last executing test programs: 7.227496557s ago: executing program 1 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000040c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004100)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000004140)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000004180)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 7.029937977s ago: executing program 1 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x492492492492846, 0x0) (async) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') exit(0x9c13) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/3\x00') (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setuid(r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000440)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000340)={r7, 0x5}) (async) ppoll(&(0x7f0000000140)=[{r1, 0x401}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010213df6220f30c7a8119eb010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="050f020010030000000610400a14070000000000"]}) 4.008421358s ago: executing program 1 (id=864): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x21, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.970092362s ago: executing program 1 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) unshare(0x400) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380)="3000000024000504000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000", 0x30, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) 3.961910433s ago: executing program 1 (id=866): memfd_create(0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, 0x0, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = getpgrp(r2) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000180)={0x0, 0x2d, 0x0, @tid=r2}, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000280), 0x3c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='clear_refs\x00') setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x110}, 0x0) socket(0x22, 0x2, 0x6) 3.942185985s ago: executing program 1 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x0, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x100, 0x0, &(0x7f0000000440)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x1, 0x1}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000740)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000780)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.439084956s ago: executing program 3 (id=876): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a00209041005020300840009210000400122180009058103"], 0x0) mkdir(&(0x7f0000000900)='./file0\x00', 0x57) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0xc, 0x9a, {0x9a, 0x10, "6da8bcd759d95f64341c125a09a65a38c519a2b9eddcb7bd1e5fbf6d6c0c79b64f9f103e93018e079620f60f954d19e7b5e9c65e36b6c2cc0ec445d14fd7194d992f42a90f8488bc600ef2335bcffb034979247e70d9c7e22bebd8189c1067e30d37ceb0643c52680d52e3fa1761aefab673f93948332c7c7faed7417d587a8113472c97e8069cf4cbddebd6de5d0d1fff0b0e93b8e07643"}}, &(0x7f00000001c0)={0x0, 0x3, 0x67, @string={0x67, 0x3, "d18e59fe8ecf69d8646c7448e6649a1639efca478309fcddd791d0fea82ac2d949e56d77096c6913640d49c5e94fb107726bd87dc400b0ed7951df352e68d76fb05ec09d22ea1a03fc23da3a5643ec2e9a973ba094baf465c8a53dd6f6c685fe81cbeac8a4"}}, &(0x7f0000000240)={0x0, 0xf, 0x47, {0x5, 0xf, 0x47, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "52fa86cb305cdce8c6197d774dd777fb"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa, 0xc, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x3, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "07753be300048ee68319b5845c83c590"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x1, 0xfc, 0x5, "70f0ad52", "5e36e280"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x9, 0xe, 0x2, 0xa321}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x11, 0xeb, "4f5740824a5f1e1f9a530431f6159e817f0776f7334c93fb4be0837c60f9e31abe9eb1f6dafae740135f14064475cb298c081ae83d69805a392ea3f4ee08011ff5004a5589169d3072aa80ef9646b7f0804f8be3829bfa6e435cc0b7152238ffce8f3c2a0314043e5d6991f7f80083cf9ff014964431f702017b868f85b4b8527638138cc30f5fd4c33d0e0fe97f88d99e9e9e0bb98a3a416403c7a794c62c90752c688e20193c2b74db8162ad01fda2bd7bc33ad6d4e41bf0329db7bace35b719bb09e8ee80bd67f4eca051cc1e4b16cb9926b27a61135515ad0dfccdcb8292b35b7e2aaa1e9772e9b018"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x5}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9855}, &(0x7f00000005c0)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "368c"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xca}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001280)={{0x3, 0x300, 0x8, 0x3, 0xfffeffff, 0x401}, 0x3f5, [0x5, 0x7, 0xa15, 0x6, 0x7, 0x5, 0x163ff9a0, 0xffffffaa, 0x9, 0x10, 0x7ff, 0x3, 0x757, 0x101, 0x7, 0xaecf, 0x2, 0x101, 0xb, 0xac, 0xfff, 0x4, 0x7, 0x0, 0x587, 0x0, 0x5, 0x8001, 0x6, 0xa, 0x81, 0x6, 0x5, 0xffffffff, 0x7fffffff, 0x3, 0x3, 0x45, 0x8, 0x4d3c, 0x3ff, 0x1, 0x7f, 0x3ff, 0x8, 0x1, 0x800, 0xbe5, 0x80000000, 0x7, 0x0, 0x800, 0x1, 0x5, 0xfffff12b, 0x1, 0x1, 0x4, 0x40, 0x3, 0x5, 0x9, 0x10000, 0x5, 0x1000, 0x3, 0x6, 0x1, 0x6, 0x5055, 0x99a, 0x3d4b, 0x8000, 0x200, 0x5, 0x2, 0x8f, 0x3, 0x9, 0x8be7, 0x2, 0x7302, 0x10, 0xa84f, 0x0, 0x80000000, 0x7, 0xabe, 0x6, 0x190e, 0x8, 0x378, 0xff, 0x401, 0x1, 0x3, 0x80000001, 0x8d7, 0xffffffff, 0x986, 0x5, 0x3, 0x6, 0x0, 0x0, 0x7, 0x4, 0xa, 0x3, 0x7, 0x5eb00000, 0x4f5d, 0xfffffc00, 0x8000, 0x80000001, 0x48acd62c, 0x9, 0x1ff, 0x0, 0xf, 0x2, 0x9, 0xc60, 0x101, 0xffff0001, 0x7ff, 0x800, 0x9, 0x0, 0x2, 0x400, 0x7, 0x0, 0x4, 0x1, 0x8001, 0x55, 0x0, 0xffff, 0x0, 0xd, 0x39, 0x2, 0x0, 0x2, 0x5, 0x9, 0x2, 0xc6, 0x6, 0x9, 0x0, 0xfffff001, 0xfffffff7, 0x9, 0x9, 0x7, 0x7ff, 0x3, 0x80000001, 0x9, 0xffffff84, 0x101, 0x1, 0x80, 0x3, 0x3, 0xcd4, 0xa9e, 0x9, 0xfff, 0x3b2, 0x2a00000, 0x3, 0x6, 0x400, 0x0, 0x1, 0x8, 0x8, 0x0, 0xf, 0x8001, 0x4, 0xfff, 0x3, 0x9, 0x2, 0x4, 0x5, 0x1, 0xffff375d, 0x8, 0x1000, 0x9, 0xffff, 0xc, 0x8024, 0x2, 0x37ef1193, 0x3ff, 0x5, 0x7, 0x63, 0x3, 0x4, 0x1000, 0x7fffffff, 0x0, 0xffffff56, 0x2563, 0x10000, 0x7e, 0x2, 0x8001, 0x8, 0x80000000, 0xf3, 0x7, 0x2, 0x4, 0x8, 0x1, 0x4, 0x7, 0x7, 0x1, 0xda, 0x2, 0xd5, 0x8, 0x0, 0x10000, 0xff, 0x2, 0x8, 0x8, 0xa, 0xffff, 0x80000001, 0x0, 0x46c, 0x5, 0x0, 0xfffffff1, 0x7, 0x1, 0xfffffffd, 0x6c, 0x3, 0x1000, 0x9, 0x9, 0x3, 0x1, 0x7, 0x2, 0x2, 0x7f, 0x9, 0x7fffffff, 0x95, 0x0, 0x401, 0x9, 0x5f2b, 0x4, 0x6, 0x5, 0x1, 0x7, 0x7, 0xd082, 0x8001, 0x7f, 0x8, 0x7, 0x9, 0x3, 0x8, 0x1, 0x0, 0x7ff, 0x200, 0x3, 0x9, 0x7, 0x400, 0xced0, 0x1, 0x7, 0x0, 0x400, 0x7, 0x400, 0x9, 0xfffffff8, 0x80000001, 0x8, 0x3, 0x9, 0x3, 0x7, 0x80, 0x42, 0x5, 0x9, 0x3, 0xa, 0x8000, 0xf, 0x0, 0xfffffffb, 0x0, 0xfffff7e5, 0x0, 0x9, 0xfffffff8, 0x831, 0x2, 0x81, 0x1, 0x6, 0x0, 0x4, 0x80000001, 0x3, 0x2, 0x3, 0x4, 0xc60, 0x432, 0x9, 0x3, 0x8, 0x40, 0x3, 0x3, 0x9, 0x4, 0x8, 0xe3, 0x18, 0x7fff, 0x1c000000, 0x8, 0x5, 0x5, 0x0, 0xce5f, 0xa, 0x2, 0x4, 0x2, 0xffffffff, 0x2, 0x7, 0x89, 0x4, 0x68fc5730, 0x69, 0x0, 0x50000000, 0x8, 0xcaf, 0x3ff, 0x200, 0x0, 0x2, 0x8, 0x6, 0x6, 0xa1, 0x9, 0x4, 0x3, 0x7c, 0x8, 0x6, 0x8000, 0x1, 0x24, 0xe8, 0x0, 0xffffffff, 0x5, 0x3, 0xeb80, 0xa4ff1412, 0x2, 0x2, 0x5, 0x8, 0x8, 0xfffffe00, 0x0, 0x800, 0x8, 0x401, 0x401, 0x5, 0x5, 0x5, 0xbd4a, 0x6d, 0x1, 0x57, 0xffff7fff, 0x100, 0x7fffffff, 0x8, 0xd7e2, 0x5, 0x380000, 0xa, 0x5, 0x8, 0x9, 0x80000000, 0x0, 0x2, 0x5, 0x7, 0x88, 0x80, 0xfffffcff, 0x8, 0x5, 0xfffffffc, 0xb, 0x7b1, 0x3, 0xc, 0x7f, 0x80, 0x100, 0x9, 0x5, 0xea6, 0x7, 0xcae, 0x6, 0x4, 0x2, 0xdbe7, 0x5, 0x2, 0x0, 0x3, 0xd, 0x706, 0x7, 0x4, 0x1, 0x5, 0x4, 0x6, 0x82, 0xa940, 0xe, 0x7385, 0xfffffff0, 0x8, 0xc, 0x8001, 0x0, 0xfffffc01, 0x54e, 0x8a9a, 0x8, 0x1, 0x0, 0xfffffffa, 0x7, 0x1, 0x3, 0x1, 0x8, 0x9, 0xfffffffd, 0x5, 0xf810, 0x0, 0xffff, 0x3, 0x4, 0x8, 0x10001, 0x36504a6e, 0xfffffffd, 0x1, 0x3, 0xd3b, 0xfffffff9, 0x0, 0x1, 0x2, 0xffffff7f, 0x4, 0x5, 0xfffffffd, 0x4, 0x3, 0x5, 0x0, 0x9b30, 0x8, 0x9, 0xffffff77, 0xfda8, 0x20, 0xbe9, 0x80, 0x7, 0x5, 0x69, 0xfffff801, 0x400, 0x1, 0x80000001, 0x9, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x6, 0x9, 0x2, 0x1, 0x8, 0xfffffffb, 0xfffffffc, 0x3, 0x5, 0x5bec, 0x51de4066, 0x8, 0x4, 0x1, 0xfffff3dd, 0x1, 0x9, 0x4, 0x0, 0xc4f7, 0x3, 0x7, 0x80000001, 0x6, 0x7f, 0x8, 0xbe7, 0x7, 0x4, 0x0, 0x800, 0x4, 0x200, 0x4, 0x8, 0xc, 0x6765cab, 0x8000, 0x3, 0x5, 0x9, 0x80000001, 0x6, 0x7, 0x7, 0x5, 0x7, 0x46, 0x8, 0x626, 0x7f, 0x8, 0xc, 0x5, 0xc, 0x4, 0x5, 0xd3, 0x5, 0x7, 0x7, 0x6a, 0x5, 0x4, 0xe0ef, 0x9, 0x7ff, 0x1ff, 0x26d9, 0x1, 0x7, 0xf, 0x3, 0x7, 0x6, 0x9, 0x9, 0x1, 0x7f08, 0x7, 0x1735, 0xffffffff, 0x3, 0x4, 0x7, 0x7, 0x9, 0xc00, 0xf, 0x2, 0x4, 0x8, 0x14bcd224, 0x3e82, 0xa, 0x8, 0x0, 0x5b1d, 0x4, 0x9, 0x2, 0x84, 0xc, 0x7, 0x401, 0xe9, 0x5, 0x8, 0x0, 0x2e, 0x200000, 0x9, 0x3, 0x2, 0x3, 0x80000000, 0x800, 0x1, 0x4, 0x12, 0x2, 0x3, 0x3, 0x7, 0x2, 0x1000, 0x10000, 0x6, 0x5, 0x7fff, 0x1, 0x5, 0xf, 0x6, 0x0, 0x2, 0x7, 0x9, 0x9e47, 0x40, 0x6, 0x800, 0x7e0, 0x2000000, 0x6, 0x40, 0x7fffffff, 0x8, 0x40, 0x9000, 0x2, 0x5, 0x8, 0xd2, 0x401, 0x5, 0x0, 0x4, 0xfffffffc, 0x0, 0x8, 0x0, 0x2, 0x2, 0x101, 0x3, 0x1e89, 0x0, 0x5, 0x5, 0x7ff, 0x9, 0x2, 0x0, 0x8001, 0xa, 0x9, 0x4, 0x2d2, 0x2, 0x87e5, 0x10000, 0x5, 0x6, 0xaf7, 0x2, 0x6, 0xc, 0x7, 0x4, 0x400, 0x10001, 0x32e0, 0x3, 0x1000, 0x9, 0x60a, 0x5, 0x6, 0x1000, 0x2a, 0x8, 0xfff, 0xe7, 0x40, 0x9, 0x80, 0x200, 0x2b, 0x3, 0x8, 0x3ea7e8b0, 0x3, 0xd7f, 0xb, 0x6, 0xb, 0xf895, 0xa, 0x1bffe412, 0xd7b, 0xd5f, 0x3, 0xffff8000, 0x4, 0x80000000, 0x6, 0x6, 0x60, 0x9, 0x9, 0xde80, 0x8000, 0x7, 0x6, 0xef0, 0x0, 0x4000000, 0x0, 0x5, 0x1ff, 0x6, 0x5, 0x9, 0xffffffff, 0x800, 0xba, 0x5, 0x1400000, 0x8, 0x1, 0x6, 0x1, 0x0, 0x9, 0x6, 0xf, 0x6, 0x10001, 0x0, 0xc9d9, 0x6, 0x5, 0x18, 0x9, 0x3, 0x400, 0x400, 0x7, 0x7e90d14a, 0x3, 0x9, 0x9, 0x5, 0x3, 0x0, 0x5, 0xcf89, 0x56, 0xf, 0x9, 0x7, 0xfffffff9, 0x200, 0x8587, 0x3, 0x6, 0xf, 0x4, 0x5, 0x4, 0x119, 0x0, 0x7, 0x2, 0x57, 0x2, 0xffffff81, 0x3, 0x1, 0x2, 0x3dd, 0xffffffff, 0x10001, 0x0, 0x4, 0x6, 0x0, 0x8a, 0x5, 0x6, 0x5, 0x5, 0x2, 0x3, 0x3, 0xff, 0x60e74302, 0x3, 0xa75c, 0x0, 0xf9ed, 0x10000, 0x5, 0x6, 0x6, 0x40, 0x0, 0x5c2b, 0x85e2, 0x5, 0x2, 0x1, 0x9, 0x3ff, 0x7, 0xaf5, 0x6, 0x2, 0x9, 0xfffffffd, 0xe, 0x9, 0x7, 0x5, 0x8001, 0x2, 0x6, 0x6838, 0x3, 0x8000000, 0x3ff, 0x1, 0xe3d, 0x80000000, 0x7, 0x8, 0xec7f, 0x8, 0x6, 0x1, 0x4, 0xba, 0x4, 0x5, 0xfffffffa, 0x800, 0x6, 0x8, 0x4, 0x0, 0x7, 0x6, 0x1, 0x9, 0xca, 0x6c18054f, 0x8, 0x3, 0xfff, 0x3ff, 0x10, 0x4, 0xbfa6, 0x2, 0x6, 0x7, 0x8, 0x401, 0xffffff5e, 0x90, 0x8001, 0x7, 0x1, 0x80000000, 0x0, 0x7, 0x1, 0x431, 0x5, 0xc, 0x3, 0x550, 0x0, 0x401, 0xc9d, 0x3, 0xfff, 0x1, 0x10000, 0xfffffff7, 0x686, 0x7, 0x6, 0x1, 0xfffffff9, 0x1abaade5, 0x5, 0x7, 0x7fff, 0xfffffffd, 0x4, 0x1ff, 0x9, 0x8, 0x7, 0x6246, 0x7f, 0xe, 0x6, 0x1, 0x2, 0x4, 0x5, 0x6, 0xffff, 0x7, 0x2, 0x81, 0x0, 0x3ff, 0x2, 0x400, 0x7, 0xffff, 0x3, 0x8, 0x9, 0xb, 0x1, 0x8, 0xa72, 0x7, 0x80, 0x3, 0x0, 0x1, 0xbb48, 0xff, 0x6, 0x274, 0x6, 0x8001, 0x1d2, 0xc6ca, 0x9, 0x100, 0x6, 0x4, 0x5, 0x7, 0x5, 0xfffffffc, 0x72, 0x38000000, 0xb9, 0x10001, 0x5, 0x3, 0x0, 0x3, 0x8, 0x6, 0x8, 0x3, 0x8, 0x5, 0x2, 0x80000001, 0x819, 0x200, 0x1ff, 0x1000, 0x13, 0x6, 0x3, 0x4, 0x1, 0xe]}) 3.254656135s ago: executing program 2 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x7, 0xfffffffc}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x218, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x89}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xbaac, {0xfffffffffffff000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 3.237687567s ago: executing program 2 (id=882): setns(0xc9, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17, 0x600}, 0x80009}], 0x16c, 0x10002, 0x0) 3.226177868s ago: executing program 2 (id=883): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201a15bdde73068df66105000000000000109022400010000a0200904000d02030005010021011006012206000905810310007d0506"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20005) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000a80)) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x1010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xaaf80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x501000, 0x115) getdents64(r6, 0x0, 0x0) (async) getdents64(r6, 0x0, 0x0) (async) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x147) 918.224025ms ago: executing program 3 (id=889): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_page_alloc/interval\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000680)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) close_range(r0, 0xffffffffffffffff, 0x500) 819.290015ms ago: executing program 0 (id=891): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "ebfe"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x40}}, @nested_vmlaunch={0x12f, 0x18}], 0x9a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000000)={r8, r6, 0x7, 0x0, 0x0, 0xe, 0xff, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = dup(r10) connect$unix(r11, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2110034) 818.563706ms ago: executing program 3 (id=892): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x2, 0xf5c40a1, 0xf2, &(0x7f0000000100)=""/242}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) r2 = fsopen(&(0x7f00000008c0)='cgroup2\x00', 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000a00)={&(0x7f0000000d00)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d00)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000002d40)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000002d80)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002e00)={'vcan0\x00', 0x0}) bind$xdp(r3, &(0x7f0000002e40)={0x2c, 0xa, r5, 0x0, 0x0}, 0x10) bind$xdp(r3, &(0x7f0000002e80)={0x2c, 0x9, 0x0, 0x15}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x6) r7 = openat$cgroup(r6, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000002c0)="fc6fe2c86a774efb5abf317fb25f4950105e0777aec445e8a47ccbeb1329ea8db26a65192fc2ae6cbe5c1c46191e2427d63a6d16f1422563df79bc34ce33b3b8ea564bf0a5799cf357a40fd7a1c093e2a6143978a309be3277dd70a8da2cd1f492da4cfe1fddf5fae25dc47351fddd35e6230d82359c4e0901c133ca57a8c1d3f774c58e87cd26a559843e93ace75046349535bc6f6bdda88e79e11767ee7cf1318b24f8b588c379fc24fe4943e3b9aff25cbe89190bbc6c40d361fc25ab1edc57b0e440f82a5dafb231db47", 0xcc}, {&(0x7f00000003c0)="ff84a212", 0x4}, {&(0x7f0000000400)="8866929d8f244baab2380e64e0ef31f2025733976b9858c576dd5319c0d17b5a47dc", 0x22}, {&(0x7f0000000440)="a3bdcdd4d8148acce6c098eb922b701f21db5c178f44a5ac0c9d5bb3ff492395effdbd7658b00db5a24c0a", 0x2b}, {&(0x7f0000000480)="e0222290259933f78432a4959c75124a81fe02bd2b3df381d643501e798476dda233bb86a87dc9610b1c1ceb908aae77468348372d91d720a36ec97662c85ecc0779f953f3aeab91400969e0eaee6055fde4ec68efd333be0ec9d9d076a840e61970c8b66f2b5949b13e99ef20c88e8bb6a0d02f283e6d55adbde900e2685f26794348a01a246e19ea4c245f01dcd041ddbd2931fd26c9d1d3bf4ca5fec30fe20a02ceb48ea7525e12d1aa54d0a6d082e060efceab128a4650fb62f0ace47fe4d0f09275fb365f76323d037b6d24d2c949c0d014a9c3cf931bd0e2bd041279a4846f356988146788423bf6d7d0fd0c18a9eb", 0xf2}, {&(0x7f0000000240)="394d27b3d15e81986718205132e72cbfa06259625d98580ea16a84248faa8904c2105823281c8348bfc0c8b4c5b28984490402fddb3f70e22ee492f06f6299eb0bc62ec8e4422cb6075599089d29f2a7cb9c8f9c63d35a32c25801c0b41323", 0x5f}, {&(0x7f00000005c0)="cddf80bf364a069ca3d58785b0a4ed4e342b3809fb110ae1b048b927221ea8688281d426a21731aaa4df24ec4cc63d0936a817f6b809b7e09f4182302d757a3843d487933a8be56ea9c635a7817da135281b1c8ebb4b6ddb97f28d233d816016f65a392b8e56adbd7243fe0a8d16aa6d2c25bb1cf5da88baa24e3efc6a2816b094a1e413", 0x84}, {&(0x7f0000000680)="339b8d4291c30ae4818f2561f3bf14e03d96221e74720eb64865e96c0255fbbe", 0x20}, {&(0x7f00000006c0)="0e270f320deddf55f4e8f308c4d115d45a7775619fc623a158777b75ff55c1740dd61ef2461f7c0d6bcdce5473f9c5e75781f2ec68ea9a2bf38b3fe620f7c79303b4cd59b52b52a5e9ee7a71524d0581", 0x50}, {&(0x7f0000000740)="656c176c8234213480b03ef4f01f2f04b30eb097c152a3479cdda32bc7203237e9b3522f235c2a0c5245a24d49a17f9d0071c22853fd2f6e7f0947d6479cf2c125dac7d61c69afe14a3527ffc11cdf47bdb91fe55071e24639d5080398c3f21ed92eaeeaca67274f233d4dfdba83b3bc7078e5499bf0d5a1a1a02ebb75002948819880b17c4334", 0x87}], 0xa, &(0x7f0000000b00)=ANY=[@ANYBLOB="240100e4e7e207000000000000000a16512a1dfde4e7819780ab447cf1b0e3081dffff54dc0300000000000000000000c7aa05588751ca4f5296000000000000001dc333bb8d2b3c23d05a560f8d66d08d2dc324d0f4a199bb8752bb6aa01df789b76ff9536ef80c74dbe5e56e4b4b30fc11299a23ab11d9abc5cbda66cca9d91003027840c78c1d029b480aaa32f995684af99cf6d1d5af282e2aa3270ee533b07b79ac49e4ed780414d53484e99860a7671f2c7b3ff630b70dc32778c7d32a0cb4933660826f04cedd1c607af98969910956af412d014940e51424fd0e5060796483f83cecd0b25081fe342fafa652c116f9c885fe3c8ea5f7755d5cccb9069d5617141779b3da54b9c8ed30203345b4ffac97d31f2c713050941222a29cbc7777c40839245e90f1fe71af8b608981515318c87829f009f477d46f6a2c9230dd22875480d8b267f0eae938744aa438ba54c1b72ec94aa9517a0dc5ef78e3368b9808524a898ec7c790f34dcfc875", @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x800}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x11, &(0x7f0000000000)=0x1e, 