last executing test programs: 3.518856316s ago: executing program 0 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 3.518706045s ago: executing program 0 (id=191): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000040)='7', 0x1) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0xb8) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 3.518124805s ago: executing program 0 (id=192): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000022c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x404400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_create_resource$kvm_nested_state(&(0x7f0000000240)=@vmx={0x100, 0x0, 0x2080, {0xdddd1000, 0xa000, {}, 0x0, 0x390800}, {"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", "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"}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f00000000c0)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) ioctl$KVM_GET_NESTED_STATE_res(0xffffffffffffffff, 0xc080aebe, r4) r7 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @unmapped=0x100000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={0x0}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002380), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000023c0)={@multicast1, @local}, 0xc) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002400)={'sit0\x00', 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000002540)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002600), 0x101302, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000002640)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE_res(r7, 0x4080aebf, r4) 3.425799705s ago: executing program 0 (id=193): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000040)="04000000") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10082, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)='0', 0x1) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x306, @multicast}, 0x96f1d3b67767afb8, {0x2, 0x4e21, @remote}, 'vlan0\x00'}) syz_io_uring_setup(0x6e00, &(0x7f0000000400)={0x0, 0x8d91, 0x4000, 0x3, 0x366}, 0x0, 0x0, 0x0) 3.364155821s ago: executing program 0 (id=194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xc7, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x0, 0x30, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x1b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x2f, 0xfff}, [@selector_unit={0x6, 0x24, 0xc, 0x4, 0x1, "bf"}, @multiply_unit={0xb, 0x24, 0xd, 0xb, 0xd, 0x4, 0x2}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x201, 0x2, 0x5e, 0xffff, 0x58, 0x9, 0xfff8, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x81, 0x1, {0xa, 0x25, 0x25, 0x5571c4fd, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb4, 0x1, 0x0, 0xfe, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x4, 0x5, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x7, 0x0, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3a, 0x7, 0x3, {0xa, 0x25, 0x25, 0x4, 0x6, 0x6cd0}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x4, 0x3, 0xf9, 0x20, 0x80}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x7f, 0x1}]}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x48, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d900000000") 3.18282849s ago: executing program 1 (id=195): syz_io_uring_setup(0x552d, &(0x7f0000000000)={0x0, 0x4c, 0x2000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r3, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048080) write(r0, &(0x7f00000002c0)="ffffffffffffaabbccddeeff88ca", 0xe) 3.1825638s ago: executing program 1 (id=196): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0b55fe132c0f1690913", 0xc1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000002) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000004040)={0x6, 0x8000000002, 0x1, 0x7}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0b55fe132c0f1690913", 0xc1) (async) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000002) (async) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@filename='./file0\x00', 0x0, &(0x7f0000004040)={0x6, 0x8000000002, 0x1, 0x7}) (async) 3.18235177s ago: executing program 1 (id=197): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x60000010}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1ff, 0x2000000, 0x10, r3, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000140)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000100)=0x6}) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f00000000c0), 0xfffffffffffffffe) prctl$PR_GET_IO_FLUSHER(0x3a) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.060574183s ago: executing program 1 (id=199): r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x200]}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x7, 0x9, 0xd5c8, 0x928, 0x7, 0x6}, {0x7, 0xb, 0x3925, 0x7, 0x805, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x7, 0x9, 0xd5c8, 0x928, 0x7, 0x6}, {0x7, 0xb, 0x3925, 0x7, 0x805, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002b40), r0) 2.201889162s ago: executing program 1 (id=207): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) 2.189853413s ago: executing program 2 (id=211): r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000001680)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000001b00)=0x0, &(0x7f0000001740)=0x0, &(0x7f0000001780)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000017c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfeff, &(0x7f0000001840)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x25}}}, &(0x7f0000001880)) 2.138538808s ago: executing program 2 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x1, 0xffffffff, 0xe1, 0x0, 0x0, 0xfffffffffffffec6, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1000}]}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1004040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x202, 0x0) fallocate(r4, 0x0, 0x8000000, 0x1000) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002400)={[0x5, 0x0, 0x13, 0x9, 0x9, 0x1000, 0x4b, 0x0, 0x4004, 0x0, 0x1, 0xf, 0x6, 0x5, 0xfffefffffffffffe, 0x4], 0x0, 0x1019c4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.083932344s ago: executing program 3 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101701) r3 = open(&(0x7f0000000040)='./file0\x00', 0x149040, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000016c0)={0x2c, 0x10, 0xb, 0x70bd26, 0x4000, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x4040080) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000300)={0xdf, 0x1}) read$usbfs(r2, &(0x7f00000004c0)=""/4096, 0x1000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000380)={0x1f, @none}, 0x8) listen(r7, 0x3) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f00000003c0)=0x3, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000014c0)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000001500)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) r9 = add_key$user(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x1}, &(0x7f00000015c0)="3e12", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffc, 0x0, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.970865175s ago: executing program 2 (id=216): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000640)=0x60) listen(r0, 0x12e4) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./dev\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000540)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x143041, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000040000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000100000000bb000000000d0001007564703a73797a30000000007d"], 0x6c}}, 0x0) fallocate(r3, 0x3, 0xb, 0x1000) r6 = open(&(0x7f0000000300)='./bus\x00', 0x59577e, 0x198) r7 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1e1242, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fallocate(r6, 0x0, 0x1000000000000000, 0x1000f4) sendfile(r7, r7, 0x0, 0x100000000) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 1.970448565s ago: executing program 2 (id=217): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000080)="6ba5dd4678f1c0a3d46b53c3ecca1a68361244cc3a082a8a0f5a39784f1825735e943f9e295fe72e4fd81bd3580ab7c5412ad33c25e3dc3d9d5cbaca067d021e9d7ceb9a7fc542b099a294facdbcfd73992046782bd7dbe250cefdfdc7a9df6a0d3cd2e808f574083f27b6b5defd1e825836695769da81876a96d83b88dd668d20178151b843424e9cf20dfbeb0c6ffa03189920dacb750d99b8877615406c06d2ddf3898c97f525107f7a994fe34d2822b5ca1968337c7a0751ef34795efa2067a9bdbb16", 0xc5, 0x2, 0x0, 0x2, r1}, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) 1.141177231s ago: executing program 2 (id=218): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000440)="1c0020001d005f0214fffffffffffff8070000000d000000000027cd", 0x1c) 1.132676762s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000005c00)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000005c40)='./mnt\x00', &(0x7f0000005c80)='tracefs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x40000082, 0x0, 0x7fffffffffffffff}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) io_setup(0x3, &(0x7f00000001c0)=0x0) eventfd2(0xfffff10a, 0x80001) io_submit(r6, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f0000000280)="06", 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r5, 0x0, 0x0, 0x7, 0x0, 0x3}]) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)=""/183, 0xb7) r7 = openat(0xffffffffffffff9c, &(0x7f0000005cc0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r7, &(0x7f0000005d00)=""/16384, 0x4000) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r4, 0x3) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000000)) 858.92237ms ago: executing program 3 (id=220): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000200)=""/171, 0xab}], 0x2, 0x1a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 858.66034ms ago: executing program 3 (id=221): r0 = memfd_secret(0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34010000170001"], 0x134}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) read$usbfs(r0, &(0x7f00000013c0)=""/186, 0xba) syz_clone3(&(0x7f0000001340)={0x2a00e3000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x1e}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/67, &(0x7f0000001300)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) close_range(r2, r0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cfbb29bd7000ffdbdf25078642d7cb6e2340c642efd192050100"], 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x20040010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x2010, r0, 0x7817d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0xb57c000) 858.41334ms ago: executing program 3 (id=222): openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x80382, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffc, 0x4) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ef7925df25020000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000013c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003", @ANYRES8=0x0], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000900)=ANY=[@ANYBLOB="fd7228de", @ANYRES16=r5, @ANYBLOB="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"], 0xa38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1a0) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000006c0), 0x1d5, 0x60000) write(r6, &(0x7f0000000640)='7', 0x1) write(0xffffffffffffffff, 0x0, 0x0) 706.377066ms ago: executing program 3 (id=223): openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 628.205374ms ago: executing program 1 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0x81, {0x8, 0xb, 0x0, 0x3, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1e, 0xd, 0x10, {0xa, 0x25, 0x25, 0x3, 0x50, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x0, 0xd, 0x1}}}}}}}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000480)={{0x0, 0xdddd1000, 0x4, 0x9, 0x5, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x4000, 0x3, 0x4, 0x40, 0x5, 0xd8, 0x6, 0x5, 0x3, 0x3, 0xfd}, {0xeeef0000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x4, 0x4}, {0x25000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xed, 0x80, 0x7, 0x2, 0xdb, 0x1}, {0x60000, 0x3ff8, 0x10, 0x7, 0xb1, 0x4, 0x21, 0xd0, 0x9, 0xff, 0x1}, {0x1ffe, 0x8000000, 0x3, 0x7, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0x7, 0xb0, 0x9}, {0x10000, 0x1000}, {0x5000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x100000000, 0x80, 0xfff]}) 426.831335ms ago: executing program 3 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x100000d, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000140)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x2100e6d4, 0x4) write(r1, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='1', 0x1) (fail_nth: 4) 0s ago: executing program 0 (id=226): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x100) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001620010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) kernel console output (not intermixed with test programs): =286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.390067][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.407283][ T36] audit: type=1400 audit(1793818652.750:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.438645][ T36] audit: type=1400 audit(1793818652.810:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.448622][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.464216][ T36] audit: type=1400 audit(1793818652.810:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.498306][ T36] audit: type=1400 audit(1793818652.840:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.523818][ T36] audit: type=1400 audit(1793818652.840:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.281873][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.288911][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.296153][ T293] bridge_slave_0: entered allmulticast mode [ 22.302438][ T293] bridge_slave_0: entered promiscuous mode [ 22.311877][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.318902][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.325980][ T293] bridge_slave_1: entered allmulticast mode [ 22.332181][ T293] bridge_slave_1: entered promiscuous mode [ 22.347467][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.354515][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.361593][ T294] bridge_slave_0: entered allmulticast mode [ 22.367708][ T294] bridge_slave_0: entered promiscuous mode [ 22.374068][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.381108][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.388171][ T294] bridge_slave_1: entered allmulticast mode [ 22.394380][ T294] bridge_slave_1: entered promiscuous mode [ 22.432998][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.440054][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.447092][ T296] bridge_slave_0: entered allmulticast mode [ 22.453352][ T296] bridge_slave_0: entered promiscuous mode [ 22.462091][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.469113][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.476198][ T296] bridge_slave_1: entered allmulticast mode [ 22.482319][ T296] bridge_slave_1: entered promiscuous mode [ 22.493051][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.500095][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.507125][ T295] bridge_slave_0: entered allmulticast mode [ 22.513362][ T295] bridge_slave_0: entered promiscuous mode [ 