last executing test programs: 6.247597113s ago: executing program 0 (id=581): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000b2c000/0x3000)=nil, &(0x7f0000499000/0x1000)=nil, 0xf, &(0x7f0000000040)=[{0x0, 0x200, 0x3140}, {0xa, 0x6, 0x7}, {0x1f0a, 0x7, 0x8}, {0xcf7, 0x8, 0x8}, {0x7fffffffffffffff, 0x9, 0x5}, {0x1, 0x1, 0x4}, {0x7, 0xd9a1, 0x9}, {0xb, 0xfffffffffffffffd, 0x9}], 0x8, 0x8, 0xcaec91c7d9613563, 0x41, 0x8, 0x80}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ac0)={&(0x7f000040b000/0x4000)=nil, 0x4000}) 5.89053017s ago: executing program 0 (id=582): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a002090410050203008400092100004001221800090581"], 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000001740)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001700)=@new_dev={0x2, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f00000017c0)) r2 = syz_open_dev$hiddev(&(0x7f0000000480), 0xa, 0x62080) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) 5.714125477s ago: executing program 1 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) clock_gettime(0x4, &(0x7f0000000300)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) preadv2(r2, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x1082, 0x41) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000a80)=""/4102, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write(r3, &(0x7f0000001ac0)='27', 0x2) mkdirat(r4, &(0x7f0000001b00)='./proc/thread-self/fail-nth\x00', 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.net/syz1\x00', 0x1ff) 5.316086978s ago: executing program 1 (id=585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@multicast1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7489}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b0000000000000000ff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 5.241534066s ago: executing program 1 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000048c0)="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", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b8050000000fb3c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac000640f01c866b818008ed0660f38806f008ee0", 0xa}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x5, 0xfffffffffffffff9, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffc, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x7, 0x4], 0x2, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.8137787s ago: executing program 1 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x149000, 0x19a) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x10, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000800)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000002000002e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000003"], 0x1b4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000500)=0xffd, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000540), 0x204, 0x2) getpeername$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x1c) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000580)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0xa, 0x7fffffff, 0x3}) getsockname(r0, &(0x7f00000002c0)=@phonet, &(0x7f0000000340)=0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x9) sendfile(r4, r5, 0x0, 0x108) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x3, 0x1, 0x101, 0x0, 0x0, {0x412ef8bbee4c4684, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x41}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x101}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4c0e4}, 0x40004) r6 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r6) 2.84484851s ago: executing program 0 (id=603): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0xfcbe, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x30000000, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x71f17c35bc64209b, 0x0, 0x0, @by_dev={r1}, [@verity={0x0, 0x40, 0x0, 0xc0, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x36f, 0x20, 0x3ee, 0x20, 'blake2b-256', 0x20, @hex4=[0x61, 0x66, 0x34, 0x38, 0x6b, 0x65, 0x61, 0x66], 0x20, @none, ' 1 try_verify_in_tasklet'}}]}) 2.774197368s ago: executing program 0 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x125000, 0x0) mkdirat(r0, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x1fa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000740), 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000001c0)=0x16a03c3) write(r2, &(0x7f0000000140)='4', 0x4b) write(r1, &(0x7f00000000c0)="270000001c000707030e0000120f0a001112ff000000078a151f75080039000500", 0xffffffffffffffd1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='t', 0x1) 2.75240931s ago: executing program 1 (id=605): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1461, 0x10700, 0x2, 0xb2}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000000440)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x200000000000000, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2.745028211s ago: executing program 0 (id=606): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1461, 0x10700, 0x2, 0xb2}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000000440)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 23) 2.365979779s ago: executing program 0 (id=611): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a002090410050203008400092100004001221800090581"], 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000001740)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001700)=@new_dev={0x2, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f00000017c0)) r2 = syz_open_dev$hiddev(&(0x7f0000000480), 0xa, 0x62080) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) 1.662169521s ago: executing program 1 (id=615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='pagemap\x00') pread64(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x7ffffffffffff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001280)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettimeofday(&(0x7f0000000000), 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xd0, 0x2a, 0xab, 0x8, 0x174f, 0x8a12, 0xb4d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x6, 0x19, 0x30, 0x6, "", [{{0x9, 0x4, 0x6, 0x4, 0x1, 0xe, 0x1, 0x0, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x4, 0x5, 0x9}, [@mdlm_detail={0x4, 0x24, 0x13, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0xb, 0x6, 0x2}]}], [{{0x9, 0x5, 0xb, 0x3, 0x20, 0xf, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) msync(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x4) r3 = memfd_create(&(0x7f0000000180)='-&:{-\xaa]{\xa0^a\xf8\xc5a\x9f\x05\xdf;}\xe3\x00', 0x1) readv(r3, &(0x7f0000000200), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 1.408391247s ago: executing program 2 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) clock_gettime(0x4, &(0x7f0000000300)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) preadv2(r2, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x1082, 0x41) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000a80)=""/4102, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write(r3, &(0x7f0000001ac0)='27', 0x2) mkdirat(r4, &(0x7f0000001b00)='./proc/thread-self/fail-nth\x00', 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.net/syz1\x00', 0x1ff) 1.18608279s ago: executing program 3 (id=618): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x10000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0xc4602, 0x0) write(r3, &(0x7f0000000780)='27', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x2}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf252300000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4044004) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fedbdf2503000000050012000009000202aaaaaaaaaaaa060008000000000006000800a2aa0000060008000000000006000800a0aa00000c0009000201aaaaaaaaaaaa060008005d550000", @ANYRES8=r1], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000640)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80001, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0x71f17c35bc64209b, 0x0, 0x0, @by_dev={r11}, [@verity={0x0, 0x40, 0x0, 0xd8, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x36f, 0x20, 0x3ee, 0x20, 'blake2b-256', 0x20, @fixed='0123456789abcdef0123456789abcdef', 0x20, @none, ' 1 try_verify_in_tasklet'}}]}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000300)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}) 1.093552859s ago: executing program 2 (id=619): socket$netlink(0x10, 0x3, 0xc) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x101a02, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1461, 0x10700, 0x2, 0xb2}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 979.89934ms ago: executing program 3 (id=620): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2000, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) 910.089208ms ago: executing program 3 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000048c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="b8050000000fb3c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac000640f01c866b818008ed0660f38806f008ee0", 0xa}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x3}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x5, 0xfffffffffffffff9, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffc, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x7, 0x4], 0x2, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 838.004505ms ago: executing program 2 (id=622): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1461, 0x10700, 0x2, 0xb2}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000000440)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 24) 759.961963ms ago: executing program 2 (id=623): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x2000000000000141, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x4d3, 0xe, 0x5, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4e20, @local}}]}, 0x70}, 0x1, 0x7}, 0x4004880) 642.098225ms ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x149000, 0x19a) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x10, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0"], 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000800)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000002000002e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000003"], 0x1b4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000500)=0xffd, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000540), 0x204, 0x2) getpeername$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x1c) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000580)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0xa, 0x7fffffff, 0x3}) getsockname(r0, &(0x7f00000002c0)=@phonet, &(0x7f0000000340)=0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x9) sendfile(r4, r5, 0x0, 0x108) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, 0x3, 0x1, 0x101, 0x0, 0x0, {0x412ef8bbee4c4684, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x41}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x101}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4c0e4}, 0x40004) r6 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r6) 495.48752ms ago: executing program 3 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@multicast1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7489}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 469.357373ms ago: executing program 3 (id=626): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1461, 0x10700, 0x2, 0xb2}, &(0x7f0000000fc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x16, &(0x7f0000000440)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x300000000000000, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 186.188372ms ago: executing program 3 (id=627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) clock_gettime(0x4, &(0x7f0000000300)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) preadv2(r2, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x1082, 0x41) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000a80)=""/4102, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write(r3, &(0x7f0000001ac0)='27', 0x2) mkdirat(r4, &(0x7f0000001b00)='./proc/thread-self/fail-nth\x00', 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.net/syz1\x00', 0x1ff) 0s ago: executing program 2 (id=628): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x3000) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/syz_tun/address\x00', 0xe0601, 0x74) read(r5, &(0x7f0000000200)=""/32, 0x20) pidfd_getfd(r5, r0, 0x0) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 72.229205][ T1623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.229218][ T1623] R13: 00007fc72ca26038 R14: 00007fc72ca25fa0 R15: 00007fffdacc80e8 [ 72.229229][ T1623] [ 72.490162][ T1627] incfs: Can't find or create .index dir in ./cgroup [ 72.500686][ T1627] incfs: mount failed -22 [ 72.551272][ T36] audit: type=1326 audit(1793727043.479:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1632 comm="syz.3.365" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16e119fb19 code=0x0 [ 72.761524][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 72.789406][ T1639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 72.932760][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.944004][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.957756][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.965169][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 72.974517][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.988008][ T45] usb 1-1: config 0 descriptor?? [ 73.410620][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 73.426918][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.448406][ T45] usb 1-1: USB disconnect, device number 28 [ 73.751794][ T325] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 73.765208][ T1654] FAULT_INJECTION: forcing a failure. [ 73.765208][ T1654] name failslab, interval 1, probability 0, space 0, times 0 [ 73.781662][ T1654] CPU: 1 UID: 0 PID: 1654 Comm: syz.3.372 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 73.781701][ T1654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.781716][ T1654] Call Trace: [ 73.781725][ T1654] [ 73.781735][ T1654] __dump_stack+0x21/0x30 [ 73.781761][ T1654] dump_stack_lvl+0x140/0x1c0 [ 73.781780][ T1654] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.781802][ T1654] dump_stack+0x19/0x20 [ 73.781820][ T1654] should_fail_ex+0x3c2/0x510 [ 73.781850][ T1654] ? iovec_from_user+0x94/0x310 [ 73.781873][ T1654] should_failslab+0xac/0x100 [ 73.781895][ T1654] __kmalloc_noprof+0x69/0x510 [ 73.781923][ T1654] ? iovec_from_user+0x94/0x310 [ 73.781947][ T1654] ? is_bpf_text_address+0x17b/0x1a0 [ 73.781973][ T1654] iovec_from_user+0x94/0x310 [ 73.781997][ T1654] ? __kernel_text_address+0x11/0x40 [ 73.782026][ T1654] __import_iovec+0x154/0x7d0 [ 73.782050][ T1654] ? arch_stack_walk+0x10a/0x170 [ 73.782074][ T1654] import_iovec+0x80/0xb0 [ 73.782098][ T1654] ___sys_recvmsg+0x4bb/0x590 [ 73.782123][ T1654] ? kstrtoull+0x13b/0x1e0 [ 73.782151][ T1654] ? __sys_recvmsg+0x260/0x260 [ 73.782179][ T1654] do_recvmmsg+0x328/0x790 [ 73.782203][ T1654] ? __sys_recvmmsg+0x2a0/0x2a0 [ 73.782232][ T1654] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 73.782261][ T1654] ? trace_event_buffer_commit+0x256/0x8f0 [ 73.782298][ T1654] __x64_sys_recvmmsg+0x199/0x250 [ 73.782326][ T1654] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 73.782355][ T1654] x64_sys_call+0x292c/0x2ee0 [ 73.782377][ T1654] do_syscall_64+0x57/0xf0 [ 73.782399][ T1654] ? clear_bhb_loop+0x50/0xa0 [ 73.782425][ T1654] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.782452][ T1654] RIP: 0033:0x7f16e119fb19 [ 73.782471][ T1654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.782489][ T1654] RSP: 002b:00007f16e20bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 73.782514][ T1654] RAX: ffffffffffffffda RBX: 00007f16e1425fa0 RCX: 00007f16e119fb19 [ 73.782530][ T1654] RDX: 0000000000000008 RSI: 0000200000004ac0 RDI: 0000000000000003 [ 73.782545][ T1654] RBP: 00007f16e20bc090 R08: 0000000000000000 R09: 0000000000000000 [ 73.782559][ T1654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.782573][ T1654] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 73.782591][ T1654] [ 73.961462][ T325] usb 2-1: device descriptor read/64, error -71 [ 74.122015][ T1660] netlink: 76 bytes leftover after parsing attributes in process `syz.3.375'. [ 74.126299][ T36] audit: type=1400 audit(1793727045.049:378): avc: denied { ioctl } for pid=1659 comm="syz.3.375" path="socket:[15197]" dev="sockfs" ino=15197 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.160377][ T36] audit: type=1400 audit(1793727045.089:379): avc: denied { ioctl } for pid=1659 comm="syz.3.375" path="socket:[15198]" dev="sockfs" ino=15198 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.269584][ T1681] FAULT_INJECTION: forcing a failure. [ 74.269584][ T1681] name failslab, interval 1, probability 0, space 0, times 0 [ 74.294460][ T1681] CPU: 0 UID: 0 PID: 1681 Comm: syz.3.383 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 74.294497][ T1681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.294511][ T1681] Call Trace: [ 74.294519][ T1681] [ 74.294528][ T1681] __dump_stack+0x21/0x30 [ 74.294552][ T1681] dump_stack_lvl+0x140/0x1c0 [ 74.294571][ T1681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.294590][ T1681] ? kvm_sched_clock_read+0x15/0x30 [ 74.294619][ T1681] ? __kasan_check_read+0x15/0x20 [ 74.294649][ T1681] dump_stack+0x19/0x20 [ 74.294667][ T1681] should_fail_ex+0x3c2/0x510 [ 74.294696][ T1681] should_failslab+0xac/0x100 [ 74.294715][ T1681] __kmalloc_cache_noprof+0x41/0x470 [ 74.294741][ T1681] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 74.294762][ T1681] io_ring_ctx_alloc+0x61/0x1dc0 [ 74.294783][ T1681] io_uring_create+0x2e0/0x13f0 [ 74.294804][ T1681] ? __kasan_check_write+0x18/0x20 [ 74.294830][ T1681] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 74.294855][ T1681] ? __x64_sys_io_uring_setup+0x80/0x80 [ 74.294876][ T1681] ? trace_event_buffer_commit+0x256/0x8f0 [ 74.294903][ T1681] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 74.294929][ T1681] __x64_sys_io_uring_setup+0x5f/0x80 [ 74.294954][ T1681] x64_sys_call+0x22c0/0x2ee0 [ 74.294973][ T1681] do_syscall_64+0x57/0xf0 [ 74.294993][ T1681] ? clear_bhb_loop+0x50/0xa0 [ 74.295018][ T1681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.295043][ T1681] RIP: 0033:0x7f16e119fb19 [ 74.295061][ T1681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.295078][ T1681] RSP: 002b:00007f16e20bbee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 74.295103][ T1681] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f16e119fb19 [ 74.295118][ T1681] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 74.295133][ T1681] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 74.295148][ T1681] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 74.295163][ T1681] R13: 0000200000001050 R14: 00007f16e20bbfd8 R15: 0000000000000000 [ 74.295180][ T1681] [ 74.551701][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.561259][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.568294][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 74.582712][ T571] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 74.591056][ T36] audit: type=1400 audit(1793727045.519:380): avc: denied { create } for pid=1693 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 74.733638][ T571] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.747204][ T571] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.761078][ T571] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.761482][ T325] usb 2-1: device descriptor read/64, error -71 [ 74.768165][ T571] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 74.790101][ T571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.803723][ T571] usb 1-1: config 0 descriptor?? [ 75.011802][ T325] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 75.161476][ T325] usb 2-1: device descriptor read/64, error -71 [ 75.217887][ T571] usbhid 1-1:0.0: can't add hid device: -71 [ 75.224849][ T571] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 75.237274][ T571] usb 1-1: USB disconnect, device number 29 [ 75.275125][ T1710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.284233][ T1710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.401553][ T325] usb 2-1: device descriptor read/64, error -71 [ 75.511725][ T325] usb usb2-port1: attempt power cycle [ 75.851618][ T325] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 75.875635][ T325] usb 2-1: device descriptor read/8, error -71 [ 75.909934][ T1716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 75.972346][ T1719] FAULT_INJECTION: forcing a failure. [ 75.972346][ T1719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.986330][ T1719] CPU: 1 UID: 0 PID: 1719 Comm: syz.2.395 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 75.986370][ T1719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 75.986385][ T1719] Call Trace: [ 75.986394][ T1719] [ 75.986404][ T1719] __dump_stack+0x21/0x30 [ 75.986428][ T1719] dump_stack_lvl+0x140/0x1c0 [ 75.986439][ T1719] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.986450][ T1719] ? stack_trace_save+0xaa/0x100 [ 75.986467][ T1719] ? stack_depot_save_flags+0x38/0x800 [ 75.986480][ T1719] dump_stack+0x19/0x20 [ 75.986491][ T1719] should_fail_ex+0x3c2/0x510 [ 75.986520][ T1719] should_fail_alloc_page+0xec/0x110 [ 75.986544][ T1719] __alloc_pages_noprof+0x1c0/0x7e0 [ 75.986571][ T1719] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.986599][ T1719] ? io_alloc_hash_table+0x52/0x160 [ 75.986627][ T1719] ___kmalloc_large_node+0x81/0x220 [ 75.986646][ T1719] ? io_alloc_hash_table+0x52/0x160 [ 75.986661][ T1719] __kmalloc_large_node_noprof+0x1e/0xd0 [ 75.986676][ T1719] ? io_alloc_hash_table+0x52/0x160 [ 75.986695][ T1719] __kmalloc_noprof+0x326/0x510 [ 75.986723][ T1719] ? __kasan_kmalloc+0x96/0xb0 [ 75.986746][ T1719] io_alloc_hash_table+0x52/0x160 [ 75.986775][ T1719] io_ring_ctx_alloc+0xd1/0x1dc0 [ 75.986799][ T1719] io_uring_create+0x2e0/0x13f0 [ 75.986821][ T1719] ? __kasan_check_write+0x18/0x20 [ 75.986837][ T1719] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 75.986852][ T1719] ? __x64_sys_io_uring_setup+0x80/0x80 [ 75.986866][ T1719] ? trace_event_buffer_commit+0x256/0x8f0 [ 75.986882][ T1719] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 75.986904][ T1719] __x64_sys_io_uring_setup+0x5f/0x80 [ 75.986930][ T1719] x64_sys_call+0x22c0/0x2ee0 [ 75.986952][ T1719] do_syscall_64+0x57/0xf0 [ 75.986980][ T1719] ? clear_bhb_loop+0x50/0xa0 [ 75.987007][ T1719] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.987027][ T1719] RIP: 0033:0x7f857eb9fb19 [ 75.987039][ T1719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.987054][ T1719] RSP: 002b:00007f857faedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 75.987078][ T1719] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f857eb9fb19 [ 75.987095][ T1719] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 75.987111][ T1719] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 75.987125][ T1719] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 75.987150][ T1719] R13: 0000200000001050 R14: 00007f857faedfd8 R15: 0000000000000000 [ 75.987167][ T1719] [ 76.043976][ T325] usb 2-1: device descriptor read/8, error -71 [ 76.501476][ T325] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 76.691497][ T312] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 76.841514][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 76.849040][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.868281][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.879378][ T312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.890669][ T312] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 76.908700][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.918261][ T312] usb 1-1: Product: syz [ 76.922833][ T312] usb 1-1: Manufacturer: syz [ 76.927486][ T312] usb 1-1: SerialNumber: syz [ 76.940122][ T312] usb 1-1: selecting invalid altsetting 1 [ 76.941420][ T325] usb 2-1: device not accepting address 30, error -71 [ 76.956243][ T325] usb usb2-port1: unable to enumerate USB device [ 77.007830][ T1735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1735 comm=syz.2.402 [ 77.022248][ T36] audit: type=1400 audit(1793727047.960:381): avc: denied { read append } for pid=1733 comm="syz.2.402" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.047068][ T36] audit: type=1400 audit(1793727047.960:382): avc: denied { open } for pid=1733 comm="syz.2.402" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.271525][ T325] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 77.312818][ T312] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 77.325447][ T312] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.339355][ T312] usb 1-1: USB disconnect, device number 30 [ 77.349632][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.443035][ T325] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.454655][ T325] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.468643][ T325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 77.475600][ T325] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 77.485063][ T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.494405][ T325] usb 2-1: config 0 descriptor?? [ 77.625350][ T1739] Bluetooth: ISO socket layer initialized [ 77.837411][ T1741] FAULT_INJECTION: forcing a failure. [ 77.837411][ T1741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.847606][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.851469][ T1741] CPU: 1 UID: 0 PID: 1741 Comm: syz.0.405 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 77.851504][ T1741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.851519][ T1741] Call Trace: [ 77.851527][ T1741] [ 77.851535][ T1741] __dump_stack+0x21/0x30 [ 77.851560][ T1741] dump_stack_lvl+0x140/0x1c0 [ 77.851579][ T1741] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.851599][ T1741] dump_stack+0x19/0x20 [ 77.851616][ T1741] should_fail_ex+0x3c2/0x510 [ 77.851644][ T1741] should_fail_alloc_page+0xec/0x110 [ 77.851666][ T1741] __alloc_pages_noprof+0x1c0/0x7e0 [ 77.851690][ T1741] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.851716][ T1741] ? io_alloc_hash_table+0x52/0x160 [ 77.851744][ T1741] ___kmalloc_large_node+0x81/0x220 [ 77.851771][ T1741] ? io_alloc_hash_table+0x52/0x160 [ 77.851797][ T1741] __kmalloc_large_node_noprof+0x1e/0xd0 [ 77.851823][ T1741] ? io_alloc_hash_table+0x52/0x160 [ 77.851849][ T1741] __kmalloc_noprof+0x326/0x510 [ 77.851874][ T1741] ? __kasan_kmalloc+0x96/0xb0 [ 77.851893][ T1741] ? init_hash_table+0x1ae/0x270 [ 77.851919][ T1741] io_alloc_hash_table+0x52/0x160 [ 77.851946][ T1741] io_ring_ctx_alloc+0x10b/0x1dc0 [ 77.851969][ T1741] io_uring_create+0x2e0/0x13f0 [ 77.851990][ T1741] ? __kasan_check_write+0x18/0x20 [ 77.852016][ T1741] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 77.852042][ T1741] ? __x64_sys_io_uring_setup+0x80/0x80 [ 77.852071][ T1741] ? trace_event_buffer_commit+0x256/0x8f0 [ 77.852099][ T1741] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 77.852125][ T1741] __x64_sys_io_uring_setup+0x5f/0x80 [ 77.852150][ T1741] x64_sys_call+0x22c0/0x2ee0 [ 77.852170][ T1741] do_syscall_64+0x57/0xf0 [ 77.852190][ T1741] ? clear_bhb_loop+0x50/0xa0 [ 77.852216][ T1741] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.852240][ T1741] RIP: 0033:0x7fc72c79fb19 [ 77.852257][ T1741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.852275][ T1741] RSP: 002b:00007fc72d6dfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 77.852299][ T1741] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007fc72c79fb19 [ 77.852314][ T1741] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 77.852328][ T1741] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 77.852342][ T1741] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 77.852356][ T1741] R13: 0000200000001050 R14: 00007fc72d6dffd8 R15: 0000000000000000 [ 77.852373][ T1741] [ 77.921469][ T312] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 77.925520][ T325] usbhid 2-1:0.0: can't add hid device: -71 [ 77.933396][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.937795][ T325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.071513][ T312] usb 4-1: device descriptor read/64, error -71 [ 78.087107][ T325] usb 2-1: USB disconnect, device number 31 [ 78.322726][ T36] audit: type=1400 audit(1793727049.260:383): avc: denied { mount } for pid=1750 comm="syz.0.408" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 78.346437][ T312] usb 4-1: device descriptor read/64, error -71 [ 78.398143][ T36] audit: type=1400 audit(1793727049.330:384): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 78.469616][ T1757] netlink: 112 bytes leftover after parsing attributes in process `syz.0.411'. [ 78.535533][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.545217][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.591572][ T312] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 78.664847][ T1771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 78.711465][ T571] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 78.722624][ T312] usb 4-1: device descriptor read/64, error -71 [ 78.861551][ T571] usb 2-1: Using ep0 maxpacket: 16 [ 78.868214][ T571] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.883767][ T571] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.894248][ T571] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 78.907940][ T571] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.914709][ T571] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 78.923892][ T571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.932981][ T571] usb 2-1: config 0 descriptor?? [ 78.961926][ T312] usb 4-1: device descriptor read/64, error -71 [ 79.071713][ T312] usb usb4-port1: attempt power cycle [ 79.131466][ T325] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 79.144197][ T571] hid (null): invalid report_size 44673 [ 79.149999][ T571] hid (null): unknown global tag 0xba [ 79.278168][ T1786] batadv_slave_0: entered promiscuous mode [ 79.285945][ T1785] batadv_slave_0: left promiscuous mode [ 79.304455][ T325] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.316465][ T325] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.330867][ T325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.349914][ T36] audit: type=1400 audit(1793727050.280:385): avc: denied { getopt } for pid=1792 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.351953][ T325] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 79.383097][ T571] usb 2-1: USB disconnect, device number 32 [ 79.385859][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.401600][ T325] usb 1-1: config 0 descriptor?? [ 79.410088][ T1795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.424392][ T1795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.434504][ T312] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 79.468004][ T312] usb 4-1: device descriptor read/8, error -71 [ 79.603173][ T312] usb 4-1: device descriptor read/8, error -71 [ 79.818259][ T325] usbhid 1-1:0.0: can't add hid device: -71 [ 79.824865][ T325] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 79.836798][ T325] usb 1-1: USB disconnect, device number 31 [ 79.841625][ T312] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 79.864666][ T312] usb 4-1: device descriptor read/8, error -71 [ 79.940702][ T1799] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.956516][ T1799] picdev_read: 13 callbacks suppressed [ 79.956540][ T1799] kvm: pic: non byte read [ 79.968528][ T1799] kvm: pic: non byte read [ 79.974316][ T1799] kvm: pic: non byte read [ 79.979716][ T1799] kvm: pic: non byte read [ 79.985328][ T1799] kvm: pic: non byte read [ 79.990595][ T1799] kvm: pic: non byte read [ 79.996726][ T312] usb 4-1: device descriptor read/8, error -71 [ 80.003619][ T1799] kvm: pic: level sensitive irq not supported [ 80.003938][ T1799] kvm: pic: non byte read [ 80.016081][ T1799] kvm: pic: single mode not supported [ 80.016201][ T1799] kvm: pic: non byte read [ 80.068765][ T1806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 80.111614][ T312] usb usb4-port1: unable to enumerate USB device [ 80.132420][ T36] audit: type=1326 audit(1793727051.070:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.1.432" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa5f9fb19 code=0x0 [ 80.356979][ T1815] device-mapper: verity: blake2b-256 using shash "blake2b-256-generic" [ 80.366259][ T1815] device-mapper: table: 252:2: verity: Invalid root digest (-EINVAL) [ 80.375735][ T1815] device-mapper: ioctl: error adding target to table [ 80.490953][ T1824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.508386][ T1824] kvm: pic: non byte read [ 80.513946][ T1824] kvm: pic: non byte read [ 80.520419][ T1824] kvm: pic: level sensitive irq not supported [ 80.520758][ T1824] kvm: pic: single mode not supported [ 80.600150][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 80.727845][ T1832] overlayfs: failed to resolve './bus': -2 [ 81.027597][ T1845] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.040459][ T1845] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.053664][ T325] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 81.264587][ T325] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.276039][ T325] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.292196][ T325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.299152][ T325] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 81.309156][ T325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.320012][ T325] usb 4-1: config 0 descriptor?? [ 81.361471][ T312] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 81.523233][ T312] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 81.532420][ T312] usb 1-1: config 0 has no interface number 0 [ 81.538853][ T312] usb 1-1: config 0 interface 16 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.552624][ T312] usb 1-1: config 0 interface 16 has no altsetting 0 [ 81.559486][ T312] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 81.575294][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.587556][ T312] usb 1-1: config 0 descriptor?? [ 81.601037][ T312] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 81.646036][ T36] audit: type=1400 audit(1793727052.580:387): avc: denied { watch } for pid=1848 comm="syz.1.447" path="/83/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 81.691471][ T36] audit: type=1400 audit(1793727052.600:388): avc: denied { write } for pid=1848 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 81.735605][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.751864][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.768205][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.781809][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.796796][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.810039][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.824655][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.838404][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.851816][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.859602][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.881548][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.888854][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.896257][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.903850][ T325] wacom 0003:056A:5000.0007: unknown main item tag 0x0 [ 81.911799][ T325] wacom 0003:056A:5000.0007: unbalanced collection at end of report description [ 81.925357][ T325] wacom 0003:056A:5000.0007: parse failed [ 81.931593][ T325] wacom 0003:056A:5000.0007: probe with driver wacom failed with error -22 [ 81.944005][ T325] usb 4-1: USB disconnect, device number 23 [ 82.611482][ T1868] netlink: 'syz.3.454': attribute type 46 has an invalid length. [ 82.635787][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 82.704413][ T1876] FAULT_INJECTION: forcing a failure. [ 82.704413][ T1876] name failslab, interval 1, probability 0, space 0, times 0 [ 82.718017][ T1876] CPU: 0 UID: 0 PID: 1876 Comm: syz.1.458 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 82.718053][ T1876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.718070][ T1876] Call Trace: [ 82.718078][ T1876] [ 82.718090][ T1876] __dump_stack+0x21/0x30 [ 82.718114][ T1876] dump_stack_lvl+0x140/0x1c0 [ 82.718134][ T1876] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.718153][ T1876] dump_stack+0x19/0x20 [ 82.718166][ T1876] should_fail_ex+0x3c2/0x510 [ 82.718183][ T1876] should_failslab+0xac/0x100 [ 82.718195][ T1876] __kmalloc_node_noprof+0x69/0x500 [ 82.718212][ T1876] ? __kvmalloc_node_noprof+0x128/0x300 [ 82.718228][ T1876] __kvmalloc_node_noprof+0x128/0x300 [ 82.718242][ T1876] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 82.718256][ T1876] ? percpu_ref_init+0x210/0x4d0 [ 82.718267][ T1876] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 82.718281][ T1876] io_ring_ctx_alloc+0x428/0x1dc0 [ 82.718294][ T1876] io_uring_create+0x2e0/0x13f0 [ 82.718306][ T1876] ? __kasan_check_write+0x18/0x20 [ 82.718322][ T1876] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 82.718337][ T1876] ? __x64_sys_io_uring_setup+0x80/0x80 [ 82.718369][ T1876] ? trace_event_buffer_commit+0x256/0x8f0 [ 82.718386][ T1876] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 82.718401][ T1876] __x64_sys_io_uring_setup+0x5f/0x80 [ 82.718415][ T1876] x64_sys_call+0x22c0/0x2ee0 [ 82.718427][ T1876] do_syscall_64+0x57/0xf0 [ 82.718439][ T1876] ? clear_bhb_loop+0x50/0xa0 [ 82.718455][ T1876] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.718469][ T1876] RIP: 0033:0x7f7fa5f9fb19 [ 82.718480][ T1876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.718490][ T1876] RSP: 002b:00007f7fa6e24ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 82.718504][ T1876] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f7fa5f9fb19 [ 82.718513][ T1876] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 82.718522][ T1876] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 82.718530][ T1876] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 82.718538][ T1876] R13: 0000200000001050 R14: 00007f7fa6e24fd8 R15: 0000000000000000 [ 82.718548][ T1876] [ 82.981538][ T571] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 83.040693][ T1884] loop6: detected capacity change from 0 to 7 [ 83.049023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.060465][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.069678][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.082428][ T1884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10000 sclass=netlink_route_socket pid=1884 comm=syz.3.461 [ 83.095169][ T36] audit: type=1400 audit(1793727054.010:389): avc: denied { listen } for pid=1883 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.117238][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.126513][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.135258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.144845][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.147423][ T1886] 8021q: VLANs not supported on tunl0 [ 83.160231][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.169745][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.179122][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.189005][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.214777][ T571] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.226227][ T571] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.271849][ T571] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.278535][ T571] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 83.289403][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.297872][ T36] audit: type=1400 audit(1793727054.220:390): avc: denied { audit_write } for pid=1893 comm="syz.2.465" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.320917][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.328983][ T571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.341758][ T571] usb 2-1: config 0 descriptor?? [ 83.765473][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.772891][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.780237][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.787866][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.794987][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.802202][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.809097][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.816337][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.823294][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.830424][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.837421][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.844608][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.851596][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.858941][ T571] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 83.866025][ T571] wacom 0003:056A:5000.0008: unbalanced collection at end of report description [ 83.884674][ T571] wacom 0003:056A:5000.0008: parse failed [ 83.891202][ T571] wacom 0003:056A:5000.0008: probe with driver wacom failed with error -22 [ 83.918074][ T1909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.928166][ T1909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.980581][ T325] usb 2-1: USB disconnect, device number 33 [ 84.056018][ T571] usb 1-1: USB disconnect, device number 32 [ 84.522598][ T1918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55570 sclass=netlink_route_socket pid=1918 comm=syz.1.476 [ 84.542188][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.550610][ T36] audit: type=1400 audit(1793727055.480:391): avc: denied { mounton } for pid=1921 comm="syz.0.478" path="/105/file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 84.563670][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.592537][ T1918] netlink: 140 bytes leftover after parsing attributes in process `syz.1.476'. [ 84.603854][ T1925] FAULT_INJECTION: forcing a failure. [ 84.603854][ T1925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.620747][ T1925] CPU: 0 UID: 0 PID: 1925 Comm: syz.3.479 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 84.620784][ T1925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.620798][ T1925] Call Trace: [ 84.620807][ T1925] [ 84.620817][ T1925] __dump_stack+0x21/0x30 [ 84.620842][ T1925] dump_stack_lvl+0x140/0x1c0 [ 84.620863][ T1925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.620886][ T1925] dump_stack+0x19/0x20 [ 84.620905][ T1925] should_fail_ex+0x3c2/0x510 [ 84.620935][ T1925] should_fail+0xf/0x20 [ 84.620959][ T1925] should_fail_usercopy+0x1e/0x30 [ 84.620979][ T1925] _copy_from_user+0x20/0xa0 [ 84.621002][ T1925] ___sys_recvmsg+0x174/0x590 [ 84.621030][ T1925] ? kstrtoull+0x13b/0x1e0 [ 84.621057][ T1925] ? __sys_recvmsg+0x260/0x260 [ 84.621083][ T1925] do_recvmmsg+0x328/0x790 [ 84.621106][ T1925] ? __sys_recvmmsg+0x2a0/0x2a0 [ 84.621130][ T1925] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 84.621159][ T1925] ? trace_event_buffer_commit+0x256/0x8f0 [ 84.621186][ T1925] __x64_sys_recvmmsg+0x199/0x250 [ 84.621214][ T1925] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 84.621240][ T1925] x64_sys_call+0x292c/0x2ee0 [ 84.621262][ T1925] do_syscall_64+0x57/0xf0 [ 84.621284][ T1925] ? clear_bhb_loop+0x50/0xa0 [ 84.621311][ T1925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.621334][ T1925] RIP: 0033:0x7f16e119fb19 [ 84.621353][ T1925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.621369][ T1925] RSP: 002b:00007f16e20bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 84.621403][ T1925] RAX: ffffffffffffffda RBX: 00007f16e1425fa0 RCX: 00007f16e119fb19 [ 84.621419][ T1925] RDX: 0000000000000008 RSI: 0000200000004ac0 RDI: 0000000000000003 [ 84.621434][ T1925] RBP: 00007f16e20bc090 R08: 0000000000000000 R09: 0000000000000000 [ 84.621448][ T1925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.621461][ T1925] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 84.621477][ T1925] [ 84.675215][ T36] audit: type=1400 audit(1793727055.610:392): avc: denied { create } for pid=1917 comm="syz.1.476" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.702063][ T1930] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.705510][ T36] audit: type=1400 audit(1793727055.610:393): avc: denied { link } for pid=1917 comm="syz.1.476" name="#8" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.884944][ T36] audit: type=1400 audit(1793727055.610:394): avc: denied { rename } for pid=1917 comm="syz.1.476" name="#9" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 84.997239][ T399] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 85.010360][ T36] audit: type=1400 audit(1793727055.940:395): avc: denied { write } for pid=1933 comm="syz.1.483" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.041584][ T312] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 85.161471][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 85.168996][ T399] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.178822][ T399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.189358][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 85.189376][ T36] audit: type=1326 audit(1793727056.110:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1943 comm="syz.2.487" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f857eb9fb19 code=0x0 [ 85.190671][ T399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.228303][ T312] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 85.233795][ T399] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 85.241937][ T312] usb 1-1: config 0 has no interface number 0 [ 85.249253][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.255551][ T312] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.263121][ T399] usb 4-1: Product: syz [ 85.273514][ T312] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.277308][ T399] usb 4-1: Manufacturer: syz [ 85.290742][ T312] usb 1-1: config 0 interface 16 has no altsetting 0 [ 85.295200][ T399] usb 4-1: SerialNumber: syz [ 85.302137][ T600] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 85.314782][ T312] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 85.316512][ T399] usb 4-1: selecting invalid altsetting 1 [ 85.331415][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.336724][ T312] usb 1-1: config 0 descriptor?? [ 85.352814][ T312] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 85.473038][ T600] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.484378][ T600] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.497564][ T600] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.504427][ T600] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 85.513705][ T600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.523969][ T600] usb 2-1: config 0 descriptor?? [ 85.701065][ T399] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 85.712035][ T399] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.725374][ T399] usb 4-1: USB disconnect, device number 24 [ 85.737878][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.938481][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.945633][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.952804][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.959714][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.966791][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.973779][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.980849][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.987787][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 85.994822][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.003373][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.010366][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.017320][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.024338][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.031290][ T600] wacom 0003:056A:5000.0009: unknown main item tag 0x0 [ 86.040989][ T600] wacom 0003:056A:5000.0009: unbalanced collection at end of report description [ 86.050827][ T600] wacom 0003:056A:5000.0009: parse failed [ 86.056808][ T600] wacom 0003:056A:5000.0009: probe with driver wacom failed with error -22 [ 86.080241][ T1954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 86.153112][ T600] usb 2-1: USB disconnect, device number 34 [ 86.715459][ T36] audit: type=1400 audit(1793727057.650:399): avc: denied { ioctl } for pid=1971 comm="syz.2.495" path="cgroup:[4026532440]" dev="nsfs" ino=4026532440 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.765555][ T1979] FAULT_INJECTION: forcing a failure. [ 86.765555][ T1979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.779417][ T1979] CPU: 0 UID: 0 PID: 1979 Comm: syz.1.496 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 86.779453][ T1979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.779467][ T1979] Call Trace: [ 86.779474][ T1979] [ 86.779486][ T1979] __dump_stack+0x21/0x30 [ 86.779511][ T1979] dump_stack_lvl+0x140/0x1c0 [ 86.779530][ T1979] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.779550][ T1979] ? check_stack_object+0x138/0x150 [ 86.779581][ T1979] dump_stack+0x19/0x20 [ 86.779599][ T1979] should_fail_ex+0x3c2/0x510 [ 86.779629][ T1979] should_fail+0xf/0x20 [ 86.779655][ T1979] should_fail_usercopy+0x1e/0x30 [ 86.779672][ T1979] _copy_to_user+0x24/0xa0 [ 86.779685][ T1979] simple_read_from_buffer+0xed/0x160 [ 86.779701][ T1979] proc_fail_nth_read+0x1aa/0x220 [ 86.779716][ T1979] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.779738][ T1979] ? bpf_lsm_file_permission+0xd/0x20 [ 86.779752][ T1979] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.779765][ T1979] vfs_read+0x288/0xc70 [ 86.779781][ T1979] ? rb_commit+0x753/0x7b0 [ 86.779800][ T1979] ? __cfi_vfs_read+0x10/0x10 [ 86.779825][ T1979] ? __kasan_check_write+0x18/0x20 [ 86.779853][ T1979] ? mutex_lock+0x97/0x1d0 [ 86.779877][ T1979] ? __cfi_mutex_lock+0x10/0x10 [ 86.779903][ T1979] ksys_read+0x145/0x260 [ 86.779931][ T1979] ? __cfi_ksys_read+0x10/0x10 [ 86.779958][ T1979] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 86.779985][ T1979] __x64_sys_read+0x7f/0x90 [ 86.780000][ T1979] x64_sys_call+0x2638/0x2ee0 [ 86.780012][ T1979] do_syscall_64+0x57/0xf0 [ 86.780024][ T1979] ? clear_bhb_loop+0x50/0xa0 [ 86.780041][ T1979] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.780055][ T1979] RIP: 0033:0x7f7fa5f6034e [ 86.780067][ T1979] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.780077][ T1979] RSP: 002b:00007f7fa6e03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.780091][ T1979] RAX: ffffffffffffffda RBX: 00007f7fa6e046c0 RCX: 00007f7fa5f6034e [ 86.780100][ T1979] RDX: 000000000000000f RSI: 00007f7fa6e040a0 RDI: 0000000000000004 [ 86.780107][ T1979] RBP: 00007f7fa6e04090 R08: 0000000000000000 R09: 0000000000000000 [ 86.780115][ T1979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.780122][ T1979] R13: 00007f7fa6226128 R14: 00007f7fa6226090 R15: 00007ffc0dda4848 [ 86.780132][ T1979] [ 87.043888][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 87.190518][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.201652][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.348823][ T1990] FAULT_INJECTION: forcing a failure. [ 87.348823][ T1990] name failslab, interval 1, probability 0, space 0, times 0 [ 87.379896][ T1990] CPU: 1 UID: 0 PID: 1990 Comm: syz.1.503 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 87.379936][ T1990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.379949][ T1990] Call Trace: [ 87.379956][ T1990] [ 87.379967][ T1990] __dump_stack+0x21/0x30 [ 87.379993][ T1990] dump_stack_lvl+0x140/0x1c0 [ 87.380013][ T1990] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.380033][ T1990] dump_stack+0x19/0x20 [ 87.380054][ T1990] should_fail_ex+0x3c2/0x510 [ 87.380085][ T1990] should_failslab+0xac/0x100 [ 87.380107][ T1990] __kmalloc_node_noprof+0x69/0x500 [ 87.380135][ T1990] ? __kvmalloc_node_noprof+0x128/0x300 [ 87.380162][ T1990] __kvmalloc_node_noprof+0x128/0x300 [ 87.380188][ T1990] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 87.380214][ T1990] ? __kvmalloc_node_noprof+0x173/0x300 [ 87.380240][ T1990] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 87.380264][ T1990] io_futex_cache_init+0x4e/0x1a0 [ 87.380287][ T1990] io_ring_ctx_alloc+0x762/0x1dc0 [ 87.380311][ T1990] io_uring_create+0x2e0/0x13f0 [ 87.380341][ T1990] ? __kasan_check_write+0x18/0x20 [ 87.380376][ T1990] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 87.380402][ T1990] ? __x64_sys_io_uring_setup+0x80/0x80 [ 87.380428][ T1990] ? trace_event_buffer_commit+0x256/0x8f0 [ 87.380459][ T1990] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 87.380485][ T1990] __x64_sys_io_uring_setup+0x5f/0x80 [ 87.380512][ T1990] x64_sys_call+0x22c0/0x2ee0 [ 87.380531][ T1990] do_syscall_64+0x57/0xf0 [ 87.380552][ T1990] ? clear_bhb_loop+0x50/0xa0 [ 87.380579][ T1990] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.380604][ T1990] RIP: 0033:0x7f7fa5f9fb19 [ 87.380622][ T1990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.380640][ T1990] RSP: 002b:00007f7fa6e24ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 87.380664][ T1990] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f7fa5f9fb19 [ 87.380681][ T1990] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 87.380697][ T1990] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 87.380712][ T1990] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 87.380728][ T1990] R13: 0000200000001050 R14: 00007f7fa6e24fd8 R15: 0000000000000000 [ 87.380744][ T1990] [ 87.663398][ T312] usb 1-1: USB disconnect, device number 33 [ 87.727119][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 87.839838][ T2007] warn_alloc: 1 callbacks suppressed [ 87.839853][ T2007] syz.1.509: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 87.860859][ T2007] CPU: 1 UID: 0 PID: 2007 Comm: syz.1.509 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 87.860894][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.860909][ T2007] Call Trace: [ 87.860917][ T2007] [ 87.860927][ T2007] __dump_stack+0x21/0x30 [ 87.860958][ T2007] dump_stack_lvl+0x140/0x1c0 [ 87.860978][ T2007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.860993][ T2007] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 87.861006][ T2007] dump_stack+0x19/0x20 [ 87.861016][ T2007] warn_alloc+0x1e7/0x2c0 [ 87.861030][ T2007] ? stack_depot_save_flags+0x38/0x800 [ 87.861042][ T2007] ? __cfi_warn_alloc+0x10/0x10 [ 87.861056][ T2007] ? kasan_save_track+0x3e/0x80 [ 87.861067][ T2007] ? kasan_save_alloc_info+0x3a/0x50 [ 87.861081][ T2007] ? xsk_init_queue+0xb2/0x120 [ 87.861101][ T2007] ? xsk_setsockopt+0x411/0x760 [ 87.861125][ T2007] ? do_sock_setsockopt+0x27c/0x410 [ 87.861151][ T2007] ? __x64_sys_setsockopt+0x18c/0x220 [ 87.861177][ T2007] ? x64_sys_call+0x2adc/0x2ee0 [ 87.861192][ T2007] ? do_syscall_64+0x57/0xf0 [ 87.861204][ T2007] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.861219][ T2007] __vmalloc_node_range_noprof+0x136/0x1300 [ 87.861237][ T2007] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 87.861251][ T2007] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 87.861265][ T2007] ? kasan_save_alloc_info+0x3a/0x50 [ 87.861279][ T2007] ? __kasan_kmalloc+0x96/0xb0 [ 87.861296][ T2007] ? __kmalloc_cache_noprof+0x23c/0x470 [ 87.861327][ T2007] vmalloc_user_noprof+0x77/0x90 [ 87.861356][ T2007] ? xskq_create+0xdb/0x290 [ 87.861381][ T2007] xskq_create+0xdb/0x290 [ 87.861406][ T2007] xsk_init_queue+0xb2/0x120 [ 87.861435][ T2007] xsk_setsockopt+0x411/0x760 [ 87.861458][ T2007] ? __cfi_xsk_setsockopt+0x10/0x10 [ 87.861485][ T2007] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 87.861507][ T2007] ? security_socket_setsockopt+0x3d/0x100 [ 87.861536][ T2007] ? __cfi_xsk_setsockopt+0x10/0x10 [ 87.861560][ T2007] do_sock_setsockopt+0x27c/0x410 [ 87.861578][ T2007] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 87.861595][ T2007] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 87.861608][ T2007] ? trace_event_buffer_commit+0x256/0x8f0 [ 87.861623][ T2007] ? __kasan_check_read+0x15/0x20 [ 87.861638][ T2007] __x64_sys_setsockopt+0x18c/0x220 [ 87.861652][ T2007] x64_sys_call+0x2adc/0x2ee0 [ 87.861664][ T2007] do_syscall_64+0x57/0xf0 [ 87.861675][ T2007] ? clear_bhb_loop+0x50/0xa0 [ 87.861694][ T2007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.861722][ T2007] RIP: 0033:0x7f7fa5f9fb19 [ 87.861741][ T2007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.861760][ T2007] RSP: 002b:00007f7fa6e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.861782][ T2007] RAX: ffffffffffffffda RBX: 00007f7fa6225fa0 RCX: 00007f7fa5f9fb19 [ 87.861799][ T2007] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 87.861807][ T2007] RBP: 00007f7fa6037b70 R08: 0000000000000029 R09: 0000000000000000 [ 87.861817][ T2007] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 87.861825][ T2007] R13: 00007f7fa6226038 R14: 00007f7fa6225fa0 R15: 00007ffc0dda4848 [ 87.861836][ T2007] [ 88.210734][ T36] audit: type=1400 audit(1793727059.140:400): avc: denied { accept } for pid=2009 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.211538][ T2007] Mem-Info: [ 88.240839][ T2007] active_anon:6988 inactive_anon:19657 isolated_anon:0 [ 88.240839][ T2007] active_file:21931 inactive_file:3063 isolated_file:0 [ 88.240839][ T2007] unevictable:0 dirty:302 writeback:0 [ 88.240839][ T2007] slab_reclaimable:6146 slab_unreclaimable:71000 [ 88.240839][ T2007] mapped:27639 shmem:19497 pagetables:1005 [ 88.240839][ T2007] sec_pagetables:0 bounce:0 [ 88.240839][ T2007] kernel_misc_reclaimable:0 [ 88.240839][ T2007] free:1494771 free_pcp:3565 free_cma:0 [ 88.273395][ T2014] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 88.297020][ T36] audit: type=1400 audit(1793727059.200:401): avc: denied { setopt } for pid=2013 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.314978][ T2007] Node 0 active_anon:27952kB inactive_anon:78672kB active_file:87724kB inactive_file:12252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110532kB dirty:1208kB writeback:0kB shmem:77988kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6796kB pagetables:4120kB sec_pagetables:0kB all_unreclaimable? no [ 88.349978][ T312] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 88.351434][ T2007] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954992kB mlocked:0kB bounce:0kB free_pcp:5020kB local_pcp:68kB free_cma:0kB [ 88.390779][ T2007] lowmem_reserve[]: 0 3920 3920 [ 88.396719][ T2007] Normal free:3023220kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27952kB inactive_anon:78672kB active_file:87724kB inactive_file:12252kB unevictable:0kB writepending:1212kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:15280kB local_pcp:3868kB free_cma:0kB [ 88.430581][ T2007] lowmem_reserve[]: 0 0 0 [ 88.435177][ T2007] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 88.451434][ T2007] Normal: 1*4kB (E) 22*8kB (UE) 50*16kB (ME) 84*32kB (UE) 74*64kB (UME) 37*128kB (UE) 16*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 732*4096kB (UME) = 3023188kB [ 88.469193][ T2007] 44488 total pagecache pages [ 88.474184][ T2007] 0 pages in swap cache [ 88.478585][ T2007] Free swap = 124704kB [ 88.482946][ T2007] Total swap = 124996kB [ 88.487314][ T2007] 2097051 pages RAM [ 88.491571][ T2007] 0 pages HighMem/MovableOnly [ 88.496502][ T2007] 354593 pages reserved [ 88.500969][ T2007] 0 pages cma reserved [ 88.508318][ T2007] Memory allocations: [ 88.512650][ T2007] 0 B 0 init/main.c:1477 func:do_initcalls [ 88.520438][ T2007] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 88.528999][ T2007] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 88.529548][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.538639][ T2019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.547948][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.556520][ T2007] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 88.566090][ T312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.566142][ T312] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.597363][ T2007] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 88.604861][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.606769][ T2007] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 88.615980][ T312] usb 1-1: config 0 descriptor?? [ 88.651531][ T2007] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 88.661946][ T2007] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 88.670157][ T2007] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 88.678595][ T2007] 0 B 0 init/initramfs.c:101 func:find_link [ 88.922907][ T2032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 88.977874][ T2036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.986798][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 88.988574][ T2036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.039986][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.053208][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.060942][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.070551][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.079260][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.087002][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.094817][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.102796][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.107207][ T2043] overlayfs: failed to resolve './file0': -2 [ 89.110499][ T312] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 89.125297][ T312] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 89.137519][ T312] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 89.142725][ T10] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 89.174756][ T10] usb 2-1: config 0 has no interface number 0 [ 89.189168][ T10] usb 2-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.199779][ T10] usb 2-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.218932][ T10] usb 2-1: config 0 interface 16 has no altsetting 0 [ 89.226341][ T10] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 89.236768][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.247979][ T10] usb 2-1: config 0 descriptor?? [ 89.255766][ T10] usbhid 2-1:0.16: couldn't find an input interrupt endpoint [ 89.284140][ T2047] cgroup: fork rejected by pids controller in /syz3 [ 89.333331][ T2083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.826320][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 89.849676][ T600] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 90.031438][ T600] usb 4-1: Using ep0 maxpacket: 32 [ 90.048825][ T600] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.084666][ T600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.095564][ T600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.114942][ T600] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 90.126164][ T600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.134761][ T600] usb 4-1: Product: syz [ 90.139035][ T600] usb 4-1: Manufacturer: syz [ 90.144124][ T600] usb 4-1: SerialNumber: syz [ 90.154210][ T600] usb 4-1: selecting invalid altsetting 1 [ 90.417992][ T2108] netlink: 84 bytes leftover after parsing attributes in process `syz.2.530'. [ 90.634576][ T600] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 90.650328][ T600] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.664643][ T600] usb 4-1: USB disconnect, device number 25 [ 90.683234][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.085618][ T399] usb 1-1: USB disconnect, device number 34 [ 91.363561][ T2120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.377748][ T2120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.439378][ T2122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.480447][ T2126] netlink: 'syz.3.535': attribute type 27 has an invalid length. [ 91.526772][ T36] audit: type=1400 audit(1793727062.460:402): avc: denied { execute } for pid=2129 comm="syz.3.537" name="file0" dev="ramfs" ino=19764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 91.552415][ T36] audit: type=1400 audit(1793727062.460:403): avc: denied { execute_no_trans } for pid=2129 comm="syz.3.537" path="/file0" dev="ramfs" ino=19764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 91.758186][ T10] usb 2-1: USB disconnect, device number 35 [ 91.801531][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 91.811711][ T600] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 91.961655][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 91.968643][ T600] usb 1-1: config index 0 descriptor too short (expected 4257, got 161) [ 91.977308][ T600] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.988298][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.996278][ T600] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 92.005613][ T600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.014445][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.025253][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.041578][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 92.050839][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.059305][ T31] usb 4-1: Product: syz [ 92.063637][ T31] usb 4-1: Manufacturer: syz [ 92.068259][ T31] usb 4-1: SerialNumber: syz [ 92.077270][ T31] usb 4-1: selecting invalid altsetting 1 [ 92.111460][ T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 92.241662][ T600] usb 1-1: string descriptor 0 read error: -71 [ 92.249188][ T600] uvcvideo 1-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 92.258528][ T600] usb 1-1: Found UVC 1.00 device (046d:0825) [ 92.266394][ T600] uvcvideo 1-1:1.1: No supported video formats found. [ 92.273168][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.273598][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 92.281837][ T600] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 92.284177][ T600] usb 1-1: USB disconnect, device number 35 [ 92.297832][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 4 [ 92.319573][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 92.329377][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.337674][ T10] usb 2-1: Product: syz [ 92.342192][ T10] usb 2-1: Manufacturer: syz [ 92.347064][ T10] usb 2-1: SerialNumber: syz [ 92.472178][ T31] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 92.484516][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 92.498576][ T31] usb 4-1: USB disconnect, device number 26 [ 92.509178][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.799402][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.809009][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.824947][ T2152] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.076247][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 93.094381][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.117638][ T10] usb 2-1: USB disconnect, device number 36 [ 93.140041][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.252097][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 93.398515][ T2168] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 93.406383][ T2168] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.552'. [ 93.410949][ T36] audit: type=1400 audit(1793727064.340:404): avc: denied { create } for pid=2171 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.417042][ T2168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 93.450036][ T31] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 93.451509][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 93.458839][ T31] usb 4-1: config 0 has no interface number 0 [ 93.475318][ T2174] FAULT_INJECTION: forcing a failure. [ 93.475318][ T2174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.488547][ T31] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.498516][ T31] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.513619][ T2174] CPU: 1 UID: 0 PID: 2174 Comm: syz.2.555 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 93.513654][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.513669][ T2174] Call Trace: [ 93.513678][ T2174] [ 93.513687][ T2174] __dump_stack+0x21/0x30 [ 93.513712][ T2174] dump_stack_lvl+0x140/0x1c0 [ 93.513731][ T2174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.513753][ T2174] dump_stack+0x19/0x20 [ 93.513771][ T2174] should_fail_ex+0x3c2/0x510 [ 93.513801][ T2174] should_fail+0xf/0x20 [ 93.513827][ T2174] should_fail_usercopy+0x1e/0x30 [ 93.513848][ T2174] _copy_from_user+0x20/0xa0 [ 93.513872][ T2174] dm_ctl_ioctl+0x151/0xde0 [ 93.513898][ T2174] ? selinux_file_ioctl+0x732/0x1480 [ 93.513928][ T2174] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 93.513958][ T2174] ? __fget_files+0x2bc/0x330 [ 93.513981][ T2174] ? bpf_lsm_file_ioctl+0xd/0x20 [ 93.514004][ T2174] ? security_file_ioctl+0x3e/0x110 [ 93.514031][ T2174] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 93.514056][ T2174] __se_sys_ioctl+0x123/0x1b0 [ 93.514079][ T2174] __x64_sys_ioctl+0x7f/0xa0 [ 93.514100][ T2174] x64_sys_call+0x1878/0x2ee0 [ 93.514122][ T2174] do_syscall_64+0x57/0xf0 [ 93.514143][ T2174] ? clear_bhb_loop+0x50/0xa0 [ 93.514178][ T2174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.514204][ T2174] RIP: 0033:0x7f857eb9fb19 [ 93.514223][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.514241][ T2174] RSP: 002b:00007f857faee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.514267][ T2174] RAX: ffffffffffffffda RBX: 00007f857ee25fa0 RCX: 00007f857eb9fb19 [ 93.514283][ T2174] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 93.514298][ T2174] RBP: 00007f857faee090 R08: 0000000000000000 R09: 0000000000000000 [ 93.514314][ T2174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.514328][ T2174] R13: 00007f857ee26038 R14: 00007f857ee25fa0 R15: 00007fffaf2d1088 [ 93.514346][ T2174] [ 93.514478][ T31] usb 4-1: config 0 interface 16 has no altsetting 0 [ 93.615380][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.619802][ T31] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 93.639773][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.644759][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.665566][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.669989][ T31] usb 4-1: config 0 descriptor?? [ 93.711575][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 93.722085][ T31] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 93.739924][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.820052][ T10] usb 2-1: config 0 descriptor?? [ 93.853296][ T2180] FAULT_INJECTION: forcing a failure. [ 93.853296][ T2180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.866706][ T2180] CPU: 1 UID: 0 PID: 2180 Comm: syz.2.557 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 93.866742][ T2180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.866758][ T2180] Call Trace: [ 93.866766][ T2180] [ 93.866775][ T2180] __dump_stack+0x21/0x30 [ 93.866800][ T2180] dump_stack_lvl+0x140/0x1c0 [ 93.866820][ T2180] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.866839][ T2180] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 93.866866][ T2180] ? kasan_save_alloc_info+0x3a/0x50 [ 93.866894][ T2180] dump_stack+0x19/0x20 [ 93.866913][ T2180] should_fail_ex+0x3c2/0x510 [ 93.866943][ T2180] should_fail+0xf/0x20 [ 93.866970][ T2180] should_fail_usercopy+0x1e/0x30 [ 93.866991][ T2180] _copy_to_user+0x24/0xa0 [ 93.867014][ T2180] io_uring_create+0xb9e/0x13f0 [ 93.867038][ T2180] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 93.867066][ T2180] ? __x64_sys_io_uring_setup+0x80/0x80 [ 93.867091][ T2180] ? trace_event_buffer_commit+0x256/0x8f0 [ 93.867122][ T2180] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 93.867155][ T2180] __x64_sys_io_uring_setup+0x5f/0x80 [ 93.867181][ T2180] x64_sys_call+0x22c0/0x2ee0 [ 93.867202][ T2180] do_syscall_64+0x57/0xf0 [ 93.867224][ T2180] ? clear_bhb_loop+0x50/0xa0 [ 93.867265][ T2180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.867300][ T2180] RIP: 0033:0x7f857eb9fb19 [ 93.867328][ T2180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.867348][ T2180] RSP: 002b:00007f857faedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 93.867373][ T2180] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f857eb9fb19 [ 93.867390][ T2180] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 93.867405][ T2180] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 93.867421][ T2180] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 93.867439][ T2180] R13: 0000200000001050 R14: 00007f857faedfd8 R15: 0000000000000000 [ 93.867457][ T2180] [ 94.254363][ T10] wacom 0003:056A:5000.000B: unknown main item tag 0x0 [ 94.274400][ T10] wacom 0003:056A:5000.000B: unknown main item tag 0x0 [ 94.290969][ T10] wacom 0003:056A:5000.000B: unbalanced collection at end of report description [ 94.312234][ T10] wacom 0003:056A:5000.000B: parse failed [ 94.326611][ T10] wacom 0003:056A:5000.000B: probe with driver wacom failed with error -22 [ 94.472426][ T10] usb 2-1: USB disconnect, device number 37 [ 94.632025][ T2188] incfs: Error accessing: ./file0. [ 94.639475][ T2188] incfs: mount failed -20 [ 94.878458][ T2199] FAULT_INJECTION: forcing a failure. [ 94.878458][ T2199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.891695][ T2199] CPU: 1 UID: 0 PID: 2199 Comm: syz.0.564 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 94.891736][ T2199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.891751][ T2199] Call Trace: [ 94.891760][ T2199] [ 94.891771][ T2199] __dump_stack+0x21/0x30 [ 94.891810][ T2199] dump_stack_lvl+0x140/0x1c0 [ 94.891835][ T2199] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.891855][ T2199] dump_stack+0x19/0x20 [ 94.891873][ T2199] should_fail_ex+0x3c2/0x510 [ 94.891905][ T2199] should_fail+0xf/0x20 [ 94.891931][ T2199] should_fail_usercopy+0x1e/0x30 [ 94.891953][ T2199] _copy_to_user+0x24/0xa0 [ 94.891976][ T2199] dm_ctl_ioctl+0x2c5/0xde0 [ 94.892013][ T2199] ? selinux_file_ioctl+0x732/0x1480 [ 94.892043][ T2199] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 94.892073][ T2199] ? __fget_files+0x2bc/0x330 [ 94.892096][ T2199] ? bpf_lsm_file_ioctl+0xd/0x20 [ 94.892119][ T2199] ? security_file_ioctl+0x3e/0x110 [ 94.892148][ T2199] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 94.892173][ T2199] __se_sys_ioctl+0x123/0x1b0 [ 94.892196][ T2199] __x64_sys_ioctl+0x7f/0xa0 [ 94.892211][ T2199] x64_sys_call+0x1878/0x2ee0 [ 94.892223][ T2199] do_syscall_64+0x57/0xf0 [ 94.892235][ T2199] ? clear_bhb_loop+0x50/0xa0 [ 94.892251][ T2199] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.892265][ T2199] RIP: 0033:0x7fc72c79fb19 [ 94.892278][ T2199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.892296][ T2199] RSP: 002b:00007fc72d6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.892321][ T2199] RAX: ffffffffffffffda RBX: 00007fc72ca25fa0 RCX: 00007fc72c79fb19 [ 94.892339][ T2199] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 94.892354][ T2199] RBP: 00007fc72d6e0090 R08: 0000000000000000 R09: 0000000000000000 [ 94.892374][ T2199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.892389][ T2199] R13: 00007fc72ca26038 R14: 00007fc72ca25fa0 R15: 00007fffdacc80e8 [ 94.892407][ T2199] [ 95.123262][ T2205] FAULT_INJECTION: forcing a failure. [ 95.123262][ T2205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.135941][ T36] audit: type=1400 audit(1793727066.070:405): avc: denied { read } for pid=2206 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.136478][ T2205] CPU: 1 UID: 0 PID: 2205 Comm: syz.2.566 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 95.136506][ T2205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.136523][ T2205] Call Trace: [ 95.136532][ T2205] [ 95.136541][ T2205] __dump_stack+0x21/0x30 [ 95.136570][ T2205] dump_stack_lvl+0x140/0x1c0 [ 95.136589][ T2205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.136607][ T2205] dump_stack+0x19/0x20 [ 95.136624][ T2205] should_fail_ex+0x3c2/0x510 [ 95.136654][ T2205] should_fail+0xf/0x20 [ 95.136679][ T2205] should_fail_usercopy+0x1e/0x30 [ 95.136699][ T2205] _copy_from_user+0x20/0xa0 [ 95.136732][ T2205] ___sys_recvmsg+0x174/0x590 [ 95.136758][ T2205] ? kstrtoull+0x13b/0x1e0 [ 95.136783][ T2205] ? __sys_recvmsg+0x260/0x260 [ 95.136812][ T2205] do_recvmmsg+0x328/0x790 [ 95.136838][ T2205] ? __sys_recvmmsg+0x2a0/0x2a0 [ 95.136864][ T2205] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 95.136893][ T2205] ? trace_event_buffer_commit+0x256/0x8f0 [ 95.136919][ T2205] __x64_sys_recvmmsg+0x199/0x250 [ 95.136945][ T2205] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 95.136972][ T2205] x64_sys_call+0x292c/0x2ee0 [ 95.136993][ T2205] do_syscall_64+0x57/0xf0 [ 95.137014][ T2205] ? clear_bhb_loop+0x50/0xa0 [ 95.137039][ T2205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.137063][ T2205] RIP: 0033:0x7f857eb9fb19 [ 95.137081][ T2205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.137098][ T2205] RSP: 002b:00007f857faee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.137121][ T2205] RAX: ffffffffffffffda RBX: 00007f857ee25fa0 RCX: 00007f857eb9fb19 [ 95.137138][ T2205] RDX: 0000000000000008 RSI: 0000200000004ac0 RDI: 0000000000000003 [ 95.137152][ T2205] RBP: 00007f857faee090 R08: 0000000000000000 R09: 0000000000000000 [ 95.137166][ T2205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.137178][ T2205] R13: 00007f857ee26038 R14: 00007f857ee25fa0 R15: 00007fffaf2d1088 [ 95.137196][ T2205] [ 95.229463][ T2216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'. [ 95.374446][ T2217] FAULT_INJECTION: forcing a failure. [ 95.374446][ T2217] name failslab, interval 1, probability 0, space 0, times 0 [ 95.388443][ T2217] CPU: 0 UID: 0 PID: 2217 Comm: syz.0.569 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 95.388481][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.388502][ T2217] Call Trace: [ 95.388513][ T2217] [ 95.388522][ T2217] __dump_stack+0x21/0x30 [ 95.388551][ T2217] dump_stack_lvl+0x140/0x1c0 [ 95.388573][ T2217] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.388592][ T2217] ? kvm_sched_clock_read+0x15/0x30 [ 95.388620][ T2217] ? __kasan_check_read+0x15/0x20 [ 95.388652][ T2217] dump_stack+0x19/0x20 [ 95.388676][ T2217] should_fail_ex+0x3c2/0x510 [ 95.388708][ T2217] should_failslab+0xac/0x100 [ 95.388731][ T2217] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 95.388762][ T2217] ? kstrdup_const+0x45/0x60 [ 95.388788][ T2217] ? is_bpf_text_address+0x17b/0x1a0 [ 95.388814][ T2217] kstrdup+0x4d/0x130 [ 95.388838][ T2217] ? kstrdup_const+0x3a/0x60 [ 95.388863][ T2217] kstrdup_const+0x45/0x60 [ 95.388888][ T2217] __kernfs_new_node+0xaa/0x740 [ 95.388911][ T2217] ? arch_stack_walk+0x10a/0x170 [ 95.388935][ T2217] ? kernfs_new_node+0x280/0x280 [ 95.388958][ T2217] ? stack_trace_save+0xaa/0x100 [ 95.388988][ T2217] ? stack_depot_save_flags+0x38/0x800 [ 95.389010][ T2217] kernfs_new_node+0x154/0x280 [ 95.389034][ T2217] __kernfs_create_file+0x52/0x280 [ 95.389061][ T2217] cgroup_addrm_files+0x775/0xac0 [ 95.389086][ T2217] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 95.389115][ T2217] ? __kasan_check_write+0x18/0x20 [ 95.389143][ T2217] ? _raw_spin_lock_irq+0x93/0x120 [ 95.389184][ T2217] css_populate_dir+0x1a4/0x3d0 [ 95.389226][ T2217] cgroup_mkdir+0x11da/0x1590 [ 95.389252][ T2217] ? __cfi_cgroup_mkdir+0x10/0x10 [ 95.389273][ T2217] kernfs_iop_mkdir+0x1be/0x2d0 [ 95.389302][ T2217] vfs_mkdir+0x58e/0x810 [ 95.389331][ T2217] do_mkdirat+0x240/0x530 [ 95.389360][ T2217] ? __cfi_do_mkdirat+0x10/0x10 [ 95.389388][ T2217] ? __kasan_check_write+0x18/0x20 [ 95.389421][ T2217] ? getname_flags+0x203/0x6b0 [ 95.389440][ T2217] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.389468][ T2217] __x64_sys_mkdirat+0x8b/0xa0 [ 95.389493][ T2217] x64_sys_call+0x2ba8/0x2ee0 [ 95.389516][ T2217] do_syscall_64+0x57/0xf0 [ 95.389537][ T2217] ? clear_bhb_loop+0x50/0xa0 [ 95.389564][ T2217] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.389591][ T2217] RIP: 0033:0x7fc72c79fb19 [ 95.389610][ T2217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.389629][ T2217] RSP: 002b:00007fc72d6bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.389654][ T2217] RAX: ffffffffffffffda RBX: 00007fc72ca26090 RCX: 00007fc72c79fb19 [ 95.389672][ T2217] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 95.389688][ T2217] RBP: 00007fc72c837b70 R08: 0000000000000000 R09: 0000000000000000 [ 95.389703][ T2217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.389717][ T2217] R13: 00007fc72ca26128 R14: 00007fc72ca26090 R15: 00007fffdacc80e8 [ 95.389736][ T2217] [ 95.389859][ T2217] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 95.404608][ T2221] FAULT_INJECTION: forcing a failure. [ 95.404608][ T2221] name failslab, interval 1, probability 0, space 0, times 0 [ 95.541453][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 95.543739][ T2221] CPU: 1 UID: 0 PID: 2221 Comm: syz.2.572 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 95.543770][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.543784][ T2221] Call Trace: [ 95.543792][ T2221] [ 95.543805][ T2221] __dump_stack+0x21/0x30 [ 95.543829][ T2221] dump_stack_lvl+0x140/0x1c0 [ 95.543847][ T2221] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.543866][ T2221] ? kasan_save_track+0x4f/0x80 [ 95.543885][ T2221] ? kasan_save_track+0x3e/0x80 [ 95.543903][ T2221] ? kasan_save_alloc_info+0x3a/0x50 [ 95.543927][ T2221] ? __kmalloc_cache_noprof+0x23c/0x470 [ 95.543953][ T2221] ? io_rsrc_node_alloc+0x13c/0x2c0 [ 95.543974][ T2221] dump_stack+0x19/0x20 [ 95.543992][ T2221] should_fail_ex+0x3c2/0x510 [ 95.544019][ T2221] should_failslab+0xac/0x100 [ 95.544038][ T2221] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 95.544064][ T2221] ? alloc_inode+0xa9/0x270 [ 95.544087][ T2221] alloc_inode+0xa9/0x270 [ 95.544107][ T2221] new_inode_pseudo+0x19/0x40 [ 95.544128][ T2221] alloc_anon_inode+0x21/0x340 [ 95.544152][ T2221] anon_inode_make_secure_inode+0x76/0x150 [ 95.544175][ T2221] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 95.544199][ T2221] ? kasan_save_alloc_info+0x3a/0x50 [ 95.544223][ T2221] ? __kasan_kmalloc+0x96/0xb0 [ 95.544244][ T2221] __anon_inode_getfile+0xd1/0x200 [ 95.544267][ T2221] anon_inode_create_getfile+0x3f/0x50 [ 95.544290][ T2221] io_uring_create+0xc61/0x13f0 [ 95.544313][ T2221] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 95.544338][ T2221] ? __x64_sys_io_uring_setup+0x80/0x80 [ 95.544362][ T2221] ? trace_event_buffer_commit+0x256/0x8f0 [ 95.544390][ T2221] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.544415][ T2221] __x64_sys_io_uring_setup+0x5f/0x80 [ 95.544440][ T2221] x64_sys_call+0x22c0/0x2ee0 [ 95.544460][ T2221] do_syscall_64+0x57/0xf0 [ 95.544500][ T2221] ? clear_bhb_loop+0x50/0xa0 [ 95.544527][ T2221] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.544551][ T2221] RIP: 0033:0x7f857eb9fb19 [ 95.544569][ T2221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.544586][ T2221] RSP: 002b:00007f857faedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 95.544610][ T2221] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f857eb9fb19 [ 95.544625][ T2221] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 95.544640][ T2221] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 95.544654][ T2221] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 95.544669][ T2221] R13: 0000200000001050 R14: 00007f857faedfd8 R15: 0000000000000000 [ 95.544691][ T2221] [ 96.016092][ T312] usb 4-1: USB disconnect, device number 27 [ 96.055566][ T36] audit: type=1400 audit(1793727066.990:406): avc: denied { mounton } for pid=2227 comm="syz.2.576" path="/199/file0" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.060028][ T2230] netlink: 'syz.3.574': attribute type 11 has an invalid length. [ 96.089718][ T2230] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.574'. [ 96.141617][ T10] usb 2-1: device descriptor read/64, error -71 [ 96.331509][ T66] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 96.391457][ T10] usb 2-1: device descriptor read/64, error -71 [ 96.513041][ T66] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.525281][ T66] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.538449][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.545465][ T66] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 96.554659][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.564872][ T66] usb 1-1: config 0 descriptor?? [ 96.641626][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 96.641760][ T312] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 96.651538][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.667780][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.677670][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.688962][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.698801][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.708551][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.718548][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.728262][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.750415][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.761049][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.770982][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.780777][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.795745][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.805656][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.812842][ T312] usb 4-1: config 15 has an invalid interface number: 10 but max is 0 [ 96.815186][ T10] usb 2-1: device descriptor read/64, error -71 [ 96.830346][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.831986][ T312] usb 4-1: config 15 has no interface number 0 [ 96.840421][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.851477][ T312] usb 4-1: config 15 interface 10 has no altsetting 0 [ 96.857439][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.871863][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.882204][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.883348][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=dd.83 [ 96.892024][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.908797][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.910578][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.921488][ T312] usb 4-1: Product: syz [ 96.927994][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.941389][ T312] usb 4-1: Manufacturer: syz [ 96.942594][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.946393][ T312] usb 4-1: SerialNumber: syz [ 96.956601][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.970359][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.980272][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 96.990348][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.000624][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.005877][ T66] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 97.017559][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.026717][ T66] wacom 0003:056A:5000.000C: unknown main item tag 0x0 [ 97.026755][ T66] wacom 0003:056A:5000.000C: unbalanced collection at end of report description [ 97.027073][ T66] wacom 0003:056A:5000.000C: parse failed [ 97.039867][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.059250][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.061558][ T66] wacom 0003:056A:5000.000C: probe with driver wacom failed with error -22 [ 97.069577][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.091453][ T10] usb 2-1: device descriptor read/64, error -71 [ 97.111149][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.122466][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.132368][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.141944][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.151796][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.161145][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.175362][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.186853][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.196782][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.206962][ T10] usb usb2-port1: attempt power cycle [ 97.226192][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.239859][ T311] usb 1-1: USB disconnect, device number 36 [ 97.255953][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.381857][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.398832][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.408815][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.425900][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.445684][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.475082][ T2246] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.561455][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 97.592816][ T10] usb 2-1: device descriptor read/8, error -71 [ 97.722991][ T10] usb 2-1: device descriptor read/8, error -71 [ 97.961460][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 97.992818][ T10] usb 2-1: device descriptor read/8, error -71 [ 98.123601][ T10] usb 2-1: device descriptor read/8, error -71 [ 98.241578][ T10] usb usb2-port1: unable to enumerate USB device [ 98.306638][ T2272] FAULT_INJECTION: forcing a failure. [ 98.306638][ T2272] name failslab, interval 1, probability 0, space 0, times 0 [ 98.319671][ T2272] CPU: 1 UID: 0 PID: 2272 Comm: syz.1.583 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 98.319711][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.319729][ T2272] Call Trace: [ 98.319743][ T2272] [ 98.319755][ T2272] __dump_stack+0x21/0x30 [ 98.319783][ T2272] dump_stack_lvl+0x140/0x1c0 [ 98.319806][ T2272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.319830][ T2272] ? kstrdup_const+0x45/0x60 [ 98.319860][ T2272] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 98.319889][ T2272] dump_stack+0x19/0x20 [ 98.319908][ T2272] should_fail_ex+0x3c2/0x510 [ 98.319940][ T2272] should_failslab+0xac/0x100 [ 98.319964][ T2272] kmem_cache_alloc_noprof+0x42/0x410 [ 98.319995][ T2272] ? __kernfs_new_node+0xf1/0x740 [ 98.320021][ T2272] __kernfs_new_node+0xf1/0x740 [ 98.320044][ T2272] ? arch_stack_walk+0x10a/0x170 [ 98.320070][ T2272] ? kernfs_new_node+0x280/0x280 [ 98.320095][ T2272] ? stack_trace_save+0xaa/0x100 [ 98.320127][ T2272] ? stack_depot_save_flags+0x38/0x800 [ 98.320151][ T2272] kernfs_new_node+0x154/0x280 [ 98.320176][ T2272] __kernfs_create_file+0x52/0x280 [ 98.320203][ T2272] cgroup_addrm_files+0x775/0xac0 [ 98.320230][ T2272] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 98.320260][ T2272] ? __kasan_check_write+0x18/0x20 [ 98.320289][ T2272] ? _raw_spin_lock_irq+0x93/0x120 [ 98.320327][ T2272] css_populate_dir+0x1a4/0x3d0 [ 98.320359][ T2272] cgroup_mkdir+0x11da/0x1590 [ 98.320384][ T2272] ? __cfi_cgroup_mkdir+0x10/0x10 [ 98.320406][ T2272] kernfs_iop_mkdir+0x1be/0x2d0 [ 98.320432][ T2272] vfs_mkdir+0x58e/0x810 [ 98.320458][ T2272] do_mkdirat+0x240/0x530 [ 98.320483][ T2272] ? __cfi_do_mkdirat+0x10/0x10 [ 98.320509][ T2272] ? __kasan_check_write+0x18/0x20 [ 98.320538][ T2272] ? getname_flags+0x203/0x6b0 [ 98.320558][ T2272] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 98.320586][ T2272] __x64_sys_mkdirat+0x8b/0xa0 [ 98.320613][ T2272] x64_sys_call+0x2ba8/0x2ee0 [ 98.320637][ T2272] do_syscall_64+0x57/0xf0 [ 98.320659][ T2272] ? clear_bhb_loop+0x50/0xa0 [ 98.320688][ T2272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.320716][ T2272] RIP: 0033:0x7f7fa5f9fb19 [ 98.320737][ T2272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.320758][ T2272] RSP: 002b:00007f7fa6e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.320786][ T2272] RAX: ffffffffffffffda RBX: 00007f7fa6225fa0 RCX: 00007f7fa5f9fb19 [ 98.320803][ T2272] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 98.320820][ T2272] RBP: 00007f7fa6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 98.320835][ T2272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.320851][ T2272] R13: 00007f7fa6226038 R14: 00007f7fa6225fa0 R15: 00007ffc0dda4848 [ 98.320871][ T2272] [ 98.321010][ T2272] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 98.381673][ T311] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 98.725996][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 98.757071][ T2281] FAULT_INJECTION: forcing a failure. [ 98.757071][ T2281] name failslab, interval 1, probability 0, space 0, times 0 [ 98.780170][ T2281] CPU: 1 UID: 0 PID: 2281 Comm: syz.2.586 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 98.780208][ T2281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.780224][ T2281] Call Trace: [ 98.780233][ T2281] [ 98.780243][ T2281] __dump_stack+0x21/0x30 [ 98.780271][ T2281] dump_stack_lvl+0x140/0x1c0 [ 98.780292][ T2281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.780313][ T2281] ? avc_has_perm_noaudit+0x289/0x360 [ 98.780339][ T2281] dump_stack+0x19/0x20 [ 98.780357][ T2281] should_fail_ex+0x3c2/0x510 [ 98.780398][ T2281] should_failslab+0xac/0x100 [ 98.780421][ T2281] __kmalloc_node_noprof+0x69/0x500 [ 98.780451][ T2281] ? __kvmalloc_node_noprof+0x128/0x300 [ 98.780480][ T2281] __kvmalloc_node_noprof+0x128/0x300 [ 98.780507][ T2281] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 98.780534][ T2281] ? __cfi_table_load+0x10/0x10 [ 98.780563][ T2281] ? __cfi_table_load+0x10/0x10 [ 98.780587][ T2281] ? __kasan_check_write+0x18/0x20 [ 98.780612][ T2281] dm_ctl_ioctl+0x46f/0xde0 [ 98.780635][ T2281] ? __cfi_table_load+0x10/0x10 [ 98.780660][ T2281] ? selinux_file_ioctl+0x732/0x1480 [ 98.780685][ T2281] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 98.780714][ T2281] ? __fget_files+0x2bc/0x330 [ 98.780738][ T2281] ? bpf_lsm_file_ioctl+0xd/0x20 [ 98.780763][ T2281] ? security_file_ioctl+0x3e/0x110 [ 98.780792][ T2281] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 98.780818][ T2281] __se_sys_ioctl+0x123/0x1b0 [ 98.780844][ T2281] __x64_sys_ioctl+0x7f/0xa0 [ 98.780866][ T2281] x64_sys_call+0x1878/0x2ee0 [ 98.780888][ T2281] do_syscall_64+0x57/0xf0 [ 98.780910][ T2281] ? clear_bhb_loop+0x50/0xa0 [ 98.780939][ T2281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.780966][ T2281] RIP: 0033:0x7f857eb9fb19 [ 98.780986][ T2281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.781005][ T2281] RSP: 002b:00007f857faee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.781031][ T2281] RAX: ffffffffffffffda RBX: 00007f857ee25fa0 RCX: 00007f857eb9fb19 [ 98.781048][ T2281] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 98.781064][ T2281] RBP: 00007f857faee090 R08: 0000000000000000 R09: 0000000000000000 [ 98.781079][ T2281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.781094][ T2281] R13: 00007f857ee26038 R14: 00007f857ee25fa0 R15: 00007fffaf2d1088 [ 98.781112][ T2281] [ 98.783005][ T311] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 98.913905][ T2288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.914853][ T311] usb 1-1: config 0 has no interface number 0 [ 98.934186][ T2288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.067428][ T311] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.077645][ T311] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.091037][ T311] usb 1-1: config 0 interface 16 has no altsetting 0 [ 99.107348][ T2288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.117763][ T2288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.129561][ T311] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 99.142163][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.157858][ T311] usb 1-1: config 0 descriptor?? [ 99.170581][ T311] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 99.352428][ T312] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 99.359149][ T312] usb 4-1: No valid video chain found. [ 99.384046][ T312] usb 4-1: USB disconnect, device number 28 [ 99.422369][ T2296] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(9) [ 99.451464][ T311] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 99.612829][ T311] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.624418][ T311] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.638465][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.651941][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 99.662245][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.675823][ T311] usb 2-1: config 0 descriptor?? [ 99.687566][ T2309] FAULT_INJECTION: forcing a failure. [ 99.687566][ T2309] name failslab, interval 1, probability 0, space 0, times 0 [ 99.700490][ T2309] CPU: 1 UID: 0 PID: 2309 Comm: syz.2.593 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 99.700529][ T2309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.700546][ T2309] Call Trace: [ 99.700557][ T2309] [ 99.700569][ T2309] __dump_stack+0x21/0x30 [ 99.700596][ T2309] dump_stack_lvl+0x140/0x1c0 [ 99.700616][ T2309] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.700636][ T2309] ? kvm_sched_clock_read+0x15/0x30 [ 99.700665][ T2309] ? __kasan_check_read+0x15/0x20 [ 99.700697][ T2309] dump_stack+0x19/0x20 [ 99.700718][ T2309] should_fail_ex+0x3c2/0x510 [ 99.700751][ T2309] should_failslab+0xac/0x100 [ 99.700785][ T2309] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 99.700817][ T2309] ? kstrdup_const+0x45/0x60 [ 99.700831][ T2309] ? is_bpf_text_address+0x17b/0x1a0 [ 99.700856][ T2309] kstrdup+0x4d/0x130 [ 99.700882][ T2309] ? kstrdup_const+0x3a/0x60 [ 99.700909][ T2309] kstrdup_const+0x45/0x60 [ 99.700943][ T2309] __kernfs_new_node+0xaa/0x740 [ 99.700968][ T2309] ? arch_stack_walk+0x10a/0x170 [ 99.700995][ T2309] ? kernfs_new_node+0x280/0x280 [ 99.701019][ T2309] ? stack_trace_save+0xaa/0x100 [ 99.701063][ T2309] ? stack_depot_save_flags+0x38/0x800 [ 99.701088][ T2309] kernfs_new_node+0x154/0x280 [ 99.701112][ T2309] __kernfs_create_file+0x52/0x280 [ 99.701140][ T2309] cgroup_addrm_files+0x775/0xac0 [ 99.701166][ T2309] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 99.701195][ T2309] ? __kasan_check_write+0x18/0x20 [ 99.701225][ T2309] ? _raw_spin_lock_irq+0x93/0x120 [ 99.701248][ T2309] css_populate_dir+0x1a4/0x3d0 [ 99.701276][ T2309] cgroup_mkdir+0x11da/0x1590 [ 99.701297][ T2309] ? __cfi_cgroup_mkdir+0x10/0x10 [ 99.701318][ T2309] kernfs_iop_mkdir+0x1be/0x2d0 [ 99.701354][ T2309] vfs_mkdir+0x58e/0x810 [ 99.701384][ T2309] do_mkdirat+0x240/0x530 [ 99.701410][ T2309] ? __cfi_do_mkdirat+0x10/0x10 [ 99.701433][ T2309] ? __kasan_check_write+0x18/0x20 [ 99.701462][ T2309] ? getname_flags+0x203/0x6b0 [ 99.701482][ T2309] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 99.701510][ T2309] __x64_sys_mkdirat+0x8b/0xa0 [ 99.701536][ T2309] x64_sys_call+0x2ba8/0x2ee0 [ 99.701560][ T2309] do_syscall_64+0x57/0xf0 [ 99.701582][ T2309] ? clear_bhb_loop+0x50/0xa0 [ 99.701609][ T2309] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.701630][ T2309] RIP: 0033:0x7f857eb9fb19 [ 99.701643][ T2309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.701663][ T2309] RSP: 002b:00007f857faee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 99.701690][ T2309] RAX: ffffffffffffffda RBX: 00007f857ee25fa0 RCX: 00007f857eb9fb19 [ 99.701710][ T2309] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 99.701728][ T2309] RBP: 00007f857ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 99.701744][ T2309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.701759][ T2309] R13: 00007f857ee26038 R14: 00007f857ee25fa0 R15: 00007fffaf2d1088 [ 99.701778][ T2309] [ 100.003458][ T2309] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 100.089453][ T311] wacom 0003:056A:5000.000D: unknown main item tag 0x0 [ 100.097672][ T311] wacom 0003:056A:5000.000D: unknown main item tag 0x0 [ 100.112407][ T311] wacom 0003:056A:5000.000D: unbalanced collection at end of report description [ 100.126938][ T311] wacom 0003:056A:5000.000D: parse failed [ 100.135267][ T311] wacom 0003:056A:5000.000D: probe with driver wacom failed with error -22 [ 100.155776][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 100.211024][ T2321] FAULT_INJECTION: forcing a failure. [ 100.211024][ T2321] name failslab, interval 1, probability 0, space 0, times 0 [ 100.224256][ T2321] CPU: 1 UID: 0 PID: 2321 Comm: syz.2.595 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 100.224295][ T2321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.224312][ T2321] Call Trace: [ 100.224323][ T2321] [ 100.224335][ T2321] __dump_stack+0x21/0x30 [ 100.224365][ T2321] dump_stack_lvl+0x140/0x1c0 [ 100.224386][ T2321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.224407][ T2321] ? __d_alloc+0x42/0x8c0 [ 100.224427][ T2321] dump_stack+0x19/0x20 [ 100.224437][ T2321] should_fail_ex+0x3c2/0x510 [ 100.224456][ T2321] should_failslab+0xac/0x100 [ 100.224469][ T2321] kmem_cache_alloc_noprof+0x42/0x410 [ 100.224501][ T2321] ? alloc_empty_file+0xbf/0x270 [ 100.224533][ T2321] ? _raw_spin_unlock+0x45/0x60 [ 100.224558][ T2321] alloc_empty_file+0xbf/0x270 [ 100.224580][ T2321] ? _raw_spin_unlock+0x45/0x60 [ 100.224601][ T2321] alloc_file_pseudo+0x142/0x1f0 [ 100.224616][ T2321] ? security_inode_init_security_anon+0x3e/0x110 [ 100.224631][ T2321] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 100.224644][ T2321] ? anon_inode_make_secure_inode+0xf5/0x150 [ 100.224660][ T2321] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 100.224674][ T2321] ? __kasan_kmalloc+0x96/0xb0 [ 100.224695][ T2321] __anon_inode_getfile+0x12e/0x200 [ 100.224720][ T2321] anon_inode_create_getfile+0x3f/0x50 [ 100.224746][ T2321] io_uring_create+0xc61/0x13f0 [ 100.224770][ T2321] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 100.224799][ T2321] ? __x64_sys_io_uring_setup+0x80/0x80 [ 100.224826][ T2321] ? trace_event_buffer_commit+0x256/0x8f0 [ 100.224856][ T2321] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 100.224871][ T2321] __x64_sys_io_uring_setup+0x5f/0x80 [ 100.224893][ T2321] x64_sys_call+0x22c0/0x2ee0 [ 100.224916][ T2321] do_syscall_64+0x57/0xf0 [ 100.224939][ T2321] ? clear_bhb_loop+0x50/0xa0 [ 100.224968][ T2321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.224995][ T2321] RIP: 0033:0x7f857eb9fb19 [ 100.225013][ T2321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.225023][ T2321] RSP: 002b:00007f857faedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 100.225038][ T2321] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f857eb9fb19 [ 100.225047][ T2321] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 100.225055][ T2321] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 100.225064][ T2321] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 100.225072][ T2321] R13: 0000200000001050 R14: 00007f857faedfd8 R15: 0000000000000000 [ 100.225085][ T2321] [ 100.501171][ T31] usb 2-1: USB disconnect, device number 42 [ 100.887437][ T2342] FAULT_INJECTION: forcing a failure. [ 100.887437][ T2342] name failslab, interval 1, probability 0, space 0, times 0 [ 100.900826][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: syz.3.602 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 100.900852][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.900864][ T2342] Call Trace: [ 100.900869][ T2342] [ 100.900879][ T2342] __dump_stack+0x21/0x30 [ 100.900898][ T2342] dump_stack_lvl+0x140/0x1c0 [ 100.900912][ T2342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.900926][ T2342] ? avc_has_perm+0x155/0x240 [ 100.900944][ T2342] dump_stack+0x19/0x20 [ 100.900954][ T2342] should_fail_ex+0x3c2/0x510 [ 100.900974][ T2342] ? cgroup_mkdir+0x24d/0x1590 [ 100.900987][ T2342] should_failslab+0xac/0x100 [ 100.901001][ T2342] __kmalloc_noprof+0x69/0x510 [ 100.901017][ T2342] ? cgroup_mkdir+0x24d/0x1590 [ 100.901028][ T2342] ? cgroup_kn_lock_live+0x196/0x2d0 [ 100.901043][ T2342] cgroup_mkdir+0x24d/0x1590 [ 100.901054][ T2342] ? __kasan_check_write+0x18/0x20 [ 100.901071][ T2342] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 100.901086][ T2342] ? __cfi_cgroup_mkdir+0x10/0x10 [ 100.901105][ T2342] kernfs_iop_mkdir+0x1be/0x2d0 [ 100.901130][ T2342] vfs_mkdir+0x58e/0x810 [ 100.901156][ T2342] do_mkdirat+0x240/0x530 [ 100.901179][ T2342] ? __cfi_do_mkdirat+0x10/0x10 [ 100.901219][ T2342] ? __kasan_check_write+0x18/0x20 [ 100.901240][ T2342] ? getname_flags+0x203/0x6b0 [ 100.901250][ T2342] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 100.901268][ T2342] __x64_sys_mkdirat+0x8b/0xa0 [ 100.901283][ T2342] x64_sys_call+0x2ba8/0x2ee0 [ 100.901297][ T2342] do_syscall_64+0x57/0xf0 [ 100.901310][ T2342] ? clear_bhb_loop+0x50/0xa0 [ 100.901327][ T2342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.901347][ T2342] RIP: 0033:0x7f16e119fb19 [ 100.901367][ T2342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.901387][ T2342] RSP: 002b:00007f16e20bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.901414][ T2342] RAX: ffffffffffffffda RBX: 00007f16e1425fa0 RCX: 00007f16e119fb19 [ 100.901432][ T2342] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 100.901449][ T2342] RBP: 00007f16e1237b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.901464][ T2342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.901476][ T2342] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 100.901486][ T2342] [ 101.160902][ T312] usb 1-1: USB disconnect, device number 37 [ 101.182157][ T2344] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.805306368.0), cmd(9) [ 101.201713][ T36] audit: type=1400 audit(1793727072.080:407): avc: denied { mount } for pid=2346 comm="syz.0.604" name="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.225416][ T36] audit: type=1400 audit(1793727072.140:408): avc: denied { search } for pid=2346 comm="syz.0.604" name="/" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.273379][ T36] audit: type=1400 audit(1793727072.200:409): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.317894][ T2351] FAULT_INJECTION: forcing a failure. [ 101.317894][ T2351] name failslab, interval 1, probability 0, space 0, times 0 [ 101.342589][ T2351] CPU: 1 UID: 0 PID: 2351 Comm: syz.0.606 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 101.342625][ T2351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.342641][ T2351] Call Trace: [ 101.342650][ T2351] [ 101.342659][ T2351] __dump_stack+0x21/0x30 [ 101.342685][ T2351] dump_stack_lvl+0x140/0x1c0 [ 101.342707][ T2351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.342727][ T2351] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 101.342766][ T2351] dump_stack+0x19/0x20 [ 101.342785][ T2351] should_fail_ex+0x3c2/0x510 [ 101.342815][ T2351] should_failslab+0xac/0x100 [ 101.342838][ T2351] kmem_cache_alloc_noprof+0x42/0x410 [ 101.342867][ T2351] ? security_file_alloc+0x49/0x220 [ 101.342897][ T2351] security_file_alloc+0x49/0x220 [ 101.342924][ T2351] init_file+0x9e/0x210 [ 101.342948][ T2351] alloc_empty_file+0xd9/0x270 [ 101.342971][ T2351] ? _raw_spin_unlock+0x45/0x60 [ 101.342995][ T2351] alloc_file_pseudo+0x142/0x1f0 [ 101.343018][ T2351] ? security_inode_init_security_anon+0x3e/0x110 [ 101.343052][ T2351] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 101.343075][ T2351] ? anon_inode_make_secure_inode+0xf5/0x150 [ 101.343103][ T2351] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 101.343129][ T2351] ? __kasan_kmalloc+0x96/0xb0 [ 101.343152][ T2351] __anon_inode_getfile+0x12e/0x200 [ 101.343178][ T2351] anon_inode_create_getfile+0x3f/0x50 [ 101.343203][ T2351] io_uring_create+0xc61/0x13f0 [ 101.343230][ T2351] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 101.343260][ T2351] ? __x64_sys_io_uring_setup+0x80/0x80 [ 101.343287][ T2351] ? trace_event_buffer_commit+0x256/0x8f0 [ 101.343317][ T2351] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 101.343345][ T2351] __x64_sys_io_uring_setup+0x5f/0x80 [ 101.343372][ T2351] x64_sys_call+0x22c0/0x2ee0 [ 101.343394][ T2351] do_syscall_64+0x57/0xf0 [ 101.343416][ T2351] ? clear_bhb_loop+0x50/0xa0 [ 101.343445][ T2351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.343471][ T2351] RIP: 0033:0x7fc72c79fb19 [ 101.343491][ T2351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.343510][ T2351] RSP: 002b:00007fc72d6dfee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 101.343536][ T2351] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007fc72c79fb19 [ 101.343554][ T2351] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 101.343570][ T2351] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 101.343586][ T2351] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 101.343602][ T2351] R13: 0000200000001050 R14: 00007fc72d6dffd8 R15: 0000000000000000 [ 101.343621][ T2351] [ 101.655325][ T2363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 101.722666][ T2367] FAULT_INJECTION: forcing a failure. [ 101.722666][ T2367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.781598][ T2367] CPU: 1 UID: 0 PID: 2367 Comm: syz.3.612 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 101.781649][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.781663][ T2367] Call Trace: [ 101.781671][ T2367] [ 101.781681][ T2367] __dump_stack+0x21/0x30 [ 101.781707][ T2367] dump_stack_lvl+0x140/0x1c0 [ 101.781726][ T2367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.781745][ T2367] ? check_stack_object+0x138/0x150 [ 101.781775][ T2367] dump_stack+0x19/0x20 [ 101.781794][ T2367] should_fail_ex+0x3c2/0x510 [ 101.781826][ T2367] should_fail+0xf/0x20 [ 101.781852][ T2367] should_fail_usercopy+0x1e/0x30 [ 101.781873][ T2367] _copy_to_user+0x24/0xa0 [ 101.781897][ T2367] simple_read_from_buffer+0xed/0x160 [ 101.781924][ T2367] proc_fail_nth_read+0x1aa/0x220 [ 101.781951][ T2367] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.781978][ T2367] ? bpf_lsm_file_permission+0xd/0x20 [ 101.782002][ T2367] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 101.782028][ T2367] vfs_read+0x288/0xc70 [ 101.782056][ T2367] ? rb_commit+0x753/0x7b0 [ 101.782085][ T2367] ? __cfi_vfs_read+0x10/0x10 [ 101.782113][ T2367] ? __kasan_check_write+0x18/0x20 [ 101.782140][ T2367] ? mutex_lock+0x97/0x1d0 [ 101.782165][ T2367] ? __cfi_mutex_lock+0x10/0x10 [ 101.782192][ T2367] ksys_read+0x145/0x260 [ 101.782221][ T2367] ? __cfi_ksys_read+0x10/0x10 [ 101.782250][ T2367] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 101.782279][ T2367] __x64_sys_read+0x7f/0x90 [ 101.782307][ T2367] x64_sys_call+0x2638/0x2ee0 [ 101.782330][ T2367] do_syscall_64+0x57/0xf0 [ 101.782351][ T2367] ? clear_bhb_loop+0x50/0xa0 [ 101.782378][ T2367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.782405][ T2367] RIP: 0033:0x7f16e116034e [ 101.782425][ T2367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.782444][ T2367] RSP: 002b:00007f16e20bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.782470][ T2367] RAX: ffffffffffffffda RBX: 00007f16e20bc6c0 RCX: 00007f16e116034e [ 101.782488][ T2367] RDX: 000000000000000f RSI: 00007f16e20bc0a0 RDI: 0000000000000004 [ 101.782503][ T2367] RBP: 00007f16e20bc090 R08: 0000000000000000 R09: 0000000000000000 [ 101.782518][ T2367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.782533][ T2367] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 101.782553][ T2367] [ 101.813968][ T2371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.901452][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 101.943795][ T2371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.092795][ T31] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 102.100946][ T31] usb 1-1: config 0 has no interface number 0 [ 102.107564][ T31] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.117806][ T31] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.131159][ T31] usb 1-1: config 0 interface 16 has no altsetting 0 [ 102.143553][ T31] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 102.152976][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.162528][ T31] usb 1-1: config 0 descriptor?? [ 102.179945][ T31] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 102.561476][ T31] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 102.626080][ T2381] FAULT_INJECTION: forcing a failure. [ 102.626080][ T2381] name failslab, interval 1, probability 0, space 0, times 0 [ 102.639219][ T2381] CPU: 1 UID: 0 PID: 2381 Comm: syz.2.617 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 102.639242][ T2381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.639252][ T2381] Call Trace: [ 102.639258][ T2381] [ 102.639267][ T2381] __dump_stack+0x21/0x30 [ 102.639291][ T2381] dump_stack_lvl+0x140/0x1c0 [ 102.639313][ T2381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.639336][ T2381] ? avc_has_perm+0x155/0x240 [ 102.639363][ T2381] dump_stack+0x19/0x20 [ 102.639383][ T2381] should_fail_ex+0x3c2/0x510 [ 102.639414][ T2381] ? cgroup_mkdir+0x24d/0x1590 [ 102.639428][ T2381] should_failslab+0xac/0x100 [ 102.639441][ T2381] __kmalloc_noprof+0x69/0x510 [ 102.639456][ T2381] ? cgroup_mkdir+0x24d/0x1590 [ 102.639467][ T2381] ? cgroup_kn_lock_live+0x196/0x2d0 [ 102.639488][ T2381] cgroup_mkdir+0x24d/0x1590 [ 102.639509][ T2381] ? __kasan_check_write+0x18/0x20 [ 102.639540][ T2381] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 102.639564][ T2381] ? __cfi_cgroup_mkdir+0x10/0x10 [ 102.639585][ T2381] kernfs_iop_mkdir+0x1be/0x2d0 [ 102.639610][ T2381] vfs_mkdir+0x58e/0x810 [ 102.639626][ T2381] do_mkdirat+0x240/0x530 [ 102.639639][ T2381] ? __cfi_do_mkdirat+0x10/0x10 [ 102.639652][ T2381] ? __kasan_check_write+0x18/0x20 [ 102.639666][ T2381] ? getname_flags+0x203/0x6b0 [ 102.639678][ T2381] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 102.639706][ T2381] __x64_sys_mkdirat+0x8b/0xa0 [ 102.639732][ T2381] x64_sys_call+0x2ba8/0x2ee0 [ 102.639757][ T2381] do_syscall_64+0x57/0xf0 [ 102.639779][ T2381] ? clear_bhb_loop+0x50/0xa0 [ 102.639806][ T2381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.639821][ T2381] RIP: 0033:0x7f857eb9fb19 [ 102.639833][ T2381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.639844][ T2381] RSP: 002b:00007f857faee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.639858][ T2381] RAX: ffffffffffffffda RBX: 00007f857ee25fa0 RCX: 00007f857eb9fb19 [ 102.639868][ T2381] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 102.639878][ T2381] RBP: 00007f857ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.639894][ T2381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.639908][ T2381] R13: 00007f857ee26038 R14: 00007f857ee25fa0 R15: 00007fffaf2d1088 [ 102.639928][ T2381] [ 102.941498][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.104555][ T2391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.120210][ T2391] picdev_read: 6 callbacks suppressed [ 103.120346][ T2391] kvm: pic: non byte read [ 103.132569][ T2391] kvm: pic: non byte read [ 103.138362][ T2391] kvm: pic: non byte read [ 103.147932][ T2391] kvm: pic: non byte read [ 103.154342][ T2391] kvm: pic: non byte read [ 103.169372][ T2391] kvm: pic: non byte read [ 103.187870][ T2391] kvm: pic: level sensitive irq not supported [ 103.189067][ T2391] kvm: pic: non byte read [ 103.190869][ T2395] FAULT_INJECTION: forcing a failure. [ 103.190869][ T2395] name failslab, interval 1, probability 0, space 0, times 0 [ 103.199268][ T2391] kvm: pic: single mode not supported [ 103.202331][ T2395] CPU: 1 UID: 0 PID: 2395 Comm: syz.2.622 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 103.202366][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.202381][ T2395] Call Trace: [ 103.202391][ T2395] [ 103.202400][ T2395] __dump_stack+0x21/0x30 [ 103.202425][ T2395] dump_stack_lvl+0x140/0x1c0 [ 103.202445][ T2395] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.202465][ T2395] ? file_init_path+0x3b/0x590 [ 103.202490][ T2395] ? __asan_memcpy+0x5a/0x80 [ 103.202517][ T2395] dump_stack+0x19/0x20 [ 103.202534][ T2395] should_fail_ex+0x3c2/0x510 [ 103.202563][ T2395] should_failslab+0xac/0x100 [ 103.202584][ T2395] __kmalloc_cache_noprof+0x41/0x470 [ 103.202613][ T2395] ? __io_uring_add_tctx_node+0x14a/0x590 [ 103.202638][ T2395] __io_uring_add_tctx_node+0x14a/0x590 [ 103.202665][ T2395] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 103.202689][ T2395] ? anon_inode_create_getfile+0x3f/0x50 [ 103.202715][ T2395] io_uring_create+0xc78/0x13f0 [ 103.202738][ T2395] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 103.202766][ T2395] ? __x64_sys_io_uring_setup+0x80/0x80 [ 103.202790][ T2395] ? trace_event_buffer_commit+0x256/0x8f0 [ 103.202821][ T2395] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 103.202847][ T2395] __x64_sys_io_uring_setup+0x5f/0x80 [ 103.202873][ T2395] x64_sys_call+0x22c0/0x2ee0 [ 103.202894][ T2395] do_syscall_64+0x57/0xf0 [ 103.202915][ T2395] ? clear_bhb_loop+0x50/0xa0 [ 103.202948][ T2395] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.202973][ T2395] RIP: 0033:0x7f857eb9fb19 [ 103.202992][ T2395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.203010][ T2395] RSP: 002b:00007f857faedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 103.203034][ T2395] RAX: ffffffffffffffda RBX: 0000200000000fc8 RCX: 00007f857eb9fb19 [ 103.203050][ T2395] RDX: 0000200000001048 RSI: 0000200000000fc8 RDI: 0000000000000f14 [ 103.203066][ T2395] RBP: 0000200000000fc0 R08: 0000200000000440 R09: 0000000000000000 [ 103.203081][ T2395] R10: 0000200000001050 R11: 0000000000000206 R12: 0000200000001048 [ 103.203096][ T2395] R13: 0000200000001050 R14: 00007f857faedfd8 R15: 0000000000000000 [ 103.203113][ T2395] [ 103.251563][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.308793][ T2391] kvm: pic: non byte read [ 103.336062][ T2400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.473456][ T2400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.527054][ T2402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 103.611455][ T31] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 103.761656][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.838483][ T2407] FAULT_INJECTION: forcing a failure. [ 103.838483][ T2407] name failslab, interval 1, probability 0, space 0, times 0 [ 103.888761][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.3.627 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 103.888802][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.888819][ T2407] Call Trace: [ 103.888828][ T2407] [ 103.888838][ T2407] __dump_stack+0x21/0x30 [ 103.888867][ T2407] dump_stack_lvl+0x140/0x1c0 [ 103.888890][ T2407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.888914][ T2407] dump_stack+0x19/0x20 [ 103.888935][ T2407] should_fail_ex+0x3c2/0x510 [ 103.888966][ T2407] should_failslab+0xac/0x100 [ 103.888990][ T2407] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 103.889022][ T2407] ? kstrdup_const+0x45/0x60 [ 103.889050][ T2407] kstrdup+0x4d/0x130 [ 103.889075][ T2407] ? kstrdup_const+0x3a/0x60 [ 103.889102][ T2407] kstrdup_const+0x45/0x60 [ 103.889128][ T2407] __kernfs_new_node+0xaa/0x740 [ 103.889152][ T2407] ? mutex_unlock+0x90/0x240 [ 103.889179][ T2407] ? pcpu_alloc_noprof+0x1440/0x1440 [ 103.889202][ T2407] ? kernfs_new_node+0x280/0x280 [ 103.889225][ T2407] ? cgroup_rstat_init+0x79/0x270 [ 103.889259][ T2407] ? pcpu_alloc_noprof+0xd93/0x1440 [ 103.889283][ T2407] kernfs_new_node+0x154/0x280 [ 103.889307][ T2407] kernfs_create_dir_ns+0x4b/0x130 [ 103.889343][ T2407] cgroup_mkdir+0x392/0x1590 [ 103.889366][ T2407] ? __kasan_check_write+0x18/0x20 [ 103.889399][ T2407] ? __cfi_cgroup_mkdir+0x10/0x10 [ 103.889421][ T2407] kernfs_iop_mkdir+0x1be/0x2d0 [ 103.889447][ T2407] vfs_mkdir+0x58e/0x810 [ 103.889475][ T2407] do_mkdirat+0x240/0x530 [ 103.889501][ T2407] ? __cfi_do_mkdirat+0x10/0x10 [ 103.889527][ T2407] ? __kasan_check_write+0x18/0x20 [ 103.889555][ T2407] ? getname_flags+0x203/0x6b0 [ 103.889576][ T2407] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 103.889605][ T2407] __x64_sys_mkdirat+0x8b/0xa0 [ 103.889631][ T2407] x64_sys_call+0x2ba8/0x2ee0 [ 103.889654][ T2407] do_syscall_64+0x57/0xf0 [ 103.889676][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 103.889704][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.889733][ T2407] RIP: 0033:0x7f16e119fb19 [ 103.889752][ T2407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.889772][ T2407] RSP: 002b:00007f16e20bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 103.889798][ T2407] RAX: ffffffffffffffda RBX: 00007f16e1425fa0 RCX: 00007f16e119fb19 [ 103.889818][ T2407] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 103.889833][ T2407] RBP: 00007f16e1237b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.889849][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.889864][ T2407] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 103.889884][ T2407] [ 103.890158][ T2407] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 104.170340][ T2407] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 104.178904][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.3.627 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 104.190382][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.200450][ T2407] RIP: 0010:trace_event_raw_event_cgroup_rstat+0x14b/0x3b0 [ 104.207691][ T2407] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 18 34 63 00 44 89 64 24 18 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 8c 01 00 00 44 8b 23 49 8d 5d 08 48 89 [ 104.227320][ T2407] RSP: 0018:ffffc9000b37fae0 EFLAGS: 00010003 [ 104.233403][ T2407] RAX: 0000000000000001 RBX: 000000000000000c RCX: 0000000000080000 [ 104.241377][ T2407] RDX: ffffc900026d5000 RSI: 00000000000107b8 RDI: 00000000000107b9 [ 104.249363][ T2407] RBP: ffffc9000b37fbd0 R08: ffff8881302f8000 R09: 0000000000000002 [ 104.257338][ T2407] R10: fffffffffffffff5 R11: 0000000000000002 R12: 0000000000000000 [ 104.265326][ T2407] R13: ffff888119cf685c R14: 1ffff9200166ff60 R15: dffffc0000000000 [ 104.273317][ T2407] FS: 00007f16e20bc6c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 104.282268][ T2407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.288877][ T2407] CR2: 00007f16e11ed200 CR3: 000000012d66c000 CR4: 00000000003526b0 [ 104.296866][ T2407] Call Trace: [ 104.300155][ T2407] [ 104.303096][ T2407] ? __cfi_trace_event_raw_event_cgroup_rstat+0x10/0x10 [ 104.310056][ T2407] ? __cfi__raw_spin_trylock+0x10/0x10 [ 104.315528][ T2407] ? pcpu_alloc_noprof+0xd93/0x1440 [ 104.320741][ T2407] __cgroup_rstat_lock+0x11e/0x280 [ 104.325901][ T2407] cgroup_rstat_flush+0x22/0x150 [ 104.330868][ T2407] cgroup_rstat_exit+0x33/0x1e0 [ 104.335746][ T2407] ? kernfs_create_dir_ns+0x10a/0x130 [ 104.341144][ T2407] cgroup_mkdir+0xd38/0x1590 [ 104.345750][ T2407] ? __kasan_check_write+0x18/0x20 [ 104.350883][ T2407] ? __cfi_cgroup_mkdir+0x10/0x10 [ 104.355942][ T2407] kernfs_iop_mkdir+0x1be/0x2d0 [ 104.360808][ T2407] vfs_mkdir+0x58e/0x810 [ 104.365049][ T2407] do_mkdirat+0x240/0x530 [ 104.369391][ T2407] ? __cfi_do_mkdirat+0x10/0x10 [ 104.374264][ T2407] ? __kasan_check_write+0x18/0x20 [ 104.379534][ T2407] ? getname_flags+0x203/0x6b0 [ 104.384314][ T2407] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 104.390580][ T2407] __x64_sys_mkdirat+0x8b/0xa0 [ 104.395355][ T2407] x64_sys_call+0x2ba8/0x2ee0 [ 104.400037][ T2407] do_syscall_64+0x57/0xf0 [ 104.404492][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 104.409230][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.415135][ T2407] RIP: 0033:0x7f16e119fb19 [ 104.419679][ T2407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.439392][ T2407] RSP: 002b:00007f16e20bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 104.447804][ T2407] RAX: ffffffffffffffda RBX: 00007f16e1425fa0 RCX: 00007f16e119fb19 [ 104.455783][ T2407] RDX: 00000000000001ff RSI: 0000200000001b40 RDI: ffffffffffffff9c [ 104.463758][ T2407] RBP: 00007f16e1237b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.471793][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.479789][ T2407] R13: 00007f16e1426038 R14: 00007f16e1425fa0 R15: 00007ffc0d9376a8 [ 104.487789][ T2407] [ 104.490815][ T2407] Modules linked in: [ 104.494737][ T2407] ---[ end trace 0000000000000000 ]--- [ 104.500229][ T2407] RIP: 0010:trace_event_raw_event_cgroup_rstat+0x14b/0x3b0 [ 104.507465][ T2407] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 18 34 63 00 44 89 64 24 18 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 8c 01 00 00 44 8b 23 49 8d 5d 08 48 89 [ 104.527180][ T2407] RSP: 0018:ffffc9000b37fae0 EFLAGS: 00010003 [ 104.533344][ T2407] RAX: 0000000000000001 RBX: 000000000000000c RCX: 0000000000080000 [ 104.541355][ T2407] RDX: ffffc900026d5000 RSI: 00000000000107b8 RDI: 00000000000107b9 [ 104.549346][ T2407] RBP: ffffc9000b37fbd0 R08: ffff8881302f8000 R09: 0000000000000002 [ 104.557325][ T2407] R10: fffffffffffffff5 R11: 0000000000000002 R12: 0000000000000000 [ 104.565317][ T2407] R13: ffff888119cf685c R14: 1ffff9200166ff60 R15: dffffc0000000000 [ 104.573305][ T2407] FS: 00007f16e20bc6c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 104.582255][ T2407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.588842][ T2407] CR2: 00007f16e11ed200 CR3: 000000012d66c000 CR4: 00000000003526b0 [ 104.596818][ T2407] Kernel panic - not syncing: Fatal exception [ 104.603204][ T2407] Kernel Offset: disabled [ 104.607520][ T2407] Rebooting in 86400 seconds..