last executing test programs: 2.145463028s ago: executing program 2 (id=122): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_setup(0x2, &(0x7f0000000140)) 2.120662158s ago: executing program 2 (id=123): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x68841) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0xfffffff8, 0x5f4, 0x1, 0x6, 0x0}) 2.107988999s ago: executing program 2 (id=124): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="196406"], 0x0, 0x0}) 1.665459389s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07"], 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.557032182s ago: executing program 1 (id=132): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0}) 1.529815793s ago: executing program 3 (id=133): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xfb, 0x5, 0x1ff, 0xa7, 0x2, 0x4}, {0x0, 0x1, 0x7, 0xfffffcda, 0x4, 0xc, 0x21fa498a}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.417153235s ago: executing program 3 (id=134): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x401, 0x9}) 1.378641166s ago: executing program 3 (id=135): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 1.153762912s ago: executing program 0 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) 1.088505043s ago: executing program 0 (id=137): setgroups(0x0, 0x0) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb, 0x12) 1.048629615s ago: executing program 0 (id=138): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000004080)='./file0\x00', 0x0, 0x0) 1.048267615s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 1.003576936s ago: executing program 1 (id=140): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x2, 0x0, 0x3, 0x2, 0xffffffffffffff00], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x3, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0xe, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x72, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70000, 0x50000, 0xc, 0x3, 0x0, 0x6, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.003104286s ago: executing program 0 (id=141): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000240)=""/48, 0x30}], 0x1, 0x7, 0x800) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 866.024769ms ago: executing program 1 (id=142): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xfb, 0x5, 0x1ff, 0xa7, 0x2, 0x4}, {0x0, 0x1, 0x7, 0xfffffcda, 0x4, 0xc, 0x21fa498a}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 769.428951ms ago: executing program 1 (id=143): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x401, 0x9}) 749.062642ms ago: executing program 1 (id=144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 735.226282ms ago: executing program 1 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 485.437448ms ago: executing program 3 (id=146): syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0x20, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2579, 0xa9f0, 0xb}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x5, 0x42}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x15, 0x40, 0x6}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) 413.16614ms ago: executing program 2 (id=147): setgroups(0x0, 0x0) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb, 0x12) 390.373201ms ago: executing program 2 (id=148): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000004080)='./file0\x00', 0x0, 0x0) 370.293601ms ago: executing program 2 (id=149): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0}) 86.082768ms ago: executing program 0 (id=150): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x2, 0x0, 0x3, 0x2, 0xffffffffffffff00], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x0, 0x2, 0x3, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0xe, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x72, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70000, 0x50000, 0xc, 0x3, 0x0, 0x6, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xfb, 0x5, 0x1ff, 0xa7, 0x2, 0x4}, {0x0, 0x1, 0x7, 0xfffffcda, 0x4, 0xc, 0x21fa498a}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 28.098145][ T36] audit: type=1400 audit(1786274202.920:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.103415][ T286] cgroup: Unknown subsys name 'net' [ 28.120998][ T36] audit: type=1400 audit(1786274202.920:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.148443][ T36] audit: type=1400 audit(1786274202.950:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.149084][ T286] cgroup: Unknown subsys name 'devices' [ 28.274660][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.280299][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.375704][ T36] audit: type=1400 audit(1786274203.200:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.399193][ T36] audit: type=1400 audit(1786274203.200:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.424091][ T36] audit: type=1400 audit(1786274203.200:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.474203][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.483140][ T36] audit: type=1400 audit(1786274203.310:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.508758][ T36] audit: type=1400 audit(1786274203.310:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.549308][ T36] audit: type=1400 audit(1786274203.370:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.575026][ T36] audit: type=1400 audit(1786274203.370:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.575721][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.438878][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.446346][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.453714][ T293] bridge_slave_0: entered allmulticast mode [ 29.460353][ T293] bridge_slave_0: entered promiscuous mode [ 