0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f00000000c0)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) 715.308357ms ago: executing program 3 (id=893): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="14043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000180)={0x11, 0x0, r1, 0x11, 0x0, 0x6, @multicast}, 0x14) 708.627607ms ago: executing program 3 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x80000, 0x8001) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./binfmt\x00', &(0x7f0000000340)='binfmt_misc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./binfmt/status\x00', 0x1, 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="fb", 0x1}], 0x1, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB="5820d7278b0c98e5672f4977005f9ef93bfd0866c9ae33bd148fdb32f091c62fa8887893684c20f9fcd0b2a77268e78e0ad82b75b43623be949760bf7757b22ed980ec37b602d43f58545013d8164b55126db5494cd60ea0f09f2d6cb9f026d0c6ebc657d7e95a0400dd4ef4c197dffacc12294c434e7301b88133fc9ad31ae2ddca600d6ac352d70c402b6b0b8c0373c44012cce166759f7577d2fc5ec8e3d96e1d1f648a8b0cff7398", @ANYBLOB="385cfabbb4448f3b925b33de4f34843c4411762e9cabf5a9dd1104b3488d0a0e8a86f64b567ef0e0138d1db38adbae60f28c303e9e3a762b3d484c406f3d6cd4bbd73547ddf9d2f83015b0ec7bb67fd270867524d096", @ANYRESOCT, @ANYRES32=r3], 0x44}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000800)) ptrace$cont(0x21, r5, 0x5, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x44000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x81) syz_ublk_add_dev(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10007, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000800)=ANY=[], 0x8) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000980)="390000001300090468fe0700200000000000ff3f08", 0x15}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) connect$inet6(r10, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000880)='bridge0\x00', 0x10) sendmmsg$inet6(r10, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) 599.675748ms ago: executing program 0 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1b7) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f00000001c0)='./mnt\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000200)=0x2) 599.254898ms ago: executing program 0 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) unshare(0x400) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380)="3000000024000504000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000", 0x30, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) 582.32809ms ago: executing program 0 (id=897): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000102, 0x1000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000103, 0x1}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000102, 0x2000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000103, 0x2}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x2, 0xc0000102}}, @nested_vmlaunch={0x12f, 0x18}], 0x151}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) 428.124146ms ago: executing program 0 (id=898): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x110, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 227.444416ms ago: executing program 0 (id=899): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000040)={0x40000, 0x0, {[0x100, 0x4, 0xd, 0x6, 0xd87, 0x2a178a38, 0x2, 0x100000001]}}) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x4) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_ublk_add_dev(r2, 0x0, r3, r6, &(0x7f00000004c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x3, 0x462, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x13}}}, &(0x7f0000000580)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) 201.785859ms ago: executing program 2 (id=900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002080)={0x4c, 0x7000000000000000, &(0x7f00000020c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002140)={@raw_ptr={0x70742a85, 0x0, &(0x7f00000021c0)='\x00'/8081, 0x1f91}}, &(0x7f00000041c0)={0x0, 0x28, 0x40}}, 0x2000}]}) 168.940162ms ago: executing program 2 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) 680.94µs ago: executing program 2 (id=902): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x6901, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) r6 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x104}}}, &(0x7f0000000400)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000000440), r6, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000480)={0x0, 0xbc15, 0x0, 0x1, 0x17e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x41e8, 0x200, 0x1, 0x7a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb3ee, 0x80, 0x0, 0x275, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x383d, 0x404b, 0x2, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8cf0, 0x4000, 0x0, 0x1e6, 0x0, r1}}], 0x4, &(0x7f0000000780)={0x2e, 0x10, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7e2}, 0x0, r7, '\x00', {0x1, 0x68, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x259, 0x0, 0x8000000059020000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x3, &(0x7f0000000780)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket(0x10, 0x803, 0x5) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x4000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x823, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): malloc+0x96/0xb0 [ 83.798629][ T1724] ? __kmalloc_cache_noprof+0x23c/0x470 [ 83.798644][ T1724] ? klist_init+0x29/0xe0 [ 83.798657][ T1724] bus_add_driver+0x2a2/0x730 [ 83.798669][ T1724] driver_register+0x2b7/0x3c0 [ 83.798683][ T1724] usb_gadget_register_driver_owner+0xfc/0x270 [ 83.798698][ T1724] raw_ioctl+0x144c/0x37a0 [ 83.798712][ T1724] ? __cfi_raw_ioctl+0x10/0x10 [ 83.798723][ T1724] ? selinux_file_ioctl+0x732/0x1480 [ 83.798738][ T1724] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 83.798752][ T1724] ? hook_file_ioctl+0x1ef/0x590 [ 83.798766][ T1724] ? __cfi_hook_file_ioctl+0x10/0x10 [ 83.798780][ T1724] ? __fget_files+0x2bc/0x330 [ 83.798791][ T1724] ? bpf_lsm_file_ioctl+0xd/0x20 [ 83.798802][ T1724] ? security_file_ioctl+0x3e/0x110 [ 83.798825][ T1724] ? __cfi_raw_ioctl+0x10/0x10 [ 83.798837][ T1724] __se_sys_ioctl+0x123/0x1b0 [ 83.798848][ T1724] __x64_sys_ioctl+0x7f/0xa0 [ 83.798860][ T1724] x64_sys_call+0x1878/0x2ee0 [ 83.798872][ T1724] do_syscall_64+0x57/0xf0 [ 83.798882][ T1724] ? clear_bhb_loop+0x50/0xa0 [ 83.798896][ T1724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.798909][ T1724] RIP: 0033:0x7fb5f2b9f7ab [ 83.798919][ T1724] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 83.798928][ T1724] RSP: 002b:00007fb5f3aaff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.798939][ T1724] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb5f2b9f7ab [ 83.798947][ T1724] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 83.798954][ T1724] RBP: 00007fb5f3ab0fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 83.798961][ T1724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.798967][ T1724] R13: 0000200000000f80 R14: 0000000000000002 R15: 0000000000000000 [ 83.798975][ T1724] [ 83.798979][ T1724] kobject: can not set name properly! [ 84.077996][ T490] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 84.096416][ T1724] UDC core: USB Raw Gadget: driver registration failed: -12 [ 84.100175][ T31] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 84.103972][ T1724] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 84.112809][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.128464][ T31] usb 3-1: Product: syz [ 84.132613][ T31] usb 3-1: Manufacturer: syz [ 84.267990][ T490] usb 2-1: Using ep0 maxpacket: 16 [ 84.274236][ T490] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 84.284491][ T490] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 84.293562][ T490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.301570][ T490] usb 2-1: Product: syz [ 84.305734][ T490] usb 2-1: Manufacturer: syz [ 84.310342][ T490] usb 2-1: SerialNumber: syz [ 84.315535][ T490] usb 2-1: config 0 descriptor?? [ 84.321399][ T490] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 84.329237][ T490] usb 2-1: Detected FT232R [ 84.522221][ T490] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 84.696045][ T324] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 84.708289][ T324] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.734841][ T490] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.773689][ T36] audit: type=1400 audit(1793816297.256:2661): avc: denied { create } for pid=1725 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 84.851475][ T31] usb 3-1: USB disconnect, device number 31 [ 84.932561][ T490] usb 2-1: USB disconnect, device number 24 [ 84.942122][ T490] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.951676][ T490] ftdi_sio 2-1:0.0: device disconnected [ 85.075837][ T36] audit: type=1400 audit(1793816297.556:2662): avc: denied { read } for pid=1735 comm="syz.2.496" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.098853][ T36] audit: type=1400 audit(1793816297.566:2663): avc: denied { open } for pid=1735 comm="syz.2.496" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.455628][ T1751] tipc: Enabling of bearer rejected, failed to enable media [ 85.545562][ T9] usb 1-1: USB disconnect, device number 32 [ 85.557968][ T9] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 85.587880][ T1759] FAULT_INJECTION: forcing a failure. [ 85.587880][ T1759] name failslab, interval 1, probability 0, space 0, times 0 [ 85.600557][ T1759] CPU: 0 UID: 0 PID: 1759 Comm: syz.0.505 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 85.600583][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.600591][ T1759] Call Trace: [ 85.600596][ T1759] [ 85.600600][ T1759] __dump_stack+0x21/0x30 [ 85.600626][ T1759] dump_stack_lvl+0x140/0x1c0 [ 85.600637][ T1759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.600647][ T1759] ? security_transition_sid+0x79/0xa0 [ 85.600663][ T1759] dump_stack+0x19/0x20 [ 85.600673][ T1759] should_fail_ex+0x3c2/0x510 [ 85.600690][ T1759] should_failslab+0xac/0x100 [ 85.600701][ T1759] kmem_cache_alloc_noprof+0x42/0x410 [ 85.600716][ T1759] ? alloc_empty_file+0xbf/0x270 [ 85.600727][ T1759] ? _raw_spin_unlock+0x45/0x60 [ 85.600738][ T1759] alloc_empty_file+0xbf/0x270 [ 85.600749][ T1759] ? _raw_spin_unlock+0x45/0x60 [ 85.600759][ T1759] alloc_file_pseudo+0x142/0x1f0 [ 85.600771][ T1759] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 85.600784][ T1759] ? __kasan_check_write+0x18/0x20 [ 85.600797][ T1759] ? clear_nlink+0x8e/0xf0 [ 85.600808][ T1759] __shmem_file_setup+0x242/0x2c0 [ 85.600821][ T1759] shmem_file_setup+0x33/0x40 [ 85.600831][ T1759] _RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x674/0xc30 [ 85.600850][ T1759] ? __cfi__RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 85.600869][ T1759] ? __asan_memset+0x39/0x50 [ 85.600883][ T1759] mmap_region+0x153f/0x1d10 [ 85.600898][ T1759] ? __cfi_mmap_region+0x10/0x10 [ 85.600914][ T1759] ? __kasan_check_read+0x15/0x20 [ 85.600927][ T1759] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 85.600942][ T1759] ? shmem_mapping+0x11/0x50 [ 85.600957][ T1759] do_mmap+0xa47/0x1370 [ 85.600970][ T1759] ? __cfi_do_mmap+0x10/0x10 [ 85.600983][ T1759] ? __kasan_check_write+0x18/0x20 [ 85.600997][ T1759] ? down_write_killable+0xee/0x2d0 [ 85.601011][ T1759] ? __cfi_down_write_killable+0x10/0x10 [ 85.601025][ T1759] ? do_futex+0x32a/0x510 [ 85.601037][ T1759] vm_mmap_pgoff+0x367/0x4b0 [ 85.601051][ T1759] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 85.601065][ T1759] ? __fget_files+0x2bc/0x330 [ 85.601076][ T1759] ksys_mmap_pgoff+0x165/0x1e0 [ 85.601090][ T1759] __x64_sys_mmap+0x121/0x140 [ 85.601101][ T1759] x64_sys_call+0x13bf/0x2ee0 [ 85.601112][ T1759] do_syscall_64+0x57/0xf0 [ 85.601122][ T1759] ? clear_bhb_loop+0x50/0xa0 [ 85.601137][ T1759] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.601150][ T1759] RIP: 0033:0x7f7a50f9fb19 [ 85.601159][ T1759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.601169][ T1759] RSP: 002b:00007f7a51d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 85.601181][ T1759] RAX: ffffffffffffffda RBX: 00007f7a51225fa0 RCX: 00007f7a50f9fb19 [ 85.601189][ T1759] RDX: 0000000020000000 RSI: 0000000000002000 RDI: 000020000038e000 [ 85.601197][ T1759] RBP: 00007f7a51037b70 R08: 0000000000000005 R09: 0000000000001000 [ 85.601204][ T1759] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 85.601211][ T1759] R13: 00007f7a51226038 R14: 00007f7a51225fa0 R15: 00007ffd963b6a68 [ 85.601220][ T1759] [ 86.014615][ T36] audit: type=1400 audit(1793816298.496:2664): avc: denied { write } for pid=1770 comm="syz.1.510" name="netstat" dev="proc" ino=4026532366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.257996][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 86.258158][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 86.318006][ T433] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 86.387982][ T31] usb 4-1: device descriptor read/64, error -71 [ 86.398076][ T9] usb 1-1: device descriptor read/64, error -71 [ 86.468974][ T433] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 86.477184][ T433] usb 2-1: config 0 has no interface number 0 [ 86.483289][ T433] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 86.494253][ T433] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.504073][ T433] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.515148][ T433] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.526654][ T433] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 86.535722][ T433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 86.543810][ T433] usb 2-1: Product: syz [ 86.548263][ T433] usb 2-1: Manufacturer: syz [ 86.552843][ T433] usb 2-1: SerialNumber: syz [ 86.560135][ T433] usb 2-1: config 0 descriptor?? [ 86.566251][ T433] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 86.576738][ T433] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input36 [ 86.627991][ T31] usb 4-1: device descriptor read/64, error -71 [ 86.657975][ T9] usb 1-1: device descriptor read/64, error -71 [ 86.769779][ T1779] netlink: 'syz.1.512': attribute type 13 has an invalid length. [ 86.777726][ T1779] erspan0: refused to change device tx_queue_len [ 86.784638][ T324] usb 2-1: USB disconnect, device number 25 [ 86.790857][ T324] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 86.867988][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 86.898009][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 86.997984][ T31] usb 4-1: device descriptor read/64, error -71 [ 87.028027][ T9] usb 1-1: device descriptor read/64, error -71 [ 87.238005][ T31] usb 4-1: device descriptor read/64, error -71 [ 87.268006][ T9] usb 1-1: device descriptor read/64, error -71 [ 87.304575][ T1795] tipc: Enabling of bearer rejected, failed to enable media [ 87.348099][ T31] usb usb4-port1: attempt power cycle [ 87.378045][ T9] usb usb1-port1: attempt power cycle [ 87.558015][ T433] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 87.687987][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 87.687987][ T433] usb 2-1: device descriptor read/64, error -71 [ 87.708971][ T31] usb 4-1: device descriptor read/8, error -71 [ 87.728004][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 87.748978][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.839021][ T31] usb 4-1: device descriptor read/8, error -71 [ 87.879205][ T9] usb 1-1: device descriptor read/8, error -71 [ 87.937979][ T433] usb 2-1: device descriptor read/64, error -71 [ 88.087987][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 88.109005][ T31] usb 4-1: device descriptor read/8, error -71 [ 88.147966][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 88.178921][ T9] usb 1-1: device descriptor read/8, error -71 [ 88.197974][ T433] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 88.238987][ T31] usb 4-1: device descriptor read/8, error -71 [ 88.309089][ T9] usb 1-1: device descriptor read/8, error -71 [ 88.337994][ T433] usb 2-1: device descriptor read/64, error -71 [ 88.348126][ T31] usb usb4-port1: unable to enumerate USB device [ 88.401534][ T1803] tipc: Enabled bearer , priority 10 [ 88.418075][ T9] usb usb1-port1: unable to enumerate USB device [ 88.577988][ T433] usb 2-1: device descriptor read/64, error -71 [ 88.688038][ T433] usb usb2-port1: attempt power cycle [ 88.708258][ T310] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 88.859105][ T310] usb 3-1: config 243 has an invalid interface number: 49 but max is 0 [ 88.867360][ T310] usb 3-1: config 243 has no interface number 0 [ 88.873674][ T310] usb 3-1: too many endpoints for config 243 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 88.884721][ T310] usb 3-1: config 243 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 88.898020][ T310] usb 3-1: config 243 interface 49 has no altsetting 0 [ 88.906110][ T310] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 