last executing test programs: 51.602980729s ago: executing program 0 (id=137): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 51.332104742s ago: executing program 0 (id=139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x700) 50.460221963s ago: executing program 0 (id=164): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 50.392155186s ago: executing program 0 (id=168): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x11, 0x6, 0x5, 0x0, 0x400, 0x2}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0x3, 0x57, '\x00', 0xf5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 50.280450341s ago: executing program 0 (id=172): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='on', 0x53) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) 50.141693158s ago: executing program 0 (id=178): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 34.979605186s ago: executing program 32 (id=178): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 18.643789069s ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 18.561227143s ago: executing program 3 (id=578): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 18.545257743s ago: executing program 3 (id=579): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000002840)=[{&(0x7f0000000680)='h', 0x1}], 0x1) 18.461827457s ago: executing program 3 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x34}]) 18.40026512s ago: executing program 3 (id=581): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.18592375s ago: executing program 3 (id=584): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 18.139026132s ago: executing program 33 (id=584): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2.33786182s ago: executing program 4 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x62) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) inotify_init1(0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 2.33768512s ago: executing program 1 (id=756): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000200)=""/148, 0xffffffc0) 2.322427681s ago: executing program 4 (id=757): socket(0x400000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 2.309738672s ago: executing program 4 (id=758): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x401, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={r1, r2/1000+60000}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.192250707s ago: executing program 1 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000100)) 2.13767325s ago: executing program 1 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 2.13407688s ago: executing program 4 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000740)=""/34, 0x22}], 0x1, 0x0, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.080044632s ago: executing program 1 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 2.079616842s ago: executing program 1 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x43, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x2, 0x7}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x3, 0xfffffffffffffff8, 0x3, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x7b, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0xfffffffffffffffe, 0x2, {0x4, 0x400000000000, 0x4000000002, 0xb, 0x9, 0x5c, {0x2, 0xfffffffffffffffb, 0x200000000587, 0x4, 0x8000000000000001, 0x4, 0x4, 0x2, 0x9, 0xc000, 0xb, r2, r3, 0xffff8001, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.050062974s ago: executing program 4 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x5001404, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 2.016113015s ago: executing program 1 (id=765): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="32c0aa43755c", 0x6}], 0x1}, 0x4040014) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}, {&(0x7f0000000040)={0x10, 0x3d, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2}, 0x200488d4) 1.956586978s ago: executing program 34 (id=765): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="32c0aa43755c", 0x6}], 0x1}, 0x4040014) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}, {&(0x7f0000000040)={0x10, 0x3d, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2}, 0x200488d4) 1.259090851s ago: executing program 5 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.171852775s ago: executing program 5 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r0, 0x0, 0x1) 1.171658945s ago: executing program 4 (id=774): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000002cc0)=""/4101, 0x1005}], 0x1) 1.171362695s ago: executing program 5 (id=775): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) 1.100054008s ago: executing program 5 (id=776): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000002840)=[{&(0x7f0000000680)='h', 0x1}, {&(0x7f00000016c0)="7e53ae0efc03524b41953976c3f8726e25123740d06b2395adb9bea13190d659c1843ee655e9bfd1f8e4f0ee1c88204d4d512246949f2e4e5b125e94d148b62c33e9f0bcf32bbb13c4f01aac4db4a44f2ec338ec0b4bb855dc44f8bd5a0571ff1c201b3ad3cd6e104c195c129bc10aad771f0cfbbd7afd483215f5aa4d83d74e492eaf80bf3d75ded09dc5ae11236472941dba72a16f604dc3a1443d01aa460708431c23706b4565320adb1a2824916e82609c50d1da6cf60925c667aa3bc910102e860705b771ddb38c151b0156ebf7b80caab2425d827fe060d3ff2c92f153800b4449e6a3283789100c6f5418e1c12e4be051845af7ab07986b6bbd9921225396048a4fb526c13411", 0x10a}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) 1.099844368s ago: executing program 5 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x3}) 1.099717778s ago: executing program 5 (id=778): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) close(0x4) 408.355521ms ago: executing program 6 (id=782): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 407.87921ms ago: executing program 6 (id=783): openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f0000000180)={0xfff, 0x0, 0x0, 0xfffffffe, 0x0, 0x4002}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 330.005214ms ago: executing program 6 (id=784): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 329.873204ms ago: executing program 2 (id=785): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2a62000, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) 277.285207ms ago: executing program 6 (id=786): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xffffbf41, 0x10, 0x101, 0x200007, 0x18, "ffffff7f87e8d2b791f1bcce26d76d7fcb3679", 0x8, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mlock(&(0x7f00001d3000/0x3000)=nil, 0x3000) open$dir(&(0x7f00000027c0)='./file0\x00', 0x101240, 0x2) getresgid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f00000049c0)) mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) 247.426758ms ago: executing program 2 (id=787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 234.009209ms ago: executing program 6 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x26) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_virtio(0x0, 0x0, 0x0, 0x2210088, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 161.736842ms ago: executing program 2 (id=789): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/class\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/vendor\x00', 0x0, 0x0) read(r1, &(0x7f0000000300), 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.0/device\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x10) 155.180682ms ago: executing program 6 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xc0010117, 0x0, 0x8}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 122.219604ms ago: executing program 2 (id=791): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x10) 65.558977ms ago: executing program 2 (id=792): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8880) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) 0s ago: executing program 2 (id=793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) kernel console output (not intermixed with test programs): .957439][ T1028] ? clear_bhb_loop+0x50/0xa0 [ 51.957467][ T1028] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.957495][ T1028] RIP: 0033:0x7fcff759e159 [ 51.957514][ T1028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.957532][ T1028] RSP: 002b:00007fcff848d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 51.957555][ T1028] RAX: ffffffffffffffda RBX: 00007fcff7825fa0 RCX: 00007fcff759e159 [ 51.957574][ T1028] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 51.957587][ T1028] RBP: 00007fcff763506b R08: 0000000000000000 R09: 0000000000000000 [ 51.957612][ T1028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.957626][ T1028] R13: 00007fcff7826038 R14: 00007fcff7825fa0 R15: 00007fff61e1bb18 [ 51.957645][ T1028] [ 52.275638][ T1032] FAULT_INJECTION: forcing a failure. [ 52.275638][ T1032] name failslab, interval 1, probability 0, space 0, times 0 [ 52.288561][ T1032] CPU: 1 UID: 0 PID: 1032 Comm: syz.2.264 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 52.288602][ T1032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.288615][ T1032] Call Trace: [ 52.288622][ T1032] [ 52.288631][ T1032] __dump_stack+0x21/0x30 [ 52.288668][ T1032] dump_stack_lvl+0x140/0x1c0 [ 52.288698][ T1032] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.288730][ T1032] dump_stack+0x19/0x20 [ 52.288758][ T1032] should_fail_ex+0x3c2/0x510 [ 52.288785][ T1032] should_failslab+0xac/0x100 [ 52.288812][ T1032] kmem_cache_alloc_noprof+0x42/0x410 [ 52.288835][ T1032] ? __kernfs_new_node+0xf1/0x740 [ 52.288864][ T1032] __kernfs_new_node+0xf1/0x740 [ 52.288891][ T1032] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 52.288920][ T1032] ? kernfs_new_node+0x280/0x280 [ 52.288957][ T1032] ? __kasan_check_write+0x18/0x20 [ 52.288980][ T1032] ? down_write+0xee/0x2b0 [ 52.289009][ T1032] ? rpm_resume+0xb92/0x1670 [ 52.289037][ T1032] kernfs_new_node+0x154/0x280 [ 52.289065][ T1032] kernfs_create_link+0xa8/0x200 [ 52.289085][ T1032] sysfs_do_create_link_sd+0x8a/0x120 [ 52.289111][ T1032] sysfs_create_link+0x6c/0x90 [ 52.289134][ T1032] driver_sysfs_add+0x91/0x240 [ 52.289154][ T1032] really_probe+0x178/0x8b0 [ 52.289175][ T1032] __driver_probe_device+0x193/0x280 [ 52.289214][ T1032] driver_probe_device+0x54/0x3f0 [ 52.289236][ T1032] __driver_attach+0x422/0x5e0 [ 52.289258][ T1032] bus_for_each_dev+0x249/0x2d0 [ 52.289285][ T1032] ? __cfi___driver_attach+0x10/0x10 [ 52.289306][ T1032] ? __cfi_bus_for_each_dev+0x10/0x10 [ 52.289333][ T1032] ? __kasan_kmalloc+0x96/0xb0 [ 52.289360][ T1032] ? _raw_spin_unlock+0x45/0x60 [ 52.289381][ T1032] ? klist_add_tail+0x1dd/0x220 [ 52.289414][ T1032] driver_attach+0x46/0x50 [ 52.289433][ T1032] bus_add_driver+0x393/0x730 [ 52.289462][ T1032] driver_register+0x2b7/0x3c0 [ 52.289486][ T1032] usb_gadget_register_driver_owner+0xfc/0x270 [ 52.289514][ T1032] raw_ioctl+0x144c/0x37a0 [ 52.289537][ T1032] ? __cfi_raw_ioctl+0x10/0x10 [ 52.289557][ T1032] ? selinux_file_ioctl+0x732/0x1480 [ 52.289590][ T1032] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 52.289620][ T1032] ? __fget_files+0x2bc/0x330 [ 52.289649][ T1032] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.289692][ T1032] ? security_file_ioctl+0x3e/0x110 [ 52.289713][ T1032] ? __cfi_raw_ioctl+0x10/0x10 [ 52.289732][ T1032] __se_sys_ioctl+0x126/0x1b0 [ 52.289760][ T1032] __x64_sys_ioctl+0x7f/0xa0 [ 52.289787][ T1032] x64_sys_call+0x1878/0x2ee0 [ 52.289807][ T1032] do_syscall_64+0x57/0xf0 [ 52.289827][ T1032] ? clear_bhb_loop+0x50/0xa0 [ 52.289854][ T1032] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.289880][ T1032] RIP: 0033:0x7fcff759ddeb [ 52.289898][ T1032] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 52.289915][ T1032] RSP: 002b:00007fcff848af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.289938][ T1032] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcff759ddeb [ 52.289953][ T1032] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 52.289966][ T1032] RBP: 00007fcff848bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 52.289980][ T1032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.289992][ T1032] R13: 0000200000000100 R14: 0000000000000003 R15: 0000000000000000 [ 52.290009][ T1032] [ 52.290028][ T1032] raw-gadget.0 gadget.2: really_probe: driver_sysfs_add failed [ 52.633899][ T36] audit: type=1400 audit(1790101966.790:269): avc: denied { remount } for pid=1034 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.643146][ T1032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.668727][ T1032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.492292][ T36] audit: type=1400 audit(1790101967.670:270): avc: denied { write } for pid=1072 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.612299][ T842] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 53.668373][ T1075] netlink: 'syz.2.278': attribute type 27 has an invalid length. [ 53.714883][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.722180][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.772262][ T842] usb 2-1: Using ep0 maxpacket: 8 [ 53.782483][ T842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.793655][ T842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.811088][ T842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.852375][ T842] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 53.881795][ T842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.902752][ T842] usb 2-1: config 0 descriptor?? [ 54.921360][ T842] sony 0003:054C:042F.0007: can't set operational mode: step 2 [ 54.937666][ T842] sony 0003:054C:042F.0007: Failed to set controller into operational mode [ 54.956255][ T842] sony 0003:054C:042F.0007: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 54.967663][ T842] sony 0003:054C:042F.0007: failed to claim input [ 54.977089][ T842] usb 2-1: USB disconnect, device number 7 [ 55.000504][ T1112] fido_id[1112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 55.086984][ T1116] kvm: MWAIT instruction emulated as NOP! [ 55.298729][ T36] audit: type=1400 audit(1790101969.520:271): avc: denied { map } for pid=1123 comm="syz.3.299" path="pipe:[2029]" dev="pipefs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 55.343212][ T434] bridge_slave_1: left allmulticast mode [ 55.348949][ T434] bridge_slave_1: left promiscuous mode [ 55.358700][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.366199][ T36] audit: type=1400 audit(1790101969.590:272): avc: denied { read } for pid=1128 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.388259][ T434] bridge_slave_0: left allmulticast mode [ 55.393962][ T434] bridge_slave_0: left promiscuous mode [ 55.399612][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.407116][ T36] audit: type=1400 audit(1790101969.590:273): avc: denied { open } for pid=1128 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.451705][ T36] audit: type=1400 audit(1790101969.590:274): avc: denied { mounton } for pid=1128 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.485888][ T1130] FAULT_INJECTION: forcing a failure. [ 55.485888][ T1130] name failslab, interval 1, probability 0, space 0, times 0 [ 55.528978][ T1130] CPU: 1 UID: 0 PID: 1130 Comm: syz.1.300 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 55.529011][ T1130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.529025][ T1130] Call Trace: [ 55.529032][ T1130] [ 55.529040][ T1130] __dump_stack+0x21/0x30 [ 55.529079][ T1130] dump_stack_lvl+0x140/0x1c0 [ 55.529109][ T1130] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.529147][ T1130] dump_stack+0x19/0x20 [ 55.529182][ T1130] should_fail_ex+0x3c2/0x510 [ 55.529215][ T1130] should_failslab+0xac/0x100 [ 55.529247][ T1130] kmem_cache_alloc_noprof+0x42/0x410 [ 55.529269][ T1130] ? security_inode_alloc+0x51/0x230 [ 55.529299][ T1130] ? __cfi_make_kgid+0x10/0x10 [ 55.529325][ T1130] security_inode_alloc+0x51/0x230 [ 55.529355][ T1130] inode_init_always_gfp+0x756/0x9e0 [ 55.529384][ T1130] ? __cfi_sock_alloc_inode+0x10/0x10 [ 55.529410][ T1130] alloc_inode+0xc5/0x270 [ 55.529442][ T1130] ? bpf_lsm_socket_create+0xd/0x20 [ 55.529472][ T1130] new_inode_pseudo+0x19/0x40 [ 55.529507][ T1130] sock_create_lite+0x8f/0x500 [ 55.529538][ T1130] __netlink_kernel_create+0xcf/0x8a0 [ 55.529577][ T1130] ? __netlink_kernel_create+0x6ff/0x8a0 [ 55.529613][ T1130] ? __cfi___netlink_kernel_create+0x10/0x10 [ 55.529649][ T1130] ? __asan_memcpy+0x5a/0x80 [ 55.529676][ T1130] genl_pernet_init+0xb8/0x170 [ 55.529702][ T1130] ? __cfi_genl_pernet_init+0x10/0x10 [ 55.529727][ T1130] ? rtnetlink_net_init+0xbf/0x140 [ 55.529756][ T1130] ? __cfi_genl_rcv+0x10/0x10 [ 55.529792][ T1130] ? __cfi_genl_bind+0x10/0x10 [ 55.529813][ T1130] ? __cfi_genl_unbind+0x10/0x10 [ 55.529835][ T1130] ? __cfi_genl_release+0x10/0x10 [ 55.529860][ T1130] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 55.529888][ T1130] ? __cfi_rtnetlink_bind+0x10/0x10 [ 55.529918][ T1130] ? __kasan_check_write+0x18/0x20 [ 55.529945][ T1130] ? __mutex_init+0xa6/0x1a0 [ 55.529984][ T1130] ops_init+0x302/0x5d0 [ 55.530011][ T1130] ? __kasan_check_write+0x18/0x20 [ 55.530037][ T1130] ? rwsem_read_trylock+0x275/0x5a0 [ 55.530078][ T1130] setup_net+0x227/0x9b0 [ 55.530101][ T1130] ? copy_net_ns+0xa20/0xa20 [ 55.530125][ T1130] ? down_read_killable+0x7f/0x100 [ 55.530161][ T1130] ? __cfi_down_read_killable+0x10/0x10 [ 55.530198][ T1130] copy_net_ns+0x4fc/0xa20 [ 55.530222][ T1130] create_new_namespaces+0x390/0x6f0 [ 55.530256][ T1130] unshare_nsproxy_namespaces+0x124/0x180 [ 55.530289][ T1130] ksys_unshare+0x4f9/0x920 [ 55.530320][ T1130] ? fput+0x1a4/0x230 [ 55.530355][ T1130] ? __cfi_ksys_unshare+0x10/0x10 [ 55.530389][ T1130] ? __kasan_check_write+0x18/0x20 [ 55.530413][ T1130] __x64_sys_unshare+0x3c/0x50 [ 55.530445][ T1130] x64_sys_call+0x2998/0x2ee0 [ 55.530471][ T1130] do_syscall_64+0x57/0xf0 [ 55.530495][ T1130] ? clear_bhb_loop+0x50/0xa0 [ 55.530528][ T1130] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.530560][ T1130] RIP: 0033:0x7fe6dcb9e159 [ 55.530582][ T1130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.530603][ T1130] RSP: 002b:00007fe6dd9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 55.530632][ T1130] RAX: ffffffffffffffda RBX: 00007fe6dce25fa0 RCX: 00007fe6dcb9e159 [ 55.530653][ T1130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 55.530669][ T1130] RBP: 00007fe6dcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 55.530686][ T1130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.530701][ T1130] R13: 00007fe6dce26038 R14: 00007fe6dce25fa0 R15: 00007ffcbe4426f8 [ 55.530724][ T1130] [ 55.962335][ T434] veth1_macvtap: left promiscuous mode [ 55.968043][ T434] veth0_vlan: left promiscuous mode [ 56.090190][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.097518][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.105898][ T1128] bridge_slave_0: entered allmulticast mode [ 56.112456][ T1128] bridge_slave_0: entered promiscuous mode [ 56.119122][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.126567][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.133708][ T1128] bridge_slave_1: entered allmulticast mode [ 56.140106][ T1128] bridge_slave_1: entered promiscuous mode [ 56.212532][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.219631][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.226950][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.234021][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.277756][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.285386][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.295463][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.302551][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.322036][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.329133][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.350059][ T1128] veth0_vlan: entered promiscuous mode [ 56.364541][ T1128] veth1_macvtap: entered promiscuous mode [ 56.396410][ T36] audit: type=1400 audit(1790101970.620:275): avc: denied { mount } for pid=1128 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.419035][ T36] audit: type=1400 audit(1790101970.620:276): avc: denied { mounton } for pid=1128 comm="syz-executor" path="/root/syzkaller.5M6cmr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.498121][ T36] audit: type=1400 audit(1790101970.720:277): avc: denied { read } for pid=1167 comm="syz.2.309" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.523170][ T36] audit: type=1400 audit(1790101970.720:278): avc: denied { open } for pid=1167 comm="syz.2.309" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.838599][ T1195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'. [ 56.848901][ T1195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'. [ 56.857899][ T1195] Zero length message leads to an empty skb [ 56.947462][ T1206] zram0: detected capacity change from 0 to 8 [ 57.349136][ T1237] kvm_intel: kvm [1236]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 57.487522][ T1249] kvm: emulating exchange as write [ 57.652118][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 57.652135][ T36] audit: type=1400 audit(1790101971.870:287): avc: denied { bind } for pid=1275 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.685713][ T36] audit: type=1400 audit(1790101971.870:288): avc: denied { name_bind } for pid=1275 comm="syz.1.352" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 57.706967][ T36] audit: type=1400 audit(1790101971.870:289): avc: denied { node_bind } for pid=1275 comm="syz.1.352" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 57.839272][ T1295] tipc: Started in network mode [ 57.842368][ T36] audit: type=1400 audit(1790101972.060:290): avc: denied { ioctl } for pid=1294 comm="syz.4.361" path="socket:[9736]" dev="sockfs" ino=9736 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.852539][ T1295] tipc: Node identity c2e7e7f97515, cluster identity 4711 [ 57.878056][ T1295] tipc: Enabled bearer , priority 1 [ 57.890070][ T1294] tipc: Resetting bearer [ 57.897296][ T1294] tipc: Disabling bearer [ 58.012421][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 58.163510][ T9] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 58.174400][ T9] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.187554][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 58.194933][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.204242][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.212278][ T9] usb 3-1: SerialNumber: syz [ 58.218121][ T1289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.262313][ T971] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 58.392285][ T441] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.413339][ T971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.424958][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.435927][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.440149][ T1289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.445906][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.466318][ T971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.475421][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.484343][ T971] usb 4-1: config 0 descriptor?? [ 58.543369][ T441] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.553584][ T441] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 58.563454][ T441] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.578072][ T441] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 58.587181][ T441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.595213][ T441] usb 5-1: Product: syz [ 58.599397][ T441] usb 5-1: Manufacturer: syz [ 58.604060][ T441] usb 5-1: SerialNumber: syz [ 58.609748][ T1313] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 58.617947][ T441] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 58.629243][ T441] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 58.640032][ T441] usbserial_generic 5-1:1.0: generic converter detected [ 58.648038][ T441] usb 5-1: generic converter now attached to ttyUSB0 [ 58.820354][ T441] usb 5-1: USB disconnect, device number 2 [ 58.828141][ T441] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 58.836615][ T441] usbserial_generic 5-1:1.0: device disconnected [ 58.868879][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 58.892130][ T36] audit: type=1400 audit(1790101973.110:291): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.914594][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.922089][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.929791][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.937494][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.945186][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.952782][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.960306][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.968011][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.976148][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.983744][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 58.991237][ T36] audit: type=1400 audit(1790101973.220:292): avc: denied { read } for pid=1319 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.014300][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 59.022040][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 59.029650][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 59.038282][ T36] audit: type=1400 audit(1790101973.220:293): avc: denied { open } for pid=1319 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.063225][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 59.070642][ T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 59.078598][ T971] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 59.078994][ T1289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.086971][ T36] audit: type=1400 audit(1790101973.220:294): avc: denied { getattr } for pid=1319 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.119751][ T1289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.124079][ T971] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.148649][ T971] usb 3-1: USB disconnect, device number 6 [ 59.155124][ T971] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 59.194728][ T36] audit: type=1400 audit(1790101973.420:295): avc: denied { write } for pid=1318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.223823][ T36] audit: type=1400 audit(1790101973.420:296): avc: denied { add_name } for pid=1318 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.270375][ T10] usb 4-1: USB disconnect, device number 7 [ 59.363463][ T1347] FAULT_INJECTION: forcing a failure. [ 59.363463][ T1347] name failslab, interval 1, probability 0, space 0, times 0 [ 59.376261][ T1347] CPU: 1 UID: 0 PID: 1347 Comm: syz.4.371 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 59.376300][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.376331][ T1347] Call Trace: [ 59.376336][ T1347] [ 59.376342][ T1347] __dump_stack+0x21/0x30 [ 59.376391][ T1347] dump_stack_lvl+0x140/0x1c0 [ 59.376433][ T1347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.376463][ T1347] dump_stack+0x19/0x20 [ 59.376484][ T1347] should_fail_ex+0x3c2/0x510 [ 59.376503][ T1347] should_failslab+0xac/0x100 [ 59.376524][ T1347] kmem_cache_alloc_noprof+0x42/0x410 [ 59.376540][ T1347] ? security_inode_alloc+0x51/0x230 [ 59.376563][ T1347] security_inode_alloc+0x51/0x230 [ 59.376583][ T1347] inode_init_always_gfp+0x756/0x9e0 [ 59.376603][ T1347] ? __cfi_proc_alloc_inode+0x10/0x10 [ 59.376619][ T1347] alloc_inode+0xc5/0x270 [ 59.376639][ T1347] new_inode+0x25/0x1e0 [ 59.376659][ T1347] proc_pid_make_inode+0x25/0x140 [ 59.376677][ T1347] proc_map_files_instantiate+0x79/0x180 [ 59.376692][ T1347] proc_fill_cache+0x1fe/0x410 [ 59.376711][ T1347] ? __cfi_proc_map_files_instantiate+0x10/0x10 [ 59.376727][ T1347] ? __cfi_proc_fill_cache+0x10/0x10 [ 59.376745][ T1347] ? __cfi_snprintf+0x10/0x10 [ 59.376770][ T1347] proc_map_files_readdir+0x7ae/0x9d0 [ 59.376786][ T1347] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 59.376801][ T1347] ? rwsem_read_trylock+0x275/0x5a0 [ 59.376826][ T1347] ? __cfi_selinux_file_permission+0x10/0x10 [ 59.376844][ T1347] ? down_read_killable+0x7f/0x100 [ 59.376865][ T1347] ? __cfi_down_read_killable+0x10/0x10 [ 59.376885][ T1347] ? bpf_lsm_file_permission+0xd/0x20 [ 59.376909][ T1347] iterate_dir+0x1fa/0x5c0 [ 59.376929][ T1347] __se_sys_getdents64+0xf6/0x250 [ 59.376949][ T1347] ? fput+0x1a4/0x230 [ 59.376969][ T1347] ? __x64_sys_getdents64+0xa0/0xa0 [ 59.376988][ T1347] ? __cfi_filldir64+0x10/0x10 [ 59.377009][ T1347] ? __kasan_check_write+0x18/0x20 [ 59.377025][ T1347] ? fpregs_restore_userregs+0x11c/0x260 [ 59.377045][ T1347] __x64_sys_getdents64+0x7f/0xa0 [ 59.377065][ T1347] x64_sys_call+0x27d0/0x2ee0 [ 59.377079][ T1347] do_syscall_64+0x57/0xf0 [ 59.377093][ T1347] ? clear_bhb_loop+0x50/0xa0 [ 59.377112][ T1347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.377130][ T1347] RIP: 0033:0x7f72c8f9e159 [ 59.377143][ T1347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.377156][ T1347] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 59.377173][ T1347] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 59.377185][ T1347] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000004 [ 59.377195][ T1347] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 59.377204][ T1347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.377213][ T1347] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 59.377226][ T1347] [ 59.745218][ T1356] FAULT_INJECTION: forcing a failure. [ 59.745218][ T1356] name failslab, interval 1, probability 0, space 0, times 0 [ 59.761624][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.1.376 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 59.761666][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.761683][ T1356] Call Trace: [ 59.761695][ T1356] [ 59.761707][ T1356] __dump_stack+0x21/0x30 [ 59.761755][ T1356] dump_stack_lvl+0x140/0x1c0 [ 59.761796][ T1356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.761840][ T1356] dump_stack+0x19/0x20 [ 59.761881][ T1356] should_fail_ex+0x3c2/0x510 [ 59.761918][ T1356] should_failslab+0xac/0x100 [ 59.761957][ T1356] kmem_cache_alloc_noprof+0x42/0x410 [ 59.761988][ T1356] ? security_inode_alloc+0x51/0x230 [ 59.762027][ T1356] ? __cfi_make_kgid+0x10/0x10 [ 59.762061][ T1356] security_inode_alloc+0x51/0x230 [ 59.762099][ T1356] inode_init_always_gfp+0x756/0x9e0 [ 59.762137][ T1356] ? __cfi_sock_alloc_inode+0x10/0x10 [ 59.762170][ T1356] alloc_inode+0xc5/0x270 [ 59.762207][ T1356] ? bpf_lsm_socket_create+0xd/0x20 [ 59.762245][ T1356] new_inode_pseudo+0x19/0x40 [ 59.762283][ T1356] sock_create_lite+0x8f/0x500 [ 59.762319][ T1356] __netlink_kernel_create+0xcf/0x8a0 [ 59.762360][ T1356] ? __cfi___netlink_kernel_create+0x10/0x10 [ 59.762399][ T1356] ? __asan_memcpy+0x5a/0x80 [ 59.762427][ T1356] rtnetlink_net_init+0xb2/0x140 [ 59.762468][ T1356] ? __cfi_rtnetlink_net_init+0x10/0x10 [ 59.762501][ T1356] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 59.762533][ T1356] ? __cfi_rtnetlink_bind+0x10/0x10 [ 59.762567][ T1356] ? __kasan_check_write+0x18/0x20 [ 59.762594][ T1356] ? __mutex_init+0xa6/0x1a0 [ 59.762635][ T1356] ops_init+0x302/0x5d0 [ 59.762666][ T1356] ? __kasan_check_write+0x18/0x20 [ 59.762698][ T1356] ? rwsem_read_trylock+0x275/0x5a0 [ 59.762741][ T1356] setup_net+0x227/0x9b0 [ 59.762768][ T1356] ? copy_net_ns+0xa20/0xa20 [ 59.762792][ T1356] ? down_read_killable+0x7f/0x100 [ 59.762831][ T1356] ? __cfi_down_read_killable+0x10/0x10 [ 59.762872][ T1356] copy_net_ns+0x4fc/0xa20 [ 59.762899][ T1356] create_new_namespaces+0x390/0x6f0 [ 59.762943][ T1356] unshare_nsproxy_namespaces+0x124/0x180 [ 59.762987][ T1356] ksys_unshare+0x4f9/0x920 [ 59.763026][ T1356] ? fput+0x1a4/0x230 [ 59.763065][ T1356] ? __cfi_ksys_unshare+0x10/0x10 [ 59.763102][ T1356] ? __kasan_check_write+0x18/0x20 [ 59.763130][ T1356] __x64_sys_unshare+0x3c/0x50 [ 59.763169][ T1356] x64_sys_call+0x2998/0x2ee0 [ 59.763198][ T1356] do_syscall_64+0x57/0xf0 [ 59.763225][ T1356] ? clear_bhb_loop+0x50/0xa0 [ 59.763259][ T1356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.763292][ T1356] RIP: 0033:0x7fe6dcb9e159 [ 59.763318][ T1356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.763342][ T1356] RSP: 002b:00007fe6dd9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 59.763371][ T1356] RAX: ffffffffffffffda RBX: 00007fe6dce25fa0 RCX: 00007fe6dcb9e159 [ 59.763394][ T1356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 59.763411][ T1356] RBP: 00007fe6dcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 59.763433][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.763456][ T1356] R13: 00007fe6dce26038 R14: 00007fe6dce25fa0 R15: 00007ffcbe4426f8 [ 59.763495][ T1356] [ 60.239479][ T1382] bridge0: entered allmulticast mode [ 60.689840][ T1418] kvm: kvm [1416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 60.706862][ T1418] kvm: kvm [1416]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 60.838930][ T1436] tipc: Enabled bearer , priority 10 [ 60.846686][ T1435] tipc: Resetting bearer [ 60.860952][ T1435] tipc: Disabling bearer [ 60.921269][ T1446] FAULT_INJECTION: forcing a failure. [ 60.921269][ T1446] name failslab, interval 1, probability 0, space 0, times 0 [ 60.933951][ T1446] CPU: 1 UID: 0 PID: 1446 Comm: syz.2.413 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 60.933987][ T1446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.934002][ T1446] Call Trace: [ 60.934010][ T1446] [ 60.934018][ T1446] __dump_stack+0x21/0x30 [ 60.934057][ T1446] dump_stack_lvl+0x140/0x1c0 [ 60.934091][ T1446] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.934125][ T1446] ? __kasan_check_write+0x18/0x20 [ 60.934150][ T1446] dump_stack+0x19/0x20 [ 60.934179][ T1446] should_fail_ex+0x3c2/0x510 [ 60.934207][ T1446] should_failslab+0xac/0x100 [ 60.934233][ T1446] kmem_cache_alloc_node_noprof+0x45/0x420 [ 60.934259][ T1446] ? __alloc_skb+0x10c/0x360 [ 60.934286][ T1446] __alloc_skb+0x10c/0x360 [ 60.934313][ T1446] tipc_buf_acquire+0x2f/0xe0 [ 60.934357][ T1446] tipc_named_withdraw+0x229/0x7c0 [ 60.934379][ T1446] tipc_nametbl_withdraw+0x174/0x370 [ 60.934404][ T1446] tipc_release+0x136d/0x1c40 [ 60.934427][ T1446] ? vfs_write+0xbcf/0xfd0 [ 60.934450][ T1446] ? __cfi_tipc_release+0x10/0x10 [ 60.934471][ T1446] ? __kasan_check_write+0x18/0x20 [ 60.934492][ T1446] ? down_write+0xee/0x2b0 [ 60.934519][ T1446] ? __cfi_down_write+0x10/0x10 [ 60.934545][ T1446] ? mutex_unlock+0x90/0x240 [ 60.934571][ T1446] sock_close+0xb7/0x220 [ 60.934591][ T1446] ? __cfi_sock_close+0x10/0x10 [ 60.934611][ T1446] __fput+0x208/0xa30 [ 60.934642][ T1446] __fput_sync+0x4a/0x70 [ 60.934670][ T1446] __se_sys_close+0x172/0x1f0 [ 60.934709][ T1446] __x64_sys_close+0x3c/0x60 [ 60.934730][ T1446] x64_sys_call+0x2560/0x2ee0 [ 60.934751][ T1446] do_syscall_64+0x57/0xf0 [ 60.934770][ T1446] ? clear_bhb_loop+0x50/0xa0 [ 60.934800][ T1446] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.934825][ T1446] RIP: 0033:0x7fcff759e159 [ 60.934843][ T1446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.934874][ T1446] RSP: 002b:00007fcff848d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 60.934898][ T1446] RAX: ffffffffffffffda RBX: 00007fcff7825fa0 RCX: 00007fcff759e159 [ 60.934916][ T1446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.934929][ T1446] RBP: 00007fcff763506b R08: 0000000000000000 R09: 0000000000000000 [ 60.934943][ T1446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.934957][ T1446] R13: 00007fcff7826038 R14: 00007fcff7825fa0 R15: 00007fff61e1bb18 [ 60.934976][ T1446] [ 60.934986][ T1446] tipc: Withdrawal distribution failure [ 60.964538][ T1451] FAULT_INJECTION: forcing a failure. [ 60.964538][ T1451] name failslab, interval 1, probability 0, space 0, times 0 [ 61.200252][ T1451] CPU: 1 UID: 0 PID: 1451 Comm: syz.4.415 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 61.200290][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.200304][ T1451] Call Trace: [ 61.200311][ T1451] [ 61.200321][ T1451] __dump_stack+0x21/0x30 [ 61.200356][ T1451] dump_stack_lvl+0x140/0x1c0 [ 61.200387][ T1451] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.200419][ T1451] dump_stack+0x19/0x20 [ 61.200446][ T1451] should_fail_ex+0x3c2/0x510 [ 61.200473][ T1451] should_failslab+0xac/0x100 [ 61.200501][ T1451] __kmalloc_cache_noprof+0x41/0x470 [ 61.200528][ T1451] ? kernfs_get_tree+0xcc/0x9a0 [ 61.200554][ T1451] kernfs_get_tree+0xcc/0x9a0 [ 61.200579][ T1451] ? selinux_perf_event_alloc+0x110/0x110 [ 61.200603][ T1451] ? __cfi_kernfs_get_tree+0x10/0x10 [ 61.200627][ T1451] ? futex_wait+0x2b8/0x7c0 [ 61.200649][ T1451] ? __cfi_futex_wait+0x10/0x10 [ 61.200672][ T1451] cgroup_do_get_tree+0xf8/0x5b0 [ 61.200696][ T1451] ? bpf_lsm_capable+0xd/0x20 [ 61.200728][ T1451] cgroup_get_tree+0xea/0x2a0 [ 61.200769][ T1451] vfs_get_tree+0x9e/0x290 [ 61.200793][ T1451] vfs_cmd_create+0xb0/0x220 [ 61.200813][ T1451] ? vfs_fsconfig_locked+0x6c/0x350 [ 61.200835][ T1451] vfs_fsconfig_locked+0x76/0x350 [ 61.200855][ T1451] __se_sys_fsconfig+0x72d/0x870 [ 61.200877][ T1451] ? __x64_sys_fsconfig+0xf0/0xf0 [ 61.200900][ T1451] ? __kasan_check_write+0x18/0x20 [ 61.200923][ T1451] ? fpregs_restore_userregs+0x11c/0x260 [ 61.200953][ T1451] __x64_sys_fsconfig+0xc3/0xf0 [ 61.200975][ T1451] x64_sys_call+0x11bb/0x2ee0 [ 61.200995][ T1451] do_syscall_64+0x57/0xf0 [ 61.201017][ T1451] ? clear_bhb_loop+0x50/0xa0 [ 61.201045][ T1451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.201072][ T1451] RIP: 0033:0x7f72c8f9e159 [ 61.201090][ T1451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.201111][ T1451] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 61.201136][ T1451] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 61.201153][ T1451] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 61.201167][ T1451] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 61.201181][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.201195][ T1451] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 61.201214][ T1451] [ 62.232294][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.301096][ T1520] syzkaller1: entered promiscuous mode [ 62.307080][ T1520] syzkaller1: entered allmulticast mode [ 62.404763][ T10] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 62.422261][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.433986][ T10] usb 5-1: Product: syz [ 62.438186][ T10] usb 5-1: Manufacturer: syz [ 62.466221][ T10] usb 5-1: SerialNumber: syz [ 62.666846][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 62.666877][ T36] audit: type=1400 audit(1790101976.890:305): avc: denied { setopt } for pid=1559 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.684169][ T1505] rust_binder: 1504:1505 error while translating object: ENOENT [ 62.692415][ T36] audit: type=1400 audit(1790101976.900:306): avc: denied { map } for pid=1504 comm="syz.4.436" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.700475][ T1505] rust_binder: Failure in copy_transaction_data: ENOENT [ 62.723643][ T1505] rust_binder: 1504:1505 transaction call to 1504:0 failed ENOENT, code 0 size 96-24 [ 62.725358][ T36] audit: type=1400 audit(1790101976.910:307): avc: denied { call } for pid=1504 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.738840][ T971] rust_binder: 1504: undelivered TRANSACTION_ERROR: 29201 [ 62.770171][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 62.783211][ T10] usb 5-1: USB disconnect, device number 3 [ 62.798740][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.858138][ T1564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438865345 (156087382080 ns) > initial count (116419789056 ns). Using initial count to start timer. [ 62.878047][ T1564] kvm: kvm [1563]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.886950][ T1564] kvm: kvm [1563]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 62.892396][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 62.908901][ T1564] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 63.052314][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 63.058584][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 63.066741][ T9] usb 2-1: config 0 has no interface number 0 [ 63.073559][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 63.083742][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 63.095774][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 63.104938][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.112999][ T9] usb 2-1: Product: syz [ 63.117175][ T9] usb 2-1: Manufacturer: syz [ 63.121789][ T9] usb 2-1: SerialNumber: syz [ 63.127380][ T9] usb 2-1: config 0 descriptor?? [ 63.132989][ T1557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.140214][ T1557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.314004][ T1579] FAULT_INJECTION: forcing a failure. [ 63.314004][ T1579] name failslab, interval 1, probability 0, space 0, times 0 [ 63.326868][ T1579] CPU: 0 UID: 0 PID: 1579 Comm: syz.4.466 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 63.326901][ T1579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.326915][ T1579] Call Trace: [ 63.326922][ T1579] [ 63.326931][ T1579] __dump_stack+0x21/0x30 [ 63.326970][ T1579] dump_stack_lvl+0x140/0x1c0 [ 63.326992][ T1579] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.327013][ T1579] ? avc_has_perm_noaudit+0x289/0x360 [ 63.327041][ T1579] dump_stack+0x19/0x20 [ 63.327064][ T1579] should_fail_ex+0x3c2/0x510 [ 63.327085][ T1579] should_failslab+0xac/0x100 [ 63.327106][ T1579] kmem_cache_alloc_noprof+0x42/0x410 [ 63.327123][ T1579] ? alloc_vfsmnt+0x31/0x610 [ 63.327146][ T1579] alloc_vfsmnt+0x31/0x610 [ 63.327168][ T1579] vfs_create_mount+0x7e/0x3d0 [ 63.327191][ T1579] __se_sys_fsmount+0x408/0x7d0 [ 63.327207][ T1579] ? fput+0x1a4/0x230 [ 63.327228][ T1579] ? __x64_sys_fsmount+0xa0/0xa0 [ 63.327246][ T1579] ? __kasan_check_write+0x18/0x20 [ 63.327261][ T1579] ? fpregs_restore_userregs+0x11c/0x260 [ 63.327281][ T1579] __x64_sys_fsmount+0x7f/0xa0 [ 63.327298][ T1579] x64_sys_call+0x2d70/0x2ee0 [ 63.327312][ T1579] do_syscall_64+0x57/0xf0 [ 63.327327][ T1579] ? clear_bhb_loop+0x50/0xa0 [ 63.327346][ T1579] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.327364][ T1579] RIP: 0033:0x7f72c8f9e159 [ 63.327377][ T1579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.327390][ T1579] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 63.327407][ T1579] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 63.327420][ T1579] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003 [ 63.327429][ T1579] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 63.327439][ T1579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.327448][ T1579] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 63.327462][ T1579] [ 63.538900][ T1557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.546441][ T1557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.754931][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 63.792305][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.942318][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 63.948497][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 63.956948][ T10] usb 5-1: config 1 has no interface number 0 [ 63.963205][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 63.973210][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.983291][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 63.991574][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 64.000784][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 64.009009][ T10] usb 5-1: Product: syz [ 64.013320][ T10] usb 5-1: Manufacturer: syz [ 64.018000][ T10] usb 5-1: SerialNumber: syz [ 64.023934][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.032979][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.048222][ T1588] device-mapper: table: 252:1: zero-length target [ 64.054839][ T1588] device-mapper: ioctl: error adding target to table [ 64.463844][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.471050][ T1581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.637784][ T1627] kvm_intel: kvm [1626]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xd8ea [ 64.648826][ T1627] kvm: kvm [1626]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xbd2c [ 64.657710][ T1627] kvm: kvm [1626]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x38c5 [ 64.758423][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 64.775392][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 64.792294][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 64.801304][ T9] usb 2-1: USB disconnect, device number 8 [ 64.818028][ T1637] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 64.827881][ T1637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 64.907834][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 64.920961][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 64.944718][ T10] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:7f:af:a2:2b:17 [ 65.147002][ T31] usb 5-1: USB disconnect, device number 4 [ 65.158605][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 65.206079][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 65.221249][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 65.251622][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 65.269518][ T36] audit: type=1400 audit(1790101979.490:308): avc: denied { write } for pid=1666 comm="syz.3.493" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 65.332402][ T36] audit: type=1400 audit(1790101979.490:309): avc: denied { open } for pid=1666 comm="syz.3.493" path="/121/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 65.380091][ T1670] 9pnet: p9_errstr2errno: server reported unknown error  [ 65.402306][ T36] audit: type=1400 audit(1790101979.490:310): avc: denied { read } for pid=1666 comm="syz.3.493" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 65.428192][ T1685] device-mapper: ioctl: Unsupported message sent to DM core: @ [ 65.437359][ T36] audit: type=1400 audit(1790101979.540:311): avc: denied { create } for pid=1671 comm="syz.3.495" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.467778][ T36] audit: type=1400 audit(1790101979.550:312): avc: denied { read write } for pid=1671 comm="syz.3.495" name="file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.496662][ T36] audit: type=1400 audit(1790101979.550:313): avc: denied { open } for pid=1671 comm="syz.3.495" path="/122/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.539581][ T36] audit: type=1400 audit(1790101979.550:314): avc: denied { ioctl } for pid=1671 comm="syz.3.495" path="/122/file0" dev="tmpfs" ino=682 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.703283][ T31] kernel read not supported for file /ppp (pid: 31 comm: kworker/1:0) [ 65.804462][ T1711] syzkaller0: entered promiscuous mode [ 65.810000][ T1711] syzkaller0: entered allmulticast mode [ 65.816916][ T1711] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 65.845989][ T1713] syzkaller1: entered promiscuous mode [ 65.851659][ T1713] syzkaller1: entered allmulticast mode [ 65.972866][ T1720] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 66.015916][ T1724] syzkaller1: entered promiscuous mode [ 66.021592][ T1724] syzkaller1: entered allmulticast mode [ 66.421209][ T1750] FAULT_INJECTION: forcing a failure. [ 66.421209][ T1750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.434672][ T1750] CPU: 1 UID: 0 PID: 1750 Comm: syz.4.522 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 66.434708][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.434724][ T1750] Call Trace: [ 66.434731][ T1750] [ 66.434740][ T1750] __dump_stack+0x21/0x30 [ 66.434776][ T1750] dump_stack_lvl+0x140/0x1c0 [ 66.434809][ T1750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.434842][ T1750] ? __cfi___switch_to+0x10/0x10 [ 66.434876][ T1750] dump_stack+0x19/0x20 [ 66.434908][ T1750] should_fail_ex+0x3c2/0x510 [ 66.434945][ T1750] should_fail_alloc_page+0xec/0x110 [ 66.434976][ T1750] __alloc_pages_noprof+0x1c0/0x7e0 [ 66.435012][ T1750] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.435048][ T1750] ? __sched_text_start+0x10/0x10 [ 66.435072][ T1750] ? plist_add+0x4d4/0x570 [ 66.435093][ T1750] __folio_alloc_noprof+0x14/0x80 [ 66.435125][ T1750] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 66.435157][ T1750] ? shmem_replace_folio+0x9b0/0x9b0 [ 66.435186][ T1750] ? shmem_huge_global_enabled+0x2da/0x360 [ 66.435214][ T1750] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 66.435251][ T1750] shmem_get_folio_gfp+0x5cd/0x12e0 [ 66.435281][ T1750] ? shmem_get_folio+0xc0/0xc0 [ 66.435307][ T1750] ? __cfi_folio_unlock+0x10/0x10 [ 66.435333][ T1750] ? __kasan_check_read+0x15/0x20 [ 66.435359][ T1750] ? noop_dirty_folio+0x88/0xa0 [ 66.435403][ T1750] shmem_fallocate+0x8df/0xcb0 [ 66.435440][ T1750] ? __cfi_shmem_fallocate+0x10/0x10 [ 66.435488][ T1750] ? __se_sys_futex+0x13c/0x320 [ 66.435523][ T1750] ? fput+0x1a4/0x230 [ 66.435554][ T1750] vfs_fallocate+0x530/0x620 [ 66.435587][ T1750] __x64_sys_fallocate+0xc3/0x110 [ 66.435636][ T1750] x64_sys_call+0x2e48/0x2ee0 [ 66.435659][ T1750] do_syscall_64+0x57/0xf0 [ 66.435681][ T1750] ? clear_bhb_loop+0x50/0xa0 [ 66.435711][ T1750] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.435738][ T1750] RIP: 0033:0x7f72c8f9e159 [ 66.435758][ T1750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.435777][ T1750] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 66.435802][ T1750] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 66.435820][ T1750] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 66.435834][ T1750] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 66.435849][ T1750] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 66.435863][ T1750] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 66.435882][ T1750] [ 66.702275][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 66.761443][ T1761] FAULT_INJECTION: forcing a failure. [ 66.761443][ T1761] name failslab, interval 1, probability 0, space 0, times 0 [ 66.774355][ T1761] CPU: 0 UID: 0 PID: 1761 Comm: syz.4.527 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 66.774380][ T1761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.774390][ T1761] Call Trace: [ 66.774395][ T1761] [ 66.774401][ T1761] __dump_stack+0x21/0x30 [ 66.774429][ T1761] dump_stack_lvl+0x140/0x1c0 [ 66.774452][ T1761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.774474][ T1761] ? futex_wake+0x666/0x950 [ 66.774490][ T1761] dump_stack+0x19/0x20 [ 66.774511][ T1761] should_fail_ex+0x3c2/0x510 [ 66.774531][ T1761] should_failslab+0xac/0x100 [ 66.774551][ T1761] kmem_cache_alloc_noprof+0x42/0x410 [ 66.774568][ T1761] ? prepare_creds+0x47/0x6b0 [ 66.774587][ T1761] prepare_creds+0x47/0x6b0 [ 66.774604][ T1761] cap_task_prctl+0x58c/0x9c0 [ 66.774621][ T1761] security_task_prctl+0x99/0x2e0 [ 66.774640][ T1761] __se_sys_prctl+0xd4/0x1480 [ 66.774657][ T1761] ? __x64_sys_prctl+0xf0/0xf0 [ 66.774672][ T1761] ? __kasan_check_write+0x18/0x20 [ 66.774688][ T1761] ? fpregs_restore_userregs+0x11c/0x260 [ 66.774722][ T1761] __x64_sys_prctl+0xc3/0xf0 [ 66.774739][ T1761] x64_sys_call+0x2614/0x2ee0 [ 66.774754][ T1761] do_syscall_64+0x57/0xf0 [ 66.774769][ T1761] ? clear_bhb_loop+0x50/0xa0 [ 66.774789][ T1761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.774809][ T1761] RIP: 0033:0x7f72c8f9e159 [ 66.774822][ T1761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.774835][ T1761] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 66.774852][ T1761] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 66.774864][ T1761] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 66.774874][ T1761] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 66.774884][ T1761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.774899][ T1761] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 66.774913][ T1761] [ 67.203427][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 67.214948][ T10] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 67.224209][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.238392][ T10] usb 2-1: Product: syz [ 67.243034][ T10] usb 2-1: Manufacturer: syz [ 67.247677][ T10] usb 2-1: SerialNumber: syz [ 67.255277][ T1744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.522285][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 67.665541][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 67.683570][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.694725][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.705412][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 67.716270][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.726005][ T31] usb 3-1: config 0 descriptor?? [ 67.935923][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 67.941978][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 67.950708][ T31] usb 3-1: USB disconnect, device number 7 [ 68.016087][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 68.016104][ T36] audit: type=1400 audit(1790101982.240:319): avc: denied { read write } for pid=1743 comm="syz.1.520" name="lp0" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 68.045776][ T36] audit: type=1400 audit(1790101982.240:320): avc: denied { open } for pid=1743 comm="syz.1.520" path="/dev/usb/lp0" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 68.245288][ T36] audit: type=1400 audit(1790101982.470:321): avc: denied { connect } for pid=1809 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.265205][ T36] audit: type=1400 audit(1790101982.500:322): avc: denied { write } for pid=1809 comm="syz.4.542" laddr=fe80::f062:9bff:feb8:4aff lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.310025][ T36] audit: type=1400 audit(1790101982.530:323): avc: denied { mounton } for pid=1813 comm="syz.4.544" path="/66/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.402330][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 68.553359][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.564352][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.574160][ T842] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 68.581924][ T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 68.591102][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.600027][ T31] usb 3-1: config 0 descriptor?? [ 68.794438][ T842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.802811][ T842] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 68.810517][ T842] usb 4-1: can't read configurations, error -71 [ 69.018412][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.025482][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.032529][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.039505][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.046497][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.053749][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.060727][ T31] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 69.068429][ T31] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 69.217939][ T31] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 69.264715][ T310] usb 2-1: USB disconnect, device number 9 [ 69.281169][ T310] usblp0: removed [ 69.363874][ T1839] FAULT_INJECTION: forcing a failure. [ 69.363874][ T1839] name failslab, interval 1, probability 0, space 0, times 0 [ 69.377103][ T1839] CPU: 0 UID: 0 PID: 1839 Comm: syz.4.552 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 69.377138][ T1839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.377153][ T1839] Call Trace: [ 69.377161][ T1839] [ 69.377170][ T1839] __dump_stack+0x21/0x30 [ 69.377208][ T1839] dump_stack_lvl+0x140/0x1c0 [ 69.377240][ T1839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.377274][ T1839] dump_stack+0x19/0x20 [ 69.377304][ T1839] should_fail_ex+0x3c2/0x510 [ 69.377332][ T1839] should_failslab+0xac/0x100 [ 69.377362][ T1839] kmem_cache_alloc_node_noprof+0x45/0x420 [ 69.377389][ T1839] ? __alloc_skb+0x10c/0x360 [ 69.377417][ T1839] __alloc_skb+0x10c/0x360 [ 69.377446][ T1839] br_info_notify+0xb2/0x180 [ 69.377475][ T1839] br_ifinfo_notify+0x2e/0x40 [ 69.377501][ T1839] br_device_event+0x792/0x840 [ 69.377537][ T1839] ? __cfi_br_device_event+0x10/0x10 [ 69.377558][ T1839] ? packet_notifier+0xae0/0xb90 [ 69.377609][ T1839] ? addrconf_notify+0x44b/0xeb0 [ 69.377631][ T1839] ? ipv6_mc_netdev_event+0x85/0x4c0 [ 69.377654][ T1839] ? __cfi_br_device_event+0x10/0x10 [ 69.377684][ T1839] notifier_call_chain+0x106/0x2b0 [ 69.377701][ T1839] raw_notifier_call_chain+0x31/0x40 [ 69.377717][ T1839] call_netdevice_notifiers+0x11d/0x1a0 [ 69.377761][ T1839] ? __cfi_call_netdevice_notifiers+0x10/0x10 [ 69.377792][ T1839] ? dev_ifsioc+0x640/0xc10 [ 69.377826][ T1839] ? __asan_memcpy+0x5a/0x80 [ 69.377844][ T1839] dev_ifsioc+0x64d/0xc10 [ 69.377864][ T1839] dev_ioctl+0x9c1/0x1000 [ 69.377901][ T1839] sock_do_ioctl+0x249/0x330 [ 69.377936][ T1839] ? sock_show_fdinfo+0xd0/0xd0 [ 69.377965][ T1839] ? file_init_path+0x434/0x590 [ 69.377995][ T1839] ? __cfi_do_futex+0x10/0x10 [ 69.378016][ T1839] ? alloc_file_pseudo+0x191/0x1f0 [ 69.378054][ T1839] sock_ioctl+0x568/0x7e0 [ 69.378075][ T1839] ? __cfi_sock_ioctl+0x10/0x10 [ 69.378094][ T1839] ? __fget_files+0x2bc/0x330 [ 69.378125][ T1839] ? bpf_lsm_file_ioctl+0xd/0x20 [ 69.378146][ T1839] ? security_file_ioctl+0x3e/0x110 [ 69.378161][ T1839] ? __cfi_sock_ioctl+0x10/0x10 [ 69.378175][ T1839] __se_sys_ioctl+0x126/0x1b0 [ 69.378216][ T1839] __x64_sys_ioctl+0x7f/0xa0 [ 69.378242][ T1839] x64_sys_call+0x1878/0x2ee0 [ 69.378261][ T1839] do_syscall_64+0x57/0xf0 [ 69.378284][ T1839] ? clear_bhb_loop+0x50/0xa0 [ 69.378305][ T1839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.378325][ T1839] RIP: 0033:0x7f72c8f9e159 [ 69.378355][ T1839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.378374][ T1839] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.378396][ T1839] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 69.378412][ T1839] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005 [ 69.378430][ T1839] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 69.378440][ T1839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.378452][ T1839] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 69.378466][ T1839] [ 69.419917][ T31] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 69.701998][ T31] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 69.712758][ T31] usb 3-1: USB disconnect, device number 8 [ 69.897449][ T1850] syz.4.557 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 69.910085][ T1850] CPU: 0 UID: 0 PID: 1850 Comm: syz.4.557 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 69.910118][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.910132][ T1850] Call Trace: [ 69.910139][ T1850] [ 69.910146][ T1850] __dump_stack+0x21/0x30 [ 69.910182][ T1850] dump_stack_lvl+0x140/0x1c0 [ 69.910211][ T1850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.910240][ T1850] ? ___ratelimit+0x41c/0x5c0 [ 69.910263][ T1850] ? __kasan_check_write+0x18/0x20 [ 69.910287][ T1850] dump_stack+0x19/0x20 [ 69.910313][ T1850] dump_header+0xd9/0x460 [ 69.910341][ T1850] oom_kill_process+0x35d/0x640 [ 69.910367][ T1850] out_of_memory+0x5d1/0xa20 [ 69.910392][ T1850] ? __cfi_out_of_memory+0x10/0x10 [ 69.910415][ T1850] ? mutex_lock_killable+0x97/0x1d0 [ 69.910443][ T1850] ? __cfi_mutex_lock_killable+0x10/0x10 [ 69.910479][ T1850] mem_cgroup_out_of_memory+0x2c5/0x390 [ 69.910502][ T1850] ? css_next_descendant_pre+0x1ec/0x210 [ 69.910529][ T1850] ? __kasan_check_write+0x18/0x20 [ 69.910550][ T1850] ? drain_obj_stock+0xec0/0xec0 [ 69.910575][ T1850] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 69.910598][ T1850] try_charge_memcg+0x925/0xe10 [ 69.910627][ T1850] ? static_key_count+0x45/0x70 [ 69.910656][ T1850] ? lruvec_init+0x1f1/0x280 [ 69.910680][ T1850] ? __cfi_try_charge_memcg+0x10/0x10 [ 69.910708][ T1850] ? __alloc_pages_noprof+0x35a/0x7e0 [ 69.910737][ T1850] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.910769][ T1850] __mem_cgroup_charge+0xfc/0x420 [ 69.910789][ T1850] ? folio_add_lru+0x116/0x400 [ 69.910815][ T1850] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 69.910850][ T1850] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 69.910871][ T1850] ? shmem_replace_folio+0x9b0/0x9b0 [ 69.910890][ T1850] ? shmem_huge_global_enabled+0x2da/0x360 [ 69.910907][ T1850] ? shmem_allowable_huge_orders+0x405/0x430 [ 69.910924][ T1850] shmem_get_folio_gfp+0x5cd/0x12e0 [ 69.910942][ T1850] ? shmem_get_folio+0xc0/0xc0 [ 69.910958][ T1850] ? __call_rcu_common+0x53c/0x710 [ 69.910977][ T1850] ? __cfi_filemap_map_pages+0x10/0x10 [ 69.910997][ T1850] shmem_fault+0x17d/0x350 [ 69.911015][ T1850] do_pte_missing+0x364c/0x4440 [ 69.911035][ T1850] ? put_task_struct_rcu_user+0x7f/0xb0 [ 69.911055][ T1850] ? finish_task_switch+0x325/0x770 [ 69.911075][ T1850] ? pte_marker_clear+0x1b0/0x1b0 [ 69.911093][ T1850] ? __schedule+0x149e/0x20b0 [ 69.911110][ T1850] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 69.911125][ T1850] handle_mm_fault+0x1189/0x1ba0 [ 69.911142][ T1850] ? __kasan_check_write+0x18/0x20 [ 69.911159][ T1850] ? __cfi_handle_mm_fault+0x10/0x10 [ 69.911178][ T1850] ? __get_user_pages+0xde6/0x22d0 [ 69.911198][ T1850] __get_user_pages+0x114b/0x22d0 [ 69.911220][ T1850] ? populate_vma_page_range+0x220/0x220 [ 69.911239][ T1850] ? down_read+0x7f/0xe0 [ 69.911257][ T1850] ? __cfi_down_read+0x10/0x10 [ 69.911276][ T1850] __mm_populate+0x300/0x440 [ 69.911295][ T1850] vm_mmap_pgoff+0x426/0x4b0 [ 69.911310][ T1850] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 69.911324][ T1850] ? __x64_sys_futex+0x110/0x110 [ 69.911344][ T1850] ksys_mmap_pgoff+0xfa/0x1e0 [ 69.911359][ T1850] ? __kasan_check_write+0x18/0x20 [ 69.911374][ T1850] __x64_sys_mmap+0x121/0x140 [ 69.911388][ T1850] x64_sys_call+0x13bf/0x2ee0 [ 69.911401][ T1850] do_syscall_64+0x57/0xf0 [ 69.911415][ T1850] ? clear_bhb_loop+0x50/0xa0 [ 69.911433][ T1850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.911450][ T1850] RIP: 0033:0x7f72c8f9e159 [ 69.911467][ T1850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.911480][ T1850] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.911497][ T1850] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 69.911508][ T1850] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 69.911518][ T1850] RBP: 00007f72c903506b R08: ffffffffffffffff R09: 0000000000000000 [ 69.911528][ T1850] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000000 [ 69.911537][ T1850] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 69.911550][ T1850] [ 69.911629][ T1850] memory: usage 96kB, limit 