last executing test programs: 21.817282819s ago: executing program 0 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x26, 0x1, 0x8f0bd22, 0xfffffff9, {0x54}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) 21.769773503s ago: executing program 0 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/259, 0x103}, {&(0x7f00000008c0)=""/4123, 0x101b}, {&(0x7f0000001900)=""/98, 0x62}, {&(0x7f0000001980)=""/4093, 0xffd}, {&(0x7f0000002980)=""/183, 0xb7}, {&(0x7f0000002a40)=""/109, 0x6d}, {&(0x7f0000002ac0)=""/4086, 0xff6}, {&(0x7f0000003ac0)=""/246, 0xf6}, {&(0x7f0000003bc0)=""/142, 0x8e}, {&(0x7f0000003c80)=""/243, 0xf3}, {&(0x7f0000003d80)=""/158, 0x9e}], 0xb}, 0x10082) 21.769583864s ago: executing program 0 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a3000000000380003"], 0xe4}}, 0x0) 21.756820775s ago: executing program 0 (id=897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, 0x0, 0x0, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 21.31603s ago: executing program 0 (id=899): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1869, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0) 20.261242129s ago: executing program 0 (id=928): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2840, 0x0) r0 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, &(0x7f0000000a80), 0xf2, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000b80)={r1, r0, r0}, &(0x7f0000000bc0)=""/72, 0x48, &(0x7f0000000c40)={&(0x7f0000000c80)={'sha3-256\x00'}}) 20.180161827s ago: executing program 32 (id=928): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x2840, 0x0) r0 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, &(0x7f0000000a80), 0xf2, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000b80)={r1, r0, r0}, &(0x7f0000000bc0)=""/72, 0x48, &(0x7f0000000c40)={&(0x7f0000000c80)={'sha3-256\x00'}}) 6.161288028s ago: executing program 4 (id=1088): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x113, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x86, 0x16, 0xfc, 0x8, 0x16d5, 0x6202, 0xc14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x1, 0x1, 0x8a, 0x40, 0x4, "", [{{0x9, 0x4, 0x78, 0x3, 0x3, 0x16, 0x34, 0x69, 0x1a, [], [{{0x9, 0x5, 0xc, 0x1, 0x20, 0x3, 0x0, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0x5, 0x3, 0x1bf, 0x36, 0x7, 0x7, [@generic={0xc6, 0x6, "c64c3c326a1837fffb329072a0ee8fb8d331cc3c4536bcfb89418c14c4c06e0820a9e1b4335e69cdff63cc5f02d4032c7949234404df2419c57c841664904ca80cda921c2b828e43748f15c6a05ed86f0a8fb39096d9ac31b597dbb6ca79201ae9b85099daf63d0179dee76743294a961c17a4c857470104c2375e1f8bfce6a8d94ab554e8d42324fc21cad3b0a4cccd09ddd210464dfecb3238ad2b6771c00c4563d9b13ab56a99297213973fe76339e947b1b2a33743914c65998e3321e6a4e287eb38"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0xf, 0x5, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 6.077737596s ago: executing program 2 (id=1090): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x24, "14a563f0a75a9ebf044bf4c768c2c96f9b70a96dc4b5a4d546cc196e49498eba908b18c7"}, 0x0}) 5.049472051s ago: executing program 1 (id=1103): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000b40)=ANY=[@ANYRES16], 0x6) 5.049368381s ago: executing program 1 (id=1104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0xfffffffffffffff5, 0x0, {0x9}}, 0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x4, 0x100000000000000, 0x2, 0x180, 0x4, 0xcbc, 0xf1, 0x2, 0x0, 0x8002, 0x6, 0xa32, 0xfffffffffffffffd, 0x9, 0x9, 0x9], 0x100000, 0x3c4210}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@x86={0x7, 0x8, 0xc5, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.972780439s ago: executing program 1 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x50000, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000300)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 4.889995938s ago: executing program 1 (id=1106): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004011070009000101020301090220"], 0x0) 4.18943604s ago: executing program 3 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) add_key(&(0x7f00000001c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 3.936518436s ago: executing program 3 (id=1112): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0x3000, 0x1, 0x10, 0x8, 0xb, 0xe6, 0x40, 0x7, 0x0, 0xd, 0x0, 0x1}, {0x5000, 0x1ffe, 0x0, 0x6, 0x42, 0x8, 0x75, 0x6, 0x36, 0x4, 0x0, 0x1}, {0x70000, 0xdddd0000, 0xa, 0x7, 0x5, 0x6, 0x0, 0xd, 0x1, 0xa4, 0x5, 0x5}, {0xeeee0000, 0x80a0000, 0xa, 0x6, 0x2, 0x5, 0xb, 0x8, 0x8, 0x7, 0x6, 0x1}, {0x0, 0x3000, 0xe, 0x3, 0x30, 0x6, 0xac, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0x41000, 0xdddd0000, 0xb, 0x1, 0xb1, 0xb, 0x1, 0x9c, 0x82, 0x2, 0xfd, 0x7}, {0x5000, 0x50000, 0xf, 0x5, 0x17, 0x5, 0x7, 0x7, 0x9d, 0x81, 0x40, 0x6c}, {0x8000000, 0x4000, 0xf, 0x5, 0xcd, 0x47, 0x1, 0x1, 0x42, 0x8, 0xb0, 0x81}, {0xeeee0000, 0xffff}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x5000, 0x112520, 0x2, 0x500, 0x2000, [0x6800000000000000, 0xe51, 0x3, 0x8]}) 3.821235828s ago: executing program 3 (id=1113): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x80, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000003540)={0x2020}, 0x2020) 3.101185702s ago: executing program 4 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a40)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x40a40, 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3.100726482s ago: executing program 3 (id=1115): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/psched\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f00000007c0)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000940)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 3.097180532s ago: executing program 2 (id=1116): r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) chdir(&(0x7f0000000200)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x2) getdents64(r2, &(0x7f0000000280)=""/47, 0x2f) getdents64(r2, &(0x7f0000000f40)=""/4096, 0x1000) 3.042610597s ago: executing program 2 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/4092, 0xffc}, {&(0x7f0000001580)=""/258, 0x102}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x400000ff}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/4089, 0xff9}, {&(0x7f0000002700)=""/4087, 0xff7}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) 2.668350446s ago: executing program 4 (id=1118): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000ec0)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@raid={0x0, 0x400, 0x0, 0x98, 'raid\x00', {'raid6_zr', 0x20, '1 8', 0x20, 0x3, [{0x20, @dev=@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @dev=@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 2.62575776s ago: executing program 1 (id=1119): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="280000002a00030500020000000000001800e37f0c0000010d"], 0x28}], 0x1}, 0x1404e8d0) 2.62561292s ago: executing program 4 (id=1120): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/address_bits', 0x0, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) write$vga_arbiter(r3, &(0x7f0000000080), 0xf) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002680)=[@text64={0x40, &(0x7f00000026c0)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002740)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x6000, 0x1ffc, 0x6, 0x1, 0xbb1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.625549s ago: executing program 1 (id=1121): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, 0x0, 0x0}, 0x0) 2.501732184s ago: executing program 4 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000840)={0x20000002}) 2.173028157s ago: executing program 2 (id=1123): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0x8, 0x4) sendto$packet(r0, &(0x7f00000003c0)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000440)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.165815807s ago: executing program 4 (id=1124): r0 = openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000440)={{r0}, "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"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x86, 0x16, 0xfc, 0x8, 0x16d5, 0x6202, 0xc14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x8a, 0x40, 0x4, "", [{{0x9, 0x4, 0x78, 0x3, 0x1, 0x16, 0x34, 0x69, 0x1a, [], [{{0x9, 0x5, 0x5, 0x3, 0x1bf, 0x36, 0x7, 0x7, [@generic={0x9, 0x6, "c64c3c326a1837"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.109347683s ago: executing program 2 (id=1125): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 541.705485ms ago: executing program 3 (id=1126): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x17d, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) 500.779969ms ago: executing program 2 (id=1127): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 0s ago: executing program 3 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): eneric 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.395404][ T36] audit: type=1400 audit(1793246436.290:250): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=479 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.417864][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.427393][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.450787][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.457206][ T36] audit: type=1400 audit(1793246436.290:251): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=479 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.466816][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.520575][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.540024][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.561691][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.569492][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.577032][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.584817][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.592905][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.610748][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.627327][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.642663][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.658131][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.674456][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.689881][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.705325][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.720562][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.736037][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.751410][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.767933][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.783219][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.798896][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.814155][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.830634][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.845999][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.861347][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.876765][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.907510][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.921805][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.937176][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.952874][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.969325][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.983943][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 115.999323][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.014474][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.030072][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.046015][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.061709][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.077311][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.097778][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.115654][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.120205][ T2258] netlink: 'syz.3.544': attribute type 16 has an invalid length. [ 116.133112][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.145179][ T2258] EXT4-fs: dax option not supported [ 116.148667][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.166664][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.177537][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.185906][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.193652][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.201408][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.218953][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.226460][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.244578][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.254310][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.267916][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.280944][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.294218][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.311965][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.325345][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.339507][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.353696][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.369491][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.383599][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.398745][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.417467][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.431528][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.446734][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.461718][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.469478][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.476961][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.484825][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.493236][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.510237][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.519228][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.526953][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.534787][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.542545][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.551156][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.572269][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.583138][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.593573][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.601491][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.618282][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.625919][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.633684][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.641407][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.649052][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.656665][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.676900][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.686737][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.700607][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.715336][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.730815][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.738767][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.746343][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.754272][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.761994][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.769906][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.777643][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.785338][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.793168][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.801089][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.808825][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.816525][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.824522][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.840628][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.855984][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.872709][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.888324][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.908229][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.924715][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.939970][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.955134][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.970387][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 116.986866][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.003235][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.018524][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.033735][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.050063][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.065358][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.080850][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.097279][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.112807][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.128030][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.143287][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.159642][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.176221][ T2277] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.177632][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.202482][ T2277] SELinux: failed to load policy [ 117.209246][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.223985][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.238403][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.258866][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.274166][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.289471][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.303696][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.319031][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.334367][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.349703][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.365837][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.383626][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.407281][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.417448][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.435099][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.447283][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.465342][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.473064][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.481496][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.489189][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.496673][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.504408][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.527339][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.544987][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.553127][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.567425][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.585134][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.595262][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.611572][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.627300][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.647303][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.654800][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.667293][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.674748][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.697282][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.707471][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.714925][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.737286][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.744763][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.767280][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.774849][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.797284][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.804786][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.827288][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.834765][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.857341][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.864817][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.887296][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.894815][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.917283][ T31] hid-generic 0081:0007:0009.0002: unknown main item tag 0x0 [ 117.937607][ T31] hid-generic 0081:0007:0009.0002: hidraw0: HID v0.04 Device [syz0] on syz1 [ 117.966081][ T415] usb 3-1: USB disconnect, device number 19 [ 118.070662][ T2290] fido_id[2290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.764575][ T2370] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.789764][ T2370] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 120.861726][ T2370] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 121.404019][ T2396] netlink: 108 bytes leftover after parsing attributes in process `syz.0.582'. [ 122.227957][ T2410] netlink: 108 bytes leftover after parsing attributes in process `syz.2.586'. [ 122.897918][ T2433] FAULT_INJECTION: forcing a failure. [ 122.897918][ T2433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.947284][ T2433] CPU: 0 UID: 0 PID: 2433 Comm: syz.3.593 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 122.947329][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.947358][ T2433] Call Trace: [ 122.947369][ T2433] [ 122.947381][ T2433] __dump_stack+0x21/0x30 [ 122.947427][ T2433] dump_stack_lvl+0x140/0x1c0 [ 122.947469][ T2433] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.947512][ T2433] ? _parse_integer+0x2e/0x40 [ 122.947551][ T2433] ? kstrtoull+0x13b/0x1e0 [ 122.947592][ T2433] dump_stack+0x19/0x20 [ 122.947631][ T2433] should_fail_ex+0x3c2/0x510 [ 122.947659][ T2433] should_fail+0xf/0x20 [ 122.947682][ T2433] should_fail_usercopy+0x1e/0x30 [ 122.947715][ T2433] _copy_from_user+0x20/0xa0 [ 122.947745][ T2433] ___sys_sendmsg+0x1c7/0x370 [ 122.947786][ T2433] ? __sys_sendmsg+0x260/0x260 [ 122.947825][ T2433] ? proc_fail_nth_write+0x184/0x220 [ 122.947863][ T2433] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 122.947904][ T2433] ? __fget_files+0x2bc/0x330 [ 122.947931][ T2433] __x64_sys_sendmsg+0x1be/0x2a0 [ 122.947970][ T2433] ? fput+0x1a4/0x230 [ 122.947997][ T2433] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 122.948036][ T2433] ? ksys_write+0x1f3/0x260 [ 122.948075][ T2433] ? __kasan_check_read+0x15/0x20 [ 122.948112][ T2433] x64_sys_call+0x2a4c/0x2ee0 [ 122.948143][ T2433] do_syscall_64+0x57/0xf0 [ 122.948171][ T2433] ? clear_bhb_loop+0x50/0xa0 [ 122.948209][ T2433] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.948242][ T2433] RIP: 0033:0x7f73dd59f559 [ 122.948267][ T2433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.948289][ T2433] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.948319][ T2433] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 122.948342][ T2433] RDX: 0000000000040010 RSI: 0000200000000280 RDI: 0000000000000003 [ 122.948359][ T2433] RBP: 00007f73de42a090 R08: 0000000000000000 R09: 0000000000000000 [ 122.948377][ T2433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.948398][ T2433] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 122.948421][ T2433] [ 124.383869][ T2464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.395204][ T2464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.077930][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 128.077972][ T36] audit: type=1400 audit(1793246448.930:253): avc: denied { write } for pid=2538 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.257273][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.429215][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 129.442661][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.457306][ T31] usb 2-1: config 0 has no interface number 0 [ 129.469505][ T31] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.489503][ T31] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.508439][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 129.527510][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.536846][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.552425][ T31] usb 2-1: Product: syz [ 129.561064][ T31] usb 2-1: Manufacturer: syz [ 129.570431][ T31] usb 2-1: SerialNumber: syz [ 129.581918][ T31] usb 2-1: config 0 descriptor?? [ 129.598493][ T31] smsc75xx v1.0.0 [ 129.602468][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 129.617105][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 131.402940][ T2597] ======================================================= [ 131.402940][ T2597] WARNING: The mand mount option has been deprecated and [ 131.402940][ T2597] and is ignored by this kernel. Remove the mand [ 131.402940][ T2597] option from the mount to silence this warning. [ 131.402940][ T2597] ======================================================= [ 132.035460][ T356] usb 2-1: USB disconnect, device number 8 [ 135.569311][ T36] audit: type=1400 audit(1793246456.480:254): avc: denied { mounton } for pid=2703 comm="syz.0.674" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 135.627031][ T36] audit: type=1400 audit(1793246456.480:255): avc: denied { mount } for pid=2703 comm="syz.0.674" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 137.397293][ T356] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 137.557274][ T356] usb 3-1: Using ep0 maxpacket: 16 [ 137.567176][ T356] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.595830][ T356] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.615344][ T356] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.627837][ T356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.644743][ T356] usb 3-1: Product: syz [ 137.653537][ T356] usb 3-1: Manufacturer: syz [ 137.663654][ T356] usb 3-1: SerialNumber: syz [ 137.879340][ T356] usb 3-1: 0:2 : does not exist [ 137.890455][ T356] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 137.906702][ T356] usb 3-1: USB disconnect, device number 20 [ 137.934794][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.328380][ T2752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.347361][ T2752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.776145][ T2762] FAULT_INJECTION: forcing a failure. [ 138.776145][ T2762] name failslab, interval 1, probability 0, space 0, times 0 [ 138.809236][ T2762] CPU: 1 UID: 0 PID: 2762 Comm: syz.0.690 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 138.809281][ T2762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.809298][ T2762] Call Trace: [ 138.809310][ T2762] [ 138.809324][ T2762] __dump_stack+0x21/0x30 [ 138.809368][ T2762] dump_stack_lvl+0x140/0x1c0 [ 138.809417][ T2762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.809460][ T2762] dump_stack+0x19/0x20 [ 138.809495][ T2762] should_fail_ex+0x3c2/0x510 [ 138.809527][ T2762] ? io_alloc_hash_table+0x52/0x160 [ 138.809562][ T2762] should_failslab+0xac/0x100 [ 138.809592][ T2762] __kmalloc_noprof+0x69/0x510 [ 138.809638][ T2762] ? io_alloc_hash_table+0x52/0x160 [ 138.809672][ T2762] ? init_hash_table+0x1ae/0x270 [ 138.809710][ T2762] io_alloc_hash_table+0x52/0x160 [ 138.809744][ T2762] io_ring_ctx_alloc+0x10b/0x1dc0 [ 138.809782][ T2762] io_uring_create+0x2e0/0x13f0 [ 138.809809][ T2762] ? __kasan_check_write+0x18/0x20 [ 138.809847][ T2762] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 138.809882][ T2762] ? __kasan_check_write+0x18/0x20 [ 138.809917][ T2762] ? __x64_sys_io_uring_setup+0x80/0x80 [ 138.809954][ T2762] ? __kasan_check_read+0x15/0x20 [ 138.809987][ T2762] __x64_sys_io_uring_setup+0x5f/0x80 [ 138.810024][ T2762] x64_sys_call+0x22c0/0x2ee0 [ 138.810049][ T2762] do_syscall_64+0x57/0xf0 [ 138.810081][ T2762] ? clear_bhb_loop+0x50/0xa0 [ 138.810114][ T2762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.810151][ T2762] RIP: 0033:0x7f3fa319f559 [ 138.810174][ T2762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.810200][ T2762] RSP: 002b:00007f3fa411bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 138.810226][ T2762] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3fa319f559 [ 138.810244][ T2762] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 138.810267][ T2762] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 138.810284][ T2762] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 138.810303][ T2762] R13: 0000200000000b10 R14: 00007f3fa411bfd8 R15: 0000000000000000 [ 138.810328][ T2762] [ 139.628085][ T2784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 140.627269][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 140.797261][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 140.813799][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.827246][ T9] usb 1-1: config 0 has no interface number 0 [ 140.845759][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 140.872123][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.882383][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.897313][ T9] usb 1-1: Product: syz [ 140.907270][ T9] usb 1-1: Manufacturer: syz [ 140.917281][ T9] usb 1-1: SerialNumber: syz [ 140.929032][ T9] usb 1-1: config 0 descriptor?? [ 140.945116][ T9] smsc75xx v1.0.0 [ 141.351243][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 141.368992][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 141.388892][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 141.411044][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 142.555637][ T2834] loop5: detected capacity change from 0 to 7 [ 143.406763][ T31] usb 1-1: USB disconnect, device number 16 [ 143.478332][ T2852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.096987][ T2870] loop5: detected capacity change from 0 to 7 [ 144.237085][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.256012][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.424731][ T2896] FAULT_INJECTION: forcing a failure. [ 145.424731][ T2896] name failslab, interval 1, probability 0, space 0, times 0 [ 145.457403][ T2896] CPU: 0 UID: 0 PID: 2896 Comm: syz.2.729 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 145.457442][ T2896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.457458][ T2896] Call Trace: [ 145.457465][ T2896] [ 145.457475][ T2896] __dump_stack+0x21/0x30 [ 145.457512][ T2896] dump_stack_lvl+0x140/0x1c0 [ 145.457544][ T2896] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.457577][ T2896] dump_stack+0x19/0x20 [ 145.457606][ T2896] should_fail_ex+0x3c2/0x510 [ 145.457628][ T2896] should_failslab+0xac/0x100 [ 145.457650][ T2896] __kmalloc_node_noprof+0x69/0x500 [ 145.457679][ T2896] ? __kvmalloc_node_noprof+0x128/0x300 [ 145.457709][ T2896] __kvmalloc_node_noprof+0x128/0x300 [ 145.457735][ T2896] ? kasan_save_alloc_info+0x3a/0x50 [ 145.457761][ T2896] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 145.457788][ T2896] ? __kmalloc_cache_noprof+0x1c0/0x470 [ 145.457827][ T2896] ? alloc_fdtable+0xd2/0x4f0 [ 145.457858][ T2896] alloc_fdtable+0x18d/0x4f0 [ 145.457888][ T2896] ? __cfi_lockref_get+0x10/0x10 [ 145.457916][ T2896] dup_fd+0x6af/0x9c0 [ 145.457945][ T2896] ? copy_fs_struct+0x160/0x2d0 [ 145.457974][ T2896] ksys_unshare+0x46a/0x920 [ 145.458004][ T2896] ? fput+0x1a4/0x230 [ 145.458027][ T2896] ? __cfi_ksys_unshare+0x10/0x10 [ 145.458057][ T2896] ? __kasan_check_write+0x18/0x20 [ 145.458085][ T2896] ? __kasan_check_read+0x15/0x20 [ 145.458113][ T2896] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 145.458144][ T2896] __x64_sys_unshare+0x3c/0x50 [ 145.458174][ T2896] x64_sys_call+0x2998/0x2ee0 [ 145.458196][ T2896] do_syscall_64+0x57/0xf0 [ 145.458218][ T2896] ? clear_bhb_loop+0x50/0xa0 [ 145.458248][ T2896] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.458278][ T2896] RIP: 0033:0x7f703879f559 [ 145.458302][ T2896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.458324][ T2896] RSP: 002b:00007f7039657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.458355][ T2896] RAX: ffffffffffffffda RBX: 00007f7038a25fa0 RCX: 00007f703879f559 [ 145.458374][ T2896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 145.458392][ T2896] RBP: 00007f7039657090 R08: 0000000000000000 R09: 0000000000000000 [ 145.458413][ T2896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.458429][ T2896] R13: 00007f7038a26038 R14: 00007f7038a25fa0 R15: 00007ffe666a9e38 [ 145.458456][ T2896] [ 146.537286][ T415] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.707275][ T415] usb 1-1: Using ep0 maxpacket: 32 [ 146.713644][ T415] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 146.727277][ T415] usb 1-1: config 0 has no interface number 0 [ 146.733427][ T415] usb 1-1: config 0 interface 184 has no altsetting 0 [ 146.751949][ T415] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.767260][ T415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.777257][ T415] usb 1-1: Product: syz [ 146.781479][ T415] usb 1-1: Manufacturer: syz [ 146.796269][ T415] usb 1-1: SerialNumber: syz [ 146.807385][ T415] usb 1-1: config 0 descriptor?? [ 146.827127][ T415] smsc75xx v1.0.0 [ 147.216740][ T415] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 147.229904][ T415] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 147.248678][ T415] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 147.269192][ T415] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 149.293858][ T31] usb 1-1: USB disconnect, device number 17 [ 149.554521][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.574204][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.682730][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 150.867258][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 150.874780][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 150.887259][ T45] usb 1-1: config 0 has no interface number 0 [ 150.900050][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 150.916561][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.930155][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.946164][ T45] usb 1-1: Product: syz [ 150.955006][ T45] usb 1-1: Manufacturer: syz [ 150.965358][ T45] usb 1-1: SerialNumber: syz [ 150.977009][ T45] usb 1-1: config 0 descriptor?? [ 150.989269][ T45] smsc75xx v1.0.0 [ 151.250317][ T36] audit: type=1400 audit(1793246472.160:256): avc: denied { read } for pid=3013 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.390440][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 151.417296][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 151.427146][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 151.457352][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 153.039060][ T3051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 153.048097][ T3051] FAULT_INJECTION: forcing a failure. [ 153.048097][ T3051] name failslab, interval 1, probability 0, space 0, times 0 [ 153.060788][ T3051] CPU: 0 UID: 0 PID: 3051 Comm: syz.1.771 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 153.060819][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 153.060833][ T3051] Call Trace: [ 153.060840][ T3051] [ 153.060847][ T3051] __dump_stack+0x21/0x30 [ 153.060884][ T3051] dump_stack_lvl+0x140/0x1c0 [ 153.060916][ T3051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.060949][ T3051] ? preempt_schedule_common+0x2d/0x60 [ 153.060976][ T3051] ? __nla_validate+0x70/0x70 [ 153.061005][ T3051] ? preempt_schedule+0xc5/0xe0 [ 153.061031][ T3051] dump_stack+0x19/0x20 [ 153.061061][ T3051] should_fail_ex+0x3c2/0x510 [ 153.061084][ T3051] should_failslab+0xac/0x100 [ 153.061105][ T3051] kmem_cache_alloc_noprof+0x42/0x410 [ 153.061137][ T3051] ? __nf_conntrack_alloc+0x110/0x400 [ 153.061168][ T3051] ? nla_memcpy+0x61/0xd0 [ 153.061197][ T3051] __nf_conntrack_alloc+0x110/0x400 [ 153.061227][ T3051] nf_conntrack_alloc+0x33/0x60 [ 153.061257][ T3051] ctnetlink_create_conntrack+0xd3/0xfd0 [ 153.061287][ T3051] ? ctnetlink_create_expect+0xd60/0xd60 [ 153.061315][ T3051] ? ctnetlink_get_ct_unconfirmed+0x1d0/0x1d0 [ 153.061344][ T3051] ? __siphash_unaligned+0x246/0x3c0 [ 153.061374][ T3051] ? nf_conntrack_find_get+0x106/0x1e0 [ 153.061405][ T3051] ? __cfi_nf_conntrack_find_get+0x10/0x10 [ 153.061434][ T3051] ? __nla_validate_parse+0x254c/0x2d60 [ 153.061467][ T3051] ctnetlink_new_conntrack+0x5c6/0x1250 [ 153.061496][ T3051] ? __cfi_ctnetlink_new_conntrack+0x10/0x10 [ 153.061527][ T3051] ? mutex_lock+0x97/0x1d0 [ 153.061555][ T3051] ? __cfi_mutex_lock+0x10/0x10 [ 153.061585][ T3051] nfnetlink_rcv_msg+0x768/0x9d0 [ 153.061613][ T3051] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 153.061645][ T3051] ? avc_has_perm_noaudit+0x289/0x360 [ 153.061670][ T3051] ? cred_has_capability+0x296/0x3a0 [ 153.061702][ T3051] netlink_rcv_skb+0x24a/0x4e0 [ 153.061741][ T3051] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 153.061768][ T3051] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 153.061800][ T3051] ? security_capable+0x44/0x130 [ 153.061834][ T3051] ? ns_capable+0x90/0xf0 [ 153.061857][ T3051] ? netlink_net_capable+0x129/0x160 [ 153.061885][ T3051] nfnetlink_rcv+0x2c2/0x2940 [ 153.061911][ T3051] ? stack_trace_save+0xaa/0x100 [ 153.061944][ T3051] ? stack_depot_save_flags+0x38/0x800 [ 153.061969][ T3051] ? kasan_save_track+0x4f/0x80 [ 153.062002][ T3051] ? kasan_save_track+0x3e/0x80 [ 153.062034][ T3051] ? kasan_save_alloc_info+0x3a/0x50 [ 153.062063][ T3051] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 153.062087][ T3051] ? __alloc_skb+0x13f/0x360 [ 153.062110][ T3051] ? netlink_alloc_large_skb+0xf7/0x1b0 [ 153.062137][ T3051] ? netlink_sendmsg+0x576/0xad0 [ 153.062165][ T3051] ? ____sys_sendmsg+0x99e/0xa00 [ 153.062196][ T3051] ? ___sys_sendmsg+0x2a6/0x370 [ 153.062225][ T3051] ? __x64_sys_sendmsg+0x1be/0x2a0 [ 153.062256][ T3051] ? x64_sys_call+0x2a4c/0x2ee0 [ 153.062279][ T3051] ? do_syscall_64+0x57/0xf0 [ 153.062301][ T3051] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.062337][ T3051] ? selinux_nlmsg_lookup+0x10a/0x960 [ 153.062364][ T3051] ? selinux_netlink_send+0x7df/0x8b0 [ 153.062390][ T3051] ? __asan_memset+0x39/0x50 [ 153.062421][ T3051] ? __netlink_lookup+0x43a/0x4a0 [ 153.062453][ T3051] ? netlink_autobind+0x1c0/0x1c0 [ 153.062485][ T3051] ? is_vmalloc_addr+0x11/0x40 [ 153.062509][ T3051] netlink_unicast+0x8bf/0xa70 [ 153.062538][ T3051] netlink_sendmsg+0x7d1/0xad0 [ 153.062570][ T3051] ? __cfi_netlink_sendmsg+0x10/0x10 [ 153.062601][ T3051] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 153.062640][ T3051] ? security_socket_sendmsg+0x3d/0x100 [ 153.062668][ T3051] ____sys_sendmsg+0x99e/0xa00 [ 153.062700][ T3051] ? __import_iovec+0x5b9/0x7d0 [ 153.062728][ T3051] ? __sys_sendmsg_sock+0x50/0x50 [ 153.062772][ T3051] ? import_iovec+0x80/0xb0 [ 153.062801][ T3051] ___sys_sendmsg+0x2a6/0x370 [ 153.062838][ T3051] ? __sys_sendmsg+0x260/0x260 [ 153.062868][ T3051] ? proc_fail_nth_write+0x184/0x220 [ 153.062896][ T3051] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 153.062927][ T3051] ? __fget_files+0x2bc/0x330 [ 153.062949][ T3051] __x64_sys_sendmsg+0x1be/0x2a0 [ 153.062978][ T3051] ? fput+0x1a4/0x230 [ 153.063000][ T3051] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 153.063028][ T3051] ? ksys_write+0x1f3/0x260 [ 153.063058][ T3051] ? __kasan_check_read+0x15/0x20 [ 153.063087][ T3051] x64_sys_call+0x2a4c/0x2ee0 [ 153.063110][ T3051] do_syscall_64+0x57/0xf0 [ 153.063132][ T3051] ? clear_bhb_loop+0x50/0xa0 [ 153.063161][ T3051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.063190][ T3051] RIP: 0033:0x7fb72c39f559 [ 153.063209][ T3051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.063228][ T3051] RSP: 002b:00007fb72d19f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.063251][ T3051] RAX: ffffffffffffffda RBX: 00007fb72c625fa0 RCX: 00007fb72c39f559 [ 153.063267][ T3051] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 153.063280][ T3051] RBP: 00007fb72d19f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.063295][ T3051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.063309][ T3051] R13: 00007fb72c626038 R14: 00007fb72c625fa0 R15: 00007fff799b02f8 [ 153.063328][ T3051] [ 153.580110][ T45] usb 1-1: USB disconnect, device number 18 [ 153.647269][ T3055] loop5: detected capacity change from 0 to 7 [ 153.739637][ T3065] GUP no longer grows the stack in syz.2.777 (3065): 200000004000-20000000a000 (200000003000) [ 153.783469][ T3065] CPU: 1 UID: 0 PID: 3065 Comm: syz.2.777 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 153.783527][ T3065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 153.783545][ T3065] Call Trace: [ 153.783553][ T3065] [ 153.783564][ T3065] __dump_stack+0x21/0x30 [ 153.783610][ T3065] dump_stack_lvl+0x140/0x1c0 [ 153.783658][ T3065] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.783698][ T3065] ? find_vma+0xd3/0x120 [ 153.783733][ T3065] ? vma_is_secretmem+0x11/0x50 [ 153.783767][ T3065] ? check_vma_flags+0x2a5/0x3a0 [ 153.783798][ T3065] dump_stack+0x19/0x20 [ 153.783837][ T3065] __get_user_pages+0x1e20/0x22d0 [ 153.783864][ T3065] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 153.783904][ T3065] ? populate_vma_page_range+0x220/0x220 [ 153.783934][ T3065] __gup_longterm_locked+0xc53/0x1570 [ 153.783969][ T3065] ? __kasan_check_write+0x18/0x20 [ 153.784005][ T3065] ? rwsem_read_trylock+0x275/0x5a0 [ 153.784041][ T3065] pin_user_pages_remote+0x177/0x230 [ 153.784075][ T3065] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 153.784104][ T3065] ? up_read+0x26/0x1c0 [ 153.784134][ T3065] ? mm_access+0x18c/0x210 [ 153.784169][ T3065] process_vm_rw+0x66d/0xc70 [ 153.784200][ T3065] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 153.784234][ T3065] ? handle_mm_fault+0x16fe/0x1ba0 [ 153.784269][ T3065] ? __se_sys_futex+0x13c/0x320 [ 153.784298][ T3065] ? __kasan_check_write+0x18/0x20 [ 153.784337][ T3065] ? do_user_addr_fault+0xbf5/0x1230 [ 153.784363][ T3065] __x64_sys_process_vm_writev+0xeb/0x100 [ 153.784394][ T3065] x64_sys_call+0x1ab/0x2ee0 [ 153.784420][ T3065] do_syscall_64+0x57/0xf0 [ 153.784450][ T3065] ? clear_bhb_loop+0x50/0xa0 [ 153.784486][ T3065] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.784524][ T3065] RIP: 0033:0x7f703879f559 [ 153.784547][ T3065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.784572][ T3065] RSP: 002b:00007f7039636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 153.784600][ T3065] RAX: ffffffffffffffda RBX: 00007f7038a26090 RCX: 00007f703879f559 [ 153.784622][ T3065] RDX: 0000000000000067 RSI: 00002000000009c0 RDI: 0000000000000270 [ 153.784643][ T3065] RBP: 00007f7038836b20 R08: 0000000000000001 R09: 0000000000000000 [ 153.784660][ T3065] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000000 [ 153.784677][ T3065] R13: 00007f7038a26128 R14: 00007f7038a26090 R15: 00007ffe666a9e38 [ 153.784704][ T3065] [ 154.168885][ T3097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=24 (768 ns) > initial count (256 ns). Using initial count to start timer. [ 154.240369][ T36] audit: type=1400 audit(1793246475.130:257): avc: denied { read write } for pid=3063 comm="syz.2.777" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.271747][ T36] audit: type=1400 audit(1793246475.130:258): avc: denied { open } for pid=3063 comm="syz.2.777" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.387334][ T3064] cgroup: fork rejected by pids controller in /syz2 [ 154.897273][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.963584][ T3113] kvm: emulating exchange as write [ 155.047266][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 155.053764][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.066317][ T9] usb 2-1: config 0 has no interface number 0 [ 155.083956][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 155.099055][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.109384][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.125447][ T9] usb 2-1: Product: syz [ 155.134421][ T9] usb 2-1: Manufacturer: syz [ 155.147293][ T9] usb 2-1: SerialNumber: syz [ 155.154473][ T9] usb 2-1: config 0 descriptor?? [ 155.167322][ T9] smsc75xx v1.0.0 [ 155.281315][ T36] audit: type=1400 audit(1793246476.190:259): avc: denied { create } for pid=3122 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 155.568876][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 155.587324][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 155.607303][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 155.627495][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 156.166933][ T3215] tmpfs: Unknown parameter '' [ 156.304766][ T3239] netlink: 92 bytes leftover after parsing attributes in process `syz.0.840'. [ 156.350447][ T36] audit: type=1400 audit(1793246477.260:260): avc: denied { read } for pid=3248 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.399716][ T3257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 156.712464][ T36] audit: type=1400 audit(1793246477.620:261): avc: denied { ioctl } for pid=3313 comm="syz.2.876" path="cgroup:[4026532465]" dev="nsfs" ino=4026532465 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.871716][ T3348] tun0: tun_chr_ioctl cmd 1074025678 [ 156.883704][ T3348] tun0: group set to 0 [ 156.892721][ T3348] tun0: tun_chr_ioctl cmd 35108 [ 156.927375][ T36] audit: type=1400 audit(1793246477.830:262): avc: denied { write } for pid=3355 comm="syz.0.897" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.927855][ T3356] loop0: detected capacity change from 0 to 1 [ 156.982010][ T3359] FAULT_INJECTION: forcing a failure. [ 156.982010][ T3359] name failslab, interval 1, probability 0, space 0, times 0 [ 156.994811][ T3359] CPU: 0 UID: 0 PID: 3359 Comm: syz.3.898 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 156.994846][ T3359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 156.994862][ T3359] Call Trace: [ 156.994869][ T3359] [ 156.994879][ T3359] __dump_stack+0x21/0x30 [ 156.994918][ T3359] dump_stack_lvl+0x140/0x1c0 [ 156.994950][ T3359] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.994984][ T3359] ? sched_balance_rq+0x473f/0x4dd0 [ 156.995012][ T3359] dump_stack+0x19/0x20 [ 156.995044][ T3359] should_fail_ex+0x3c2/0x510 [ 156.995067][ T3359] should_failslab+0xac/0x100 [ 156.995089][ T3359] kmem_cache_alloc_node_noprof+0x45/0x420 [ 156.995123][ T3359] ? __alloc_skb+0x10c/0x360 [ 156.995149][ T3359] __alloc_skb+0x10c/0x360 [ 156.995173][ T3359] __ip6_append_data+0x2b78/0x3d50 [ 156.995203][ T3359] ? __cfi_raw6_getfrag+0x10/0x10 [ 156.995232][ T3359] ? __asan_memset+0x39/0x50 [ 156.995264][ T3359] ? _raw_spin_lock_bh+0x96/0x130 [ 156.995287][ T3359] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 156.995316][ T3359] ? ip6_setup_cork+0x13a0/0x13a0 [ 156.995336][ T3359] ? ip6_append_data+0x23e/0x370 [ 156.995362][ T3359] ip6_append_data+0x194/0x370 [ 156.995382][ T3359] ? __cfi_raw6_getfrag+0x10/0x10 [ 156.995409][ T3359] rawv6_sendmsg+0x1240/0x1820 [ 156.995432][ T3359] ? __cfi_avc_has_perm+0x10/0x10 [ 156.995448][ T3359] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 156.995469][ T3359] ? selinux_socket_sendmsg+0x281/0x380 [ 156.995489][ T3359] ? check_stack_object+0x81/0x150 [ 156.995513][ T3359] ? inet_send_prepare+0x64/0x4e0 [ 156.995529][ T3359] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 156.995549][ T3359] inet_sendmsg+0x113/0x120 [ 156.995565][ T3359] ____sys_sendmsg+0x822/0xa00 [ 156.995593][ T3359] ? __sys_sendmsg_sock+0x50/0x50 [ 156.995616][ T3359] ? import_iovec+0x80/0xb0 [ 156.995637][ T3359] ___sys_sendmsg+0x2a6/0x370 [ 156.995659][ T3359] ? __sys_sendmsg+0x260/0x260 [ 156.995680][ T3359] ? __futex_wait+0x330/0x3d0 [ 156.995700][ T3359] ? __cfi___futex_wait+0x10/0x10 [ 156.995721][ T3359] ? futex_wake+0x666/0x950 [ 156.995740][ T3359] ? __fget_files+0x2bc/0x330 [ 156.995756][ T3359] __sys_sendmmsg+0x292/0x490 [ 156.995779][ T3359] ? __cfi___sys_sendmmsg+0x10/0x10 [ 156.995804][ T3359] ? is_dma_buf_file+0x11/0x50 [ 156.995824][ T3359] ? __kasan_check_write+0x18/0x20 [ 156.995845][ T3359] ? fpregs_restore_userregs+0x11c/0x260 [ 156.995872][ T3359] __x64_sys_sendmmsg+0xa4/0xc0 [ 156.995895][ T3359] x64_sys_call+0xfec/0x2ee0 [ 156.995911][ T3359] do_syscall_64+0x57/0xf0 [ 156.995927][ T3359] ? clear_bhb_loop+0x50/0xa0 [ 156.995948][ T3359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.995969][ T3359] RIP: 0033:0x7f73dd59f559 [ 156.995983][ T3359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.995996][ T3359] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.996013][ T3359] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 156.996025][ T3359] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000005 [ 156.996035][ T3359] RBP: 00007f73dd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 156.996045][ T3359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.996054][ T3359] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 156.996068][ T3359] [ 156.996562][ T3356] loop0: [ 157.365658][ T3365] FAULT_INJECTION: forcing a failure. [ 157.365658][ T3365] name failslab, interval 1, probability 0, space 0, times 0 [ 157.378428][ T3365] CPU: 0 UID: 0 PID: 3365 Comm: syz.3.901 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 157.378465][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.378488][ T3365] Call Trace: [ 157.378495][ T3365] [ 157.378501][ T3365] __dump_stack+0x21/0x30 [ 157.378530][ T3365] dump_stack_lvl+0x140/0x1c0 [ 157.378554][ T3365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.378578][ T3365] dump_stack+0x19/0x20 [ 157.378600][ T3365] should_fail_ex+0x3c2/0x510 [ 157.378615][ T3365] ? xfrm_hash_alloc+0x46/0x150 [ 157.378633][ T3365] should_failslab+0xac/0x100 [ 157.378648][ T3365] __kmalloc_noprof+0x69/0x510 [ 157.378670][ T3365] ? xfrm_hash_alloc+0x46/0x150 [ 157.378687][ T3365] xfrm_hash_alloc+0x46/0x150 [ 157.378703][ T3365] xfrm_state_init+0x195/0x5f0 [ 157.378719][ T3365] ? proc_create_net_single+0x120/0x170 [ 157.378741][ T3365] ? __cfi_xfrm_state_init+0x10/0x10 [ 157.378759][ T3365] xfrm_net_init+0x1df/0xf80 [ 157.378780][ T3365] ? __cfi_xfrm_net_init+0x10/0x10 [ 157.378800][ T3365] ? proc_create_seq_private+0x16a/0x1c0 [ 157.378851][ T3365] ops_init+0x302/0x5d0 [ 157.378867][ T3365] ? __kasan_check_write+0x18/0x20 [ 157.378888][ T3365] ? rwsem_read_trylock+0x275/0x5a0 [ 157.378909][ T3365] setup_net+0x227/0x9b0 [ 157.378932][ T3365] ? copy_net_ns+0xa20/0xa20 [ 157.378956][ T3365] ? down_read_killable+0x7f/0x100 [ 157.378979][ T3365] ? __cfi_down_read_killable+0x10/0x10 [ 157.379003][ T3365] copy_net_ns+0x4fc/0xa20 [ 157.379027][ T3365] create_new_namespaces+0x390/0x6f0 [ 157.379043][ T3365] unshare_nsproxy_namespaces+0x124/0x180 [ 157.379059][ T3365] ksys_unshare+0x4f9/0x920 [ 157.379083][ T3365] ? __cfi_ksys_unshare+0x10/0x10 [ 157.379106][ T3365] ? __kasan_check_write+0x18/0x20 [ 157.379128][ T3365] __x64_sys_unshare+0x3c/0x50 [ 157.379151][ T3365] x64_sys_call+0x2998/0x2ee0 [ 157.379166][ T3365] do_syscall_64+0x57/0xf0 [ 157.379182][ T3365] ? clear_bhb_loop+0x50/0xa0 [ 157.379204][ T3365] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.379225][ T3365] RIP: 0033:0x7f73dd59f559 [ 157.379239][ T3365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.379253][ T3365] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.379269][ T3365] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 157.379281][ T3365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 157.379291][ T3365] RBP: 00007f73dd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 157.379301][ T3365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.379310][ T3365] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 157.379326][ T3365] [ 157.667049][ T9] usb 2-1: USB disconnect, device number 9 [ 157.701324][ T45] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 157.767452][ T3381] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 157.777266][ T320] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 157.799288][ T36] audit: type=1400 audit(1793246478.710:263): avc: denied { mount } for pid=3384 comm="syz.1.911" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.823973][ T36] audit: type=1400 audit(1793246478.730:264): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.868520][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 157.879638][ T45] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.896133][ T45] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 157.913767][ T45] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 157.922231][ T3394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.930287][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.939362][ T320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.942332][ T3394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.952400][ T320] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.972745][ T320] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 157.972962][ T45] usb 1-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00 [ 157.983562][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.997800][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.013997][ T45] usb 1-1: config 0 descriptor?? [ 158.027426][ T3361] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 158.390518][ T2063] bridge_slave_1: left allmulticast mode [ 158.393938][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 158.396286][ T2063] bridge_slave_1: left promiscuous mode [ 158.409335][ T2063] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.414946][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 158.427478][ T2063] bridge_slave_0: left allmulticast mode [ 158.428219][ T45] usb 1-1: USB disconnect, device number 19 [ 158.437334][ T2063] bridge_slave_0: left promiscuous mode [ 158.446993][ T2063] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.559368][ T2063] veth1_macvtap: left promiscuous mode [ 158.564965][ T2063] veth0_vlan: left promiscuous mode [ 158.616494][ T36] audit: type=1400 audit(1793246479.520:265): avc: denied { mounton } for pid=3423 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 158.666729][ T36] audit: type=1400 audit(1793246479.570:266): avc: denied { create } for pid=3423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.737453][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.744586][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.752439][ T3423] bridge_slave_0: entered allmulticast mode [ 158.758931][ T3423] bridge_slave_0: entered promiscuous mode [ 158.765605][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.773363][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.780502][ T3423] bridge_slave_1: entered allmulticast mode [ 158.786982][ T3423] bridge_slave_1: entered promiscuous mode [ 158.850439][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.857563][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.864888][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.871981][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.899428][ T2063] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.907030][ T2063] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.918938][ T2060] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.926007][ T2060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.938877][ T2060] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.945966][ T2060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.975496][ T3423] veth0_vlan: entered promiscuous mode [ 158.989077][ T3423] veth1_macvtap: entered promiscuous mode [ 159.011608][ T36] audit: type=1400 audit(1793246479.920:267): avc: denied { mounton } for pid=3423 comm="syz-executor" path="/root/syzkaller.4pCmqR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 159.057275][ T36] audit: type=1400 audit(1793246479.960:268): avc: denied { create } for pid=3427 comm="syz.4.929" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.086657][ T3430] syzkaller1: entered promiscuous mode [ 159.092830][ T3430] syzkaller1: entered allmulticast mode [ 159.100752][ T36] audit: type=1400 audit(1793246479.960:269): avc: denied { read write } for pid=3427 comm="syz.4.929" name="md0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.337706][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 159.574442][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 159.585528][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 159.596724][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.607772][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.618754][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.627442][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.631005][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.648408][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 159.659811][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.671364][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 159.682590][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 159.694371][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 159.706047][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 159.717371][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 159.734939][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 159.746418][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 159.757595][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 159.769808][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 159.781178][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 159.789055][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.793671][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 159.803273][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.818545][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 159.832646][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.832992][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 159.844392][ T45] usb 5-1: config 0 descriptor?? [ 159.856937][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 159.868576][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 159.881190][ T320] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 159.897282][ T320] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, fa:85:f0:37:00:00 [ 159.923634][ T320] usb 3-1: USB disconnect, device number 21 [ 159.930470][ T320] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 160.090215][ T3494] process 'syz.1.953' launched './file1' with NULL argv: empty string added [ 160.120717][ T3494] FAULT_INJECTION: forcing a failure. [ 160.120717][ T3494] name failslab, interval 1, probability 0, space 0, times 0 [ 160.135103][ T3494] CPU: 0 UID: 0 PID: 3494 Comm: syz.1.953 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 160.135142][ T3494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.135157][ T3494] Call Trace: [ 160.135164][ T3494] [ 160.135173][ T3494] __dump_stack+0x21/0x30 [ 160.135212][ T3494] dump_stack_lvl+0x140/0x1c0 [ 160.135245][ T3494] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.135294][ T3494] ? number+0xc9d/0xf00 [ 160.135318][ T3494] dump_stack+0x19/0x20 [ 160.135378][ T3494] should_fail_ex+0x3c2/0x510 [ 160.135402][ T3494] should_failslab+0xac/0x100 [ 160.135425][ T3494] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 160.135461][ T3494] ? sidtab_sid2str_get+0x135/0x360 [ 160.135492][ T3494] kmemdup_noprof+0x31/0x80 [ 160.135520][ T3494] sidtab_sid2str_get+0x135/0x360 [ 160.135550][ T3494] security_sid_to_context_core+0x30d/0x5d0 [ 160.135579][ T3494] security_sid_to_context+0x2e/0x50 [ 160.135604][ T3494] avc_audit_post_callback+0x117/0x790 [ 160.135629][ T3494] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 160.135652][ T3494] ? __cfi_audit_log_format+0x10/0x10 [ 160.135681][ T3494] ? audit_log_untrustedstring+0xea/0x100 [ 160.135710][ T3494] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 160.135732][ T3494] common_lsm_audit+0x14b9/0x18b0 [ 160.135754][ T3494] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 160.135777][ T3494] ? __cfi_common_lsm_audit+0x10/0x10 [ 160.135798][ T3494] ? __call_rcu_common+0x53c/0x710 [ 160.135831][ T3494] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 160.135857][ T3494] slow_avc_audit+0x19f/0x220 [ 160.135879][ T3494] ? __cfi_slow_avc_audit+0x10/0x10 [ 160.135902][ T3494] ? avc_denied+0x113/0x180 [ 160.135924][ T3494] avc_has_extended_perms+0x8c6/0xe60 [ 160.135948][ T3494] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 160.135971][ T3494] ? __futex_queue+0x19f/0x350 [ 160.135994][ T3494] ? schedule+0xc1/0x170 [ 160.136018][ T3494] ? futex_unqueue+0x136/0x160 [ 160.136044][ T3494] ioctl_has_perm+0x39a/0x500 [ 160.136075][ T3494] ? __kasan_check_read+0x15/0x20 [ 160.136105][ T3494] ? has_cap_mac_admin+0xd0/0xd0 [ 160.136142][ T3494] ? futex_wait+0x2b8/0x7c0 [ 160.136168][ T3494] ? __cfi_futex_wait+0x10/0x10 [ 160.136197][ T3494] selinux_file_ioctl+0x732/0x1480 [ 160.136228][ T3494] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 160.136259][ T3494] ? do_futex+0x32a/0x510 [ 160.136289][ T3494] ? __cfi_do_futex+0x10/0x10 [ 160.136314][ T3494] ? __fget_files+0x2bc/0x330 [ 160.136336][ T3494] security_file_ioctl+0x87/0x110 [ 160.136366][ T3494] __se_sys_ioctl+0x4e/0x1b0 [ 160.136388][ T3494] __x64_sys_ioctl+0x7f/0xa0 [ 160.136409][ T3494] x64_sys_call+0x1878/0x2ee0 [ 160.136432][ T3494] do_syscall_64+0x57/0xf0 [ 160.136454][ T3494] ? clear_bhb_loop+0x50/0xa0 [ 160.136484][ T3494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.136513][ T3494] RIP: 0033:0x7fb72c39f559 [ 160.136531][ T3494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.136549][ T3494] RSP: 002b:00007fb72d19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.136573][ T3494] RAX: ffffffffffffffda RBX: 00007fb72c625fa0 RCX: 00007fb72c39f559 [ 160.136590][ T3494] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 160.136605][ T3494] RBP: 00007fb72c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 160.136620][ T3494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.136633][ T3494] R13: 00007fb72c626038 R14: 00007fb72c625fa0 R15: 00007fff799b02f8 [ 160.136652][ T3494] [ 160.546591][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.555184][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.693671][ T3532] FAULT_INJECTION: forcing a failure. [ 160.693671][ T3532] name failslab, interval 1, probability 0, space 0, times 0 [ 160.706363][ T3532] CPU: 0 UID: 0 PID: 3532 Comm: syz.2.963 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 160.706400][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.706421][ T3532] Call Trace: [ 160.706428][ T3532] [ 160.706435][ T3532] __dump_stack+0x21/0x30 [ 160.706464][ T3532] dump_stack_lvl+0x140/0x1c0 [ 160.706488][ T3532] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.706513][ T3532] ? fib6_node_lookup+0x4ee/0x520 [ 160.706534][ T3532] dump_stack+0x19/0x20 [ 160.706557][ T3532] should_fail_ex+0x3c2/0x510 [ 160.706572][ T3532] ? __cfi_ip6_dst_gc+0x10/0x10 [ 160.706589][ T3532] should_failslab+0xac/0x100 [ 160.706606][ T3532] kmem_cache_alloc_noprof+0x42/0x410 [ 160.706627][ T3532] ? dst_alloc+0x13c/0x240 [ 160.706650][ T3532] ? fib6_select_path+0x10b/0x8d0 [ 160.706670][ T3532] ? __cfi_ip6_dst_gc+0x10/0x10 [ 160.706686][ T3532] dst_alloc+0x13c/0x240 [ 160.706709][ T3532] ip6_pol_route+0xb18/0x1370 [ 160.706729][ T3532] ? ip6_pol_route+0x46a/0x1370 [ 160.706771][ T3532] ? __cfi_ip6_pol_route+0x10/0x10 [ 160.706796][ T3532] ip6_pol_route_output+0x55/0x80 [ 160.706818][ T3532] fib6_rule_lookup+0x219/0x6d0 [ 160.706836][ T3532] ? __kernel_text_address+0x11/0x40 [ 160.706861][ T3532] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 160.706882][ T3532] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 160.706901][ T3532] ip6_route_output_flags+0x2aa/0x470 [ 160.706923][ T3532] ip6_dst_lookup_tail+0x1b6/0x14a0 [ 160.706945][ T3532] ? ip6_dst_lookup+0x80/0x80 [ 160.706963][ T3532] ? ip6_datagram_send_ctl+0x1814/0x19d0 [ 160.706989][ T3532] ? txopt_get+0x190/0x220 [ 160.707009][ T3532] ? fl6_sock_lookup+0xe0/0xe0 [ 160.707029][ T3532] ip6_dst_lookup_flow+0x4d/0xd0 [ 160.707048][ T3532] rawv6_sendmsg+0xd78/0x1820 [ 160.707070][ T3532] ? __cfi_avc_has_perm+0x10/0x10 [ 160.707085][ T3532] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 160.707106][ T3532] ? selinux_socket_sendmsg+0x281/0x380 [ 160.707125][ T3532] ? check_stack_object+0x81/0x150 [ 160.707148][ T3532] ? inet_send_prepare+0x64/0x4e0 [ 160.707165][ T3532] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 160.707185][ T3532] inet_sendmsg+0x113/0x120 [ 160.707227][ T3532] ____sys_sendmsg+0x822/0xa00 [ 160.707260][ T3532] ? __sys_sendmsg_sock+0x50/0x50 [ 160.707294][ T3532] ? import_iovec+0x80/0xb0 [ 160.707315][ T3532] ___sys_sendmsg+0x2a6/0x370 [ 160.707337][ T3532] ? __sys_sendmsg+0x260/0x260 [ 160.707359][ T3532] ? __futex_wait+0x330/0x3d0 [ 160.707379][ T3532] ? __cfi___futex_wait+0x10/0x10 [ 160.707400][ T3532] ? futex_wake+0x666/0x950 [ 160.707419][ T3532] ? __fget_files+0x2bc/0x330 [ 160.707435][ T3532] __sys_sendmmsg+0x292/0x490 [ 160.707459][ T3532] ? __cfi___sys_sendmmsg+0x10/0x10 [ 160.707484][ T3532] ? is_dma_buf_file+0x11/0x50 [ 160.707504][ T3532] ? __kasan_check_write+0x18/0x20 [ 160.707526][ T3532] ? fpregs_restore_userregs+0x11c/0x260 [ 160.707547][ T3532] __x64_sys_sendmmsg+0xa4/0xc0 [ 160.707570][ T3532] x64_sys_call+0xfec/0x2ee0 [ 160.707586][ T3532] do_syscall_64+0x57/0xf0 [ 160.707602][ T3532] ? clear_bhb_loop+0x50/0xa0 [ 160.707624][ T3532] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.707645][ T3532] RIP: 0033:0x7f703879f559 [ 160.707659][ T3532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.707672][ T3532] RSP: 002b:00007f7039657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.707690][ T3532] RAX: ffffffffffffffda RBX: 00007f7038a25fa0 RCX: 00007f703879f559 [ 160.707702][ T3532] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000005 [ 160.707712][ T3532] RBP: 00007f7038836b20 R08: 0000000000000000 R09: 0000000000000000 [ 160.707722][ T3532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.707732][ T3532] R13: 00007f7038a26038 R14: 00007f7038a25fa0 R15: 00007ffe666a9e38 [ 160.707751][ T3532] [ 160.877441][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.248419][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.262264][ T3543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.267375][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.294029][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 161.304093][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.184723][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 162.184744][ T36] audit: type=1400 audit(1793246483.090:296): avc: denied { search } for pid=3560 comm="syz.2.972" name="/" dev="configfs" ino=2594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.213093][ T36] audit: type=1400 audit(1793246483.110:297): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.268170][ T36] audit: type=1400 audit(1793246483.180:298): avc: denied { bind } for pid=3567 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.393447][ T318] usb 5-1: USB disconnect, device number 2 [ 162.838663][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 162.858331][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 162.879973][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 162.891418][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 162.902735][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 162.914056][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 162.931317][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 162.948496][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 162.966766][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 162.985925][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 163.006162][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 163.028516][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 163.039583][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 163.050643][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 163.061768][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 163.072896][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 163.084027][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 163.095145][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 163.106368][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 163.117500][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 163.128616][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 163.157486][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 163.180333][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 163.202650][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 163.225104][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 163.243352][ T45] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.270207][ T45] ax88179_178a 2-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 7e:f8:41:70:25:40 [ 163.311547][ T45] usb 2-1: USB disconnect, device number 10 [ 163.318747][ T45] ax88179_178a 2-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 163.337964][ T36] audit: type=1400 audit(1793246484.240:299): avc: denied { mounton } for pid=3590 comm="syz.2.982" path="/252/file0" dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.492083][ T36] audit: type=1400 audit(1793246484.400:300): avc: denied { bind } for pid=3613 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.561287][ T36] audit: type=1400 audit(1793246484.400:301): avc: denied { write } for pid=3613 comm="syz.2.987" path="socket:[81945]" dev="sockfs" ino=81945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.757267][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.764074][ T36] audit: type=1400 audit(1793246484.670:302): avc: denied { search } for pid=3645 comm="syz.4.996" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.817263][ T63] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 163.937263][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 163.943660][ T45] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 163.952100][ T45] usb 2-1: config 0 has no interface number 0 [ 163.963059][ T45] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 163.972373][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.981361][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.986606][ T45] usb 2-1: config 0 descriptor?? [ 163.992394][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.007526][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 164.018865][ T63] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.028135][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.037528][ T63] usb 3-1: config 0 descriptor?? [ 164.205525][ T320] usb 2-1: USB disconnect, device number 11 [ 164.446662][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 164.458064][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 164.465476][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 164.473266][ T63] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 164.481130][ T63] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 164.491157][ T3654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.500979][ T63] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 164.516474][ T3654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.537925][ T313] udevd[313]: symlink '../hidraw0' '/dev/char/507:0.tmp-c507:0' failed: Read-only file system [ 164.608927][ T3657] tipc: Started in network mode [ 164.613913][ T3657] tipc: Node identity 92d998c0f302, cluster identity 4711 [ 164.621315][ T3657] tipc: Enabled bearer , priority 1 [ 164.629214][ T3656] tipc: Resetting bearer [ 164.636004][ T3656] tipc: Disabling bearer [ 164.708474][ T63] usb 3-1: USB disconnect, device number 22 [ 164.732514][ T36] audit: type=1400 audit(1793246485.640:303): avc: denied { write } for pid=3664 comm="syz.1.1003" name="usbmon1" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.756195][ T36] audit: type=1400 audit(1793246485.640:304): avc: denied { open } for pid=3664 comm="syz.1.1003" path="/dev/usbmon1" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.793886][ T3670] FAULT_INJECTION: forcing a failure. [ 164.793886][ T3670] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 164.807235][ T3670] CPU: 1 UID: 0 PID: 3670 Comm: syz.1.1005 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 164.807272][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 164.807294][ T3670] Call Trace: [ 164.807301][ T3670] [ 164.807307][ T3670] __dump_stack+0x21/0x30 [ 164.807336][ T3670] dump_stack_lvl+0x140/0x1c0 [ 164.807372][ T3670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.807396][ T3670] ? __mod_memcg_lruvec_state+0x186/0x460 [ 164.807414][ T3670] dump_stack+0x19/0x20 [ 164.807435][ T3670] should_fail_ex+0x3c2/0x510 [ 164.807450][ T3670] should_fail_alloc_page+0xec/0x110 [ 164.807465][ T3670] __alloc_pages_noprof+0x1c0/0x7e0 [ 164.807484][ T3670] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.807502][ T3670] ? filemap_get_entry+0x41b/0x490 [ 164.807518][ T3670] __folio_alloc_noprof+0x14/0x80 [ 164.807536][ T3670] __filemap_get_folio+0x798/0xe80 [ 164.807552][ T3670] ? __kasan_check_write+0x18/0x20 [ 164.807573][ T3670] ? __cfi___filemap_get_folio+0x10/0x10 [ 164.807587][ T3670] ? __cfi_folio_end_read+0x10/0x10 [ 164.807610][ T3670] ? aio_setup_ring+0x2f4/0xc60 [ 164.807626][ T3670] aio_setup_ring+0x38e/0xc60 [ 164.807642][ T3670] ? free_ioctx_reqs+0x170/0x170 [ 164.807658][ T3670] ioctx_alloc+0x337/0x840 [ 164.807673][ T3670] __se_sys_io_setup+0x6f/0x230 [ 164.807687][ T3670] __x64_sys_io_setup+0x5f/0x80 [ 164.807700][ T3670] x64_sys_call+0x26a4/0x2ee0 [ 164.807715][ T3670] do_syscall_64+0x57/0xf0 [ 164.807737][ T3670] ? clear_bhb_loop+0x50/0xa0 [ 164.807759][ T3670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.807779][ T3670] RIP: 0033:0x7fb72c39f559 [ 164.807793][ T3670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.807806][ T3670] RSP: 002b:00007fb72d19f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 164.807822][ T3670] RAX: ffffffffffffffda RBX: 00007fb72c625fa0 RCX: 00007fb72c39f559 [ 164.807834][ T3670] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000000020fe [ 164.807844][ T3670] RBP: 00007fb72c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 164.807854][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.807863][ T3670] R13: 00007fb72c626038 R14: 00007fb72c625fa0 R15: 00007fff799b02f8 [ 164.807876][ T3670] [ 165.073502][ T3676] FAULT_INJECTION: forcing a failure. [ 165.073502][ T3676] name failslab, interval 1, probability 0, space 0, times 0 [ 165.086292][ T3676] CPU: 0 UID: 0 PID: 3676 Comm: syz.3.1008 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 165.086328][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.086343][ T3676] Call Trace: [ 165.086352][ T3676] [ 165.086360][ T3676] __dump_stack+0x21/0x30 [ 165.086401][ T3676] dump_stack_lvl+0x140/0x1c0 [ 165.086436][ T3676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.086473][ T3676] dump_stack+0x19/0x20 [ 165.086505][ T3676] should_fail_ex+0x3c2/0x510 [ 165.086528][ T3676] should_failslab+0xac/0x100 [ 165.086551][ T3676] __kmalloc_cache_noprof+0x41/0x470 [ 165.086584][ T3676] ? kvm_set_irq_routing+0x1ab/0xeb0 [ 165.086616][ T3676] ? kvm_set_routing_entry+0x377/0x6e0 [ 165.086644][ T3676] kvm_set_irq_routing+0x1ab/0xeb0 [ 165.086678][ T3676] kvm_setup_default_irq_routing+0x27/0x30 [ 165.086704][ T3676] kvm_arch_vm_ioctl+0x1467/0x16d0 [ 165.086732][ T3676] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 165.086761][ T3676] ? _raw_spin_unlock+0x45/0x60 [ 165.086785][ T3676] ? finish_task_switch+0x13d/0x8a0 [ 165.086820][ T3676] ? __sched_text_start+0x10/0x10 [ 165.086847][ T3676] ? enqueue_task+0x1049/0x1100 [ 165.086873][ T3676] ? check_preempt_wakeup_fair+0x780/0xb10 [ 165.086897][ T3676] ? preempt_schedule_common+0x2d/0x60 [ 165.086925][ T3676] ? preempt_schedule+0xc5/0xe0 [ 165.086952][ T3676] ? __asan_set_shadow_00+0x12/0x20 [ 165.086978][ T3676] ? do_vfs_ioctl+0x1824/0x2010 [ 165.087002][ T3676] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 165.087024][ T3676] ? preempt_schedule_thunk+0x1a/0x40 [ 165.087051][ T3676] ? try_to_wake_up+0x119e/0x1fd0 [ 165.087082][ T3676] kvm_vm_ioctl+0x82b/0xc40 [ 165.087103][ T3676] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 165.087124][ T3676] ? ioctl_has_perm+0x1bc/0x500 [ 165.087156][ T3676] ? __asan_memcpy+0x5a/0x80 [ 165.087186][ T3676] ? ioctl_has_perm+0x408/0x500 [ 165.087232][ T3676] ? has_cap_mac_admin+0xd0/0xd0 [ 165.087265][ T3676] ? proc_fail_nth_write+0x184/0x220 [ 165.087295][ T3676] ? selinux_file_ioctl+0x732/0x1480 [ 165.087327][ T3676] ? vfs_write+0xbcf/0xfd0 [ 165.087358][ T3676] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 165.087390][ T3676] ? do_futex+0x37d/0x510 [ 165.087414][ T3676] ? __cfi_do_futex+0x10/0x10 [ 165.087437][ T3676] ? mutex_unlock+0x90/0x240 [ 165.087467][ T3676] ? __fget_files+0x2bc/0x330 [ 165.087489][ T3676] ? bpf_lsm_file_ioctl+0xd/0x20 [ 165.087511][ T3676] ? security_file_ioctl+0x3e/0x110 [ 165.087541][ T3676] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 165.087562][ T3676] __se_sys_ioctl+0x123/0x1b0 [ 165.087584][ T3676] __x64_sys_ioctl+0x7f/0xa0 [ 165.087605][ T3676] x64_sys_call+0x1878/0x2ee0 [ 165.087628][ T3676] do_syscall_64+0x57/0xf0 [ 165.087652][ T3676] ? clear_bhb_loop+0x50/0xa0 [ 165.087682][ T3676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.087712][ T3676] RIP: 0033:0x7f73dd59f559 [ 165.087732][ T3676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.087751][ T3676] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.087776][ T3676] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 165.087793][ T3676] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 165.087808][ T3676] RBP: 00007f73dd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.087823][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.087837][ T3676] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 165.087856][ T3676] [ 165.557257][ T63] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.583813][ T36] audit: type=1400 audit(1793246486.490:305): avc: denied { mount } for pid=3688 comm="syz.3.1012" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 165.652316][ T3691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.660898][ T3691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.707260][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 165.713601][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.724607][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.734407][ T63] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 165.743674][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.752650][ T63] usb 2-1: config 0 descriptor?? [ 165.937273][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 165.958282][ T3701] fuse: Unknown parameter 'hash' [ 165.965457][ T3701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.973033][ T3701] FAULT_INJECTION: forcing a failure. [ 165.973033][ T3701] name failslab, interval 1, probability 0, space 0, times 0 [ 165.985717][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: syz.4.1018 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 165.985759][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.985776][ T3701] Call Trace: [ 165.985784][ T3701] [ 165.985793][ T3701] __dump_stack+0x21/0x30 [ 165.985836][ T3701] dump_stack_lvl+0x140/0x1c0 [ 165.985895][ T3701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.985935][ T3701] dump_stack+0x19/0x20 [ 165.985967][ T3701] should_fail_ex+0x3c2/0x510 [ 165.985985][ T3701] ? ovl_alloc_entry+0x42/0x110 [ 165.986029][ T3701] should_failslab+0xac/0x100 [ 165.986053][ T3701] __kmalloc_noprof+0x69/0x510 [ 165.986088][ T3701] ? __cfi__printk+0x10/0x10 [ 165.986123][ T3701] ? ovl_alloc_entry+0x42/0x110 [ 165.986144][ T3701] ovl_alloc_entry+0x42/0x110 [ 165.986205][ T3701] ovl_fill_super+0x2c22/0x51a0 [ 165.986227][ T3701] ? shrinker_alloc+0x68/0xa60 [ 165.986271][ T3701] ? __cfi_ovl_fill_super+0x10/0x10 [ 165.986288][ T3701] ? xas_store+0xb6e/0x17f0 [ 165.986310][ T3701] ? xas_nomem+0x71/0x2c0 [ 165.986352][ T3701] ? ida_alloc_range+0xa44/0xa80 [ 165.986390][ T3701] ? __kmalloc_cache_noprof+0x23c/0x470 [ 165.986431][ T3701] ? __cfi_mutex_unlock+0x10/0x10 [ 165.986455][ T3701] ? __kasan_check_write+0x18/0x20 [ 165.986498][ T3701] ? _raw_spin_lock+0x92/0x120 [ 165.986525][ T3701] ? __kasan_check_write+0x18/0x20 [ 165.986555][ T3701] ? shrinker_register+0x162/0x220 [ 165.986591][ T3701] ? sget_fc+0x97e/0xa70 [ 165.986618][ T3701] ? __cfi_set_anon_super_fc+0x10/0x10 [ 165.986666][ T3701] get_tree_nodev+0xcb/0x170 [ 165.986696][ T3701] ? __cfi_ovl_fill_super+0x10/0x10 [ 165.986717][ T3701] ovl_get_tree+0x20/0x30 [ 165.986752][ T3701] vfs_get_tree+0x9e/0x290 [ 165.986777][ T3701] do_new_mount+0x251/0xb40 [ 165.986829][ T3701] ? security_capable+0x44/0x130 [ 165.986866][ T3701] path_mount+0x66a/0xff0 [ 165.986901][ T3701] ? putname+0x113/0x150 [ 165.986929][ T3701] __se_sys_mount+0x2bf/0x480 [ 165.986979][ T3701] ? __x64_sys_mount+0xf0/0xf0 [ 165.987012][ T3701] ? __kasan_check_write+0x18/0x20 [ 165.987048][ T3701] ? fpregs_restore_userregs+0x11c/0x260 [ 165.987074][ T3701] __x64_sys_mount+0xc3/0xf0 [ 165.987123][ T3701] x64_sys_call+0x2021/0x2ee0 [ 165.987150][ T3701] do_syscall_64+0x57/0xf0 [ 165.987174][ T3701] ? clear_bhb_loop+0x50/0xa0 [ 165.987234][ T3701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.987266][ T3701] RIP: 0033:0x7fc06999f559 [ 165.987291][ T3701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.987312][ T3701] RSP: 002b:00007fc0683f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.987338][ T3701] RAX: ffffffffffffffda RBX: 00007fc069c25fa0 RCX: 00007fc06999f559 [ 165.987362][ T3701] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 165.987375][ T3701] RBP: 00007fc069a36b20 R08: 0000200000000500 R09: 0000000000000000 [ 165.987388][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.987399][ T3701] R13: 00007fc069c26038 R14: 00007fc069c25fa0 R15: 00007ffe63e6ad08 [ 165.987438][ T3701] [ 166.301163][ T63] hid-generic 0003:0403:6030.0004: item fetching failed at offset 0/2 [ 166.317492][ T63] hid-generic 0003:0403:6030.0004: probe with driver hid-generic failed with error -22 [ 166.347635][ T3707] FAULT_INJECTION: forcing a failure. [ 166.347635][ T3707] name failslab, interval 1, probability 0, space 0, times 0 [ 166.360335][ T3707] CPU: 0 UID: 0 PID: 3707 Comm: syz.4.1021 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 166.360373][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.360385][ T3707] Call Trace: [ 166.360392][ T3707] [ 166.360398][ T3707] __dump_stack+0x21/0x30 [ 166.360430][ T3707] dump_stack_lvl+0x140/0x1c0 [ 166.360458][ T3707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.360487][ T3707] dump_stack+0x19/0x20 [ 166.360513][ T3707] should_fail_ex+0x3c2/0x510 [ 166.360531][ T3707] should_failslab+0xac/0x100 [ 166.360549][ T3707] __kmalloc_cache_noprof+0x41/0x470 [ 166.360584][ T3707] ? static_key_slow_inc+0x25/0x30 [ 166.360604][ T3707] ? kvm_arch_vcpu_create+0x2d4/0xb90 [ 166.360634][ T3707] kvm_arch_vcpu_create+0x2d4/0xb90 [ 166.360663][ T3707] kvm_vm_ioctl_create_vcpu+0x3a7/0xab0 [ 166.360682][ T3707] kvm_vm_ioctl+0x7bd/0xc40 [ 166.360698][ T3707] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 166.360715][ T3707] ? ioctl_has_perm+0x1bc/0x500 [ 166.360742][ T3707] ? __asan_memcpy+0x5a/0x80 [ 166.360767][ T3707] ? ioctl_has_perm+0x408/0x500 [ 166.360794][ T3707] ? has_cap_mac_admin+0xd0/0xd0 [ 166.360820][ T3707] ? futex_wait+0x2b8/0x7c0 [ 166.360844][ T3707] ? __cfi_futex_wait+0x10/0x10 [ 166.360868][ T3707] ? selinux_file_ioctl+0x732/0x1480 [ 166.360899][ T3707] ? vfs_write+0xbcf/0xfd0 [ 166.360924][ T3707] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 166.360949][ T3707] ? do_futex+0x32a/0x510 [ 166.360967][ T3707] ? __cfi_do_futex+0x10/0x10 [ 166.360984][ T3707] ? mutex_unlock+0x90/0x240 [ 166.361015][ T3707] ? __fget_files+0x2bc/0x330 [ 166.361032][ T3707] ? bpf_lsm_file_ioctl+0xd/0x20 [ 166.361050][ T3707] ? security_file_ioctl+0x3e/0x110 [ 166.361077][ T3707] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 166.361092][ T3707] __se_sys_ioctl+0x123/0x1b0 [ 166.361110][ T3707] __x64_sys_ioctl+0x7f/0xa0 [ 166.361126][ T3707] x64_sys_call+0x1878/0x2ee0 [ 166.361144][ T3707] do_syscall_64+0x57/0xf0 [ 166.361162][ T3707] ? clear_bhb_loop+0x50/0xa0 [ 166.361187][ T3707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.361210][ T3707] RIP: 0033:0x7fc06999f559 [ 166.361226][ T3707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.361241][ T3707] RSP: 002b:00007fc0683f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.361260][ T3707] RAX: ffffffffffffffda RBX: 00007fc069c25fa0 RCX: 00007fc06999f559 [ 166.361274][ T3707] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000004 [ 166.361285][ T3707] RBP: 00007fc069a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 166.361296][ T3707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.361307][ T3707] R13: 00007fc069c26038 R14: 00007fc069c25fa0 R15: 00007ffe63e6ad08 [ 166.361323][ T3707] [ 166.382378][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.517360][ T320] usb 2-1: USB disconnect, device number 12 [ 166.658403][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.667335][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.681843][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 166.690979][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.699114][ T31] usb 3-1: Product: syz [ 166.703325][ T31] usb 3-1: Manufacturer: syz [ 166.707977][ T31] usb 3-1: SerialNumber: syz [ 166.718180][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 166.926951][ T31] r8152-cfgselector 3-1: Needed 2 retries to read version [ 166.934178][ T31] r8152-cfgselector 3-1: Unknown version 0x5430 [ 166.940687][ T31] r8152-cfgselector 3-1: bad CDC descriptors [ 167.139993][ T320] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 167.161747][ T3726] device-mapper: table: 252:5: raid: unknown target type [ 167.169066][ T3726] device-mapper: ioctl: error adding target to table [ 167.916323][ T3743] loop0: detected capacity change from 0 to 4096 [ 167.982797][ T3743] loop0: [ 168.006271][ T349] udevd[349]: symlink '../../loop0' '/dev/disk/by-diskseq/93.tmp-b7:0' failed: Read-only file system [ 168.071314][ T349] udevd[349]: symlink '../../loop0' '/dev/disk/by-diskseq/93.tmp-b7:0' failed: Read-only file system [ 168.134810][ T3755] fuse: Unknown parameter 'hash' [ 168.141083][ T3755] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.267256][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.364487][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 168.364505][ T36] audit: type=1400 audit(1793246489.270:310): avc: denied { read write } for pid=3781 comm="syz.4.1051" name="file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.393733][ T36] audit: type=1400 audit(1793246489.270:311): avc: denied { open } for pid=3781 comm="syz.4.1051" path="/37/file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.428423][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.439426][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.449289][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 168.456953][ T31] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 168.466128][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.475166][ T31] usb 2-1: config 0 descriptor?? [ 168.617286][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 168.623658][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.634667][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.643025][ T45] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 168.652196][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.660246][ T45] usb 3-1: Product: syz [ 168.664440][ T45] usb 3-1: Manufacturer: syz [ 168.669092][ T45] usb 3-1: SerialNumber: syz [ 168.674414][ T45] usb 3-1: config 0 descriptor?? [ 168.677790][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.838464][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.849468][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.859259][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.872109][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.881187][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.889893][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.891055][ T63] usb 5-1: config 0 descriptor?? [ 168.902077][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.909221][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.916431][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.923584][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.930716][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.937742][ T31] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 168.945620][ T31] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 168.974801][ T338] udevd[338]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 168.984318][ T338] udevd[338]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 169.097289][ T31] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 169.325141][ T63] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 169.337701][ T349] udevd[349]: setting mode of /dev/usb/hiddev0 to 020600 failed: Read-only file system [ 169.348191][ T63] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 169.364790][ T349] udevd[349]: setting owner of /dev/usb/hiddev0 to uid=0, gid=0 failed: Read-only file system [ 169.535846][ T63] usb 5-1: USB disconnect, device number 3 [ 169.899195][ T45] usb 2-1: USB disconnect, device number 13 [ 170.087137][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.095767][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.617784][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.626908][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.667299][ T415] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.818452][ T415] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.829704][ T415] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.839275][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.843043][ T415] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.853562][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.860672][ T415] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 170.874587][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.875314][ T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.885178][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.894586][ T415] usb 5-1: config 0 descriptor?? [ 170.904743][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.058281][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.070347][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 171.079504][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 171.087830][ T63] usb 2-1: Product: syz [ 171.092050][ T63] usb 2-1: Manufacturer: syz [ 171.202186][ T320] usb 3-1: USB disconnect, device number 24 [ 171.240966][ T36] audit: type=1400 audit(1793246492.150:312): avc: denied { unmount } for pid=3844 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.316596][ T415] logitech 0003:046D:C295.0007: item fetching failed at offset 0/24 [ 171.325122][ T415] logitech 0003:046D:C295.0007: parse failed [ 171.331494][ T415] logitech 0003:046D:C295.0007: probe with driver logitech failed with error -22 [ 171.446648][ T3856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.455330][ T3856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.501985][ T63] logitech-djreceiver 0003:046D:C52B.0008: hiddev96,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 171.514732][ T63] logitech-djreceiver 0003:046D:C52B.0008: logi_dj_recv_send_report: unable to find dj report [ 171.525367][ T31] usb 5-1: USB disconnect, device number 4 [ 171.525420][ T63] logitech-djreceiver 0003:046D:C52B.0008: logi_dj_recv_switch_to_dj_mode error:-19 [ 171.902085][ T63] usb 2-1: USB disconnect, device number 14 [ 171.979765][ T3859] FAULT_INJECTION: forcing a failure. [ 171.979765][ T3859] name failslab, interval 1, probability 0, space 0, times 0 [ 171.992594][ T3859] CPU: 1 UID: 0 PID: 3859 Comm: syz.3.1082 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 171.992638][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.992654][ T3859] Call Trace: [ 171.992661][ T3859] [ 171.992670][ T3859] __dump_stack+0x21/0x30 [ 171.992707][ T3859] dump_stack_lvl+0x140/0x1c0 [ 171.992731][ T3859] ? __cfi_dump_stack_lvl+0x10/0x10 [ 171.992758][ T3859] dump_stack+0x19/0x20 [ 171.992780][ T3859] should_fail_ex+0x3c2/0x510 [ 171.992796][ T3859] should_failslab+0xac/0x100 [ 171.992811][ T3859] kmem_cache_alloc_noprof+0x42/0x410 [ 171.992833][ T3859] ? security_inode_alloc+0x51/0x230 [ 171.992850][ T3859] ? __cfi_make_kgid+0x10/0x10 [ 171.992874][ T3859] security_inode_alloc+0x51/0x230 [ 171.992890][ T3859] inode_init_always_gfp+0x756/0x9e0 [ 171.992905][ T3859] ? __cfi_ovl_inode_test+0x10/0x10 [ 171.992922][ T3859] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 171.992936][ T3859] alloc_inode+0xc5/0x270 [ 171.992951][ T3859] ? __cfi_mutex_unlock+0x10/0x10 [ 171.992972][ T3859] ? __cfi_ovl_inode_set+0x10/0x10 [ 171.992987][ T3859] ? __cfi_ovl_inode_test+0x10/0x10 [ 171.993003][ T3859] iget5_locked+0x53/0xb0 [ 171.993019][ T3859] ? __cfi_ovl_inode_set+0x10/0x10 [ 171.993034][ T3859] ovl_get_trap_inode+0x91/0x1c0 [ 171.993050][ T3859] ovl_fill_super+0x171b/0x51a0 [ 171.993064][ T3859] ? shrinker_alloc+0x68/0xa60 [ 171.993087][ T3859] ? kasan_save_track+0x3e/0x80 [ 171.993112][ T3859] ? __cfi_ovl_fill_super+0x10/0x10 [ 171.993129][ T3859] ? xas_store+0xb6e/0x17f0 [ 171.993148][ T3859] ? xas_nomem+0x71/0x2c0 [ 171.993166][ T3859] ? ida_alloc_range+0xa44/0xa80 [ 171.993189][ T3859] ? __kmalloc_cache_noprof+0x23c/0x470 [ 171.993213][ T3859] ? __kasan_check_write+0x18/0x20 [ 171.993234][ T3859] ? mutex_unlock+0x90/0x240 [ 171.993254][ T3859] ? __cfi_mutex_unlock+0x10/0x10 [ 171.993274][ T3859] ? __kasan_check_write+0x18/0x20 [ 171.993296][ T3859] ? sget_fc+0x97e/0xa70 [ 171.993314][ T3859] ? __cfi_set_anon_super_fc+0x10/0x10 [ 171.993334][ T3859] get_tree_nodev+0xcb/0x170 [ 171.993353][ T3859] ? __cfi_ovl_fill_super+0x10/0x10 [ 171.993367][ T3859] ovl_get_tree+0x20/0x30 [ 171.993390][ T3859] vfs_get_tree+0x9e/0x290 [ 171.993411][ T3859] do_new_mount+0x251/0xb40 [ 171.993432][ T3859] ? security_capable+0x44/0x130 [ 171.993458][ T3859] path_mount+0x66a/0xff0 [ 171.993478][ T3859] ? putname+0x113/0x150 [ 171.993501][ T3859] __se_sys_mount+0x2bf/0x480 [ 171.993528][ T3859] ? __x64_sys_mount+0xf0/0xf0 [ 171.993550][ T3859] ? __kasan_check_write+0x18/0x20 [ 171.993571][ T3859] ? __kasan_check_write+0x18/0x20 [ 171.993591][ T3859] ? fpregs_restore_userregs+0x11c/0x260 [ 171.993613][ T3859] __x64_sys_mount+0xc3/0xf0 [ 171.993641][ T3859] x64_sys_call+0x2021/0x2ee0 [ 171.993658][ T3859] do_syscall_64+0x57/0xf0 [ 171.993674][ T3859] ? clear_bhb_loop+0x50/0xa0 [ 171.993696][ T3859] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.993718][ T3859] RIP: 0033:0x7f73dd59f559 [ 171.993732][ T3859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.993745][ T3859] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.993762][ T3859] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 171.993774][ T3859] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 171.993785][ T3859] RBP: 00007f73dd636b20 R08: 0000200000000580 R09: 0000000000000000 [ 171.993795][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.993805][ T3859] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 171.993818][ T3859] [ 172.392392][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.401065][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.411427][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.420320][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.747306][ T63] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.787311][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 172.898343][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.909350][ T63] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.918460][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.927265][ T63] usb 5-1: config 0 descriptor?? [ 172.957248][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 172.963633][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.975204][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.985236][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.994467][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.004769][ T31] usb 3-1: config 0 descriptor?? [ 173.012918][ T36] audit: type=1400 audit(1793246493.920:313): avc: denied { ioctl } for pid=3885 comm="syz.3.1094" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.142553][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 173.148621][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 173.157813][ T63] usb 5-1: USB disconnect, device number 5 [ 173.178119][ T3891] device-mapper: table: 252:6: thin-pool: unknown target type [ 173.185633][ T3891] device-mapper: ioctl: error adding target to table [ 173.206503][ T3894] FAULT_INJECTION: forcing a failure. [ 173.206503][ T3894] name failslab, interval 1, probability 0, space 0, times 0 [ 173.219297][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.3.1097 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 173.219332][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 173.219348][ T3894] Call Trace: [ 173.219360][ T3894] [ 173.219370][ T3894] __dump_stack+0x21/0x30 [ 173.219413][ T3894] dump_stack_lvl+0x140/0x1c0 [ 173.219450][ T3894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.219520][ T3894] ? vms_clear_ptes+0x4eb/0x610 [ 173.219558][ T3894] dump_stack+0x19/0x20 [ 173.219591][ T3894] should_fail_ex+0x3c2/0x510 [ 173.219616][ T3894] should_failslab+0xac/0x100 [ 173.219639][ T3894] kmem_cache_alloc_noprof+0x42/0x410 [ 173.219670][ T3894] ? vma_merge_new_range+0x71e/0x900 [ 173.219701][ T3894] ? vm_area_alloc+0x3f/0x190 [ 173.219730][ T3894] vm_area_alloc+0x3f/0x190 [ 173.219757][ T3894] mmap_region+0xce2/0x1d10 [ 173.219789][ T3894] ? __cfi_mmap_region+0x10/0x10 [ 173.219822][ T3894] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 173.219855][ T3894] ? __kasan_check_read+0x15/0x20 [ 173.219887][ T3894] ? __get_unmapped_area+0x406/0x470 [ 173.219917][ T3894] ? futex_wait+0x2b8/0x7c0 [ 173.219945][ T3894] do_mmap+0xa47/0x1370 [ 173.219976][ T3894] ? __cfi_selinux_mmap_file+0x10/0x10 [ 173.220008][ T3894] ? __cfi_do_mmap+0x10/0x10 [ 173.220037][ T3894] ? __kasan_check_write+0x18/0x20 [ 173.220066][ T3894] ? down_write_killable+0xee/0x2d0 [ 173.220100][ T3894] ? __cfi_down_write_killable+0x10/0x10 [ 173.220132][ T3894] ? do_futex+0x32a/0x510 [ 173.220156][ T3894] vm_mmap_pgoff+0x367/0x4b0 [ 173.220186][ T3894] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 173.220214][ T3894] ? __x64_sys_futex+0x110/0x110 [ 173.220238][ T3894] ksys_mmap_pgoff+0xfa/0x1e0 [ 173.220265][ T3894] ? __kasan_check_write+0x18/0x20 [ 173.220293][ T3894] __x64_sys_mmap+0x121/0x140 [ 173.220316][ T3894] x64_sys_call+0x13bf/0x2ee0 [ 173.220338][ T3894] do_syscall_64+0x57/0xf0 [ 173.220359][ T3894] ? clear_bhb_loop+0x50/0xa0 [ 173.220390][ T3894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.220422][ T3894] RIP: 0033:0x7f73dd59f559 [ 173.220445][ T3894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.220458][ T3894] RSP: 002b:00007f73de42a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.220482][ T3894] RAX: ffffffffffffffda RBX: 00007f73dd825fa0 RCX: 00007f73dd59f559 [ 173.220495][ T3894] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 173.220507][ T3894] RBP: 00007f73dd636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 173.220519][ T3894] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 173.220530][ T3894] R13: 00007f73dd826038 R14: 00007f73dd825fa0 R15: 00007ffce1318268 [ 173.220545][ T3894] [ 173.498439][ T31] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 173.505919][ T31] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 173.514280][ T31] hid-generic 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 173.554825][ T3901] device-mapper: table: 252:3: snapshot-origin: Cannot get target device (-ENOENT) [ 173.564307][ T3901] device-mapper: ioctl: error adding target to table [ 173.727303][ T63] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.878575][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.889968][ T63] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 173.899069][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.907905][ T63] usb 5-1: config 0 descriptor?? [ 174.017271][ T320] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.167273][ T320] usb 2-1: Using ep0 maxpacket: 8 [ 174.173539][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.183906][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.192831][ T320] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.205777][ T320] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.214886][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.227061][ T320] hub 2-1:1.0: bad descriptor, ignoring hub [ 174.234892][ T320] hub 2-1:1.0: probe with driver hub failed with error -5 [ 174.242263][ T320] cdc_wdm 2-1:1.0: skipping garbage [ 174.247532][ T320] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 174.315073][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.323797][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.480636][ T3926] FAULT_INJECTION: forcing a failure. [ 174.480636][ T3926] name fail_futex, interval 1, probability 0, space 0, times 1 [ 174.493550][ T3926] CPU: 1 UID: 0 PID: 3926 Comm: syz.3.1111 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 174.493589][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.493604][ T3926] Call Trace: [ 174.493613][ T3926] [ 174.493628][ T3926] __dump_stack+0x21/0x30 [ 174.493657][ T3926] dump_stack_lvl+0x140/0x1c0 [ 174.493681][ T3926] ? __cfi_dump_stack_lvl+0x10/0x10 [ 174.493705][ T3926] ? unwind_get_return_address+0x51/0x90 [ 174.493730][ T3926] dump_stack+0x19/0x20 [ 174.493753][ T3926] should_fail_ex+0x3c2/0x510 [ 174.493768][ T3926] should_fail+0xf/0x20 [ 174.493782][ T3926] get_futex_key+0x178/0x940 [ 174.493797][ T3926] ? __cfi_get_futex_key+0x10/0x10 [ 174.493830][ T3926] ? kasan_save_track+0x4f/0x80 [ 174.493864][ T3926] ? kasan_save_free_info+0x44/0x50 [ 174.493894][ T3926] ? __kasan_slab_free+0x5f/0x80 [ 174.493908][ T3926] ? kfree+0x158/0x440 [ 174.493929][ T3926] futex_wake+0x150/0x950 [ 174.493952][ T3926] ? __cfi_futex_wake+0x10/0x10 [ 174.493975][ T3926] do_futex+0x37d/0x510 [ 174.493990][ T3926] ? __cfi_do_futex+0x10/0x10 [ 174.494006][ T3926] ? kvfree_sensitive+0x51/0x70 [ 174.494028][ T3926] __se_sys_futex+0x13c/0x320 [ 174.494045][ T3926] ? __x64_sys_futex+0x110/0x110 [ 174.494062][ T3926] ? __kasan_check_write+0x18/0x20 [ 174.494084][ T3926] __x64_sys_futex+0xe9/0x110 [ 174.494100][ T3926] x64_sys_call+0x227f/0x2ee0 [ 174.494116][ T3926] do_syscall_64+0x57/0xf0 [ 174.494133][ T3926] ? clear_bhb_loop+0x50/0xa0 [ 174.494155][ T3926] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 174.494177][ T3926] RIP: 0033:0x7f73dd59f559 [ 174.494191][ T3926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.494205][ T3926] RSP: 002b:00007f73de42a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.494223][ T3926] RAX: ffffffffffffffda RBX: 00007f73dd825fa8 RCX: 00007f73dd59f559 [ 174.494236][ T3926] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73dd825fac [ 174.494247][ T3926] RBP: 00007f73dd825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 174.494258][ T3926] R10: 0000000027575853 R11: 0000000000000246 R12: 0000000000000000 [ 174.494268][ T3926] R13: 00007f73dd826038 R14: 00007ffce1318180 R15: 00007ffce1318268 [ 174.494281][ T3926] [ 174.737922][ T63] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 174.745845][ T63] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 174.867471][ T31] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 175.051925][ T63] usb 5-1: USB disconnect, device number 6 [ 175.057858][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 175.327397][ T320] usb 2-1: USB disconnect, device number 15 [ 175.561484][ T31] usb 3-1: USB disconnect, device number 25 [ 175.582658][ T36] audit: type=1400 audit(1793246496.490:314): avc: denied { write } for pid=3934 comm="syz.3.1115" name="psched" dev="proc" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 175.601035][ T3937] FAULT_INJECTION: forcing a failure. [ 175.601035][ T3937] name failslab, interval 1, probability 0, space 0, times 0 [ 175.618148][ T3937] CPU: 0 UID: 0 PID: 3937 Comm: syz.4.1114 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 175.618182][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.618198][ T3937] Call Trace: [ 175.618205][ T3937] [ 175.618214][ T3937] __dump_stack+0x21/0x30 [ 175.618253][ T3937] dump_stack_lvl+0x140/0x1c0 [ 175.618286][ T3937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.618318][ T3937] ? __kasan_check_write+0x18/0x20 [ 175.618351][ T3937] ? _raw_spin_lock+0x92/0x120 [ 175.618375][ T3937] dump_stack+0x19/0x20 [ 175.618407][ T3937] should_fail_ex+0x3c2/0x510 [ 175.618431][ T3937] should_failslab+0xac/0x100 [ 175.618452][ T3937] ? __cfi_ovl_inode_test+0x10/0x10 [ 175.618476][ T3937] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 175.618508][ T3937] ? ovl_alloc_inode+0x3b/0x130 [ 175.618530][ T3937] ? __cfi_ovl_inode_test+0x10/0x10 [ 175.618553][ T3937] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 175.618574][ T3937] ovl_alloc_inode+0x3b/0x130 [ 175.618594][ T3937] ? __cfi_ovl_inode_test+0x10/0x10 [ 175.618617][ T3937] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 175.618637][ T3937] alloc_inode+0x7d/0x270 [ 175.618660][ T3937] ? __cfi_mutex_unlock+0x10/0x10 [ 175.618688][ T3937] ? __cfi_ovl_inode_set+0x10/0x10 [ 175.618715][ T3937] ? __cfi_ovl_inode_test+0x10/0x10 [ 175.618739][ T3937] iget5_locked+0x53/0xb0 [ 175.618763][ T3937] ? __cfi_ovl_inode_set+0x10/0x10 [ 175.618785][ T3937] ovl_get_trap_inode+0x91/0x1c0 [ 175.618815][ T3937] ovl_fill_super+0x171b/0x51a0 [ 175.618838][ T3937] ? kasan_save_track+0x3e/0x80 [ 175.618876][ T3937] ? __cfi_ovl_fill_super+0x10/0x10 [ 175.618898][ T3937] ? xas_store+0xb6e/0x17f0 [ 175.618926][ T3937] ? xas_nomem+0x71/0x2c0 [ 175.618952][ T3937] ? ida_alloc_range+0xa44/0xa80 [ 175.618987][ T3937] ? __kmalloc_cache_noprof+0x23c/0x470 [ 175.619022][ T3937] ? __kasan_check_write+0x18/0x20 [ 175.619052][ T3937] ? mutex_unlock+0x90/0x240 [ 175.619080][ T3937] ? __cfi_mutex_unlock+0x10/0x10 [ 175.619109][ T3937] ? __kasan_check_write+0x18/0x20 [ 175.619141][ T3937] ? sget_fc+0x97e/0xa70 [ 175.619166][ T3937] ? __cfi_set_anon_super_fc+0x10/0x10 [ 175.619195][ T3937] get_tree_nodev+0xcb/0x170 [ 175.619222][ T3937] ? __cfi_ovl_fill_super+0x10/0x10 [ 175.619242][ T3937] ovl_get_tree+0x20/0x30 [ 175.619274][ T3937] vfs_get_tree+0x9e/0x290 [ 175.619304][ T3937] do_new_mount+0x251/0xb40 [ 175.619335][ T3937] ? security_capable+0x44/0x130 [ 175.619369][ T3937] path_mount+0x66a/0xff0 [ 175.619398][ T3937] ? putname+0x113/0x150 [ 175.619431][ T3937] __se_sys_mount+0x2bf/0x480 [ 175.619463][ T3937] ? __x64_sys_mount+0xf0/0xf0 [ 175.619495][ T3937] ? __kasan_check_write+0x18/0x20 [ 175.619525][ T3937] ? fpregs_restore_userregs+0x11c/0x260 [ 175.619556][ T3937] __x64_sys_mount+0xc3/0xf0 [ 175.619587][ T3937] x64_sys_call+0x2021/0x2ee0 [ 175.619610][ T3937] do_syscall_64+0x57/0xf0 [ 175.619634][ T3937] ? clear_bhb_loop+0x50/0xa0 [ 175.619663][ T3937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.619693][ T3937] RIP: 0033:0x7fc06999f559 [ 175.619713][ T3937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.619733][ T3937] RSP: 002b:00007fc0683f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.619758][ T3937] RAX: ffffffffffffffda RBX: 00007fc069c25fa0 RCX: 00007fc06999f559 [ 175.619776][ T3937] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 175.619792][ T3937] RBP: 00007fc069a36b20 R08: 0000200000000580 R09: 0000000000000000 [ 175.619814][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.619829][ T3937] R13: 00007fc069c26038 R14: 00007fc069c25fa0 R15: 00007ffe63e6ad08 [ 175.619849][ T3937] [ 176.048913][ T36] audit: type=1400 audit(1793246496.960:315): avc: denied { read } for pid=3946 comm="syz.4.1120" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.072924][ T36] audit: type=1400 audit(1793246496.960:316): avc: denied { open } for pid=3946 comm="syz.4.1120" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 176.096953][ T3948] kvm: pic: single mode not supported [ 176.097311][ T3948] kvm: pic: level sensitive irq not supported [ 176.104229][ T3948] kvm: pic: level sensitive irq not supported [ 176.173739][ T3952] FAULT_INJECTION: forcing a failure. [ 176.173739][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 176.192608][ T3952] CPU: 1 UID: 0 PID: 3952 Comm: syz.4.1122 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 176.192648][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.192659][ T3952] Call Trace: [ 176.192665][ T3952] [ 176.192671][ T3952] __dump_stack+0x21/0x30 [ 176.192700][ T3952] dump_stack_lvl+0x140/0x1c0 [ 176.192724][ T3952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.192749][ T3952] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 176.192776][ T3952] dump_stack+0x19/0x20 [ 176.192798][ T3952] should_fail_ex+0x3c2/0x510 [ 176.192814][ T3952] should_failslab+0xac/0x100 [ 176.192830][ T3952] kmem_cache_alloc_noprof+0x42/0x410 [ 176.192852][ T3952] ? __kernfs_new_node+0xf1/0x740 [ 176.192868][ T3952] __kernfs_new_node+0xf1/0x740 [ 176.192885][ T3952] ? kernfs_new_node+0x280/0x280 [ 176.192900][ T3952] ? down_write+0xee/0x2b0 [ 176.192922][ T3952] ? __cfi_down_write+0x10/0x10 [ 176.192944][ T3952] ? __kasan_check_write+0x18/0x20 [ 176.192966][ T3952] ? __kasan_check_write+0x18/0x20 [ 176.192988][ T3952] kernfs_new_node+0x154/0x280 [ 176.193004][ T3952] kernfs_create_link+0xa8/0x200 [ 176.193024][ T3952] sysfs_do_create_link_sd+0x8a/0x120 [ 176.193048][ T3952] sysfs_create_link+0x6c/0x90 [ 176.193070][ T3952] device_add_class_symlinks+0x1dd/0x260 [ 176.193092][ T3952] device_add+0x4b8/0xbf0 [ 176.193111][ T3952] wakeup_source_sysfs_add+0x1e0/0x380 [ 176.193128][ T3952] ? wakeup_source_create+0xca/0x1e0 [ 176.193150][ T3952] ? wakeup_source_register+0x1c/0x2b0 [ 176.193174][ T3952] wakeup_source_register+0x9b/0x2b0 [ 176.193198][ T3952] ep_create_wakeup_source+0x161/0x5b0 [ 176.193217][ T3952] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 176.193264][ T3952] ep_insert+0xbe2/0x1600 [ 176.193291][ T3952] ? ep_loop_check+0xa0/0xa0 [ 176.193312][ T3952] ? mutex_lock+0x97/0x1d0 [ 176.193342][ T3952] ? ep_loop_check_proc+0x2a4/0x310 [ 176.193360][ T3952] do_epoll_ctl+0x955/0xcf0 [ 176.193376][ T3952] __x64_sys_epoll_ctl+0x166/0x1b0 [ 176.193392][ T3952] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 176.193408][ T3952] ? switch_fpu_return+0x12/0x20 [ 176.193430][ T3952] x64_sys_call+0x2c44/0x2ee0 [ 176.193446][ T3952] do_syscall_64+0x57/0xf0 [ 176.193462][ T3952] ? clear_bhb_loop+0x50/0xa0 [ 176.193484][ T3952] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.193506][ T3952] RIP: 0033:0x7fc06999f559 [ 176.193540][ T3952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.193561][ T3952] RSP: 002b:00007fc0683f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 176.193587][ T3952] RAX: ffffffffffffffda RBX: 00007fc069c25fa0 RCX: 00007fc06999f559 [ 176.193600][ T3952] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 176.193611][ T3952] RBP: 00007fc069a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 176.193622][ T3952] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000000 [ 176.193633][ T3952] R13: 00007fc069c26038 R14: 00007fc069c25fa0 R15: 00007ffe63e6ad08 [ 176.193647][ T3952] [ 176.557284][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 176.707281][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 176.713511][ T45] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 176.721868][ T45] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 176.729986][ T45] usb 2-1: config 0 has no interface number 0 [ 176.736073][ T45] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.747727][ T45] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 176.759022][ T318] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 176.766623][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.774242][ T45] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 176.786852][ T45] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 176.795974][ T45] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 176.804107][ T45] usb 2-1: Product: syz [ 176.808311][ T45] usb 2-1: Manufacturer: syz [ 176.813647][ T45] usb 2-1: config 0 descriptor?? [ 176.819941][ T3949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.928594][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.939591][ T318] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 176.950389][ T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.959506][ T318] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.970529][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.978576][ T318] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.988732][ T318] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 177.001951][ T31] usb 5-1: config 0 descriptor?? [ 177.007046][ T318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.014675][ T318] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 177.023831][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.032799][ T318] usb 3-1: config 0 descriptor?? [ 177.216163][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 177.222259][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 177.231129][ T31] usb 5-1: USB disconnect, device number 7 [ 177.442708][ T318] wacom 0003:056A:0315.000A: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 177.453100][ T318] wacom 0003:056A:0315.000A: hidraw0: USB HID v0.00 Joystick [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 177.465377][ T318] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.000A/input/input10 [ 177.647323][ T320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.651333][ T318] usb 3-1: USB disconnect, device number 26 [ 177.808538][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.819552][ T320] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 177.828656][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.837467][ T320] usb 5-1: config 0 descriptor?? [ 178.133673][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.142459][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.243968][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.252752][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.407279][ T318] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 178.557273][ T318] usb 3-1: Using ep0 maxpacket: 8 [ 178.563442][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.573599][ T318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 178.582538][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 178.593728][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 178.604934][ T318] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.614022][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.624221][ T318] hub 3-1:1.0: bad descriptor, ignoring hub [ 178.630243][ T318] hub 3-1:1.0: probe with driver hub failed with error -5 [ 178.637574][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 178.642815][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 178.648664][ T318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 178.654640][ T318] cdc_wdm 3-1:1.0: Unknown control protocol [ 178.668896][ T320] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 178.677698][ T320] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 178.717518][ C1] ------------[ cut here ]------------ [ 178.723049][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 178.731657][ C1] index 44241 is out of range for type 'const int[34]' [ 178.738552][ C1] CPU: 1 UID: 0 PID: 3947 Comm: syz.1.1121 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 178.738579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.738593][ C1] Call Trace: [ 178.738600][ C1] [ 178.738608][ C1] __dump_stack+0x21/0x30 [ 178.738642][ C1] dump_stack_lvl+0x140/0x1c0 [ 178.738670][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 178.738702][ C1] dump_stack+0x19/0x20 [ 178.738729][ C1] ubsan_epilogue+0xe/0x40 [ 178.738748][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 178.738784][ C1] aiptek_irq+0x208d/0x2a00 [ 178.738806][ C1] ? _raw_spin_unlock+0x45/0x60 [ 178.738825][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 178.738850][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 178.738876][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 178.738900][ C1] dummy_timer+0xa3f/0x4900 [ 178.738934][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 178.738959][ C1] ? hrtimer_init_sleeper+0x3e/0x180 [ 178.738980][ C1] ? timerqueue_del+0xd7/0x130 [ 178.738995][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 178.739014][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 178.739038][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 178.739062][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 178.739081][ C1] ? read_tsc+0xd/0x20 [ 178.739106][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 178.739134][ C1] hrtimer_run_softirq+0x159/0x560 [ 178.739155][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 178.739182][ C1] handle_softirqs+0x1ad/0x5b0 [ 178.739202][ C1] __irq_exit_rcu+0x47/0xb0 [ 178.739220][ C1] irq_exit_rcu+0xd/0x30 [ 178.739238][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 178.739263][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 178.739288][ C1] RIP: 0033:0x7fb72c35fd8e [ 178.739304][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.739320][ C1] RSP: 002b:00007fff799b03d8 EFLAGS: 00000246 [ 178.739336][ C1] RAX: 0000000000000000 RBX: 0000555564378500 RCX: 00007fb72c35fd8e [ 178.739349][ C1] RDX: 00007fff799b0430 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.739360][ C1] RBP: 00007fb72c627da0 R08: 0000000000000000 R09: 0000000000000000 [ 178.739372][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002c1f4 [ 178.739383][ C1] R13: 00007fb72c62609c R14: 000000000002b63b R15: 00007fff799b0560 [ 178.739398][ C1] [ 178.739404][ C1] ---[ end trace ]--- [ 178.983726][ C1] ------------[ cut here ]------------ [ 178.989203][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 178.997814][ C1] index 44242 is out of range for type 'const int[34]' [ 179.004688][ C1] CPU: 1 UID: 0 PID: 3947 Comm: syz.1.1121 Not tainted syzkaller #0 5cdf496c3980d18a0efbb3b3e73d13bf69df874e [ 179.004716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.004730][ C1] Call Trace: [ 179.004738][ C1] [ 179.004746][ C1] __dump_stack+0x21/0x30 [ 179.004780][ C1] dump_stack_lvl+0x140/0x1c0 [ 179.004811][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 179.004842][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 179.004877][ C1] dump_stack+0x19/0x20 [ 179.004903][ C1] ubsan_epilogue+0xe/0x40 [ 179.004921][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 179.004945][ C1] aiptek_irq+0x1f3c/0x2a00 [ 179.004968][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 179.005002][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 179.005031][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 179.005057][ C1] dummy_timer+0xa3f/0x4900 [ 179.005095][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 179.005124][ C1] ? hrtimer_init_sleeper+0x3e/0x180 [ 179.005146][ C1] ? timerqueue_del+0xd7/0x130 [ 179.005162][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 179.005183][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 179.005209][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 179.005231][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 179.005251][ C1] ? read_tsc+0xd/0x20 [ 179.005276][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 179.005305][ C1] hrtimer_run_softirq+0x159/0x560 [ 179.005326][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 179.005354][ C1] handle_softirqs+0x1ad/0x5b0 [ 179.005376][ C1] __irq_exit_rcu+0x47/0xb0 [ 179.005395][ C1] irq_exit_rcu+0xd/0x30 [ 179.005413][ C1] sysvec_apic_timer_interrupt+0x44/0x90 [ 179.005438][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 179.005464][ C1] RIP: 0033:0x7fb72c35fd8e [ 179.005482][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.005497][ C1] RSP: 002b:00007fff799b03d8 EFLAGS: 00000246 [ 179.005514][ C1] RAX: 0000000000000000 RBX: 0000555564378500 RCX: 00007fb72c35fd8e [ 179.005527][ C1] RDX: 00007fff799b0430 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.005539][ C1] RBP: 00007fb72c627da0 R08: 0000000000000000 R09: 0000000000000000 [ 179.005551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002c1f4 [ 179.005563][ C1] R13: 00007fb72c62609c R14: 000000000002b63b R15: 00007fff799b0560 [ 179.005578][ C1] [ 179.005585][ C1] ---[ end trace ]--- [ 179.262506][ T63] usb 2-1: USB disconnect, device number 16 [ 179.357353][ T318] usb 3-1: USB disconnect, device number 27 [ 179.508008][ T63] usb 5-1: USB disconnect, device number 8 [ 179.508177][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19