88.915152][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.923154][ T310] usb 3-1: Product: syz [ 88.927294][ T310] usb 3-1: Manufacturer: syz [ 88.931898][ T310] usb 3-1: SerialNumber: syz [ 89.038163][ T433] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 89.059193][ T433] usb 2-1: device descriptor read/8, error -71 [ 89.142963][ T310] usb 3-1: USB disconnect, device number 32 [ 89.188973][ T433] usb 2-1: device descriptor read/8, error -71 [ 89.337983][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 89.408059][ T490] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 89.427999][ T433] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 89.448956][ T433] usb 2-1: device descriptor read/8, error -71 [ 89.489674][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.501908][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.510975][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.518976][ T9] usb 1-1: Product: syz [ 89.523124][ T9] usb 1-1: Manufacturer: 縙ﴍ螢흹烬뎀ຢ澈쎸ℭ毊⛸近⑨ꔼꕟ엚툮㉨냑ꇶᑱẃ㫄ꅹ肒⻸丸㶺ᬆఎ㸇卮蒤킥생쿇叀很毉♒ꈟⵟꔫ젭걡뵴簷턁쌩ꡍ삵큉Ỵ鴏 [ 89.543887][ T9] usb 1-1: SerialNumber: syz [ 89.547988][ T31] tipc: Node number set to 1703849273 [ 89.568940][ T490] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 89.577196][ T490] usb 4-1: config 0 has no interface number 0 [ 89.583387][ T490] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.594397][ T490] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.604338][ T490] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.615406][ T490] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.625697][ T433] usb 2-1: device descriptor read/8, error -71 [ 89.632880][ T490] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 89.641954][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 89.650039][ T490] usb 4-1: Product: syz [ 89.654206][ T490] usb 4-1: Manufacturer: syz [ 89.658824][ T490] usb 4-1: SerialNumber: syz [ 89.668063][ T490] usb 4-1: config 0 descriptor?? [ 89.676535][ T490] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 89.688286][ T490] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input37 [ 89.738038][ T433] usb usb2-port1: unable to enumerate USB device [ 89.753822][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.760763][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 89.767602][ T9] usb 1-1: unit 3 not found! [ 89.775340][ T9] usb 1-1: USB disconnect, device number 37 [ 89.784670][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.877659][ T1814] netlink: 'syz.3.526': attribute type 13 has an invalid length. [ 89.885584][ T1814] erspan0: refused to change device tx_queue_len [ 89.891931][ T36] audit: type=1400 audit(1793816302.376:2665): avc: denied { execute } for pid=1815 comm="syz.2.527" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.918576][ T31] usb 4-1: USB disconnect, device number 41 [ 89.925012][ T31] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 90.662548][ T1828] tipc: Enabled bearer , priority 10 [ 90.669283][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 90.699479][ T1827] tipc: Disabling bearer [ 90.818059][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 90.824552][ T9] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 90.836112][ T9] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 90.849388][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.856276][ T9] usb 4-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 90.865895][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.877267][ T9] usb 4-1: config 0 descriptor?? [ 90.883915][ T1847] rust_binder: 1847 RLIMIT_NICE not set [ 90.884096][ T31] rust_binder: 1843: undelivered TRANSACTION_COMPLETE [ 90.978181][ T490] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 91.117986][ T433] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 91.137966][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 91.268991][ T433] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 91.277152][ T433] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 91.286234][ T433] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 91.297082][ T433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.299140][ T31] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 91.305798][ T9] input: HID 227d:0709 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:227D:0709.0014/input/input38 [ 91.318502][ T31] usb 2-1: config 0 has no interface number 0 [ 91.325359][ T433] usb 1-1: config 0 descriptor?? [ 91.333615][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.337169][ T9] hid-generic 0003:227D:0709.0014: input,hidraw0: USB HID v80.00 Joystick [HID 227d:0709] on usb-dummy_hcd.3-1/input0 [ 91.353144][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.369131][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.369729][ T433] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 91.381526][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.394190][ T433] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 91.401571][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 91.405340][ T433] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 91.414310][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 91.431252][ T31] usb 2-1: Product: syz [ 91.435428][ T31] usb 2-1: Manufacturer: syz [ 91.440056][ T31] usb 2-1: SerialNumber: syz [ 91.445564][ T31] usb 2-1: config 0 descriptor?? [ 91.451680][ T31] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 91.462234][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input39 [ 91.495927][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.504405][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.663446][ T1850] netlink: 'syz.1.540': attribute type 13 has an invalid length. [ 91.671515][ T1850] erspan0: refused to change device tx_queue_len [ 91.678846][ T433] usb 2-1: USB disconnect, device number 30 [ 91.685066][ T433] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 92.363442][ T1859] rust_binder: 1858 RLIMIT_NICE not set [ 93.047350][ T31] rust_binder: 1855: undelivered TRANSACTION_COMPLETE [ 93.197300][ T1864] FAULT_INJECTION: forcing a failure. [ 93.197300][ T1864] name failslab, interval 1, probability 0, space 0, times 0 [ 93.210097][ T1864] CPU: 0 UID: 0 PID: 1864 Comm: syz.1.543 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 93.210127][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.210140][ T1864] Call Trace: [ 93.210147][ T1864] [ 93.210155][ T1864] __dump_stack+0x21/0x30 [ 93.210180][ T1864] dump_stack_lvl+0x140/0x1c0 [ 93.210200][ T1864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.210223][ T1864] dump_stack+0x19/0x20 [ 93.210237][ T1864] should_fail_ex+0x3c2/0x510 [ 93.210253][ T1864] should_failslab+0xac/0x100 [ 93.210264][ T1864] __kmalloc_cache_noprof+0x41/0x470 [ 93.210280][ T1864] ? raw_ioctl+0x1a24/0x37a0 [ 93.210294][ T1864] raw_ioctl+0x1a24/0x37a0 [ 93.210306][ T1864] ? handle_mm_fault+0x16fe/0x1ba0 [ 93.210317][ T1864] ? __cfi_raw_ioctl+0x10/0x10 [ 93.210329][ T1864] ? selinux_file_ioctl+0x732/0x1480 [ 93.210346][ T1864] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 93.210361][ T1864] ? hook_file_ioctl+0x1ef/0x590 [ 93.210377][ T1864] ? __fget_files+0x2bc/0x330 [ 93.210388][ T1864] ? bpf_lsm_file_ioctl+0xd/0x20 [ 93.210400][ T1864] ? security_file_ioctl+0x3e/0x110 [ 93.210414][ T1864] ? __cfi_raw_ioctl+0x10/0x10 [ 93.210425][ T1864] __se_sys_ioctl+0x123/0x1b0 [ 93.210438][ T1864] __x64_sys_ioctl+0x7f/0xa0 [ 93.210450][ T1864] x64_sys_call+0x1878/0x2ee0 [ 93.210462][ T1864] do_syscall_64+0x57/0xf0 [ 93.210473][ T1864] ? clear_bhb_loop+0x50/0xa0 [ 93.210486][ T1864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.210500][ T1864] RIP: 0033:0x7efd87d9f7ab [ 93.210510][ T1864] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 93.210519][ T1864] RSP: 002b:00007efd88b96f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.210531][ T1864] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efd87d9f7ab [ 93.210539][ T1864] RDX: 00007efd88b97fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 93.210547][ T1864] RBP: 00007efd88b97fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 93.210554][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd88b96fa0 [ 93.210561][ T1864] R13: 0000200000000f80 R14: 0000000000000002 R15: 0000000000000000 [ 93.210569][ T1864] [ 93.443631][ T332] usb 4-1: USB disconnect, device number 42 [ 93.538938][ T1874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 93.556527][ T1874] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 93.564248][ T1874] netlink: 'syz.3.547': attribute type 5 has an invalid length. [ 93.571953][ T1874] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.547'. [ 93.754355][ T490] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 93.762608][ T490] usb 3-1: can't read configurations, error -71 [ 93.865461][ T332] usb 1-1: USB disconnect, device number 38 [ 94.098008][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 94.117995][ T490] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 94.249620][ T31] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 94.257830][ T31] usb 2-1: config 0 has no interface number 0 [ 94.263928][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 94.274917][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.279075][ T490] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 94.284736][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 94.293084][ T490] usb 3-1: config 0 has no interface number 0 [ 94.303806][ T31] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 94.305263][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 94.310164][ T490] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.319792][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 94.329050][ T490] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.339783][ T31] usb 2-1: Product: syz [ 94.348066][ T490] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.357627][ T31] usb 2-1: Manufacturer: syz [ 94.361977][ T490] usb 3-1: config 0 interface 16 has no altsetting 0 [ 94.374611][ T31] usb 2-1: SerialNumber: syz [ 94.378161][ T31] usb 2-1: config 0 descriptor?? [ 94.379454][ T490] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 94.389447][ T31] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 94.390699][ T490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.395947][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input40 [ 94.409282][ T490] usb 3-1: config 0 descriptor?? [ 94.524230][ T1898] tipc: Enabled bearer , priority 10 [ 94.531317][ T1897] tipc: Resetting bearer [ 94.537811][ T1897] tipc: Disabling bearer [ 94.595944][ T1891] netlink: 'syz.1.555': attribute type 13 has an invalid length. [ 94.604069][ T1891] erspan0: refused to change device tx_queue_len [ 94.612080][ T332] usb 2-1: USB disconnect, device number 31 [ 94.621023][ T332] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 94.623127][ T1902] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.560'. [ 94.840501][ T490] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.0015/input/input41 [ 94.856327][ T490] saitek 0003:06A3:0CD0.0015: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 94.967978][ T433] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 95.117968][ T433] usb 4-1: Using ep0 maxpacket: 16 [ 95.123514][ T433] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 95.138355][ T433] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 95.147516][ T433] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 95.156056][ T433] usb 4-1: Product: syz [ 95.160287][ T433] usb 4-1: Manufacturer: syz [ 95.172938][ T433] r8152-cfgselector 4-1: Unknown version 0x0000 [ 95.179238][ T433] r8152-cfgselector 4-1: config 0 descriptor?? [ 95.387039][ T433] r8152-cfgselector 4-1: bad CDC descriptors [ 95.394741][ T433] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 95.577983][ T332] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 95.729001][ T332] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.741250][ T332] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 95.750367][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.758388][ T332] usb 2-1: Product: syz [ 95.762571][ T332] usb 2-1: Manufacturer: syz [ 95.767149][ T332] usb 2-1: SerialNumber: syz [ 95.774028][ T332] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 95.779994][ T332] cdc_wdm 2-1:1.0: Unknown control protocol [ 95.896622][ T1921] tipc: Enabled bearer , priority 10 [ 95.904019][ T1920] tipc: Disabling bearer [ 95.907972][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.909784][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 95.970513][ T36] audit: type=1400 audit(1793816308.456:2666): avc: denied { mounton } for pid=1925 comm="syz.0.570" path="/112/dev/sda1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.257984][ T433] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 96.325485][ T36] audit: type=1400 audit(1793816308.806:2667): avc: denied { read write } for pid=1917 comm="syz.1.567" name="cdc-wdm0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 96.326343][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 96.349370][ T36] audit: type=1400 audit(1793816308.806:2668): avc: denied { open } for pid=1917 comm="syz.1.567" path="/dev/cdc-wdm0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 96.428900][ T433] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 96.437076][ T433] usb 1-1: config 0 has no interface number 0 [ 96.443327][ T433] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 96.447966][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 96.454403][ T433] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.471907][ T433] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 96.474619][ T1937] ./dev/sda1: Can't lookup blockdev [ 96.483570][ T433] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.499794][ T433] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 96.502628][ T1939] tipc: Enabling of bearer rejected, failed to enable media [ 96.508952][ T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 96.532307][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.541992][ T433] usb 1-1: Product: syz [ 96.543415][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.546775][ T433] usb 1-1: Manufacturer: syz [ 96.558562][ T433] usb 1-1: SerialNumber: syz [ 96.558864][ T45] usb 2-1: USB disconnect, device number 32 [ 96.566947][ T433] usb 1-1: config 0 descriptor?? [ 96.576492][ T433] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 96.586874][ T433] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input42 [ 96.618918][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.629917][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.639748][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 96.649110][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.649691][ T36] audit: type=1400 audit(1793816309.136:2669): avc: denied { lock } for pid=1940 comm="syz.2.577" path="socket:[17664]" dev="sockfs" ino=17664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.657765][ T31] usb 4-1: config 0 descriptor?? [ 96.718219][ T332] usb 3-1: USB disconnect, device number 34 [ 96.783861][ T1930] netlink: 'syz.0.572': attribute type 13 has an invalid length. [ 96.792031][ T1930] erspan0: refused to change device tx_queue_len [ 96.799086][ T433] usb 1-1: USB disconnect, device number 39 [ 96.805382][ T433] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 97.108907][ T1948] FAULT_INJECTION: forcing a failure. [ 97.108907][ T1948] name failslab, interval 1, probability 0, space 0, times 0 [ 97.121683][ T1948] CPU: 0 UID: 0 PID: 1948 Comm: syz.1.579 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 97.121715][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 97.121728][ T1948] Call Trace: [ 97.121735][ T1948] [ 97.121743][ T1948] __dump_stack+0x21/0x30 [ 97.121769][ T1948] dump_stack_lvl+0x140/0x1c0 [ 97.121789][ T1948] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.121808][ T1948] ? security_transition_sid+0x79/0xa0 [ 97.121836][ T1948] dump_stack+0x19/0x20 [ 97.121853][ T1948] should_fail_ex+0x3c2/0x510 [ 97.121882][ T1948] should_failslab+0xac/0x100 [ 97.121904][ T1948] kmem_cache_alloc_noprof+0x42/0x410 [ 97.121932][ T1948] ? alloc_empty_file+0xbf/0x270 [ 97.121954][ T1948] ? _raw_spin_unlock+0x45/0x60 [ 97.121976][ T1948] alloc_empty_file+0xbf/0x270 [ 97.121999][ T1948] ? _raw_spin_unlock+0x45/0x60 [ 97.122020][ T1948] alloc_file_pseudo+0x142/0x1f0 [ 97.122044][ T1948] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 97.122068][ T1948] ? __kasan_check_write+0x18/0x20 [ 97.122094][ T1948] ? clear_nlink+0x8e/0xf0 [ 97.122114][ T1948] __shmem_file_setup+0x242/0x2c0 [ 97.122135][ T1948] shmem_file_setup+0x33/0x40 [ 97.122153][ T1948] _RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x674/0xc30 [ 97.122188][ T1948] ? __cfi__RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 97.122235][ T1948] ? __asan_memset+0x39/0x50 [ 97.122263][ T1948] mmap_region+0x153f/0x1d10 [ 97.122294][ T1948] ? __cfi_mmap_region+0x10/0x10 [ 