728832][ T1792] netlink: 19 bytes leftover after parsing attributes in process `syz.1.562'. [ 70.993803][ T1804] fuse: blksize only supported for fuseblk [ 71.002820][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 71.162684][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 71.169077][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.179584][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 71.192256][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 71.201569][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.209734][ T45] usb 2-1: Product: syz [ 71.214052][ T45] usb 2-1: Manufacturer: syz [ 71.218650][ T45] usb 2-1: SerialNumber: syz [ 71.445784][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.453015][ T45] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 71.460868][ T45] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 71.469464][ T45] usb 2-1: 2:1 : sample bitwidth 60 in over sample bytes 3 [ 71.476752][ T45] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 71.485406][ T45] usb 2-1: USB disconnect, device number 19 [ 71.497306][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.222787][ T451] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 72.233568][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 72.233582][ T36] audit: type=1400 audit(72.222:323): avc: denied { map } for pid=1836 comm="syz.4.579" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.400479][ T451] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.409596][ T451] usb 2-1: not running at top speed; connect to a high speed hub [ 72.418115][ T451] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.428542][ T451] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.444151][ T451] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 72.453367][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.461375][ T451] usb 2-1: Product: syz [ 72.466004][ T451] usb 2-1: Manufacturer: syz [ 72.470637][ T451] usb 2-1: SerialNumber: syz [ 72.636539][ T1500] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.701974][ T451] usb 2-1: 0:1 : does not exist [ 72.711229][ T451] usb 2-1: USB disconnect, device number 20 [ 72.724829][ T1867] netlink: 'syz.1.590': attribute type 10 has an invalid length. [ 72.849695][ T36] audit: type=1326 audit(72.832:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.1.592" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f905f79e019 code=0x0 [ 73.508398][ T1885] netlink: 1 bytes leftover after parsing attributes in process `syz.2.597'. [ 73.531594][ T1887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.540145][ T1887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.605457][ T36] audit: type=1400 audit(73.592:325): avc: denied { shutdown } for pid=1892 comm="syz.0.601" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.628035][ T1893] tipc: Started in network mode [ 73.633032][ T1893] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 73.642039][ T1893] tipc: Enabling of bearer rejected, failed to enable media [ 73.698393][ T36] audit: type=1400 audit(73.682:326): avc: denied { module_load } for pid=1897 comm="syz.1.603" path="/139/bus" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 73.698419][ T1898] Invalid ELF header len 7 [ 73.777017][ T1898] overlay: ./bus is not a directory [ 73.910784][ T36] audit: type=1400 audit(73.892:327): avc: denied { listen } for pid=1905 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.929879][ T36] audit: type=1400 audit(73.892:328): avc: denied { accept } for pid=1905 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.078551][ T1909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.087580][ T1909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.222689][ T451] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 74.384088][ T451] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.395453][ T451] usb 2-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 74.404859][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.413066][ T451] usb 2-1: Product: syz [ 74.417360][ T451] usb 2-1: Manufacturer: syz [ 74.422027][ T451] usb 2-1: SerialNumber: syz [ 74.526213][ T36] audit: type=1400 audit(74.512:329): avc: denied { connect } for pid=1913 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.634748][ T36] audit: type=1400 audit(74.622:330): avc: denied { cmd } for pid=1905 comm="iou-wrk-1906" path="socket:[17715]" dev="sockfs" ino=17715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.702670][ T1863] Bluetooth: hci0: command 0x1003 tx timeout [ 74.708780][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.759741][ T451] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 74.795263][ T451] usb 2-1: USB disconnect, device number 21 [ 74.811249][ T1923] udevd[1923]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.892788][ T1929] tipc: Started in network mode [ 74.898159][ T1929] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 74.907381][ T1929] tipc: Enabling of bearer rejected, failed to enable media [ 74.934612][ T1931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 74.977527][ T36] audit: type=1400 audit(74.962:331): avc: denied { mount } for pid=1933 comm="syz.2.614" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 75.016875][ T36] audit: type=1400 audit(75.002:332): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 75.132711][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.151985][ T1947] FAULT_INJECTION: forcing a failure. [ 75.151985][ T1947] name failslab, interval 1, probability 0, space 0, times 0 [ 75.164693][ T1947] CPU: 0 UID: 0 PID: 1947 Comm: syz.2.619 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 75.164716][ T1947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.164726][ T1947] Call Trace: [ 75.164731][ T1947] [ 75.164737][ T1947] __dump_stack+0x21/0x30 [ 75.164763][ T1947] dump_stack_lvl+0x140/0x1c0 [ 75.164784][ T1947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.164807][ T1947] dump_stack+0x19/0x20 [ 75.164828][ T1947] should_fail_ex+0x3c2/0x510 [ 75.164852][ T1947] should_failslab+0xac/0x100 [ 75.164871][ T1947] __kmalloc_node_noprof+0x69/0x500 [ 75.164888][ T1947] ? __kvmalloc_node_noprof+0x128/0x300 [ 75.164912][ T1947] ? __kasan_kmalloc+0x96/0xb0 [ 75.164930][ T1947] __kvmalloc_node_noprof+0x128/0x300 [ 75.164954][ T1947] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 75.164978][ T1947] ? __kvmalloc_node_noprof+0x173/0x300 [ 75.165001][ T1947] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 75.165025][ T1947] io_futex_cache_init+0x4e/0x1a0 [ 75.165042][ T1947] io_ring_ctx_alloc+0x762/0x1dc0 [ 75.165059][ T1947] io_uring_create+0x2e0/0x13f0 [ 75.165073][ T1947] ? __kasan_check_write+0x18/0x20 [ 75.165107][ T1947] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 75.165129][ T1947] ? __kasan_check_write+0x18/0x20 [ 75.165144][ T1947] ? __x64_sys_io_uring_setup+0x80/0x80 [ 75.165168][ T1947] ? __kasan_check_read+0x15/0x20 [ 75.165183][ T1947] __x64_sys_io_uring_setup+0x5f/0x80 [ 75.165205][ T1947] x64_sys_call+0x22c0/0x2ee0 [ 75.165219][ T1947] do_syscall_64+0x57/0xf0 [ 75.165237][ T1947] ? clear_bhb_loop+0x50/0xa0 [ 75.165258][ T1947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.165279][ T1947] RIP: 0033:0x7f0ea7f9e019 [ 75.165292][ T1947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.165306][ T1947] RSP: 002b:00007f0ea8eb4ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 75.165323][ T1947] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f0ea7f9e019 [ 75.165337][ T1947] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 75.165349][ T1947] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 75.165360][ T1947] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 75.165371][ T1947] R13: 0000200000000890 R14: 00007f0ea8eb4fd8 R15: 0000000000000000 [ 75.165384][ T1947] [ 75.482681][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 75.488851][ T65] usb 5-1: config index 0 descriptor too short (expected 548, got 36) [ 75.497075][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.508052][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 75.520896][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 75.529981][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.538623][ T65] usb 5-1: config 0 descriptor?? [ 75.548481][ T65] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 75.556547][ T65] usbhid 5-1:0.0: can't add hid device: -22 [ 75.562489][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 75.702711][ T451] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 75.852704][ T451] usb 