last executing test programs: 3.388444484s ago: executing program 2 (id=897): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000ea180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 3.373753594s ago: executing program 2 (id=898): socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x4}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') socket$inet6(0xa, 0x800000000000002, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.302477066s ago: executing program 2 (id=899): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x140) mkdirat(r3, &(0x7f0000000380)='./file0\x00', 0xa8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000600)="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", 0xfd) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.236217627s ago: executing program 2 (id=900): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f00000002c0)={0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={r1, 0xffff, 0x0, 0x0, r0}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/rpc\x00') ftruncate(r3, 0x3119c976) r4 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000c000300081f"], 0x28}], 0x1}, 0x0) write(r5, &(0x7f0000000040), 0xffffff4a) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) write$FUSE_STATX(r3, &(0x7f00000006c0)={0x130, 0x0, 0x0, {0xffffffffffffff4d, 0xffff, 0x0, '\x00', {0x100, 0x2, 0x6, 0x6, r9, r10, 0x8000, '\x00', 0x10001, 0x2f, 0xfff, 0x7, {0x1, 0x1}, {0x4a, 0x6}, {0xfffffffffffffff8, 0x5}, {0x7, 0x5}, 0x6, 0xd2, 0x80000000, 0x4}}}, 0x130) r11 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f00000001c0), 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x40280, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 3.022243922s ago: executing program 2 (id=904): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}, {0x0, 0x0}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x86e, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x5d, 0x7e, 0x69, 0x8, 0xe8d, 0x7961, 0x28a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85c, 0x3, 0x3, 0x4, 0x50, 0xf9, "", [{{0x9, 0x4, 0x39, 0xa, 0x9, 0xff, 0xff, 0xff, 0x5, [@generic={0x5e, 0x21, "60625a876abb3ab0f0b25c8072400e1ec4fc9a132a75c934c5d125960f7b97ab64471a0d1e6794124eb2be217b2dddeace97a33ba9d270beecdb2a5b11f60e2d954b01ca4f0a8286fbb65c8e975d0479adb5ba834a905cb8ec825848"}], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x0, 0x0, [@generic={0xfe, 0xd, "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"}]}}, {{0x9, 0x5, 0x4a6f7fddcbe56d04, 0x0, 0x10, 0x8, 0x3, 0x3, [@generic={0x31, 0xe, "4db0af3843785f95437407d8fd42d216b667b268f766c319f3a8b5aac700304333b3fe9d4524db5b06552a8152ea62"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x9, 0x9, 0x1, [@generic={0xbe, 0xc, "534498656c2b4606bfafd0378e6c3511ffd7a54e3a8d66fbd2311fa21f35ebac68d5fbdef58ad74ad30b340cf7f46d398a88564114106722a4a285eb5d75af110a849e145ac3e95634e102a447ff6001e2211aae2d75a7c2f7e0ef4a24b65e7c125d633c03a800decd6e06362ff33f1762b6c1a2ce552a26bcbb4d57c7a107f436f7697a0f280fbfb0ab88137d67782922dbeeb7890242af2ba3f24526928c09bf5c63f074bd36c1fa0705bfb2c40c23559766e477051c1cd579b536"}, @generic={0x72, 0xf, "1dfa35f002f9c6aaf2515af36718ddfe05d7dc2387b99fd4c0739c3539ca60b152c24ed2c0bd54d53edc5675e6fbdfcfae81aa1d6f3fb96c10d6134cfbb7ed9a273f1724b64c857fdcf4c764832b44d619b726252b1bd6737771fc220dae69809dcf061197ff214cb08289859aa1b846"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x91, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x80}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x91, 0x0, 0xb2}}, {{0x9, 0x5, 0xd, 0x3, 0x5ff, 0x5, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x5, 0xe0, 0x4a, [@generic={0x19, 0x21, "bfa50e25535a24e6c2b9e995c518fb882c641d94b0584a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x7, 0xe8, 0x9c, [@generic={0x23, 0xf, "1cbf0f56c45b4c310e2f17146689633be68f5dbfcb4745387fcf61ed265b5f0a26"}]}}]}}, {{0x9, 0x4, 0xc0, 0x80, 0x2, 0xa, 0x0, 0x0, 0xb1, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b80943be"}, {0x5, 0x24, 0x0, 0xbf37}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x9, 0x6a}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x101, 0xf932, 0x1, 0x4a, 0x7, 0x9}, @country_functional={0xa, 0x24, 0x7, 0x7, 0xc8cc, [0x9, 0xc360]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x9, [0x9, 0x101, 0x2, 0x7, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xfa, 0x1ff}]}], [{{0x9, 0x5, 0x0, 0x3, 0x0, 0x2, 0xfa, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x101}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x1, 0x86, 0x1}}]}}, {{0x9, 0x4, 0x81, 0xa5, 0xd, 0x66, 0xb9, 0x80, 0x3, [], [{{0x9, 0x5, 0x81, 0x0, 0x10, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0xfe, 0xfc, 0xf5, [@generic={0x34, 0x30, "d4f8bdf1341c634b829a3333110864a1630f055d9e372b49497462f104184039006fef9f4b59047ab3b665ebc94bf96328cd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0xfb, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x0, 0x9, [@generic={0xbd, 0xd, "a35aef855c3fbed8a7506051053b63681f581c0392d6f5988a8368362a4b1ad017a1c5b6369f95be290a850d3d7a1be78dc8a322ac3adcba83523cdcfbe0029a77ac19ee91d47c2251fda27ae9f23f4efde8d00a699d7faec8fc6de2b9d55d80f4947f3c09cfe98f0955d79b1405b6c841ab4fe43c18769914dcc468addf6aad05357917c6714d6c888e8b89bdf24ab779d7bd8e83d75c5bb98fdee679077a68dd0607c55ee53e9303647009e48a2fe4795abcae320b94d8ed172d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x5, 0xd5, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3f7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x1, 0x1, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}, @generic={0xf7, 0x21, "161385402a12f66a95c1b4c2f4f9e5fc45ae22844e717197f9e65a3909a3b876bee39b343ce86dd0d23acbab39e4be52370585ed626656fdce2785100d6b1625905f32c887b5d9ce6bef88c34d3cccbc8e73593628e12e87462dc77e667d4ec39dfb39b63d3f6d44d97c89d3f1adf4a13a404e35336da84243be251672402dd0807e02291cb591d80be71641e15bc8b50d918e32b67c521144124c8593d9d2b2d22ccf74a1a9f06364452312d892896badbbd68f0634a927d09af6d8923ec2415698fe35cc987bc206f3c390a135e84b3af987204bc7313983948c2af6c5cfc5f254a651ec42cbc43c0a325ee3a807375c438025ff"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x8, 0x7, 0x5, [@generic={0x42, 0x2, "6de5eff201739a9c4a454e4bea85ed6dca8e9b8cbc50d2932620ace82eb604548a328708da606963ef435f747fa1d5f02efa1f7b6161ca90bd52028c403562fe"}, @generic={0x8d, 0x22, "396f367765998426caff91b0ca472d2e7abba656d1963632d4ed81e24c7362fb02cb3c4f4604fd7419f7267fd69baf871df1392e5d6dd722ea0befd15964ae6aea543fca84d8ea2f540f9fc7e9a8e04c69b0994b334adc7faff728c32b61a5dbf6fa75924605737f8e65d602a58bb08056ef6cd85389a7276756083f5d8308347e205626330525e5364ac8"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x420, 0xc, 0x9, 0x2f, [@generic={0xc2, 0x11, "4285bc16bd5807d211ae95f38184a6981f7a3c0afb08febda7d62ca0a9ffca60581042aa0d5e05b040605f7ed15fc637463a1648cf6e098184ed35e87c5a63e8029c10ab6f5cf2cac697d36687cc6a485968f8b471bfb8fecb9a7e1e59fcb40af5bdc3e5ecead3eae5a4389e418b0e7fa403a6274c8d8557204d39d1c23da96b5472e71fac90e306c5adae516cf6e522b0f055fa7894a6a07a2678c79900adba19b69b3c67464f262f1007acd202718a4ac38974b2961c0f9a7c303ac3c77a73"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x1, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xe}]}}, {{0x9, 0x5, 0xe, 0x2, 0x610, 0x8, 0x6, 0x81, [@generic={0x3a, 0xc, "ec0d2c1d4d4ddd6c42adb778bda3fff65eda24e67c9096ec4a59be9d985ebccf3e0b805a2cc7558236f1bb8c4d12704b0339b53e58ebb5e4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3f, 0x20, 0x80, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff8}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x1, 0x6, 0x0, 0x8, 0x5}, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f3600040b10010c110008ff00e00826778e8a6a30b5666a7b58186f0a2ce30000000f0f0100000000fcffbf00000000000003100b0b100104ab000708c500a3"], 0x5, [{0x26, &(0x7f0000000d00)=ANY=[@ANYBLOB="26033f4232292f66aea6edfdc87184227f942fd59d201f5a1e0b2e7bd67c4c2908b54c1535aa"]}, {0x12, &(0x7f0000000d40)=@string={0x12, 0x3, "210b977f3707fce9b24c7d571e11777c"}}, {0xe6, &(0x7f0000000e40)=@string={0xe6, 0x3, "ede13d7a9048fd3536db995a22d98af7e88ce9dda6055e91f9467d1a654b377bbd2a341961743395e1de9e8e4c9721f7fcb0fe89827f3f68d83d24aacf42ecc355e3775dd071c4fd8995e4ace494c97b353206cfc92a39eb008f7644764679aa14cafc198c31c1e8ce70f5e0269dfabf2379780a2094e52b4d4b3d2617478c9769ac0240ab1f7136b04d042c6bc07b01a5ec80a6abf7760543ae886dba740fa641336bbb626fed2c4aa53864d1949400b78199f6841ded4b3619990fa588e0fb726683ac7cb2c3e17bf2782e6ef4f6f88db5e06c6080640cd3f054a47586148419de6e53"}}, {0xc3, &(0x7f0000000f40)=@string={0xc3, 0x3, "6964ec196edb09f947c0cc6f61724f84f66594ad59aaef820b369ff1a5680d036bccc556c8211195d60312fee9989f72f242aa6074fa57ef78eff3b431b5603df02fc47e12f988dfd0c3cd67f3d7b4a33c5362a7fcd2b3985594842c2fd1fde65282fe942c331af5dab6fb7518bdcbacfd1385979af247e56ed565060d96fa11f9a788aa2fc6fa73d9b9882d7583bc80970fdeafb1a3c69afc0ba14e10d87cae7df4074b419cc354adc5d8c74162b7f42d21914814f43c7d2af1226be561e96ded"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.852050128s ago: executing program 0 (id=917): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008f0ff00", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.79075834s ago: executing program 0 (id=918): r0 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='serial8250', 0xa) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./sys/bus/platform/drivers/ohci-platform/bind\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67726f750a8769643d304c534b8cbe0ab7eea437f9ce319bb6c6c0bca4302c2a5e86f127b8654947a0c4143760b62cb9c842f0e27d6e9f391051cec489213d88cd54f1b1a8bbcef29572cf", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000009,max_read=0x00000000000003fc,allow_other,fsname=,\x00']) 1.643877433s ago: executing program 0 (id=919): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x800000002, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.34628617s ago: executing program 3 (id=927): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4094, 0xba8}, {&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x6}, 0x400c}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}, 0x80002}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 1.33906154s ago: executing program 3 (id=928): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/188, 0xbc}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000001740)=""/4103, 0x1007}, {&(0x7f0000001640)=""/88, 0x58}], 0x5}, 0x9a}], 0x4, 0x40010140, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004a000101000710000000000008000500"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x6, @remote}, 0x10, {0x2, 0x4e22, @multicast1}, 'veth0_to_team\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x22010079, 0x1003, 0x3, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0xe) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x487, 0x3, 0x400000000000007, 0xd, 0xfff7ffff, 0xff, 0x101, 0x2000, 0xffff1854, 0x0, 0x0, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x6000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) 1.3121159s ago: executing program 0 (id=929): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000080)='sysfs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 1.250351652s ago: executing program 0 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000202110200000000400000000a000002300002802c800180140003000000000000000000000000000000000114000400fc0200000700000000000000000000019286c26e91c0c362d194ce79835b54887d475c83a6652b7407e552482314e45eecd3ff3dfbe3d463a66b90bd06e97cee3c"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$KVM_RUN(r3, 0xae80, 0x0) 473.449659ms ago: executing program 3 (id=937): timer_create(0x0, &(0x7f0000000140)={0x0, 0x34, 0x1, @thr={&(0x7f0000000080)="503a6a5fb7e23c0f5d583a678f28952b64e3c8adba5fad824a8e0d00735a975706c944970147aadb803b01a8542ab7dfee407e974baf05eff4e5c2ef952b76ffa4a3c485b06e02cbc69ccd7a105c3ffebff92b0cd05e70e6a4a242071adcafeda13203fc0ae43900feee8c4ed7ac28fd12bb5a191ab075545932d8cf5e", &(0x7f0000000100)="d1bc31dfc5e843ab82bb2705a93f2c327d6ea16d"}}, &(0x7f00000001c0)=0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x800, 0x0, 0x2, 0x8, 0xfffc}, 0x20) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x8c) fchdir(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0xfeff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) fstat(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@volatile}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x31, 0x38, 0x31, 0x37, 0x33, 0x63, 0x61], 0x2d, [0x33, 0x65, 0x37, 0x32], 0x2d, [0x32, 0x0, 0x38, 0x30], 0x2d, [0x65, 0x39, 0x64], 0x2d, [0x31, 0x65, 0x63, 0x64, 0x32, 0x33, 0x39, 0x5b]}}}, {@subj_user={'subj_user', 0x3d, '/'}}, {@fowner_lt={'fowner<', r6}}, {@uid_gt={'uid>', r7}}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) fchdir(r2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r10 = socket$netlink(0x10, 0x3, 0x0) preadv(r8, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x25, 0x10000) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 472.154719ms ago: executing program 1 (id=945): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$uinput_user_dev(r2, &(0x7f00000007c0)={'syz0\x00', {0x9, 0x0, 0x8ad, 0x6}, 0x17, [0x2, 0x8, 0xfffffffa, 0x9, 0x9ad8, 0x8, 0x5, 0x8, 0x6, 0x80000000, 0x5, 0x3, 0x4, 0xfffffffd, 0xfff, 0x6, 0x10, 0x3, 0x3, 0x10, 0x4, 0x4, 0x0, 0xfffffffa, 0x8000, 0x4, 0x8, 0x2, 0x85af, 0x8, 0x1ff, 0x6, 0x80000000, 0x3, 0x5, 0x9, 0xffff, 0x1, 0x0, 0xfffffffa, 0x7ff, 0x8001, 0x7, 0x56d, 0x9, 0x7fffffff, 0x80, 0x1, 0x1, 0xb, 0x0, 0x7, 0x4, 0xc7, 0x200, 0x1, 0x5, 0x66d2, 0x10001, 0x3, 0x2, 0x5, 0x3, 0x7], [0x4, 0x3, 0x5, 0xe0, 0x9, 0x7, 0x401, 0x100, 0x9, 0x8, 0x4, 0x3, 0x800, 0x40, 0x6, 0x40, 0x7ff, 0x3800000, 0x4, 0x534e34fd, 0x8, 0x101, 0x3, 0x81, 0x4, 0x7, 0xf0, 0x9, 0x541816e1, 0x2, 0xf9, 0x4, 0x8, 0xffff, 0x80, 0x9, 0xdeba, 0x2, 0x9, 0x8, 0xa, 0x7fffffff, 0x4a, 0xffff404d, 0x10001, 0x9, 0x80000001, 0x5, 0xffff, 0x6, 0x3, 0x2, 0x7fff, 0x2, 0xfc000000, 0x80000000, 0x3, 0x4, 0xd70b, 0x1ff, 0x72e05e06, 0x200, 0x0, 0x115dd73f], [0xfffffffc, 0x96b, 0x9, 0x2, 0x7f, 0x2, 0xff, 0x10000, 0x3, 0x10000, 0x1, 0x0, 0x3, 0x4, 0x0, 0x9, 0x5391, 0x80000001, 0x1, 0x0, 0x2, 0x1, 0x2, 0x7, 0x3ff03449, 0x1, 0x7, 0x6, 0x10, 0x101, 0x80000001, 0x9, 0x1, 0xa9, 0x200, 0x7ff, 0x0, 0x4, 0x7, 0x7, 0x1, 0x1, 0xe062, 0x8, 0xff, 0xb74, 0x1, 0xe, 0x6, 0x4, 0x7f, 0x3, 0x3, 0x8000, 0xac6, 0xa6a, 0x2, 0x9, 0x7, 0x2, 0x14, 0x7, 0x5, 0x9c], [0x2, 0x48fcfc89, 0x101, 0x5, 0x4, 0x81, 0x1ff, 0x2, 0xc5b, 0xffffff27, 0x0, 0x800, 0xb, 0x1, 0x3fe0, 0x400, 0x5, 0x46, 0x6, 0x9, 0xd4, 0xbf7, 0x3, 0x7, 0x7, 0x5, 0x7f, 0x4, 0x1, 0x2, 0x7, 0x7, 0x77f6, 0xd, 0xd, 0x4, 0x2, 0x1, 0x6, 0x0, 0xee, 0x1, 0x6, 0x4, 0x300de4e2, 0x2, 0x8000, 0x7, 0x200, 0xa2, 0x8, 0x2, 0x2, 0xcc0, 0x8, 0x0, 0x2, 0x6, 0x1b7, 0xbc8, 0x6d2d, 0x4, 0x101, 0x6]}, 0x45c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/137, 0x89}], 0x9, 0x40, 0x116d) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x5, 0x5, 0x4, 0x8ff, 0x0, 0x8, 0x2}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000f00)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000e42, 0x0, 0x2, 0x5, 0x200000000e9b], 0x0, 0x0, &(0x7f00000001c0)=ANY=[]}, 0x78) 358.072752ms ago: executing program 1 (id=938): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x1f) 357.468752ms ago: executing program 0 (id=939): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x103002, 0x107) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002c80)={0x30}, 0x30) r1 = syz_pidfd_open(0x0, 0x0) ftruncate(r1, 0x309c000000000) r2 = syz_usb_connect(0x3, 0x55, &(0x7f0000000000)=ANY=[], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x8) syz_usb_connect$uac3(0x5, 0x140, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x98, 0x582, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x3, 0x1, 0x2, 0xa0, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x59, 0x5}, [@mixer_unit={0x9, 0x24, 0x5, 0x2, 0x59, "2058be35"}, @selector_unit={0x9, 0x24, 0xc, 0x1, 0x4, "3c263ceb"}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x0, 0x5, 0x6, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x5, 0x1, 0x4, 0xa, 0xd4}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x402, 0x6, 0x5, 0x4, 0x4, 0x8, 0x57a, 0x5}, @processing_unit={0x11, 0x24, 0x9, 0x4, 0x4, [0x1, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0xb, 0x40, "fb4566fd4a6e"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8681, 0x7, "2ffda49346a91ab2"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x10, 0x0, "0821bec155"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xf9, 0x0, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x10, 0x7, {0xa, 0x25, 0x25, 0x7, 0x2, 0xa000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffe, 0x806, 0x3, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x0, 0xd, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x8, 0x7, "3af3f553e10f"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0xfa, "1d5947c38970"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2d, 0x4, 0x2, 0xc4, "99ae6a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x53, 0xf9, {0xa, 0x25, 0x25, 0x7f, 0xe, 0x8000}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0xd, 0x5, 0x4, 0x20, 0x7}, 0x32, &(0x7f0000000940)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6de72d85c4abd9a4fcf89b6f82115d7b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x5, 0xf990}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x4, 0xec, 0x3}]}, 0x8, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x102b}}, {0x62, &(0x7f00000009c0)=@string={0x62, 0x3, "167093b94aab9b9e9d769952206be443092c96aa7cc782b789e83e4d5f3ab373886e9c8daedb4fa0d69cd900af98ba5fd4ba70f3d96af75659c2f7944985eaee1b1c0386ae5a7729d48f367fdaa05c0f6d408cc3dc4a1d177cf1b62742a85c67"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3c00}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x810}}]}) truncate(&(0x7f0000000340)='./file1\x00', 0x9) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x40, 0xd, 0x35, {0x35, 0x23, "70d19076534640f800ceb51ffca29f132206bc78f2b4ae5b386e33df59b8ab565ac1c50958b2296d815f4fa52c925c80346f7d"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)=ANY=[@ANYBLOB="000f0f000010050f0f010a100700ba0300"], &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x2, 0x4, "2fd4e3b9", "72b66d50"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x90, 0x10, 0x0, 0x6, 0x0, 0x4, 0xd332}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x8, 0xfc, "25e1a8f4ae35cf6cb20d1da0aaee8ecaecbd755dd7b25ad72ba2f3cbbee1c8f60caecc53dc36ec8af0b843fd6045cd6de9bc99bffc71e93e14e587e947208e2192d270749aa62f456531bfcb738febf09ac6456fc7119e1225e219fe91c114584e950a6ea75afa0f28b16f40bedf907c42903d18560e4e239978f4b71cf8cf6642591a526d405cc0ff0e919a10d11a3cfda754b0b044f5e690afc5d25a478a1f45484f0a1f7d001f411d6bbdd717c5a46cb873791229abd74d33ab1b81adf63e9a979d763d446e74fb40406076970f19aed5e51d5188bf219f21901cee510546bb0e2d585688eb0976b7baeb9b0d0f22f6a31a84b12a5ce71079b0ac"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x37}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000400)=ANY=[@ANYBLOB="2000050000003ee38000"], &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b0ee"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "6892"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x103002, 0x107) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) (async) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000002c80)={0x30}, 0x30) (async) syz_pidfd_open(0x0, 0x0) (async) ftruncate(r1, 0x309c000000000) (async) syz_usb_connect(0x3, 0x55, &(0x7f0000000000)=ANY=[], 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x8) (async) syz_usb_connect$uac3(0x5, 0x140, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x98, 0x582, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x3, 0x1, 0x2, 0xa0, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x59, 0x5}, [@mixer_unit={0x9, 0x24, 0x5, 0x2, 0x59, "2058be35"}, @selector_unit={0x9, 0x24, 0xc, 0x1, 0x4, "3c263ceb"}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x0, 0x5, 0x6, 0x8}, @source_unit={0xc, 0x24, 0xb, 0x5, 0x1, 0x4, 0xa, 0xd4}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x402, 0x6, 0x5, 0x4, 0x4, 0x8, 0x57a, 0x5}, @processing_unit={0x11, 0x24, 0x9, 0x4, 0x4, [0x1, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0xb, 0x40, "fb4566fd4a6e"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8681, 0x7, "2ffda49346a91ab2"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x10, 0x0, "0821bec155"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xf9, 0x0, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x10, 0x7, {0xa, 0x25, 0x25, 0x7, 0x2, 0xa000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffe, 0x806, 0x3, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x0, 0xd, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x8, 0x7, "3af3f553e10f"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0xfa, "1d5947c38970"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2d, 0x4, 0x2, 0xc4, "99ae6a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x53, 0xf9, {0xa, 0x25, 0x25, 0x7f, 0xe, 0x8000}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0xd, 0x5, 0x4, 0x20, 0x7}, 0x32, &(0x7f0000000940)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6de72d85c4abd9a4fcf89b6f82115d7b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x5, 0xf990}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x81, 0x4, 0xec, 0x3}]}, 0x8, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x102b}}, {0x62, &(0x7f00000009c0)=@string={0x62, 0x3, "167093b94aab9b9e9d769952206be443092c96aa7cc782b789e83e4d5f3ab373886e9c8daedb4fa0d69cd900af98ba5fd4ba70f3d96af75659c2f7944985eaee1b1c0386ae5a7729d48f367fdaa05c0f6d408cc3dc4a1d177cf1b62742a85c67"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3c00}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x810}}]}) (async) truncate(&(0x7f0000000340)='./file1\x00', 0x9) (async) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x40, 0xd, 0x35, {0x35, 0x23, "70d19076534640f800ceb51ffca29f132206bc78f2b4ae5b386e33df59b8ab565ac1c50958b2296d815f4fa52c925c80346f7d"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)=ANY=[@ANYBLOB="000f0f000010050f0f010a100700ba0300"], &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x2, 0x4, "2fd4e3b9", "72b66d50"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x90, 0x10, 0x0, 0x6, 0x0, 0x4, 0xd332}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x8, 0xfc, "25e1a8f4ae35cf6cb20d1da0aaee8ecaecbd755dd7b25ad72ba2f3cbbee1c8f60caecc53dc36ec8af0b843fd6045cd6de9bc99bffc71e93e14e587e947208e2192d270749aa62f456531bfcb738febf09ac6456fc7119e1225e219fe91c114584e950a6ea75afa0f28b16f40bedf907c42903d18560e4e239978f4b71cf8cf6642591a526d405cc0ff0e919a10d11a3cfda754b0b044f5e690afc5d25a478a1f45484f0a1f7d001f411d6bbdd717c5a46cb873791229abd74d33ab1b81adf63e9a979d763d446e74fb40406076970f19aed5e51d5188bf219f21901cee510546bb0e2d585688eb0976b7baeb9b0d0f22f6a31a84b12a5ce71079b0ac"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x37}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000400)=ANY=[@ANYBLOB="2000050000003ee38000"], &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b0ee"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "6892"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) (async) 353.848542ms ago: executing program 1 (id=940): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 257.054904ms ago: executing program 1 (id=941): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) lseek(r0, 0x0, 0x500) 211.923796ms ago: executing program 1 (id=942): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000580)={&(0x7f00000003c0)=[{0x5, 0x10001, 0x2, 0x47a9878f, 0x2}, {0x100000, 0x401, 0x100000001, 0x1, 0xc}, {0x2000, 0x100000001, 0x4, 0x5, 0x1}, {0x5, 0x20a, 0xde, 0xffffffffffffff68, 0x6}, {0x6, 0x9, 0xc84d, 0x2, 0x8}, {0xb, 0x2, 0x8000000000000001, 0x8, 0x2}, {0x0, 0x8, 0x5, 0x1, 0x5}, {0x6, 0x3, 0x3, 0x9, 0x7}, {0xfffffffffffffffc, 0xffffffff, 0x9, 0x8, 0x3}, {0x80000001, 0x9, 0x28e8, 0x6, 0x4}], 0xa, 0x28, 0xf, 0xfffffffffffffffb}) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)="c867", 0x2}], 0x1, 0x31, 0x4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) 211.196725ms ago: executing program 3 (id=943): socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x4}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') socket$inet6(0xa, 0x800000000000002, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 30.56988ms ago: executing program 2 (id=944): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000002200)=""/4100, 0x1004}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/136, 0x88}], 0x7}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) 30.20142ms ago: executing program 3 (id=946): r0 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xcae, 0x1000, 0x3, 0x2f}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) r1 = dup(r0) syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0x4, 0x4, 0x0, 0x0, 0x6, 0x2, 0xf000, '\x00', 0x401}) 28.11427ms ago: executing program 1 (id=953): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}, {0x0, 0x0}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x86e, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x5d, 0x7e, 0x69, 0x8, 0xe8d, 0x7961, 0x28a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85c, 0x3, 0x3, 0x4, 0x50, 0xf9, "", [{{0x9, 0x4, 0x39, 0xa, 0x9, 0xff, 0xff, 0xff, 0x5, [@generic={0x5e, 0x21, "60625a876abb3ab0f0b25c8072400e1ec4fc9a132a75c934c5d125960f7b97ab64471a0d1e6794124eb2be217b2dddeace97a33ba9d270beecdb2a5b11f60e2d954b01ca4f0a8286fbb65c8e975d0479adb5ba834a905cb8ec825848"}], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x0, 0x0, [@generic={0xfe, 0xd, "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"}]}}, {{0x9, 0x5, 0x4a6f7fddcbe56d04, 0x0, 0x10, 0x8, 0x3, 0x3, [@generic={0x31, 0xe, "4db0af3843785f95437407d8fd42d216b667b268f766c319f3a8b5aac700304333b3fe9d4524db5b06552a8152ea62"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x9, 0x9, 0x1, [@generic={0xbe, 0xc, "534498656c2b4606bfafd0378e6c3511ffd7a54e3a8d66fbd2311fa21f35ebac68d5fbdef58ad74ad30b340cf7f46d398a88564114106722a4a285eb5d75af110a849e145ac3e95634e102a447ff6001e2211aae2d75a7c2f7e0ef4a24b65e7c125d633c03a800decd6e06362ff33f1762b6c1a2ce552a26bcbb4d57c7a107f436f7697a0f280fbfb0ab88137d67782922dbeeb7890242af2ba3f24526928c09bf5c63f074bd36c1fa0705bfb2c40c23559766e477051c1cd579b536"}, @generic={0x72, 0xf, "1dfa35f002f9c6aaf2515af36718ddfe05d7dc2387b99fd4c0739c3539ca60b152c24ed2c0bd54d53edc5675e6fbdfcfae81aa1d6f3fb96c10d6134cfbb7ed9a273f1724b64c857fdcf4c764832b44d619b726252b1bd6737771fc220dae69809dcf061197ff214cb08289859aa1b846"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x91, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x80}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x91, 0x0, 0xb2}}, {{0x9, 0x5, 0xd, 0x3, 0x5ff, 0x5, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x5, 0xe0, 0x4a, [@generic={0x19, 0x21, "bfa50e25535a24e6c2b9e995c518fb882c641d94b0584a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x7, 0xe8, 0x9c, [@generic={0x23, 0xf, "1cbf0f56c45b4c310e2f17146689633be68f5dbfcb4745387fcf61ed265b5f0a26"}]}}]}}, {{0x9, 0x4, 0xc0, 0x80, 0x2, 0xa, 0x0, 0x0, 0xb1, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b80943be"}, {0x5, 0x24, 0x0, 0xbf37}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x9, 0x6a}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x101, 0xf932, 0x1, 0x4a, 0x7, 0x9}, @country_functional={0xa, 0x24, 0x7, 0x7, 0xc8cc, [0x9, 0xc360]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x9, [0x9, 0x101, 0x2, 0x7, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xfa, 0x1ff}]}], [{{0x9, 0x5, 0x0, 0x3, 0x0, 0x2, 0xfa, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x101}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x1, 0x86, 0x1}}]}}, {{0x9, 0x4, 0x81, 0xa5, 0xd, 0x66, 0xb9, 0x80, 0x3, [], [{{0x9, 0x5, 0x81, 0x0, 0x10, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0xfe, 0xfc, 0xf5, [@generic={0x34, 0x30, "d4f8bdf1341c634b829a3333110864a1630f055d9e372b49497462f104184039006fef9f4b59047ab3b665ebc94bf96328cd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0xfb, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x0, 0x9, [@generic={0xbd, 0xd, "a35aef855c3fbed8a7506051053b63681f581c0392d6f5988a8368362a4b1ad017a1c5b6369f95be290a850d3d7a1be78dc8a322ac3adcba83523cdcfbe0029a77ac19ee91d47c2251fda27ae9f23f4efde8d00a699d7faec8fc6de2b9d55d80f4947f3c09cfe98f0955d79b1405b6c841ab4fe43c18769914dcc468addf6aad05357917c6714d6c888e8b89bdf24ab779d7bd8e83d75c5bb98fdee679077a68dd0607c55ee53e9303647009e48a2fe4795abcae320b94d8ed172d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x5, 0xd5, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3f7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x1, 0x1, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x3}, @generic={0xf7, 0x21, "161385402a12f66a95c1b4c2f4f9e5fc45ae22844e717197f9e65a3909a3b876bee39b343ce86dd0d23acbab39e4be52370585ed626656fdce2785100d6b1625905f32c887b5d9ce6bef88c34d3cccbc8e73593628e12e87462dc77e667d4ec39dfb39b63d3f6d44d97c89d3f1adf4a13a404e35336da84243be251672402dd0807e02291cb591d80be71641e15bc8b50d918e32b67c521144124c8593d9d2b2d22ccf74a1a9f06364452312d892896badbbd68f0634a927d09af6d8923ec2415698fe35cc987bc206f3c390a135e84b3af987204bc7313983948c2af6c5cfc5f254a651ec42cbc43c0a325ee3a807375c438025ff"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x8, 0x7, 0x5, [@generic={0x42, 0x2, "6de5eff201739a9c4a454e4bea85ed6dca8e9b8cbc50d2932620ace82eb604548a328708da606963ef435f747fa1d5f02efa1f7b6161ca90bd52028c403562fe"}, @generic={0x8d, 0x22, "396f367765998426caff91b0ca472d2e7abba656d1963632d4ed81e24c7362fb02cb3c4f4604fd7419f7267fd69baf871df1392e5d6dd722ea0befd15964ae6aea543fca84d8ea2f540f9fc7e9a8e04c69b0994b334adc7faff728c32b61a5dbf6fa75924605737f8e65d602a58bb08056ef6cd85389a7276756083f5d8308347e205626330525e5364ac8"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x420, 0xc, 0x9, 0x2f, [@generic={0xc2, 0x11, "4285bc16bd5807d211ae95f38184a6981f7a3c0afb08febda7d62ca0a9ffca60581042aa0d5e05b040605f7ed15fc637463a1648cf6e098184ed35e87c5a63e8029c10ab6f5cf2cac697d36687cc6a485968f8b471bfb8fecb9a7e1e59fcb40af5bdc3e5ecead3eae5a4389e418b0e7fa403a6274c8d8557204d39d1c23da96b5472e71fac90e306c5adae516cf6e522b0f055fa7894a6a07a2678c79900adba19b69b3c67464f262f1007acd202718a4ac38974b2961c0f9a7c303ac3c77a73"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x1, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xe}]}}, {{0x9, 0x5, 0xe, 0x2, 0x610, 0x8, 0x6, 0x81, [@generic={0x3a, 0xc, "ec0d2c1d4d4ddd6c42adb778bda3fff65eda24e67c9096ec4a59be9d985ebccf3e0b805a2cc7558236f1bb8c4d12704b0339b53e58ebb5e4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3f, 0x20, 0x80, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff8}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x1, 0x6, 0x0, 0x8, 0x5}, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f3600040b10010c110008ff00e00826778e8a6a30b5666a7b58186f0a2ce30000000f0f0100000000fcffbf00000000000003100b0b100104ab000708c500a3"], 0x5, [{0x26, &(0x7f0000000d00)=ANY=[@ANYBLOB="26033f4232292f66aea6edfdc87184227f942fd59d201f5a1e0b2e7bd67c4c2908b54c1535aa"]}, {0x12, &(0x7f0000000d40)=@string={0x12, 0x3, "210b977f3707fce9b24c7d571e11777c"}}, {0xe6, &(0x7f0000000e40)=@string={0xe6, 0x3, "ede13d7a9048fd3536db995a22d98af7e88ce9dda6055e91f9467d1a654b377bbd2a341961743395e1de9e8e4c9721f7fcb0fe89827f3f68d83d24aacf42ecc355e3775dd071c4fd8995e4ace494c97b353206cfc92a39eb008f7644764679aa14cafc198c31c1e8ce70f5e0269dfabf2379780a2094e52b4d4b3d2617478c9769ac0240ab1f7136b04d042c6bc07b01a5ec80a6abf7760543ae886dba740fa641336bbb626fed2c4aa53864d1949400b78199f6841ded4b3619990fa588e0fb726683ac7cb2c3e17bf2782e6ef4f6f88db5e06c6080640cd3f054a47586148419de6e53"}}, {0xc3, &(0x7f0000000f40)=@string={0xc3, 0x3, "6964ec196edb09f947c0cc6f61724f84f66594ad59aaef820b369ff1a5680d036bccc556c8211195d60312fee9989f72f242aa6074fa57ef78eff3b431b5603df02fc47e12f988dfd0c3cd67f3d7b4a33c5362a7fcd2b3985594842c2fd1fde65282fe942c331af5dab6fb7518bdcbacfd1385979af247e56ed565060d96fa11f9a788aa2fc6fa73d9b9882d7583bc80970fdeafb1a3c69afc0ba14e10d87cae7df4074b419cc354adc5d8c74162b7f42d21914814f43c7d2af1226be561e96ded"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 0s ago: executing program 3 (id=947): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001240)="4fb6b3c65f18ee12bc9643b50723670ed775fd626fd07522a419a1bf640fbb", 0x1f}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x81) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2b106b47", 0x4}], 0x1}}], 0x1, 0x4040840) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x100, 0x5, 0x6, 0x2, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xfffffffbffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0x8, 0x103, 0x3], 0x0, 0x41801}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ption "workdir=./file0" is useless in a non-upper mount, ignore [ 93.682971][ T1764] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.691436][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 93.716672][ T9] usb 2-1: USB disconnect, device number 23 [ 93.860316][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 93.867869][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 93.877216][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.885507][ T10] usb 3-1: Product: syz [ 93.889768][ T10] usb 3-1: Manufacturer: syz [ 93.894601][ T10] usb 3-1: SerialNumber: syz [ 94.060363][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 94.210304][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 94.216564][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.225177][ T9] usb 2-1: config 0 has no interface number 0 [ 94.231413][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 94.239564][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.248890][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.257003][ T9] usb 2-1: Product: syz [ 94.261334][ T9] usb 2-1: Manufacturer: syz [ 94.265952][ T9] usb 2-1: SerialNumber: syz [ 94.850337][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 95.001485][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.012498][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.021695][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.258293][ T9] usb 4-1: USB disconnect, device number 20 [ 95.277188][ T36] audit: type=1400 audit(1785471263.440:298): avc: denied { create } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.298736][ T36] audit: type=1400 audit(1785471263.470:299): avc: denied { bind } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.318237][ T36] audit: type=1400 audit(1785471263.470:300): avc: denied { listen } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.337839][ T36] audit: type=1400 audit(1785471263.470:301): avc: denied { connect } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.358160][ T36] audit: type=1400 audit(1785471263.470:302): avc: denied { write } for pid=1778 comm="syz.3.531" path="socket:[18829]" dev="sockfs" ino=18829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.381584][ T36] audit: type=1400 audit(1785471263.470:303): avc: denied { accept } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.401234][ T36] audit: type=1400 audit(1785471263.470:304): avc: denied { read } for pid=1778 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.163780][ T1782] mmap: syz.3.532 (1782) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.393895][ T360] usb 3-1: USB disconnect, device number 18 [ 96.417021][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 96.560358][ T9] usb 4-1: device descriptor read/64, error -71 [ 96.744308][ T360] usb 2-1: USB disconnect, device number 24 [ 96.780798][ T1790] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 96.789896][ T1790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.800298][ T9] usb 4-1: device descriptor read/64, error -71 [ 97.050296][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 97.180429][ T1807] FAULT_INJECTION: forcing a failure. [ 97.180429][ T1807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.195638][ T9] usb 4-1: device descriptor read/64, error -71 [ 97.210300][ T1807] CPU: 0 UID: 0 PID: 1807 Comm: syz.1.539 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 97.210326][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.210337][ T1807] Call Trace: [ 97.210342][ T1807] [ 97.210349][ T1807] __dump_stack+0x21/0x30 [ 97.210376][ T1807] dump_stack_lvl+0x140/0x1c0 [ 97.210397][ T1807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.210420][ T1807] ? sysfs_emit+0x114/0x190 [ 97.210435][ T1807] dump_stack+0x19/0x20 [ 97.210456][ T1807] should_fail_ex+0x3c2/0x510 [ 97.210474][ T1807] should_fail+0xf/0x20 [ 97.210490][ T1807] should_fail_usercopy+0x1e/0x30 [ 97.210509][ T1807] _copy_to_iter+0x1a6/0x1520 [ 97.210529][ T1807] ? online_show+0x76/0xa0 [ 97.210546][ T1807] ? __virt_addr_valid+0x2a1/0x370 [ 97.210565][ T1807] ? __cfi__copy_to_iter+0x10/0x10 [ 97.210585][ T1807] ? __check_object_size+0x54c/0x870 [ 97.210602][ T1807] ? __cfi___check_object_size+0x10/0x10 [ 97.210618][ T1807] ? tokenize_frame_descr+0x50/0xc0 [ 97.210635][ T1807] ? kernfs_seq_stop+0x125/0x140 [ 97.210659][ T1807] seq_read_iter+0xcb2/0xf30 [ 97.210679][ T1807] ? __cfi_selinux_file_permission+0x10/0x10 [ 97.210697][ T1807] kernfs_fop_read_iter+0x149/0x570 [ 97.210720][ T1807] vfs_read+0x60e/0xc70 [ 97.210736][ T1807] ? __cfi_vfs_read+0x10/0x10 [ 97.210751][ T1807] ? __cfi_mutex_lock+0x10/0x10 [ 97.210775][ T1807] ksys_read+0x145/0x260 [ 97.210791][ T1807] ? __cfi_ksys_read+0x10/0x10 [ 97.210807][ T1807] ? __kasan_check_read+0x15/0x20 [ 97.210822][ T1807] __x64_sys_read+0x7f/0x90 [ 97.210837][ T1807] x64_sys_call+0x2638/0x2ee0 [ 97.210852][ T1807] do_syscall_64+0x57/0xf0 [ 97.210868][ T1807] ? clear_bhb_loop+0x50/0xa0 [ 97.210890][ T1807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.210910][ T1807] RIP: 0033:0x7f659739e019 [ 97.210924][ T1807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.210937][ T1807] RSP: 002b:00007f6598185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.210954][ T1807] RAX: ffffffffffffffda RBX: 00007f6597625fa0 RCX: 00007f659739e019 [ 97.210967][ T1807] RDX: 0000000000002020 RSI: 0000200000001980 RDI: 0000000000000004 [ 97.210977][ T1807] RBP: 00007f6598185090 R08: 0000000000000000 R09: 0000000000000000 [ 97.210987][ T1807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.210996][ T1807] R13: 00007f6597626038 R14: 00007f6597625fa0 R15: 00007fff03cb7708 [ 97.211013][ T1807] [ 97.508807][ T1809] syzkaller1: entered promiscuous mode [ 97.515334][ T1809] syzkaller1: entered allmulticast mode [ 97.578580][ T1813] FAULT_INJECTION: forcing a failure. [ 97.578580][ T1813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.591817][ T1813] CPU: 0 UID: 0 PID: 1813 Comm: syz.1.542 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 97.591842][ T1813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.591852][ T1813] Call Trace: [ 97.591857][ T1813] [ 97.591863][ T1813] __dump_stack+0x21/0x30 [ 97.591890][ T1813] dump_stack_lvl+0x140/0x1c0 [ 97.591912][ T1813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.591937][ T1813] ? __kasan_check_read+0x15/0x20 [ 97.591953][ T1813] ? vmx_read_guest_seg_ar+0x179/0x350 [ 97.591974][ T1813] dump_stack+0x19/0x20 [ 97.591995][ T1813] should_fail_ex+0x3c2/0x510 [ 97.592013][ T1813] should_fail+0xf/0x20 [ 97.592029][ T1813] should_fail_usercopy+0x1e/0x30 [ 97.592047][ T1813] __kvm_read_guest_page+0x177/0x210 [ 97.592065][ T1813] kvm_vcpu_read_guest_page+0x31c/0x400 [ 97.592083][ T1813] kvm_fetch_guest_virt+0x146/0x190 [ 97.592108][ T1813] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 97.592137][ T1813] __do_insn_fetch_bytes+0x57a/0x740 [ 97.592155][ T1813] ? x86_decode_insn+0x50b0/0x50b0 [ 97.592170][ T1813] ? __hva_to_pfn+0x9f5/0xb40 [ 97.592186][ T1813] ? __asan_memcpy+0x5a/0x80 [ 97.592201][ T1813] x86_decode_insn+0x326/0x50b0 [ 97.592220][ T1813] ? __cfi_x86_decode_insn+0x10/0x10 [ 97.592235][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.592250][ T1813] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 97.592270][ T1813] ? __asan_memset+0x39/0x50 [ 97.592284][ T1813] ? init_decode_cache+0x7c/0x90 [ 97.592300][ T1813] ? init_emulate_ctxt+0x403/0x540 [ 97.592318][ T1813] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 97.592338][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.592354][ T1813] x86_decode_emulated_instruction+0x66/0x180 [ 97.592373][ T1813] x86_emulate_instruction+0x2d7/0x19f0 [ 97.592392][ T1813] ? kvm_mmu_do_page_fault+0x4d8/0x640 [ 97.592412][ T1813] ? kvm_arch_async_page_ready+0x480/0x480 [ 97.592431][ T1813] ? is_bpf_text_address+0x17b/0x1a0 [ 97.592456][ T1813] handle_ud+0x199/0x330 [ 97.592472][ T1813] ? __cfi_handle_ud+0x10/0x10 [ 97.592487][ T1813] ? __kasan_check_read+0x15/0x20 [ 97.592502][ T1813] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 97.592526][ T1813] ? clear_bhb_loop+0x50/0xa0 [ 97.592546][ T1813] ? clear_bhb_loop+0x50/0xa0 [ 97.592566][ T1813] ? clear_bhb_loop+0x50/0xa0 [ 97.592587][ T1813] ? clear_bhb_loop+0x50/0xa0 [ 97.592607][ T1813] ? clear_bhb_loop+0x12/0xa0 [ 97.592628][ T1813] handle_exception_nmi+0x194/0xe60 [ 97.592646][ T1813] ? __cfi_handle_exception_nmi+0x10/0x10 [ 97.592663][ T1813] vmx_handle_exit+0x1379/0x1c00 [ 97.592686][ T1813] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 97.592709][ T1813] ? vmx_do_interrupt_irqoff+0x17/0x20 [ 97.592729][ T1813] vcpu_run+0x4c14/0x7830 [ 97.592761][ T1813] ? signal_pending+0xc0/0xc0 [ 97.592781][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.592795][ T1813] ? xfd_validate_state+0x68/0x140 [ 97.592817][ T1813] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 97.592835][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.592850][ T1813] ? fpregs_mark_activate+0x68/0x160 [ 97.592868][ T1813] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 97.592887][ T1813] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 97.592906][ T1813] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 97.592927][ T1813] ? _parse_integer_limit+0x195/0x1e0 [ 97.592945][ T1813] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 97.592966][ T1813] ? kstrtoull+0x13b/0x1e0 [ 97.592982][ T1813] ? kstrtouint+0x78/0xf0 [ 97.592997][ T1813] ? ioctl_has_perm+0x1bc/0x500 [ 97.593012][ T1813] ? __asan_memcpy+0x5a/0x80 [ 97.593027][ T1813] ? ioctl_has_perm+0x408/0x500 [ 97.593041][ T1813] ? has_cap_mac_admin+0xd0/0xd0 [ 97.593056][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.593071][ T1813] ? mutex_lock_killable+0x97/0x1d0 [ 97.593094][ T1813] ? __cfi_mutex_lock_killable+0x10/0x10 [ 97.593116][ T1813] ? proc_fail_nth_write+0x184/0x220 [ 97.593144][ T1813] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.593168][ T1813] kvm_vcpu_ioctl+0xa43/0x1000 [ 97.593184][ T1813] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 97.593199][ T1813] ? __cfi_vfs_write+0x10/0x10 [ 97.593215][ T1813] ? __kasan_check_write+0x18/0x20 [ 97.593229][ T1813] ? mutex_unlock+0x90/0x240 [ 97.593250][ T1813] ? __cfi_mutex_unlock+0x10/0x10 [ 97.593274][ T1813] ? bpf_lsm_file_ioctl+0xd/0x20 [ 97.593295][ T1813] ? security_file_ioctl+0x3e/0x110 [ 97.593319][ T1813] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 97.593334][ T1813] __se_sys_ioctl+0x132/0x1b0 [ 97.593353][ T1813] __x64_sys_ioctl+0x7f/0xa0 [ 97.593371][ T1813] x64_sys_call+0x1878/0x2ee0 [ 97.593386][ T1813] do_syscall_64+0x57/0xf0 [ 97.593403][ T1813] ? clear_bhb_loop+0x50/0xa0 [ 97.593424][ T1813] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.593445][ T1813] RIP: 0033:0x7f659739e019 [ 97.593459][ T1813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.593472][ T1813] RSP: 002b:00007f6598185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.593489][ T1813] RAX: ffffffffffffffda RBX: 00007f6597625fa0 RCX: 00007f659739e019 [ 97.593501][ T1813] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 97.593511][ T1813] RBP: 00007f6598185090 R08: 0000000000000000 R09: 0000000000000000 [ 97.593522][ T1813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.593532][ T1813] R13: 00007f6597626038 R14: 00007f6597625fa0 R15: 00007fff03cb7708 [ 97.593545][ T1813] [ 98.172869][ T1819] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 98.181803][ T1819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.240892][ T357] usb 1-1: USB disconnect, device number 21 [ 98.460408][ T9] usb 4-1: device descriptor read/64, error -71 [ 98.530324][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 98.560446][ T357] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 98.570479][ T9] usb usb4-port1: attempt power cycle [ 98.600442][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 98.680312][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 98.686509][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.694940][ T357] usb 1-1: device descriptor read/64, error -71 [ 98.701212][ T10] usb 3-1: config 0 has no interface number 0 [ 98.707364][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 98.715683][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.724914][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.733053][ T10] usb 3-1: Product: syz [ 98.737348][ T10] usb 3-1: Manufacturer: syz [ 98.742087][ T10] usb 3-1: SerialNumber: syz [ 98.751501][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.762474][ T65] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.771727][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.910349][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 98.931335][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.940443][ T357] usb 1-1: device descriptor read/64, error -71 [ 99.061317][ T9] usb 4-1: device descriptor read/8, error -71 [ 99.185130][ T357] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 99.219717][ T1839] FAULT_INJECTION: forcing a failure. [ 99.219717][ T1839] name failslab, interval 1, probability 0, space 0, times 0 [ 99.232671][ T1839] CPU: 0 UID: 0 PID: 1839 Comm: syz.3.553 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 99.232699][ T1839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.232709][ T1839] Call Trace: [ 99.232716][ T1839] [ 99.232723][ T1839] __dump_stack+0x21/0x30 [ 99.232750][ T1839] dump_stack_lvl+0x140/0x1c0 [ 99.232773][ T1839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.232797][ T1839] dump_stack+0x19/0x20 [ 99.232818][ T1839] should_fail_ex+0x3c2/0x510 [ 99.232837][ T1839] should_failslab+0xac/0x100 [ 99.232857][ T1839] kmem_cache_alloc_noprof+0x42/0x410 [ 99.232873][ T1839] ? security_file_alloc+0x49/0x220 [ 99.232897][ T1839] ? kasan_save_alloc_info+0x3a/0x50 [ 99.232922][ T1839] security_file_alloc+0x49/0x220 [ 99.232945][ T1839] init_file+0x9e/0x210 [ 99.232965][ T1839] alloc_empty_file+0xd9/0x270 [ 99.233001][ T1839] path_openat+0xf4/0x35a0 [ 99.233026][ T1839] ? kernel_text_address+0xa9/0xe0 [ 99.233048][ T1839] ? __kernel_text_address+0x11/0x40 [ 99.233069][ T1839] ? unwind_get_return_address+0x51/0x90 [ 99.233089][ T1839] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 99.233109][ T1839] ? do_filp_open+0x440/0x440 [ 99.233131][ T1839] do_filp_open+0x1f2/0x440 [ 99.233151][ T1839] ? stack_depot_save_flags+0x38/0x800 [ 99.233170][ T1839] ? __cfi_do_filp_open+0x10/0x10 [ 99.233195][ T1839] ? __asan_memcpy+0x5a/0x80 [ 99.233210][ T1839] do_open_execat+0x14e/0x420 [ 99.233232][ T1839] ? open_exec+0x70/0x70 [ 99.233253][ T1839] ? __check_object_size+0x54c/0x870 [ 99.233270][ T1839] ? __cfi___check_object_size+0x10/0x10 [ 99.233286][ T1839] alloc_bprm+0x2b/0xb30 [ 99.233310][ T1839] do_execveat_common+0x199/0xae0 [ 99.233324][ T1839] ? getname_flags+0x203/0x6b0 [ 99.233342][ T1839] __x64_sys_execveat+0xd2/0xf0 [ 99.233367][ T1839] x64_sys_call+0x906/0x2ee0 [ 99.233381][ T1839] do_syscall_64+0x57/0xf0 [ 99.233399][ T1839] ? clear_bhb_loop+0x50/0xa0 [ 99.233421][ T1839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.233442][ T1839] RIP: 0033:0x7fe1f6f9e019 [ 99.233456][ T1839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.233469][ T1839] RSP: 002b:00007fe1f7db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 99.233486][ T1839] RAX: ffffffffffffffda RBX: 00007fe1f7226090 RCX: 00007fe1f6f9e019 [ 99.233497][ T1839] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 99.233509][ T1839] RBP: 00007fe1f7db6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.233519][ T1839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.233528][ T1839] R13: 00007fe1f7226128 R14: 00007fe1f7226090 R15: 00007ffcaa291fd8 [ 99.233542][ T1839] [ 99.570367][ T357] usb 1-1: device descriptor read/64, error -71 [ 99.810310][ T357] usb 1-1: device descriptor read/64, error -71 [ 99.920461][ T357] usb usb1-port1: attempt power cycle [ 100.033512][ T36] audit: type=1400 audit(1785471268.200:305): avc: denied { create } for pid=1843 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 100.072409][ T36] audit: type=1400 audit(1785471268.200:306): avc: denied { sys_admin } for pid=1843 comm="syz.3.555" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 100.260312][ T357] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 100.291219][ T357] usb 1-1: device descriptor read/8, error -71 [ 100.421346][ T357] usb 1-1: device descriptor read/8, error -71 [ 100.660321][ T357] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 100.681392][ T357] usb 1-1: device descriptor read/8, error -71 [ 100.811347][ T357] usb 1-1: device descriptor read/8, error -71 [ 100.840317][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 100.920455][ T357] usb usb1-port1: unable to enumerate USB device [ 100.991360][ T9] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 100.999630][ T9] usb 4-1: config 0 has no interface number 0 [ 101.005857][ T9] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 101.018345][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 101.027569][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.035691][ T9] usb 4-1: Product: syz [ 101.039956][ T9] usb 4-1: Manufacturer: syz [ 101.044698][ T9] usb 4-1: SerialNumber: syz [ 101.270949][ T1851] tipc: Failed to remove unknown binding: 66,0,0/0:2882998034/2882998036 [ 101.284349][ T360] usb 3-1: USB disconnect, device number 19 [ 101.290344][ T1851] tipc: Failed to remove unknown binding: 66,0,0/0:2882998034/2882998035 [ 101.311401][ T1851] tipc: Failed to remove unknown binding: 66,0,0/0:2882998034/2882998036 [ 101.325592][ T1851] tipc: Failed to remove unknown binding: 66,0,0/0:2882998034/2882998035 [ 101.337094][ T458] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.352895][ T36] audit: type=1400 audit(1785471269.520:307): avc: denied { read } for pid=1850 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.388218][ T357] usb 2-1: USB disconnect, device number 25 [ 101.438329][ T36] audit: type=1400 audit(1785471269.570:308): avc: denied { search } for pid=1856 comm="syz.2.560" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.670318][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 101.700340][ T360] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 101.821377][ T9] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 101.831794][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 101.842336][ T9] usb 1-1: New USB device found, idVendor=08c1, idProduct=017f, bcdDevice= 0.40 [ 101.851848][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.859853][ T9] usb 1-1: Product: syz [ 101.864109][ T360] usb 3-1: Using ep0 maxpacket: 8 [ 101.869485][ T357] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 101.877304][ T9] usb 1-1: Manufacturer: syz [ 101.882373][ T9] usb 1-1: SerialNumber: syz [ 101.887370][ T360] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.900954][ T360] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 101.910108][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.918337][ T360] usb 3-1: Product: syz [ 101.922664][ T360] usb 3-1: SerialNumber: syz [ 102.031436][ T357] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 102.039661][ T357] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 102.047076][ T357] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.061364][ T357] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 102.070501][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.078600][ T357] usb 2-1: Product: syz [ 102.083060][ T357] usb 2-1: Manufacturer: syz [ 102.087671][ T357] usb 2-1: SerialNumber: syz [ 103.350450][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 103.356498][ T1854] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.621110][ T9] usb 4-1: USB disconnect, device number 25 [ 103.671277][ T1868] overlayfs: missing 'workdir' [ 104.000322][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 104.150373][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 104.157077][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.165624][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.176016][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.188389][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 104.197668][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.205854][ T9] usb 4-1: Product: syz [ 104.210092][ T9] usb 4-1: Manufacturer: syz [ 104.214841][ T9] usb 4-1: SerialNumber: syz [ 104.277658][ T9] usb 1-1: USB disconnect, device number 26 [ 104.415549][ T357] usb 2-1: USB disconnect, device number 26 [ 104.493005][ T9] usb 3-1: USB disconnect, device number 20 [ 104.529538][ T1881] netlink: 'syz.2.571': attribute type 27 has an invalid length. [ 104.560106][ T1881] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.567299][ T1881] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.760318][ T357] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 104.937262][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.978623][ T357] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.022902][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.185018][ T360] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 