97.122323][ T1948] ? __kasan_check_read+0x15/0x20 [ 97.122349][ T1948] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 97.122377][ T1948] ? shmem_mapping+0x11/0x50 [ 97.122404][ T1948] do_mmap+0xa47/0x1370 [ 97.122431][ T1948] ? __cfi_do_mmap+0x10/0x10 [ 97.122456][ T1948] ? __kasan_check_write+0x18/0x20 [ 97.122481][ T1948] ? down_write_killable+0xee/0x2d0 [ 97.122508][ T1948] ? __cfi_down_write_killable+0x10/0x10 [ 97.122535][ T1948] ? do_futex+0x32a/0x510 [ 97.122557][ T1948] vm_mmap_pgoff+0x367/0x4b0 [ 97.122583][ T1948] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 97.122609][ T1948] ? __fget_files+0x2bc/0x330 [ 97.122631][ T1948] ksys_mmap_pgoff+0x165/0x1e0 [ 97.122658][ T1948] __x64_sys_mmap+0x121/0x140 [ 97.122680][ T1948] x64_sys_call+0x13bf/0x2ee0 [ 97.122700][ T1948] do_syscall_64+0x57/0xf0 [ 97.122721][ T1948] ? clear_bhb_loop+0x50/0xa0 [ 97.122746][ T1948] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.122772][ T1948] RIP: 0033:0x7efd87d9fb19 [ 97.122789][ T1948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.122806][ T1948] RSP: 002b:00007efd88b99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 97.122828][ T1948] RAX: ffffffffffffffda RBX: 00007efd88025fa0 RCX: 00007efd87d9fb19 [ 97.122843][ T1948] RDX: 0000000021000000 RSI: 0000000000002000 RDI: 000020000038e000 [ 97.122858][ T1948] RBP: 00007efd87e37b70 R08: 0000000000000005 R09: 0000000000001000 [ 97.122872][ T1948] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 97.122885][ T1948] R13: 00007efd88026038 R14: 00007efd88025fa0 R15: 00007ffd53402c38 [ 97.122903][ T1948] [ 97.454214][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 97.460201][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.465800][ T36] audit: type=1400 audit(1793816309.946:2670): avc: denied { mounton } for pid=1949 comm="syz.1.580" path="/proc/394/task" dev="proc" ino=17258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.492672][ T31] usb 4-1: USB disconnect, device number 44 [ 97.707976][ T332] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 97.817976][ T310] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 97.859863][ T332] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 97.868953][ T332] usb 2-1: New USB device strings: Mfr=15, Product=0, SerialNumber=3 [ 97.877025][ T332] usb 2-1: Manufacturer: syz [ 97.881659][ T332] usb 2-1: SerialNumber: syz [ 97.969002][ T310] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 97.977202][ T310] usb 1-1: config 0 has no interface number 0 [ 97.983494][ T310] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.992880][ T1959] ./dev/sda1: Can't lookup blockdev [ 97.994678][ T310] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.009654][ T310] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.013662][ T36] audit: type=1400 audit(1793816310.496:2671): avc: denied { name_bind } for pid=1960 comm="syz.3.585" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.022675][ T310] usb 1-1: config 0 interface 16 has no altsetting 0 [ 98.050865][ T310] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 98.060043][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.068903][ T310] usb 1-1: config 0 descriptor?? [ 98.109466][ T36] audit: type=1400 audit(1793816310.596:2672): avc: denied { create } for pid=1962 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.110774][ T1963] tipc: Enabling of bearer rejected, already enabled [ 98.129576][ T36] audit: type=1400 audit(1793816310.596:2673): avc: denied { write } for pid=1962 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.157381][ T36] audit: type=1400 audit(1793816310.596:2674): avc: denied { nlmsg_write } for pid=1962 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.160304][ T1964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 98.437980][ T433] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 98.477753][ T310] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/0003:06A3:0CD0.0016/input/input43 [ 98.491445][ T310] saitek 0003:06A3:0CD0.0016: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input16 [ 98.577958][ T433] usb 4-1: device descriptor read/64, error -71 [ 98.817970][ T433] usb 4-1: device descriptor read/64, error -71 [ 99.057960][ T433] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 99.188047][ T433] usb 4-1: device descriptor read/64, error -71 [ 99.428054][ T433] usb 4-1: device descriptor read/64, error -71 [ 99.538082][ T433] usb usb4-port1: attempt power cycle [ 99.787976][ T324] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 99.877977][ T433] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 99.898916][ T433] usb 4-1: device descriptor read/8, error -71 [ 99.938984][ T324] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 99.947232][ T324] usb 3-1: config 0 has no interface number 0 [ 99.953345][ T324] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 99.964318][ T324] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.974156][ T324] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 99.985198][ T324] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 99.996637][ T324] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 100.005708][ T324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 100.013785][ T324] usb 3-1: Product: syz [ 100.020045][ T324] usb 3-1: Manufacturer: syz [ 100.024664][ T324] usb 3-1: SerialNumber: syz [ 100.029873][ T324] usb 3-1: config 0 descriptor?? [ 100.035971][ T324] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 100.038991][ T433] usb 4-1: device descriptor read/8, error -71 [ 100.046604][ T324] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input44 [ 100.240819][ T1974] netlink: 'syz.2.590': attribute type 13 has an invalid length. [ 100.248804][ T1974] erspan0: refused to change device tx_queue_len [ 100.255812][ T324] usb 3-1: USB disconnect, device number 35 [ 100.262106][ T324] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 100.297960][ T433] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 100.318907][ T433] usb 4-1: device descriptor read/8, error -71 [ 100.418317][ T310] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 100.448904][ T433] usb 4-1: device descriptor read/8, error -71 [ 100.456975][ T1950] 9pnet_fd: p9_fd_create_tcp (1950): problem connecting socket to 127.0.0.1 [ 100.471321][ T332] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.487972][ T332] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 100.496535][ T332] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 100.507725][ T332] usb 2-1: USB disconnect, device number 33 [ 100.524124][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.568082][ T433] usb usb4-port1: unable to enumerate USB device [ 100.681820][ T1998] device-mapper: ioctl: Invalid ioctl structure: name syzb2, dev fc01 [ 100.979762][ T310] usb 1-1: selecting invalid altsetting 0 [ 100.985795][ T310] usb 1-1: selecting invalid altsetting 0 [ 100.991556][ T310] usbhid 1-1:0.16: probe with driver usbhid failed with error -22 [ 101.067984][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 101.177391][ T310] usb 1-1: USB disconnect, device number 40 [ 101.183357][ T324] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 101.218977][ T31] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 101.227125][ T31] usb 3-1: config 0 has no interface number 0 [ 101.233342][ T31] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.244341][ T31] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.254158][ T31] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.267480][ T31] usb 3-1: config 0 interface 16 has no altsetting 0 [ 101.274309][ T31] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 101.283426][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.293209][ T31] usb 3-1: config 0 descriptor?? [ 101.338942][ T324] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 101.348934][ T324] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 101.362072][ T324] usb 2-1: config 1 interface 0 has no altsetting 0 [ 101.369333][ T324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.378420][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.386421][ T324] usb 2-1: SerialNumber: syz [ 101.391949][ T2009] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.597971][ T433] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 101.601100][ T2009] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.697313][ T2018] tipc: Enabled bearer , priority 10 [ 101.704528][ T2017] tipc: Resetting bearer [ 101.709435][ T31] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.0017/input/input45 [ 101.722922][ T2017] tipc: Disabling bearer [ 101.725238][ T31] saitek 0003:06A3:0CD0.0017: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 101.747959][ T433] usb 4-1: Using ep0 maxpacket: 8 [ 101.758350][ T433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 101.771010][ T433] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.784022][ T433] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 101.799236][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.807716][ T433] usb 4-1: config 0 descriptor?? [ 102.018881][ T2016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.021123][ T324] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 102.028116][ T2016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.048004][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 102.208444][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 102.217386][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.228829][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.243922][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.253633][ T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.262537][ T31] usb 1-1: Product: syz [ 102.263359][ T433] hid (null): unknown global tag 0xd [ 102.267303][ T31] usb 1-1: Manufacturer: syz [ 102.279527][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.287221][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.292831][ T31] hub 1-1:4.0: USB hub found [ 102.294358][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294385][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294409][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294434][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294459][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294484][ T433] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 102.294509][ T433] apple 0003:05AC:029F.0018: unknown global tag 0xd [ 102.294525][ T433] apple 0003:05AC:029F.0018: item 0 0 1 13 parsing failed [ 102.294734][ T433] apple 0003:05AC:029F.0018: parse failed [ 102.308883][ T2040] kvm: apic: phys broadcast and lowest prio [ 102.313592][ T433] apple 0003:05AC:029F.0018: probe with driver apple failed with error -22 [ 102.397556][ T433] usb 2-1: USB disconnect, device number 34 [ 102.409834][ T433] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 102.463470][ T324] usb 4-1: USB disconnect, device number 49 [ 102.491932][ T31] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 102.518655][ T31] usb 1-1: USB disconnect, device number 41 [ 102.927989][ T31] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 102.980216][ T2068] FAULT_INJECTION: forcing a failure. [ 102.980216][ T2068] name failslab, interval 1, probability 0, space 0, times 0 [ 102.992910][ T2068] CPU: 1 UID: 0 PID: 2068 Comm: syz.3.606 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 102.992941][ T2068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.992955][ T2068] Call Trace: [ 102.992962][ T2068] [ 102.992970][ T2068] __dump_stack+0x21/0x30 [ 102.992994][ T2068] dump_stack_lvl+0x140/0x1c0 [ 102.993012][ T2068] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.993032][ T2068] ? bpf_lsm_key_permission+0xd/0x20 [ 102.993056][ T2068] dump_stack+0x19/0x20 [ 102.993073][ T2068] should_fail_ex+0x3c2/0x510 [ 102.993102][ T2068] should_failslab+0xac/0x100 [ 102.993125][ T2068] __kmalloc_cache_noprof+0x41/0x470 [ 102.993163][ T2068] ? search_cred_keyrings_rcu+0x591/0x680 [ 102.993187][ T2068] ? assoc_array_insert+0x9b/0x3660 [ 102.993208][ T2068] assoc_array_insert+0x9b/0x3660 [ 102.993228][ T2068] ? __cfi__raw_spin_lock+0x10/0x10 [ 102.993249][ T2068] ? bpf_lsm_key_alloc+0xd/0x20 [ 102.993269][ T2068] ? __kasan_check_write+0x18/0x20 [ 102.993296][ T2068] ? __kasan_check_write+0x18/0x20 [ 102.993322][ T2068] ? mutex_lock+0x97/0x1d0 [ 102.993346][ T2068] ? __cfi_mutex_lock+0x10/0x10 [ 102.993369][ T2068] __key_link_begin+0xe5/0x220 [ 102.993396][ T2068] request_key_and_link+0x75b/0x1230 [ 102.993419][ T2068] ? key_task_permission+0x3be/0x500 [ 102.993442][ T2068] ? __cfi_request_key_and_link+0x10/0x10 [ 102.993465][ T2068] ? downgrade_write+0x470/0x470 [ 102.993490][ T2068] ? __cfi_key_default_cmp+0x10/0x10 [ 102.993517][ T2068] ? __cfi_keyring_search_iterator+0x10/0x10 [ 102.993546][ T2068] __se_sys_request_key+0x29c/0x350 [ 102.993566][ T2068] ? __x64_sys_request_key+0xc0/0xc0 [ 102.993586][ T2068] ? __kasan_check_write+0x18/0x20 [ 102.993612][ T2068] ? fpregs_restore_userregs+0x11c/0x260 [ 102.993638][ T2068] __x64_sys_request_key+0x9f/0xc0 [ 102.993657][ T2068] x64_sys_call+0x2b60/0x2ee0 [ 102.993678][ T2068] do_syscall_64+0x57/0xf0 [ 102.993698][ T2068] ? clear_bhb_loop+0x50/0xa0 [ 102.993724][ T2068] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.993749][ T2068] RIP: 0033:0x7fb5f2b9fb19 [ 102.993766][ T2068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.993783][ T2068] RSP: 002b:00007fb5f3ab2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 102.993805][ T2068] RAX: ffffffffffffffda RBX: 00007fb5f2e25fa0 RCX: 00007fb5f2b9fb19 [ 102.993821][ T2068] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 102.993837][ T2068] RBP: 00007fb5f2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.993851][ T2068] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 102.993865][ T2068] R13: 00007fb5f2e26038 R14: 00007fb5f2e25fa0 R15: 00007ffde30e7658 [ 102.993882][ T2068] [ 102.997241][ T2068] rust_binder: 2067:2068 transaction async to 2067:0 failed ENOMEM, code 4294967295 size 18446744073709551302-24 line thread.rs:1194 [ 103.286288][ T45] rust_binder: 2067: undelivered TRANSACTION_ERROR: 29201 [ 103.289245][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 103.362933][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.378039][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.389751][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.398878][ T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.407224][ T31] usb 1-1: Product: syz [ 103.411633][ T31] usb 1-1: Manufacturer: syz [ 103.422010][ T31] hub 1-1:4.0: USB hub found [ 103.459568][ T9] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 103.467935][ T9] usb 2-1: config 0 has no interface number 0 [ 103.474244][ T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 103.485463][ T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.495322][ T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 103.506482][ T9] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 103.520815][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 103.530643][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 103.538747][ T9] usb 2-1: Product: syz [ 103.542933][ T9] usb 2-1: Manufacturer: syz [ 103.547521][ T9] usb 2-1: SerialNumber: syz [ 103.553451][ T9] usb 2-1: config 0 descriptor?? [ 103.559554][ T9] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 103.570115][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input46 [ 103.620849][ T31] hub 1-1:4.0: 1 port detected [ 103.698352][ T433] usb 3-1: USB disconnect, device number 36 [ 103.706678][ T2086] netlink: 140 bytes leftover after parsing attributes in process `syz.3.613'. [ 103.716667][ T2086] rust_binder: 2085:2086 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 103.724709][ T2086] rust_binder: Write failure EINVAL in pid:418 [ 103.764064][ T2070] netlink: 'syz.1.607': attribute type 13 has an invalid length. [ 103.772136][ T2070] erspan0: refused to change device tx_queue_len [ 103.779207][ T9] usb 2-1: USB disconnect, device number 35 [ 103.786926][ T9] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 104.285947][ T2096] tipc: Enabling of bearer rejected, failed to enable media [ 104.313942][ T2102] FAULT_INJECTION: forcing a failure. [ 104.313942][ T2102] name failslab, interval 1, probability 0, space 0, times 0 [ 104.326604][ T2102] CPU: 0 UID: 0 PID: 2102 Comm: syz.2.619 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 104.326622][ T2102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.326630][ T2102] Call Trace: [ 104.326634][ T2102] [ 104.326639][ T2102] __dump_stack+0x21/0x30 [ 104.326653][ T2102] dump_stack_lvl+0x140/0x1c0 [ 104.326663][ T2102] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.326674][ T2102] dump_stack+0x19/0x20 [ 104.326683][ T2102] should_fail_ex+0x3c2/0x510 [ 104.326699][ T2102] ? iovec_from_user+0x94/0x310 [ 104.326712][ T2102] should_failslab+0xac/0x100 [ 104.326723][ T2102] __kmalloc_noprof+0x69/0x510 [ 104.326738][ T2102] ? iovec_from_user+0x94/0x310 [ 104.326750][ T2102] ? is_bpf_text_address+0x17b/0x1a0 [ 104.326764][ T2102] iovec_from_user+0x94/0x310 [ 104.326776][ T2102] ? __kernel_text_address+0x11/0x40 [ 104.326792][ T2102] __import_iovec+0x154/0x7d0 [ 104.326804][ T2102] ? arch_stack_walk+0x10a/0x170 [ 104.326816][ T2102] import_iovec+0x80/0xb0 [ 104.326828][ T2102] ___sys_recvmsg+0x4bb/0x590 [ 104.326843][ T2102] ? kstrtoull+0x13b/0x1e0 [ 104.326857][ T2102] ? __sys_recvmsg+0x260/0x260 [ 104.326871][ T2102] ? kstrtouint_from_user+0x117/0x170 [ 104.326886][ T2102] ? __x64_sys_openat+0x13a/0x170 [ 104.326901][ T2102] do_recvmmsg+0x328/0x790 [ 104.326915][ T2102] ? __sys_recvmmsg+0x2a0/0x2a0 [ 104.326929][ T2102] ? __cfi_vfs_write+0x10/0x10 [ 104.326945][ T2102] ? fput+0x1a4/0x230 [ 104.326957][ T2102] __x64_sys_recvmmsg+0x199/0x250 [ 104.326971][ T2102] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 104.326985][ T2102] ? __kasan_check_read+0x15/0x20 [ 104.327000][ T2102] x64_sys_call+0x292c/0x2ee0 [ 104.327011][ T2102] do_syscall_64+0x57/0xf0 [ 104.327022][ T2102] ? clear_bhb_loop+0x50/0xa0 [ 104.327036][ T2102] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.327049][ T2102] RIP: 0033:0x7f386ab9fb19 [ 104.327059][ T2102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.327081][ T2102] RSP: 002b:00007f386bb24028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 104.327093][ T2102] RAX: ffffffffffffffda RBX: 00007f386ae25fa0 RCX: 00007f386ab9fb19 [ 104.327102][ T2102] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 104.327109][ T2102] RBP: 00007f386bb24090 R08: 0000000000000000 R09: 0000000000000000 [ 104.327116][ T2102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.327123][ T2102] R13: 00007f386ae26038 R14: 00007f386ae25fa0 R15: 00007fff218e90a8 [ 104.327132][ T2102] [ 104.588638][ T36] audit: type=1400 audit(1793816317.076:2675): avc: denied { setopt } for pid=2103 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.619726][ T31] hub 1-1:4.0: activate --> -90 [ 104.636247][ T36] audit: type=1400 audit(1793816317.116:2676): avc: denied { nlmsg_read } for pid=2107 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.708000][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 104.739238][ T36] audit: type=1400 audit(1793816317.226:2677): avc: denied { create } for pid=2116 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.859010][ T9] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 104.867111][ T9] usb 2-1: config 0 has no interface number 0 [ 104.873250][ T9] usb 2-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.884251][ T9] usb 2-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.894086][ T9] usb 2-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.906994][ T9] usb 2-1: config 0 interface 16 has no altsetting 0 [ 104.913708][ T9] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 104.922799][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.931735][ T9] usb 2-1: config 0 descriptor?? [ 104.975277][ T36] audit: type=1400 audit(1793816317.456:2678): avc: denied { watch watch_reads } for pid=2020 comm="syz.0.605" path="/121" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.999641][ T310] usb 1-1: USB disconnect, device number 42 [ 105.057957][ T324] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 105.209023][ T324] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 105.217307][ T324] usb 4-1: config 0 has no interface number 0 [ 105.223549][ T324] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 105.234737][ T324] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.244676][ T324] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 105.255961][ T324] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 105.267487][ T324] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 105.276807][ T324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 105.285013][ T324] usb 4-1: Product: syz [ 105.289348][ T324] usb 4-1: Manufacturer: syz [ 105.294004][ T324] usb 4-1: SerialNumber: syz [ 105.308258][ T324] usb 4-1: config 0 descriptor?? [ 105.316384][ T324] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 105.327405][ T324] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input47 [ 105.340921][ T9] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/0003:06A3:0CD0.0019/input/input48 [ 105.363361][ T9] saitek 0003:06A3:0CD0.0019: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input16 [ 105.519502][ T2121] netlink: 'syz.3.626': attribute type 13 has an invalid length. [ 105.527557][ T2121] erspan0: refused to change device tx_queue_len [ 105.534994][ T324] usb 4-1: USB disconnect, device number 50 [ 105.546475][ T324] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 105.605031][ T2135] rust_binder: 2135 RLIMIT_NICE not set [ 105.605233][ T310] rust_binder: 2134: undelivered TRANSACTION_COMPLETE [ 105.738713][ T2144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 105.843026][ T2148] netlink: 104 bytes leftover after parsing attributes in process `syz.0.635'. [ 105.852453][ T2148] FAULT_INJECTION: forcing a failure. [ 105.852453][ T2148] name failslab, interval 1, probability 0, space 0, times 0 [ 105.865159][ T2148] CPU: 0 UID: 0 PID: 2148 Comm: syz.0.635 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 105.865182][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.865190][ T2148] Call Trace: [ 105.865194][ T2148] [ 105.865199][ T2148] __dump_stack+0x21/0x30 [ 105.865214][ T2148] dump_stack_lvl+0x140/0x1c0 [ 105.865224][ T2148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.865235][ T2148] dump_stack+0x19/0x20 [ 105.865245][ T2148] should_fail_ex+0x3c2/0x510 [ 105.865262][ T2148] should_failslab+0xac/0x100 [ 105.865274][ T2148] kmem_cache_alloc_noprof+0x42/0x410 [ 105.865288][ T2148] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 105.865300][ T2148] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 105.865312][ T2148] ? mutex_unlock+0x90/0x240 [ 105.865325][ T2148] kvm_mmu_topup_memory_cache+0x24/0x30 [ 105.865336][ T2148] kvm_mmu_load+0xa1/0x2900 [ 105.865351][ T2148] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 105.865364][ T2148] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 105.865380][ T2148] ? kvm_apic_has_interrupt+0x77a/0x790 [ 105.865395][ T2148] ? kvm_vcpu_flush_tlb_guest+0xfe/0x220 [ 105.865407][ T2148] vcpu_run+0x4d56/0x7810 [ 105.865426][ T2148] ? signal_pending+0xc0/0xc0 [ 105.865440][ T2148] ? __kasan_check_write+0x18/0x20 [ 105.865454][ T2148] ? xfd_validate_state+0x68/0x140 [ 105.865463][ T2148] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 105.865477][ T2148] ? __kasan_check_write+0x18/0x20 [ 105.865490][ T2148] ? fpregs_mark_activate+0x68/0x160 [ 105.865503][ T2148] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 105.865516][ T2148] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 105.865529][ T2148] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 105.865545][ T2148] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 105.865560][ T2148] ? __futex_wait+0x330/0x3d0 [ 105.865573][ T2148] ? __cfi___futex_wait+0x10/0x10 [ 105.865585][ T2148] ? ioctl_has_perm+0x1bc/0x500 [ 105.865601][ T2148] ? __asan_memcpy+0x5a/0x80 [ 105.865615][ T2148] ? ioctl_has_perm+0x408/0x500 [ 105.865630][ T2148] ? has_cap_mac_admin+0xd0/0xd0 [ 105.865644][ T2148] ? __kasan_check_write+0x18/0x20 [ 105.865657][ T2148] ? mutex_lock_killable+0x97/0x1d0 [ 105.865670][ T2148] ? __cfi_mutex_lock_killable+0x10/0x10 [ 105.865684][ T2148] kvm_vcpu_ioctl+0xa43/0x1000 [ 105.865696][ T2148] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 105.865707][ T2148] ? hook_file_ioctl+0x1ef/0x590 [ 105.865720][ T2148] ? __cfi_hook_file_ioctl+0x10/0x10 [ 105.865733][ T2148] ? __cfi_do_futex+0x10/0x10 [ 105.865745][ T2148] ? __fget_files+0x2bc/0x330 [ 105.865756][ T2148] ? bpf_lsm_file_ioctl+0xd/0x20 [ 105.865767][ T2148] ? security_file_ioctl+0x3e/0x110 [ 105.865781][ T2148] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 105.865792][ T2148] __se_sys_ioctl+0x123/0x1b0 [ 105.865807][ T2148] __x64_sys_ioctl+0x7f/0xa0 [ 105.865818][ T2148] x64_sys_call+0x1878/0x2ee0 [ 105.865829][ T2148] do_syscall_64+0x57/0xf0 [ 105.865840][ T2148] ? clear_bhb_loop+0x50/0xa0 [ 105.865853][ T2148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.865875][ T2148] RIP: 0033:0x7f7a50f9fb19 [ 105.865886][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.865896][ T2148] RSP: 002b:00007f7a51d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.865909][ T2148] RAX: ffffffffffffffda RBX: 00007f7a51225fa0 RCX: 00007f7a50f9fb19 [ 105.865918][ T2148] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 105.865926][ T2148] RBP: 00007f7a51037b70 R08: 0000000000000000 R09: 0000000000000000 [ 105.865933][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.865940][ T2148] R13: 00007f7a51226038 R14: 00007f7a51225fa0 R15: 00007ffd963b6a68 [ 105.865949][ T2148] [ 106.279225][ T2152] tipc: Enabled bearer , priority 10 [ 106.286432][ T2151] tipc: Resetting bearer [ 106.292943][ T2151] tipc: Disabling bearer [ 106.344796][ T2155] FAULT_INJECTION: forcing a failure. [ 106.344796][ T2155] name failslab, interval 1, probability 0, space 0, times 0 [ 106.369869][ T2155] CPU: 1 UID: 0 PID: 2155 Comm: syz.2.637 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 106.369910][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.369927][ T2155] Call Trace: [ 106.369935][ T2155] [ 106.369945][ T2155] __dump_stack+0x21/0x30 [ 106.369974][ T2155] dump_stack_lvl+0x140/0x1c0 [ 106.370001][ T2155] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.370028][ T2155] dump_stack+0x19/0x20 [ 106.370049][ T2155] should_fail_ex+0x3c2/0x510 [ 106.370085][ T2155] should_failslab+0xac/0x100 [ 106.370111][ T2155] __kmalloc_cache_noprof+0x41/0x470 [ 106.370146][ T2155] ? raw_ioctl+0x1a24/0x37a0 [ 106.370176][ T2155] raw_ioctl+0x1a24/0x37a0 [ 106.370204][ T2155] ? handle_mm_fault+0x16fe/0x1ba0 [ 106.370227][ T2155] ? __cfi_raw_ioctl+0x10/0x10 [ 106.370254][ T2155] ? selinux_file_ioctl+0x732/0x1480 [ 106.370290][ T2155] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 106.370324][ T2155] ? hook_file_ioctl+0x1ef/0x590 [ 106.370357][ T2155] ? __fget_files+0x2bc/0x330 [ 106.370382][ T2155] ? bpf_lsm_file_ioctl+0xd/0x20 [ 106.370407][ T2155] ? security_file_ioctl+0x3e/0x110 [ 106.370439][ T2155] ? __cfi_raw_ioctl+0x10/0x10 [ 106.370466][ T2155] __se_sys_ioctl+0x123/0x1b0 [ 106.370492][ T2155] __x64_sys_ioctl+0x7f/0xa0 [ 106.370516][ T2155] x64_sys_call+0x1878/0x2ee0 [ 106.370542][ T2155] do_syscall_64+0x57/0xf0 [ 106.370567][ T2155] ? clear_bhb_loop+0x50/0xa0 [ 106.370598][ T2155] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.370628][ T2155] RIP: 0033:0x7f386ab9f7ab [ 106.370648][ T2155] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 106.370666][ T2155] RSP: 002b:00007f386bb21f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.370692][ T2155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f386ab9f7ab [ 106.370711][ T2155] RDX: 00007f386bb22fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 106.370727][ T2155] RBP: 00007f386bb22fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 106.370744][ T2155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f386bb21fa0 [ 106.370761][ T2155] R13: 0000200000000f80 R14: 0000000000000002 R15: 0000000000000000 [ 106.370780][ T2155] [ 106.708644][ T2169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.718305][ T2169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.731002][ T2176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.740275][ T2179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.780651][ T2183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.031430][ T36] audit: type=1400 audit(1793816319.516:2679): avc: denied { create } for pid=2192 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.134291][ T36] audit: type=1400 audit(1793816319.616:2680): avc: denied { create } for pid=2194 comm="syz.1.650" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.168052][ T36] audit: type=1400 audit(1793816319.646:2681): avc: denied { lock } for pid=2194 comm="syz.1.650" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.178036][ T490] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 107.216499][ T36] audit: type=1400 audit(1793816319.646:2682): avc: denied { mounton } for pid=2194 comm="syz.1.650" path="/173/file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.368938][ T490] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 107.377180][ T490] usb 1-1: config 0 has no interface number 0 [ 107.397942][ T490] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 107.409170][ T490] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.419390][ T490] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.433231][ T490] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 107.450623][ T490] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 107.462066][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 107.470276][ T31] usb 2-1: USB disconnect, device number 36 [ 107.472867][ T490] usb 1-1: Product: syz [ 107.481896][ T490] usb 1-1: Manufacturer: syz [ 107.490254][ T490] usb 1-1: SerialNumber: syz [ 107.500227][ T490] usb 1-1: config 0 descriptor?? [ 107.508514][ T490] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 107.522965][ T490] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input49 [ 107.607963][ T31] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 107.679358][ T2204] FAULT_INJECTION: forcing a failure. [ 107.679358][ T2204] name failslab, interval 1, probability 0, space 0, times 0 [ 107.692290][ T2204] CPU: 1 UID: 0 PID: 2204 Comm: syz.2.653 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 107.692323][ T2204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 107.692337][ T2204] Call Trace: [ 107.692344][ T2204] [ 107.692353][ T2204] __dump_stack+0x21/0x30 [ 107.692379][ T2204] dump_stack_lvl+0x140/0x1c0 [ 107.692399][ T2204] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.692420][ T2204] ? security_transition_sid+0x79/0xa0 [ 107.692448][ T2204] dump_stack+0x19/0x20 [ 107.692466][ T2204] should_fail_ex+0x3c2/0x510 [ 107.692496][ T2204] should_failslab+0xac/0x100 [ 107.692518][ T2204] kmem_cache_alloc_noprof+0x42/0x410 [ 107.692547][ T2204] ? alloc_empty_file+0xbf/0x270 [ 107.692570][ T2204] ? _raw_spin_unlock+0x45/0x60 [ 107.692592][ T2204] alloc_empty_file+0xbf/0x270 [ 107.692614][ T2204] ? _raw_spin_unlock+0x45/0x60 [ 107.692635][ T2204] alloc_file_pseudo+0x142/0x1f0 [ 107.692659][ T2204] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 107.692684][ T2204] ? __kasan_check_write+0x18/0x20 [ 107.692720][ T2204] ? clear_nlink+0x8e/0xf0 [ 107.692742][ T2204] __shmem_file_setup+0x242/0x2c0 [ 107.692764][ T2204] shmem_file_setup+0x33/0x40 [ 107.692784][ T2204] _RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x674/0xc30 [ 107.692821][ T2204] ? __cfi__RNvXs1_Cs85g38pQskaj_6ashmemNtB5_10AshmemMiscNtNtCsbuTvttuFvbr_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 107.692861][ T2204] ? __asan_memset+0x39/0x50 [ 107.692889][ T2204] mmap_region+0x153f/0x1d10 [ 107.692919][ T2204] ? __cfi_mmap_region+0x10/0x10 [ 107.692949][ T2204] ? __kasan_check_read+0x15/0x20 [ 107.692976][ T2204] ? arch_get_unmapped_area_topdown+0x235/0x830 [ 107.693006][ T2204] ? shmem_mapping+0x11/0x50 [ 107.693034][ T2204] do_mmap+0xa47/0x1370 [ 107.693061][ T2204] ? __cfi_do_mmap+0x10/0x10 [ 107.693090][ T2204] ? __kasan_check_write+0x18/0x20 [ 107.693118][ T2204] ? down_write_killable+0xee/0x2d0 [ 107.693145][ T2204] ? __cfi_down_write_killable+0x10/0x10 [ 107.693173][ T2204] ? do_futex+0x32a/0x510 [ 107.693196][ T2204] vm_mmap_pgoff+0x367/0x4b0 [ 107.693223][ T2204] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 107.693249][ T2204] ? __fget_files+0x2bc/0x330 [ 107.693272][ T2204] ksys_mmap_pgoff+0x165/0x1e0 [ 107.693300][ T2204] __x64_sys_mmap+0x121/0x140 [ 107.693322][ T2204] x64_sys_call+0x13bf/0x2ee0 [ 107.693344][ T2204] do_syscall_64+0x57/0xf0 [ 107.693365][ T2204] ? clear_bhb_loop+0x50/0xa0 [ 107.693392][ T2204] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.693419][ T2204] RIP: 0033:0x7f386ab9fb19 [ 107.693437][ T2204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.693455][ T2204] RSP: 002b:00007f386bb24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.693477][ T2204] RAX: ffffffffffffffda RBX: 00007f386ae25fa0 RCX: 00007f386ab9fb19 [ 107.693493][ T2204] RDX: 00000000fffff000 RSI: 0000000000002000 RDI: 000020000038e000 [ 107.693509][ T2204] RBP: 00007f386ac37b70 R08: 0000000000000005 R09: 0000000000001000 [ 107.693523][ T2204] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 107.693537][ T2204] R13: 00007f386ae26038 R14: 00007f386ae25fa0 R15: 00007fff218e90a8 [ 107.693555][ T2204] [ 107.728416][ T2189] netlink: 'syz.0.647': attribute type 13 has an invalid length. [ 107.768954][ T31] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 108.031907][ T2189] erspan0: refused to change device tx_queue_len [ 