22.522030][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.529059][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.536125][ T295] bridge_slave_1: entered allmulticast mode [ 22.542317][ T295] bridge_slave_1: entered promiscuous mode [ 22.667560][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.674627][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.681900][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.688914][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.701943][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.708974][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.716240][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.723265][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.731662][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.738690][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.745950][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.752972][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.784417][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.791685][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.798985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.806736][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.814133][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.821322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.840316][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.847333][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.854946][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.861973][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.886660][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.893716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.901331][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.908357][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.937885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.944943][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.962923][ T295] veth0_vlan: entered promiscuous mode [ 22.971856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.978879][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.988084][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.995127][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.002833][ T296] veth0_vlan: entered promiscuous mode [ 23.011422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.018451][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.034459][ T296] veth1_macvtap: entered promiscuous mode [ 23.058951][ T295] veth1_macvtap: entered promiscuous mode [ 23.087655][ T293] veth0_vlan: entered promiscuous mode [ 23.099841][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.115764][ T294] veth0_vlan: entered promiscuous mode [ 23.125608][ T293] veth1_macvtap: entered promiscuous mode [ 23.136552][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.142065][ T294] veth1_macvtap: entered promiscuous mode [ 23.223630][ T321] FAULT_INJECTION: forcing a failure. [ 23.223630][ T321] name failslab, interval 1, probability 0, space 0, times 1 [ 23.225550][ T323] tipc: Started in network mode [ 23.239609][ T321] CPU: 1 UID: 0 PID: 321 Comm: syz.0.1 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 23.239639][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.239658][ T321] Call Trace: [ 23.239664][ T321] [ 23.239671][ T321] __dump_stack+0x21/0x30 [ 23.239694][ T321] dump_stack_lvl+0x140/0x1c0 [ 23.239712][ T321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.239731][ T321] ? __kasan_kmalloc+0x96/0xb0 [ 23.239751][ T321] dump_stack+0x19/0x20 [ 23.239767][ T321] should_fail_ex+0x3c2/0x510 [ 23.239793][ T321] should_failslab+0xac/0x100 [ 23.239812][ T321] __kmalloc_cache_noprof+0x41/0x470 [ 23.239838][ T321] ? apply_subsystem_event_filter+0x330/0x1190 [ 23.239867][ T321] ? strim+0xf0/0x1d0 [ 23.239893][ T321] apply_subsystem_event_filter+0x330/0x1190 [ 23.239913][ T321] ? avc_policy_seqno+0xd/0x30 [ 23.239937][ T321] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 23.239957][ T321] ? should_fail+0xf/0x20 [ 23.239973][ T321] ? _copy_from_user+0x87/0xa0 [ 23.239993][ T321] ? memdup_user_nul+0xad/0x1a0 [ 23.240016][ T321] ? subsystem_filter_write+0x57/0xf0 [ 23.240041][ T321] subsystem_filter_write+0x99/0xf0 [ 23.240065][ T321] ? __cfi_subsystem_filter_write+0x10/0x10 [ 23.240090][ T321] vfs_write+0x3c1/0xfd0 [ 23.240115][ T321] ? __cfi_vfs_write+0x10/0x10 [ 23.240141][ T321] ? __kasan_check_write+0x18/0x20 [ 23.240165][ T321] ? mutex_lock+0x97/0x1d0 [ 23.240187][ T321] ? __cfi_mutex_lock+0x10/0x10 [ 23.240210][ T321] ksys_write+0x145/0x260 [ 23.240225][ T321] ? xfd_validate_state+0x68/0x140 [ 23.240243][ T321] ? __cfi_ksys_write+0x10/0x10 [ 23.240259][ T321] ? __kasan_check_write+0x18/0x20 [ 23.240283][ T321] ? fpregs_restore_userregs+0x11c/0x260 [ 23.240307][ T321] __x64_sys_write+0x7f/0x90 [ 23.240322][ T321] x64_sys_call+0x271c/0x2ee0 [ 23.240342][ T321] do_syscall_64+0x57/0xf0 [ 23.240360][ T321] ? clear_bhb_loop+0x50/0xa0 [ 23.240384][ T321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.240407][ T321] RIP: 0033:0x7f9212b9fb19 [ 23.240428][ T321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.240443][ T321] RSP: 002b:00007f92139cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 23.240466][ T321] RAX: ffffffffffffffda RBX: 00007f9212e25fa0 RCX: 00007f9212b9fb19 [ 23.240480][ T321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 23.240492][ T321] RBP: 00007f9212c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 23.240504][ T321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.240516][ T321] R13: 00007f9212e26038 R14: 00007f9212e25fa0 R15: 00007fff364d2ef8 [ 23.240532][ T321] [ 23.512597][ T323] tipc: Node identity f2413aa4c7e4, cluster identity 4711 [ 23.521581][ T323] tipc: Enabled bearer , priority 10 [ 23.539310][ T322] tipc: Resetting bearer [ 23.546357][ T322] tipc: Disabling bearer [ 23.650650][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.820518][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.831767][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.841674][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.854639][ T10] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 23.863670][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.871673][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.880636][ T10] usb 2-1: config 0 descriptor?? [ 24.039438][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 24.045867][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.054303][ T310] usb 3-1: config 5 has an invalid interface number: 113 but max is 2 [ 24.062504][ T310] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 24.071257][ T310] usb 3-1: config 5 has an invalid descriptor of length 106, skipping remainder of the config [ 24.081569][ T310] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 24.090457][ T310] usb 3-1: config 5 has no interface number 0 [ 24.096559][ T310] usb 3-1: config 5 interface 113 altsetting 2 endpoint 0xE has invalid maxpacket 2023, setting to 64 [ 24.107592][ T310] usb 3-1: config 5 interface 113 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 24.118319][ T310] usb 3-1: config 5 interface 113 altsetting 2 endpoint 0x2 has invalid maxpacket 2059, setting to 64 [ 24.129338][ T310] usb 3-1: config 5 interface 113 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 24.142392][ T310] usb 3-1: config 5 interface 113 has no altsetting 0 [ 24.150668][ T310] usb 3-1: Dual-Role OTG device on HNP port [ 24.156762][ T310] usb 3-1: New USB device found, idVendor=103e, idProduct=03e8, bcdDevice=b4.51 [ 24.166015][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.174023][ T310] usb 3-1: Product: syz [ 24.178251][ T310] usb 3-1: Manufacturer: syz [ 24.182907][ T10] usb 2-1: string descriptor 0 read error: -71 [ 24.189423][ T310] usb 3-1: SerialNumber: syz [ 24.195859][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 24.201855][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 24.210657][ T10] usb 2-1: USB disconnect, device number 2 [ 24.435302][ T310] ftdi_sio 3-1:5.113: FTDI USB Serial Device converter detected [ 24.443279][ T310] ftdi_sio ttyUSB0: unknown device type: 0xb451 [ 24.451214][ T310] usb 3-1: USB disconnect, device number 2 [ 24.457887][ T310] ftdi_sio 3-1:5.113: device disconnected [ 24.508230][ T354] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 24.533593][ T45] rust_binder: 345: undelivered transaction 3, process died [ 24.545880][ T356] FAULT_INJECTION: forcing a failure. [ 24.545880][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 24.559530][ T356] CPU: 0 UID: 0 PID: 356 Comm: syz.0.14 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 24.559558][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.559570][ T356] Call Trace: [ 24.559576][ T356] [ 24.559582][ T356] __dump_stack+0x21/0x30 [ 24.559604][ T356] dump_stack_lvl+0x140/0x1c0 [ 24.559620][ T356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.559636][ T356] ? __kasan_check_write+0x18/0x20 [ 24.559661][ T356] ? _raw_spin_lock+0x92/0x120 [ 24.559680][ T356] dump_stack+0x19/0x20 [ 24.559696][ T356] should_fail_ex+0x3c2/0x510 [ 24.559723][ T356] should_failslab+0xac/0x100 [ 24.559742][ T356] kmem_cache_alloc_noprof+0x42/0x410 [ 24.559766][ T356] ? ext4_mb_new_blocks+0x325/0x36c0 [ 24.559791][ T356] ext4_mb_new_blocks+0x325/0x36c0 [ 24.559815][ T356] ? __kmalloc_noprof+0x261/0x510 [ 24.559838][ T356] ? ext4_find_extent+0x1f5/0xd80 [ 24.559863][ T356] ? ext4_ext_search_right+0x49e/0x880 [ 24.559886][ T356] ? ext4_inode_to_goal_block+0x34f/0x4c0 [ 24.559907][ T356] ? ext4_ext_find_goal+0x11d/0x210 [ 24.559932][ T356] ext4_ext_map_blocks+0x14d9/0x6080 [ 24.559958][ T356] ? __kasan_check_write+0x18/0x20 [ 24.559982][ T356] ? _raw_read_unlock+0x16/0x40 [ 24.560000][ T356] ? start_this_handle+0x1ed0/0x2050 [ 24.560017][ T356] ? jbd2__journal_start+0x16d/0x860 [ 24.560032][ T356] ? __ext4_journal_start_sb+0x111/0x3f0 [ 24.560054][ T356] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 24.560074][ T356] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 24.560098][ T356] ext4_map_blocks+0x873/0x17f0 [ 24.560121][ T356] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 24.560142][ T356] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 24.560167][ T356] ? __cfi_ext4_map_blocks+0x10/0x10 [ 24.560191][ T356] ? __kmalloc_cache_noprof+0x23c/0x470 [ 24.560218][ T356] ? jbd2__journal_start+0x3c9/0x860 [ 24.560237][ T356] ext4_iomap_begin+0x784/0xb10 [ 24.560265][ T356] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 24.560291][ T356] ? kasan_save_alloc_info+0x3a/0x50 [ 24.560315][ T356] iomap_iter+0x639/0xc60 [ 24.560335][ T356] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 24.560355][ T356] __iomap_dio_rw+0xa96/0x1ba0 [ 24.560390][ T356] ? __cfi___iomap_dio_rw+0x10/0x10 [ 24.560416][ T356] ? jbd2_journal_stop+0x81f/0xc20 [ 24.560436][ T356] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 24.560454][ T356] ? __cfi_ext4_orphan_add+0x10/0x10 [ 24.560479][ T356] iomap_dio_rw+0x45/0xa0 [ 24.560502][ T356] ext4_file_write_iter+0xf23/0x15c0 [ 24.560524][ T356] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 24.560542][ T356] ? iovec_from_user+0x18f/0x310 [ 24.560563][ T356] ? avc_policy_seqno+0xd/0x30 [ 24.560583][ T356] ? selinux_file_permission+0x318/0xb60 [ 24.560610][ T356] do_iter_readv_writev+0x62f/0x820 [ 24.560629][ T356] ? vfs_iter_read+0x5e0/0x5e0 [ 24.560647][ T356] ? bpf_lsm_file_permission+0xd/0x20 [ 24.560668][ T356] vfs_writev+0x4a5/0xe90 [ 24.560688][ T356] ? do_writev+0x2e0/0x2e0 [ 24.560707][ T356] ? vfs_write+0xbd2/0xfd0 [ 24.560736][ T356] __se_sys_pwritev2+0x181/0x2a0 [ 24.560754][ T356] ? __x64_sys_pwritev2+0xf0/0xf0 [ 24.560774][ T356] __x64_sys_pwritev2+0xc3/0xf0 [ 24.560793][ T356] x64_sys_call+0x2938/0x2ee0 [ 24.560813][ T356] do_syscall_64+0x57/0xf0 [ 24.560832][ T356] ? clear_bhb_loop+0x50/0xa0 [ 24.560857][ T356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.560881][ T356] RIP: 0033:0x7f9212b9fb19 [ 24.560894][ T356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.560909][ T356] RSP: 002b:00007f92139cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 24.560928][ T356] RAX: ffffffffffffffda RBX: 00007f9212e25fa0 RCX: 00007f9212b9fb19 [ 24.560941][ T356] RDX: 0000000000000300 RSI: 0000200000000340 RDI: 0000000000000003 [ 24.560951][ T356] RBP: 00007f92139cf090 R08: 0000000000000000 R09: 0000000000000003 [ 24.560963][ T356] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 24.560975][ T356] R13: 00007f9212e26038 R14: 00007f9212e25fa0 R15: 00007fff364d2ef8 [ 24.560992][ T356] [ 24.701880][ T360] FAULT_INJECTION: forcing a failure. [ 24.701880][ T360] name failslab, interval 1, probability 0, space 0, times 0 [ 24.983633][ T360] CPU: 0 UID: 0 PID: 360 Comm: syz.3.15 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 24.983662][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.983673][ T360] Call Trace: [ 24.983679][ T360] [ 24.983686][ T360] __dump_stack+0x21/0x30 [ 24.983707][ T360] dump_stack_lvl+0x140/0x1c0 [ 24.983722][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.983737][ T360] ? __kasan_kmalloc+0x96/0xb0 [ 24.983757][ T360] dump_stack+0x19/0x20 [ 24.983771][ T360] should_fail_ex+0x3c2/0x510 [ 24.983797][ T360] should_failslab+0xac/0x100 [ 24.983816][ T360] __kmalloc_cache_noprof+0x41/0x470 [ 24.983840][ T360] ? apply_subsystem_event_filter+0x330/0x1190 [ 24.983860][ T360] ? strim+0xf0/0x1d0 [ 24.983880][ T360] apply_subsystem_event_filter+0x330/0x1190 [ 24.983900][ T360] ? avc_policy_seqno+0xd/0x30 [ 24.983922][ T360] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 24.983939][ T360] ? should_fail+0xf/0x20 [ 24.983951][ T360] ? _copy_from_user+0x87/0xa0 [ 24.983970][ T360] ? memdup_user_nul+0xad/0x1a0 [ 24.983994][ T360] ? subsystem_filter_write+0x57/0xf0 [ 24.984019][ T360] subsystem_filter_write+0x99/0xf0 [ 24.984044][ T360] ? __cfi_subsystem_filter_write+0x10/0x10 [ 24.984068][ T360] vfs_write+0x3c1/0xfd0 [ 24.984094][ T360] ? __cfi_vfs_write+0x10/0x10 [ 24.984117][ T360] ? __kasan_check_write+0x18/0x20 [ 24.984142][ T360] ? mutex_lock+0x97/0x1d0 [ 24.984165][ T360] ? __cfi_mutex_lock+0x10/0x10 [ 24.984190][ T360] ksys_write+0x145/0x260 [ 24.984206][ T360] ? xfd_validate_state+0x68/0x140 [ 24.984224][ T360] ? __cfi_ksys_write+0x10/0x10 [ 24.984240][ T360] ? __kasan_check_write+0x18/0x20 [ 24.984272][ T360] ? fpregs_restore_userregs+0x11c/0x260 [ 24.984296][ T360] __x64_sys_write+0x7f/0x90 [ 24.984310][ T360] x64_sys_call+0x271c/0x2ee0 [ 24.984328][ T360] do_syscall_64+0x57/0xf0 [ 24.984347][ T360] ? clear_bhb_loop+0x50/0xa0 [ 24.984373][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.984392][ T360] RIP: 0033:0x7f11a4f9fb19 [ 24.984408][ T360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.984423][ T360] RSP: 002b:00007f11a5ee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 24.984444][ T360] RAX: ffffffffffffffda RBX: 00007f11a5226180 RCX: 00007f11a4f9fb19 [ 24.984458][ T360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 24.984470][ T360] RBP: 00007f11a5037b70 R08: 0000000000000000 R09: 0000000000000000 [ 24.984482][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.984494][ T360] R13: 00007f11a5226218 R14: 00007f11a5226180 R15: 00007ffe34305948 [ 24.984511][ T360] [ 25.260196][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.282867][ T377] mmap: syz.1.20 (377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.420467][ T310] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.431407][ T310] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 25.444323][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 25.450949][ T310] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 25.460001][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.469044][ T310] usb 1-1: config 0 descriptor?? [ 25.564350][ T392] FAULT_INJECTION: forcing a failure. [ 25.564350][ T392] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.577539][ T392] CPU: 1 UID: 0 PID: 392 Comm: syz.2.26 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.577569][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.577581][ T392] Call Trace: [ 25.577587][ T392] [ 25.577593][ T392] __dump_stack+0x21/0x30 [ 25.577616][ T392] dump_stack_lvl+0x140/0x1c0 [ 25.577632][ T392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.577648][ T392] ? check_stack_object+0x138/0x150 [ 25.577675][ T392] dump_stack+0x19/0x20 [ 25.577691][ T392] should_fail_ex+0x3c2/0x510 [ 25.577718][ T392] should_fail+0xf/0x20 [ 25.577734][ T392] should_fail_usercopy+0x1e/0x30 [ 25.577752][ T392] _copy_to_user+0x24/0xa0 [ 25.577772][ T392] simple_read_from_buffer+0xed/0x160 [ 25.577792][ T392] proc_fail_nth_read+0x1aa/0x220 [ 25.577806][ T392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.577818][ T392] ? bpf_lsm_file_permission+0xd/0x20 [ 25.577830][ T392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.577848][ T392] vfs_read+0x288/0xc70 [ 25.577875][ T392] ? __cfi_vfs_read+0x10/0x10 [ 25.577899][ T392] ? __kasan_check_write+0x18/0x20 [ 25.577925][ T392] ? mutex_lock+0x97/0x1d0 [ 25.577938][ T392] ? __cfi_mutex_lock+0x10/0x10 [ 25.577951][ T392] ksys_read+0x145/0x260 [ 25.577965][ T392] ? __cfi_ksys_read+0x10/0x10 [ 25.577978][ T392] ? __kasan_check_write+0x18/0x20 [ 25.577997][ T392] ? fput+0x1a4/0x230 [ 25.578018][ T392] ? __kasan_check_read+0x15/0x20 [ 25.578043][ T392] __x64_sys_read+0x7f/0x90 [ 25.578067][ T392] x64_sys_call+0x2638/0x2ee0 [ 25.578078][ T392] do_syscall_64+0x57/0xf0 [ 25.578088][ T392] ? clear_bhb_loop+0x50/0xa0 [ 25.578102][ T392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.578115][ T392] RIP: 0033:0x7fd2b4b6034e [ 25.578125][ T392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.578137][ T392] RSP: 002b:00007fd2b35e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 25.578157][ T392] RAX: ffffffffffffffda RBX: 00007fd2b35e36c0 RCX: 00007fd2b4b6034e [ 25.578172][ T392] RDX: 000000000000000f RSI: 00007fd2b35e30a0 RDI: 0000000000000006 [ 25.578184][ T392] RBP: 00007fd2b35e3090 R08: 0000000000000000 R09: 0000000000000000 [ 25.578196][ T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.578207][ T392] R13: 00007fd2b4e26038 R14: 00007fd2b4e25fa0 R15: 00007ffe98e04368 [ 25.578218][ T392] [ 26.003444][ T408] FAULT_INJECTION: forcing a failure. [ 26.003444][ T408] name failslab, interval 1, probability 0, space 0, times 0 [ 26.016279][ T408] CPU: 0 UID: 0 PID: 408 Comm: syz.2.30 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 26.016310][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.016323][ T408] Call Trace: [ 26.016330][ T408] [ 26.016338][ T408] __dump_stack+0x21/0x30 [ 26.016363][ T408] dump_stack_lvl+0x140/0x1c0 [ 26.016385][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.016404][ T408] ? __kasan_kmalloc+0x96/0xb0 [ 26.016426][ T408] dump_stack+0x19/0x20 [ 26.016444][ T408] should_fail_ex+0x3c2/0x510 [ 26.016472][ T408] should_failslab+0xac/0x100 [ 26.016492][ T408] __kmalloc_cache_noprof+0x41/0x470 [ 26.016521][ T408] ? apply_subsystem_event_filter+0x330/0x1190 [ 26.016543][ T408] ? strim+0xf0/0x1d0 [ 26.016567][ T408] apply_subsystem_event_filter+0x330/0x1190 [ 26.016588][ T408] ? avc_policy_seqno+0xd/0x30 [ 26.016611][ T408] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 26.016632][ T408] ? should_fail+0xf/0x20 [ 26.016649][ T408] ? _copy_from_user+0x87/0xa0 [ 26.016670][ T408] ? memdup_user_nul+0xad/0x1a0 [ 26.016694][ T408] ? subsystem_filter_write+0x57/0xf0 [ 26.016721][ T408] subsystem_filter_write+0x99/0xf0 [ 26.016748][ T408] ? __cfi_subsystem_filter_write+0x10/0x10 [ 26.016773][ T408] vfs_write+0x3c1/0xfd0 [ 26.016801][ T408] ? __cfi_vfs_write+0x10/0x10 [ 26.016827][ T408] ? __kasan_check_write+0x18/0x20 [ 26.016853][ T408] ? mutex_lock+0x97/0x1d0 [ 26.016877][ T408] ? __cfi_mutex_lock+0x10/0x10 [ 26.016902][ T408] ksys_write+0x145/0x260 [ 26.016919][ T408] ? xfd_validate_state+0x68/0x140 [ 26.016938][ T408] ? __cfi_ksys_write+0x10/0x10 [ 26.016955][ T408] ? __kasan_check_write+0x18/0x20 [ 26.016980][ T408] ? fpregs_restore_userregs+0x11c/0x260 [ 26.017006][ T408] __x64_sys_write+0x7f/0x90 [ 26.017024][ T408] x64_sys_call+0x271c/0x2ee0 [ 26.017044][ T408] do_syscall_64+0x57/0xf0 [ 26.017063][ T408] ? clear_bhb_loop+0x50/0xa0 [ 26.017089][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.017114][ T408] RIP: 0033:0x7fd2b4b9fb19 [ 26.017137][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.017154][ T408] RSP: 002b:00007fd2b35e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 26.017176][ T408] RAX: ffffffffffffffda RBX: 00007fd2b4e25fa0 RCX: 00007fd2b4b9fb19 [ 26.017191][ T408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 26.017204][ T408] RBP: 00007fd2b4c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 26.017217][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.017229][ T408] R13: 00007fd2b4e26038 R14: 00007fd2b4e25fa0 R15: 00007ffe98e04368 [ 26.017247][ T408] [ 26.307307][ T310] hid-led 0003:1294:1320.0001: hidraw0: USB HID v36.2c Joystick [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 26.320904][ T310] hid-led 0003:1294:1320.0001: Riso Kagaku Webmail Notifier initialized [ 26.339749][ T412] FAULT_INJECTION: forcing a failure. [ 26.339749][ T412] name failslab, interval 1, probability 0, space 0, times 0 [ 26.352647][ T412] CPU: 0 UID: 0 PID: 412 Comm: syz.3.31 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 26.352676][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.352687][ T412] Call Trace: [ 26.352693][ T412] [ 26.352700][ T412] __dump_stack+0x21/0x30 [ 26.352722][ T412] dump_stack_lvl+0x140/0x1c0 [ 26.352737][ T412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.352754][ T412] ? stack_depot_save_flags+0x38/0x800 [ 26.352772][ T412] dump_stack+0x19/0x20 [ 26.352788][ T412] should_fail_ex+0x3c2/0x510 [ 26.352815][ T412] should_failslab+0xac/0x100 [ 26.352834][ T412] kmem_cache_alloc_noprof+0x42/0x410 [ 26.352860][ T412] ? __break_lease+0x11c/0x1590 [ 26.352886][ T412] __break_lease+0x11c/0x1590 [ 26.352909][ T412] ? __asan_memcpy+0x5a/0x80 [ 26.352934][ T412] ? selinux_file_open+0x46c/0x630 [ 26.352951][ T412] ? __cfi___break_lease+0x10/0x10 [ 26.352973][ T412] ? __cfi_selinux_file_open+0x10/0x10 [ 26.352991][ T412] ? bpf_lsm_file_open+0xd/0x20 [ 26.353011][ T412] do_dentry_open+0x8ca/0x1510 [ 26.353034][ T412] vfs_open+0x86/0x240 [ 26.353053][ T412] ? __cfi_vfs_open+0x10/0x10 [ 26.353070][ T412] ? inode_owner_or_capable+0xf0/0x1b0 [ 26.353095][ T412] ? may_open+0x398/0x430 [ 26.353116][ T412] path_openat+0x2c49/0x35a0 [ 26.353139][ T412] ? kasan_save_alloc_info+0x3a/0x50 [ 26.353163][ T412] ? getname+0x1b/0x30 [ 26.353179][ T412] ? x64_sys_call+0x131a/0x2ee0 [ 26.353199][ T412] ? do_syscall_64+0x57/0xf0 [ 26.353220][ T412] ? do_filp_open+0x440/0x440 [ 26.353256][ T412] do_filp_open+0x1f2/0x440 [ 26.353278][ T412] ? __cfi_do_filp_open+0x10/0x10 [ 26.353303][ T412] ? alloc_fd+0x4c1/0x570 [ 26.353323][ T412] do_sys_openat2+0x134/0x1d0 [ 26.353345][ T412] ? fput+0x1a4/0x230 [ 26.353365][ T412] ? do_sys_open+0x100/0x100 [ 26.353387][ T412] ? ksys_write+0x1f3/0x260 [ 26.353404][ T412] ? __cfi_ksys_write+0x10/0x10 [ 26.353421][ T412] __x64_sys_open+0x120/0x150 [ 26.353445][ T412] x64_sys_call+0x131a/0x2ee0 [ 26.353464][ T412] do_syscall_64+0x57/0xf0 [ 26.353482][ T412] ? clear_bhb_loop+0x50/0xa0 [ 26.353507][ T412] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.353532][ T412] RIP: 0033:0x7f11a4f9fb19 [ 26.353548][ T412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.353564][ T412] RSP: 002b:00007f11a5f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 26.353584][ T412] RAX: ffffffffffffffda RBX: 00007f11a5225fa0 RCX: 00007f11a4f9fb19 [ 26.353599][ T412] RDX: 0000000000000000 RSI: 00000000000e0841 RDI: 0000200000000200 [ 26.353612][ T412] RBP: 00007f11a5f24090 R08: 0000000000000000 R09: 0000000000000000 [ 26.353624][ T412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.353636][ T412] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 26.353653][ T412] [ 26.365251][ T414] FAULT_INJECTION: forcing a failure. [ 26.365251][ T414] name failslab, interval 1, probability 0, space 0, times 0 [ 26.403506][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 26.403520][ T36] audit: type=1400 audit(1793818657.800:170): avc: denied { mount } for pid=417 comm="syz.1.34" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.406761][ T414] CPU: 1 UID: 0 PID: 414 Comm: syz.3.32 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 26.406786][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.406797][ T414] Call Trace: [ 26.406802][ T414] [ 26.406810][ T414] __dump_stack+0x21/0x30 [ 26.406832][ T414] dump_stack_lvl+0x140/0x1c0 [ 26.406848][ T414] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.406866][ T414] dump_stack+0x19/0x20 [ 26.406881][ T414] should_fail_ex+0x3c2/0x510 [ 26.406907][ T414] should_failslab+0xac/0x100 [ 26.406926][ T414] kmem_cache_alloc_node_noprof+0x45/0x420 [ 26.406951][ T414] ? arp_constructor+0x69d/0x9b0 [ 26.406971][ T414] ? ___neigh_create+0xfb7/0x2100 [ 26.406987][ T414] ? __alloc_skb+0x10c/0x360 [ 26.407006][ T414] __alloc_skb+0x10c/0x360 [ 26.407025][ T414] __neigh_notify+0x83/0x140 [ 26.407044][ T414] __neigh_update+0xbc7/0x2140 [ 26.407064][ T414] neigh_update+0x3c/0x60 [ 26.407081][ T414] arp_req_set+0x75e/0xb60 [ 26.407099][ T414] ? __asan_memcpy+0x5a/0x80 [ 26.407123][ T414] ? arp_req_delete+0x730/0x730 [ 26.407142][ T414] ? __kasan_check_write+0x18/0x20 [ 26.407166][ T414] ? mutex_lock+0x97/0x1d0 [ 26.407187][ T414] ? __cfi_mutex_lock+0x10/0x10 [ 26.407206][ T414] ? bpf_lsm_capable+0xd/0x20 [ 26.407229][ T414] arp_ioctl+0x2e7/0x3c0 [ 26.407248][ T414] ? __cfi_arp_ioctl+0x10/0x10 [ 26.407270][ T414] inet_ioctl+0x3cb/0x570 [ 26.407288][ T414] ? __cfi_inet_ioctl+0x10/0x10 [ 26.407307][ T414] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 26.407331][ T414] sock_do_ioctl+0x118/0x330 [ 26.407348][ T414] ? sock_show_fdinfo+0xd0/0xd0 [ 26.407364][ T414] ? hook_file_ioctl+0x1ef/0x590 [ 26.407387][ T414] ? __cfi_vfs_write+0x10/0x10 [ 26.407410][ T414] ? hook_file_truncate+0x260/0x2b0 [ 26.407432][ T414] ? __kasan_check_write+0x18/0x20 [ 26.407455][ T414] ? mutex_unlock+0x90/0x240 [ 26.407476][ T414] sock_ioctl+0x568/0x7e0 [ 26.407492][ T414] ? __cfi_sock_ioctl+0x10/0x10 [ 26.407508][ T414] ? __fget_files+0x2bc/0x330 [ 26.407526][ T414] ? bpf_lsm_file_ioctl+0xd/0x20 [ 26.407543][ T414] ? security_file_ioctl+0x3e/0x110 [ 26.407567][ T414] ? __cfi_sock_ioctl+0x10/0x10 [ 26.407583][ T414] __se_sys_ioctl+0x123/0x1b0 [ 26.407601][ T414] __x64_sys_ioctl+0x7f/0xa0 [ 26.407619][ T414] x64_sys_call+0x1878/0x2ee0 [ 26.407637][ T414] do_syscall_64+0x57/0xf0 [ 26.407655][ T414] ? clear_bhb_loop+0x50/0xa0 [ 26.407678][ T414] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.407701][ T414] RIP: 0033:0x7f11a4f9fb19 [ 26.407716][ T414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.407735][ T414] RSP: 002b:00007f11a5f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.407754][ T414] RAX: ffffffffffffffda RBX: 00007f11a5225fa0 RCX: 00007f11a4f9fb19 [ 26.407767][ T414] RDX: 0000200000000580 RSI: 0000000000008955 RDI: 0000000000000004 [ 26.407779][ T414] RBP: 00007f11a5f24090 R08: 0000000000000000 R09: 0000000000000000 [ 26.407791][ T414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.407802][ T414] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 26.407817][ T414] [ 26.503050][ T31] usb 1-1: USB disconnect, device number 2 [ 27.011924][ T67] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 27.020217][ T67] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 27.022007][ T36] audit: type=1400 audit(1793818658.420:171): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.028504][ T67] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 27.066536][ T36] audit: type=1400 audit(1793818658.460:172): avc: denied { write } for pid=422 comm="syz.2.36" name="igmp6" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.094592][ T36] audit: type=1400 audit(1793818658.460:173): avc: denied { create } for pid=422 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.095159][ T425] FAULT_INJECTION: forcing a failure. [ 27.095159][ T425] name failslab, interval 1, probability 0, space 0, times 0 [ 27.114355][ T36] audit: type=1400 audit(1793818658.460:174): avc: denied { write } for pid=422 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.131315][ T425] CPU: 0 UID: 0 PID: 425 Comm: syz.0.37 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 27.131343][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.131354][ T425] Call Trace: [ 27.131359][ T425] [ 27.131366][ T425] __dump_stack+0x21/0x30 [ 27.131389][ T425] dump_stack_lvl+0x140/0x1c0 [ 27.131406][ T425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.131422][ T425] ? avc_has_perm+0x155/0x240 [ 27.131441][ T425] ? __cfi_avc_has_perm+0x10/0x10 [ 27.131459][ T425] ? hook_file_open+0x1f2/0x8d0 [ 27.131482][ T425] dump_stack+0x19/0x20 [ 27.131497][ T425] should_fail_ex+0x3c2/0x510 [ 27.131523][ T425] should_failslab+0xac/0x100 [ 27.131542][ T425] __kmalloc_cache_noprof+0x41/0x470 [ 27.131567][ T425] ? vhost_task_create+0x12c/0x3f0 [ 27.131588][ T425] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 27.131611][ T425] vhost_task_create+0x12c/0x3f0 [ 27.131631][ T425] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 27.131655][ T425] ? __cfi_vhost_task_create+0x10/0x10 [ 27.131676][ T425] ? __cfi_vhost_task_fn+0x10/0x10 [ 27.131696][ T425] ? __kasan_check_write+0x18/0x20 [ 27.131721][ T425] ? mutex_lock+0x97/0x1d0 [ 27.131742][ T425] ? __cfi_mutex_lock+0x10/0x10 [ 27.131761][ T425] ? kernel_text_address+0xa9/0xe0 [ 27.131787][ T425] kvm_mmu_post_init_vm+0x161/0x300 [ 27.131805][ T425] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 27.131830][ T425] ? _parse_integer_limit+0x195/0x1e0 [ 27.131855][ T425] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 27.131879][ T425] ? kstrtoull+0x13b/0x1e0 [ 27.131902][ T425] ? kstrtouint+0x78/0xf0 [ 27.131925][ T425] ? ioctl_has_perm+0x1bc/0x500 [ 27.131950][ T425] ? __asan_memcpy+0x5a/0x80 [ 27.131972][ T425] ? ioctl_has_perm+0x408/0x500 [ 27.131997][ T425] ? has_cap_mac_admin+0xd0/0xd0 [ 27.132023][ T425] ? __kasan_check_write+0x18/0x20 [ 27.132046][ T425] ? mutex_lock_killable+0x97/0x1d0 [ 27.132067][ T425] ? __cfi_mutex_lock_killable+0x10/0x10 [ 27.132089][ T425] ? proc_fail_nth_write+0x184/0x220 [ 27.132112][ T425] kvm_vcpu_ioctl+0xa43/0x1000 [ 27.132133][ T425] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 27.132151][ T425] ? hook_file_ioctl+0x1ef/0x590 [ 27.132173][ T425] ? __cfi_vfs_write+0x10/0x10 [ 27.132205][ T425] ? __cfi_hook_file_ioctl+0x10/0x10 [ 27.132226][ T425] ? __kasan_check_write+0x18/0x20 [ 27.132249][ T425] ? mutex_unlock+0x90/0x240 [ 27.132270][ T425] ? __cfi_mutex_unlock+0x10/0x10 [ 27.132292][ T425] ? __fget_files+0x2bc/0x330 [ 27.132311][ T425] ? bpf_lsm_file_ioctl+0xd/0x20 [ 27.132329][ T425] ? security_file_ioctl+0x3e/0x110 [ 27.132354][ T425] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 27.132372][ T425] __se_sys_ioctl+0x123/0x1b0 [ 27.132391][ T425] __x64_sys_ioctl+0x7f/0xa0 [ 27.132409][ T425] x64_sys_call+0x1878/0x2ee0 [ 27.132428][ T425] do_syscall_64+0x57/0xf0 [ 27.132445][ T425] ? clear_bhb_loop+0x50/0xa0 [ 27.132468][ T425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.132490][ T425] RIP: 0033:0x7f9212b9fb19 [ 27.132506][ T425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.132520][ T425] RSP: 002b:00007f92139cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.132539][ T425] RAX: ffffffffffffffda RBX: 00007f9212e25fa0 RCX: 00007f9212b9fb19 [ 27.132553][ T425] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 27.132564][ T425] RBP: 00007f92139cf090 R08: 0000000000000000 R09: 0000000000000000 [ 27.132575][ T425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.132586][ T425] R13: 00007f9212e26038 R14: 00007f9212e25fa0 R15: 00007fff364d2ef8 [ 27.132601][ T425] [ 27.289448][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.528238][ T36] audit: type=1400 audit(1793818658.920:175): avc: denied { mount } for pid=429 comm="syz.3.39" name="/" dev="ramfs" ino=3939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.529157][ T430] overlay: ./file0 is not a directory [ 27.567571][ T36] audit: type=1400 audit(1793818658.960:176): avc: denied { read append } for pid=431 comm="syz.3.40" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.591849][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.591884][ T36] audit: type=1400 audit(1793818658.960:177): avc: denied { open } for pid=431 comm="syz.3.40" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.646932][ T36] audit: type=1400 audit(1793818659.040:178): avc: denied { name_bind } for pid=436 comm="syz.3.