29.467371][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.474668][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.481781][ T293] bridge_slave_1: entered allmulticast mode [ 29.488346][ T293] bridge_slave_1: entered promiscuous mode [ 29.511548][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.518713][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.525959][ T296] bridge_slave_0: entered allmulticast mode [ 29.532468][ T296] bridge_slave_0: entered promiscuous mode [ 29.541990][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.549116][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.556310][ T296] bridge_slave_1: entered allmulticast mode [ 29.562709][ T296] bridge_slave_1: entered promiscuous mode [ 29.644810][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.651886][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.659125][ T294] bridge_slave_0: entered allmulticast mode [ 29.665632][ T294] bridge_slave_0: entered promiscuous mode [ 29.675171][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.682303][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.689456][ T294] bridge_slave_1: entered allmulticast mode [ 29.696304][ T294] bridge_slave_1: entered promiscuous mode [ 29.702549][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.709626][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.716805][ T295] bridge_slave_0: entered allmulticast mode [ 29.723238][ T295] bridge_slave_0: entered promiscuous mode [ 29.730077][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.737235][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.744399][ T295] bridge_slave_1: entered allmulticast mode [ 29.750727][ T295] bridge_slave_1: entered promiscuous mode [ 29.866257][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.873365][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.880681][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.887776][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.903155][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.910246][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.917564][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.924656][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.962988][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.970072][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.977431][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.984514][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.009485][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.016667][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.024525][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.031577][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.047639][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.054992][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.062510][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.069753][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.077214][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.084836][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.092106][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.099476][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.123285][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.130346][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.138004][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.145091][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.162458][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.169529][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.179941][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.187035][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.211099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.218210][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.226155][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.233247][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.270293][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.277474][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.285844][ T296] veth0_vlan: entered promiscuous mode [ 30.297859][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.304964][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.318911][ T293] veth0_vlan: entered promiscuous mode [ 30.347304][ T296] veth1_macvtap: entered promiscuous mode [ 30.356906][ T293] veth1_macvtap: entered promiscuous mode [ 30.376301][ T294] veth0_vlan: entered promiscuous mode [ 30.403873][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.420013][ T294] veth1_macvtap: entered promiscuous mode [ 30.436377][ T295] veth0_vlan: entered promiscuous mode [ 30.491184][ T295] veth1_macvtap: entered promiscuous mode [ 30.702356][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.712378][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.762243][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.802462][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 30.853359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.864359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.874330][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.887360][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.896659][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.905580][ T62] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 30.914319][ T62] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 30.922791][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 30.924347][ T10] usb 1-1: config 0 descriptor?? [ 30.930507][ T310] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 30.934414][ T62] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 30.944407][ T31] usb 3-1: device descriptor read/64, error -71 [ 30.958862][ T310] usb 2-1: config 0 has no interface number 0 [ 30.959188][ T62] usb 4-1: config 220 has no interface number 2 [ 30.968005][ T310] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 30.974663][ T62] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 30.984813][ T310] usb 2-1: config 0 interface 196 has no altsetting 0 [ 30.995769][ T62] usb 4-1: config 220 interface 0 has no altsetting 0 [ 31.004897][ T310] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 31.009702][ T62] usb 4-1: config 220 interface 76 has no altsetting 0 [ 31.017839][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.025637][ T62] usb 4-1: config 220 interface 1 has no altsetting 0 [ 31.034506][ T310] usb 2-1: Product: syz [ 31.044579][ T310] usb 2-1: Manufacturer: syz [ 31.046509][ T62] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.050756][ T310] usb 2-1: SerialNumber: syz [ 31.060259][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.071442][ T62] usb 4-1: Product: syz [ 31.076105][ T62] usb 4-1: Manufacturer: syz [ 31.080782][ T62] usb 4-1: SerialNumber: syz [ 31.089725][ T310] usb 2-1: config 0 descriptor?? [ 31.095095][ T326] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.222191][ T31] usb 3-1: device descriptor read/64, error -71 [ 31.293251][ T62] usb 4-1: selecting invalid altsetting 0 [ 31.299214][ T62] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 31.305797][ T62] usb 4-1: No valid video chain found. [ 31.315017][ T62] usb 4-1: USB disconnect, device number 2 [ 31.386990][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.395205][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.402966][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.410780][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.418475][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.426211][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.434504][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.442066][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.449881][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.457652][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.465161][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.472705][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.480132][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.482380][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.488479][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.502562][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.510245][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 31.521621][ T10] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 31.632251][ T31] usb 3-1: device descriptor read/64, error -71 [ 31.663463][ T10] usb 1-1: USB disconnect, device number 2 [ 31.882233][ T31] usb 3-1: device descriptor read/64, error -71 [ 31.992828][ T31] usb usb3-port1: attempt power cycle [ 32.022364][ T310] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 32.031672][ T310] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 32.332285][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.353328][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.379026][ T10] usb 2-1: USB disconnect, device number 2 [ 32.423271][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 32.432170][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.493313][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.592284][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.599397][ T310] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 32.612248][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 32.621561][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.629648][ T310] usb 1-1: Product: syz [ 32.634334][ T310] usb 1-1: Manufacturer: syz [ 32.638976][ T310] usb 1-1: SerialNumber: syz [ 32.742192][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.763197][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.853898][ T310] usb 1-1: USB disconnect, device number 3 [ 32.867236][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.894671][ T31] usb 3-1: device descriptor read/8, error -71 [ 33.002331][ T31] usb usb3-port1: unable to enumerate USB device [ 33.120469][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 33.120489][ T36] audit: type=1400 audit(1786274207.940:102): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.156523][ T36] audit: type=1400 audit(1786274207.980:103): avc: denied { read } for pid=370 comm="syz.1.9" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.179939][ T36] audit: type=1400 audit(1786274207.980:104): avc: denied { open } for pid=370 comm="syz.1.9" path="/2/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.204176][ T36] audit: type=1400 audit(1786274208.000:105): avc: denied { mounton } for pid=370 comm="syz.1.9" path="/2/file0" dev="incremental-fs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.368379][ T36] audit: type=1400 audit(1786274208.190:106): avc: denied { read write } for pid=372 comm="syz.0.10" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.391722][ T36] audit: type=1400 audit(1786274208.190:107): avc: denied { open } for pid=372 comm="syz.0.10" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.395075][ T310] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.432699][ T310] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.521784][ T36] audit: type=1400 audit(1786274208.340:108): avc: denied { write } for pid=372 comm="syz.0.10" name="hidraw0" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.574269][ T36] audit: type=1400 audit(1786274208.400:109): avc: denied { read } for pid=378 comm="syz.3.12" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.598470][ T379] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.623523][ T36] audit: type=1400 audit(1786274208.400:110): avc: denied { open } for pid=378 comm="syz.3.12" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.653703][ T36] audit: type=1400 audit(1786274208.420:111): avc: denied { ioctl } for pid=378 comm="syz.3.12" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.695571][ T382] rust_binder: 380:382 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 33.942243][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.003042][ T310] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 34.011705][ T310] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.026700][ T361] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.112245][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 34.118723][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.125416][ T31] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 34.134572][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.143817][ T31] usb 3-1: config 0 descriptor?? [ 34.183490][ T361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.194685][ T361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.204681][ T361] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 34.213944][ T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.222991][ T361] usb 4-1: config 0 descriptor?? [ 34.552967][ T31] hid (null): usage index exceeded [ 34.559950][ T31] cypress 0003:04B4:07B1.0004: ignoring exceeding usage max [ 34.569113][ T31] cypress 0003:04B4:07B1.0004: ignoring exceeding usage max [ 34.576564][ T31] cypress 0003:04B4:07B1.0004: usage index exceeded [ 34.583290][ T31] cypress 0003:04B4:07B1.0004: item 0 4 2 2 parsing failed [ 34.590682][ T31] cypress 0003:04B4:07B1.0004: parse failed [ 34.596719][ T31] cypress 0003:04B4:07B1.0004: probe with driver cypress failed with error -22 [ 34.631800][ T361] usbhid 4-1:0.0: can't add hid device: -71 [ 34.638712][ T361] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.647745][ T361] usb 4-1: USB disconnect, device number 3 [ 34.762229][ T311] usb 3-1: USB disconnect, device number 6 [ 34.870381][ T405] rust_binder: 404:405 no such ref 0 [ 34.876025][ T405] rust_binder: 404:405 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 34.884084][ T405] rust_binder: 404:405 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 34.916728][ T62] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.072263][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 35.080125][ T62] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 35.089753][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.097852][ T62] usb 1-1: Product: syz [ 35.102098][ T62] usb 1-1: Manufacturer: syz [ 35.106816][ T62] usb 1-1: SerialNumber: syz [ 35.299062][ T413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.413414][ T324] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 35.431800][ T324] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.612266][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.763374][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 35.772595][ T311] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 35.783498][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 35.792935][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.801024][ T311] usb 4-1: Product: syz [ 35.805940][ T311] usb 4-1: Manufacturer: syz [ 35.811006][ T311] usb 4-1: SerialNumber: syz [ 35.819128][ T311] r8152-cfgselector 4-1: Unknown version 0x0000 [ 35.825949][ T311] r8152-cfgselector 4-1: config 0 descriptor?? [ 35.851867][ T431] fuse: Unknown parameter 'use00000000000000000000' [ 35.924315][ T62] usb 1-1: MIDIStreaming interface descriptor not found [ 35.939532][ T62] usb 1-1: USB disconnect, device number 4 [ 36.112232][ T324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.240008][ T311] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 36.263317][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.274376][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.284331][ T324] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 36.293776][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.302971][ T324] usb 2-1: config 0 descriptor?? [ 36.602214][ T62] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.711655][ T324] usbhid 2-1:0.0: can't add hid device: -71 [ 36.718746][ T324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.727849][ T324] usb 2-1: USB disconnect, device number 3 [ 36.753283][ T62] usb 3-1: Using ep0 maxpacket: 8 [ 36.762530][ T62] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.769257][ T62] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 36.778454][ T62] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.790887][ T62] usb 3-1: config 0 descriptor?? [ 37.198684][ T62] usbhid 3-1:0.0: can't add hid device: -71 [ 37.205210][ T62] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 37.214070][ T62] usb 3-1: USB disconnect, device number 7 [ 37.248115][ T451] fuse: Unknown parameter 'use00000000000000000000' [ 37.273300][ T361] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 37.282446][ T361] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.388695][ T459] capability: warning: `syz.0.46' uses 32-bit capabilities (legacy support in use) [ 37.992240][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.154653][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.165684][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.178218][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 38.187485][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.196351][ T31] usb 4-1: config 0 descriptor?? [ 38.379002][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 38.379022][ T36] audit: type=1400 audit(1786274213.200:128): avc: denied { create } for pid=483 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.392342][ T321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.410758][ T36] audit: type=1400 audit(1786274213.210:129): avc: denied { create } for pid=483 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.431437][ T36] audit: type=1400 audit(1786274213.210:130): avc: denied { write } for pid=483 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.562502][ T321] usb 2-1: Using ep0 maxpacket: 16 [ 38.568914][ T321] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 38.580241][ T321] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 38.593694][ T321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.600342][ T321] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 38.609453][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.618277][ T321] usb 2-1: config 0 descriptor?? [ 38.633635][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 38.639754][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 38.648722][ T31] usb 4-1: USB disconnect, device number 5 [ 38.702223][ T62] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.852295][ T62] usb 1-1: Using ep0 maxpacket: 8 [ 38.858593][ T62] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.865332][ T62] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 38.874473][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.883469][ T62] usb 1-1: config 0 descriptor?? [ 39.226759][ T321] usbhid 2-1:0.0: can't add hid device: -71 [ 39.233029][ T321] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.242064][ T321] usb 2-1: USB disconnect, device number 4 [ 39.291633][ T62] usbhid 1-1:0.0: can't add hid device: -71 [ 39.297817][ T62] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.306687][ T62] usb 1-1: USB disconnect, device number 5 [ 39.810190][ T498] rust_binder: 497:498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 39.818570][ T498] rust_binder: 497:498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 39.896492][ T510] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure [ 39.908511][ T36] audit: type=1400 audit(1786274214.730:131): avc: denied { create } for pid=509 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.929062][ T36] audit: type=1400 audit(1786274214.730:132): avc: denied { watch watch_reads } for pid=509 comm="syz.1.70" path="/22" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.960055][ T36] audit: type=1400 audit(1786274214.770:133): avc: denied { create } for pid=507 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.012205][ T36] audit: type=1400 audit(1786274214.800:134): avc: denied { append } for pid=512 comm="syz.1.71" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.088691][ T522] rust_binder: 521:522 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 40.096751][ T522] rust_binder: 521:522 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 40.122169][ T36] audit: type=1400 audit(1786274214.940:135): avc: denied { write } for pid=523 comm="syz.1.77" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.182900][ T36] audit: type=1400 audit(1786274215.010:136): avc: denied { create } for pid=531 comm="syz.1.80" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.204367][ T36] audit: type=1400 audit(1786274215.010:137): avc: denied { ioctl } for pid=531 comm="syz.1.80" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.262286][ T540] 9pnet_fd: Insufficient options for proto=fd [ 40.272274][ T62] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.294804][ T544] fuse: Unknown parameter 'user_id00000000000000000000' [ 40.432194][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 40.439860][ T62] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.447562][ T62] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 40.456726][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.465915][ T62] usb 4-1: config 0 descriptor?? [ 40.845121][ T564] 9pnet_fd: Insufficient options for proto=fd [ 40.868607][ T566] fuse: Unknown parameter 'user_id00000000000000000000' [ 40.877450][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 40.890477][ T62] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 40.899401][ T62] usb 4-1: USB disconnect, device number 6 [ 41.115825][ T583] 9pnet_fd: Insufficient options for proto=fd [ 41.137328][ T586] fuse: Unknown parameter 'user_id00000000000000000000' [ 41.417521][ T591] syzkaller0: entered promiscuous mode [ 41.439688][ T591] syzkaller0: entered allmulticast mode [ 41.644688][ T607] fuse: Bad value for 'fd' [ 41.802210][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.863703][ T618] rust_binder: 617:618 no such ref 0 [ 41.869279][ T618] rust_binder: 617:618 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 41.877457][ T618] rust_binder: 617:618 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 41.972239][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 41.983846][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 41.996595][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 42.002322][ T62] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.012234][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.021235][ T31] usb 1-1: Product: syz [ 42.025750][ T31] usb 1-1: Manufacturer: syz [ 42.030388][ T31] usb 1-1: SerialNumber: syz [ 42.032322][ T321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.055067][ T627] fuse: Bad value for 'fd' [ 42.162285][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 42.168843][ T62] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.175877][ T62] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 42.185089][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.194118][ T62] usb 4-1: config 0 descriptor?? [ 42.213291][ T321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.223624][ T321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.232715][ T321] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.248230][ T321] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 