108.035517][ T31] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 108.041458][ T490] usb 1-1: USB disconnect, device number 43 [ 108.046920][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 108.058373][ T490] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 108.061756][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 108.082048][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.103402][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.114636][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.125757][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 108.146737][ T31] usb 2-1: string descriptor 0 read error: -22 [ 108.153329][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 108.162416][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.171795][ T31] usb 2-1: config 0 descriptor?? [ 108.182201][ T2195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.192012][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.198663][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 108.208696][ T31] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 108.219974][ T36] audit: type=1400 audit(1793816320.696:2683): avc: denied { execute } for pid=2210 comm="syz.2.656" name="file1" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.243244][ T36] audit: type=1400 audit(1793816320.696:2684): avc: denied { execute_no_trans } for pid=2210 comm="syz.2.656" path="/162/file1" dev="tmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.273767][ T2214] tipc: Enabling of bearer rejected, failed to enable media [ 108.411935][ T324] usb 2-1: USB disconnect, device number 37 [ 108.548005][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 108.570210][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10894 sclass=netlink_route_socket pid=2218 comm=syz.0.659 [ 108.594825][ T2220] FAULT_INJECTION: forcing a failure. [ 108.594825][ T2220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.608276][ T2220] CPU: 1 UID: 0 PID: 2220 Comm: syz.0.660 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 108.608305][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.608318][ T2220] Call Trace: [ 108.608325][ T2220] [ 108.608333][ T2220] __dump_stack+0x21/0x30 [ 108.608356][ T2220] dump_stack_lvl+0x140/0x1c0 [ 108.608375][ T2220] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.608395][ T2220] dump_stack+0x19/0x20 [ 108.608413][ T2220] should_fail_ex+0x3c2/0x510 [ 108.608442][ T2220] should_fail+0xf/0x20 [ 108.608458][ T2220] should_fail_usercopy+0x1e/0x30 [ 108.608478][ T2220] _copy_to_iter+0x3b6/0x1520 [ 108.608500][ T2220] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 108.608524][ T2220] ? __cfi__copy_to_iter+0x10/0x10 [ 108.608544][ T2220] ? __check_object_size+0x54c/0x870 [ 108.608572][ T2220] ? __cfi___check_object_size+0x10/0x10 [ 108.608600][ T2220] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 108.608621][ T2220] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 108.608647][ T2220] __skb_datagram_iter+0x103/0x940 [ 108.608671][ T2220] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 108.608696][ T2220] skb_copy_datagram_iter+0x44/0x160 [ 108.608721][ T2220] netlink_recvmsg+0x2d4/0xe60 [ 108.608748][ T2220] ? __cfi_netlink_recvmsg+0x10/0x10 [ 108.608777][ T2220] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 108.608804][ T2220] ? security_socket_recvmsg+0x44/0x130 [ 108.608829][ T2220] ? __cfi_netlink_recvmsg+0x10/0x10 [ 108.608854][ T2220] sock_recvmsg+0x188/0x1e0 [ 108.608875][ T2220] ____sys_recvmsg+0x1e7/0x4a0 [ 108.608903][ T2220] ? __sys_recvmsg_sock+0x60/0x60 [ 108.608930][ T2220] ? import_iovec+0x80/0xb0 [ 108.608952][ T2220] ___sys_recvmsg+0x214/0x590 [ 108.608977][ T2220] ? kstrtoull+0x13b/0x1e0 [ 108.609002][ T2220] ? __sys_recvmsg+0x260/0x260 [ 108.609028][ T2220] ? kstrtouint_from_user+0x117/0x170 [ 108.609055][ T2220] ? __x64_sys_openat+0x13a/0x170 [ 108.609083][ T2220] do_recvmmsg+0x328/0x790 [ 108.609120][ T2220] ? __sys_recvmmsg+0x2a0/0x2a0 [ 108.609146][ T2220] ? __cfi_vfs_write+0x10/0x10 [ 108.609174][ T2220] ? fput+0x1a4/0x230 [ 108.609197][ T2220] __x64_sys_recvmmsg+0x199/0x250 [ 108.609224][ T2220] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 108.609251][ T2220] ? __kasan_check_read+0x15/0x20 [ 108.609278][ T2220] x64_sys_call+0x292c/0x2ee0 [ 108.609302][ T2220] do_syscall_64+0x57/0xf0 [ 108.609322][ T2220] ? clear_bhb_loop+0x50/0xa0 [ 108.609353][ T2220] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.609377][ T2220] RIP: 0033:0x7f7a50f9fb19 [ 108.609395][ T2220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.609412][ T2220] RSP: 002b:00007f7a51d91028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.609433][ T2220] RAX: ffffffffffffffda RBX: 00007f7a51225fa0 RCX: 00007f7a50f9fb19 [ 108.609448][ T2220] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 108.609461][ T2220] RBP: 00007f7a51d91090 R08: 0000000000000000 R09: 0000000000000000 [ 108.609475][ T2220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.609488][ T2220] R13: 00007f7a51226038 R14: 00007f7a51225fa0 R15: 00007ffd963b6a68 [ 108.609505][ T2220] [ 108.934163][ T2222] tipc: Enabling of bearer rejected, already enabled [ 109.009024][ T31] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 109.017153][ T31] usb 3-1: config 0 has no interface number 0 [ 109.023271][ T31] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.034274][ T31] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.044115][ T31] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.057043][ T31] usb 3-1: config 0 interface 16 has no altsetting 0 [ 109.063772][ T31] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 109.072856][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.085200][ T31] usb 3-1: config 0 descriptor?? [ 109.392347][ T2246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 109.499082][ T31] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.001A/input/input51 [ 109.538728][ T31] saitek 0003:06A3:0CD0.001A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 109.687963][ T310] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 109.849062][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 109.857482][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.870679][ T310] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 109.879761][ T310] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 109.888129][ T310] usb 1-1: Product: syz [ 109.892297][ T310] usb 1-1: Manufacturer: syz [ 109.898564][ T310] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 110.099284][ T310] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 110.109955][ T310] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 110.118870][ T310] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 110.142202][ T310] usb 1-1: USB disconnect, device number 44 [ 110.169752][ T2297] tipc: Enabled bearer , priority 10 [ 110.177869][ T2295] tipc: Resetting bearer [ 110.186210][ T2295] tipc: Disabling bearer [ 110.252208][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 110.252225][ T36] audit: type=1400 audit(1793816322.736:2686): avc: denied { map } for pid=2310 comm="syz.3.675" path="socket:[19653]" dev="sockfs" ino=19653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.515734][ T2323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 110.567073][ T2325] overlayfs: invalid origin (0000) [ 110.580182][ T36] audit: type=1400 audit(1793816323.066:2687): avc: denied { create } for pid=2326 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.697511][ T36] audit: type=1400 audit(1793816323.176:2688): avc: denied { mounton } for pid=2396 comm="syz.0.687" path="/148/file0" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.720180][ T36] audit: type=1400 audit(1793816323.176:2689): avc: denied { mounton } for pid=2396 comm="syz.0.687" path="/148/file0" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.761699][ T36] audit: type=1400 audit(1793816323.246:2690): avc: denied { getopt } for pid=2403 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.017970][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 111.032012][ T2413] netlink: 'syz.0.691': attribute type 27 has an invalid length. [ 111.046548][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.053736][ T2413] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.083385][ T2417] tipc: Enabling of bearer rejected, failed to enable media [ 111.167950][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 111.174139][ T9] usb 2-1: config index 0 descriptor too short (expected 5782, got 34) [ 111.182519][ T9] usb 2-1: config 3 has too many interfaces: 203, using maximum allowed: 32 [ 111.191423][ T9] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 111.201601][ T9] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 203 [ 111.212534][ T9] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 111.221625][ T9] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 111.229752][ T9] usb 2-1: Manufacturer: syz [ 111.247592][ T2429] FAULT_INJECTION: forcing a failure. [ 111.247592][ T2429] name fail_futex, interval 1, probability 0, space 0, times 0 [ 111.260423][ T2429] CPU: 0 UID: 0 PID: 2429 Comm: syz.2.698 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 111.260454][ T2429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.260468][ T2429] Call Trace: [ 111.260475][ T2429] [ 111.260484][ T2429] __dump_stack+0x21/0x30 [ 111.260502][ T2429] dump_stack_lvl+0x140/0x1c0 [ 111.260512][ T2429] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.260523][ T2429] ? tcp_sendmsg_locked+0x420e/0x4ac0 [ 111.260540][ T2429] dump_stack+0x19/0x20 [ 111.260549][ T2429] should_fail_ex+0x3c2/0x510 [ 111.260566][ T2429] should_fail+0xf/0x20 [ 111.260576][ T2429] get_futex_key+0x178/0x940 [ 111.260587][ T2429] ? __cfi_get_futex_key+0x10/0x10 [ 111.260598][ T2429] ? __cfi_futex_wake_mark+0x10/0x10 [ 111.260611][ T2429] futex_wake+0x150/0x950 [ 111.260623][ T2429] ? _raw_spin_lock_bh+0x96/0x130 [ 111.260635][ T2429] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 111.260646][ T2429] ? __cfi_futex_wake+0x10/0x10 [ 111.260658][ T2429] ? check_stack_object+0x10f/0x150 [ 111.260673][ T2429] ? _raw_spin_unlock_bh+0x54/0x60 [ 111.260684][ T2429] ? __cfi_tcp_sendmsg+0x10/0x10 [ 111.260697][ T2429] ? __kasan_check_write+0x18/0x20 [ 111.260711][ T2429] ? fput+0x1a4/0x230 [ 111.260723][ T2429] do_futex+0x37d/0x510 [ 111.260734][ T2429] ? __cfi_do_futex+0x10/0x10 [ 111.260745][ T2429] __se_sys_futex+0x13c/0x320 [ 111.260756][ T2429] ? __x64_sys_futex+0x110/0x110 [ 111.260768][ T2429] __x64_sys_futex+0xe9/0x110 [ 111.260779][ T2429] x64_sys_call+0x227f/0x2ee0 [ 111.260790][ T2429] do_syscall_64+0x57/0xf0 [ 111.260800][ T2429] ? clear_bhb_loop+0x50/0xa0 [ 111.260814][ T2429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.260827][ T2429] RIP: 0033:0x7f386ab9fb19 [ 111.260837][ T2429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.260846][ T2429] RSP: 002b:00007f386bb240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.260859][ T2429] RAX: ffffffffffffffda RBX: 00007f386ae25fa8 RCX: 00007f386ab9fb19 [ 111.260874][ T2429] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f386ae25fac [ 111.260882][ T2429] RBP: 00007f386ae25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 111.260889][ T2429] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 111.260897][ T2429] R13: 00007f386ae26038 R14: 00007fff218e8fc0 R15: 00007fff218e90a8 [ 111.260906][ T2429] [ 111.348690][ T450] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 111.438894][ T9] usb 2-1: USB disconnect, device number 38 [ 111.597953][ T450] usb 1-1: device descriptor read/64, error -71 [ 111.718264][ T310] usb 3-1: USB disconnect, device number 37 [ 111.837979][ T450] usb 1-1: device descriptor read/64, error -71 [ 111.857958][ T310] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 111.988107][ T310] usb 3-1: device descriptor read/64, error -71 [ 112.077958][ T450] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 112.207962][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 112.215543][ T450] usb 1-1: device descriptor read/64, error -71 [ 112.228100][ T310] usb 3-1: device descriptor read/64, error -71 [ 112.353747][ T36] audit: type=1400 audit(1793816324.836:2691): avc: denied { watch watch_reads } for pid=2458 comm="syz.1.709" path="/189/file1" dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.354465][ T2459] IPv6: Can't replace route, no match found [ 112.387448][ T31] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 112.395686][ T31] usb 4-1: config 0 has no interface number 0 [ 112.399691][ T36] audit: type=1400 audit(1793816324.886:2692): avc: denied { setattr } for pid=2460 comm="syz.1.710" path="socket:[20871]" dev="sockfs" ino=20871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.402573][ T31] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.437133][ T31] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.447059][ T31] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.459963][ T450] usb 1-1: device descriptor read/64, error -71 [ 112.466231][ T31] usb 4-1: config 0 interface 16 has no altsetting 0 [ 112.472990][ T31] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 112.482192][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.492465][ T31] usb 4-1: config 0 descriptor?? [ 112.497940][ T310] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 112.568077][ T450] usb usb1-port1: attempt power cycle [ 112.627944][ T310] usb 3-1: device descriptor read/64, error -71 [ 112.757977][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 112.867951][ T310] usb 3-1: device descriptor read/64, error -71 [ 112.909152][ T31] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.001B/input/input52 [ 112.916175][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.921023][ T450] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 112.929065][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.940966][ T31] saitek 0003:06A3:0CD0.001B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 112.954153][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 112.967556][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.975682][ T9] usb 2-1: Product: syz [ 112.978072][ T310] usb usb3-port1: attempt power cycle [ 112.980029][ T9] usb 2-1: Manufacturer: syz [ 112.986082][ T450] usb 1-1: device descriptor read/8, error -71 [ 112.991942][ T9] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 113.005815][ T9] usb 2-1: No streaming interface found for terminal 2. [ 113.118957][ T450] usb 1-1: device descriptor read/8, error -71 [ 113.191593][ T31] usb 2-1: USB disconnect, device number 39 [ 113.317981][ T310] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 113.338938][ T310] usb 3-1: device descriptor read/8, error -71 [ 113.358025][ T450] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 113.378926][ T450] usb 1-1: device descriptor read/8, error -71 [ 113.468955][ T310] usb 3-1: device descriptor read/8, error -71 [ 113.509130][ T450] usb 1-1: device descriptor read/8, error -71 [ 113.618108][ T450] usb usb1-port1: unable to enumerate USB device [ 113.717302][ T2478] tipc: Enabled bearer , priority 10 [ 113.717962][ T310] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 113.751611][ T310] usb 3-1: device descriptor read/8, error -71 [ 113.762497][ T36] audit: type=1400 audit(1793816326.246:2693): avc: denied { link } for pid=2483 comm="syz.1.718" name="#d" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.785990][ T36] audit: type=1400 audit(1793816326.246:2694): avc: denied { rename } for pid=2483 comm="syz.1.718" name="#e" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.808285][ T36] audit: type=1400 audit(1793816326.276:2695): avc: denied { setopt } for pid=2483 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.889023][ T310] usb 3-1: device descriptor read/8, error -71 [ 113.946243][ T2494] cgroup2: Unknown parameter 'nsdelegس8jZeate' [ 113.968664][ T2496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 113.998070][ T310] usb usb3-port1: unable to enumerate USB device [ 114.046569][ T2498] overlayfs: invalid origin (0000) [ 114.109024][ T2500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.280316][ T2508] tipc: Enabling of bearer rejected, failed to enable media [ 114.527980][ T490] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 114.677941][ T490] usb 1-1: Using ep0 maxpacket: 16 [ 114.686364][ T490] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.702853][ T490] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.711962][ T332] tipc: Node number set to 2009546886 [ 114.723615][ T490] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.733637][ T490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.741998][ T490] usb 1-1: Product: syz [ 114.746447][ T490] usb 1-1: Manufacturer: syz [ 114.751167][ T490] usb 1-1: SerialNumber: syz [ 114.823259][ T2538] FAULT_INJECTION: forcing a failure. [ 114.823259][ T2538] name failslab, interval 1, probability 0, space 0, times 0 [ 114.835952][ T2538] CPU: 0 UID: 0 PID: 2538 Comm: syz.1.741 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 114.835984][ T2538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.836004][ T2538] Call Trace: [ 114.836009][ T2538] [ 114.836013][ T2538] __dump_stack+0x21/0x30 [ 114.836029][ T2538] dump_stack_lvl+0x140/0x1c0 [ 114.836041][ T2538] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.836052][ T2538] dump_stack+0x19/0x20 [ 114.836061][ T2538] should_fail_ex+0x3c2/0x510 [ 114.836078][ T2538] should_failslab+0xac/0x100 [ 114.836089][ T2538] kmem_cache_alloc_noprof+0x42/0x410 [ 114.836103][ T2538] ? locks_get_lock_context+0xad/0x370 [ 114.836115][ T2538] locks_get_lock_context+0xad/0x370 [ 114.836126][ T2538] flock_lock_inode+0x100/0x1a30 [ 114.836137][ T2538] ? avc_has_perm+0x155/0x240 [ 114.836148][ T2538] ? check_conflicting_open+0x280/0x280 [ 114.836159][ T2538] ? futex_wait+0x2b8/0x7c0 [ 114.836172][ T2538] locks_lock_inode_wait+0x101/0x430 [ 114.836182][ T2538] ? __cfi_locks_lock_inode_wait+0x10/0x10 [ 114.836192][ T2538] ? __cfi_selinux_file_lock+0x10/0x10 [ 114.836207][ T2538] ? bpf_lsm_file_lock+0xd/0x20 [ 114.836219][ T2538] __se_sys_flock+0x4ad/0x610 [ 114.836228][ T2538] ? __x64_sys_flock+0x80/0x80 [ 114.836240][ T2538] ? __kasan_check_write+0x18/0x20 [ 114.836254][ T2538] __x64_sys_flock+0x5f/0x80 [ 114.836263][ T2538] x64_sys_call+0x27ac/0x2ee0 [ 114.836274][ T2538] do_syscall_64+0x57/0xf0 [ 114.836286][ T2538] ? clear_bhb_loop+0x50/0xa0 [ 114.836300][ T2538] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.836313][ T2538] RIP: 0033:0x7efd87d9fb19 [ 114.836323][ T2538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.836332][ T2538] RSP: 002b:00007efd88b99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 114.836345][ T2538] RAX: ffffffffffffffda RBX: 00007efd88025fa0 RCX: 00007efd87d9fb19 [ 114.836353][ T2538] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 114.836360][ T2538] RBP: 00007efd87e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.836367][ T2538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.836373][ T2538] R13: 00007efd88026038 R14: 00007efd88025fa0 R15: 00007ffd53402c38 [ 114.836382][ T2538] [ 115.064647][ T490] usb 1-1: 0:2 : does not exist [ 115.072325][ T490] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.086289][ T490] usb 1-1: USB disconnect, device number 49 [ 115.097870][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.118160][ T9] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 115.247954][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.296758][ T2555] netlink: 72 bytes leftover after parsing attributes in process `syz.1.749'. [ 115.313288][ T2557] rust_binder: 2557 RLIMIT_NICE not set [ 115.313522][ T490] rust_binder: 2556: undelivered TRANSACTION_COMPLETE [ 115.487951][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.573774][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 115.573789][ T36] audit: type=1400 audit(1793816328.056:2700): avc: denied { connect } for pid=2565 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.727954][ T9] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 115.858027][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.945636][ T2589] overlayfs: invalid origin (0000) [ 115.950822][ T450] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 116.097941][ T9] usb 4-1: device descriptor read/64, error -71 [ 116.097941][ T450] usb 1-1: device descriptor read/64, error -71 [ 116.197949][ T332] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 116.220400][ T2561] overlayfs: statfs failed on './file0' [ 116.268235][ T2600] tipc: Enabling of bearer rejected, failed to enable media [ 116.291989][ T36] audit: type=1400 audit(1793816328.776:2701): avc: denied { ioctl } for pid=2603 comm="syz.2.769" path="socket:[22740]" dev="sockfs" ino=22740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.327945][ T332] usb 2-1: device descriptor read/64, error -71 [ 116.338063][ T450] usb 1-1: device descriptor read/64, error -71 [ 116.347954][ T9] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 116.369003][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.508998][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.567941][ T332] usb 2-1: device descriptor read/64, error -71 [ 116.577945][ T450] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 116.707941][ T450] usb 1-1: device descriptor read/64, error -71 [ 116.748019][ T9] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 116.768929][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.807942][ T332] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 116.898973][ T9] usb 4-1: device descriptor read/8, error -71 [ 116.937957][ T332] usb 2-1: device descriptor read/64, error -71 [ 116.957948][ T450] usb 1-1: device descriptor read/64, error -71 [ 117.008825][ T433] usb 4-1: USB disconnect, device number 51 [ 117.068020][ T450] usb usb1-port1: attempt power cycle [ 117.147958][ T433] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 117.177952][ T332] usb 2-1: device descriptor read/64, error -71 [ 117.270338][ T2611] 8021q: VLANs not supported on lo [ 117.279429][ T433] usb 4-1: device descriptor read/64, error -71 [ 117.298017][ T332] usb usb2-port1: attempt power cycle [ 117.381607][ T2623] raw_sendmsg: syz.2.774 forgot to set AF_INET. Fix it! [ 117.407978][ T450] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 117.428970][ T450] usb 1-1: device descriptor read/8, error -71 [ 117.517951][ T433] usb 4-1: device descriptor read/64, error -71 [ 117.569000][ T450] usb 1-1: device descriptor read/8, error -71 [ 117.637948][ T332] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 117.659053][ T332] usb 2-1: device descriptor read/8, error -71 [ 117.737939][ T490] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 117.788947][ T332] usb 2-1: device descriptor read/8, error -71 [ 117.817946][ T450] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 117.843082][ T2641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=2641 comm=syz.3.782 [ 117.848987][ T450] usb 1-1: device descriptor read/8, error -71 [ 117.877937][ T490] usb 3-1: device descriptor read/64, error -71 [ 117.997768][ T450] usb 1-1: device descriptor read/8, error -71 [ 118.037940][ T332] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 118.058948][ T332] usb 2-1: device descriptor read/8, error -71 [ 118.108042][ T450] usb usb1-port1: unable to enumerate USB device [ 118.117948][ T490] usb 3-1: device descriptor read/64, error -71 [ 118.188923][ T332] usb 2-1: device descriptor read/8, error -71 [ 118.298070][ T332] usb usb2-port1: unable to enumerate USB device [ 118.357963][ T490] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 118.467949][ T433] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 118.487950][ T490] usb 3-1: device descriptor read/64, error -71 [ 118.618920][ T433] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 118.627042][ T433] usb 4-1: config 0 has no interface number 0 [ 118.633167][ T433] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.644132][ T433] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.653972][ T433] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.666837][ T433] usb 4-1: config 0 interface 16 has no altsetting 0 [ 118.673611][ T433] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 118.682733][ T433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.691503][ T433] usb 4-1: config 0 descriptor?? [ 118.737952][ T490] usb 3-1: device descriptor read/64, error -71 [ 118.752360][ T36] audit: type=1400 audit(1793816331.236:2702): avc: denied { bind } for pid=2651 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.848415][ T490] usb usb3-port1: attempt power cycle [ 118.975471][ T2659] tipc: Enabling of bearer rejected, already enabled [ 119.100562][ T433] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.001C/input/input53 [ 119.116046][ T433] saitek 0003:06A3:0CD0.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 119.188165][ T490] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 119.208943][ T490] usb 3-1: device descriptor read/8, error -71 [ 119.339157][ T490] usb 3-1: device descriptor read/8, error -71 [ 119.377953][ T332] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 119.529008][ T332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.539148][ T332] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.552012][ T332] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 119.561064][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.577948][ T490] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 119.598893][ T490] usb 3-1: device descriptor read/8, error -71 [ 119.738970][ T490] usb 3-1: device descriptor read/8, error -71 [ 119.857984][ T490] usb usb3-port1: unable to enumerate USB device [ 120.167382][ T36] audit: type=1400 audit(1793816332.646:2703): avc: denied { sqpoll } for pid=2674 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.189666][ T36] audit: type=1400 audit(1793816332.676:2704): avc: denied { ioctl } for pid=2662 comm="syz.1.791" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.673252][ T2700] syzkaller0: entered promiscuous mode [ 120.678796][ T2700] syzkaller0: entered allmulticast mode [ 120.685049][ T2699] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 120.738837][ T36] audit: type=1400 audit(1793816333.226:2705): avc: denied { read write } for pid=2704 comm="syz.3.802" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.762785][ T36] audit: type=1400 audit(1793816333.226:2706): avc: denied { open } for pid=2704 comm="syz.3.802" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.048138][ T490] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 121.183848][ T36] audit: type=1400 audit(1793816333.666:2707): avc: denied { relabelfrom } for pid=2713 comm="syz.0.806" name="UNIX" dev="sockfs" ino=22211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 121.651146][ T490] usb 4-1: selecting invalid altsetting 0 [ 121.657183][ T490] usb 4-1: selecting invalid altsetting 0 [ 121.678774][ T490] usbhid 4-1:0.16: probe with driver usbhid failed with error -22 [ 121.718056][ T2725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 121.845060][ T310] usb 4-1: USB disconnect, device number 53 [ 121.997936][ T450] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 122.062478][ T2729] rust_binder: 2729 RLIMIT_NICE not set [ 122.062702][ T490] rust_binder: 2728: undelivered TRANSACTION_COMPLETE [ 122.084829][ T36] audit: type=1326 audit(1793816334.566:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.0.812" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a50f9fb19 code=0x0 [ 122.142226][ T2736] x_tables: unsorted underflow at hook 3 [ 122.159292][ T450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.167279][ T450] usb 3-1: not running at top speed; connect to a high speed hub [ 122.175713][ T450] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.185799][ T450] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.196650][ T450] usb 3-1: string descriptor 0 read error: -22 [ 122.202867][ T450] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.211913][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.221651][ T450] usb 3-1: 0:2 : does not exist [ 122.356977][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.364863][ T2738] tipc: Enabling of bearer rejected, already enabled [ 122.368386][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 122.387681][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 122.388190][ T310] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 122.403370][ T2741] rust_binder: 2740:2741 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 122.408992][ T2743] FAULT_INJECTION: forcing a failure. [ 122.408992][ T2743] name failslab, interval 1, probability 0, space 0, times 0 [ 122.414406][ T2742] rust_binder: 2740:2742 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 122.427054][ T2743] CPU: 1 UID: 0 PID: 2743 Comm: syz.3.815 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 122.427091][ T2743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.427103][ T2743] Call Trace: [ 122.427109][ T2743] [ 122.427116][ T2743] __dump_stack+0x21/0x30 [ 122.427141][ T2743] dump_stack_lvl+0x140/0x1c0 [ 122.427160][ T2743] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.427181][ T2743] dump_stack+0x19/0x20 [ 122.427198][ T2743] should_fail_ex+0x3c2/0x510 [ 122.427226][ T2743] should_failslab+0xac/0x100 [ 122.427247][ T2743] __kmalloc_cache_noprof+0x41/0x470 [ 122.427275][ T2743] ? tipc_sub_subscribe+0x13f/0x7a0 [ 122.427296][ T2743] tipc_sub_subscribe+0x13f/0x7a0 [ 122.427316][ T2743] tipc_conn_rcv_sub+0x196/0x3e0 [ 122.427342][ T2743] tipc_topsrv_kern_subscr+0x237/0x360 [ 122.427366][ T2743] ? __cfi_tipc_topsrv_kern_subscr+0x10/0x10 [ 122.427393][ T2743] ? __asan_memset+0x39/0x50 [ 122.427419][ T2743] tipc_group_create+0x3be/0x640 [ 122.427444][ T2743] tipc_sk_join+0x243/0x9f0 [ 122.427467][ T2743] ? __cfi_lock_sock_nested+0x10/0x10 [ 122.427487][ T2743] ? __tipc_sendstream+0x11b0/0x11b0 [ 122.427519][ T2743] ? __kasan_check_write+0x18/0x20 [ 122.427546][ T2743] tipc_setsockopt+0x73f/0x9a0 [ 122.427570][ T2743] ? __cfi_tipc_setsockopt+0x10/0x10 [ 122.427594][ T2743] ? do_futex+0x32a/0x510 [ 122.427617][ T2743] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 122.427635][ T2743] ? security_socket_setsockopt+0x3d/0x100 [ 122.427659][ T2743] ? __cfi_tipc_setsockopt+0x10/0x10 [ 122.427681][ T2743] do_sock_setsockopt+0x27c/0x410 [ 122.427706][ T2743] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 122.427730][ T2743] ? __fget_files+0x2bc/0x330 [ 122.427751][ T2743] __x64_sys_setsockopt+0x18c/0x220 [ 122.427790][ T2743] x64_sys_call+0x2adc/0x2ee0 [ 122.427811][ T2743] do_syscall_64+0x57/0xf0 [ 122.427832][ T2743] ? clear_bhb_loop+0x50/0xa0 [ 122.427859][ T2743] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.427883][ T2743] RIP: 0033:0x7fb5f2b9fb19 [ 122.427901][ T2743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.427917][ T2743] RSP: 002b:00007fb5f3ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.427938][ T2743] RAX: ffffffffffffffda RBX: 00007fb5f2e25fa0 RCX: 00007fb5f2b9fb19 [ 122.427953][ T2743] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 122.427965][ T2743] RBP: 00007fb5f2c37b70 R08: 000000000000002e R09: 0000000000000000 [ 122.427978][ T2743] R10: 00002000000027c0 R11: 0000000000000246 R12: 0000000000000000 [ 122.427992][ T2743] R13: 00007fb5f2e26038 R14: 00007fb5f2e25fa0 R15: 00007ffde30e7658 [ 122.428008][ T2743] [ 122.428391][ T2743] tipc: Subscription rejected, no memory [ 122.434931][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 122.462408][ T2741] rust_binder: Write failure EINVAL in pid:567 [ 122.462751][ T2742] rust_binder: Write failure EINVAL in pid:567 [ 122.467749][ T2741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 122.471736][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 122.471991][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 122.587917][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 122.588225][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 122.601596][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.603871][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.608909][ T310] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.612933][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.617301][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.629500][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.647549][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.656194][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.665616][ T310] usb 1-1: string descriptor 0 read error: -22 [ 122.672443][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 122.679632][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.687981][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.695550][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.703453][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 122.912704][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 122.923816][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 122.941508][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 122.952427][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 122.964063][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 122.975036][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 122.985963][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 123.001665][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 123.012626][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 123.030317][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 123.041144][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 123.052080][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 123.069844][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 123.080732][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 123.091681][ T332] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 