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.668362][ T36] audit: type=1400 audit(1793818659.040:179): avc: denied { node_bind } for pid=436 comm="syz.3.42" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.700478][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.712226][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.721694][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.732399][ T9] usb 2-1: config 0 descriptor?? [ 27.740514][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.754460][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.766923][ T310] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 27.776099][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.778768][ T448] rust_binder: 447:448 got reply transaction with no transaction stack [ 27.785213][ T310] usb 3-1: config 0 descriptor?? [ 27.795212][ T448] rust_binder: 447:448 transaction reply to 0:0 failed EINVAL, code 0 size 120-24 line thread.rs:1556 [ 27.810648][ T10] rust_binder: 447: undelivered TRANSACTION_ERROR: 29201 [ 27.840188][ T456] No source specified [ 27.844583][ T456] ./dev/sda1: Can't lookup blockdev [ 27.852693][ T456] process 'syz.0.50' launched './file1' with NULL argv: empty string added [ 27.878965][ T464] ======================================================= [ 27.878965][ T464] WARNING: The mand mount option has been deprecated and [ 27.878965][ T464] and is ignored by this kernel. Remove the mand [ 27.878965][ T464] option from the mount to silence this warning. [ 27.878965][ T464] ======================================================= [ 27.942386][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 27.949833][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 27.961725][ T9] usb 2-1: USB disconnect, device number 3 [ 27.978873][ T468] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.987009][ T468] rust_binder: Read failure Err(EFAULT) in pid:42 [ 27.994435][ T468] rust_binder: 467:468 transaction call to 467:0 failed EINVAL, code 0 size 0-0 line thread.rs:1189 [ 28.005649][ T468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.089505][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.213307][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.220336][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.227283][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.234271][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.240517][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.241244][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.252701][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.259249][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.269167][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.275886][ T310] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 28.289018][ T31] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 28.299483][ T310] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 28.304871][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.329971][ T31] usb 4-1: config 0 descriptor?? [ 28.379446][ T421] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.413119][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.421799][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.430298][ T310] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 28.530434][ T421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.542298][ T421] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 28.551838][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.560567][ T421] usb 2-1: config 0 descriptor?? [ 28.631367][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.639926][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.650766][ T310] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 28.658609][ T310] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 28.670459][ T310] usb 3-1: USB disconnect, device number 3 [ 28.753534][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.761200][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.768202][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.775132][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.782031][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.788895][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.796132][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.803272][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.810195][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.811639][ T9] rust_binder: 467: undelivered TRANSACTION_COMPLETE [ 28.817075][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.828744][ T10] rust_binder: 467: undelivered TRANSACTION_ERROR: 29201 [ 28.830634][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.844498][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.852529][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.860796][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.868234][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.875375][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.882292][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.889176][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.896053][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.902958][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.909850][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.916739][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.923654][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.930539][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.937385][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.944276][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.951829][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.958734][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.965798][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.972872][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.979746][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.986599][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 28.993492][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.000360][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.007219][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.014082][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.020949][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.027780][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.034670][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.041553][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.048388][ T31] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 29.055810][ T31] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.0a Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 29.066908][ T31] acrux 0003:1A34:0802.0003: no inputs found [ 29.072947][ T31] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 29.141957][ T31] usb 4-1: USB disconnect, device number 2 [ 29.150107][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.173186][ T420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.181708][ T420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.320635][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.330797][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.339733][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 29.348780][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.358637][ T9] usb 1-1: 0:1 : does not exist [ 29.379791][ T421] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 29.387500][ T421] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 29.554682][ T491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=491 comm=syz.3.64 [ 29.567468][ T491] netlink: 80 bytes leftover after parsing attributes in process `syz.3.64'. [ 29.570761][ T421] usb 1-1: USB disconnect, device number 3 [ 29.601571][ T9] usb 2-1: USB disconnect, device number 4 [ 29.607421][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 30.329455][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.359454][ T421] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.490443][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 30.501497][ T9] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 30.510585][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.518566][ T9] usb 1-1: Product: syz [ 30.519475][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.522742][ T9] usb 1-1: Manufacturer: syz [ 30.522760][ T9] usb 1-1: SerialNumber: syz [ 30.531531][ T421] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.539101][ T9] ums-karma 1-1:1.0: USB Mass Storage device detected [ 30.539723][ T421] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.556049][ T9] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 30.556049][ T9] Please send a copy of this message to and [ 30.559454][ T421] usb 2-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 30.600938][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.609619][ T421] usb 2-1: config 0 descriptor?? [ 30.669452][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.909540][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.017461][ T421] apple 0003:05AC:021C.0004: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 31.029773][ T421] input: HID 05ac:021c as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:021C.0004/input/input5 [ 31.046668][ T421] apple 0003:05AC:021C.0004: input,hidraw0: USB HID v36.2c Joystick [HID 05ac:021c] on usb-dummy_hcd.1-1/input0 [ 31.149464][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.227317][ T67] usb 2-1: USB disconnect, device number 5 [ 31.289452][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.359442][ T421] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 31.510879][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.518954][ T421] usb 3-1: not running at top speed; connect to a high speed hub [ 31.527345][ T421] usb 3-1: config index 0 descriptor too short (expected 138, got 13) [ 31.535557][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.541830][ T421] usb 3-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 31.551928][ T421] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 31.562257][ T421] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 31.571313][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.579290][ T421] usb 3-1: Product: syz [ 31.583457][ T421] usb 3-1: Manufacturer: syz [ 31.588047][ T421] usb 3-1: SerialNumber: syz [ 31.669514][ T31] usb usb4-port1: attempt power cycle [ 31.979440][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.009444][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.030449][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.140496][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.151441][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.160494][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.168987][ T9] usb 2-1: config 0 descriptor?? [ 32.172437][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.377098][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 32.383112][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.391728][ T9] usb 2-1: USB disconnect, device number 6 [ 32.419456][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.440441][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.570431][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.689658][ T31] usb usb4-port1: unable to enumerate USB device [ 32.819436][ T421] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.970484][ T421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.981450][ T421] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 32.990492][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.998999][ T421] usb 2-1: config 0 descriptor?? [ 33.095895][ T31] usb 1-1: USB disconnect, device number 4 [ 33.110047][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 33.110072][ T36] audit: type=1400 audit(1793818664.510:219): avc: denied { create } for pid=533 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 33.136460][ T36] audit: type=1400 audit(1793818664.510:220): avc: denied { create } for pid=533 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 33.161822][ T36] audit: type=1400 audit(1793818664.560:221): avc: denied { execute } for pid=538 comm="syz.0.82" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.198165][ T36] audit: type=1400 audit(1793818664.590:222): avc: denied { append } for pid=540 comm="syz.0.83" name="uprobe_events" dev="tracefs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.221254][ T36] audit: type=1400 audit(1793818664.590:223): avc: denied { create } for pid=542 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.240506][ T36] audit: type=1400 audit(1793818664.600:224): avc: denied { read write } for pid=542 comm="syz.3.84" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.263805][ T36] audit: type=1400 audit(1793818664.600:225): avc: denied { open } for pid=542 comm="syz.3.84" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.265330][ T549] FAULT_INJECTION: forcing a failure. [ 33.265330][ T549] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.300352][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.0.83 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 33.300380][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.300392][ T549] Call Trace: [ 33.300397][ T549] [ 33.300404][ T549] __dump_stack+0x21/0x30 [ 33.300426][ T549] dump_stack_lvl+0x140/0x1c0 [ 33.300444][ T549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.300463][ T549] dump_stack+0x19/0x20 [ 33.300479][ T549] should_fail_ex+0x3c2/0x510 [ 33.300505][ T549] should_fail_alloc_page+0xec/0x110 [ 33.300526][ T549] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.300549][ T549] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.300572][ T549] ? kasan_save_alloc_info+0x3a/0x50 [ 33.300596][ T549] ? __kmalloc_node_noprof+0x252/0x500 [ 33.300622][ T549] ? __rb_allocate_pages+0x428/0x1270 [ 33.300649][ T549] __rb_allocate_pages+0x6c6/0x1270 [ 33.300673][ T549] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 33.300696][ T549] ring_buffer_resize+0x501/0x1110 [ 33.300723][ T549] __tracing_resize_ring_buffer+0xa4/0x2f0 [ 33.300744][ T549] tracing_update_buffers+0x6f/0xa0 [ 33.300770][ T549] event_enable_write+0x1a2/0x290 [ 33.300794][ T549] ? __kasan_check_write+0x18/0x20 [ 33.300819][ T549] ? __cfi_event_enable_write+0x10/0x10 [ 33.300844][ T549] ? bpf_lsm_file_permission+0xd/0x20 [ 33.300865][ T549] ? __cfi_event_enable_write+0x10/0x10 [ 33.300889][ T549] vfs_write+0x3c1/0xfd0 [ 33.300914][ T549] ? __cfi_vfs_write+0x10/0x10 [ 33.300943][ T549] ? __kasan_check_write+0x18/0x20 [ 33.300968][ T549] ? mutex_lock+0x97/0x1d0 [ 33.300990][ T549] ? __cfi_mutex_lock+0x10/0x10 [ 33.301015][ T549] ksys_write+0x145/0x260 [ 33.301032][ T549] ? __cfi_ksys_write+0x10/0x10 [ 33.301049][ T549] ? __kasan_check_read+0x15/0x20 [ 33.301073][ T549] __x64_sys_write+0x7f/0x90 [ 33.301090][ T549] x64_sys_call+0x271c/0x2ee0 [ 33.301111][ T549] do_syscall_64+0x57/0xf0 [ 33.301128][ T549] ? clear_bhb_loop+0x50/0xa0 [ 33.301153][ T549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.301176][ T549] RIP: 0033:0x7f9212b9fb19 [ 33.301202][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.301217][ T549] RSP: 002b:00007f92139ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.301237][ T549] RAX: ffffffffffffffda RBX: 00007f9212e26090 RCX: 00007f9212b9fb19 [ 33.301249][ T549] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000006 [ 33.301261][ T549] RBP: 00007f92139ae090 R08: 0000000000000000 R09: 0000000000000000 [ 33.301274][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.301286][ T549] R13: 00007f9212e26128 R14: 00007f9212e26090 R15: 00007fff364d2ef8 [ 33.301302][ T549] [ 33.604415][ T550] event trace: Could not enable event p [ 33.666208][ T555] x_tables: duplicate entry at hook 1 [ 33.783693][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.792218][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.829430][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.929442][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.979431][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 33.985478][ T310] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 33.993784][ T310] usb 1-1: config 179 has no interface number 0 [ 33.999811][ T421] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 34.000153][ T310] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 34.007746][ T421] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 34.018742][ T310] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 34.038423][ T310] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.049661][ T310] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 34.061100][ T310] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 34.074439][ T310] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 34.083535][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.092615][ T552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.109430][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 34.115578][ T31] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 34.123892][ T31] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 34.130225][ T310] usb 3-1: USB disconnect, device number 4 [ 34.134267][ T31] usb 4-1: config 32 has no interface number 0 [ 34.147236][ T31] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 34.156329][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.167568][ T31] usb 4-1: Found UVC 0.00 device (0bd3:0569) [ 34.174498][ T31] usb 4-1: No valid video chain found. [ 34.297083][ T31] usb 2-1: USB disconnect, device number 7 [ 34.297171][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 34.369117][ T36] audit: type=1400 audit(1793818665.760:226): avc: denied { mounton } for pid=558 comm="syz.3.89" path="/29/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 34.371286][ T559] Zero length message leads to an empty skb [ 34.407517][ T421] usb 4-1: USB disconnect, device number 7 [ 34.489452][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.524585][ T31] usb 1-1: USB disconnect, device number 5 [ 34.524604][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 34.539183][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 34.639433][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 34.645597][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.655699][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.665232][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 34.674291][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.682295][ T310] usb 3-1: SerialNumber: syz [ 34.688641][ T310] usb 3-1: 0:2 : does not exist [ 34.849052][ T573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 34.858445][ T36] audit: type=1400 audit(1793818666.250:227): avc: denied { listen } for pid=571 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.877777][ T36] audit: type=1400 audit(1793818666.250:228): avc: denied { connect } for pid=571 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.899783][ T561] device-mapper: table: 252:1: crypt: Not enough arguments (-EINVAL) [ 34.907974][ T561] device-mapper: ioctl: error adding target to table [ 34.923206][ T561] device-mapper: table: 252:1: striped: Target length not divisible by number of stripes (-EINVAL) [ 34.934101][ T561] device-mapper: ioctl: error adding target to table [ 34.938467][ T578] FAULT_INJECTION: forcing a failure. [ 34.938467][ T578] name failslab, interval 1, probability 0, space 0, times 0 [ 34.953614][ T578] CPU: 1 UID: 0 PID: 578 Comm: syz.1.96 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 34.953645][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.953657][ T578] Call Trace: [ 34.953662][ T578] [ 34.953669][ T578] __dump_stack+0x21/0x30 [ 34.953692][ T578] dump_stack_lvl+0x140/0x1c0 [ 34.953709][ T578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.953728][ T578] ? __kasan_kmalloc+0x96/0xb0 [ 34.953748][ T578] dump_stack+0x19/0x20 [ 34.953764][ T578] should_fail_ex+0x3c2/0x510 [ 34.953789][ T578] should_failslab+0xac/0x100 [ 34.953807][ T578] __kmalloc_cache_noprof+0x41/0x470 [ 34.953832][ T578] ? apply_subsystem_event_filter+0x330/0x1190 [ 34.953853][ T578] ? strim+0xf0/0x1d0 [ 34.953875][ T578] apply_subsystem_event_filter+0x330/0x1190 [ 34.953893][ T578] ? avc_policy_seqno+0xd/0x30 [ 34.953915][ T578] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 34.953934][ T578] ? should_fail+0xf/0x20 [ 34.953950][ T578] ? _copy_from_user+0x87/0xa0 [ 34.953970][ T578] ? memdup_user_nul+0xad/0x1a0 [ 34.953993][ T578] ? subsystem_filter_write+0x57/0xf0 [ 34.954018][ T578] subsystem_filter_write+0x99/0xf0 [ 34.954041][ T578] ? __cfi_subsystem_filter_write+0x10/0x10 [ 34.954066][ T578] vfs_write+0x3c1/0xfd0 [ 34.954092][ T578] ? __cfi_vfs_write+0x10/0x10 [ 34.954116][ T578] ? __kasan_check_write+0x18/0x20 [ 34.954140][ T578] ? mutex_lock+0x97/0x1d0 [ 34.954163][ T578] ? __cfi_mutex_lock+0x10/0x10 [ 34.954187][ T578] ksys_write+0x145/0x260 [ 34.954204][ T578] ? xfd_validate_state+0x68/0x140 [ 34.954222][ T578] ? __cfi_ksys_write+0x10/0x10 [ 34.954239][ T578] ? __kasan_check_write+0x18/0x20 [ 34.954264][ T578] ? fpregs_restore_userregs+0x11c/0x260 [ 34.954290][ T578] __x64_sys_write+0x7f/0x90 [ 34.954307][ T578] x64_sys_call+0x271c/0x2ee0 [ 34.954328][ T578] do_syscall_64+0x57/0xf0 [ 34.954347][ T578] ? clear_bhb_loop+0x50/0xa0 [ 34.954373][ T578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.954397][ T578] RIP: 0033:0x7fb08bb9fb19 [ 34.954414][ T578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.954429][ T578] RSP: 002b:00007fb08c9c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 34.954460][ T578] RAX: ffffffffffffffda RBX: 00007fb08be25fa0 RCX: 00007fb08bb9fb19 [ 34.954475][ T578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 34.954487][ T578] RBP: 00007fb08bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.954500][ T578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.954512][ T578] R13: 00007fb08be26038 R14: 00007fb08be25fa0 R15: 00007ffd0b2944b8 [ 34.954528][ T578] [ 35.304868][ T596] overlayfs: upper fs does not support file handles, falling back to index=off. [ 35.313969][ T596] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 35.337601][ T598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=598 comm=syz.3.103 [ 35.483194][ T421] usb 3-1: USB disconnect, device number 5 [ 35.509474][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.524646][ T609] FAULT_INJECTION: forcing a failure. [ 35.524646][ T609] name failslab, interval 1, probability 0, space 0, times 0 [ 35.537316][ T609] CPU: 0 UID: 0 PID: 609 Comm: syz.3.108 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 35.537344][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.537358][ T609] Call Trace: [ 35.537364][ T609] [ 35.537371][ T609] __dump_stack+0x21/0x30 [ 35.537403][ T609] dump_stack_lvl+0x140/0x1c0 [ 35.537422][ T609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.537442][ T609] dump_stack+0x19/0x20 [ 35.537457][ T609] should_fail_ex+0x3c2/0x510 [ 35.537473][ T609] should_failslab+0xac/0x100 [ 35.537484][ T609] __kmalloc_cache_noprof+0x41/0x470 [ 35.537500][ T609] ? create_filter_start+0x175/0x380 [ 35.537511][ T609] ? kstrdup+0x7b/0x130 [ 35.537523][ T609] create_filter_start+0x175/0x380 [ 35.537533][ T609] ? strim+0xf0/0x1d0 [ 35.537545][ T609] apply_subsystem_event_filter+0x1c2/0x1190 [ 35.537557][ T609] ? avc_policy_seqno+0xd/0x30 [ 35.537568][ T609] ? __check_object_size+0xe6/0x870 [ 35.537582][ T609] ? __kasan_kmalloc+0x96/0xb0 [ 35.537593][ T609] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 35.537603][ T609] ? should_fail+0xf/0x20 [ 35.537612][ T609] ? __kasan_check_write+0x18/0x20 [ 35.537625][ T609] ? _copy_from_user+0x87/0xa0 [ 35.537636][ T609] ? memdup_user_nul+0xad/0x1a0 [ 35.537648][ T609] ? subsystem_filter_write+0x57/0xf0 [ 35.537662][ T609] subsystem_filter_write+0x99/0xf0 [ 35.537676][ T609] ? __cfi_subsystem_filter_write+0x10/0x10 [ 35.537689][ T609] vfs_write+0x3c1/0xfd0 [ 35.537703][ T609] ? __cfi_vfs_write+0x10/0x10 [ 35.537717][ T609] ? __kasan_check_write+0x18/0x20 [ 35.537730][ T609] ? mutex_lock+0x97/0x1d0 [ 35.537742][ T609] ? __cfi_mutex_lock+0x10/0x10 [ 35.537755][ T609] ksys_write+0x145/0x260 [ 35.537763][ T609] ? __cfi_ksys_write+0x10/0x10 [ 35.537772][ T609] ? __kasan_check_write+0x18/0x20 [ 35.537785][ T609] ? __kasan_check_write+0x18/0x20 [ 35.537798][ T609] ? fpregs_restore_userregs+0x11c/0x260 [ 35.537812][ T609] __x64_sys_write+0x7f/0x90 [ 35.537821][ T609] x64_sys_call+0x271c/0x2ee0 [ 35.537832][ T609] do_syscall_64+0x57/0xf0 [ 35.537842][ T609] ? clear_bhb_loop+0x50/0xa0 [ 35.537855][ T609] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.537868][ T609] RIP: 0033:0x7f11a4f9fb19 [ 35.537878][ T609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.537886][ T609] RSP: 002b:00007f11a5f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.537901][ T609] RAX: ffffffffffffffda RBX: 00007f11a5225fa0 RCX: 00007f11a4f9fb19 [ 35.537909][ T609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 35.537915][ T609] RBP: 00007f11a5037b70 R08: 0000000000000000 R09: 0000000000000000 [ 35.537922][ T609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.537928][ T609] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 35.537937][ T609] [ 35.828730][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.878905][ T611] overlayfs: failed to resolve 'subj_type=){': -2 [ 35.896583][ T611] rust_binder: 610:611 error while translating object: ENOENT [ 35.904120][ T611] rust_binder: 610:611 transaction async to 610:0 failed ENOENT, code 1073741825 size 72-24 line thread.rs:878 [ 35.920748][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.931678][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.940730][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.949240][ T10] usb 2-1: config 0 descriptor?? [ 35.980478][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.991697][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.001462][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.014367][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.023419][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.032179][ T9] usb 1-1: config 0 descriptor?? [ 36.157277][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 36.163275][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.172076][ T10] usb 2-1: USB disconnect, device number 8 [ 36.299485][ T562] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.388966][ T421] rust_binder: 624: undelivered TRANSACTION_COMPLETE [ 36.430676][ T10] rust_binder: 626: undelivered TRANSACTION_COMPLETE [ 36.446832][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 36.454307][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.461797][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 36.469488][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 36.478670][ T562] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 36.489147][ T9] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.501711][ T562] usb 4-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 36.515328][ T562] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 36.527339][ T562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.535368][ T562] usb 4-1: Product: syz [ 36.539556][ T562] usb 4-1: Manufacturer: syz [ 36.544163][ T562] usb 4-1: SerialNumber: syz [ 36.609508][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.699903][ T600] fuse: Unknown parameter 'fS4™xx'{ ÑS<+Iw® ÉŽ}E3”‹' [ 36.708949][ T421] usb 1-1: USB disconnect, device number 6 [ 36.753762][ T562] usb 4-1: USB disconnect, device number 8 [ 36.763897][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.775174][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 36.784310][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.793011][ T31] usb 2-1: config 0 descriptor?? [ 36.871143][ T634] FAULT_INJECTION: forcing a failure. [ 36.871143][ T634] name failslab, interval 1, probability 0, space 0, times 0 [ 36.883833][ T634] CPU: 0 UID: 0 PID: 634 Comm: syz.2.117 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 36.883861][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.883872][ T634] Call Trace: [ 36.883878][ T634] [ 36.883885][ T634] __dump_stack+0x21/0x30 [ 36.883907][ T634] dump_stack_lvl+0x140/0x1c0 [ 36.883923][ T634] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.883940][ T634] dump_stack+0x19/0x20 [ 36.883954][ T634] should_fail_ex+0x3c2/0x510 [ 36.883980][ T634] should_failslab+0xac/0x100 [ 36.883999][ T634] __kmalloc_cache_noprof+0x41/0x470 [ 36.884026][ T634] ? create_filter_start+0x175/0x380 [ 36.884046][ T634] ? kstrdup+0x7b/0x130 [ 36.884071][ T634] create_filter_start+0x175/0x380 [ 36.884090][ T634] ? strim+0xf0/0x1d0 [ 36.884113][ T634] apply_subsystem_event_filter+0x1c2/0x1190 [ 36.884134][ T634] ? avc_policy_seqno+0xd/0x30 [ 36.884155][ T634] ? __check_object_size+0xe6/0x870 [ 36.884179][ T634] ? __kasan_kmalloc+0x96/0xb0 [ 36.884192][ T634] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 36.884203][ T634] ? should_fail+0xf/0x20 [ 36.884211][ T634] ? __kasan_check_write+0x18/0x20 [ 36.884224][ T634] ? _copy_from_user+0x87/0xa0 [ 36.884236][ T634] ? memdup_user_nul+0xad/0x1a0 [ 36.884258][ T634] ? subsystem_filter_write+0x57/0xf0 [ 36.884286][ T634] subsystem_filter_write+0x99/0xf0 [ 36.884312][ T634] ? __cfi_subsystem_filter_write+0x10/0x10 [ 36.884332][ T634] vfs_write+0x3c1/0xfd0 [ 36.884346][ T634] ? __cfi_vfs_write+0x10/0x10 [ 36.884360][ T634] ? __kasan_check_write+0x18/0x20 [ 36.884373][ T634] ? mutex_lock+0x97/0x1d0 [ 36.884387][ T634] ? __cfi_mutex_lock+0x10/0x10 [ 36.884422][ T634] ksys_write+0x145/0x260 [ 36.884439][ T634] ? __cfi_ksys_write+0x10/0x10 [ 36.884456][ T634] ? __kasan_check_write+0x18/0x20 [ 36.884476][ T634] ? __kasan_check_write+0x18/0x20 [ 36.884491][ T634] ? fpregs_restore_userregs+0x11c/0x260 [ 36.884506][ T634] __x64_sys_write+0x7f/0x90 [ 36.884515][ T634] x64_sys_call+0x271c/0x2ee0 [ 36.884526][ T634] do_syscall_64+0x57/0xf0 [ 36.884542][ T634] ? clear_bhb_loop+0x50/0xa0 [ 36.884569][ T634] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.884593][ T634] RIP: 0033:0x7fd2b4b9fb19 [ 36.884610][ T634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.884619][ T634] RSP: 002b:00007fd2b35e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.884632][ T634] RAX: ffffffffffffffda RBX: 00007fd2b4e25fa0 RCX: 00007fd2b4b9fb19 [ 36.884640][ T634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 36.884646][ T634] RBP: 00007fd2b4c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 36.884652][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.884659][ T634] R13: 00007fd2b4e26038 R14: 00007fd2b4e25fa0 R15: 00007ffe98e04368 [ 36.884668][ T634] [ 37.316041][ T653] FAULT_INJECTION: forcing a failure. [ 37.316041][ T653] name failslab, interval 1, probability 0, space 0, times 0 [ 37.329098][ T653] CPU: 0 UID: 0 PID: 653 Comm: syz.3.126 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.329130][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.329143][ T653] Call Trace: [ 37.329150][ T653] [ 37.329159][ T653] __dump_stack+0x21/0x30 [ 37.329183][ T653] dump_stack_lvl+0x140/0x1c0 [ 37.329202][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.329222][ T653] dump_stack+0x19/0x20 [ 37.329239][ T653] should_fail_ex+0x3c2/0x510 [ 37.329268][ T653] should_failslab+0xac/0x100 [ 37.329289][ T653] __kmalloc_cache_noprof+0x41/0x470 [ 37.329328][ T653] ? create_filter_start+0x175/0x380 [ 37.329351][ T653] ? kstrdup+0x7b/0x130 [ 37.329375][ T653] create_filter_start+0x175/0x380 [ 37.329397][ T653] ? strim+0xf0/0x1d0 [ 37.329421][ T653] apply_subsystem_event_filter+0x1c2/0x1190 [ 37.329443][ T653] ? avc_policy_seqno+0xd/0x30 [ 37.329464][ T653] ? __check_object_size+0xe6/0x870 [ 37.329490][ T653] ? __kasan_kmalloc+0x96/0xb0 [ 37.329510][ T653] ? __cfi_apply_subsystem_event_filter+0x10/0x10 [ 37.329532][ T653] ? should_fail+0xf/0x20 [ 37.329547][ T653] ? __kasan_check_write+0x18/0x20 [ 37.329571][ T653] ? _copy_from_user+0x87/0xa0 [ 37.329590][ T653] ? memdup_user_nul+0xad/0x1a0 [ 37.329611][ T653] ? subsystem_filter_write+0x57/0xf0 [ 37.329637][ T653] subsystem_filter_write+0x99/0xf0 [ 37.329662][ T653] ? __cfi_subsystem_filter_write+0x10/0x10 [ 37.329687][ T653] vfs_write+0x3c1/0xfd0 [ 37.329712][ T653] ? __cfi_vfs_write+0x10/0x10 [ 37.329748][ T653] ? __kasan_check_write+0x18/0x20 [ 37.329771][ T653] ? mutex_lock+0x97/0x1d0 [ 37.329794][ T653] ? __cfi_mutex_lock+0x10/0x10 [ 37.329819][ T653] ksys_write+0x145/0x260 [ 37.329834][ T653] ? __cfi_ksys_write+0x10/0x10 [ 37.329848][ T653] ? __kasan_check_write+0x18/0x20 [ 37.329869][ T653] ? __kasan_check_write+0x18/0x20 [ 37.329891][ T653] ? fpregs_restore_userregs+0x11c/0x260 [ 37.329915][ T653] __x64_sys_write+0x7f/0x90 [ 37.329930][ T653] x64_sys_call+0x271c/0x2ee0 [ 37.329950][ T653] do_syscall_64+0x57/0xf0 [ 37.329967][ T653] ? clear_bhb_loop+0x50/0xa0 [ 37.329991][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.330013][ T653] RIP: 0033:0x7f11a4f9fb19 [ 37.330030][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.330045][ T653] RSP: 002b:00007f11a5f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.330067][ T653] RAX: ffffffffffffffda RBX: 00007f11a5225fa0 RCX: 00007f11a4f9fb19 [ 37.330081][ T653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 37.330091][ T653] RBP: 00007f11a5037b70 R08: 0000000000000000 R09: 0000000000000000 [ 37.330102][ T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.330113][ T653] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 37.330129][ T653] [ 37.583116][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.627659][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.651922][ T659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 37.661779][ T661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 37.707996][ T673] FAULT_INJECTION: forcing a failure. [ 37.707996][ T673] name failslab, interval 1, probability 0, space 0, times 0 [ 37.720701][ T673] CPU: 1 UID: 0 PID: 673 Comm: syz.3.133 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.720732][ T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.720729][ T562] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 37.720744][ T673] Call Trace: [ 37.720751][ T673] [ 37.720758][ T673] __dump_stack+0x21/0x30 [ 37.720783][ T673] dump_stack_lvl+0x140/0x1c0 [ 37.720800][ T673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.720821][ T673] dump_stack+0x19/0x20 [ 37.720837][ T673] should_fail_ex+0x3c2/0x510 [ 37.720865][ T673] ? security_prepare_creds+0x66/0x260 [ 37.720892][ T673] should_failslab+0xac/0x100 [ 37.720911][ T673] __kmalloc_noprof+0x69/0x510 [ 37.720936][ T673] ? kasan_save_alloc_info+0x3a/0x50 [ 37.720960][ T673] ? security_prepare_creds+0x66/0x260 [ 37.720986][ T673] ? __kasan_slab_alloc+0x73/0x90 [ 37.721005][ T673] security_prepare_creds+0x66/0x260 [ 37.721032][ T673] prepare_creds+0x46d/0x6b0 [ 37.721055][ T673] __se_sys_keyctl+0x495/0xe40 [ 37.721076][ T673] ? __x64_sys_keyctl+0xf0/0xf0 [ 37.721095][ T673] ? __secure_computing+0x2b0/0x2b0 [ 37.721113][ T673] ? __cfi_do_futex+0x10/0x10 [ 37.721131][ T673] ? mutex_unlock+0x90/0x240 [ 37.721156][ T673] ? __x64_sys_futex+0x110/0x110 [ 37.721175][ T673] ? __cfi_ksys_read+0x10/0x10 [ 37.721202][ T673] __x64_sys_keyctl+0xc3/0xf0 [ 37.721222][ T673] x64_sys_call+0x996/0x2ee0 [ 37.721241][ T673] do_syscall_64+0x57/0xf0 [ 37.721260][ T673] ? clear_bhb_loop+0x50/0xa0 [ 37.721284][ T673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.721308][ T673] RIP: 0033:0x7f11a4f9fb19 [ 37.721323][ T673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.721338][ T673] RSP: 002b:00007f11a5f24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 37.721358][ T673] RAX: ffffffffffffffda RBX: 00007f11a5225fa0 RCX: 00007f11a4f9fb19 [ 37.721372][ T673] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 37.721384][ T673] RBP: 00007f11a5037b70 R08: 0000000000000000 R09: 0000000000000000 [ 37.721396][ T673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.721407][ T673] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 37.721423][ T673] [ 37.749815][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 37.910895][ T562] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.925140][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 37.928561][ T562] usb 3-1: not running at top speed; connect to a high speed hub [ 37.984540][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.995002][ T562] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 134, changing to 4 [ 38.007543][ T562] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 38.016619][ T562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.024649][ T562] usb 3-1: Product: syz [ 38.028899][ T562] usb 3-1: Manufacturer: syz [ 38.033527][ T562] usb 3-1: SerialNumber: syz [ 38.139430][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 38.145614][ T10] usb 1-1: config 5 has an invalid descriptor of length 52, skipping remainder of the config [ 38.147798][ T31] usb 2-1: USB disconnect, device number 9 [ 38.155822][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.156252][ T10] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 38.181396][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 9.3a [ 38.190468][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.198466][ T10] usb 1-1: Product: syz [ 38.202651][ T10] usb 1-1: Manufacturer: syz [ 38.207246][ T10] usb 1-1: SerialNumber: syz [ 38.240863][ T649] rust_binder: 648:649 no such ref 2 [ 38.246374][ T649] rust_binder: 648:649 got transaction to invalid handle 1 [ 38.253658][ T649] rust_binder: 648:649 transaction async to 0:0 failed ENOENT, code 0 size 72-24 line process.rs:958 [ 38.266611][ T9] rust_binder: 648: undelivered TRANSACTION_ERROR: 29201 [ 38.274323][ T562] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 38.285813][ T562] usb 3-1: USB disconnect, device number 6 [ 38.553348][ T10] usb 1-1: USB disconnect, device number 7 [ 38.663918][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 38.674566][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 38.674583][ T36] audit: type=1400 audit(1793818670.070:247): avc: denied { read } for pid=690 comm="syz.3.140" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.674924][ T691] MTRR 1 not used [ 38.686929][ T36] audit: type=1400 audit(1793818670.070:248): avc: denied { open } for pid=690 comm="syz.3.140" path="/53/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.733886][ T36] audit: type=1400 audit(1793818670.070:249): avc: denied { ioctl } for pid=690 comm="syz.3.140" path="/53/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.736812][ T693] tipc: Started in network mode [ 38.760280][ T36] audit: type=1400 audit(1793818670.100:250): avc: denied { shutdown } for pid=690 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.765028][ T693] tipc: Node identity 7f000001, cluster identity 4711 [ 38.783825][ T695] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syzd0 [ 38.790439][ T693] tipc: Enabling of bearer rejected, failed to enable media [ 38.809142][ T36] audit: type=1400 audit(1793818670.100:251): avc: denied { getopt } for pid=690 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.813673][ T696] netlink: 88 bytes leftover after parsing attributes in process `syz.1.141'. [ 38.831366][ T698] fuse: Bad value for 'fd' [ 38.845080][ T698] device-mapper: table: 252:2: crypt: Bad cipher specification (-EINVAL) [ 38.853627][ T698] device-mapper: ioctl: error adding target to table [ 38.861132][ T36] audit: type=1400 audit(1793818670.260:252): avc: denied { append } for pid=697 comm="syz.2.143" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.883722][ T36] audit: type=1400 audit(1793818670.260:253): avc: denied { open } for pid=697 comm="syz.2.143" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.039444][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.099455][ T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 39.200465][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.211412][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.221144][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.229440][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 39.234055][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.241775][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.250619][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.265310][ T31] usb 4-1: config 0 descriptor?? [ 39.309440][ T562] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.379516][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.439435][ T562] usb 1-1: device descriptor read/64, error -71 [ 39.489439][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.619522][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.672910][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 39.678867][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 39.688248][ T31] usb 4-1: USB disconnect, device number 9 [ 39.689433][ T562] usb 1-1: device descriptor read/64, error -71 [ 39.729458][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 39.859462][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.867096][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.939535][ T562] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.999444][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.069470][ T562] usb 1-1: device descriptor read/64, error -71 [ 40.109456][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.219507][ T9] usb usb3-port1: attempt power cycle [ 40.248711][ T36] audit: type=1400 audit(1793818671.640:254): avc: denied { remount } for pid=709 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.268309][ T10] usb 2-1: device descriptor read/64, error -71 [ 40.278263][ T36] audit: type=1400 audit(1793818671.670:255): avc: denied { mount } for pid=711 comm="syz.3.149" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 40.301867][ T36] audit: type=1400 audit(1793818671.700:256): avc: denied { mounton } for pid=711 comm="syz.3.149" path="/58/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.329463][ T562] usb 1-1: device descriptor read/64, error -71 [ 40.379605][ T10] usb usb2-port1: attempt power cycle [ 40.439507][ T562] usb usb1-port1: attempt power cycle [ 40.569441][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 40.590458][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.629478][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.719553][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 40.727958][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.740372][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.779458][ T562] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 40.780508][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.797918][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.806958][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.810476][ T562] usb 1-1: device descriptor read/8, error -71 [ 40.815904][ T31] usb 4-1: config 0 descriptor?? [ 40.870471][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.950517][ T562] usb 1-1: device descriptor read/8, error -71 [ 40.969448][ T9] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 40.990454][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.028454][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 41.034740][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.043946][ T31] usb 4-1: USB disconnect, device number 10 [ 41.119457][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.128075][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.140556][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.189463][ T562] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.210413][ T562] usb 1-1: device descriptor read/8, error -71 [ 41.239507][ T9] usb usb3-port1: unable to enumerate USB device [ 41.270434][ T10] usb 2-1: device descriptor read/8, error -71 [ 41.340405][ T562] usb 1-1: device descriptor read/8, error -71 [ 41.379522][ T10] usb usb2-port1: unable to enumerate USB device [ 41.449504][ T562] usb usb1-port1: unable to enumerate USB device [ 41.479437][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.630455][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.641400][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.650442][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.658912][ T31] usb 4-1: config 0 descriptor?? [ 41.938506][ T726] FAULT_INJECTION: forcing a failure. [ 41.938506][ T726] name failslab, interval 1, probability 0, space 0, times 0 [ 41.951170][ T726] CPU: 0 UID: 0 PID: 726 Comm: syz.2.152 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 41.951199][ T726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.951210][ T726] Call Trace: [ 41.951217][ T726] [ 41.951223][ T726] __dump_stack+0x21/0x30 [ 41.951244][ T726] dump_stack_lvl+0x140/0x1c0 [ 41.951259][ T726] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.951275][ T726] dump_stack+0x19/0x20 [ 41.951290][ T726] should_fail_ex+0x3c2/0x510 [ 41.951315][ T726] should_failslab+0xac/0x100 [ 41.951333][ T726] kmem_cache_alloc_noprof+0x42/0x410 [ 41.951360][ T726] ? __es_insert_extent+0x6f9/0x17a0 [ 41.951378][ T726] __es_insert_extent+0x6f9/0x17a0 [ 41.951398][ T726] ext4_es_insert_extent+0x576/0x2760 [ 41.951419][ T726] ? __cfi_ext4_es_insert_extent+0x10/0x10 [ 41.951439][ T726] ext4_map_blocks+0xb71/0x17f0 [ 41.951457][ T726] ? ext4_xattr_get+0x45e/0x6b0 [ 41.951469][ T726] ? __cfi_ext4_map_blocks+0x10/0x10 [ 41.951491][ T726] ? jbd2__journal_start+0x3c9/0x860 [ 41.951512][ T726] ext4_alloc_file_blocks+0x3ca/0xc80 [ 41.951541][ T726] ? ext4_es_is_delayed+0x60/0x60 [ 41.951565][ T726] ? inode_newsize_ok+0x19d/0x1d0 [ 41.951580][ T726] ext4_fallocate+0x447/0xb10 [ 41.951594][ T726] vfs_fallocate+0x533/0x620 [ 41.951605][ T726] __x64_sys_fallocate+0xc3/0x110 [ 41.951615][ T726] x64_sys_call+0x2e48/0x2ee0 [ 41.951629][ T726] do_syscall_64+0x57/0xf0 [ 41.951648][ T726] ? clear_bhb_loop+0x50/0xa0 [ 41.951674][ T726] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.951698][ T726] RIP: 0033:0x7fd2b4b9fb19 [ 41.951710][ T726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.951719][ T726] RSP: 002b:00007fd2b35e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 41.951731][ T726] RAX: ffffffffffffffda RBX: 00007fd2b4e25fa0 RCX: 00007fd2b4b9fb19 [ 41.951739][ T726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 41.951745][ T726] RBP: 00007fd2b35e3090 R08: 0000000000000000 R09: 0000000000000000 [ 41.951752][ T726] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 41.951758][ T726] R13: 00007fd2b4e26038 R14: 00007fd2b4e25fa0 R15: 00007ffe98e04368 [ 41.951768][ T726] [ 42.205958][ T728] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'. [ 42.349000][ T741] fuse: Unknown parameter 'goup_id' [ 42.389866][ T721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.398302][ T721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.523847][ T752] rust_binder: 747:752 error while translating object: ENOENT [ 42.531382][ T752] rust_binder: 747:752 transaction async to 747:0 failed ENOENT, code 0 size 88-24 line thread.rs:878 [ 42.589443][ T562] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 42.589812][ T31] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 42.604381][ T31] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 42.739426][ T562] usb 1-1: Using ep0 maxpacket: 8 [ 42.745493][ T562] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 42.755417][ T562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 42.767747][ T562] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 42.776795][ T562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.784794][ T562] usb 1-1: Product: syz [ 42.788965][ T562] usb 1-1: Manufacturer: syz [ 42.794080][ T562] usb 1-1: SerialNumber: syz [ 42.799743][ T731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 42.818328][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 42.826480][ T9] usb 4-1: USB disconnect, device number 11 [ 43.016487][ T562] usb 1-1: USB disconnect, device number 12 [ 43.579444][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.730842][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.742161][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.752484][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.763385][ T9] usb 3-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 43.772473][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.780472][ T9] usb 3-1: Product: syz [ 43.784612][ T9] usb 3-1: Manufacturer: syz [ 43.789182][ T9] usb 3-1: SerialNumber: syz [ 44.139446][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.258825][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 44.258843][ T36] audit: type=1400 audit(1793818675.650:265): avc: denied { create } for pid=785 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.287888][ T36] audit: type=1400 audit(1793818675.660:266): avc: denied { sys_admin } for pid=785 comm="syz.3.174" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 44.290449][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.323888][ T421] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 44.339667][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.348991][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.359720][ T31] usb 2-1: config 0 descriptor?? [ 44.490549][ T421] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.502251][ T421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.511427][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.519466][ T421] usb 1-1: Product: syz [ 44.523736][ T421] usb 1-1: Manufacturer: syz [ 44.528377][ T421] usb 1-1: SerialNumber: syz [ 44.569263][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 44.575751][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 44.588779][ T31] usb 2-1: USB disconnect, device number 14 [ 44.997011][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.143508][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.154467][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 45.163523][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.172226][ T31] usb 2-1: config 0 descriptor?? [ 45.315796][ T36] audit: type=1400 audit(1793818676.732:267): avc: denied { setcurrent } for pid=783 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.316740][ T784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.343555][ T784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.357515][ T421] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 45.375411][ T421] cdc_ncm 1-1:1.0: bind() failure [ 45.381284][ T421] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 45.388095][ T421] cdc_ncm 1-1:1.1: bind() failure [ 45.394304][ T421] usb 1-1: USB disconnect, device number 13 [ 45.761024][ T780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.769527][ T780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.958102][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 45.973052][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 46.183591][ T421] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 46.204156][ T31] usb 2-1: USB disconnect, device number 15 [ 46.204210][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 46.375570][ T421] usb 1-1: Using ep0 maxpacket: 32 [ 46.397607][ T421] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 46.406320][ T9] usb 3-1: USB disconnect, device number 11 [ 46.414938][ T800] random: crng reseeded on system resumption [ 46.417462][ T421] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.420965][ T36] audit: type=1400 audit(1793818677.844:268): avc: denied { write } for pid=799 comm="syz.2.179" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.445134][ T421] usb 1-1: config 0 interface 0 has no altsetting 0 [ 46.458301][ T36] audit: type=1400 audit(1793818677.844:269): avc: denied { open } for pid=799 comm="syz.2.179" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.478844][ T421] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 46.489238][ T36] audit: type=1400 audit(1793818677.947:270): avc: denied { append } for pid=799 comm="syz.2.179" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 46.506223][ T421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.526438][ T36] audit: type=1400 audit(1793818677.978:271): avc: denied { ioctl } for pid=799 comm="syz.2.179" path="socket:[8528]" dev="sockfs" ino=8528 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.541555][ T421] usb 1-1: config 0 descriptor?? [ 46.571104][ T803] FAULT_INJECTION: forcing a failure. [ 46.571104][ T803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.584287][ T803] CPU: 1 UID: 0 PID: 803 Comm: syz.3.180 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 46.584320][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.584332][ T803] Call Trace: [ 46.584338][ T803] [ 46.584346][ T803] __dump_stack+0x21/0x30 [ 46.584368][ T803] dump_stack_lvl+0x140/0x1c0 [ 46.584385][ T803] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.584403][ T803] ? vsnprintf+0x7b4/0x1ad0 [ 46.584421][ T803] ? check_stack_object+0x10f/0x150 [ 46.584449][ T803] dump_stack+0x19/0x20 [ 46.584466][ T803] should_fail_ex+0x3c2/0x510 [ 46.584493][ T803] should_fail+0xf/0x20 [ 46.584509][ T803] should_fail_usercopy+0x1e/0x30 [ 46.584527][ T803] _copy_from_user+0x20/0xa0 [ 46.584549][ T803] kstrtouint_from_user+0xde/0x170 [ 46.584575][ T803] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 46.584599][ T803] ? selinux_file_permission+0x318/0xb60 [ 46.584626][ T803] ? __cfi_selinux_file_permission+0x10/0x10 [ 46.584650][ T803] proc_fail_nth_write+0x8f/0x220 [ 46.584674][ T803] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.584697][ T803] ? bpf_lsm_file_permission+0xd/0x20 [ 46.584715][ T803] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 46.584727][ T803] vfs_write+0x3c1/0xfd0 [ 46.584743][ T803] ? __cfi_vfs_write+0x10/0x10 [ 46.584757][ T803] ? __kasan_check_write+0x18/0x20 [ 46.584771][ T803] ? mutex_lock+0x97/0x1d0 [ 46.584784][ T803] ? __cfi_mutex_lock+0x10/0x10 [ 46.584797][ T803] ksys_write+0x145/0x260 [ 46.584806][ T803] ? __cfi_ksys_write+0x10/0x10 [ 46.584814][ T803] ? __kasan_check_write+0x18/0x20 [ 46.584828][ T803] ? fput+0x1a4/0x230 [ 46.584839][ T803] ? __kasan_check_read+0x15/0x20 [ 46.584853][ T803] __x64_sys_write+0x7f/0x90 [ 46.584862][ T803] x64_sys_call+0x271c/0x2ee0 [ 46.584873][ T803] do_syscall_64+0x57/0xf0 [ 46.584884][ T803] ? clear_bhb_loop+0x50/0xa0 [ 46.584898][ T803] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.584911][ T803] RIP: 0033:0x7f11a4f6034e [ 46.584921][ T803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.584929][ T803] RSP: 002b:00007f11a5f23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.584942][ T803] RAX: ffffffffffffffda RBX: 00007f11a5f246c0 RCX: 00007f11a4f6034e [ 46.584949][ T803] RDX: 0000000000000001 RSI: 00007f11a5f240a0 RDI: 0000000000000005 [ 46.584956][ T803] RBP: 00007f11a5f24090 R08: 0000000000000000 R09: 0000000000000000 [ 46.584962][ T803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.584968][ T803] R13: 00007f11a5226038 R14: 00007f11a5225fa0 R15: 00007ffe34305948 [ 46.584977][ T803] [ 47.053312][ T421] input: HID 046d:c218 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C218.0006/input/input10 [ 47.065845][ T421] logitech 0003:046D:C218.0006: input,hidraw0: USB HID v80.00 Joystick [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 47.091254][ T421] logitech 0003:046D:C218.0006: missing HID_OUTPUT_REPORT 0 [ 47.124732][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.134404][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.182347][ T819] kvm: Disabled LAPIC found during irq injection [ 47.188970][ T818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=862324783 (3449299132 ns) > initial count (130111596 ns). Using initial count to start timer. [ 47.280532][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 47.287676][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 47.293461][ T9] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.311094][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.317825][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 47.328020][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.336099][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 47.345584][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 47.354030][ T10] usb 4-1: Product: syz [ 47.358727][ T10] usb 4-1: SerialNumber: syz [ 47.367140][ T9] usb 3-1: config 0 descriptor?? [ 47.372240][ T10] usb 4-1: config 0 descriptor?? [ 47.372318][ T824] capability: warning: `syz.1.187' uses deprecated v2 capabilities in a way that may be insecure [ 47.377566][ T36] audit: type=1400 audit(1793818678.851:272): avc: denied { getopt } for pid=822 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.407919][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 47.415724][ T10] usb 4-1: Detected FT2232C/D [ 47.420906][ T36] audit: type=1400 audit(1793818678.892:273): avc: denied { bind } for pid=822 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.591823][ T562] usb 1-1: USB disconnect, device number 14 [ 47.621531][ T36] audit: type=1400 audit(1793818679.108:274): avc: denied { write } for pid=808 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.648579][ T809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.780262][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.790558][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.811067][ T10] usb 4-1: USB disconnect, device number 12 [ 47.817470][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.828248][ T10] ftdi_sio 4-1:0.0: device disconnected [ 47.855630][ T9] wacom 0003:056A:0100.0007: hidraw0: USB HID vdf.f8 Device [HID 056a:0100] on usb-dummy_hcd.2-1/input0 [ 48.101217][ T562] usb 3-1: USB disconnect, device number 12 [ 48.245172][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 48.402085][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.413051][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.422092][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.430595][ T10] usb 1-1: config 0 descriptor?? [ 48.633213][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 48.639238][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.649440][ T10] usb 1-1: USB disconnect, device number 15 [ 48.762933][ T869] FAULT_INJECTION: forcing a failure. [ 48.762933][ T869] name fail_futex, interval 1, probability 0, space 0, times 1 [ 48.775833][ T869] CPU: 0 UID: 0 PID: 869 Comm: syz.2.203 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 48.775865][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.775876][ T869] Call Trace: [ 48.775882][ T869] [ 48.775889][ T869] __dump_stack+0x21/0x30 [ 48.775903][ T869] dump_stack_lvl+0x140/0x1c0 [ 48.775913][ T869] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.775923][ T869] ? unwind_get_return_address+0x51/0x90 [ 48.775938][ T869] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 48.775952][ T869] dump_stack+0x19/0x20 [ 48.775961][ T869] should_fail_ex+0x3c2/0x510 [ 48.775976][ T869] should_fail+0xf/0x20 [ 48.775985][ T869] get_futex_key+0x22c/0x940 [ 48.775996][ T869] ? __cfi_get_futex_key+0x10/0x10 [ 48.776006][ T869] ? kasan_save_track+0x4f/0x80 [ 48.776017][ T869] futex_wake+0x150/0x950 [ 48.776030][ T869] ? __cfi_futex_wake+0x10/0x10 [ 48.776042][ T869] ? perf_lock_task_context+0x398/0x450 [ 48.776052][ T869] ? __perf_event_period+0x490/0x490 [ 48.776062][ T869] ? mutex_unlock+0x90/0x240 [ 48.776075][ T869] do_futex+0x37d/0x510 [ 48.776085][ T869] ? __kasan_check_read+0x15/0x20 [ 48.776100][ T869] ? __cfi_do_futex+0x10/0x10 [ 48.776110][ T869] ? __kasan_check_write+0x18/0x20 [ 48.776124][ T869] mm_release+0x15f/0x300 [ 48.776137][ T869] ? exit_mm_release+0x50/0x50 [ 