96kB, failcnt 768 [ 70.243008][ T842] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 70.244103][ T1850] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 70.340360][ T1850] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 70.347512][ T1850] Memory cgroup stats for /syz4/test: [ 70.347644][ T1850] cache 98304 [ 70.356446][ T1850] rss 0 [ 70.359971][ T1850] rss_huge 0 [ 70.363230][ T1850] shmem 98304 [ 70.366513][ T1850] mapped_file 98304 [ 70.370342][ T1850] dirty 0 [ 70.372372][ T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 70.373411][ T1850] writeback 0 [ 70.384257][ T1850] workingset_refault_anon 0 [ 70.388778][ T1850] workingset_refault_file 0 [ 70.393316][ T1850] swap 0 [ 70.396288][ T1850] swapcached 0 [ 70.399655][ T1850] pgpgin 720 [ 70.403027][ T1850] pgpgout 696 [ 70.404251][ T842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.406337][ T1850] pgfault 721 [ 70.406348][ T1850] pgmajfault 0 [ 70.417033][ T842] usb 3-1: config 0 has no interfaces? [ 70.419830][ T1850] inactive_anon 0 [ 70.419841][ T1850] active_anon 98304 [ 70.425786][ T842] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 70.428703][ T1850] inactive_file 0 [ 70.428714][ T1850] active_file 0 [ 70.428722][ T1850] unevictable 0 [ 70.428730][ T1850] hierarchical_memory_limit 98304 [ 70.428740][ T1850] hierarchical_memsw_limit 9223372036854771712 [ 70.433663][ T842] usb 3-1: New USB device strings: Mfr=8, Product=229, SerialNumber=0 [ 70.436246][ T1850] total_cache 98304 [ 70.436256][ T1850] total_rss 0 [ 70.446481][ T842] usb 3-1: Product: syz [ 70.449152][ T1850] total_rss_huge 0 [ 70.453023][ T842] usb 3-1: Manufacturer: syz [ 70.458613][ T1850] total_shmem 98304 [ 70.483523][ T842] usb 3-1: config 0 descriptor?? [ 70.486767][ T1850] total_mapped_file 98304 [ 70.508280][ T1850] total_dirty 0 [ 70.511765][ T1850] total_writeback 0 [ 70.515639][ T1850] total_workingset_refault_anon 0 [ 70.520890][ T1850] total_workingset_refault_file 0 [ 70.526009][ T1850] total_swap 0 [ 70.529404][ T1850] total_swapcached 0 [ 70.540496][ T1850] total_pgpgin 720 [ 70.543897][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.544738][ T1850] total_pgpgout 696 [ 70.554417][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 70.570033][ T1850] total_pgfault 721 [ 70.574933][ T1850] total_pgmajfault 0 [ 70.578945][ T310] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 70.579937][ T1850] total_inactive_anon 0 [ 70.590686][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.600392][ T1850] total_active_anon 98304 [ 70.604783][ T1850] total_inactive_file 0 [ 70.608956][ T1850] total_active_file 0 [ 70.611419][ T1858] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.620173][ T1850] total_unevictable 0 [ 70.620187][ T1858] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.624835][ T1850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 70.632081][ T310] pl2303 4-1:1.0: pl2303 converter detected [ 70.642041][ T1850] ,cpuset=test,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.557,pid=1849,uid=0 [ 70.663068][ T310] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 70.667693][ T1850] Memory cgroup out of memory: Killed process 1849 (syz.4.557) total-vm:96152kB, anon-rss:1368kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 70.731382][ T310] usb 3-1: USB disconnect, device number 9 [ 70.766943][ T1864] SELinux: failed to load policy [ 70.840540][ T1867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.905891][ T1858] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 70.905914][ T10] usb 4-1: USB disconnect, device number 10 [ 70.922210][ T1858] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 70.929353][ T1858] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 70.936918][ T1858] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 70.946005][ T1858] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 70.955988][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 70.967044][ T10] pl2303 4-1:1.0: device disconnected [ 70.974523][ T36] audit: type=1326 audit(1790101985.200:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1877 comm="syz.4.569" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c8f9e159 code=0x0 [ 71.281760][ T36] audit: type=1400 audit(1790101985.500:325): avc: denied { write } for pid=1885 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.542321][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 71.693581][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 71.703060][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.782406][ T36] audit: type=1400 audit(1790101986.010:326): avc: denied { read } for pid=294 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.804286][ T36] audit: type=1400 audit(1790101986.010:327): avc: denied { open } for pid=294 comm="syz-executor" path="/144/mnt" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.826691][ T36] audit: type=1400 audit(1790101986.010:328): avc: denied { setattr } for pid=294 comm="syz-executor" path="/144/mnt/instances" dev="tracefs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.932533][ T10] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, b2:c1:db:fb:98:63 [ 72.381352][ T10] usb 3-1: USB disconnect, device number 10 [ 72.389257][ T10] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 72.441380][ T1927] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.448913][ T1927] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.456045][ T1927] bridge_slave_0: entered allmulticast mode [ 72.462544][ T1927] bridge_slave_0: entered promiscuous mode [ 72.469187][ T1927] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.476288][ T1927] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.489023][ T1927] bridge_slave_1: entered allmulticast mode [ 72.496102][ T1927] bridge_slave_1: entered promiscuous mode [ 72.559743][ T1927] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566873][ T1927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.574191][ T1927] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.581326][ T1927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.609107][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.617502][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.630144][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.637275][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.646379][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.653467][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.681629][ T1927] veth0_vlan: entered promiscuous mode [ 72.694789][ T1927] veth1_macvtap: entered promiscuous mode [ 72.826849][ T1953] file system registered [ 72.832535][ T1953] ffs_data_put(): freeing [ 72.852666][ T1955] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 72.889589][ T1957] gve 0000:00:01.0: Failed to map pci bar! [ 72.896415][ T1957] gve 0000:00:01.0: probe with driver gve failed with error -12 [ 73.118476][ T36] audit: type=1400 audit(1790101987.340:329): avc: denied { setopt } for pid=1979 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.172427][ T36] audit: type=1400 audit(1790101987.400:330): avc: denied { unmount } for pid=1983 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.219851][ T1988] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.219886][ T1988] rust_binder: Read failure Err(EFAULT) in pid:215 [ 73.243179][ T842] rust_binder: 1987: undelivered death notification, 0000000000000000 [ 73.366914][ T36] audit: type=1400 audit(1790101987.580:331): avc: denied { create } for pid=1996 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.411354][ T36] audit: type=1400 audit(1790101987.580:332): avc: denied { bind } for pid=1996 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.532826][ T2007] tipc: Cannot configure node identity twice [ 73.559780][ T1967] syz.5.593 (1967): drop_caches: 3 [ 73.655975][ T2017] loop0: detected capacity change from 0 to 2049 [ 73.744055][ T2017] loop0: [ 73.998209][ T2028] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 74.016450][ T2028] kvm: user requested TSC rate below hardware speed [ 74.109299][ T2034] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 74.117749][ T2034] e1000 0000:00:01.0: probe with driver e1000 failed with error -5 [ 74.254837][ T2046] FAULT_INJECTION: forcing a failure. [ 74.254837][ T2046] name failslab, interval 1, probability 0, space 0, times 0 [ 74.267761][ T2046] CPU: 1 UID: 0 PID: 2046 Comm: syz.5.625 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 74.267796][ T2046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.267810][ T2046] Call Trace: [ 74.267818][ T2046] [ 74.267826][ T2046] __dump_stack+0x21/0x30 [ 74.267864][ T2046] dump_stack_lvl+0x140/0x1c0 [ 74.267894][ T2046] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.267925][ T2046] ? expand_files+0xda/0x6f0 [ 74.267953][ T2046] ? bpf_prepare_filter+0x1038/0x1350 [ 74.267984][ T2046] dump_stack+0x19/0x20 [ 74.268014][ T2046] should_fail_ex+0x3c2/0x510 [ 74.268053][ T2046] should_failslab+0xac/0x100 [ 74.268082][ T2046] __kmalloc_cache_noprof+0x41/0x470 [ 74.268105][ T2046] ? init_listener+0x5e/0x2b0 [ 74.268134][ T2046] init_listener+0x5e/0x2b0 [ 74.268161][ T2046] ? do_seccomp+0x927/0xf20 [ 74.268186][ T2046] do_seccomp+0x939/0xf20 [ 74.268213][ T2046] ? __se_sys_futex+0x13c/0x320 [ 74.268243][ T2046] ? prctl_set_seccomp+0x80/0x80 [ 74.268270][ T2046] ? xfd_validate_state+0x68/0x140 [ 74.268303][ T2046] ? __kasan_check_write+0x18/0x20 [ 74.268326][ T2046] ? fpregs_restore_userregs+0x11c/0x260 [ 74.268352][ T2046] __x64_sys_seccomp+0x7f/0x90 [ 74.268379][ T2046] x64_sys_call+0x249b/0x2ee0 [ 74.268398][ T2046] do_syscall_64+0x57/0xf0 [ 74.268418][ T2046] ? clear_bhb_loop+0x50/0xa0 [ 74.268459][ T2046] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.268486][ T2046] RIP: 0033:0x7f5f0cb9e159 [ 74.268505][ T2046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.268524][ T2046] RSP: 002b:00007f5f0da5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 74.268572][ T2046] RAX: ffffffffffffffda RBX: 00007f5f0ce25fa0 RCX: 00007f5f0cb9e159 [ 74.268592][ T2046] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 74.268607][ T2046] RBP: 00007f5f0cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.268622][ T2046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.268633][ T2046] R13: 00007f5f0ce26038 R14: 00007f5f0ce25fa0 R15: 00007ffe62564cf8 [ 74.268653][ T2046] [ 74.601404][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.608467][ T36] audit: type=1400 audit(1790101988.820:333): avc: denied { bind } for pid=2050 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.628227][ T36] audit: type=1400 audit(1790101988.840:334): avc: denied { write } for pid=2054 comm="syz.4.628" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.651716][ T36] audit: type=1400 audit(1790101988.840:335): avc: denied { ioctl } for pid=2050 comm="syz.5.627" path="socket:[14744]" dev="sockfs" ino=14744 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.705451][ T842] rust_binder: 2056: undelivered TRANSACTION_COMPLETE [ 74.715235][ T842] rust_binder: 2056: undelivered TRANSACTION_ERROR: 29189 [ 74.962259][ T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.122250][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 75.131058][ T971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.144036][ T971] usb 5-1: config 0 has no interfaces? [ 75.151006][ T971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.160204][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.172633][ T971] usb 5-1: Product: syz [ 75.180236][ T971] usb 5-1: Manufacturer: syz [ 75.188377][ T971] usb 5-1: SerialNumber: syz [ 75.197973][ T971] usb 5-1: config 0 descriptor?? [ 75.411414][ T2059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.425391][ T2059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.442847][ T971] usb 5-1: USB disconnect, device number 5 [ 75.892269][ T971] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.075464][ T971] usb 5-1: New USB device found, idVendor=17ba, idProduct=55aa, bcdDevice= 1.00 [ 76.084667][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.092714][ T971] usb 5-1: Product: syz [ 76.096922][ T971] usb 5-1: Manufacturer: syz [ 76.101526][ T971] usb 5-1: SerialNumber: syz [ 76.316104][ T971] usb 5-1: USB disconnect, device number 6 [ 76.323074][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.334070][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.344939][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.472316][ T310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 76.622286][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 76.628752][ T310] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 76.637097][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.647226][ T310] usb 3-1: config 0 has no interface number 0 [ 76.653342][ T310] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 76.662442][ T1473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.663252][ T310] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.669342][ T2053] Bluetooth: hci0: command 0x1003 tx timeout [ 76.679197][ T310] usb 3-1: config 0 interface 98 has no altsetting 0 [ 76.693660][ T310] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 76.702914][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.710974][ T310] usb 3-1: Product: syz [ 76.715197][ T310] usb 3-1: Manufacturer: syz [ 76.719812][ T310] usb 3-1: SerialNumber: syz [ 76.733745][ T310] usb 3-1: config 0 descriptor?? [ 76.740469][ T2083] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 76.747933][ T2083] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 76.758018][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.769119][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.780257][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 76.957312][ T2083] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 76.964880][ T2083] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 77.082318][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.232268][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 77.238582][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.249706][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.259523][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.268618][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.277776][ T9] usb 5-1: config 0 descriptor?? [ 77.284765][ T9] hub 5-1:0.0: USB hub found [ 77.292588][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 77.303389][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 77.314168][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 77.486977][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 77.574148][ T310] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 77.584447][ T310] asix 3-1:0.98: probe with driver asix failed with error -71 [ 77.593024][ T310] usb 3-1: USB disconnect, device number 11 [ 77.889018][ T9] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 77.891626][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 77.900342][ T9] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 77.949614][ T2096] udevd[2096]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 78.115592][ T2103] overlayfs: statfs failed on './file0' [ 78.144012][ T2105] FAULT_INJECTION: forcing a failure. [ 78.144012][ T2105] name failslab, interval 1, probability 0, space 0, times 0 [ 78.154579][ T2106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.159364][ T2105] CPU: 1 UID: 0 PID: 2105 Comm: syz.2.648 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 78.159453][ T2105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.159486][ T2105] Call Trace: [ 78.159512][ T2105] [ 78.159541][ T2105] __dump_stack+0x21/0x30 [ 78.159658][ T2105] dump_stack_lvl+0x140/0x1c0 [ 78.159739][ T2105] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.159816][ T2105] ? __futex_queue+0x19f/0x350 [ 78.159906][ T2105] dump_stack+0x19/0x20 [ 78.159982][ T2105] should_fail_ex+0x3c2/0x510 [ 78.160071][ T2105] ? iovec_from_user+0x94/0x310 [ 78.160192][ T2105] should_failslab+0xac/0x100 [ 78.160267][ T2105] __kmalloc_noprof+0x69/0x510 [ 78.160324][ T2105] ? __futex_wait+0x330/0x3d0 [ 78.160387][ T2105] ? iovec_from_user+0x94/0x310 [ 78.160442][ T2105] iovec_from_user+0x94/0x310 [ 78.160503][ T2105] __import_iovec+0x154/0x7d0 [ 78.160564][ T2105] import_iovec+0x80/0xb0 [ 78.160617][ T2105] vfs_writev+0x1d4/0xe90 [ 78.160708][ T2105] ? do_writev+0x2e0/0x2e0 [ 78.160781][ T2105] ? vfs_write+0xbcf/0xfd0 [ 78.160872][ T2105] __se_sys_pwritev2+0x181/0x2a0 [ 78.160960][ T2105] ? __x64_sys_pwritev2+0xf0/0xf0 [ 78.161061][ T2105] ? __kasan_check_write+0x18/0x20 [ 78.161116][ T2105] ? fpregs_restore_userregs+0x11c/0x260 [ 78.161196][ T2105] __x64_sys_pwritev2+0xc3/0xf0 [ 78.161281][ T2105] x64_sys_call+0x2938/0x2ee0 [ 78.161342][ T2105] do_syscall_64+0x57/0xf0 [ 78.161402][ T2105] ? clear_bhb_loop+0x50/0xa0 [ 78.161478][ T2105] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.161541][ T2105] RIP: 0033:0x7fcff759e159 [ 78.161592][ T2105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.161640][ T2105] RSP: 002b:00007fcff848d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 78.161700][ T2105] RAX: ffffffffffffffda RBX: 00007fcff7825fa0 RCX: 00007fcff759e159 [ 78.161747][ T2105] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000004 [ 78.161787][ T2105] RBP: 00007fcff763506b R08: 0000000000000000 R09: 0000000000000022 [ 78.161829][ T2105] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 78.161868][ T2105] R13: 00007fcff7826038 R14: 00007fcff7825fa0 R15: 00007fff61e1bb18 [ 78.161918][ T2105] [ 78.394174][ T2106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.432403][ T9] usb 5-1: USB disconnect, device number 7 [ 78.556812][ T36] audit: type=1400 audit(1790101992.780:336): avc: denied { listen } for pid=2118 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.576834][ T36] audit: type=1400 audit(1790101992.780:337): avc: denied { accept } for pid=2118 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.598957][ T36] audit: type=1400 audit(1790101992.830:338): avc: denied { read } for pid=2120 comm="syz.5.654" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.657092][ T36] audit: type=1400 audit(1790101992.880:339): avc: denied { link } for pid=2123 comm="syz.5.655" name="#21" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.679981][ T36] audit: type=1400 audit(1790101992.880:340): avc: denied { rename } for pid=2123 comm="syz.5.655" name="#22" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.723418][ T36] audit: type=1400 audit(1790101992.950:341): avc: denied { map } for pid=2125 comm="syz.5.656" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.232288][ T310] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.392281][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 79.398593][ T310] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.407080][ T310] usb 5-1: config 0 has no interface number 0 [ 79.413377][ T310] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 79.425182][ T310] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.434472][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.442671][ T310] usb 5-1: Product: syz [ 79.447078][ T310] usb 5-1: Manufacturer: syz [ 79.451734][ T310] usb 5-1: SerialNumber: syz [ 79.458378][ T310] usb 5-1: config 0 descriptor?? [ 79.465316][ T2141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.676724][ T2141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.715021][ T2150] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 79.742718][ T2150] kvm: apic: phys broadcast and lowest prio [ 79.891556][ T2157] kvm: pic: level sensitive irq not supported [ 80.851439][ T2194] FAULT_INJECTION: forcing a failure. [ 80.851439][ T2194] name failslab, interval 1, probability 0, space 0, times 0 [ 80.890928][ T2194] CPU: 0 UID: 0 PID: 2194 Comm: syz.1.681 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 80.890966][ T2194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.890982][ T2194] Call Trace: [ 80.890989][ T2194] [ 80.891000][ T2194] __dump_stack+0x21/0x30 [ 80.891041][ T2194] dump_stack_lvl+0x140/0x1c0 [ 80.891074][ T2194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.891110][ T2194] dump_stack+0x19/0x20 [ 80.891141][ T2194] should_fail_ex+0x3c2/0x510 [ 80.891169][ T2194] should_failslab+0xac/0x100 [ 80.891197][ T2194] __kmalloc_cache_noprof+0x41/0x470 [ 80.891222][ T2194] ? fib_insert_alias+0x4e0/0x1200 [ 80.891247][ T2194] fib_insert_alias+0x4e0/0x1200 [ 80.891272][ T2194] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 80.891298][ T2194] fib_table_insert+0x843/0x1ef0 [ 80.891323][ T2194] ? consume_skb+0x65/0x1a0 [ 80.891371][ T2194] fib_add_ifaddr+0x351/0xdc0 [ 80.891407][ T2194] ? __cfi_fib_add_ifaddr+0x10/0x10 [ 80.891444][ T2194] ? __kasan_check_write+0x18/0x20 [ 80.891477][ T2194] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 80.891501][ T2194] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 80.891525][ T2194] ? __kasan_slab_free+0x6a/0x80 [ 80.891555][ T2194] ? kmem_cache_free+0x1bd/0x4f0 [ 80.891581][ T2194] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 80.891605][ T2194] ? __wake_up+0x169/0x190 [ 80.891630][ T2194] ? consume_skb+0x91/0x1a0 [ 80.891659][ T2194] ? downgrade_write+0x470/0x470 [ 80.891707][ T2194] fib_inetaddr_event+0x161/0x320 [ 80.891739][ T2194] ? __cfi_fib_inetaddr_event+0x10/0x10 [ 80.891772][ T2194] notifier_call_chain+0x106/0x2b0 [ 80.891796][ T2194] blocking_notifier_call_chain+0x6a/0x90 [ 80.891819][ T2194] __inet_insert_ifa+0x857/0xa80 [ 80.891855][ T2194] ? inet_rcu_free_ifa+0xe0/0xe0 [ 80.891889][ T2194] ? __kasan_check_read+0x15/0x20 [ 80.891911][ T2194] devinet_ioctl+0x11c7/0x1af0 [ 80.891941][ T2194] ? __cfi_devinet_ioctl+0x10/0x10 [ 80.891971][ T2194] ? _copy_from_user+0x87/0xa0 [ 80.892003][ T2194] ? get_user_ifreq+0x130/0x180 [ 80.892023][ T2194] inet_ioctl+0x431/0x570 [ 80.892046][ T2194] ? __cfi_inet_ioctl+0x10/0x10 [ 80.892072][ T2194] ? __cfi_futex_wait+0x10/0x10 [ 80.892096][ T2194] sock_do_ioctl+0x115/0x330 [ 80.892119][ T2194] ? sock_show_fdinfo+0xd0/0xd0 [ 80.892143][ T2194] ? errseq_sample+0x48/0x70 [ 80.892176][ T2194] ? file_init_path+0x434/0x590 [ 80.892207][ T2194] ? __cfi_do_futex+0x10/0x10 [ 80.892242][ T2194] sock_ioctl+0x568/0x7e0 [ 80.892263][ T2194] ? __cfi_sock_ioctl+0x10/0x10 [ 80.892284][ T2194] ? __fget_files+0x2bc/0x330 [ 80.892313][ T2194] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.892343][ T2194] ? security_file_ioctl+0x3e/0x110 [ 80.892366][ T2194] ? __cfi_sock_ioctl+0x10/0x10 [ 80.892386][ T2194] __se_sys_ioctl+0x126/0x1b0 [ 80.892415][ T2194] __x64_sys_ioctl+0x7f/0xa0 [ 80.892443][ T2194] x64_sys_call+0x1878/0x2ee0 [ 80.892465][ T2194] do_syscall_64+0x57/0xf0 [ 80.892495][ T2194] ? clear_bhb_loop+0x50/0xa0 [ 80.892526][ T2194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.892552][ T2194] RIP: 0033:0x7fe6dcb9e159 [ 80.892570][ T2194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.892588][ T2194] RSP: 002b:00007fe6dd9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.892613][ T2194] RAX: ffffffffffffffda RBX: 00007fe6dce25fa0 RCX: 00007fe6dcb9e159 [ 80.892649][ T2194] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000005 [ 80.892664][ T2194] RBP: 00007fe6dcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 80.892678][ T2194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.892691][ T2194] R13: 00007fe6dce26038 R14: 00007fe6dce25fa0 R15: 00007ffcbe4426f8 [ 80.892711][ T2194] [ 81.317484][ T2202] FAULT_INJECTION: forcing a failure. [ 81.317484][ T2202] name failslab, interval 1, probability 0, space 0, times 0 [ 81.330225][ T2202] CPU: 1 UID: 0 PID: 2202 Comm: syz.2.684 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 81.330264][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.330276][ T2202] Call Trace: [ 81.330282][ T2202] [ 81.330288][ T2202] __dump_stack+0x21/0x30 [ 81.330317][ T2202] dump_stack_lvl+0x140/0x1c0 [ 81.330342][ T2202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.330372][ T2202] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 81.330391][ T2202] dump_stack+0x19/0x20 [ 81.330413][ T2202] should_fail_ex+0x3c2/0x510 [ 81.330433][ T2202] should_failslab+0xac/0x100 [ 81.330454][ T2202] kmem_cache_alloc_noprof+0x42/0x410 [ 81.330471][ T2202] ? __kernfs_new_node+0xf1/0x740 [ 81.330493][ T2202] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 81.330515][ T2202] __kernfs_new_node+0xf1/0x740 [ 81.330535][ T2202] ? __kasan_check_write+0x18/0x20 [ 81.330553][ T2202] ? kernfs_new_node+0x280/0x280 [ 81.330573][ T2202] ? down_write+0xee/0x2b0 [ 81.330593][ T2202] ? __cfi_down_write+0x10/0x10 [ 81.330614][ T2202] ? __kasan_check_write+0x18/0x20 [ 81.330630][ T2202] ? up_write+0x66/0x280 [ 81.330652][ T2202] ? kernfs_activate+0x1ee/0x200 [ 81.330673][ T2202] kernfs_new_node+0x154/0x280 [ 81.330694][ T2202] __kernfs_create_file+0x52/0x280 [ 81.330731][ T2202] sysfs_add_file_mode_ns+0x1d2/0x280 [ 81.330748][ T2202] internal_create_group+0x66c/0xe70 [ 81.330765][ T2202] ? __kasan_check_write+0x18/0x20 [ 81.330782][ T2202] ? sysfs_create_group+0x40/0x40 [ 81.330811][ T2202] ? kernfs_activate+0x1ee/0x200 [ 81.330832][ T2202] sysfs_create_groups+0x5c/0x130 [ 81.330853][ T2202] device_add_attrs+0x12d/0x850 [ 81.330868][ T2202] ? device_add_class_symlinks+0x260/0x260 [ 81.330883][ T2202] ? __kasan_check_write+0x18/0x20 [ 81.330898][ T2202] ? kobject_put+0x1cc/0x2a0 [ 81.330913][ T2202] ? device_add_class_symlinks+0x22e/0x260 [ 81.330928][ T2202] device_add+0x4db/0xbf0 [ 81.330950][ T2202] input_register_device+0x9af/0x1080 [ 81.330988][ T2202] uinput_create_device+0x416/0x670 [ 81.331014][ T2202] uinput_ioctl_handler+0x3ea/0x1360 [ 81.331040][ T2202] ? uinput_release+0x70/0x70 [ 81.331058][ T2202] ? __fget_files+0x2bc/0x330 [ 81.331078][ T2202] uinput_ioctl+0x2c/0x40 [ 81.331093][ T2202] ? __cfi_uinput_ioctl+0x10/0x10 [ 81.331109][ T2202] __se_sys_ioctl+0x126/0x1b0 [ 81.331129][ T2202] __x64_sys_ioctl+0x7f/0xa0 [ 81.331147][ T2202] x64_sys_call+0x1878/0x2ee0 [ 81.331161][ T2202] do_syscall_64+0x57/0xf0 [ 81.331175][ T2202] ? clear_bhb_loop+0x50/0xa0 [ 81.331194][ T2202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.331213][ T2202] RIP: 0033:0x7fcff759e159 [ 81.331226][ T2202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.331238][ T2202] RSP: 002b:00007fcff848d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.331255][ T2202] RAX: ffffffffffffffda RBX: 00007fcff7825fa0 RCX: 00007fcff759e159 [ 81.331267][ T2202] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 81.331276][ T2202] RBP: 00007fcff763506b R08: 0000000000000000 R09: 0000000000000000 [ 81.331287][ T2202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.331296][ T2202] R13: 00007fcff7826038 R14: 00007fcff7825fa0 R15: 00007fff61e1bb18 [ 81.331309][ T2202] [ 81.669537][ T36] audit: type=1400 audit(1790101995.890:342): avc: denied { open } for pid=2204 comm="syz.5.685" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.674965][ T310] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.695638][ T36] audit: type=1400 audit(1790101995.890:343): avc: denied { watch watch_reads } for pid=2204 comm="syz.5.685" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.708004][ T310] asix 5-1:0.188: probe with driver asix failed with error -71 [ 81.739769][ T310] usb 5-1: USB disconnect, device number 8 [ 81.773051][ T313] EXT4-fs error: 3 callbacks suppressed [ 81.773069][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 81.791544][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 81.802328][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 82.422285][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.573550][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.584672][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 82.594008][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.612484][ T9] usb 5-1: config 0 descriptor?? [ 82.633137][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 82.646691][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 82.657806][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 82.677019][ T2221] FAULT_INJECTION: forcing a failure. [ 82.677019][ T2221] name failslab, interval 1, probability 0, space 0, times 0 [ 82.683138][ T2223] veth1_to_bond: entered allmulticast mode [ 82.689787][ T2221] CPU: 1 UID: 0 PID: 2221 Comm: syz.1.692 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 82.689897][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.689938][ T2221] Call Trace: [ 82.689959][ T2221] [ 82.689981][ T2221] __dump_stack+0x21/0x30 [ 82.690084][ T2221] dump_stack_lvl+0x140/0x1c0 [ 82.690196][ T2221] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.690299][ T2221] ? kasan_save_alloc_info+0x3a/0x50 [ 82.690361][ T2221] dump_stack+0x19/0x20 [ 82.690443][ T2221] should_fail_ex+0x3c2/0x510 [ 82.690516][ T2221] should_failslab+0xac/0x100 [ 82.690588][ T2221] __kmalloc_node_noprof+0x69/0x500 [ 82.690652][ T2221] ? down_read+0x7f/0xe0 [ 82.690739][ T2221] ? crypto_create_tfm_node+0xa0/0x4d0 [ 82.690795][ T2221] ? crypto_alg_extsize+0x1f/0x90 [ 82.690887][ T2221] crypto_create_tfm_node+0xa0/0x4d0 [ 82.690941][ T2221] ? up_read+0x26/0x1c0 [ 82.691032][ T2221] crypto_spawn_tfm2+0x60/0x90 [ 82.691112][ T2221] crypto_authenc_init_tfm+0x6d/0x1d0 [ 82.691199][ T2221] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 82.691291][ T2221] crypto_aead_init_tfm+0x11e/0x1a0 [ 82.691385][ T2221] crypto_create_tfm_node+0x199/0x4d0 [ 82.691447][ T2221] crypto_alloc_tfm_node+0x166/0x350 [ 82.691509][ T2221] crypto_alloc_aead+0x34/0x40 [ 82.691593][ T2221] esp_init_state+0x621/0x1280 [ 82.691674][ T2221] ? x64_sys_call+0x2a4c/0x2ee0 [ 82.691731][ T2221] ? do_syscall_64+0x57/0xf0 [ 82.691790][ T2221] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.691876][ T2221] ? __cfi_esp_init_state+0x10/0x10 [ 82.691965][ T2221] ? kasan_save_alloc_info+0x3a/0x50 [ 82.692026][ T2221] ? __xfrm_init_state+0x3db/0xf70 [ 82.692088][ T2221] ? __asan_memcpy+0x5a/0x80 [ 82.692148][ T2221] __xfrm_init_state+0xaf9/0xf70 [ 82.692230][ T2221] xfrm_add_sa+0x2560/0x37b0 [ 82.692314][ T2221] ? __cfi_xfrm_add_sa+0x10/0x10 [ 82.692399][ T2221] xfrm_user_rcv_msg+0x699/0x900 [ 82.692507][ T2221] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 82.692624][ T2221] ? __asan_memcpy+0x5a/0x80 [ 82.692693][ T2221] ? avc_has_perm_noaudit+0x289/0x360 [ 82.692774][ T2221] ? avc_has_perm+0x155/0x240 [ 82.692847][ T2221] netlink_rcv_skb+0x24d/0x4e0 [ 82.692929][ T2221] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 82.693017][ T2221] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 82.693100][ T2221] ? __kasan_check_write+0x18/0x20 [ 82.693162][ T2221] ? mutex_lock+0x97/0x1d0 [ 82.693243][ T2221] ? __cfi_mutex_lock+0x10/0x10 [ 82.693314][ T2221] ? netlink_autobind+0x1c0/0x1c0 [ 82.693405][ T2221] xfrm_netlink_rcv+0x76/0x90 [ 82.693486][ T2221] netlink_unicast+0x8bf/0xa70 [ 82.693568][ T2221] netlink_sendmsg+0x7d1/0xad0 [ 82.693653][ T2221] ? __cfi_netlink_sendmsg+0x10/0x10 [ 82.693736][ T2221] ? __futex_queue+0x19f/0x350 [ 82.693818][ T2221] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 82.693890][ T2221] ? security_socket_sendmsg+0x3d/0x100 [ 82.693995][ T2221] ____sys_sendmsg+0x99e/0xa00 [ 82.694105][ T2221] ? __import_iovec+0x5b9/0x7d0 [ 82.694157][ T2221] ? __sys_sendmsg_sock+0x50/0x50 [ 82.694248][ T2221] ? import_iovec+0x80/0xb0 [ 82.694295][ T2221] ___sys_sendmsg+0x2a6/0x370 [ 82.694385][ T2221] ? __sys_sendmsg+0x260/0x260 [ 82.694467][ T2221] ? __cfi_futex_wait+0x10/0x10 [ 82.694533][ T2221] ? __fget_files+0x2bc/0x330 [ 82.694613][ T2221] __x64_sys_sendmsg+0x1be/0x2a0 [ 82.694696][ T2221] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 82.694780][ T2221] ? __kasan_check_write+0x18/0x20 [ 82.694843][ T2221] ? fpregs_restore_userregs+0x11c/0x260 [ 82.694924][ T2221] ? switch_fpu_return+0x12/0x20 [ 82.694997][ T2221] x64_sys_call+0x2a4c/0x2ee0 [ 82.695056][ T2221] do_syscall_64+0x57/0xf0 [ 82.695109][ T2221] ? clear_bhb_loop+0x50/0xa0 [ 82.695191][ T2221] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.695268][ T2221] RIP: 0033:0x7fe6dcb9e159 [ 82.695326][ T2221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.695378][ T2221] RSP: 002b:00007fe6dd9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.695449][ T2221] RAX: ffffffffffffffda RBX: 00007fe6dce25fa0 RCX: 00007fe6dcb9e159 [ 82.695493][ T2221] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000005 [ 82.695517][ T2221] RBP: 00007fe6dcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 82.695531][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.695544][ T2221] R13: 00007fe6dce26038 R14: 00007fe6dce25fa0 R15: 00007ffcbe4426f8 [ 82.695565][ T2221] [ 83.133871][ T2224] veth1_to_bond: entered promiscuous mode [ 83.143633][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.149134][ T2225] netlink: 148 bytes leftover after parsing attributes in process `syz.5.693'. [ 83.150840][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.162830][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 83.177580][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.185204][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.192738][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.200728][ T2225] veth1_to_bond (unregistering): left promiscuous mode [ 83.207858][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 83.218510][ T2227] FAULT_INJECTION: forcing a failure. [ 83.218510][ T2227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.231757][ T2225] veth1_to_bond (unregistering): left allmulticast mode [ 83.238793][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.239101][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 83.246067][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.263765][ T2227] CPU: 0 UID: 0 PID: 2227 Comm: syz.1.694 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 83.263788][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.263798][ T2227] Call Trace: [ 83.263804][ T2227] [ 83.263809][ T2227] __dump_stack+0x21/0x30 [ 83.263836][ T2227] dump_stack_lvl+0x140/0x1c0 [ 83.263858][ T2227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.263881][ T2227] ? finish_task_switch+0x139/0x770 [ 83.263902][ T2227] dump_stack+0x19/0x20 [ 83.263923][ T2227] should_fail_ex+0x3c2/0x510 [ 83.263942][ T2227] should_fail_alloc_page+0xec/0x110 [ 83.263962][ T2227] __alloc_pages_noprof+0x1c0/0x7e0 [ 83.263986][ T2227] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.264008][ T2227] ? plist_add+0x4d4/0x570 [ 83.264024][ T2227] ? __futex_queue+0x19f/0x350 [ 83.264044][ T2227] ? __cfi___futex_queue+0x10/0x10 [ 83.264065][ T2227] __folio_alloc_noprof+0x14/0x80 [ 83.264087][ T2227] folio_prealloc+0x46/0x220 [ 83.264108][ T2227] do_wp_page+0x187e/0x2e80 [ 83.264126][ T2227] ? __cfi___futex_wait+0x10/0x10 [ 83.264141][ T2227] ? folio_put+0x90/0x90 [ 83.264158][ T2227] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.264175][ T2227] ? futex_wake+0x666/0x950 [ 83.264189][ T2227] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 83.264205][ T2227] handle_mm_fault+0x1017/0x1ba0 [ 83.264226][ T2227] ? __cfi_handle_mm_fault+0x10/0x10 [ 83.264243][ T2227] ? lock_vma_under_rcu+0x4cf/0x590 [ 83.264263][ T2227] ? __se_sys_futex+0x13c/0x320 [ 83.264285][ T2227] do_user_addr_fault+0x951/0x1230 [ 83.264299][ T2227] ? fpregs_restore_userregs+0x11c/0x260 [ 83.264319][ T2227] exc_page_fault+0x58/0xc0 [ 83.264339][ T2227] asm_exc_page_fault+0x2b/0x30 [ 83.264357][ T2227] RIP: 0033:0x7fe6dca571b6 [ 83.264370][ T2227] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 83.264383][ T2227] RSP: 002b:00007fe6dd9f3f60 EFLAGS: 00010206 [ 83.264397][ T2227] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 83.264408][ T2227] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 83.264419][ T2227] RBP: 00007fe6dcc54740 R08: 0000000000000000 R09: 0000000000000003 [ 83.264429][ T2227] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 83.264438][ T2227] R13: 0000200000c00000 R14: 00007fe6dce25fa0 R15: 0000000000000000 [ 83.264451][ T2227] [ 83.264462][ T2227] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 83.512255][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.519681][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.526878][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.534098][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.541260][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.548448][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.555652][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.562841][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.569998][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.577930][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.585209][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.592488][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.599642][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.607215][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.614522][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.621682][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.629776][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.637080][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.644354][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.651511][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.658822][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.666094][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.673375][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.680538][ T9] konepure 0003:1E7D:2DBE.000B: unknown main item tag 0x0 [ 83.696930][ T9] konepure 0003:1E7D:2DBE.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 83.715937][ T2234] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1259: comm udevd: iget: checksum invalid [ 83.728460][ T2234] udevd[2234]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 83.752483][ T2233] kvm: user requested TSC rate below hardware speed [ 83.785337][ T2233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438865345 (156087382080 ns) > initial count (116419789056 ns). Using initial count to start timer. [ 83.804640][ T2233] kvm: kvm [2232]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 83.813722][ T2233] kvm: kvm [2232]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 84.278564][ T36] audit: type=1400 audit(1790101998.500:344): avc: denied { setopt } for pid=2254 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.347145][ T9] usb 5-1: USB disconnect, device number 9 [ 84.918907][ T2289] kvm: pic: non byte write [ 84.923863][ T2289] kvm: pic: non byte write [ 84.932615][ T2289] kvm: pic: single mode not supported [ 84.932634][ T2289] kvm: pic: level sensitive irq not supported [ 84.942153][ T2289] kvm: pic: single mode not supported [ 84.948337][ T2289] kvm: pic: level sensitive irq not supported [ 85.203317][ T2322] udevd[2322]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 85.586668][ T2325] FAULT_INJECTION: forcing a failure. [ 85.586668][ T2325] name failslab, interval 1, probability 0, space 0, times 0 [ 85.599422][ T2325] CPU: 1 UID: 0 PID: 2325 Comm: syz.5.732 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 85.599463][ T2325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.599484][ T2325] Call Trace: [ 85.599494][ T2325] [ 85.599504][ T2325] __dump_stack+0x21/0x30 [ 85.599551][ T2325] dump_stack_lvl+0x140/0x1c0 [ 85.599591][ T2325] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.599635][ T2325] dump_stack+0x19/0x20 [ 85.599674][ T2325] should_fail_ex+0x3c2/0x510 [ 85.599712][ T2325] should_failslab+0xac/0x100 [ 85.599750][ T2325] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 85.599785][ T2325] ? kstrdup_const+0x45/0x60 [ 85.599807][ T2325] ? __cfi_vlan_device_event+0x10/0x10 [ 85.599844][ T2325] kstrdup+0x4d/0x130 [ 85.599864][ T2325] ? kstrdup_const+0x3a/0x60 [ 85.599891][ T2325] kstrdup_const+0x45/0x60 [ 85.599915][ T2325] kvasprintf_const+0xdb/0x250 [ 85.599947][ T2325] kobject_set_name_vargs+0x65/0x120 [ 85.599976][ T2325] dev_set_name+0xe3/0x140 [ 85.600011][ T2325] ? __cfi_dev_set_name+0x10/0x10 [ 85.600047][ T2325] ? pm_runtime_init+0x281/0x370 [ 85.600085][ T2325] ? swiotlb_dev_init+0x1f/0x100 [ 85.600123][ T2325] ? device_initialize+0x2d2/0x370 [ 85.600165][ T2325] netdev_register_kobject+0xba/0x330 [ 85.600209][ T2325] register_netdevice+0x1042/0x1a80 [ 85.600240][ T2325] ? __kmalloc_cache_noprof+0x23c/0x470 [ 85.600273][ T2325] ? __cfi_register_netdevice+0x10/0x10 [ 85.600305][ T2325] tun_set_iff+0x828/0xec0 [ 85.600335][ T2325] __tun_chr_ioctl+0x852/0x1fb0 [ 85.600368][ T2325] ? tun_flow_create+0x400/0x400 [ 85.600402][ T2325] ? __fget_files+0x2bc/0x330 [ 85.600448][ T2325] tun_chr_ioctl+0x2e/0x40 [ 85.600477][ T2325] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 85.600507][ T2325] __se_sys_ioctl+0x126/0x1b0 [ 85.600543][ T2325] __x64_sys_ioctl+0x7f/0xa0 [ 85.600589][ T2325] x64_sys_call+0x1878/0x2ee0 [ 85.600616][ T2325] do_syscall_64+0x57/0xf0 [ 85.600645][ T2325] ? clear_bhb_loop+0x50/0xa0 [ 85.600681][ T2325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.600715][ T2325] RIP: 0033:0x7f5f0cb9e159 [ 85.600738][ T2325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.600764][ T2325] RSP: 002b:00007f5f0da5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.600793][ T2325] RAX: ffffffffffffffda RBX: 00007f5f0ce25fa0 RCX: 00007f5f0cb9e159 [ 85.600816][ T2325] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 85.600835][ T2325] RBP: 00007f5f0cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 85.600855][ T2325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.600872][ T2325] R13: 00007f5f0ce26038 R14: 00007f5f0ce25fa0 R15: 00007ffe62564cf8 [ 85.600898][ T2325] [ 85.906360][ T36] audit: type=1400 audit(1790102000.130:345): avc: denied { create } for pid=2326 comm="syz.1.733" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 86.032601][ T2340] FAULT_INJECTION: forcing a failure. [ 86.032601][ T2340] name failslab, interval 1, probability 0, space 0, times 0 [ 86.064036][ T2340] CPU: 0 UID: 0 PID: 2340 Comm: syz.2.739 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 86.064075][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.064090][ T2340] Call Trace: [ 86.064098][ T2340] [ 86.064106][ T2340] __dump_stack+0x21/0x30 [ 86.064146][ T2340] dump_stack_lvl+0x140/0x1c0 [ 86.064177][ T2340] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.064211][ T2340] dump_stack+0x19/0x20 [ 86.064240][ T2340] should_fail_ex+0x3c2/0x510 [ 86.064268][ T2340] should_failslab+0xac/0x100 [ 86.064296][ T2340] kmem_cache_alloc_bulk_noprof+0x4c/0x480 [ 86.064323][ T2340] ? pcpu_block_update_hint_alloc+0x8a0/0xc50 [ 86.064353][ T2340] ? mas_dup_build+0x562/0x1ac0 [ 86.064385][ T2340] mas_dup_build+0xb02/0x1ac0 [ 86.064419][ T2340] __mt_dup+0x16f/0x290 [ 86.064448][ T2340] ? __cfi___mt_dup+0x10/0x10 [ 86.064484][ T2340] ? __kasan_check_write+0x18/0x20 [ 86.064506][ T2340] copy_mm+0x716/0x1da0 [ 86.064537][ T2340] ? copy_signal+0x6a0/0x6a0 [ 86.064563][ T2340] ? _raw_spin_lock+0x92/0x120 [ 86.064585][ T2340] ? __asan_memset+0x39/0x50 [ 86.064607][ T2340] ? __init_rwsem+0x110/0x1f0 [ 86.064640][ T2340] ? copy_signal+0x4d5/0x6a0 [ 86.064667][ T2340] copy_process+0x12a4/0x3350 [ 86.064699][ T2340] ? __cfi_copy_process+0x10/0x10 [ 86.064729][ T2340] kernel_clone+0x233/0x810 [ 86.064758][ T2340] ? __cfi_kernel_clone+0x10/0x10 [ 86.064786][ T2340] ? do_futex+0x37d/0x510 [ 86.064816][ T2340] ? file_init_path+0x434/0x590 [ 86.064848][ T2340] __x64_sys_clone+0x1b7/0x230 [ 86.064877][ T2340] ? __cfi___x64_sys_clone+0x10/0x10 [ 86.064909][ T2340] ? __kasan_check_write+0x18/0x20 [ 86.064932][ T2340] ? fpregs_restore_userregs+0x11c/0x260 [ 86.064968][ T2340] ? switch_fpu_return+0x12/0x20 [ 86.064997][ T2340] x64_sys_call+0x2b3c/0x2ee0 [ 86.065018][ T2340] do_syscall_64+0x57/0xf0 [ 86.065038][ T2340] ? clear_bhb_loop+0x50/0xa0 [ 86.065066][ T2340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.065093][ T2340] RIP: 0033:0x7fcff759e159 [ 86.065112][ T2340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.065132][ T2340] RSP: 002b:00007fcff848cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 86.065158][ T2340] RAX: ffffffffffffffda RBX: 00007fcff7825fa0 RCX: 00007fcff759e159 [ 86.065176][ T2340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 86.065192][ T2340] RBP: 00007fcff763506b R08: 0000000000000000 R09: 0000000000000000 [ 86.065207][ T2340] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 86.065222][ T2340] R13: 00007fcff7826038 R14: 00007fcff7825fa0 R15: 00007fff61e1bb18 [ 86.065243][ T2340] [ 86.108094][ T2344] FAULT_INJECTION: forcing a failure. [ 86.108094][ T2344] name failslab, interval 1, probability 0, space 0, times 0 [ 86.354036][ T2344] CPU: 1 UID: 0 PID: 2344 Comm: syz.4.740 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 86.354069][ T2344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.354083][ T2344] Call Trace: [ 86.354089][ T2344] [ 86.354099][ T2344] __dump_stack+0x21/0x30 [ 86.354135][ T2344] dump_stack_lvl+0x140/0x1c0 [ 86.354166][ T2344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.354197][ T2344] ? xas_find_marked+0xc97/0xda0 [ 86.354224][ T2344] ? xas_nomem+0x71/0x2c0 [ 86.354247][ T2344] dump_stack+0x19/0x20 [ 86.354276][ T2344] should_fail_ex+0x3c2/0x510 [ 86.354305][ T2344] should_failslab+0xac/0x100 [ 86.354334][ T2344] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 86.354361][ T2344] ? kstrdup_const+0x45/0x60 [ 86.354382][ T2344] kstrdup+0x4d/0x130 [ 86.354399][ T2344] ? kstrdup_const+0x3a/0x60 [ 86.354418][ T2344] kstrdup_const+0x45/0x60 [ 86.354445][ T2344] alloc_vfsmnt+0xed/0x610 [ 86.354477][ T2344] clone_mnt+0x6e/0xbe0 [ 86.354496][ T2344] ? get_mountpoint+0x1c5/0x500 [ 86.354519][ T2344] copy_tree+0xe2/0xcb0 [ 86.354540][ T2344] ? mnt_warn_timestamp_expiry+0x350/0x350 [ 86.354571][ T2344] __do_loopback+0x1da/0x3c0 [ 86.354601][ T2344] do_loopback+0x335/0x4c0 [ 86.354625][ T2344] ? path_mount+0xff0/0xff0 [ 86.354648][ T2344] ? bpf_lsm_capable+0xd/0x20 [ 86.354682][ T2344] ? ns_capable+0x90/0xf0 [ 86.354703][ T2344] path_mount+0x55b/0xff0 [ 86.354725][ T2344] ? putname+0x113/0x150 [ 86.354751][ T2344] __se_sys_mount+0x2bf/0x480 [ 86.354776][ T2344] ? __x64_sys_mount+0xf0/0xf0 [ 86.354801][ T2344] ? __kasan_check_write+0x18/0x20 [ 86.354824][ T2344] ? fpregs_restore_userregs+0x11c/0x260 [ 86.354853][ T2344] __x64_sys_mount+0xc3/0xf0 [ 86.354879][ T2344] x64_sys_call+0x2021/0x2ee0 [ 86.354900][ T2344] do_syscall_64+0x57/0xf0 [ 86.354921][ T2344] ? clear_bhb_loop+0x50/0xa0 [ 86.354950][ T2344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.354977][ T2344] RIP: 0033:0x7f72c8f9e159 [ 86.354995][ T2344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.355014][ T2344] RSP: 002b:00007f72c9e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.355038][ T2344] RAX: ffffffffffffffda RBX: 00007f72c9225fa0 RCX: 00007f72c8f9e159 [ 86.355055][ T2344] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000300 [ 86.355070][ T2344] RBP: 00007f72c903506b R08: 0000000000000000 R09: 0000000000000000 [ 86.355083][ T2344] R10: 0000000000185093 R11: 0000000000000246 R12: 0000000000000000 [ 86.355097][ T2344] R13: 00007f72c9226038 R14: 00007f72c9225fa0 R15: 00007ffec8016f68 [ 86.355115][ T2344] [ 86.924736][ T111] loop0: [ 87.132299][ T310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 87.282405][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 87.288743][ T310] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.297854][ T310] usb 6-1: config 0 has no interface number 0 [ 87.304479][ T310] usb 6-1: config 0 interface 184 has no altsetting 0 [ 87.317228][ T310] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 87.326372][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.334989][ T310] usb 6-1: Product: syz [ 87.347409][ T310] usb 6-1: Manufacturer: syz [ 87.352113][ T310] usb 6-1: SerialNumber: syz [ 87.360385][ T310] usb 6-1: config 0 descriptor?? [ 87.366619][ T310] smsc75xx v1.0.0 [ 87.377775][ T313] EXT4-fs error: 2 callbacks suppressed [ 87.377790][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 87.397300][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 87.410208][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 87.967291][ T310] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 87.978176][ T310] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.189235][ T310] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 88.201912][ T310] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 88.211700][ T310] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.221412][ T310] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 88.233637][ T310] usb 6-1: USB disconnect, device number 2 [ 88.424022][ T2405] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.431099][ T2405] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.438320][ T2405] bridge_slave_0: entered allmulticast mode [ 88.444786][ T2405] bridge_slave_0: entered promiscuous mode [ 88.451218][ T2405] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.458293][ T2405] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.465454][ T2405] bridge_slave_1: entered allmulticast mode [ 88.471702][ T2405] bridge_slave_1: entered promiscuous mode [ 88.516815][ T2405] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.523899][ T2405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.531184][ T2405] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.538260][ T2405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.562264][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.569542][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.579675][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586741][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.595878][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.602967][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.631964][ T2405] veth0_vlan: entered promiscuous mode [ 88.643757][ T2405] veth1_macvtap: entered promiscuous mode [ 88.677659][ T36] audit: type=1400 audit(1790102002.900:346): avc: denied { mounton } for pid=2409 comm="syz.6.766" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.252579][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.312295][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.403437][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.415045][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.425974][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.435758][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.448755][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.458150][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.467020][ T10] usb 5-1: config 0 descriptor?? [ 89.473390][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.484194][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.484784][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.496763][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.506573][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.516070][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 89.534959][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.543863][ T9] usb 6-1: config 0 descriptor?? [ 89.551129][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.561896][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.572912][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.668611][ T2442] kvm: pic: single mode not supported [ 89.668683][ T2442] kvm: pic: non byte read [ 89.880448][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 89.886205][ T313] EXT4-fs error (device sda1): ext4_lookup:1819: inode #1135: comm udevd: iget: checksum invalid [ 89.909023][ T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.933494][ T2460] udevd[2460]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 89.962496][ T9] savu 0003:1E7D:2D5A.000D: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 89.993357][ T2463] udevd[2463]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 90.059324][ T2469] netlink: 'syz.6.790': attribute type 27 has an invalid length. [ 90.090719][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.098075][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.168256][ T2475] ªªªªª»: renamed from dummy0 [ 90.207887][ T10] usb 6-1: USB disconnect, device number 3 [ 90.216253][ T10] ================================================================== [ 90.224366][ T10] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x236/0x240 [ 90.232306][ T10] Read of size 4 at addr ffff888106656c08 by task kworker/0:1/10 [ 90.240064][ T10] [ 90.242416][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 90.242449][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.242465][ T10] Workqueue: usb_hub_wq hub_event [ 90.242504][ T10] Call Trace: [ 90.242513][ T10] [ 90.242521][ T10] __dump_stack+0x21/0x30 [ 90.242555][ T10] dump_stack_lvl+0x140/0x1c0 [ 90.242588][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.242621][ T10] print_address_description+0x71/0x210 [ 90.242660][ T10] print_report+0x4a/0x70 [ 90.242690][ T10] kasan_report+0x162/0x1a0 [ 90.242720][ T10] ? roccat_disconnect+0x236/0x240 [ 90.242745][ T10] ? roccat_disconnect+0x236/0x240 [ 90.242768][ T10] __asan_report_load4_noabort+0x18/0x20 [ 90.242789][ T10] roccat_disconnect+0x236/0x240 [ 90.242810][ T10] savu_remove+0xf0/0x170 [ 90.242835][ T10] ? __cfi_savu_remove+0x10/0x10 [ 90.242861][ T10] hid_device_remove+0x293/0x400 [ 90.242882][ T10] ? __cfi_hid_device_remove+0x10/0x10 [ 90.242902][ T10] device_release_driver_internal+0x4aa/0x830 [ 90.242922][ T10] device_release_driver+0x1d/0x30 [ 90.242940][ T10] bus_remove_device+0x34f/0x370 [ 90.242965][ T10] device_del+0x583/0xcf0 [ 90.242981][ T10] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 90.243000][ T10] ? __pm_runtime_resume+0xa0/0xa0 [ 90.243025][ T10] ? __cfi_device_del+0x10/0x10 [ 90.243041][ T10] ? __kasan_check_write+0x18/0x20 [ 90.243060][ T10] ? _raw_spin_lock_irq+0x93/0x120 [ 90.243078][ T10] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 90.243096][ T10] hid_destroy_device+0x6e/0x110 [ 90.243117][ T10] usbhid_disconnect+0xa3/0xc0 [ 90.243136][ T10] usb_unbind_interface+0x2ad/0xa40 [ 90.243166][ T10] ? __cfi_usb_unbind_interface+0x10/0x10 [ 90.243194][ T10] device_release_driver_internal+0x522/0x830 [ 90.243213][ T10] device_release_driver+0x1d/0x30 [ 90.243231][ T10] bus_remove_device+0x34f/0x370 [ 90.243256][ T10] device_del+0x583/0xcf0 [ 90.243272][ T10] ? kfree_const+0x3d/0x50 [ 90.243289][ T10] ? __cfi_device_release+0x10/0x10 [ 90.243310][ T10] ? __cfi_device_del+0x10/0x10 [ 90.243326][ T10] ? kobject_put+0x238/0x2a0 [ 90.243343][ T10] ? device_unregister+0x2b/0x40 [ 90.243361][ T10] usb_disable_device+0x3af/0x770 [ 90.243388][ T10] usb_disconnect+0x331/0x950 [ 90.243414][ T10] hub_event+0x1ad5/0x4360 [ 90.243441][ T10] ? hub_event+0x11d0/0x4360 [ 90.243475][ T10] ? __cfi_hub_event+0x10/0x10 [ 90.243503][ T10] ? kick_pool+0xb9/0x540 [ 90.243526][ T10] process_scheduled_works+0x7f7/0x1060 [ 90.243550][ T10] worker_thread+0xc99/0x13f0 [ 90.243572][ T10] kthread+0x2c7/0x360 [ 90.243594][ T10] ? __cfi_worker_thread+0x10/0x10 [ 90.243614][ T10] ? __cfi_kthread+0x10/0x10 [ 90.243642][ T10] ret_from_fork+0x64/0xa0 [ 90.243670][ T10] ? __cfi_kthread+0x10/0x10 [ 90.243692][ T10] ret_from_fork_asm+0x1a/0x30 [ 90.243713][ T10] [ 90.243719][ T10] [ 90.533718][ T10] Allocated by task 9: [ 90.537812][ T10] kasan_save_track+0x3e/0x80 [ 90.542537][ T10] kasan_save_alloc_info+0x3a/0x50 [ 90.547691][ T10] __kasan_kmalloc+0x96/0xb0 [ 90.552324][ T10] __kmalloc_cache_noprof+0x23c/0x470 [ 90.557742][ T10] roccat_connect+0x6a/0x540 [ 90.562378][ T10] savu_probe+0x1a7/0x3f0 [ 90.566753][ T10] hid_device_probe+0x2d1/0x5f0 [ 90.571648][ T10] really_probe+0x2e4/0x8b0 [ 90.576186][ T10] __driver_probe_device+0x193/0x280 [ 90.581515][ T10] driver_probe_device+0x54/0x3f0 [ 90.586574][ T10] __device_attach_driver+0x2f1/0x4b0 [ 90.591978][ T10] bus_for_each_drv+0x267/0x300 [ 90.596877][ T10] __device_attach+0x2c4/0x3c0 [ 90.601695][ T10] device_initial_probe+0x1e/0x30 [ 90.606757][ T10] bus_probe_device+0x18b/0x270 [ 90.611655][ T10] device_add+0x7fd/0xbf0 [ 90.616067][ T10] hid_add_device+0x3c4/0x5a0 [ 90.620791][ T10] usbhid_probe+0xdca/0x1310 [ 90.625428][ T10] usb_probe_interface+0x6ab/0xbf0 [ 90.630574][ T10] really_probe+0x2e4/0x8b0 [ 90.635116][ T10] __driver_probe_device+0x193/0x280 [ 90.640430][ T10] driver_probe_device+0x54/0x3f0 [ 90.645488][ T10] __device_attach_driver+0x2f1/0x4b0 [ 90.650894][ T10] bus_for_each_drv+0x267/0x300 [ 90.655776][ T10] __device_attach+0x2c4/0x3c0 [ 90.660581][ T10] device_initial_probe+0x1e/0x30 [ 90.665638][ T10] bus_probe_device+0x18b/0x270 [ 90.670547][ T10] device_add+0x7fd/0xbf0 [ 90.674923][ T10] usb_set_configuration+0x1aad/0x2080 [ 90.680431][ T10] usb_generic_driver_probe+0x95/0x160 [ 90.685924][ T10] usb_probe_device+0x1ef/0x3b0 [ 90.690810][ T10] really_probe+0x2e4/0x8b0 [ 90.695348][ T10] __driver_probe_device+0x193/0x280 [ 90.700665][ T10] driver_probe_device+0x54/0x3f0 [ 90.705725][ T10] __device_attach_driver+0x2f1/0x4b0 [ 90.711142][ T10] bus_for_each_drv+0x267/0x300 [ 90.716032][ T10] __device_attach+0x2c4/0x3c0 [ 90.720863][ T10] device_initial_probe+0x1e/0x30 [ 90.725925][ T10] bus_probe_device+0x18b/0x270 [ 90.730818][ T10] device_add+0x7fd/0xbf0 [ 90.735209][ T10] usb_new_device+0x98d/0x1500 [ 90.740016][ T10] hub_event+0x2dbd/0x4360 [ 90.744484][ T10] process_scheduled_works+0x7f7/0x1060 [ 90.750059][ T10] worker_thread+0xc99/0x13f0 [ 90.754783][ T10] kthread+0x2c7/0x360 [ 90.758888][ T10] ret_from_fork+0x64/0xa0 [ 90.763353][ T10] ret_from_fork_asm+0x1a/0x30 [ 90.768150][ T10] [ 90.770507][ T10] Freed by task 2438: [ 90.774512][ T10] kasan_save_track+0x3e/0x80 [ 90.779252][ T10] kasan_save_free_info+0x44/0x50 [ 90.784305][ T10] __kasan_slab_free+0x5f/0x80 [ 90.789108][ T10] kfree+0x158/0x440 [ 90.793036][ T10] roccat_release+0x2c3/0x390 [ 90.797752][ T10] __fput+0x208/0xa30 [ 90.801781][ T10] ____fput+0x20/0x30 [ 90.805823][ T10] task_work_run+0x1e8/0x260 [ 90.810457][ T10] resume_user_mode_work+0x35/0x50 [ 90.815603][ T10] syscall_exit_to_user_mode+0x63/0xb0 [ 90.821109][ T10] do_syscall_64+0x63/0xf0 [ 90.825583][ T10] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.831513][ T10] [ 90.833856][ T10] The buggy address belongs to the object at ffff888106656c00 [ 90.833856][ T10] which belongs to the cache kmalloc-512 of size 512 [ 90.847945][ T10] The buggy address is located 8 bytes inside of [ 90.847945][ T10] freed 512-byte region [ffff888106656c00, ffff888106656e00) [ 90.861614][ T10] [ 90.863986][ T10] The buggy address belongs to the physical page: [ 90.870422][ T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106654 [ 90.879301][ T10] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.887829][ T10] flags: 0x4000000000000040(head|zone=1) [ 90.893490][ T10] page_type: f5(slab) [ 90.897507][ T10] raw: 4000000000000040 ffff888100041c80 ffffea000408e300 dead000000000002 [ 90.906123][ T10] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 90.914740][ T10] head: 4000000000000040 ffff888100041c80 ffffea000408e300 dead000000000002 [ 90.923470][ T10] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 90.932174][ T10] head: 4000000000000002 ffffea0004199501 ffffffffffffffff 0000000000000000 [ 90.940880][ T10] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 90.949573][ T10] page dumped because: kasan: bad access detected [ 90.956030][ T10] page_owner tracks the page as allocated [ 90.961789][ T10] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1927, tgid 1927 (syz-executor), ts 72691147431, free_ts 72675101790 [ 90.982569][ T10] post_alloc_hook+0x37d/0x3b0 [ 90.987391][ T10] prep_new_page+0x2d/0x180 [ 90.991945][ T10] get_page_from_freelist+0x4aea/0x4ba0 [ 90.997541][ T10] __alloc_pages_noprof+0x35a/0x7e0 [ 91.002794][ T10] alloc_slab_page+0x6b/0x1e0 [ 91.007529][ T10] allocate_slab+0x69/0x430 [ 91.012078][ T10] ___slab_alloc+0x591/0x8c0 [ 91.016709][ T10] __kmalloc_noprof+0x2fc/0x510 [ 91.021595][ T10] fib6_info_alloc+0x52/0x180 [ 91.026309][ T10] ip6_route_info_create+0x520/0x14c0 [ 91.031726][ T10] ip6_route_add+0x2b/0x180 [ 91.036275][ T10] addrconf_permanent_addr+0x661/0x9a0 [ 91.041765][ T10] addrconf_notify+0x81a/0xeb0 [ 91.046562][ T10] notifier_call_chain+0x106/0x2b0 [ 91.051728][ T10] raw_notifier_call_chain+0x31/0x40 [ 91.057053][ T10] __dev_notify_flags+0x318/0x5a0 [ 91.062123][ T10] page last free pid 1927 tgid 1927 stack trace: [ 91.068475][ T10] free_unref_page+0xbb8/0xf70 [ 91.073287][ T10] __free_pages+0x6b/0x3b0 [ 91.077744][ T10] __free_slab+0xb2/0x110 [ 91.082114][ T10] free_slab+0x18/0xe0 [ 91.086216][ T10] __put_partials+0x115/0x150 [ 91.090927][ T10] put_cpu_partial+0x91/0xc0 [ 91.095564][ T10] __slab_free+0x1cf/0x2a0 [ 91.100031][ T10] ___cache_free+0xc9/0xe0 [ 91.104478][ T10] qlist_free_all+0xb5/0x130 [ 91.109110][ T10] kasan_quarantine_reduce+0x14f/0x180 [ 91.114608][ T10] __kasan_slab_alloc+0x28/0x90 [ 91.119497][ T10] __kmalloc_node_noprof+0x1fa/0x500 [ 91.124841][ T10] qdisc_alloc+0x90/0x8e0 [ 91.129220][ T10] qdisc_create_dflt+0x6f/0x3c0 [ 91.134122][ T10] dev_activate+0x306/0x1160 [ 91.138747][ T10] __dev_open+0x41c/0x540 [ 91.143119][ T10] [ 91.145461][ T10] Memory state around the buggy address: [ 91.151124][ T10] ffff888106656b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.159214][ T10] ffff888106656b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.167303][ T10] >ffff888106656c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.175392][ T10] ^ [ 91.179744][ T10] ffff888106656c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.187846][ T10] ffff888106656d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.195945][ T10] ================================================================== [ 91.206756][ T10] Disabling lock debugging due to kernel taint Sep 22 18:33:25 syzkaller kern.alert kernel: [ 90.956030][ T10] page_owner tracks the page as allocated Sep 22 18:33:25 syzkaller kern.alert kernel: [ 90.961789][ T10] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1927, tgid 1927 (syz-executor), ts 72691147431, free_ts 72675 Sep 22 18:33:25 syzkaller kern.alert kernel: [ 91.062123][ T10] page last free pid 1927 tgid 1927 stack trace: [ 91.463948][ T31] usb 5-1: USB disconnect, device number 10