42.257482][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.265420][ T31] usb 1-1: USB disconnect, device number 6 [ 42.271985][ T321] usb 2-1: Product: syz [ 42.276465][ T321] usb 2-1: Manufacturer: syz [ 42.281114][ T321] usb 2-1: SerialNumber: syz [ 42.290708][ T321] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 42.294474][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.298270][ T321] usb 2-1: No valid video chain found. [ 42.490636][ T321] usb 2-1: USB disconnect, device number 5 [ 42.601261][ T62] usbhid 4-1:0.0: can't add hid device: -71 [ 42.607353][ T62] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 42.616297][ T62] usb 4-1: USB disconnect, device number 7 [ 42.975533][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.090499][ T648] fuse: Bad value for 'fd' [ 43.130088][ T650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.132280][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 43.149740][ T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 43.160250][ T31] usb 3-1: config 0 has no interface number 0 [ 43.166611][ T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 43.176955][ T31] usb 3-1: config 0 interface 196 has no altsetting 0 [ 43.185591][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 43.198962][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.207480][ T31] usb 3-1: Product: syz [ 43.211766][ T31] usb 3-1: Manufacturer: syz [ 43.216699][ T31] usb 3-1: SerialNumber: syz [ 43.223033][ T31] usb 3-1: config 0 descriptor?? [ 43.228411][ T635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.717384][ T670] fuse: Unknown parameter '0x0000000000000003' [ 43.738321][ T672] rust_binder: 671:672 no such ref 0 [ 43.743996][ T672] rust_binder: 671:672 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.752803][ T672] rust_binder: 671:672 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 43.788101][ T361] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 43.803399][ T361] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.820211][ T675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.845799][ T31] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 43.867620][ T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 43.879933][ T31] usb 3-1: USB disconnect, device number 8 [ 43.943102][ T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 44.396029][ T696] fuse: Unknown parameter '0x0000000000000003' [ 44.683863][ T700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.192508][ T37] INFO: task syz-executor:286 blocked for more than 122 seconds. [ 171.202893][ T37] Not tainted syzkaller #0 [ 171.209887][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 171.220144][ T37] task:syz-executor state:D stack:0 pid:286 tgid:286 ppid:285 flags:0x00000000 [ 171.234688][ T37] Call Trace: [ 171.240598][ T37] [ 171.243819][ T37] __schedule+0x1496/0x20b0 [ 171.249825][ T37] ? __sched_text_start+0x10/0x10 [ 171.256417][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 171.263071][ T37] ? __kasan_check_write+0x18/0x20 [ 171.269434][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 171.275924][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 171.282728][ T37] ? folio_mark_accessed+0x35f/0x620 [ 171.290240][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 171.297234][ T37] schedule+0xc5/0x240 [ 171.301744][ T37] io_schedule+0x88/0xe0 [ 171.306305][ T37] bit_wait_io+0x17/0xd0 [ 171.311062][ T37] __wait_on_bit+0xb3/0x2e0 [ 171.315846][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 171.320826][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 171.326638][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 171.331631][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 171.337699][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 171.343357][ T37] do_get_write_access+0x558/0xd70 [ 171.348521][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 171.354894][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 171.361244][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 171.368437][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 171.373636][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 171.379328][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 171.385094][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 171.390698][ T37] ext4_dirty_inode+0xc9/0x110 [ 171.395548][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 171.400966][ T37] __mark_inode_dirty+0x251/0xc50 [ 171.406077][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 171.411934][ T37] ? __cfi_pollwake+0x10/0x10 [ 171.416717][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 171.422617][ T37] file_update_time+0x1d3/0x210 [ 171.427499][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 171.432605][ T37] ? inode_update_timestamps+0x574/0x6e0 [ 171.438374][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 171.443943][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 171.449524][ T37] do_wp_page+0xb3d/0x2e80 [ 171.454096][ T37] ? pipe_read+0x1016/0x11d0 [ 171.458743][ T37] ? __cfi___check_object_size+0x10/0x10 [ 171.464471][ T37] ? folio_put+0x90/0x90 [ 171.468746][ T37] ? __kasan_check_write+0x18/0x20 [ 171.473928][ T37] ? _raw_spin_lock+0x92/0x120 [ 171.478724][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 171.484022][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 171.489795][ T37] handle_mm_fault+0x1017/0x1ba0 [ 171.494837][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 171.500156][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 171.505533][ T37] ? __kasan_check_read+0x15/0x20 [ 171.510616][ T37] do_user_addr_fault+0x951/0x1230 [ 171.515811][ T37] ? __cfi_ksys_read+0x10/0x10 [ 171.520607][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.526762][ T37] exc_page_fault+0x58/0xc0 [ 171.531319][ T37] asm_exc_page_fault+0x2b/0x30 [ 171.536369][ T37] RIP: 0033:0x7f3773c70163 [ 171.540915][ T37] RSP: 002b:00007ffe3c469420 EFLAGS: 00010206 [ 171.547121][ T37] RAX: 00007f376fbfcc7c RBX: 00007ffe3c469550 RCX: 0000000000000000 [ 171.555157][ T37] RDX: 00007f376fbfcc78 RSI: 0000000000000008 RDI: 00007ffe3c469550 [ 171.563252][ T37] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 171.571287][ T37] R10: 00007ffe3c469530 R11: 0000000000000000 R12: 0000000000000000 [ 171.579336][ T37] R13: 0000000000003384 R14: ffffffffffffcc7c R15: 0000000000000000 [ 171.587381][ T37] [ 171.590445][ T37] INFO: task syz.0.150:699 blocked for more than 123 seconds. [ 171.597961][ T37] Not tainted syzkaller #0 [ 171.602930][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 171.611598][ T37] task:syz.0.150 state:D stack:0 pid:699 tgid:699 ppid:293 flags:0x00000004 [ 171.622263][ T37] Call Trace: [ 171.625576][ T37] [ 171.628615][ T37] __schedule+0x1496/0x20b0 [ 171.633246][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 171.638312][ T37] ? __sched_text_start+0x10/0x10 [ 171.643418][ T37] ? __kasan_check_write+0x18/0x20 [ 171.648574][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 171.654193][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 171.660153][ T37] ? folio_mark_accessed+0x35f/0x620 [ 171.665527][ T37] schedule+0xc5/0x240 [ 171.669640][ T37] io_schedule+0x88/0xe0 [ 171.673989][ T37] bit_wait_io+0x17/0xd0 [ 171.678281][ T37] __wait_on_bit+0xb3/0x2e0 [ 171.682875][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 171.687853][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 171.693428][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 171.698589][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 171.704652][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 171.710354][ T37] do_get_write_access+0x558/0xd70 [ 171.715565][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 171.721594][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 171.727852][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 171.734604][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 171.739654][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 171.745504][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 171.751146][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 171.756631][ T37] ext4_dirty_inode+0xc9/0x110 [ 171.761530][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 171.767093][ T37] __mark_inode_dirty+0x251/0xc50 [ 171.772358][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 171.777944][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 171.783941][ T37] ? __kasan_check_read+0x15/0x20 [ 171.789008][ T37] file_update_time+0x1d3/0x210 [ 171.793955][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 171.799027][ T37] ? __kasan_check_write+0x18/0x20 [ 171.804218][ T37] ? folio_unlock+0x137/0x1b0 [ 171.808948][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 171.814762][ T37] do_pte_missing+0x12c4/0x4440 [ 171.819681][ T37] ? schedule+0xc5/0x240 [ 171.824014][ T37] ? futex_unqueue+0x136/0x160 [ 171.828818][ T37] ? __kasan_check_write+0x18/0x20 [ 171.834171][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 171.839692][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 171.845832][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 171.850906][ T37] ? timerqueue_del+0xd7/0x130 [ 171.855873][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 171.861738][ T37] ? hrtimer_try_to_cancel+0x49c/0x650 [ 171.867282][ T37] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 171.873065][ T37] handle_mm_fault+0x1189/0x1ba0 [ 171.878120][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 171.883582][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 171.888906][ T37] ? __kasan_check_write+0x18/0x20 [ 171.894090][ T37] ? __se_sys_futex+0x13c/0x320 [ 171.898984][ T37] do_user_addr_fault+0x951/0x1230 [ 171.904174][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 171.909861][ T37] exc_page_fault+0x58/0xc0 [ 171.914463][ T37] asm_exc_page_fault+0x2b/0x30 [ 171.919371][ T37] RIP: 0033:0x7f40ca672729 [ 171.923931][ T37] RSP: 002b:00007ffc202a1000 EFLAGS: 00010202 [ 171.930042][ T37] RAX: 0000001b2f123000 RBX: ffffffff8168ea68 RCX: 0000001b2f122ff8 [ 171.938328][ T37] RDX: 0000001b2ed24220 RSI: 0000000000000008 RDI: 00007f40cb555720 [ 171.946373][ T37] RBP: 00000000000001eb R08: 00007f40caa10000 R09: 00007f40caa12000 [ 171.954494][ T37] R10: 000000008168ea6c R11: 0000000000000009 R12: 00007f40caa26038 [ 171.962736][ T37] R13: 0000000000001c36 R14: ffffffff8168ea68 R15: 00007f40cb555720 [ 171.970907][ T37] ? console_flush_all+0x9d8/0xab0 [ 171.976153][ T37] ? console_flush_all+0x9d8/0xab0 [ 171.981326][ T37] [ 171.984571][ T37] INFO: task syz.3.151:702 blocked for more than 123 seconds. [ 171.992213][ T37] Not tainted syzkaller #0 [ 171.997282][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 172.006129][ T37] task:syz.3.151 state:D stack:0 pid:702 tgid:702 ppid:296 flags:0x00000004 [ 172.016415][ T37] Call Trace: [ 172.019732][ T37] [ 172.022739][ T37] __schedule+0x1496/0x20b0 [ 172.027294][ T37] ? __sched_text_start+0x10/0x10 [ 172.032409][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 172.037739][ T37] ? __kasan_check_write+0x18/0x20 [ 172.042911][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 172.048440][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 172.054401][ T37] ? folio_mark_accessed+0x35f/0x620 [ 172.059723][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 172.065955][ T37] schedule+0xc5/0x240 [ 172.070060][ T37] io_schedule+0x88/0xe0 [ 172.074370][ T37] bit_wait_io+0x17/0xd0 [ 172.078650][ T37] __wait_on_bit+0xb3/0x2e0 [ 172.083247][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 