2-1: Using ep0 maxpacket: 32 [ 75.859041][ T451] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 75.867343][ T451] usb 2-1: config 0 has no interface number 0 [ 75.873489][ T451] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 75.883504][ T451] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.893438][ T451] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.903421][ T451] usb 2-1: config 0 interface 196 has no altsetting 0 [ 75.911725][ T451] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 75.920977][ T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.929043][ T451] usb 2-1: Product: syz [ 75.933315][ T451] usb 2-1: Manufacturer: syz [ 75.937996][ T451] usb 2-1: SerialNumber: syz [ 75.943796][ T451] usb 2-1: config 0 descriptor?? [ 75.949117][ T1960] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 76.217797][ T451] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 76.225336][ T451] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 76.235239][ T1969] overlayfs: overlapping lowerdir path [ 76.241643][ T451] usb 2-1: USB disconnect, device number 22 [ 76.329915][ T65] usb 5-1: USB disconnect, device number 3 [ 76.596123][ T1985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1985 comm=syz.4.633 [ 76.625951][ T1987] loop7: detected capacity change from 0 to 16384 [ 76.653843][ T1987] loop7: detected capacity change from 16384 to 16383 [ 76.749332][ T1994] syzkaller1: entered promiscuous mode [ 76.755445][ T1994] syzkaller1: entered allmulticast mode [ 76.855901][ T2008] BUG: scheduling while atomic: syz.4.642/2008/0x00000002 [ 76.863103][ T2008] Modules linked in: [ 76.867018][ T2008] CPU: 0 UID: 0 PID: 2008 Comm: syz.4.642 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 76.867039][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.867050][ T2008] Call Trace: [ 76.867055][ T2008] [ 76.867061][ T2008] __dump_stack+0x21/0x30 [ 76.867086][ T2008] dump_stack_lvl+0x140/0x1c0 [ 76.867108][ T2008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.867130][ T2008] ? is_bpf_text_address+0x17b/0x1a0 [ 76.867155][ T2008] dump_stack+0x19/0x20 [ 76.867189][ T2008] __schedule_bug+0x12b/0x200 [ 76.867205][ T2008] ? find_proxy_task+0x2460/0x2460 [ 76.867241][ T2008] __schedule+0xb85/0x20b0 [ 76.867263][ T2008] ? is_bpf_text_address+0x17b/0x1a0 [ 76.867289][ T2008] ? kernel_text_address+0xa9/0xe0 [ 76.867313][ T2008] ? __sched_text_start+0x10/0x10 [ 76.867333][ T2008] ? unwind_get_return_address+0x51/0x90 [ 76.867355][ T2008] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 76.867375][ T2008] ? arch_stack_walk+0x10a/0x170 [ 76.867392][ T2008] ? __kasan_check_write+0x18/0x20 [ 76.867409][ T2008] ? _raw_spin_lock_irq+0x93/0x120 [ 76.867428][ T2008] ? rwsem_set_nonspinnable+0x140/0x140 [ 76.867455][ T2008] schedule+0xc5/0x240 [ 76.867474][ T2008] schedule_preempt_disabled+0x14/0x30 [ 76.867496][ T2008] rwsem_down_read_slowpath+0x88c/0x14c0 [ 76.867523][ T2008] ? down_write_killable+0x2d0/0x2d0 [ 76.867569][ T2008] ? __kasan_check_write+0x18/0x20 [ 76.867593][ T2008] ? downgrade_write+0x470/0x470 [ 76.867630][ T2008] ? call_rcu_nocb+0x694/0xc60 [ 76.867667][ T2008] down_read+0x95/0xe0 [ 76.867710][ T2008] ? __cfi_down_read+0x10/0x10 [ 76.867746][ T2008] kernfs_find_and_get_ns+0x76/0x130 [ 76.867779][ T2008] sysfs_unmerge_group+0x66/0x130 [ 76.867808][ T2008] dpm_sysfs_remove+0x64/0xd0 [ 76.867839][ T2008] device_del+0x241/0xcf0 [ 76.867874][ T2008] ? __cfi_class_find_device+0x10/0x10 [ 76.867901][ T2008] ? __cfi_device_del+0x10/0x10 [ 76.867935][ T2008] ? __kasan_check_write+0x18/0x20 [ 76.867960][ T2008] ? kobject_put+0x1cc/0x2a0 [ 76.867987][ T2008] device_destroy+0xb0/0x100 [ 76.868023][ T2008] ? __cfi_device_destroy+0x10/0x10 [ 76.868060][ T2008] ? __kasan_check_write+0x18/0x20 [ 76.868086][ T2008] android_device_destroy+0x118/0x180 [ 76.868120][ T2008] gadgets_drop+0x1d/0x30 [ 76.868143][ T2008] ? __cfi_gadgets_drop+0x10/0x10 [ 76.868165][ T2008] configfs_rmdir+0x8b7/0x9b0 [ 76.868200][ T2008] vfs_rmdir+0x3de/0x560 [ 76.868234][ T2008] do_rmdir+0x29a/0x590 [ 76.868268][ T2008] ? __cfi_do_rmdir+0x10/0x10 [ 76.868303][ T2008] ? __kasan_check_write+0x18/0x20 [ 76.868329][ T2008] __x64_sys_rmdir+0x4b/0x60 [ 76.868363][ T2008] x64_sys_call+0xaf7/0x2ee0 [ 76.868385][ T2008] do_syscall_64+0x57/0xf0 [ 76.868423][ T2008] ? clear_bhb_loop+0x50/0xa0 [ 76.868473][ T2008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.868501][ T2008] RIP: 0033:0x7fe91979e019 [ 76.868521][ T2008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.868540][ T2008] RSP: 002b:00007fe91a702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 76.868565][ T2008] RAX: ffffffffffffffda RBX: 00007fe919a25fa0 RCX: 00007fe91979e019 [ 76.868583][ T2008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 76.868599][ T2008] RBP: 00007fe91983500c R08: 0000000000000000 R09: 0000000000000000 [ 76.868614][ T2008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.868628][ T2008] R13: 00007fe919a26038 R14: 00007fe919a25fa0 R15: 00007ffc2f99b678 [ 76.868665][ T2008] [ 76.869268][ T2008] ------------[ cut here ]------------ [ 77.225126][ T2008] WARNING: CPU: 1 PID: 2008 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 77.234870][ T2008] Modules linked in: [ 77.238783][ T2008] CPU: 1 UID: 0 PID: 2008 Comm: syz.4.642 Tainted: G W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 77.251754][ T2008] Tainted: [W]=WARN [ 77.255594][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.265686][ T2008] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 77.271881][ T2008] Code: 48 83 3d f4 f2 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c a4 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 77.291555][ T2008] RSP: 0018:ffffc9000ead7980 EFLAGS: 00010206 [ 77.297714][ T2008] RAX: 000000007fffffff RBX: ffff8881f5e690a0 RCX: 0000000000c690a0 [ 77.305745][ T2008] RDX: ffff8881f5e690a0 RSI: 0000000000000001 RDI: 0000000020423465 [ 77.313778][ T2008] RBP: ffffc9000ead79e0 R08: 00000000ffd63c09 R09: 00000000ba511339 [ 77.321762][ T2008] R10: 000000000000000d R11: ffffffff81759ed0 R12: 00000000114c690a [ 77.329800][ T2008] R13: 0000000000000000 R14: ffffc9000ead79f0 R15: 000000000000000d [ 77.337809][ T2008] FS: 00007fe91a7026c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.346779][ T2008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.353440][ T2008] CR2: 00007fe9197eb700 CR3: 000000011c496000 CR4: 00000000003526b0 [ 77.361449][ T2008] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.362755][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 77.369469][ T2008] DR3: 000000000000cbe6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 77.369492][ T2008] Call Trace: [ 77.388321][ T2008] [ 77.391269][ T2008] ? do_syscall_64+0x57/0xf0 [ 77.395885][ T2008] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.401979][ T2008] kasan_save_track+0x4f/0x80 [ 77.406684][ T2008] ? kasan_save_track+0x3e/0x80 [ 77.411561][ T2008] ? kasan_save_free_info+0x44/0x50 [ 77.416822][ T2008] ? __kasan_slab_free+0x5f/0x80 [ 77.421785][ T2008] ? kfree+0x158/0x440 [ 77.425883][ T2008] ? gadget_info_attr_release+0xcb/0x130 [ 77.431532][ T2008] ? config_item_put+0x178/0x240 [ 77.436528][ T2008] ? configfs_rmdir+0x8e8/0x9b0 [ 77.441398][ T2008] ? vfs_rmdir+0x3de/0x560 [ 77.445874][ T2008] ? do_rmdir+0x29a/0x590 [ 77.450233][ T2008] ? __x64_sys_rmdir+0x4b/0x60 [ 77.455042][ T2008] ? x64_sys_call+0xaf7/0x2ee0 [ 77.459937][ T2008] ? do_syscall_64+0x57/0xf0 [ 77.464591][ T2008] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.470695][ T2008] kasan_save_free_info+0x44/0x50 [ 77.475759][ T2008] __kasan_slab_free+0x5f/0x80 [ 77.480559][ T2008] kfree+0x158/0x440 [ 77.484512][ T2008] ? gadget_info_attr_release+0xcb/0x130 [ 77.490171][ T2008] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 77.496317][ T2008] gadget_info_attr_release+0xcb/0x130 [ 77.501817][ T2008] config_item_put+0x178/0x240 [ 77.506645][ T2008] ? __cfi_gadgets_drop+0x10/0x10 [ 77.511703][ T2008] configfs_rmdir+0x8e8/0x9b0 [ 77.515320][ T65] usb 2-1: device descriptor read/64, error -71 [ 77.516581][ T2008] vfs_rmdir+0x3de/0x560 [ 77.527031][ T2008] do_rmdir+0x29a/0x590 [ 77.531194][ T2008] ? __cfi_do_rmdir+0x10/0x10 [ 77.535922][ T2008] ? __kasan_check_write+0x18/0x20 [ 77.541076][ T2008] __x64_sys_rmdir+0x4b/0x60 [ 77.545816][ T2008] x64_sys_call+0xaf7/0x2ee0 [ 77.550427][ T2008] do_syscall_64+0x57/0xf0 [ 77.554986][ T2008] ? clear_bhb_loop+0x50/0xa0 [ 77.559695][ T2008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.565686][ T2008] RIP: 0033:0x7fe91979e019 [ 77.570135][ T2008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.589798][ T2008] RSP: 002b:00007fe91a702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 77.598261][ T2008] RAX: ffffffffffffffda RBX: 00007fe919a25fa0 RCX: 00007fe91979e019 [ 77.606279][ T2008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 77.614314][ T2008] RBP: 00007fe91983500c R08: 0000000000000000 R09: 0000000000000000 [ 77.622310][ T2008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.630321][ T2008] R13: 00007fe919a26038 R14: 00007fe919a25fa0 R15: 00007ffc2f99b678 [ 77.638365][ T2008] [ 77.641397][ T2008] ---[ end trace 0000000000000000 ]--- [ 77.648068][ T2008] BUG: scheduling while atomic: syz.4.642/2008/0x00000000 [ 77.656091][ T2008] Modules linked in: [ 77.660041][ T2008] CPU: 0 UID: 0 PID: 2008 Comm: syz.4.642 Tainted: G W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 77.660077][ T2008] Tainted: [W]=WARN [ 77.660084][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.660097][ T2008] Call Trace: [ 77.660104][ T2008] [ 77.660112][ T2008] __dump_stack+0x21/0x30 [ 77.660146][ T2008] dump_stack_lvl+0x140/0x1c0 [ 77.660178][ T2008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.660210][ T2008] ? kernel_text_address+0xa9/0xe0 [ 77.660244][ T2008] dump_stack+0x19/0x20 [ 77.660275][ T2008] __schedule_bug+0x12b/0x200 [ 77.660300][ T2008] ? find_proxy_task+0x2460/0x2460 [ 77.660326][ T2008] ? is_bpf_text_address+0x17b/0x1a0 [ 77.660361][ T2008] __schedule+0xb85/0x20b0 [ 77.660389][ T2008] ? __kernel_text_address+0x11/0x40 [ 77.660422][ T2008] ? plist_check_list+0x2a1/0x2c0 [ 77.660449][ T2008] ? __sched_text_start+0x10/0x10 [ 77.660477][ T2008] ? plist_add+0x4d4/0x570 [ 77.660503][ T2008] ? __futex_queue+0x19f/0x350 [ 77.660534][ T2008] ? __cfi___futex_queue+0x10/0x10 [ 77.660575][ T2008] schedule+0xc5/0x240 [ 77.660610][ T2008] futex_wait_queue+0xfc/0x240 [ 77.660628][ T2008] __futex_wait+0x15b/0x3d0 [ 77.660647][ T2008] ? __cfi___futex_wait+0x10/0x10 [ 77.660672][ T2008] ? __cfi_futex_wake_mark+0x10/0x10 [ 77.660705][ T2008] ? __kasan_check_read+0x15/0x20 [ 77.660725][ T2008] ? futex_wake+0x627/0x950 [ 77.660742][ T2008] ? futex_setup_timer+0xb4/0xd0 [ 77.660767][ T2008] futex_wait+0x128/0x7c0 [ 77.660785][ T2008] ? __cfi_futex_wait+0x10/0x10 [ 77.660806][ T2008] do_futex+0x32a/0x510 [ 77.660832][ T2008] ? __cfi_do_futex+0x10/0x10 [ 77.660858][ T2008] ? __kasan_slab_free+0x6a/0x80 [ 77.660881][ T2008] ? kmem_cache_free+0x1bd/0x4f0 [ 77.660903][ T2008] __se_sys_futex+0x13c/0x320 [ 77.660930][ T2008] ? putname+0x113/0x150 [ 77.660951][ T2008] ? __x64_sys_futex+0x110/0x110 [ 77.660980][ T2008] __x64_sys_futex+0xe9/0x110 [ 77.661007][ T2008] x64_sys_call+0x227f/0x2ee0 [ 77.661025][ T2008] do_syscall_64+0x57/0xf0 [ 77.661046][ T2008] ? clear_bhb_loop+0x50/0xa0 [ 77.661074][ T2008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.661100][ T2008] RIP: 0033:0x7fe91979e019 [ 77.661116][ T2008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.661133][ T2008] RSP: 002b:00007fe91a7020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.661154][ T2008] RAX: ffffffffffffffda RBX: 00007fe919a25fa8 RCX: 00007fe91979e019 [ 77.661170][ T2008] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe919a25fa8 [ 77.661183][ T2008] RBP: 00007fe919a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.661194][ T2008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.661206][ T2008] R13: 00007fe919a26038 R14: 00007ffc2f99b590 R15: 00007ffc2f99b678 [ 77.661221][ T2008] [ 78.002715][ T65] usb 2-1: device descriptor read/64, error -71 [ 78.242729][ T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 78.372707][ T65] usb 2-1: device descriptor read/64, error -71 [ 78.612716][ T65] usb 2-1: device descriptor read/64, error -71 [ 78.722802][ T65] usb usb2-port1: attempt power cycle [ 79.062706][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 79.083954][ T65] usb 2-1: device descriptor read/8, error -71 [ 79.213832][ T65] usb 2-1: device descriptor read/8, error -71 [ 79.452727][ T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 79.473758][ T65] usb 2-1: device descriptor read/8, error -71 [ 79.603817][ T65] usb 2-1: device descriptor read/8, error -71 [ 79.712873][ T65] usb usb2-port1: unable to enumerate USB device