105.218194][ T1907] fuse: Unknown parameter 'grou00000000000000000000' [ 105.277401][ T36] audit: type=1400 audit(1785471273.440:309): avc: denied { append } for pid=1912 comm="syz.0.583" name="001" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.325661][ T1915] FAULT_INJECTION: forcing a failure. [ 105.325661][ T1915] name failslab, interval 1, probability 0, space 0, times 0 [ 105.340142][ T1915] CPU: 0 UID: 0 PID: 1915 Comm: syz.0.584 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 105.340166][ T1915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.340176][ T1915] Call Trace: [ 105.340181][ T1915] [ 105.340187][ T1915] __dump_stack+0x21/0x30 [ 105.340215][ T1915] dump_stack_lvl+0x140/0x1c0 [ 105.340237][ T1915] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.340266][ T1915] dump_stack+0x19/0x20 [ 105.340287][ T1915] should_fail_ex+0x3c2/0x510 [ 105.340306][ T1915] should_failslab+0xac/0x100 [ 105.340326][ T1915] __kmalloc_node_noprof+0x69/0x500 [ 105.340343][ T1915] ? __kvmalloc_node_noprof+0x128/0x300 [ 105.340380][ T1915] __kvmalloc_node_noprof+0x128/0x300 [ 105.340403][ T1915] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 105.340427][ T1915] ? percpu_ref_init+0x1a0/0x4d0 [ 105.340444][ T1915] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 105.340461][ T1915] io_ring_ctx_alloc+0x35a/0x1dc0 [ 105.340477][ T1915] io_uring_create+0x2e0/0x13f0 [ 105.340492][ T1915] ? __kasan_check_write+0x18/0x20 [ 105.340507][ T1915] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 105.340528][ T1915] ? __kasan_check_write+0x18/0x20 [ 105.340543][ T1915] ? __x64_sys_io_uring_setup+0x80/0x80 [ 105.340574][ T1915] ? __kasan_check_read+0x15/0x20 [ 105.340589][ T1915] __x64_sys_io_uring_setup+0x5f/0x80 [ 105.340610][ T1915] x64_sys_call+0x22c0/0x2ee0 [ 105.340624][ T1915] do_syscall_64+0x57/0xf0 [ 105.340641][ T1915] ? clear_bhb_loop+0x50/0xa0 [ 105.340662][ T1915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.340682][ T1915] RIP: 0033:0x7f6d30f9e019 [ 105.340695][ T1915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.340709][ T1915] RSP: 002b:00007f6d31df3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 105.340725][ T1915] RAX: ffffffffffffffda RBX: 0000200000000b48 RCX: 00007f6d30f9e019 [ 105.340737][ T1915] RDX: 0000200000000bc8 RSI: 0000200000000b48 RDI: 0000000000000104 [ 105.340748][ T1915] RBP: 0000200000000b40 R08: 0000200000001f40 R09: 0000000000000000 [ 105.340760][ T1915] R10: 0000200000000bd0 R11: 0000000000000206 R12: 0000200000000bc8 [ 105.340789][ T1915] R13: 0000200000000bd0 R14: 00007f6d31df3fd8 R15: 0000000000000000 [ 105.340803][ T1915] [ 105.566574][ T360] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 105.574695][ T360] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 105.581933][ T360] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.596116][ T360] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 105.605182][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.613257][ T360] usb 3-1: Product: syz [ 105.617426][ T360] usb 3-1: Manufacturer: syz [ 105.622042][ T360] usb 3-1: SerialNumber: syz [ 105.711439][ T36] audit: type=1400 audit(1785471273.880:310): avc: denied { read } for pid=1921 comm="syz.0.586" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.734810][ T36] audit: type=1400 audit(1785471273.910:311): avc: denied { open } for pid=1921 comm="syz.0.586" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.791255][ T1925] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.835139][ T1929] fuse: Unknown parameter 'grou00000000000000000000' [ 105.863091][ T1931] tipc: Started in network mode [ 105.868039][ T1931] tipc: Node identity 01000001, cluster identity 4369 [ 106.250310][ T360] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 106.400314][ T360] usb 1-1: Using ep0 maxpacket: 32 [ 106.406582][ T360] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.417142][ T360] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.427439][ T360] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 106.436600][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.444784][ T360] usb 1-1: Product: syz [ 106.448949][ T360] usb 1-1: Manufacturer: syz [ 106.453670][ T360] usb 1-1: SerialNumber: syz [ 106.717221][ T360] usb 4-1: USB disconnect, device number 26 [ 107.306597][ T1950] fuse: Unknown parameter 'grou00000000000000000000' [ 107.331871][ T1952] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 107.447982][ T36] audit: type=1400 audit(1785471275.610:312): avc: denied { write } for pid=1960 comm="syz.3.604" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.490399][ T360] usb 2-1: USB disconnect, device number 27 [ 107.534788][ T357] usb 3-1: USB disconnect, device number 21 [ 107.920304][ T360] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 108.040306][ T65] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 108.071366][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.082560][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.092488][ T360] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 108.101732][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.190296][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 108.196617][ T65] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.205624][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.215904][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.226192][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.235394][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.243617][ T65] usb 4-1: Product: syz [ 108.247800][ T65] usb 4-1: Manufacturer: syz [ 108.252525][ T65] usb 4-1: SerialNumber: syz [ 108.700342][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 108.851395][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.862414][ T65] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.871594][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.016074][ T65] usb 1-1: USB disconnect, device number 27 [ 109.440370][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 109.591351][ T65] usb 1-1: config 11 has an invalid interface number: 109 but max is 0 [ 109.599639][ T65] usb 1-1: config 11 has no interface number 0 [ 109.606017][ T65] usb 1-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 109.617451][ T65] usb 1-1: config 11 interface 109 has no altsetting 0 [ 109.625691][ T65] usb 1-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 109.634956][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.643057][ T65] usb 1-1: Product: syz [ 109.647304][ T65] usb 1-1: Manufacturer: syz [ 109.652044][ T65] usb 1-1: SerialNumber: syz [ 110.595039][ T65] usb 2-1: USB disconnect, device number 28 [ 110.650490][ T2000] FAULT_INJECTION: forcing a failure. [ 110.650490][ T2000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.663895][ T2000] CPU: 0 UID: 0 PID: 2000 Comm: syz.1.621 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 110.663919][ T2000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.663929][ T2000] Call Trace: [ 110.663934][ T2000] [ 110.663940][ T2000] __dump_stack+0x21/0x30 [ 110.663967][ T2000] dump_stack_lvl+0x140/0x1c0 [ 110.663990][ T2000] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.664013][ T2000] ? check_stack_object+0x138/0x150 [ 110.664030][ T2000] dump_stack+0x19/0x20 [ 110.664051][ T2000] should_fail_ex+0x3c2/0x510 [ 110.664070][ T2000] should_fail+0xf/0x20 [ 110.664087][ T2000] should_fail_usercopy+0x1e/0x30 [ 110.664105][ T2000] _copy_to_user+0x24/0xa0 [ 110.664127][ T2000] simple_read_from_buffer+0xed/0x160 [ 110.664151][ T2000] proc_fail_nth_read+0x1aa/0x220 [ 110.664175][ T2000] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 110.664217][ T2000] ? bpf_lsm_file_permission+0xd/0x20 [ 110.664239][ T2000] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 110.664262][ T2000] vfs_read+0x28b/0xc70 [ 110.664278][ T2000] ? __cfi_vfs_read+0x10/0x10 [ 110.664293][ T2000] ? __kasan_check_write+0x18/0x20 [ 110.664309][ T2000] ? mutex_lock+0x97/0x1d0 [ 110.664331][ T2000] ? __cfi_mutex_lock+0x10/0x10 [ 110.664355][ T2000] ksys_read+0x145/0x260 [ 110.664370][ T2000] ? __cfi_ksys_read+0x10/0x10 [ 110.664390][ T2000] ? __kasan_check_read+0x15/0x20 [ 110.664406][ T2000] __x64_sys_read+0x7f/0x90 [ 110.664421][ T2000] x64_sys_call+0x2638/0x2ee0 [ 110.664436][ T2000] do_syscall_64+0x57/0xf0 [ 110.664453][ T2000] ? clear_bhb_loop+0x50/0xa0 [ 110.664474][ T2000] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.664494][ T2000] RIP: 0033:0x7f659735e84e [ 110.664507][ T2000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.664521][ T2000] RSP: 002b:00007f6598184fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.664538][ T2000] RAX: ffffffffffffffda RBX: 00007f65981856c0 RCX: 00007f659735e84e [ 110.664550][ T2000] RDX: 000000000000000f RSI: 00007f65981850a0 RDI: 0000000000000006 [ 110.664561][ T2000] RBP: 00007f6598185090 R08: 0000000000000000 R09: 0000000000000000 [ 110.664571][ T2000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.664582][ T2000] R13: 00007f6597626038 R14: 00007f6597625fa0 R15: 00007fff03cb7708 [ 110.664596][ T2000] [ 110.927062][ T9] usb 4-1: USB disconnect, device number 27 [ 111.083914][ T2024] fuse: Unknown parameter 'group_id00000000000000000000' [ 111.300340][ T360] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 111.380323][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 111.451665][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.459671][ T360] usb 2-1: not running at top speed; connect to a high speed hub [ 111.467650][ T360] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 111.481278][ T10] usb 3-1: USB disconnect, device number 22 [ 111.497558][ T360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.507427][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 111.516385][ T360] usb 2-1: can't read configurations, error -61 [ 111.541524][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.553039][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 111.567369][ T9] usb 4-1: config 8 has an invalid interface number: 43 but max is 1 [ 111.575663][ T9] usb 4-1: config 8 has an invalid interface number: 35 but max is 1 [ 111.583969][ T9] usb 4-1: config 8 has no interface number 0 [ 111.590121][ T9] usb 4-1: config 8 has no interface number 1 [ 111.596547][ T9] usb 4-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 111.608376][ T9] usb 4-1: config 8 interface 43 has no altsetting 0 [ 111.615168][ T9] usb 4-1: config 8 interface 35 has no altsetting 0 [ 111.625550][ T36] audit: type=1400 audit(1785471279.790:313): avc: denied { read write } for pid=2033 comm="syz.2.635" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.651800][ T360] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 111.660795][ T9] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 111.670083][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.695269][ T9] usb 4-1: Product: syz [ 111.699517][ T36] audit: type=1400 audit(1785471279.790:314): avc: denied { open } for pid=2033 comm="syz.2.635" path="/164/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.729427][ T9] usb 4-1: Manufacturer: syz [ 111.740300][ T9] usb 4-1: SerialNumber: syz [ 111.831558][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.846414][ T360] usb 2-1: not running at top speed; connect to a high speed hub [ 111.854454][ T360] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 111.873062][ T2043] fuse: Unknown parameter 'group_id00000000000000000000' [ 111.881220][ T360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.890402][ T360] usb 2-1: can't read configurations, error -61 [ 111.907689][ T360] usb usb2-port1: attempt power cycle [ 112.140359][ T10] usb 1-1: USB disconnect, device number 28 [ 112.209876][ T2062] syzkaller1: entered promiscuous mode [ 112.217941][ T2062] syzkaller1: entered allmulticast mode [ 112.223612][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 112.253310][ T360] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 112.293159][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.302791][ T360] usb 2-1: not running at top speed; connect to a high speed hub [ 112.314585][ T360] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 112.323697][ T360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.331407][ T360] usb 2-1: can't read configurations, error -61 [ 112.381410][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.392513][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.401709][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.460335][ T360] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 112.481918][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.489974][ T360] usb 2-1: not running at top speed; connect to a high speed hub [ 112.497889][ T360] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 112.506879][ T360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.514578][ T360] usb 2-1: can't read configurations, error -61 [ 112.521126][ T360] usb usb2-port1: unable to enumerate USB device [ 112.600451][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 112.751385][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.761586][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.771855][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.780920][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.789020][ T10] usb 1-1: Product: syz [ 112.793358][ T10] usb 1-1: Manufacturer: syz [ 112.797951][ T10] usb 1-1: SerialNumber: syz [ 114.101388][ T2070] fuse: Bad value for 'user_id' [ 114.106435][ T2070] fuse: Bad value for 'user_id' [ 114.160103][ T360] usb 4-1: USB disconnect, device number 28 [ 114.352528][ T2088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.656'. [ 114.382943][ T2093] fuse: Bad value for 'user_id' [ 114.387960][ T2093] fuse: Bad value for 'user_id' [ 114.473629][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 114.505654][ T2104] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.610503][ T9] usb 2-1: device descriptor read/64, error -71 [ 114.761808][ T36] audit: type=1400 audit(1785471282.930:315): avc: denied { watch_reads } for pid=2105 comm="syz.3.663" path="/172" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.850314][ T9] usb 2-1: device descriptor read/64, error -71 [ 114.994041][ T10] usb 3-1: USB disconnect, device number 23 [ 115.069774][ T2113] FAULT_INJECTION: forcing a failure. [ 115.069774][ T2113] name failslab, interval 1, probability 0, space 0, times 0 [ 115.082687][ T2113] CPU: 0 UID: 0 PID: 2113 Comm: syz.2.664 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 115.082711][ T2113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.082734][ T2113] Call Trace: [ 115.082740][ T2113] [ 115.082746][ T2113] __dump_stack+0x21/0x30 [ 115.082774][ T2113] dump_stack_lvl+0x140/0x1c0 [ 115.082796][ T2113] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.082820][ T2113] dump_stack+0x19/0x20 [ 115.082840][ T2113] should_fail_ex+0x3c2/0x510 [ 115.082858][ T2113] should_failslab+0xac/0x100 [ 115.082878][ T2113] kmem_cache_alloc_noprof+0x42/0x410 [ 115.082894][ T2113] ? fuse_request_alloc+0x43/0x1f0 [ 115.082913][ T2113] fuse_request_alloc+0x43/0x1f0 [ 115.082931][ T2113] ? fuse_get_req+0x485/0xb00 [ 115.082949][ T2113] fuse_get_req+0x49e/0xb00 [ 115.082967][ T2113] ? fuse_request_alloc+0x1f0/0x1f0 [ 115.082988][ T2113] __fuse_simple_request+0x293/0x1a90 [ 115.083008][ T2113] ? __cfi___fuse_simple_request+0x10/0x10 [ 115.083031][ T2113] fuse_do_getattr+0x3b6/0x6f0 [ 115.083055][ T2113] ? backing_data_changed+0x430/0x430 [ 115.083084][ T2113] ? kernel_text_address+0xa9/0xe0 [ 115.083107][ T2113] ? __kasan_check_write+0x18/0x20 [ 115.083122][ T2113] fuse_permission+0x785/0x3be0 [ 115.083146][ T2113] ? __cfi_fuse_permission+0x10/0x10 [ 115.083173][ T2113] ? is_bpf_text_address+0x17b/0x1a0 [ 115.083197][ T2113] ? kernel_text_address+0xa9/0xe0 [ 115.083218][ T2113] ? __kernel_text_address+0x11/0x40 [ 115.083239][ T2113] ? unwind_get_return_address+0x51/0x90 [ 115.083259][ T2113] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 115.083279][ T2113] ? arch_stack_walk+0x10a/0x170 [ 115.083296][ T2113] ? stack_depot_save_flags+0x38/0x800 [ 115.083316][ T2113] ? stack_trace_save+0xaa/0x100 [ 115.083334][ T2113] ? kasan_save_track+0x4f/0x80 [ 115.083358][ T2113] ? kasan_save_track+0x3e/0x80 [ 115.083376][ T2113] ? kasan_save_alloc_info+0x3a/0x50 [ 115.083399][ T2113] ? __kasan_slab_alloc+0x73/0x90 [ 115.083418][ T2113] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 115.083434][ T2113] ? security_file_alloc+0x49/0x220 [ 115.083457][ T2113] ? init_file+0x9e/0x210 [ 115.083478][ T2113] ? alloc_empty_file+0xd9/0x270 [ 115.083498][ T2113] ? path_openat+0xf4/0x35a0 [ 115.083518][ T2113] ? do_filp_open+0x1f2/0x440 [ 115.083538][ T2113] ? do_open_execat+0x14e/0x420 [ 115.083563][ T2113] ? do_execveat_common+0x199/0xae0 [ 115.083578][ T2113] ? __x64_sys_execveat+0xd2/0xf0 [ 115.083601][ T2113] ? x64_sys_call+0x906/0x2ee0 [ 115.083618][ T2113] ? selinux_inode_permission+0x3f2/0x5d0 [ 115.083642][ T2113] ? __cfi_selinux_inode_permission+0x10/0x10 [ 115.083665][ T2113] ? __kasan_check_write+0x18/0x20 [ 115.083681][ T2113] ? lockref_get_not_dead+0x14e/0x250 [ 115.083705][ T2113] ? generic_permission+0x1ec/0x590 [ 115.083723][ T2113] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 115.083746][ T2113] ? __legitimize_mnt+0x82/0x150 [ 115.083768][ T2113] ? try_to_unlazy+0x62a/0xb50 [ 115.083784][ T2113] ? __cfi_fuse_permission+0x10/0x10 [ 115.083807][ T2113] inode_permission+0x250/0x4c0 [ 115.083825][ T2113] may_open+0x197/0x430 [ 115.083844][ T2113] path_openat+0x2ae5/0x35a0 [ 115.083868][ T2113] ? __kernel_text_address+0x11/0x40 [ 115.083889][ T2113] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 115.083909][ T2113] ? do_filp_open+0x440/0x440 [ 115.083930][ T2113] do_filp_open+0x1f2/0x440 [ 115.083950][ T2113] ? stack_depot_save_flags+0x38/0x800 [ 115.083970][ T2113] ? __cfi_do_filp_open+0x10/0x10 [ 115.083994][ T2113] ? __asan_memcpy+0x5a/0x80 [ 115.084009][ T2113] do_open_execat+0x14e/0x420 [ 115.084031][ T2113] ? open_exec+0x70/0x70 [ 115.084051][ T2113] ? __check_object_size+0x54c/0x870 [ 115.084067][ T2113] ? __cfi___check_object_size+0x10/0x10 [ 115.084084][ T2113] alloc_bprm+0x2b/0xb30 [ 115.084107][ T2113] do_execveat_common+0x199/0xae0 [ 115.084121][ T2113] ? getname_flags+0x203/0x6b0 [ 115.084139][ T2113] __x64_sys_execveat+0xd2/0xf0 [ 115.084163][ T2113] x64_sys_call+0x906/0x2ee0 [ 115.084177][ T2113] do_syscall_64+0x57/0xf0 [ 115.084194][ T2113] ? clear_bhb_loop+0x50/0xa0 [ 115.084215][ T2113] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.084235][ T2113] RIP: 0033:0x7f3fbb19e019 [ 115.084248][ T2113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.084262][ T2113] RSP: 002b:00007f3fbc05a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 115.084279][ T2113] RAX: ffffffffffffffda RBX: 00007f3fbb426090 RCX: 00007f3fbb19e019 [ 115.084292][ T2113] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 115.084303][ T2113] RBP: 00007f3fbc05a090 R08: 0000000000000000 R09: 0000000000000000 [ 115.084313][ T2113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.084323][ T2113] R13: 00007f3fbb426128 R14: 00007f3fbb426090 R15: 00007ffe00218948 [ 115.084337][ T2113] [ 115.578619][ T360] usb 1-1: USB disconnect, device number 29 [ 115.586266][ T9] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 115.646274][ T2122] fuse: Bad value for 'user_id' [ 115.651335][ T2122] fuse: Bad value for 'user_id' [ 115.720598][ T9] usb 2-1: device descriptor read/64, error -71 [ 115.980308][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 116.004172][ T2143] fuse: Bad value for 'fd' [ 116.042254][ T36] audit: type=1400 audit(1785471284.110:316): avc: denied { read } for pid=2139 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.061623][ T9] usb 2-1: device descriptor read/64, error -71 [ 116.067915][ T360] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 116.094282][ T36] audit: type=1400 audit(1785471284.110:317): avc: denied { create } for pid=2139 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.120026][ T2149] netlink: 'syz.2.679': attribute type 6 has an invalid length. [ 116.127790][ T36] audit: type=1400 audit(1785471284.110:318): avc: denied { getopt } for pid=2139 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.170372][ T9] usb usb2-port1: attempt power cycle [ 116.221225][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.232204][ T360] usb 1-1: Using ep0 maxpacket: 16 [ 116.241107][ T360] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 116.250307][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.269834][ T360] usb 1-1: config 0 has no interface number 0 [ 116.276059][ T360] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 116.286214][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.307453][ T360] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 116.328805][ T360] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 116.348036][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.358109][ T360] usb 1-1: Product: syz [ 116.366219][ T360] usb 1-1: Manufacturer: syz [ 116.380285][ T360] usb 1-1: SerialNumber: syz [ 116.542860][ T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 116.571256][ T9] usb 2-1: device descriptor read/8, error -71 [ 116.701447][ T9] usb 2-1: device descriptor read/8, error -71 [ 116.940307][ T9] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 116.961324][ T9] usb 2-1: device descriptor read/8, error -71 [ 116.970406][ T360] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 117.091365][ T9] usb 2-1: device descriptor read/8, error -71 [ 117.121441][ T360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.131632][ T360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.142043][ T360] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.151228][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.159304][ T360] usb 3-1: Product: syz [ 117.163625][ T360] usb 3-1: Manufacturer: syz [ 117.168238][ T360] usb 3-1: SerialNumber: syz [ 117.200390][ T9] usb usb2-port1: unable to enumerate USB device [ 117.291005][ T2161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2161 comm=syz.1.684 [ 118.139330][ T2164] fuse: Bad value for 'fd' [ 118.400326][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 118.551378][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.561567][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.570639][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.578608][ T9] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 118.587875][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.595940][ T9] usb 2-1: Product: syz [ 118.600225][ T9] usb 2-1: Manufacturer: syz [ 118.604887][ T9] usb 2-1: SerialNumber: syz [ 118.625557][ T9] usb 1-1: USB disconnect, device number 30 [ 118.667660][ T2170] netlink: 'syz.0.688': attribute type 11 has an invalid length. [ 118.675555][ T2170] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 118.683450][ T2170] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.688'. [ 118.752333][ T360] usb 4-1: USB disconnect, device number 29 [ 118.837651][ T2183] fuse: Bad value for 'fd' [ 119.170389][ T360] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 119.230306][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 119.320286][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 119.326529][ T360] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.334945][ T360] usb 4-1: config 0 has no interface number 0 [ 119.341177][ T360] usb 4-1: config 0 interface 184 has no altsetting 0 [ 119.349324][ T360] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.358599][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.366742][ T360] usb 4-1: Product: syz [ 119.371083][ T360] usb 4-1: Manufacturer: syz [ 119.375672][ T360] usb 4-1: SerialNumber: syz [ 119.391280][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.402260][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.411495][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.739618][ T10] usb 3-1: USB disconnect, device number 24 [ 119.769473][ T2201] FAULT_INJECTION: forcing a failure. [ 119.769473][ T2201] name failslab, interval 1, probability 0, space 0, times 0 [ 119.782304][ T2201] CPU: 0 UID: 0 PID: 2201 Comm: syz.2.702 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 119.782335][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.782345][ T2201] Call Trace: [ 119.782360][ T2201] [ 119.782366][ T2201] __dump_stack+0x21/0x30 [ 119.782410][ T2201] dump_stack_lvl+0x140/0x1c0 [ 119.782431][ T2201] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.782453][ T2201] ? avc_has_perm+0x155/0x240 [ 119.782471][ T2201] ? __cfi_avc_has_perm+0x10/0x10 [ 119.782504][ T2201] dump_stack+0x19/0x20 [ 119.782524][ T2201] should_fail_ex+0x3c2/0x510 [ 119.782543][ T2201] should_failslab+0xac/0x100 [ 119.782562][ T2201] __kmalloc_cache_noprof+0x41/0x470 [ 119.782579][ T2201] ? vhost_task_create+0x12c/0x3f0 [ 119.782596][ T2201] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 119.782616][ T2201] vhost_task_create+0x12c/0x3f0 [ 119.782631][ T2201] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 119.782651][ T2201] ? __cfi_vhost_task_create+0x10/0x10 [ 119.782668][ T2201] ? __cfi_vhost_task_fn+0x10/0x10 [ 119.782684][ T2201] ? __kasan_check_write+0x18/0x20 [ 119.782700][ T2201] ? mutex_lock+0x97/0x1d0 [ 119.782721][ T2201] ? __cfi_mutex_lock+0x10/0x10 [ 119.782741][ T2201] ? kernel_text_address+0xa9/0xe0 [ 119.782764][ T2201] kvm_mmu_post_init_vm+0x161/0x300 [ 119.782788][ T2201] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 119.782810][ T2201] ? _parse_integer_limit+0x195/0x1e0 [ 119.782828][ T2201] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 119.782850][ T2201] ? kstrtoull+0x13b/0x1e0 [ 119.782865][ T2201] ? kstrtouint+0x78/0xf0 [ 119.782881][ T2201] ? ioctl_has_perm+0x1bc/0x500 [ 119.782896][ T2201] ? __asan_memcpy+0x5a/0x80 [ 119.782911][ T2201] ? ioctl_has_perm+0x408/0x500 [ 119.782926][ T2201] ? has_cap_mac_admin+0xd0/0xd0 [ 119.782940][ T2201] ? __kasan_check_write+0x18/0x20 [ 119.782956][ T2201] ? mutex_lock_killable+0x97/0x1d0 [ 119.782978][ T2201] ? __cfi_mutex_lock_killable+0x10/0x10 [ 119.783000][ T2201] ? proc_fail_nth_write+0x184/0x220 [ 119.783025][ T2201] kvm_vcpu_ioctl+0xa43/0x1000 [ 119.783040][ T2201] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.783056][ T2201] ? __cfi_vfs_write+0x10/0x10 [ 119.783072][ T2201] ? __kasan_check_write+0x18/0x20 [ 119.783087][ T2201] ? mutex_unlock+0x90/0x240 [ 119.783108][ T2201] ? __cfi_mutex_unlock+0x10/0x10 [ 119.783132][ T2201] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.783152][ T2201] ? security_file_ioctl+0x3e/0x110 [ 119.783176][ T2201] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.783191][ T2201] __se_sys_ioctl+0x132/0x1b0 [ 119.783211][ T2201] __x64_sys_ioctl+0x7f/0xa0 [ 119.783229][ T2201] x64_sys_call+0x1878/0x2ee0 [ 119.783244][ T2201] do_syscall_64+0x57/0xf0 [ 119.783261][ T2201] ? clear_bhb_loop+0x50/0xa0 [ 119.783282][ T2201] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.783302][ T2201] RIP: 0033:0x7f3fbb19e019 [ 119.783316][ T2201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.783329][ T2201] RSP: 002b:00007f3fbc07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.783346][ T2201] RAX: ffffffffffffffda RBX: 00007f3fbb425fa0 RCX: 00007f3fbb19e019 [ 119.783359][ T2201] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 119.783369][ T2201] RBP: 00007f3fbc07b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.783379][ T2201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.783389][ T2201] R13: 00007f3fbb426038 R14: 00007f3fbb425fa0 R15: 00007ffe00218948 [ 119.783402][ T2201] [ 120.153336][ T2203] fuse: Bad value for 'fd' [ 121.075879][ T2213] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.169959][ T10] usb 2-1: USB disconnect, device number 37 [ 121.235986][ T2223] fuse: Bad value for 'fd' [ 121.253213][ T2224] SELinux: failed to load policy [ 121.620313][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 121.771356][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 121.780172][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.790533][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.801786][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 121.812913][ T10] usb 2-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.826574][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 121.835461][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.844703][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.852827][ T10] usb 2-1: Product: syz [ 121.857067][ T10] usb 2-1: Manufacturer: syz [ 121.861797][ T10] usb 2-1: SerialNumber: syz [ 121.875393][ T10] usb 4-1: USB disconnect, device number 30 [ 121.931787][ T2245] fuse: Bad value for 'fd' [ 121.942496][ T2243] Invalid logical block size (190) [ 121.968493][ T2247] veth0_to_bond: mtu less than device minimum [ 122.007627][ T360] usb 1-1: USB disconnect, device number 31 [ 122.045410][ T2252] syzkaller1: entered promiscuous mode [ 122.075091][ T2252] syzkaller1: entered allmulticast mode [ 122.370308][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 122.530284][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 122.540950][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.554740][ T10] usb 4-1: config 0 has no interface number 0 [ 122.566646][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 122.582782][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.597489][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.613325][ T10] usb 4-1: Product: syz [ 122.621938][ T10] usb 4-1: Manufacturer: syz [ 122.626570][ T10] usb 4-1: SerialNumber: syz [ 122.631245][ T360] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 122.790722][ T360] usb 1-1: no configurations [ 122.795385][ T360] usb 1-1: can't read configurations, error -22 [ 122.930320][ T360] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 122.972188][ T2268] fuse: Invalid rootmode [ 123.080693][ T360] usb 1-1: no configurations [ 123.085338][ T360] usb 1-1: can't read configurations, error -22 [ 123.091963][ T360] usb usb1-port1: attempt power cycle [ 123.230352][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 123.380288][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 123.386478][ T10] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 123.397017][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.406175][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.420553][ T10] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 123.429699][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.437891][ T360] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 123.445572][ T10] usb 3-1: Product: syz [ 123.449750][ T10] usb 3-1: Manufacturer: syz [ 123.454589][ T10] usb 3-1: SerialNumber: syz [ 123.471088][ T360] usb 1-1: no configurations [ 123.475719][ T360] usb 1-1: can't read configurations, error -22 [ 123.610348][ T360] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 123.631032][ T360] usb 1-1: no configurations [ 123.635652][ T360] usb 1-1: can't read configurations, error -22 [ 123.642217][ T360] usb usb1-port1: unable to enumerate USB device [ 124.415332][ T360] usb 2-1: USB disconnect, device number 38 [ 124.750312][ T360] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 124.901386][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.912421][ T360] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.921621][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.137755][ T360] usb 4-1: USB disconnect, device number 31 [ 125.373054][ T2287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.738'. [ 125.483743][ T36] audit: type=1400 audit(1785471293.650:319): avc: denied { ioctl } for pid=2297 comm="syz.0.743" path="socket:[23666]" dev="sockfs" ino=23666 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.705759][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 125.890311][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 125.896602][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.905120][ T10] usb 4-1: config 0 has no interface number 0 [ 125.911558][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 125.919699][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.929018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.937167][ T10] usb 4-1: Product: syz [ 125.941522][ T10] usb 4-1: Manufacturer: syz [ 125.946118][ T10] usb 4-1: SerialNumber: syz [ 126.007270][ T10] usb 3-1: USB disconnect, device number 25 [ 126.044545][ T360] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 126.180329][ T360] usb 1-1: device descriptor read/64, error -71 [ 126.340316][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 126.420309][ T360] usb 1-1: device descriptor read/64, error -71 [ 126.490351][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 126.496699][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 126.505080][ T10] usb 3-1: config 0 has no interface number 0 [ 126.511350][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 126.519415][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.528688][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.537014][ T10] usb 3-1: Product: syz [ 126.541370][ T10] usb 3-1: Manufacturer: syz [ 126.545986][ T10] usb 3-1: SerialNumber: syz [ 126.660459][ T360] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 126.790309][ T360] usb 1-1: device descriptor read/64, error -71 [ 127.031204][ T360] usb 1-1: device descriptor read/64, error -71 [ 127.140392][ T360] usb usb1-port1: attempt power cycle [ 127.446611][ T10] usb 2-1: USB disconnect, device number 39 [ 127.480308][ T360] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 127.511484][ T360] usb 1-1: device descriptor read/8, error -71 [ 127.542864][ T36] audit: type=1400 audit(1785471295.710:320): avc: denied { getopt } for pid=2309 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.597204][ T2314] FAULT_INJECTION: forcing a failure. [ 127.597204][ T2314] name failslab, interval 1, probability 0, space 0, times 0 [ 127.610815][ T2314] CPU: 0 UID: 0 PID: 2314 Comm: syz.1.748 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 127.610850][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.610860][ T2314] Call Trace: [ 127.610866][ T2314] [ 127.610873][ T2314] __dump_stack+0x21/0x30 [ 127.610900][ T2314] dump_stack_lvl+0x140/0x1c0 [ 127.610922][ T2314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.610946][ T2314] dump_stack+0x19/0x20 [ 127.610967][ T2314] should_fail_ex+0x3c2/0x510 [ 127.610986][ T2314] should_failslab+0xac/0x100 [ 127.611006][ T2314] __kmalloc_cache_noprof+0x41/0x470 [ 127.611023][ T2314] ? ovl_init_fs_context+0xb8/0x790 [ 127.611041][ T2314] ovl_init_fs_context+0xb8/0x790 [ 127.611059][ T2314] alloc_fs_context+0x5c7/0x800 [ 127.611081][ T2314] fs_context_for_mount+0x26/0x40 [ 127.611101][ T2314] do_new_mount+0x116/0xb40 [ 127.611117][ T2314] ? security_capable+0x44/0x130 [ 127.611135][ T2314] path_mount+0x66a/0xff0 [ 127.611150][ T2314] ? putname+0x113/0x150 [ 127.611167][ T2314] __se_sys_mount+0x2bf/0x480 [ 127.611184][ T2314] ? ksys_write+0x1f3/0x260 [ 127.611200][ T2314] ? __x64_sys_mount+0xf0/0xf0 [ 127.611218][ T2314] __x64_sys_mount+0xc3/0xf0 [ 127.611234][ T2314] x64_sys_call+0x2021/0x2ee0 [ 127.611248][ T2314] do_syscall_64+0x57/0xf0 [ 127.611267][ T2314] ? clear_bhb_loop+0x50/0xa0 [ 127.611288][ T2314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.611309][ T2314] RIP: 0033:0x7f659739e019 [ 127.611323][ T2314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.611337][ T2314] RSP: 002b:00007f6598185028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.611355][ T2314] RAX: ffffffffffffffda RBX: 00007f6597625fa0 RCX: 00007f659739e019 [ 127.611367][ T2314] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 127.611379][ T2314] RBP: 00007f6598185090 R08: 0000200000000040 R09: 0000000000000000 [ 