48.776151][ T869] ? futex_exit_release+0x11d/0x1f0 [ 48.776161][ T869] exit_mm_release+0x29/0x50 [ 48.776174][ T869] do_exit+0x832/0x2850 [ 48.776189][ T869] ? futex_wake+0x666/0x950 [ 48.776202][ T869] ? __cfi_do_exit+0x10/0x10 [ 48.776215][ T869] ? futex_wait+0x2b8/0x7c0 [ 48.776227][ T869] ? __cfi_futex_wait+0x10/0x10 [ 48.776240][ T869] ? __kasan_check_write+0x18/0x20 [ 48.776253][ T869] ? _raw_spin_lock_irq+0x93/0x120 [ 48.776264][ T869] do_group_exit+0x21f/0x2f0 [ 48.776278][ T869] ? __kasan_check_write+0x18/0x20 [ 48.776292][ T869] ? recalc_sigpending+0x16c/0x1d0 [ 48.776305][ T869] get_signal+0x134c/0x1490 [ 48.776315][ T869] arch_do_signal_or_restart+0xbc/0x700 [ 48.776327][ T869] ? fdget_pos+0x299/0x310 [ 48.776338][ T869] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.776350][ T869] syscall_exit_to_user_mode+0x57/0xb0 [ 48.776365][ T869] do_syscall_64+0x63/0xf0 [ 48.776375][ T869] ? clear_bhb_loop+0x50/0xa0 [ 48.776388][ T869] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.776402][ T869] RIP: 0033:0x7fd2b4b9fb19 [ 48.776412][ T869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.776420][ T869] RSP: 002b:00007fd2b35e30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.776432][ T869] RAX: fffffffffffffe00 RBX: 00007fd2b4e25fa8 RCX: 00007fd2b4b9fb19 [ 48.776440][ T869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2b4e25fa8 [ 48.776453][ T869] RBP: 00007fd2b4e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 48.776460][ T869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.776466][ T869] R13: 00007fd2b4e26038 R14: 00007ffe98e04280 R15: 00007ffe98e04368 [ 48.776474][ T869] [ 49.193528][ T891] rust_binder: 890:891 transaction async to 890:0 failed ENOMEM, code 4294967295 size 18446744073709551302-24 line thread.rs:1194 [ 49.248023][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 49.248039][ T36] audit: type=1400 audit(1793818680.768:278): avc: denied { ioctl } for pid=893 comm="syz.3.214" path="socket:[10194]" dev="sockfs" ino=10194 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.251268][ T9] rust_binder: 890: undelivered TRANSACTION_ERROR: 29201 [ 49.270036][ T36] audit: type=1400 audit(1793818680.778:279): avc: denied { write } for pid=893 comm="syz.3.214" path="socket:[10195]" dev="sockfs" ino=10195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.316813][ T36] audit: type=1400 audit(1793818680.840:280): avc: denied { append } for pid=896 comm="syz.3.215" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.354818][ T899] ./dev/sda1: Can't lookup blockdev [ 49.362533][ T36] audit: type=1400 audit(1793818680.881:281): avc: denied { mounton } for pid=898 comm="syz.2.216" path="/dev" dev="ramfs" ino=9110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 49.368116][ T900] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 49.399119][ T36] audit: type=1400 audit(1793818680.932:282): avc: denied { name_bind } for pid=901 comm="syz.2.217" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.401031][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 49.428931][ T36] audit: type=1400 audit(1793818680.963:283): avc: denied { bind } for pid=896 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.448569][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.455999][ T36] audit: type=1400 audit(1793818680.963:284): avc: denied { listen } for pid=896 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.573851][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.584856][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 49.594076][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.602690][ T9] usb 2-1: config 0 descriptor?? [ 49.612924][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.623852][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.632893][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.641432][ T10] usb 1-1: config 0 descriptor?? [ 49.804328][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.812892][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.215441][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 50.221653][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.234239][ T9] usb 2-1: USB disconnect, device number 16 [ 50.240814][ T843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.250375][ T843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.251777][ T36] audit: type=1400 audit(1793818681.801:285): avc: denied { ioctl } for pid=907 comm="syz.2.219" path="socket:[10300]" dev="sockfs" ino=10300 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.301781][ T36] audit: type=1400 audit(1793818681.853:286): avc: denied { ioctl } for pid=907 comm="syz.2.219" path="/58/mnt/trace_pipe" dev="tracefs" ino=29 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.433669][ T10] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 50.441064][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 50.473701][ T913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 50.543077][ T915] FAULT_INJECTION: forcing a failure. [ 50.543077][ T915] name fail_futex, interval 1, probability 0, space 0, times 0 [ 50.556091][ T915] CPU: 0 UID: 0 PID: 915 Comm: syz.3.222 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 50.556112][ T915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.556120][ T915] Call Trace: [ 50.556123][ T915] [ 50.556127][ T915] __dump_stack+0x21/0x30 [ 50.556142][ T915] dump_stack_lvl+0x140/0x1c0 [ 50.556151][ T915] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.556167][ T915] ? unwind_get_return_address+0x51/0x90 [ 50.556193][ T915] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 50.556212][ T915] dump_stack+0x19/0x20 [ 50.556229][ T915] should_fail_ex+0x3c2/0x510 [ 50.556250][ T915] should_fail+0xf/0x20 [ 50.556258][ T915] get_futex_key+0x22c/0x940 [ 50.556269][ T915] ? __cfi_get_futex_key+0x10/0x10 [ 50.556279][ T915] ? kasan_save_track+0x4f/0x80 [ 50.556290][ T915] futex_wake+0x150/0x950 [ 50.556303][ T915] ? __cfi_futex_wake+0x10/0x10 [ 50.556324][ T915] ? perf_lock_task_context+0x398/0x450 [ 50.556344][ T915] ? __perf_event_period+0x490/0x490 [ 50.556361][ T915] ? mutex_unlock+0x90/0x240 [ 50.556384][ T915] do_futex+0x37d/0x510 [ 50.556397][ T915] ? __kasan_check_read+0x15/0x20 [ 50.556412][ T915] ? __cfi_do_futex+0x10/0x10 [ 50.556422][ T915] ? __kasan_check_write+0x18/0x20 [ 50.556436][ T915] mm_release+0x15f/0x300 [ 50.556450][ T915] ? exit_mm_release+0x50/0x50 [ 50.556470][ T915] ? futex_exit_release+0x11d/0x1f0 [ 50.556491][ T915] exit_mm_release+0x29/0x50 [ 50.556514][ T915] do_exit+0x832/0x2850 [ 50.556540][ T915] ? futex_wake+0x666/0x950 [ 50.556561][ T915] ? __cfi_do_exit+0x10/0x10 [ 50.556575][ T915] ? futex_wait+0x2b8/0x7c0 [ 50.556587][ T915] ? __cfi_futex_wait+0x10/0x10 [ 50.556599][ T915] ? __kasan_check_write+0x18/0x20 [ 50.556622][ T915] ? _raw_spin_lock_irq+0x93/0x120 [ 50.556642][ T915] do_group_exit+0x21f/0x2f0 [ 50.556667][ T915] ? __kasan_check_write+0x18/0x20 [ 50.556688][ T915] ? recalc_sigpending+0x16c/0x1d0 [ 50.556701][ T915] get_signal+0x134c/0x1490 [ 50.556711][ T915] arch_do_signal_or_restart+0xbc/0x700 [ 50.556723][ T915] ? fdget_pos+0x299/0x310 [ 50.556734][ T915] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 50.556747][ T915] syscall_exit_to_user_mode+0x57/0xb0 [ 50.556772][ T915] do_syscall_64+0x63/0xf0 [ 50.556791][ T915] ? clear_bhb_loop+0x50/0xa0 [ 50.556823][ T915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.556839][ T915] RIP: 0033:0x7f11a4f9fb19 [ 50.556848][ T915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.556858][ T915] RSP: 002b:00007f11a5f240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.556870][ T915] RAX: fffffffffffffe00 RBX: 00007f11a5225fa8 RCX: 00007f11a4f9fb19 [ 50.556878][ T915] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11a5225fa8 [ 50.556885][ T915] RBP: 00007f11a5225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 50.556893][ T915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.556904][ T915] R13: 00007f11a5226038 R14: 00007ffe34305860 R15: 00007ffe34305948 [ 50.556920][ T915] [ 50.650447][ T67] usb 1-1: USB disconnect, device number 16 [ 50.650581][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.948669][ T922] FAULT_INJECTION: forcing a failure. [ 50.948669][ T922] name failslab, interval 1, probability 0, space 0, times 0 [ 50.961385][ T922] CPU: 0 UID: 0 PID: 922 Comm: syz.3.225 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 50.961418][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.961430][ T922] Call Trace: [ 50.961436][ T922] [ 50.961443][ T922] __dump_stack+0x21/0x30 [ 50.961465][ T922] dump_stack_lvl+0x140/0x1c0 [ 50.961483][ T922] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.961501][ T922] ? wake_up_new_task+0x46f/0xa10 [ 50.961528][ T922] dump_stack+0x19/0x20 [ 50.961544][ T922] should_fail_ex+0x3c2/0x510 [ 50.961573][ T922] ? tracepoint_add_func+0x2ad/0xa40 [ 50.961596][ T922] should_failslab+0xac/0x100 [ 50.961616][ T922] __kmalloc_noprof+0x69/0x510 [ 50.961643][ T922] ? tracepoint_add_func+0x2ad/0xa40 [ 50.961666][ T922] tracepoint_add_func+0x2ad/0xa40 [ 50.961689][ T922] ? __cfi_probe_sched_switch+0x10/0x10 [ 50.961710][ T922] ? __cfi_probe_sched_switch+0x10/0x10 [ 50.961730][ T922] tracepoint_probe_register+0x5e/0xa0 [ 50.961751][ T922] ? __cfi_probe_sched_switch+0x10/0x10 [ 50.961771][ T922] tracing_start_sched_switch+0x14e/0x210 [ 50.961790][ T922] tracing_start_cmdline_record+0x17/0x30 [ 50.961809][ T922] __ftrace_event_enable_disable+0x2f8/0x7a0 [ 50.961833][ T922] event_enable_write+0x1ca/0x290 [ 50.961857][ T922] ? __kasan_check_write+0x18/0x20 [ 50.961883][ T922] ? __cfi_event_enable_write+0x10/0x10 [ 50.961906][ T922] ? bpf_lsm_file_permission+0xd/0x20 [ 50.961928][ T922] ? __cfi_event_enable_write+0x10/0x10 [ 50.961952][ T922] vfs_write+0x3c1/0xfd0 [ 50.961979][ T922] ? __cfi_vfs_write+0x10/0x10 [ 50.962005][ T922] ? __kasan_check_write+0x18/0x20 [ 50.962033][ T922] ? mutex_lock+0x97/0x1d0 [ 50.962057][ T922] ? __cfi_mutex_lock+0x10/0x10 [ 50.962082][ T922] ksys_write+0x145/0x260 [ 50.962099][ T922] ? __cfi_ksys_write+0x10/0x10 [ 50.962117][ T922] ? __kasan_check_read+0x15/0x20 [ 50.962142][ T922] __x64_sys_write+0x7f/0x90 [ 50.962158][ T922] x64_sys_call+0x271c/0x2ee0 [ 50.962176][ T922] do_syscall_64+0x57/0xf0 [ 50.962192][ T922] ? clear_bhb_loop+0x50/0xa0 [ 50.962216][ T922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.962238][ T922] RIP: 0033:0x7f11a4f9fb19 [ 50.962254][ T922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.962277][ T922] RSP: 002b:00007f11a5f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.962298][ T922] RAX: ffffffffffffffda RBX: 00007f11a5226090 RCX: 00007f11a4f9fb19 [ 50.962313][ T922] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000006 [ 50.962324][ T922] RBP: 00007f11a5f03090 R08: 0000000000000000 R09: 0000000000000000 [ 50.962336][ T922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.962349][ T922] R13: 00007f11a5226128 R14: 00007f11a5226090 R15: 00007ffe34305948 [ 50.962366][ T922] [ 51.246121][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 51.252608][ T922] sched trace: Couldn't activate tracepoint probe to kernel_sched_switch [ 51.314857][ T922] ------------[ cut here ]------------ [ 51.320345][ T922] WARNING: CPU: 1 PID: 922 at kernel/tracepoint.c:407 tracepoint_probe_unregister+0x175/0x990 [ 51.330658][ T922] Modules linked in: [ 51.334647][ T922] CPU: 1 UID: 0 PID: 922 Comm: syz.3.225 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 51.346042][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.356121][ T922] RIP: 0010:tracepoint_probe_unregister+0x175/0x990 [ 51.362726][ T922] Code: 4c 8b 23 4d 85 e4 74 29 e8 48 c9 fe ff 41 ff c6 4d 39 ec 0f 85 56 ff ff ff e9 65 ff ff ff e8 32 c9 fe ff 49 c7 c4 fe ff ff ff <0f> 0b e9 02 07 00 00 44 89 f7 44 89 fe e8 d9 ca fe ff 45 29 fe 75 [ 51.382367][ T922] RSP: 0018:ffffc900102bfb10 EFLAGS: 00010293 [ 51.388459][ T922] RAX: ffffffff818a9cce RBX: dffffc0000000000 RCX: ffff88813c10bb40 [ 51.395881][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 51.396505][ T922] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc900102bfa80 [ 51.405472][ T9] usb 2-1: config 1 has no interface number 0 [ 51.413347][ T922] RBP: ffffc900102bfb70 R08: ffffc900102bfa87 R09: 1ffff92002057f50 [ 51.413366][ T922] R10: dffffc0000000000 R11: fffff52002057f51 R12: fffffffffffffffe [ 51.413379][ T922] R13: ffffffff819126f0 R14: ffffffff88668c88 R15: ffffffff88668c40 [ 51.413391][ T922] FS: 00007f11a5f036c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 51.413407][ T922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.413419][ T922] CR2: 00007f11a4fed200 CR3: 0000000138722000 CR4: 00000000003526b0 [ 51.413435][ T922] Call Trace: [ 51.419606][ T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 51.427445][ T922] [ 51.427459][ T922] tracing_stop_cmdline_record+0x6f/0xb0 [ 51.435478][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 51.443451][ T922] __ftrace_event_enable_disable+0x632/0x7a0 [ 51.453314][ T925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8214 sclass=netlink_route_socket pid=925 comm=syz.0.226 [ 51.458946][ T922] event_enable_write+0x1ca/0x290 [ 51.480883][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 51.482182][ T922] ? __kasan_check_write+0x18/0x20 [ 51.487812][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.498657][ T922] ? __cfi_event_enable_write+0x10/0x10 [ 51.498691][ T922] ? bpf_lsm_file_permission+0xd/0x20 [ 51.498710][ T922] ? __cfi_event_enable_write+0x10/0x10 [ 51.504714][ T9] usb 2-1: Product: syz [ 51.517078][ T922] vfs_write+0x3c1/0xfd0 [ 51.522145][ T9] usb 2-1: Manufacturer: syz [ 51.531149][ T922] ? __cfi_vfs_write+0x10/0x10 [ 51.536236][ T9] usb 2-1: SerialNumber: syz [ 51.544204][ T922] ? __kasan_check_write+0x18/0x20 [ 51.587962][ T922] ? mutex_lock+0x97/0x1d0 [ 51.592396][ T922] ? __cfi_mutex_lock+0x10/0x10 [ 51.597254][ T922] ksys_write+0x145/0x260 [ 51.601606][ T922] ? __cfi_ksys_write+0x10/0x10 [ 51.606453][ T922] ? __kasan_check_read+0x15/0x20 [ 51.611502][ T922] __x64_sys_write+0x7f/0x90 [ 51.616089][ T922] x64_sys_call+0x271c/0x2ee0 [ 51.620790][ T922] do_syscall_64+0x57/0xf0 [ 51.625213][ T922] ? clear_bhb_loop+0x50/0xa0 [ 51.629923][ T922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.635817][ T922] RIP: 0033:0x7f11a4f9fb19 [ 51.640247][ T922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.659872][ T922] RSP: 002b:00007f11a5f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.668314][ T922] RAX: ffffffffffffffda RBX: 00007f11a5226090 RCX: 00007f11a4f9fb19 [ 51.676288][ T922] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000006 [ 51.684288][ T922] RBP: 00007f11a5f03090 R08: 0000000000000000 R09: 0000000000000000 [ 51.692270][ T922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.700296][ T922] R13: 00007f11a5226128 R14: 00007f11a5226090 R15: 00007ffe34305948 [ 51.708281][ T922] [ 51.711285][ T922] ---[ end trace 0000000000000000 ]--- [ 51.717635][ T922] event trace: Could not enable event p [ 51.766549][ T9] usb 2-1: 1:0 : does not exist [ 51.771489][ T9] usb 2-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 51.780084][ T9] usb 2-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 51.789060][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 51.800623][ T9] usb 2-1: USB disconnect, device number 17 [ 51.807488][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory