last executing test programs: 51.261199223s ago: executing program 0 (id=224): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021000000000008000000070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 51.184205715s ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x2, 0x80000, @local}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r4], 0x0) 49.764184049s ago: executing program 0 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x80) write(r0, &(0x7f00000002c0)='0', 0xf5) 49.71851085s ago: executing program 0 (id=234): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/make-it-fail\x00', 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) write$make_it_fail(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x18, 0xffff6b30, 0x1, 0x400}, 0x10) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000012026bd700000000000100000000c00000000000000000000000d002e"], 0x30}], 0x1}, 0x0) 49.663511092s ago: executing program 0 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f147f000800000904000a000000000009", 0x17) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202000200070583"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xfffff7ff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x0, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee13920811fd7002dc8aada05a7c0bda82f7ff87fdc11bc4ec00", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x4000003, 0x6]}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xffffffff80000001) r6 = open(&(0x7f0000000140)='./file0\x00', 0x66802, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) lseek(r6, 0x2, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='netpci0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) socket(0x2, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 47.991303572s ago: executing program 0 (id=257): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021000000000000000000070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 32.698571411s ago: executing program 32 (id=257): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021000000000000000000070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 15.705501181s ago: executing program 1 (id=512): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff7, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x3, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x9], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x5, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x7f, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccf, 0x7, 0x53cf697b, 0x7, 0x6, 0x3, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x80000009, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x8af, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1fffffd, 0x1c3880, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021000000000000000200070000001600000002000f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) 15.638320333s ago: executing program 1 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r3, &(0x7f0000000140)="c9", 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="b9800000c00f3235000800000f30b8010000000f01c1660f306626f226660f01380f689c9b0500000066baf80cb890518484ef66bafc0cb093ee0f01c3c4a269473066ba4300ed460faef4", 0x4b}], 0x1, 0x17, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.606561714s ago: executing program 1 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x2c, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xe}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@loopback, @empty}, 0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0) 15.587200644s ago: executing program 1 (id=515): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f40)=""/4078, 0xfee}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f00000004c0)=""/264, 0x137}, {&(0x7f0000000300)=""/164, 0xac}, {&(0x7f0000000980)=""/227, 0xe3}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000100)=""/94, 0x5e}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x2, 'veth1_to_bond\x00', {0x9}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$802154_dgram(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f0000000480)={&(0x7f00000003c0)="c74ccfce6fc0038520c95fabe099a3801dea520dc309262d59a655a6acf94baf2a90cd96e23d757f0ff43eeedf893a092ad34d59aab867fb8b7a79208f79eecf46a95f2a8d7e77a02abd1768b1608cedb4ee2285680e62e4c8a59ee57e4e1e46bbe549061f4e927e3ec6f21bb93fd8ebe3da7310d8eb3d997272874387a60672bb3631182d5a2460373cf9a08e5eacb31f769a666ff0227728bc2d0143a7a93a", 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x800) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev}, 'veth1_to_bridge\x00'}) 15.526197336s ago: executing program 1 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="09000000e722140000007e70fbf788a83baa000000000000e784048c70e3eab7", 0x20, 0x24040011, &(0x7f0000000300)={0x11, 0x8100, r4, 0x1, 0x8}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r6, &(0x7f0000000100)=0x0, &(0x7f0000000140)) unshare(0x62020600) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x58, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') pread64(r8, &(0x7f0000000140)=""/5, 0x5, 0x7fffffff) epoll_pwait(r5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xa000000, &(0x7f0000000300)={[0x80]}, 0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.502004326s ago: executing program 1 (id=521): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, 0x0, 0x0, 0x8410, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x5b000) 12.805071451s ago: executing program 3 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1c}, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000280)='fuse\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) close(0x3) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x8, 0xa8, {0xa8, 0x6, "e46b329eadedca74f4960f8c7f3fe7eecf9f71fba8401b1959568e54931020a4cf217eb5393201cec56b55ea4147a1d137b8c8790330abb69025728dadd92121efc6d24bec402113e4def4717a9122eeec6cdf331417dc4dac8c1da07b390069d6606dae551a8c6813ed8d3a2a8ea48f2d91ddd4a7ea8d87dfc8f5885a4a7c0e70fd256f0836635ed9bdec5e357950cf3aef535a0083f089ffd1d7f1f99fb53b39960a3f3bdb"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000300)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x2, 0x8, 0x4, 0x54}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x8, 0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x4, 0x26, "5fb6524d", "5662f2c3"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x49, 0x0, 0x3, 0x2, 0x65}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x40, 0x10, 0x14, "8dcedc16a54577ba16a2b6e01b94fc33dde6de44"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0x10, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0xb, 0x2, 'zt'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="7ec0ffc4c1bb"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000040)={0x40, 0x19, 0x2, 'y1'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x70}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) close(r4) 6.539134432s ago: executing program 3 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mysys\x00', &(0x7f0000000200)='sysv\x00', 0x1842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x200002, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x86a81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000800)={0x3, 0x0, [{0x40000099, 0x0, 0x9}, {0x96d, 0x0, 0x7}, {0x38a}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r8, 0x0, r7, 0x0, 0x25a5, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x10, 0x5, {0xa, 0x25, 0x25, 0x404, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x81, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0x1}}}}}}}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.160809315s ago: executing program 3 (id=569): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000240)={0x0, 0x300000000000000}) 5.147551856s ago: executing program 3 (id=570): getrandom(0xfffffffffffffffd, 0x0, 0x3) getrandom(&(0x7f0000000000)=""/134, 0x86, 0x1) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) 3.984640834s ago: executing program 3 (id=572): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x17, 0x7, "a4ee1721cb24bf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x8, 0x6, {0x6, 0x7, "a61ac1dd"}}, &(0x7f0000000040)={0x0, 0x3, 0x24, @string={0x24, 0x3, "749d1c0f446f0868e0cef61da1af2979cf01bbe06334a680090ea05aee7b27b9beba"}}}, &(0x7f0000000300)={0x44, &(0x7f00000000c0)={0x20, 0x10, 0x59, "50037131fc17cff42ec16ff0c9407fb177a2d2ea964fd2f11c8d45e9cac39a42a31d094a2328ccc10209f5c96262d9ceb6a149dec5b2f07bcf90a6aa88b5dc0a6c866fdc4cd43385c4a5e56bd5760770950498b6c6ac6b3cdd"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000001c0)={0x20, 0x81, 0x2, "a185"}, &(0x7f0000000200)={0x20, 0x82, 0x2, "57c7"}, &(0x7f0000000240)={0x20, 0x83, 0x1, '\t'}, &(0x7f0000000280)={0x20, 0x84, 0x2, "f886"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "9a840a"}}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 1.783858207s ago: executing program 2 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.707455979s ago: executing program 4 (id=580): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) connect$tipc(r0, &(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x800001}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x8, {0x4, 0x1, 0x8000000000, 0x9, 0xebd, 0xebad, {0x5, 0x0, 0x4, 0x1, 0x20000, 0x20000, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSMRRU(r1, 0x4010744d, &(0x7f0000000380)=0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x27, 0x9, 0xca22, 0x8, 0x4, 0x7, 0x3}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.593377221s ago: executing program 2 (id=581): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x0, 0x0) r1 = syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r1, 0x2) socket$key(0xf, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00", @ANYRES32=r2], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=0x800) 1.509143604s ago: executing program 4 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001280)=ANY=[@ANYBLOB="e01000001000010000000000fedbdf25070000001300000008000000ffffffffc0101a80bc1007"], 0x10e0}], 0x1}, 0x4004080) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000980)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x28) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000080)=0x100000001, 0x8) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000280)={{r2}, "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"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1.447398405s ago: executing program 4 (id=583): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x4}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./dev\x00', 0xa0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./dev\x00', 0xa0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000540)=@ethtool_eee={0x44, 0xff, 0x30d35794, 0x1, 0x5c4, 0x9a4, 0x89, 0xffffffff, [0x27a3, 0x800]}}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) socket$tipc(0x1e, 0x4, 0x0) (async) r5 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x6) (async) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x6) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9a4c0e947083fe8f681dbf64a464e761a17a01bdd00ab191d3ed7f36dbf90e9637f39de3a3ea7ecee6c9872a1faf46af54d67b513a4d60c21ff0aff0e29049efbfca97d21f303ea64f9038b90b2db77b8b0844a2ca5329e18545eb14e9c3ce308a98b4b7d27bcc79286bcfa7b37fdfb287ad191846f044b87b79c5f47f480d57fa9c1e2b68f8be1b46b5cf3bb4b1d6700448797086e624ff5d67e1dc2939d0763fb36fb9b9d8d40000", @ANYRES32=r4, @ANYRES8=r3], 0x24}}, 0x4c000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="20427c00b49455ae49d9ede31700"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c844) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendfile(r7, 0xffffffffffffffff, 0x0, 0x7) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x5, 0x8, 0x5, 0x80}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x82, 0x2002, 0x800000000000003, 0x5, 0x1000, 0xcf, 0x1, 0x3c44, 0x7ffffffffffffffc, 0x2, 0x9, 0x800000003, 0x5, 0x1ff, 0x80000000009], 0x0, 0x1019c4}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.363257977s ago: executing program 4 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000) 1.337519758s ago: executing program 4 (id=585): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000040)=0xffffffdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) r3 = open(0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x138}}, 0x20004080) listen(r5, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) close_range(r4, 0xffffffffffffffff, 0x200000000000000) ioctl(r2, 0x545c, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) socket$inet6(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x7, 0x2010, r2, 0x0) 1.23953745s ago: executing program 4 (id=586): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010080, &(0x7f0000000080)=ANY=[@ANYBLOB="69874b0a82125d4ad4468d4c8a4d1f0fb1098852606c7de9cf97a9fc29cfb5abca6102d4c02079f020a844a2929fa5471e22", @ANYBLOB=',seclabel,\x00']) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r1, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xffffffffffffff7e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0xa, "b583f55d"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x0, 0x0, 0xc, "ed95"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 275.961333ms ago: executing program 33 (id=521): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, 0x0, 0x0, 0x8410, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18d042, 0x15) pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x5b000) 273.353653ms ago: executing program 3 (id=588): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r2, &(0x7f0000002d80)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b020101032001d7040000000101200009240108000c19240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f070000090402c36e6755ff907202d0293900000102200009040201010102"], &(0x7f0000000000)={0xffffffffffffffc7, 0x0, 0x0, 0x0}) 272.340424ms ago: executing program 2 (id=589): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x80) splice(0xffffffffffffffff, &(0x7f0000000180)=0x6d, 0xffffffffffffffff, 0x0, 0x9, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000180)={0x0, 0x0, 0x99, 0x79, ""/121}, &(0x7f0000000040)=0x99, 0x1) write(r0, &(0x7f00000002c0)='0', 0x1) 196.116875ms ago: executing program 2 (id=590): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000012026bd700000000000100000000c00000000020000000000000d002e"], 0x30}], 0x1}, 0x0) 122.001937ms ago: executing program 2 (id=591): socket(0x26, 0x2, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r3 = timerfd_create(0x1, 0x80800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c06, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r4, &(0x7f0000000240)='.log\x00', 0x80880, 0x30) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x1) getdents64(r6, 0x0, 0x4f) 0s ago: executing program 2 (id=592): mkdir(&(0x7f0000000440)='./file0\x00', 0x89) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000140)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@favordynmods}]}) kernel console output (not intermixed with test programs): 8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 55.856836][ T558] usb 1-1: USB disconnect, device number 17 [ 56.018946][ T953] kvm: kvm [952]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 56.027918][ T953] kvm: kvm [952]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 56.279020][ T969] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 56.333058][ T971] tc_dump_action: action bad kind [ 56.339026][ T971] bridge_slave_0: default FDB implementation only supports local addresses [ 56.524139][ T311] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 56.691615][ T558] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.699883][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 56.711957][ T311] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 56.724564][ T311] usb 3-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40 [ 56.733711][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.741817][ T311] usb 3-1: Product: syz [ 56.745987][ T311] usb 3-1: Manufacturer: syz [ 56.750592][ T311] usb 3-1: SerialNumber: syz [ 56.781660][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 56.841574][ T558] usb 2-1: device descriptor read/64, error -71 [ 56.932640][ T9] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 56.943029][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.956698][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 56.967321][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.969302][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 56.976746][ T9] usb 4-1: config 0 descriptor?? [ 57.002863][ T311] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 57.022745][ T311] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 57.035224][ T311] usb 3-1: USB disconnect, device number 9 [ 57.047805][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.101617][ T558] usb 2-1: device descriptor read/64, error -71 [ 57.249449][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.256098][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.271200][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.277970][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.287947][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.301747][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.315950][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.322694][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.329204][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.341620][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.351570][ T558] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.355720][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.365842][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.380271][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.387042][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.396979][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.411155][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.417900][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.427857][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.434699][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.441276][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.448007][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.454726][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.461228][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.468007][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.474672][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.481582][ T558] usb 2-1: device descriptor read/64, error -71 [ 57.487853][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.487934][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.510181][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.517211][ T992] FAULT_INJECTION: forcing a failure. [ 57.517211][ T992] name failslab, interval 1, probability 0, space 0, times 0 [ 57.529970][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.537246][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.543890][ T992] CPU: 1 UID: 0 PID: 992 Comm: syz.2.260 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 57.543921][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.543933][ T992] Call Trace: [ 57.543940][ T992] [ 57.543947][ T992] __dump_stack+0x21/0x30 [ 57.543978][ T992] dump_stack_lvl+0x140/0x1c0 [ 57.544003][ T992] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.544038][ T992] ? release_sock+0x171/0x1f0 [ 57.544060][ T992] dump_stack+0x19/0x20 [ 57.544084][ T992] should_fail_ex+0x3c2/0x510 [ 57.544107][ T992] should_failslab+0xac/0x100 [ 57.544132][ T992] kmem_cache_alloc_node_noprof+0x45/0x420 [ 57.544153][ T992] ? netlink_data_ready+0x20/0x20 [ 57.544177][ T992] ? __alloc_skb+0x10c/0x360 [ 57.544199][ T992] __alloc_skb+0x10c/0x360 [ 57.544220][ T992] netlink_alloc_large_skb+0xf7/0x1b0 [ 57.544244][ T992] netlink_sendmsg+0x576/0xad0 [ 57.544269][ T992] ? __cfi_netlink_sendmsg+0x10/0x10 [ 57.544296][ T992] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 57.544318][ T992] ? security_socket_sendmsg+0x3d/0x100 [ 57.544345][ T992] ____sys_sendmsg+0x99e/0xa00 [ 57.544371][ T992] ? __import_iovec+0x5b9/0x7d0 [ 57.544388][ T992] ? __sys_sendmsg_sock+0x50/0x50 [ 57.544413][ T992] ? import_iovec+0x80/0xb0 [ 57.544431][ T992] ___sys_sendmsg+0x2a6/0x370 [ 57.544457][ T992] ? __sys_sendmsg+0x260/0x260 [ 57.544482][ T992] ? proc_fail_nth_write+0x184/0x220 [ 57.544510][ T992] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 57.544540][ T992] ? __fget_files+0x2bc/0x330 [ 57.544564][ T992] __x64_sys_sendmsg+0x1be/0x2a0 [ 57.544589][ T992] ? fput+0x1a4/0x230 [ 57.544613][ T992] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 57.544638][ T992] ? ksys_write+0x1f3/0x260 [ 57.544660][ T992] ? __kasan_check_read+0x15/0x20 [ 57.544680][ T992] x64_sys_call+0x2a4c/0x2ee0 [ 57.544698][ T992] do_syscall_64+0x57/0xf0 [ 57.544716][ T992] ? clear_bhb_loop+0x50/0xa0 [ 57.544738][ T992] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.544759][ T992] RIP: 0033:0x7f6c04d9e159 [ 57.544775][ T992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.544793][ T992] RSP: 002b:00007f6c05caa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.544814][ T992] RAX: ffffffffffffffda RBX: 00007f6c05025fa0 RCX: 00007f6c04d9e159 [ 57.544830][ T992] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 57.544843][ T992] RBP: 00007f6c05caa090 R08: 0000000000000000 R09: 0000000000000000 [ 57.544856][ T992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.544867][ T992] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 57.544883][ T992] [ 57.545031][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.731586][ T558] usb 2-1: device descriptor read/64, error -71 [ 57.737430][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.846098][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.851706][ T558] usb usb2-port1: attempt power cycle [ 57.853145][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.865521][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.872060][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.878551][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.885111][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.891655][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.898159][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.904870][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.911366][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.918899][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.925533][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.933309][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.940091][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.946679][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.953214][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.959727][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.966364][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.972839][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.980633][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.987380][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 57.993905][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.000449][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.007030][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.014236][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.020740][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.027900][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.034430][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.042388][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.049090][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.056014][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.062781][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.069279][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.076032][ T990] fuse: Unknown parameter 'g00000000000000000000' [ 58.084165][ T9] usb 4-1: string descriptor 0 read error: -71 [ 58.090801][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 58.099459][ T9] usb 4-1: USB disconnect, device number 9 [ 58.132689][ T310] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.143892][ T310] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.157110][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.164039][ T310] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 58.173391][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.186508][ T310] usb 3-1: config 0 descriptor?? [ 58.201619][ T558] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 58.222689][ T558] usb 2-1: device descriptor read/8, error -71 [ 58.352665][ T558] usb 2-1: device descriptor read/8, error -71 [ 58.591674][ T558] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 