127.611390][ T2314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 127.611399][ T2314] R13: 00007f6597626038 R14: 00007f6597625fa0 R15: 00007fff03cb7708 [ 127.611414][ T2314] [ 127.861194][ T360] usb 1-1: device descriptor read/8, error -71 [ 128.090308][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 128.100449][ T360] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 128.121309][ T360] usb 1-1: device descriptor read/8, error -71 [ 128.241713][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.249692][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 128.258303][ T9] usb 2-1: config 8 has an invalid interface number: 43 but max is 1 [ 128.266461][ T9] usb 2-1: config 8 has an invalid interface number: 35 but max is 1 [ 128.274614][ T360] usb 1-1: device descriptor read/8, error -71 [ 128.281090][ T9] usb 2-1: config 8 has no interface number 0 [ 128.287256][ T9] usb 2-1: config 8 has no interface number 1 [ 128.293595][ T9] usb 2-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 128.305433][ T9] usb 2-1: config 8 interface 43 has no altsetting 0 [ 128.312214][ T9] usb 2-1: config 8 interface 35 has no altsetting 0 [ 128.320350][ T9] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 128.329468][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.337597][ T9] usb 2-1: Product: syz [ 128.341944][ T9] usb 2-1: Manufacturer: syz [ 128.346565][ T9] usb 2-1: SerialNumber: syz [ 128.400440][ T360] usb usb1-port1: unable to enumerate USB device [ 128.452255][ T360] usb 4-1: USB disconnect, device number 32 [ 128.573921][ T2323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 128.627222][ T36] audit: type=1400 audit(1785471296.790:321): avc: denied { listen } for pid=2328 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.900311][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 129.034592][ T9] usb 3-1: USB disconnect, device number 26 [ 129.061332][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.082130][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.091675][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.170326][ T360] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 129.320297][ T360] usb 1-1: Using ep0 maxpacket: 8 [ 129.326419][ T360] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 129.334914][ T360] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 129.343247][ T360] usb 1-1: config 0 has no interface number 0 [ 129.349419][ T360] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 129.359400][ T360] usb 1-1: config 0 interface 200 has no altsetting 0 [ 129.367643][ T360] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 129.376897][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 129.384545][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.392790][ T360] usb 1-1: Product: syz [ 129.397073][ T360] usb 1-1: Manufacturer: syz [ 129.401936][ T360] usb 1-1: SerialNumber: syz [ 129.550341][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 129.556633][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.565227][ T9] usb 3-1: config 0 has no interface number 0 [ 129.571439][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 129.579666][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.589059][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.597248][ T9] usb 3-1: Product: syz [ 129.601591][ T9] usb 3-1: Manufacturer: syz [ 129.606213][ T9] usb 3-1: SerialNumber: syz [ 130.864783][ T9] usb 2-1: USB disconnect, device number 40 [ 130.929452][ T36] audit: type=1400 audit(1785471299.090:322): avc: denied { read write } for pid=2343 comm="syz.1.761" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 130.953472][ T2344] zero sized request [ 130.957406][ T2344] zero sized request [ 130.962984][ T2344] zero sized request [ 130.967192][ T2344] zero sized request [ 130.971188][ T2344] zero sized request [ 130.975340][ T2344] zero sized request [ 130.979319][ T36] audit: type=1400 audit(1785471299.090:323): avc: denied { open } for pid=2343 comm="syz.1.761" path="/165/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 131.002876][ T2344] zero sized request [ 131.006972][ T2344] zero sized request [ 131.011150][ T2344] zero sized request [ 131.015091][ T2344] zero sized request [ 131.019067][ T2344] zero sized request [ 131.023249][ T2344] zero sized request [ 131.027196][ T36] audit: type=1400 audit(1785471299.130:324): avc: denied { ioctl } for pid=2343 comm="syz.1.761" path="/165/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 131.052349][ T2344] zero sized request [ 131.056522][ T2344] zero sized request [ 131.060722][ T2344] zero sized request [ 131.064661][ T2344] zero sized request [ 131.068639][ T2344] zero sized request [ 131.072879][ T2344] zero sized request [ 131.076830][ T2344] zero sized request [ 131.080885][ T2344] zero sized request [ 131.084914][ T2344] zero sized request [ 131.088842][ T2344] zero sized request [ 131.092967][ T2344] zero sized request [ 131.096907][ T2344] zero sized request [ 131.101064][ T2344] zero sized request [ 131.105044][ T2344] zero sized request [ 131.109174][ T2344] zero sized request [ 131.113314][ T2344] zero sized request [ 131.117274][ T2344] zero sized request [ 131.121539][ T2344] zero sized request [ 131.125484][ T2344] zero sized request [ 131.129431][ T2344] zero sized request [ 131.133551][ T2344] zero sized request [ 131.163579][ T36] audit: type=1400 audit(1785471299.330:325): avc: denied { write } for pid=2348 comm="syz.1.762" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.187236][ T2349] input: syz0 as /devices/virtual/input/input5 [ 131.291573][ T2353] netlink: 'syz.1.764': attribute type 27 has an invalid length. [ 131.308676][ T2353] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.315904][ T2353] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.342666][ T2353] netlink: 'syz.1.764': attribute type 27 has an invalid length. [ 131.368774][ T2353] veth1_macvtap: left promiscuous mode [ 131.376190][ T2353] veth1_macvtap: entered promiscuous mode [ 131.384059][ T1596] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.391196][ T1596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.399459][ T1596] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.406622][ T1596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.467428][ T2355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 131.477085][ T36] audit: type=1400 audit(1785471299.650:326): avc: denied { setopt } for pid=2354 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.497057][ T2355] netlink: 80 bytes leftover after parsing attributes in process `syz.1.765'. [ 131.666105][ T9] usb 4-1: USB disconnect, device number 33 [ 131.821091][ T10] usb 1-1: USB disconnect, device number 40 [ 131.926044][ T2371] FAULT_INJECTION: forcing a failure. [ 131.926044][ T2371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.939928][ T2371] CPU: 0 UID: 0 PID: 2371 Comm: syz.0.771 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 131.939954][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.939965][ T2371] Call Trace: [ 131.939970][ T2371] [ 131.939977][ T2371] __dump_stack+0x21/0x30 [ 131.940005][ T2371] dump_stack_lvl+0x140/0x1c0 [ 131.940028][ T2371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.940052][ T2371] dump_stack+0x19/0x20 [ 131.940074][ T2371] should_fail_ex+0x3c2/0x510 [ 131.940093][ T2371] should_fail_alloc_page+0xec/0x110 [ 131.940115][ T2371] __alloc_pages_noprof+0x1c0/0x7e0 [ 131.940139][ T2371] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 131.940163][ T2371] ? skb_trim+0x88/0x1a0 [ 131.940182][ T2371] ? if_nlmsg_size+0x840/0x840 [ 131.940199][ T2371] ? __cfi___set_page_owner+0x10/0x10 [ 131.940220][ T2371] __folio_alloc_noprof+0x14/0x80 [ 131.940247][ T2371] folio_prealloc+0x46/0x220 [ 131.940268][ T2371] do_pte_missing+0x16af/0x4440 [ 131.940291][ T2371] ? pte_marker_clear+0x1b0/0x1b0 [ 131.940312][ T2371] ? xa_find+0x11b/0x170 [ 131.940335][ T2371] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 131.940361][ T2371] handle_mm_fault+0x1189/0x1ba0 [ 131.940383][ T2371] ? __cfi_handle_mm_fault+0x10/0x10 [ 131.940402][ T2371] ? find_vma+0xd3/0x120 [ 131.940427][ T2371] ? lock_mm_and_find_vma+0xb8/0x390 [ 131.940446][ T2371] do_user_addr_fault+0x4ee/0x1230 [ 131.940474][ T2371] exc_page_fault+0x58/0xc0 [ 131.940497][ T2371] asm_exc_page_fault+0x2b/0x30 [ 131.940518][ T2371] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 131.940544][ T2371] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 131.940558][ T2371] RSP: 0018:ffffc9000e4cf4d8 EFLAGS: 00050206 [ 131.940573][ T2371] RAX: ffffffff82aca801 RBX: ffff888119ede000 RCX: 00000000000006a8 [ 131.940586][ T2371] RDX: 0000000000000000 RSI: ffff888119ede580 RDI: 0000200000001000 [ 131.940598][ T2371] RBP: ffffc9000e4cf630 R08: ffff888119edec27 R09: 1ffff110233dbd84 [ 131.940610][ T2371] R10: dffffc0000000000 R11: ffffed10233dbd85 R12: 0000200000000a80 [ 131.940623][ T2371] R13: 0000000000000000 R14: 0000000000000c28 R15: ffffc9000e4cfd48 [ 131.940635][ T2371] ? _copy_to_iter+0x381/0x1520 [ 131.940657][ T2371] ? _copy_to_iter+0x43f/0x1520 [ 131.940678][ T2371] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 131.940698][ T2371] ? __cfi__copy_to_iter+0x10/0x10 [ 131.940719][ T2371] ? __check_object_size+0x54c/0x870 [ 131.940736][ T2371] ? __cfi___check_object_size+0x10/0x10 [ 131.940752][ T2371] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 131.940771][ T2371] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 131.940798][ T2371] __skb_datagram_iter+0x103/0x940 [ 131.940822][ T2371] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 131.940848][ T2371] skb_copy_datagram_iter+0x44/0x160 [ 131.940873][ T2371] netlink_recvmsg+0x2d4/0xe60 [ 131.940891][ T2371] ? __cfi_netlink_recvmsg+0x10/0x10 [ 131.940910][ T2371] ? kasan_save_alloc_info+0x3a/0x50 [ 131.940935][ T2371] ? __cfi_netlink_recvmsg+0x10/0x10 [ 131.940951][ T2371] sock_recvmsg_nosec+0x122/0x160 [ 131.940974][ T2371] ____sys_recvmsg+0x3e2/0x4a0 [ 131.940991][ T2371] ? __sys_recvmsg_sock+0x60/0x60 [ 131.941010][ T2371] ? import_iovec+0x80/0xb0 [ 131.941033][ T2371] ___sys_recvmsg+0x214/0x590 [ 131.941051][ T2371] ? __sys_recvmsg+0x2a0/0x2a0 [ 131.941068][ T2371] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 131.941086][ T2371] ? selinux_file_permission+0x318/0xb60 [ 131.941106][ T2371] do_recvmmsg+0x36d/0x7f0 [ 131.941124][ T2371] ? __sys_recvmmsg+0x2a0/0x2a0 [ 131.941141][ T2371] ? __cfi_vfs_write+0x10/0x10 [ 131.941160][ T2371] ? fput+0x1a4/0x230 [ 131.941181][ T2371] __x64_sys_recvmmsg+0x199/0x250 [ 131.941199][ T2371] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 131.941216][ T2371] ? __kasan_check_read+0x15/0x20 [ 131.941233][ T2371] x64_sys_call+0x292c/0x2ee0 [ 131.941247][ T2371] do_syscall_64+0x57/0xf0 [ 131.941265][ T2371] ? clear_bhb_loop+0x50/0xa0 [ 131.941286][ T2371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.941307][ T2371] RIP: 0033:0x7f6d30f9e019 [ 131.941319][ T2371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.941333][ T2371] RSP: 002b:00007f6d31df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.941349][ T2371] RAX: ffffffffffffffda RBX: 00007f6d31225fa0 RCX: 00007f6d30f9e019 [ 131.941362][ T2371] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000003 [ 131.941372][ T2371] RBP: 00007f6d31df4090 R08: 0000000000000000 R09: 0000000000000000 [ 131.941383][ T2371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.941403][ T2371] R13: 00007f6d31226038 R14: 00007f6d31225fa0 R15: 00007ffe9db79278 [ 131.941422][ T2371] [ 132.446333][ T2373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.772'. [ 132.473186][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 132.602415][ T36] audit: type=1400 audit(1785471300.770:327): avc: denied { read } for pid=2381 comm="syz.1.777" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.640340][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 132.646507][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 132.655422][ T9] usb 4-1: config 0 has no interface number 0 [ 132.666090][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 132.677262][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.687195][ T9] usb 4-1: Product: syz [ 132.692256][ T9] usb 4-1: Manufacturer: syz [ 132.697972][ T9] usb 4-1: SerialNumber: syz [ 132.870350][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 133.021389][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.034266][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.045010][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.469676][ T36] audit: type=1400 audit(1785471301.630:328): avc: denied { associate } for pid=2389 comm="syz.1.779" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.540023][ T2395] FAULT_INJECTION: forcing a failure. [ 133.540023][ T2395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.555881][ T2395] CPU: 0 UID: 0 PID: 2395 Comm: syz.1.781 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 133.555905][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.555916][ T2395] Call Trace: [ 133.555922][ T2395] [ 133.555928][ T2395] __dump_stack+0x21/0x30 [ 133.555956][ T2395] dump_stack_lvl+0x140/0x1c0 [ 133.555979][ T2395] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.556002][ T2395] ? unwind_get_return_address+0x51/0x90 [ 133.556024][ T2395] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 133.556045][ T2395] dump_stack+0x19/0x20 [ 133.556067][ T2395] should_fail_ex+0x3c2/0x510 [ 133.556086][ T2395] should_fail+0xf/0x20 [ 133.556103][ T2395] should_fail_usercopy+0x1e/0x30 [ 133.556123][ T2395] _copy_from_user+0x20/0xa0 [ 133.556145][ T2395] ___sys_recvmsg+0x174/0x590 [ 133.556163][ T2395] ? __sys_recvmsg+0x2a0/0x2a0 [ 133.556180][ T2395] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 133.556199][ T2395] ? selinux_file_permission+0x318/0xb60 [ 133.556218][ T2395] do_recvmmsg+0x36d/0x7f0 [ 133.556236][ T2395] ? __sys_recvmmsg+0x2a0/0x2a0 [ 133.556253][ T2395] ? __cfi_vfs_write+0x10/0x10 [ 133.556279][ T2395] ? fput+0x1a4/0x230 [ 133.556301][ T2395] __x64_sys_recvmmsg+0x199/0x250 [ 133.556318][ T2395] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 133.556336][ T2395] ? __kasan_check_read+0x15/0x20 [ 133.556353][ T2395] x64_sys_call+0x292c/0x2ee0 [ 133.556368][ T2395] do_syscall_64+0x57/0xf0 [ 133.556386][ T2395] ? clear_bhb_loop+0x50/0xa0 [ 133.556408][ T2395] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.556429][ T2395] RIP: 0033:0x7f659739e019 [ 133.556443][ T2395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.556458][ T2395] RSP: 002b:00007f6598185028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 133.556475][ T2395] RAX: ffffffffffffffda RBX: 00007f6597625fa0 RCX: 00007f659739e019 [ 133.556488][ T2395] RDX: 0000000000000007 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 133.556499][ T2395] RBP: 00007f6598185090 R08: 0000000000000000 R09: 0000000000000000 [ 133.556510][ T2395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.556520][ T2395] R13: 00007f6597626038 R14: 00007f6597625fa0 R15: 00007fff03cb7708 [ 133.556534][ T2395] [ 133.857166][ T9] usb 3-1: USB disconnect, device number 27 [ 133.949995][ T36] audit: type=1400 audit(1785471302.110:329): avc: denied { connect } for pid=2409 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.054461][ T2420] : renamed from vlan0 [ 134.063148][ T2420] tipc: Started in network mode [ 134.068724][ T2420] tipc: Node identity 01000001, cluster identity 4369 [ 134.077792][ T2420] tipc: New replicast peer: 127.0.0.1 [ 134.084686][ T2420] tipc: Enabled bearer , priority 10 [ 134.096299][ T2422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.096455][ T2422] rust_binder: 2421:2422 transaction to 0 failed: ENOENT [ 134.194214][ T36] audit: type=1400 audit(1785471302.360:330): avc: denied { ioctl } for pid=2429 comm="syz.2.795" path="socket:[24846]" dev="sockfs" ino=24846 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.261714][ T2432] overlayfs: workdir and upperdir must be separate subtrees [ 134.380917][ T2439] No source specified [ 134.557832][ T36] audit: type=1400 audit(1785471302.720:331): avc: denied { sqpoll } for pid=2453 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.706814][ T10] usb 4-1: USB disconnect, device number 34 [ 134.850285][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 135.010282][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 135.016318][ T2475] fuse: Unknown parameter '[6@m' [ 135.031405][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.080934][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.121078][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.138643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.210356][ T9] tipc: Node number set to 16777217 [ 135.256602][ T2489] input: syz1 as /devices/virtual/input/input6 [ 135.390294][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 135.416984][ T2492] overlay: Unknown parameter 'audit' [ 135.550278][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 135.561518][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.580008][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 135.594418][ T2502] netlink: 'syz.1.824': attribute type 27 has an invalid length. [ 135.603166][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 135.624515][ T10] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 135.642132][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.649480][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.669729][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.700274][ T10] usb 4-1: Product: syz [ 135.704470][ T10] usb 4-1: Manufacturer: syz [ 135.730898][ T10] usb 4-1: SerialNumber: syz [ 135.773902][ T2501] netlink: 'syz.1.824': attribute type 27 has an invalid length. [ 135.826171][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.833318][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.891634][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.898730][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.949718][ T2501] veth1_macvtap: left promiscuous mode [ 135.961941][ T9] usb 1-1: USB disconnect, device number 41 [ 135.970285][ T2501] veth1_macvtap: entered promiscuous mode [ 136.217517][ T2516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 136.570324][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 136.630311][ T357] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 136.721457][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.732637][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.741882][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.781105][ T357] usb 1-1: not running at top speed; connect to a high speed hub [ 136.789723][ T357] usb 1-1: config 192 has an invalid interface number: 48 but max is 0 [ 136.798559][ T357] usb 1-1: config 192 has no interface number 0 [ 136.805167][ T357] usb 1-1: config 192 interface 48 altsetting 0 endpoint 0xC has invalid maxpacket 2560, setting to 64 [ 136.816626][ T357] usb 1-1: config 192 interface 48 altsetting 0 endpoint 0xD has invalid maxpacket 2047, setting to 64 [ 136.829247][ T357] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 136.838611][ T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.846813][ T357] usb 1-1: Product: syz [ 136.851408][ T357] usb 1-1: Manufacturer: syz [ 136.856092][ T357] usb 1-1: SerialNumber: syz [ 137.626537][ T10] usb 3-1: USB disconnect, device number 28 [ 137.743047][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 137.743062][ T36] audit: type=1326 audit(1785471305.910:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2534 comm="syz.2.837" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fbb19e019 code=0x0 [ 138.112611][ T10] usb 4-1: USB disconnect, device number 35 [ 138.533922][ T2560] syzkaller1: entered promiscuous mode [ 138.555455][ T2560] syzkaller1: entered allmulticast mode [ 138.745658][ T2570] FAULT_INJECTION: forcing a failure. [ 138.745658][ T2570] name failslab, interval 1, probability 0, space 0, times 0 [ 138.758427][ T2570] CPU: 0 UID: 0 PID: 2570 Comm: syz.3.848 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 138.758452][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.758463][ T2570] Call Trace: [ 138.758469][ T2570] [ 138.758475][ T2570] __dump_stack+0x21/0x30 [ 138.758503][ T2570] dump_stack_lvl+0x140/0x1c0 [ 138.758527][ T2570] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.758551][ T2570] dump_stack+0x19/0x20 [ 138.758573][ T2570] should_fail_ex+0x3c2/0x510 [ 138.758593][ T2570] should_failslab+0xac/0x100 [ 138.758614][ T2570] __kmalloc_cache_noprof+0x41/0x470 [ 138.758631][ T2570] ? ovl_init_fs_context+0x15e/0x790 [ 138.758650][ T2570] ovl_init_fs_context+0x15e/0x790 [ 138.758669][ T2570] alloc_fs_context+0x5c7/0x800 [ 138.758691][ T2570] fs_context_for_mount+0x26/0x40 [ 138.758713][ T2570] do_new_mount+0x116/0xb40 [ 138.758729][ T2570] ? security_capable+0x44/0x130 [ 138.758749][ T2570] path_mount+0x66a/0xff0 [ 138.758764][ T2570] ? putname+0x113/0x150 [ 138.758783][ T2570] __se_sys_mount+0x2bf/0x480 [ 138.758800][ T2570] ? ksys_write+0x1f3/0x260 [ 138.758817][ T2570] ? __x64_sys_mount+0xf0/0xf0 [ 138.758835][ T2570] __x64_sys_mount+0xc3/0xf0 [ 138.758851][ T2570] x64_sys_call+0x2021/0x2ee0 [ 138.758867][ T2570] do_syscall_64+0x57/0xf0 [ 138.758886][ T2570] ? clear_bhb_loop+0x50/0xa0 [ 138.758909][ T2570] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.758931][ T2570] RIP: 0033:0x7fe1f6f9e019 [ 138.758945][ T2570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.758959][ T2570] RSP: 002b:00007fe1f7dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.758977][ T2570] RAX: ffffffffffffffda RBX: 00007fe1f7225fa0 RCX: 00007fe1f6f9e019 [ 138.758990][ T2570] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 138.759002][ T2570] RBP: 00007fe1f7dd7090 R08: 0000200000000040 R09: 0000000000000000 [ 138.759013][ T2570] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 138.759024][ T2570] R13: 00007fe1f7226038 R14: 00007fe1f7225fa0 R15: 00007ffcaa291fd8 [ 138.759038][ T2570] [ 139.084300][ T36] audit: type=1400 audit(1785471307.160:336): avc: denied { mounton } for pid=2572 comm="syz.3.849" path="/proc/570/task" dev="proc" ino=26380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 139.335111][ T9] usb 2-1: USB disconnect, device number 41 [ 139.396854][ T360] usb 1-1: USB disconnect, device number 42 [ 139.411291][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 139.461555][ T36] audit: type=1400 audit(1785471307.630:337): avc: denied { append } for pid=2597 comm="syz.0.858" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.572301][ T36] audit: type=1400 audit(1785471307.730:338): avc: denied { ioctl } for pid=2600 comm="syz.2.859" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.596755][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 139.626691][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 139.683755][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 139.703615][ T2604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.712054][ T36] audit: type=1400 audit(1785471307.820:339): avc: denied { ioctl } for pid=2600 comm="syz.2.859" path="socket:[26603]" dev="sockfs" ino=26603 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.741428][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.769438][ T10] usb 4-1: SerialNumber: syz [ 139.824539][ T36] audit: type=1400 audit(1785471307.930:340): avc: denied { append } for pid=2602 comm="syz.0.860" name="sda1" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.929611][ T36] audit: type=1400 audit(1785471308.060:341): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.150429][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 140.200282][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 140.302033][ T10] usb 1-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 1600, setting to 1024 [ 140.313472][ T10] usb 1-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 1024 [ 140.323790][ T10] usb 1-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.333972][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 140.341955][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 140.351257][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.359367][ T10] usb 1-1: Product: ࠾ [ 140.363859][ T10] usb 1-1: Manufacturer: 纞䨹쯝㳁㾅䌫 [ 140.370125][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.381227][ T10] usb 1-1: SerialNumber: syz [ 140.386262][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.398917][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.530296][ T357] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 140.660302][ T357] usb 2-1: device descriptor read/64, error -71 [ 140.900325][ T357] usb 2-1: device descriptor read/64, error -71 [ 141.140304][ T357] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 141.270337][ T357] usb 2-1: device descriptor read/64, error -71 [ 141.510892][ T357] usb 2-1: device descriptor read/64, error -71 [ 141.620472][ T357] usb usb2-port1: attempt power cycle [ 141.960378][ T357] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 141.981362][ T357] usb 2-1: device descriptor read/8, error -71 [ 142.111475][ T357] usb 2-1: device descriptor read/8, error -71 [ 142.174488][ T9] usb 4-1: USB disconnect, device number 36 [ 142.238052][ T36] audit: type=1326 audit(1785471310.400:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2620 comm="syz.3.868" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1f6f9e019 code=0x0 [ 142.350289][ T357] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 142.369220][ T2623] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 142.377173][ T2623] netlink: 17 bytes leftover after parsing attributes in process `syz.3.868'. [ 142.388727][ T357] usb 2-1: device descriptor read/8, error -71 [ 142.399501][ T2622] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.868'. [ 142.531325][ T357] usb 2-1: device descriptor read/8, error -71 [ 142.640440][ T357] usb usb2-port1: unable to enumerate USB device [ 142.650519][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 142.800418][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 142.806580][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 142.815111][ T10] usb 4-1: config 179 has no interface number 0 [ 142.821519][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 142.832838][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 142.844256][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.855622][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 142.867229][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 142.880671][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 142.889705][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.923113][ T10] usb 1-1: USB disconnect, device number 43 [ 142.942296][ T2625] fuse: Unknown parameter '0x0000000000000004' [ 142.973828][ T9] usb 3-1: USB disconnect, device number 29 [ 143.178829][ T2643] netlink: 'syz.0.877': attribute type 27 has an invalid length. [ 143.194961][ T2643] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.224900][ T2643] netlink: 'syz.0.877': attribute type 27 has an invalid length. [ 143.251990][ T2643] veth0_vlan: left promiscuous mode [ 143.257534][ T2643] veth0_vlan: entered promiscuous mode [ 143.264672][ T2643] veth1_macvtap: left promiscuous mode [ 143.270932][ T2643] veth1_macvtap: entered promiscuous mode [ 143.278684][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.285772][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.308160][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.315248][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.358783][ T2645] fuse: Unknown parameter '0x0000000000000004' [ 143.390328][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 143.531225][ T36] audit: type=1400 audit(1785471311.700:343): avc: denied { read } for pid=2657 comm="syz.0.884" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.558349][ T2658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 143.567624][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 143.583709][ T36] audit: type=1400 audit(1785471311.700:344): avc: denied { open } for pid=2657 comm="syz.0.884" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.608891][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.617327][ T9] usb 3-1: config 179 has an invalid descriptor of length 90, skipping remainder of the config [ 143.628290][ T36] audit: type=1400 audit(1785471311.730:345): avc: denied { ioctl } for pid=2657 comm="syz.0.884" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.654325][ T9] usb 3-1: config 179 has no interface number 0 [ 143.660992][ T357] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 143.668655][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.682469][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.691868][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.820335][ T65] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 143.832077][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.843414][ T357] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.852896][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.971781][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.980176][ T65] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 143.989246][ T65] usb 1-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 143.999845][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.012960][ T65] usb 1-1: too many endpoints for config 1 interface 1 altsetting 98: 105, using maximum allowed: 30 [ 144.024052][ T65] usb 1-1: config 1 interface 1 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 144.037361][ T65] usb 1-1: config 1 interface 1 has no altsetting 0 [ 144.045370][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.054620][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.062715][ T65] usb 1-1: Product: syz [ 144.066957][ T65] usb 1-1: Manufacturer: syz [ 144.072330][ T65] usb 1-1: SerialNumber: syz [ 145.248108][ T65] usb 4-1: USB disconnect, device number 37 [ 145.341848][ T2666] usb usb1: usbfs: process 2666 (syz.3.886) did not claim interface 0 before use [ 146.084898][ T65] usb 3-1: USB disconnect, device number 30 [ 146.151624][ T2672] fuse: Unknown parameter '0x0000000000000004' [ 146.186174][ T2674] netlink: 108 bytes leftover after parsing attributes in process `syz.3.889'. [ 146.406256][ T2694] FAULT_INJECTION: forcing a failure. [ 146.406256][ T2694] name failslab, interval 1, probability 0, space 0, times 0 [ 146.429260][ T65] usb 2-1: USB disconnect, device number 46 [ 146.458354][ T2694] CPU: 0 UID: 0 PID: 2694 Comm: syz.2.895 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 146.458380][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.458391][ T2694] Call Trace: [ 146.458397][ T2694] [ 146.458404][ T2694] __dump_stack+0x21/0x30 [ 146.458438][ T2694] dump_stack_lvl+0x140/0x1c0 [ 146.458461][ T2694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.458485][ T2694] dump_stack+0x19/0x20 [ 146.458507][ T2694] should_fail_ex+0x3c2/0x510 [ 146.458526][ T2694] should_failslab+0xac/0x100 [ 146.458547][ T2694] __kmalloc_cache_node_noprof+0x46/0x430 [ 146.458565][ T2694] ? __get_vm_area_node+0x150/0x390 [ 146.458589][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.458614][ T2694] ? __kasan_slab_alloc+0x73/0x90 [ 146.458633][ T2694] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 146.458651][ T2694] __get_vm_area_node+0x150/0x390 [ 146.458675][ T2694] __vmalloc_node_range_noprof+0x340/0x1300 [ 146.458701][ T2694] ? copy_process+0x57c/0x3350 [ 146.458725][ T2694] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 146.458751][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.458775][ T2694] ? __kasan_slab_alloc+0x73/0x90 [ 146.458794][ T2694] ? arch_dup_task_struct+0x5b/0xe0 [ 146.458819][ T2694] ? __asan_memcpy+0x5a/0x80 [ 146.458835][ T2694] dup_task_struct+0x5d6/0xd80 [ 146.458855][ T2694] ? copy_process+0x57c/0x3350 [ 146.458875][ T2694] ? _raw_spin_lock_irq+0x93/0x120 [ 146.458894][ T2694] ? copy_process+0x3350/0x3350 [ 146.458914][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.458931][ T2694] copy_process+0x57c/0x3350 [ 146.458953][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.458978][ T2694] ? __cfi_copy_process+0x10/0x10 [ 146.458998][ T2694] ? __kmalloc_cache_noprof+0x23c/0x470 [ 146.459015][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.459031][ T2694] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 146.459051][ T2694] vhost_task_create+0x1f7/0x3f0 [ 146.459068][ T2694] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 146.459088][ T2694] ? __cfi_vhost_task_create+0x10/0x10 [ 146.459106][ T2694] ? __cfi_vhost_task_fn+0x10/0x10 [ 146.459123][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.459139][ T2694] ? mutex_lock+0x97/0x1d0 [ 146.459161][ T2694] ? __cfi_mutex_lock+0x10/0x10 [ 146.459182][ T2694] ? kernel_text_address+0xa9/0xe0 [ 146.459205][ T2694] kvm_mmu_post_init_vm+0x161/0x300 [ 146.459229][ T2694] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 146.459252][ T2694] ? _parse_integer_limit+0x195/0x1e0 [ 146.459270][ T2694] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 146.459292][ T2694] ? kstrtoull+0x13b/0x1e0 [ 146.459308][ T2694] ? kstrtouint+0x78/0xf0 [ 146.459324][ T2694] ? ioctl_has_perm+0x1bc/0x500 [ 146.459340][ T2694] ? __asan_memcpy+0x5a/0x80 [ 146.459356][ T2694] ? ioctl_has_perm+0x408/0x500 [ 146.459371][ T2694] ? has_cap_mac_admin+0xd0/0xd0 [ 146.459387][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.459408][ T2694] ? mutex_lock_killable+0x97/0x1d0 [ 146.459435][ T2694] ? __cfi_mutex_lock_killable+0x10/0x10 [ 146.459458][ T2694] ? proc_fail_nth_write+0x184/0x220 [ 146.459484][ T2694] kvm_vcpu_ioctl+0xa43/0x1000 [ 146.459500][ T2694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.459516][ T2694] ? __cfi_vfs_write+0x10/0x10 [ 146.459533][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.459549][ T2694] ? mutex_unlock+0x90/0x240 [ 146.459570][ T2694] ? __cfi_mutex_unlock+0x10/0x10 [ 146.459594][ T2694] ? bpf_lsm_file_ioctl+0xd/0x20 [ 146.459616][ T2694] ? security_file_ioctl+0x3e/0x110 [ 146.459640][ T2694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.459655][ T2694] __se_sys_ioctl+0x132/0x1b0 [ 146.459676][ T2694] __x64_sys_ioctl+0x7f/0xa0 [ 146.459695][ T2694] x64_sys_call+0x1878/0x2ee0 [ 146.459710][ T2694] do_syscall_64+0x57/0xf0 [ 146.459728][ T2694] ? clear_bhb_loop+0x50/0xa0 [ 146.459750][ T2694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.459771][ T2694] RIP: 0033:0x7f3fbb19e019 [ 146.459785][ T2694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.459799][ T2694] RSP: 002b:00007f3fbc07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.459817][ T2694] RAX: ffffffffffffffda RBX: 00007f3fbb425fa0 RCX: 00007f3fbb19e019 [ 146.459830][ T2694] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 146.459841][ T2694] RBP: 00007f3fbc07b090 R08: 0000000000000000 R09: 0000000000000000 [ 146.459852][ T2694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.459862][ T2694] R13: 00007f3fbb426038 R14: 00007f3fbb425fa0 R15: 00007ffe00218948 [ 146.459876][ T2694] [ 146.906479][ T2694] syz.2.895: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 146.922156][ T2694] CPU: 0 UID: 0 PID: 2694 Comm: syz.2.895 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 146.922181][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.922193][ T2694] Call Trace: [ 146.922199][ T2694] [ 146.922205][ T2694] __dump_stack+0x21/0x30 [ 146.922233][ T2694] dump_stack_lvl+0x140/0x1c0 [ 146.922255][ T2694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.922278][ T2694] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 146.922300][ T2694] dump_stack+0x19/0x20 [ 146.922321][ T2694] warn_alloc+0x1e7/0x2c0 [ 146.922344][ T2694] ? __kasan_kmalloc+0x28/0xb0 [ 146.922374][ T2694] ? __cfi_warn_alloc+0x10/0x10 [ 146.922396][ T2694] ? __get_vm_area_node+0x150/0x390 [ 