123.104226][ T332] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 16:0f:c4:b8:60:08 [ 123.120258][ T332] usb 2-1: USB disconnect, device number 44 [ 123.126606][ T332] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 123.261884][ T450] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.271686][ T450] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 123.284341][ T2774] tipc: Enabled bearer , priority 10 [ 123.291817][ T2773] tipc: Resetting bearer [ 123.299472][ T2773] tipc: Disabling bearer [ 123.312767][ T310] usb 1-1: 0:2 : does not exist [ 123.321052][ T450] usb 3-1: USB disconnect, device number 46 [ 123.347517][ T310] usb 1-1: USB disconnect, device number 54 [ 123.422289][ T2797] tipc: Enabled bearer , priority 10 [ 123.433916][ T2795] tipc: Disabling bearer [ 123.555291][ T2812] netlink: 100 bytes leftover after parsing attributes in process `syz.0.832'. [ 123.577568][ T2812] ./dev/sda1: Can't lookup blockdev [ 123.588765][ T36] audit: type=1400 audit(1793816336.076:2709): avc: denied { search } for pid=2811 comm="syz.0.832" name="/" dev="configfs" ino=2460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.689036][ T2822] overlayfs: invalid origin (0000) [ 123.897941][ T490] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 123.974070][ T2839] usb usb1: usbfs: process 2839 (syz.2.842) did not claim interface 1 before use [ 124.047489][ T2842] tipc: Enabling of bearer rejected, failed to enable media [ 124.056341][ T490] usb 2-1: Using ep0 maxpacket: 32 [ 124.065120][ T490] usb 2-1: config 0 has no interfaces? [ 124.074291][ T490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 124.083540][ T490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.092744][ T490] usb 2-1: Product: syz [ 124.096987][ T490] usb 2-1: Manufacturer: syz [ 124.101660][ T490] usb 2-1: SerialNumber: syz [ 124.106775][ T490] usb 2-1: config 0 descriptor?? [ 124.155228][ T36] audit: type=1400 audit(1793816336.636:2710): avc: denied { ioctl } for pid=2848 comm="syz.3.846" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 124.427947][ T450] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 124.578940][ T450] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 124.587087][ T450] usb 4-1: config 0 has no interface number 0 [ 124.593184][ T450] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.604157][ T450] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.613980][ T450] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.626842][ T450] usb 4-1: config 0 interface 16 has no altsetting 0 [ 124.633546][ T450] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 124.642601][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.651086][ T450] usb 4-1: config 0 descriptor?? [ 124.807981][ T2839] incfs: Can't find or create .index dir in ./file0 [ 124.814646][ T2839] incfs: mount failed -107 [ 125.053640][ T2862] netlink: 9 bytes leftover after parsing attributes in process `syz.0.851'. [ 125.066149][ T450] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.001D/input/input54 [ 125.098032][ T450] saitek 0003:06A3:0CD0.001D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 125.832399][ T36] audit: type=1400 audit(1793816338.316:2711): avc: denied { write } for pid=2886 comm="syz.2.861" path="socket:[24804]" dev="sockfs" ino=24804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.872185][ T36] audit: type=1400 audit(1793816338.356:2712): avc: denied { getopt } for pid=2891 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.067970][ T490] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 126.219235][ T490] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.229133][ T490] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 126.238196][ T490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.246158][ T490] usb 3-1: Product: syz [ 126.250345][ T490] usb 3-1: Manufacturer: syz [ 126.256777][ T490] usb 3-1: SerialNumber: syz [ 126.499009][ T490] usb 3-1: unit 4 not found! [ 126.503653][ T490] usb 3-1: unit 14 not found! [ 126.511914][ T490] usb 3-1: USB disconnect, device number 47 [ 126.521008][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.633334][ T10] usb 2-1: USB disconnect, device number 45 [ 126.735760][ T2905] tipc: Enabled bearer , priority 10 [ 126.742923][ T2904] tipc: Resetting bearer [ 126.749870][ T2904] tipc: Disabling bearer [ 126.845631][ T2901] x86/PAT: syz.1.866:2901 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 126.931314][ T2912] IPv6: Can't replace route, no match found [ 126.980035][ T310] usb 4-1: USB disconnect, device number 54 [ 126.995983][ T2915] overlayfs: invalid origin (0000) [ 127.014768][ T2917] EXT4-fs (sda1): shut down requested (0) [ 127.028997][ T36] audit: type=1400 audit(1793816339.516:2713): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 127.052156][ T36] audit: type=1400 audit(1793816339.516:2714): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.074452][ T36] audit: type=1400 audit(1793816339.516:2715): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.096356][ T36] audit: type=1400 audit(1793816339.516:2716): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.117205][ T36] audit: type=1400 audit(1793816339.516:2717): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.140749][ T36] audit: type=1400 audit(1793816339.516:2718): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.164194][ T36] audit: type=1400 audit(1793816339.516:2719): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.354607][ T2926] tipc: Enabling of bearer rejected, failed to enable media [ 127.398174][ T2932] x_tables: duplicate underflow at hook 1 [ 127.447957][ T332] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 127.609064][ T332] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 127.617231][ T332] usb 4-1: config 0 has no interface number 0 [ 127.623381][ T332] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.634407][ T332] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.644277][ T332] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.657244][ T332] usb 4-1: config 0 interface 16 has no altsetting 0 [ 127.664004][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 127.671622][ T332] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 127.680779][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.690464][ T332] usb 4-1: config 0 descriptor?? [ 127.817964][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.057974][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.102137][ T332] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.001E/input/input55 [ 128.126534][ T332] saitek 0003:06A3:0CD0.001E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 128.139976][ T2937] udevd[2937]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 128.308018][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 128.447937][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.687943][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.798037][ T10] usb usb3-port1: attempt power cycle [ 128.902522][ T2942] netlink: 9 bytes leftover after parsing attributes in process `syz.0.885'. [ 129.137927][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 129.159135][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.306241][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.547934][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 129.588889][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.729799][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.748863][ T2954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 129.857414][ T36] audit: type=1400 audit(1793816342.336:2720): avc: denied { connect } for pid=2957 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.858001][ T10] usb usb3-port1: unable to enumerate USB device [ 129.989610][ T310] usb 4-1: USB disconnect, device number 55 [ 130.017453][ T2969] ./dev/sda1: Can't lookup blockdev [ 130.023570][ T2970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 130.496890][ T2982] tipc: Enabled bearer , priority 10 [ 130.518476][ T2981] tipc: Disabling bearer [ 130.618689][ T2978] syz.0.899: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 130.663318][ T2387] ------------[ cut here ]------------ [ 130.668814][ T2387] WARNING: CPU: 1 PID: 2387 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 130.677951][ T2978] CPU: 0 UID: 0 PID: 2978 Comm: syz.0.899 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 130.677982][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.677995][ T2978] Call Trace: [ 130.678001][ T2978] [ 130.678009][ T2978] __dump_stack+0x21/0x30 [ 130.678033][ T2978] dump_stack_lvl+0x140/0x1c0 [ 130.678051][ T2978] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.678071][ T2978] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 130.678095][ T2978] dump_stack+0x19/0x20 [ 130.678113][ T2978] warn_alloc+0x1e7/0x2c0 [ 130.678136][ T2978] ? stack_depot_save_flags+0x38/0x800 [ 130.678161][ T2978] ? __cfi_warn_alloc+0x10/0x10 [ 130.678187][ T2978] ? kasan_save_track+0x3e/0x80 [ 130.678207][ T2978] ? kasan_save_alloc_info+0x3a/0x50 [ 130.678231][ T2978] ? xsk_init_queue+0xb2/0x120 [ 130.678252][ T2978] ? xsk_setsockopt+0x411/0x760 [ 130.678274][ T2978] ? do_sock_setsockopt+0x27c/0x410 [ 130.678297][ T2978] ? __x64_sys_setsockopt+0x18c/0x220 [ 130.678321][ T2978] ? x64_sys_call+0x2adc/0x2ee0 [ 130.678340][ T2978] ? do_syscall_64+0x57/0xf0 [ 130.678359][ T2978] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.678384][ T2978] __vmalloc_node_range_noprof+0x136/0x1300 [ 130.678415][ T2978] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 130.678439][ T2978] ? kasan_save_alloc_info+0x3a/0x50 [ 130.678462][ T2978] ? __kasan_kmalloc+0x96/0xb0 [ 130.678488][ T2978] ? __kmalloc_cache_noprof+0x23c/0x470 [ 130.678515][ T2978] vmalloc_user_noprof+0x77/0x90 [ 130.678539][ T2978] ? xskq_create+0xdb/0x290 [ 130.678561][ T2978] xskq_create+0xdb/0x290 [ 130.678583][ T2978] xsk_init_queue+0xb2/0x120 [ 130.678606][ T2978] xsk_setsockopt+0x411/0x760 [ 130.678628][ T2978] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.678650][ T2978] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 130.678670][ T2978] ? security_socket_setsockopt+0x3d/0x100 [ 130.678694][ T2978] ? __cfi_xsk_setsockopt+0x10/0x10 [ 130.678715][ T2978] do_sock_setsockopt+0x27c/0x410 [ 130.678738][ T2978] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 130.678762][ T2978] ? __fget_files+0x2bc/0x330 [ 130.678783][ T2978] __x64_sys_setsockopt+0x18c/0x220 [ 130.678808][ T2978] x64_sys_call+0x2adc/0x2ee0 [ 130.678827][ T2978] do_syscall_64+0x57/0xf0 [ 130.678845][ T2978] ? clear_bhb_loop+0x50/0xa0 [ 130.678870][ T2978] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.678893][ T2978] RIP: 0033:0x7f7a50f9fb19 [ 130.678910][ T2978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.678927][ T2978] RSP: 002b:00007f7a51d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.678948][ T2978] RAX: ffffffffffffffda RBX: 00007f7a51225fa0 RCX: 00007f7a50f9fb19 [ 130.678962][ T2978] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 130.678974][ T2978] RBP: 00007f7a51037b70 R08: 0000000000000029 R09: 0000000000000000 [ 130.678987][ T2978] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.679000][ T2978] R13: 00007f7a51226038 R14: 00007f7a51225fa0 R15: 00007ffd963b6a68 [ 130.679017][ T2978] [ 130.679032][ T2978] Mem-Info: [ 130.679481][ T2387] Modules linked in: [ 130.697945][ T2978] active_anon:22471 inactive_anon:4 isolated_anon:0 [ 130.697945][ T2978] active_file:21509 inactive_file:2805 isolated_file:0 [ 130.697945][ T2978] unevictable:0 dirty:45 writeback:0 [ 130.697945][ T2978] slab_reclaimable:4172 slab_unreclaimable:79197 [ 130.697945][ T2978] mapped:27790 shmem:15223 pagetables:919 [ 130.697945][ T2978] sec_pagetables:0 bounce:0 [ 130.697945][ T2978] kernel_misc_reclaimable:0 [ 130.697945][ T2978] free:1490641 free_pcp:4446 free_cma:0 [ 130.700965][ T2387] [ 130.704212][ T2978] Node 0 active_anon:89884kB inactive_anon:16kB active_file:86036kB inactive_file:11220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111160kB dirty:180kB writeback:0kB shmem:60892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6692kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no [ 130.707139][ T2387] CPU: 1 UID: 0 PID: 2387 Comm: kworker/u8:62 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 130.728000][ T2978] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:68kB free_cma:0kB [ 130.731229][ T2387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.736688][ T2978] lowmem_reserve[]: [ 130.740998][ T2387] Workqueue: iou_exit io_ring_exit_work [ 130.758041][ T2978] 0 [ 130.760722][ T2387] [ 130.765598][ T2978] 3920 [ 130.770730][ T2387] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 130.776185][ T2978] 3920 [ 130.780939][ T2387] Code: 5d e9 13 4a 54 02 cc e8 ed 88 30 fe 0f 0b eb e3 e8 e4 88 30 fe 0f 0b eb da e8 db 88 30 fe 0f 0b e9 4d fe ff ff e8 cf 88 30 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 130.780959][ T2387] RSP: 0018:ffffc90011147990 EFLAGS: 00010293 [ 130.788501][ T2978] [ 130.791733][ T2387] RAX: ffffffff8358dd31 RBX: 1ffff11021868a05 RCX: ffff88811afa13c0 [ 130.797507][ T2978] Normal free:3012592kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71684kB inactive_anon:16kB active_file:86036kB inactive_file:11220kB unevictable:0kB writepending:180kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:30988kB local_pcp:30744kB free_cma:0kB [ 130.803817][ T2387] RDX: 0000000000000000 RSI: 000000000000004e RDI: 0000000000000104 [ 130.803836][ T2387] RBP: ffffc900111479e0 R08: 0000000000000003 R09: 0000000000000004 [ 130.809523][ T2978] lowmem_reserve[]: [ 130.813911][ T2387] R10: 0000000000000000 R11: ffffffff8358cd10 R12: ffff8881157d62c0 [ 130.813931][ T2387] R13: ffff88810c345000 R14: ffff88811ce84000 R15: ffff88811ce84010 [ 130.819696][ T2978] 0 [ 130.824394][ T2387] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 130.824417][ T2387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.829162][ T2978] 0 [ 130.833225][ T2387] CR2: 000000110c24df8e CR3: 000000013366c000 CR4: 00000000003526b0 [ 130.833247][ T2387] Call Trace: [ 130.833255][ T2387] [ 130.837858][ T2978] 0 [ 130.842494][ T2387] ublk_ch_uring_cmd+0x6f/0xa0 [ 130.842528][ T2387] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 130.857934][ T2978] [ 130.859030][ T2387] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 130.864532][ T2978] DMA32: [ 130.869232][ T2387] ? io_uring_cancel_generic+0x6eb/0x6eb [ 130.869261][ T2387] io_ring_exit_work+0x23d/0x83b [ 130.885017][ T2978] 5*4kB [ 130.889361][ T2387] ? finish_task_switch+0x13d/0x8a0 [ 130.897983][ T2978] (M) [ 130.898497][ T2387] ? __cfi_io_ring_exit_work+0x10/0x10 [ 130.910923][ T2978] 2*8kB [ 130.928368][ T2387] ? kick_pool+0xb9/0x540 [ 130.928401][ T2387] process_scheduled_works+0x7f7/0x1060 [ 130.954583][ T2978] (M) [ 130.960839][ T2387] worker_thread+0xc99/0x13f0 [ 130.984371][ T2978] 3*16kB [ 130.986817][ T2387] kthread+0x2c7/0x360 [ 131.079843][ T2978] (M) [ 131.107378][ T2387] ? __cfi_worker_thread+0x10/0x10 [ 131.107412][ T2387] ? __cfi_kthread+0x10/0x10 [ 131.148748][ T2978] 4*32kB [ 131.163193][ T2387] ret_from_fork+0x64/0xa0 [ 131.163223][ T2387] ? __cfi_kthread+0x10/0x10 [ 131.190320][ T2978] (M) [ 131.211076][ T2387] ret_from_fork_asm+0x1a/0x30 [ 131.260817][ T2978] 4*64kB [ 131.264800][ T2387] [ 131.264812][ T2387] ---[ end trace 0000000000000000 ]--- [ 131.318739][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 131.318755][ T36] audit: type=1400 audit(1793816343.796:2723): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 131.347920][ T2978] (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 131.444349][ T2978] Normal: 117*4kB (ME) 884*8kB (UME) 1730*16kB (UME) 659*32kB (UME) 190*64kB (UME) 70*128kB (UME) 22*256kB (UM) 11*512kB (UM) 5*1024kB (ME) 4*2048kB (ME) 724*4096kB (M) = 3067508kB [ 131.463994][ T2978] 27384 total pagecache pages [ 131.468831][ T2978] 5 pages in swap cache [ 131.472983][ T2978] Free swap = 124484kB [ 131.477174][ T2978] Total swap = 124996kB [ 131.485887][ T2978] 2097051 pages RAM [ 131.489881][ T2978] 0 pages HighMem/MovableOnly [ 131.494659][ T2978] 354592 pages reserved [ 131.499078][ T2978] 0 pages cma reserved [ 131.509081][ T2978] Memory allocations: [ 131.513074][ T2978] 0 B 0 init/main.c:1477 func:do_initcalls [ 131.528045][ T2978] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 131.536149][ T2978] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 131.547822][ T2978] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 131.564062][ T2978] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 131.575348][ T2978] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 131.585232][ T2978] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 131.593277][ T2978] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 131.601344][ T2978] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 131.609388][ T2978] 0 B 0 init/initramfs.c:101 func:find_link