58.612199][ T310] hid-multitouch 0003:0EEF:72C4.0005: item fetching failed at offset 22/24 [ 58.614192][ T558] usb 2-1: device descriptor read/8, error -71 [ 58.621073][ T310] hid-multitouch 0003:0EEF:72C4.0005: probe with driver hid-multitouch failed with error -22 [ 58.762571][ T558] usb 2-1: device descriptor read/8, error -71 [ 58.767847][ T996] netlink: 'syz.3.262': attribute type 4 has an invalid length. [ 58.776474][ T996] netlink: 17 bytes leftover after parsing attributes in process `syz.3.262'. [ 58.806067][ T311] usb 3-1: USB disconnect, device number 10 [ 58.881597][ T558] usb usb2-port1: unable to enumerate USB device [ 59.031594][ T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 59.201613][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 59.208103][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.219372][ T310] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 59.228731][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.236941][ T310] usb 4-1: SerialNumber: syz [ 59.251862][ T310] usb 4-1: config 0 descriptor?? [ 59.259586][ T310] hub 4-1:0.0: bad descriptor, ignoring hub [ 59.265830][ T310] hub 4-1:0.0: probe with driver hub failed with error -5 [ 59.273409][ T310] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 59.281549][ T310] usb 4-1: Detected SIO [ 59.291781][ T310] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 59.591593][ T558] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 59.751557][ T558] usb 3-1: Using ep0 maxpacket: 32 [ 59.762308][ T558] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.770695][ T558] usb 3-1: config 0 has no interface number 0 [ 59.776962][ T558] usb 3-1: config 0 interface 184 has no altsetting 0 [ 59.785384][ T558] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.794706][ T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.802896][ T558] usb 3-1: Product: syz [ 59.807196][ T558] usb 3-1: Manufacturer: syz [ 59.811940][ T558] usb 3-1: SerialNumber: syz [ 59.817619][ T558] usb 3-1: config 0 descriptor?? [ 59.823757][ T558] smsc75xx v1.0.0 [ 60.040775][ T1010] FAULT_INJECTION: forcing a failure. [ 60.040775][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 60.053527][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: syz.1.268 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 60.053560][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.053573][ T1010] Call Trace: [ 60.053582][ T1010] [ 60.053590][ T1010] __dump_stack+0x21/0x30 [ 60.053621][ T1010] dump_stack_lvl+0x140/0x1c0 [ 60.053647][ T1010] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.053671][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.053691][ T1010] ? copy_mm+0x307/0x1da0 [ 60.053715][ T1010] dump_stack+0x19/0x20 [ 60.053739][ T1010] should_fail_ex+0x3c2/0x510 [ 60.053763][ T1010] should_failslab+0xac/0x100 [ 60.053786][ T1010] kmem_cache_alloc_noprof+0x42/0x410 [ 60.053806][ T1010] ? alloc_pid+0xa5/0xb80 [ 60.053828][ T1010] ? __asan_memcpy+0x5a/0x80 [ 60.053847][ T1010] alloc_pid+0xa5/0xb80 [ 60.053869][ T1010] copy_process+0x1467/0x3350 [ 60.053895][ T1010] ? __cfi_copy_process+0x10/0x10 [ 60.053918][ T1010] ? __kmalloc_cache_noprof+0x23c/0x470 [ 60.053939][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.053959][ T1010] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 60.053982][ T1010] vhost_task_create+0x1f7/0x3f0 [ 60.054000][ T1010] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 60.054023][ T1010] ? __cfi_vhost_task_create+0x10/0x10 [ 60.054045][ T1010] ? __cfi_vhost_task_fn+0x10/0x10 [ 60.054065][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.054084][ T1010] ? mutex_lock+0x97/0x1d0 [ 60.054106][ T1010] ? __cfi_mutex_lock+0x10/0x10 [ 60.054127][ T1010] ? kernel_text_address+0xa9/0xe0 [ 60.054159][ T1010] kvm_mmu_post_init_vm+0x161/0x300 [ 60.054187][ T1010] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 60.054213][ T1010] ? _parse_integer_limit+0x195/0x1e0 [ 60.054236][ T1010] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 60.054261][ T1010] ? kstrtoull+0x13b/0x1e0 [ 60.054281][ T1010] ? kstrtouint+0x78/0xf0 [ 60.054302][ T1010] ? ioctl_has_perm+0x1bc/0x500 [ 60.054322][ T1010] ? __asan_memcpy+0x5a/0x80 [ 60.054341][ T1010] ? ioctl_has_perm+0x408/0x500 [ 60.054361][ T1010] ? has_cap_mac_admin+0xd0/0xd0 [ 60.054382][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.054400][ T1010] ? mutex_lock_killable+0x97/0x1d0 [ 60.054423][ T1010] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.054445][ T1010] ? proc_fail_nth_write+0x184/0x220 [ 60.054474][ T1010] kvm_vcpu_ioctl+0xa43/0x1000 [ 60.054493][ T1010] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 60.054512][ T1010] ? __cfi_vfs_write+0x10/0x10 [ 60.054533][ T1010] ? __kasan_check_write+0x18/0x20 [ 60.054552][ T1010] ? mutex_unlock+0x90/0x240 [ 60.054572][ T1010] ? __cfi_mutex_unlock+0x10/0x10 [ 60.054595][ T1010] ? __fget_files+0x2bc/0x330 [ 60.054619][ T1010] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.054643][ T1010] ? security_file_ioctl+0x3e/0x110 [ 60.054661][ T1010] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 60.054679][ T1010] __se_sys_ioctl+0x126/0x1b0 [ 60.054703][ T1010] __x64_sys_ioctl+0x7f/0xa0 [ 60.054726][ T1010] x64_sys_call+0x1878/0x2ee0 [ 60.054744][ T1010] do_syscall_64+0x57/0xf0 [ 60.054761][ T1010] ? clear_bhb_loop+0x50/0xa0 [ 60.054784][ T1010] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.054805][ T1010] RIP: 0033:0x7f088d59e159 [ 60.054823][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.054839][ T1010] RSP: 002b:00007f088e3fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.054859][ T1010] RAX: ffffffffffffffda RBX: 00007f088d825fa0 RCX: 00007f088d59e159 [ 60.054872][ T1010] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 60.054882][ T1010] RBP: 00007f088e3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 60.054894][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.054905][ T1010] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007ffedefe7448 [ 60.054920][ T1010] [ 60.441443][ T1001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.450112][ T1001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.672945][ T10] usb 4-1: USB disconnect, device