146.922419][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.922445][ T2694] ? __get_vm_area_node+0x382/0x390 [ 146.922469][ T2694] __vmalloc_node_range_noprof+0x365/0x1300 [ 146.922498][ T2694] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 146.922523][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.922548][ T2694] ? __kasan_slab_alloc+0x73/0x90 [ 146.922567][ T2694] ? arch_dup_task_struct+0x5b/0xe0 [ 146.922592][ T2694] ? __asan_memcpy+0x5a/0x80 [ 146.922609][ T2694] dup_task_struct+0x5d6/0xd80 [ 146.922629][ T2694] ? copy_process+0x57c/0x3350 [ 146.922649][ T2694] ? _raw_spin_lock_irq+0x93/0x120 [ 146.922668][ T2694] ? copy_process+0x3350/0x3350 [ 146.922687][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.922704][ T2694] copy_process+0x57c/0x3350 [ 146.922726][ T2694] ? kasan_save_alloc_info+0x3a/0x50 [ 146.922750][ T2694] ? __cfi_copy_process+0x10/0x10 [ 146.922770][ T2694] ? __kmalloc_cache_noprof+0x23c/0x470 [ 146.922788][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.922804][ T2694] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 146.922824][ T2694] vhost_task_create+0x1f7/0x3f0 [ 146.922840][ T2694] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 146.922861][ T2694] ? __cfi_vhost_task_create+0x10/0x10 [ 146.922879][ T2694] ? __cfi_vhost_task_fn+0x10/0x10 [ 146.922895][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.922911][ T2694] ? mutex_lock+0x97/0x1d0 [ 146.922933][ T2694] ? __cfi_mutex_lock+0x10/0x10 [ 146.922954][ T2694] ? kernel_text_address+0xa9/0xe0 [ 146.922977][ T2694] kvm_mmu_post_init_vm+0x161/0x300 [ 146.923001][ T2694] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 146.923023][ T2694] ? _parse_integer_limit+0x195/0x1e0 [ 146.923041][ T2694] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 146.923063][ T2694] ? kstrtoull+0x13b/0x1e0 [ 146.923078][ T2694] ? kstrtouint+0x78/0xf0 [ 146.923094][ T2694] ? ioctl_has_perm+0x1bc/0x500 [ 146.923110][ T2694] ? __asan_memcpy+0x5a/0x80 [ 146.923125][ T2694] ? ioctl_has_perm+0x408/0x500 [ 146.923140][ T2694] ? has_cap_mac_admin+0xd0/0xd0 [ 146.923156][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.923171][ T2694] ? mutex_lock_killable+0x97/0x1d0 [ 146.923199][ T2694] ? __cfi_mutex_lock_killable+0x10/0x10 [ 146.923223][ T2694] ? proc_fail_nth_write+0x184/0x220 [ 146.923248][ T2694] kvm_vcpu_ioctl+0xa43/0x1000 [ 146.923264][ T2694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.923279][ T2694] ? __cfi_vfs_write+0x10/0x10 [ 146.923296][ T2694] ? __kasan_check_write+0x18/0x20 [ 146.923312][ T2694] ? mutex_unlock+0x90/0x240 [ 146.923333][ T2694] ? __cfi_mutex_unlock+0x10/0x10 [ 146.923357][ T2694] ? bpf_lsm_file_ioctl+0xd/0x20 [ 146.923384][ T2694] ? security_file_ioctl+0x3e/0x110 [ 146.923408][ T2694] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.923423][ T2694] __se_sys_ioctl+0x132/0x1b0 [ 146.923443][ T2694] __x64_sys_ioctl+0x7f/0xa0 [ 146.923462][ T2694] x64_sys_call+0x1878/0x2ee0 [ 146.923478][ T2694] do_syscall_64+0x57/0xf0 [ 146.923495][ T2694] ? clear_bhb_loop+0x50/0xa0 [ 146.923518][ T2694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.923539][ T2694] RIP: 0033:0x7f3fbb19e019 [ 146.923553][ T2694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.923568][ T2694] RSP: 002b:00007f3fbc07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.923585][ T2694] RAX: ffffffffffffffda RBX: 00007f3fbb425fa0 RCX: 00007f3fbb19e019 [ 146.923598][ T2694] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 146.923609][ T2694] RBP: 00007f3fbc07b090 R08: 0000000000000000 R09: 0000000000000000 [ 146.923620][ T2694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.923630][ T2694] R13: 00007f3fbb426038 R14: 00007f3fbb425fa0 R15: 00007ffe00218948 [ 146.923645][ T2694] [ 146.923690][ T2694] Mem-Info: [ 147.362649][ T2694] active_anon:23597 inactive_anon:80 isolated_anon:0 [ 147.362649][ T2694] active_file:17052 inactive_file:2401 isolated_file:0 [ 147.362649][ T2694] unevictable:0 dirty:8 writeback:0 [ 147.362649][ T2694] slab_reclaimable:4986 slab_unreclaimable:71585 [ 147.362649][ T2694] mapped:24833 shmem:16589 pagetables:935 [ 147.362649][ T2694] sec_pagetables:0 bounce:0 [ 147.362649][ T2694] kernel_misc_reclaimable:0 [ 147.362649][ T2694] free:1509006 free_pcp:680 free_cma:0 [ 147.407564][ T2694] Node 0 active_anon:94388kB inactive_anon:320kB active_file:68208kB inactive_file:9604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99332kB dirty:32kB writeback:0kB shmem:66356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6592kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no [ 147.439767][ T2694] DMA32 free:2963332kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:68kB free_cma:0kB [ 147.469537][ T2694] lowmem_reserve[]: 0 3921 3921 [ 147.474435][ T2694] Normal free:3072692kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94388kB inactive_anon:320kB active_file:68208kB inactive_file:9604kB unevictable:0kB writepending:32kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2652kB local_pcp:2652kB free_cma:0kB [ 147.505718][ T2694] lowmem_reserve[]: 0 0 0 [ 147.510068][ T2694] DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 5*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 5*1024kB (UM) 4*2048kB (M) 719*4096kB (M) = 2963332kB [ 147.525705][ T2694] Normal: 51*4kB (ME) 74*8kB (UME) 55*16kB (UME) 64*32kB (UME) 84*64kB (UME) 26*128kB (UME) 10*256kB (UME) 28*512kB (UME) 16*1024kB (UME) 20*2048kB (UM) 729*4096kB (UME) = 3072652kB [ 147.543856][ T2694] 36137 total pagecache pages [ 147.548537][ T2694] 86 pages in swap cache [ 147.552815][ T2694] Free swap = 124504kB [ 147.557040][ T2694] Total swap = 124996kB [ 147.561214][ T2694] 2097051 pages RAM [ 147.565016][ T2694] 0 pages HighMem/MovableOnly [ 147.569757][ T2694] 352235 pages reserved [ 147.576405][ T2694] 0 pages cma reserved [ 147.581231][ T2697] overlayfs: failed to resolve './file0': -2 [ 147.589533][ T2694] Memory allocations: [ 147.595082][ T2694] 0 B 0 init/main.c:1477 func:do_initcalls [ 147.602422][ T2694] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 147.611123][ T2694] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 147.619321][ T2694] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 147.627444][ T2694] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 147.635416][ T2694] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 147.644345][ T2694] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 147.656258][ T2694] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 147.665677][ T2694] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 147.673688][ T2694] 0 B 0 init/initramfs.c:101 func:find_link [ 147.720532][ T2701] fuse: Unknown parameter '0x0000000000000004' [ 147.790567][ T2703] netlink: 'syz.2.899': attribute type 12 has an invalid length. [ 147.910351][ T65] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 147.986317][ T36] audit: type=1400 audit(1785471316.150:346): avc: denied { setopt } for pid=2705 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.063406][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.079885][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.101657][ T2724] FAULT_INJECTION: forcing a failure. [ 148.101657][ T2724] name failslab, interval 1, probability 0, space 0, times 0 [ 148.115600][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 148.125186][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.133357][ T2724] CPU: 0 UID: 0 PID: 2724 Comm: syz.3.906 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 148.133379][ T2724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.133391][ T2724] Call Trace: [ 148.133397][ T2724] [ 148.133403][ T2724] __dump_stack+0x21/0x30 [ 148.133430][ T2724] dump_stack_lvl+0x140/0x1c0 [ 148.133453][ T2724] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.133478][ T2724] dump_stack+0x19/0x20 [ 148.133499][ T2724] should_fail_ex+0x3c2/0x510 [ 148.133519][ T2724] should_failslab+0xac/0x100 [ 148.133539][ T2724] __kmalloc_node_noprof+0x69/0x500 [ 148.133557][ T2724] ? __kvmalloc_node_noprof+0x128/0x300 [ 148.133583][ T2724] __kvmalloc_node_noprof+0x128/0x300 [ 148.133608][ T2724] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 148.133633][ T2724] ? percpu_ref_init+0x1a0/0x4d0 [ 148.133652][ T2724] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 148.133670][ T2724] io_ring_ctx_alloc+0x4f6/0x1dc0 [ 148.133688][ T2724] io_uring_create+0x2e0/0x13f0 [ 148.133704][ T2724] ? __kasan_check_write+0x18/0x20 [ 148.133721][ T2724] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 148.133744][ T2724] ? __kasan_check_write+0x18/0x20 [ 148.133760][ T2724] ? __x64_sys_io_uring_setup+0x80/0x80 [ 148.133785][ T2724] ? __kasan_check_read+0x15/0x20 [ 148.133805][ T2724] __x64_sys_io_uring_setup+0x5f/0x80 [ 148.133828][ T2724] x64_sys_call+0x22c0/0x2ee0 [ 148.133843][ T2724] do_syscall_64+0x57/0xf0 [ 148.133861][ T2724] ? clear_bhb_loop+0x50/0xa0 [ 148.133883][ T2724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.133904][ T2724] RIP: 0033:0x7fe1f6f9e019 [ 148.133919][ T2724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.133934][ T2724] RSP: 002b:00007fe1f7dd6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 148.133952][ T2724] RAX: ffffffffffffffda RBX: 0000200000000b48 RCX: 00007fe1f6f9e019 [ 148.133965][ T2724] RDX: 0000200000000bc8 RSI: 0000200000000b48 RDI: 0000000000000104 [ 148.133977][ T2724] RBP: 0000200000000b40 R08: 0000200000001f40 R09: 0000000000000000 [ 148.133988][ T2724] R10: 0000200000000bd0 R11: 0000000000000206 R12: 0000200000000bc8 [ 148.134000][ T2724] R13: 0000200000000bd0 R14: 00007fe1f7dd6fd8 R15: 0000000000000000 [ 148.134014][ T2724] [ 148.369939][ T2727] fuse: Unknown parameter '0x0000000000000004' [ 148.458359][ T1596] device offline error, dev sda, sector 1122614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.469309][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 140326) [ 148.481357][ T1596] Buffer I/O error on device sda1, logical block 140288 [ 148.488450][ T1596] device offline error, dev sda, sector 1126710 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.499018][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 140838) [ 148.511092][ T1596] Buffer I/O error on device sda1, logical block 140800 [ 148.518044][ T1596] Buffer I/O error on device sda1, logical block 140801 [ 148.525064][ T1596] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.535614][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 143398) [ 148.547174][ T1596] Buffer I/O error on device sda1, logical block 143360 [ 148.554303][ T1596] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.564839][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 144421) [ 148.576431][ T357] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 148.584938][ T1596] Buffer I/O error on device sda1, logical block 144383 [ 148.591968][ T1596] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.611904][ T65] usb 1-1: USB disconnect, device number 44 [ 148.619040][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 147494) [ 148.632784][ T1596] Buffer I/O error on device sda1, logical block 147456 [ 148.639826][ T1596] device offline error, dev sda, sector 1188142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.650611][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 148517) [ 148.670708][ T1596] Buffer I/O error on device sda1, logical block 148479 [ 148.683183][ T1596] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.693947][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 151590) [ 148.705787][ T1596] Buffer I/O error on device sda1, logical block 151552 [ 148.715490][ T1596] device offline error, dev sda, sector 1213230 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.726226][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 151653) [ 148.738016][ T1596] Buffer I/O error on device sda1, logical block 151615 [ 148.745213][ T1596] device offline error, dev sda, sector 1220910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 148.755902][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 152613) [ 148.767743][ T1596] Buffer I/O error on device sda1, logical block 152575 [ 148.774991][ T1596] device offline error, dev sda, sector 1245494 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 148.785666][ T1596] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2034 starting block 155686) [ 148.797841][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.808831][ T357] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.819902][ T2739] Buffer I/O error on dev sda1, logical block 33722, lost async page write [ 148.837475][ T2739] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 148.845989][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.854177][ T2739] Buffer I/O error on dev sda1, logical block 133, lost async page write [ 148.867042][ T286] Aborting journal on device sda1-8. [ 148.872635][ T286] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 148.881532][ T286] JBD2: I/O error when updating journal superblock for sda1-8. [ 148.889083][ T286] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5899: IO failure [ 148.899841][ T357] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 148.908244][ T286] EXT4-fs error (device sda1): ext4_dirty_inode:6103: inode #2028: comm syz-executor: mark_inode_dirty error [ 148.919918][ T357] EXT4-fs (sda1): I/O error while writing superblock [ 148.935904][ T2739] EXT4-fs (sda1): shut down requested (2) [ 148.942734][ T36] audit: type=1400 audit(1785471317.110:347): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 148.964942][ T357] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 148.973244][ T286] EXT4-fs error (device sda1) in ext4_dirty_inode:6104: IO failure [ 148.982498][ T357] EXT4-fs (sda1): I/O error while writing superblock [ 148.999433][ T357] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 149.025298][ T36] audit: type=1400 audit(1785471317.110:348): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.051221][ T357] EXT4-fs (sda1): I/O error while writing superblock [ 149.060152][ T2739] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 149.114176][ T36] audit: type=1400 audit(1785471317.110:349): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.180930][ T2750] fuse: Unknown parameter '0x0000000000000004' [ 149.188293][ T36] audit: type=1400 audit(1785471317.110:350): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.245379][ T2752] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.257773][ T36] audit: type=1400 audit(1785471317.110:351): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.325768][ T36] audit: type=1400 audit(1785471317.110:352): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.417774][ T36] audit: type=1400 audit(1785471317.110:353): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.470366][ T357] usb 2-1: USB disconnect, device number 47 [ 149.554439][ T36] audit: type=1400 audit(1785471317.720:354): avc: denied { mount } for pid=2764 comm="syz.1.923" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.576891][ T2765] overlayfs: failed to resolve './file2': -2 [ 149.625955][ T2769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 149.640721][ T2770] fuse: Unknown parameter 'fd0x0000000000000004' [ 149.652129][ T36] audit: type=1400 audit(1785471317.780:355): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.804545][ T2782] netlink: 44 bytes leftover after parsing attributes in process `syz.0.930'. [ 150.427203][ T2796] fuse: Unknown parameter 'fd0x0000000000000004' [ 150.470129][ T36] audit: type=1400 audit(1785471318.630:356): avc: denied { create } for pid=2797 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 150.636296][ T2804] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 150.673385][ T2804] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 150.717482][ T2808] 9pnet_fd: p9_fd_create_tcp (2808): problem connecting socket to 127.0.0.1 [ 150.732589][ T2804] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 150.765530][ T2804] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 150.774987][ T2804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 150.890756][ T2818] fuse: Unknown parameter 'fd0x0000000000000004' [ 150.990306][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd SYZFAIL: SIGBUS pc-offset:0xfffffffffffe340d pc:0x7fb0e7e70123 addr:0x7fb0e2dffffc code=2 (errno 11: Resource temporarily unavailable) [ 151.044107][ T357] usb 3-1: USB disconnect, device number 31 [ 151.135399][ T9] usb 1-1: device descriptor read/64, error -71 [ 151.333863][ T1594] bridge_slave_1: left allmulticast mode [ 151.339541][ T1594] bridge_slave_1: left promiscuous mode [ 151.365478][ T1594] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.380432][ T1594] bridge_slave_0: left allmulticast mode [ 151.386091][ T1594] bridge_slave_0: left promiscuous mode [ 151.401644][ T1594] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.482531][ T1594] tipc: Left network mode [ 151.490999][ T1594] veth1_macvtap: left promiscuous mode [ 151.496511][ T1594] veth0_vlan: left promiscuous mode [ 151.701616][ T1594] bridge_slave_1: left allmulticast mode [ 151.707289][ T1594] bridge_slave_1: left promiscuous mode [ 151.713219][ T1594] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.720902][ T1594] bridge_slave_0: left allmulticast mode [ 151.726557][ T1594] bridge_slave_0: left promiscuous mode [ 151.732388][ T1594] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.740072][ T1594] bridge_slave_1: left allmulticast mode [ 151.745965][ T1594] bridge_slave_1: left promiscuous mode [ 151.752385][ T1594] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.759790][ T1594] bridge_slave_0: left allmulticast mode [ 151.765623][ T1594] bridge_slave_0: left promiscuous mode [ 151.771323][ T1594] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.853968][ T1594] veth1_macvtap: left promiscuous mode [ 151.859498][ T1594] veth0_vlan: left promiscuous mode [ 151.865131][ T1594] veth1_macvtap: left promiscuous mode