172.088223][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 172.093908][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 172.098977][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 172.105123][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 172.110638][ T37] do_get_write_access+0x558/0xd70 [ 172.115926][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 172.121969][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 172.128241][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 172.135075][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 172.140119][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 172.145854][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 172.151454][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 172.157111][ T37] ext4_dirty_inode+0xc9/0x110 [ 172.162035][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 172.167543][ T37] __mark_inode_dirty+0x251/0xc50 [ 172.172633][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 172.178389][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 172.184284][ T37] ? __kasan_check_read+0x15/0x20 [ 172.189366][ T37] file_update_time+0x1d3/0x210 [ 172.194407][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 172.199476][ T37] ? __kasan_check_write+0x18/0x20 [ 172.204747][ T37] ? folio_unlock+0x137/0x1b0 [ 172.209584][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 172.215479][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 172.220996][ T37] do_pte_missing+0x12c4/0x4440 [ 172.225980][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 172.231057][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 172.237109][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 172.242145][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 172.248534][ T37] handle_mm_fault+0x1189/0x1ba0 [ 172.253597][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 172.258936][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 172.264238][ T37] do_user_addr_fault+0x951/0x1230 [ 172.269401][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 172.275710][ T37] exc_page_fault+0x58/0xc0 [ 172.280298][ T37] asm_exc_page_fault+0x2b/0x30 [ 172.285253][ T37] RIP: 0033:0x7faf1426ba23 [ 172.289710][ T37] RSP: 002b:00007fff279aead0 EFLAGS: 00010246 [ 172.295860][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f064000 [ 172.303885][ T37] RDX: 0000001b2f024000 RSI: 0000000000400000 RDI: 00007faf145e0708 [ 172.311870][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.319920][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 172.327944][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff279aed60 [ 172.336018][ T37] [ 172.339155][ T37] NMI backtrace for cpu 0 [ 172.339170][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 172.339194][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.339204][ T37] Call Trace: [ 172.339209][ T37] [ 172.339215][ T37] __dump_stack+0x21/0x30 [ 172.339241][ T37] dump_stack_lvl+0x140/0x1c0 [ 172.339263][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.339286][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 172.339312][ T37] dump_stack+0x19/0x20 [ 172.339339][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 172.339357][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 172.339380][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 172.339396][ T37] ? sched_show_task+0x371/0x530 [ 172.339418][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 172.339439][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 172.339461][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 172.339483][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 172.339501][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 172.339522][ T37] watchdog+0xe45/0xf90 [ 172.339539][ T37] ? __kasan_check_write+0x18/0x20 [ 172.339556][ T37] ? __cfi_watchdog+0x10/0x10 [ 172.339572][ T37] ? __kasan_check_read+0x15/0x20 [ 172.339587][ T37] ? __kthread_parkme+0x12f/0x180 [ 172.339603][ T37] ? schedule+0xc5/0x240 [ 172.339622][ T37] kthread+0x2c7/0x360 [ 172.339639][ T37] ? __cfi_watchdog+0x10/0x10 [ 172.339655][ T37] ? __cfi_kthread+0x10/0x10 [ 172.339672][ T37] ret_from_fork+0x67/0xa0 [ 172.339695][ T37] ? __cfi_kthread+0x10/0x10 [ 172.339712][ T37] ret_from_fork_asm+0x1a/0x30 [ 172.339728][ T37] [ 172.339734][ T37] Sending NMI from CPU 0 to CPUs 1: [ 172.511810][ C1] NMI backtrace for cpu 1 [ 172.511826][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 172.511848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.511859][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 172.511891][ C1] Code: cc cc cc cc cc cc cc b8 5c 90 f4 6b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 172.511905][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 172.511920][ C1] RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff85a444fd [ 172.511933][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000074b84 [ 172.511944][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 172.511956][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 172.511968][ C1] R13: 1ffff110206cd260 R14: dffffc0000000000 R15: ffffffff87ecbfe8 [ 172.511981][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 172.511995][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.512006][ C1] CR2: 000055a22af5aff0 CR3: 000000010b7c4000 CR4: 00000000003526b0 [ 172.512023][ C1] Call Trace: [ 172.512030][ C1] [ 172.512038][ C1] default_idle+0x17/0x30 [ 172.512055][ C1] arch_cpu_idle+0xd/0x20 [ 172.512071][ C1] default_idle_call+0x3e/0x80 [ 172.512089][ C1] do_idle+0x1df/0x570 [ 172.512111][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 172.512134][ C1] cpu_startup_entry+0x47/0x60 [ 172.512154][ C1] start_secondary+0x12e/0x140 [ 172.512177][ C1] common_startup_64+0x13b/0x157 [ 172.512202][ C1]