number 10 [ 60.681387][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.693228][ T10] ftdi_sio 4-1:0.0: device disconnected [ 60.750286][ T1014] FAULT_INJECTION: forcing a failure. [ 60.750286][ T1014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.763438][ T1014] CPU: 0 UID: 0 PID: 1014 Comm: syz.1.270 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 60.763471][ T1014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.763483][ T1014] Call Trace: [ 60.763489][ T1014] [ 60.763497][ T1014] __dump_stack+0x21/0x30 [ 60.763528][ T1014] dump_stack_lvl+0x140/0x1c0 [ 60.763556][ T1014] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.763583][ T1014] dump_stack+0x19/0x20 [ 60.763607][ T1014] should_fail_ex+0x3c2/0x510 [ 60.763631][ T1014] should_fail+0xf/0x20 [ 60.763651][ T1014] should_fail_usercopy+0x1e/0x30 [ 60.763683][ T1014] _copy_from_iter+0x1a6/0x1520 [ 60.763710][ T1014] ? __virt_addr_valid+0x2a1/0x370 [ 60.763733][ T1014] ? __cfi__copy_from_iter+0x10/0x10 [ 60.763757][ T1014] ? __check_object_size+0x54c/0x870 [ 60.763779][ T1014] ? __cfi___check_object_size+0x10/0x10 [ 60.763800][ T1014] ? skb_put+0x10e/0x200 [ 60.763823][ T1014] netlink_sendmsg+0x66d/0xad0 [ 60.763850][ T1014] ? __cfi_netlink_sendmsg+0x10/0x10 [ 60.763876][ T1014] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 60.763898][ T1014] ? security_socket_sendmsg+0x3d/0x100 [ 60.763926][ T1014] ____sys_sendmsg+0x99e/0xa00 [ 60.763952][ T1014] ? __import_iovec+0x5b9/0x7d0 [ 60.763970][ T1014] ? __sys_sendmsg_sock+0x50/0x50 [ 60.763995][ T1014] ? import_iovec+0x80/0xb0 [ 60.764014][ T1014] ___sys_sendmsg+0x2a6/0x370 [ 60.764039][ T1014] ? __sys_sendmsg+0x260/0x260 [ 60.764063][ T1014] ? proc_fail_nth_write+0x184/0x220 [ 60.764090][ T1014] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.764121][ T1014] ? __fget_files+0x2bc/0x330 [ 60.764145][ T1014] __x64_sys_sendmsg+0x1be/0x2a0 [ 60.764170][ T1014] ? fput+0x1a4/0x230 [ 60.764193][ T1014] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 60.764218][ T1014] ? ksys_write+0x1f3/0x260 [ 60.764240][ T1014] ? __kasan_check_read+0x15/0x20 [ 60.764261][ T1014] x64_sys_call+0x2a4c/0x2ee0 [ 60.764279][ T1014] do_syscall_64+0x57/0xf0 [ 60.764297][ T1014] ? clear_bhb_loop+0x50/0xa0 [ 60.764320][ T1014] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.764340][ T1014] RIP: 0033:0x7f088d59e159 [ 60.764357][ T1014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.764374][ T1014] RSP: 002b:00007f088e3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.764396][ T1014] RAX: ffffffffffffffda RBX: 00007f088d825fa0 RCX: 00007f088d59e159 [ 60.764412][ T1014] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 60.764425][ T1014] RBP: 00007f088e3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 60.764439][ T1014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.764451][ T1014] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007ffedefe7448 [ 60.764469][ T1014] [ 61.046676][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 61.057497][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.066892][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.077764][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 61.087457][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 61.097829][ T558] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 61.107414][ T558] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 61.116742][ T558] usb 3-1: USB disconnect, device number 11 [ 61.122690][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 61.122707][ T36] audit: type=1400 audit(1788987350.499:291): avc: denied { remount } for pid=1017 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.291590][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 61.454785][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 61.463327][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.475174][ T10] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 61.489393][ T10] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 61.507976][ T10] usb 4-1: Product: syz [ 61.512561][ T10] usb 4-1: Manufacturer: syz [ 61.527751][ T10] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 61.551177][ T1025] netlink: 'syz.2.274': attribute type 29 has an invalid length. [ 61.626084][ T1027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 61.661584][ T310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.731856][ T10] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 61.747324][ T10] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 61.756748][ T10] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 61.767562][ T10] usb 4-1: USB disconnect, device number 11 [ 61.831634][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 61.838118][ T310] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 61.863810][ T36] audit: type=1400 audit(1788987351.229:292): avc: denied { ioctl } for pid=1031 comm="syz.2.277" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.891369][ T310] usb 2-1: config 0 has no interface number 0 [ 61.897875][ T310] usb 2-1: config 0 interface 184 has no altsetting 0 [ 61.905258][ T36] audit: type=1400 audit(1788987351.229:293): avc: denied { getattr } for pid=1031 comm="syz.2.277" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.936248][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.945542][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.953767][ T310] usb 2-1: Product: syz [ 61.957942][ T310] usb 2-1: Manufacturer: syz [ 61.962856][ T310] usb 2-1: SerialNumber: syz [ 61.971999][ T310] usb 2-1: config 0 descriptor?? [ 61.982264][ T310] smsc75xx v1.0.0 [ 62.221581][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 62.391587][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 62.398019][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.406474][ T10] usb 3-1: config 0 has no interface number 0 [ 62.412833][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 62.421129][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 62.430629][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.438829][ T10] usb 3-1: Product: syz [ 62.446648][ T10] usb 3-1: Manufacturer: syz [ 62.451288][ T10] usb 3-1: SerialNumber: syz [ 62.457101][ T10] usb 3-1: config 0 descriptor?? [ 62.463094][ T10] smsc75xx v1.0.0 [ 62.578812][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 62.590005][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 62.803981][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 62.815252][ T1023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.824745][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 62.834993][ T1023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.843127][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 62.852940][ T310] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 62.864995][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.874241][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.083160][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 63.096479][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.107142][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 63.118295][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 63.128303][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 63.138933][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 63.148650][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 63.159623][ T10] usb 3-1: USB disconnect, device number 12 [ 63.305424][ T1061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 63.372863][ T1064] FAULT_INJECTION: forcing a failure. [ 63.372863][ T1064] name failslab, interval 1, probability 0, space 0, times 0 [ 63.385727][ T1064] CPU: 0 UID: 0 PID: 1064 Comm: syz.3.287 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 63.385761][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.385774][ T1064] Call Trace: [ 63.385780][ T1064] [ 63.385788][ T1064] __dump_stack+0x21/0x30 [ 63.385819][ T1064] dump_stack_lvl+0x140/0x1c0 [ 63.385845][ T1064] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.385873][ T1064] dump_stack+0x19/0x20 [ 63.385897][ T1064] should_fail_ex+0x3c2/0x510 [ 63.385920][ T1064] should_failslab+0xac/0x100 [ 63.385944][ T1064] kmem_cache_alloc_noprof+0x42/0x410 [ 63.385964][ T1064] ? security_file_alloc+0x49/0x220 [ 63.385982][ T1064] ? kasan_save_alloc_info+0x3a/0x50 [ 63.386009][ T1064] security_file_alloc+0x49/0x220 [ 63.386028][ T1064] init_file+0x9e/0x210 [ 63.386052][ T1064] alloc_empty_file+0xd9/0x270 [ 63.386077][ T1064] dentry_open+0x4b/0xb0 [ 63.386102][ T1064] init_new_file+0x106/0x530 [ 63.386121][ T1064] ? chmod+0x310/0x310 [ 63.386138][ T1064] ? __kasan_check_write+0x18/0x20 [ 63.386158][ T1064] pending_reads_dispatch_ioctl+0x1c49/0x2080 [ 63.386188][ T1064] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 63.386217][ T1064] ? selinux_file_ioctl+0x732/0x1480 [ 63.386238][ T1064] ? vfs_write+0xbcf/0xfd0 [ 63.386257][ T1064] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 63.386298][ T1064] ? __cfi_vfs_write+0x10/0x10 [ 63.386317][ T1064] ? __kasan_check_write+0x18/0x20 [ 63.386336][ T1064] ? mutex_unlock+0x90/0x240 [ 63.386358][ T1064] ? __cfi_mutex_unlock+0x10/0x10 [ 63.386382][ T1064] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.386405][ T1064] ? security_file_ioctl+0x3e/0x110 [ 63.386420][ T1064] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 63.386442][ T1064] __se_sys_ioctl+0x126/0x1b0 [ 63.386461][ T1064] __x64_sys_ioctl+0x7f/0xa0 [ 63.386480][ T1064] x64_sys_call+0x1878/0x2ee0 [ 63.386497][ T1064] do_syscall_64+0x57/0xf0 [ 63.386512][ T1064] ? clear_bhb_loop+0x50/0xa0 [ 63.386534][ T1064] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.386553][ T1064] RIP: 0033:0x7f5462d9e159 [ 63.386567][ T1064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.386582][ T1064] RSP: 002b:00007f5463bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.386602][ T1064] RAX: ffffffffffffffda RBX: 00007f5463025fa0 RCX: 00007f5462d9e159 [ 63.386616][ T1064] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 63.386629][ T1064] RBP: 00007f5463bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.386640][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.386652][ T1064] R13: 00007f5463026038 R14: 00007f5463025fa0 R15: 00007ffcdb1afcf8 [ 63.386667][ T1064] [ 63.782661][ T1075] netlink: 'syz.3.291': attribute type 46 has an invalid length. [ 63.894737][ T1079] bridge: RTM_NEWNEIGH with invalid ether address [ 63.939114][ T1083] bridge_slave_0: default FDB implementation only supports local addresses [ 63.948018][ T1083] FAULT_INJECTION: forcing a failure. [ 63.948018][ T1083] name failslab, interval 1, probability 0, space 0, times 0 [ 63.961030][ T1083] CPU: 1 UID: 0 PID: 1083 Comm: syz.2.295 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 63.961059][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.961070][ T1083] Call Trace: [ 63.961076][ T1083] [ 63.961084][ T1083] __dump_stack+0x21/0x30 [ 63.961114][ T1083] dump_stack_lvl+0x140/0x1c0 [ 63.961139][ T1083] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.961164][ T1083] ? rtnl_fdb_add+0x77b/0xa10 [ 63.961184][ T1083] dump_stack+0x19/0x20 [ 63.961207][ T1083] should_fail_ex+0x3c2/0x510 [ 63.961230][ T1083] should_failslab+0xac/0x100 [ 63.961254][ T1083] kmem_cache_alloc_node_noprof+0x45/0x420 [ 63.961274][ T1083] ? __alloc_skb+0x10c/0x360 [ 63.961297][ T1083] __alloc_skb+0x10c/0x360 [ 63.961318][ T1083] netlink_ack+0x155/0xa50 [ 63.961350][ T1083] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 63.961372][ T1083] ? avc_has_perm+0x155/0x240 [ 63.961397][ T1083] netlink_rcv_skb+0x2cb/0x4e0 [ 63.961421][ T1083] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 63.961442][ T1083] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 63.961466][ T1083] ? selinux_netlink_send+0x7df/0x8b0 [ 63.961494][ T1083] ? netlink_autobind+0x1c0/0x1c0 [ 63.961522][ T1083] ? is_vmalloc_addr+0x11/0x40 [ 63.961544][ T1083] rtnetlink_rcv+0x20/0x30 [ 63.961563][ T1083] netlink_unicast+0x8bf/0xa70 [ 63.961587][ T1083] netlink_sendmsg+0x7d1/0xad0 [ 63.961612][ T1083] ? __cfi_netlink_sendmsg+0x10/0x10 [ 63.961637][ T1083] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 63.961659][ T1083] ? security_socket_sendmsg+0x3d/0x100 [ 63.961686][ T1083] ____sys_sendmsg+0x99e/0xa00 [ 63.961711][ T1083] ? __import_iovec+0x5b9/0x7d0 [ 63.961730][ T1083] ? __sys_sendmsg_sock+0x50/0x50 [ 63.961755][ T1083] ? import_iovec+0x80/0xb0 [ 63.961773][ T1083] ___sys_sendmsg+0x2a6/0x370 [ 63.961798][ T1083] ? __sys_sendmsg+0x260/0x260 [ 63.961823][ T1083] ? proc_fail_nth_write+0x184/0x220 [ 63.961849][ T1083] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 63.961880][ T1083] ? __fget_files+0x2bc/0x330 [ 63.961903][ T1083] __x64_sys_sendmsg+0x1be/0x2a0 [ 63.961928][ T1083] ? fput+0x1a4/0x230 [ 63.961952][ T1083] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 63.961977][ T1083] ? ksys_write+0x1f3/0x260 [ 63.961999][ T1083] ? __kasan_check_read+0x15/0x20 [ 63.962020][ T1083] x64_sys_call+0x2a4c/0x2ee0 [ 63.962037][ T1083] do_syscall_64+0x57/0xf0 [ 63.962055][ T1083] ? clear_bhb_loop+0x50/0xa0 [ 63.962078][ T1083] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.962099][ T1083] RIP: 0033:0x7f6c04d9e159 [ 63.962117][ T1083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.962133][ T1083] RSP: 002b:00007f6c05caa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.962154][ T1083] RAX: ffffffffffffffda RBX: 00007f6c05025fa0 RCX: 00007f6c04d9e159 [ 63.962169][ T1083] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 63.962182][ T1083] RBP: 00007f6c05caa090 R08: 0000000000000000 R09: 0000000000000000 [ 63.962194][ T1083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.962205][ T1083] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 63.962222][ T1083] [ 64.331667][ T310] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 64.384201][ T36] audit: type=1400 audit(1788987353.749:294): avc: denied { listen } for pid=1085 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.430721][ T365] usb 2-1: USB disconnect, device number 21 [ 64.452741][ T1089] FAULT_INJECTION: forcing a failure. [ 64.452741][ T1089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.470514][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: syz.1.297 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 64.470547][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.470560][ T1089] Call Trace: [ 64.470567][ T1089] [ 64.470579][ T1089] __dump_stack+0x21/0x30 [ 64.470610][ T1089] dump_stack_lvl+0x140/0x1c0 [ 64.470635][ T1089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.470661][ T1089] dump_stack+0x19/0x20 [ 64.470685][ T1089] should_fail_ex+0x3c2/0x510 [ 64.470708][ T1089] should_fail+0xf/0x20 [ 64.470729][ T1089] should_fail_usercopy+0x1e/0x30 [ 64.470753][ T1089] _copy_from_iter+0x1a6/0x1520 [ 64.470780][ T1089] ? __virt_addr_valid+0x2a1/0x370 [ 64.470803][ T1089] ? __cfi__copy_from_iter+0x10/0x10 [ 64.470828][ T1089] ? __check_object_size+0x54c/0x870 [ 64.470850][ T1089] ? __cfi___check_object_size+0x10/0x10 [ 64.470870][ T1089] ? skb_put+0x10e/0x200 [ 64.470893][ T1089] netlink_sendmsg+0x66d/0xad0 [ 64.470919][ T1089] ? __cfi_netlink_sendmsg+0x10/0x10 [ 64.470945][ T1089] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 64.470967][ T1089] ? security_socket_sendmsg+0x3d/0x100 [ 64.470994][ T1089] ____sys_sendmsg+0x99e/0xa00 [ 64.471020][ T1089] ? __import_iovec+0x5b9/0x7d0 [ 64.471038][ T1089] ? __sys_sendmsg_sock+0x50/0x50 [ 64.471062][ T1089] ? import_iovec+0x80/0xb0 [ 64.471079][ T1089] ___sys_sendmsg+0x2a6/0x370 [ 64.471104][ T1089] ? __sys_sendmsg+0x260/0x260 [ 64.471129][ T1089] ? proc_fail_nth_write+0x184/0x220 [ 64.471156][ T1089] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.471187][ T1089] ? __fget_files+0x2bc/0x330 [ 64.471211][ T1089] __x64_sys_sendmsg+0x1be/0x2a0 [ 64.471236][ T1089] ? fput+0x1a4/0x230 [ 64.471258][ T1089] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 64.471282][ T1089] ? ksys_write+0x1f3/0x260 [ 64.471304][ T1089] ? __kasan_check_read+0x15/0x20 [ 64.471324][ T1089] x64_sys_call+0x2a4c/0x2ee0 [ 64.471342][ T1089] do_syscall_64+0x57/0xf0 [ 64.471359][ T1089] ? clear_bhb_loop+0x50/0xa0 [ 64.471389][ T1089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.471410][ T1089] RIP: 0033:0x7f088d59e159 [ 64.471427][ T1089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.471445][ T1089] RSP: 002b:00007f088e3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.471466][ T1089] RAX: ffffffffffffffda RBX: 00007f088d825fa0 RCX: 00007f088d59e159 [ 64.471481][ T1089] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 64.471495][ T1089] RBP: 00007f088e3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 64.471507][ T1089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.471520][ T1089] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007ffedefe7448 [ 64.471535][ T1089] [ 64.481568][ T310] usb 4-1: device descriptor read/64, error -71 [ 64.611597][ T558] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.846441][ T1097] netlink: 'syz.1.301': attribute type 46 has an invalid length. [ 64.854381][ T310] usb 4-1: device descriptor read/64, error -71 [ 64.911647][ T558] usb 3-1: Using ep0 maxpacket: 32 [ 64.918339][ T558] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.927054][ T558] usb 3-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 64.937619][ T558] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.948187][ T558] usb 3-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d9.93 [ 64.957450][ T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.965681][ T558] usb 3-1: Product: syz [ 64.969854][ T558] usb 3-1: Manufacturer: syz [ 64.974644][ T558] usb 3-1: SerialNumber: syz [ 64.982012][ T558] usb 3-1: config 0 descriptor?? [ 65.101593][ T310] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 65.111687][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 65.261570][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 65.261570][ T310] usb 4-1: device descriptor read/64, error -71 [ 65.263606][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 65.281583][ T9] usb 2-1: config 0 has no interface number 0 [ 65.287791][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 65.296374][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 65.305827][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.314030][ T9] usb 2-1: Product: syz [ 65.318320][ T9] usb 2-1: Manufacturer: syz [ 65.323158][ T9] usb 2-1: SerialNumber: syz [ 65.331839][ T9] usb 2-1: config 0 descriptor?? [ 65.339570][ T9] smsc75xx v1.0.0 [ 65.501598][ T310] usb 4-1: device descriptor read/64, error -71 [ 65.611684][ T310] usb usb4-port1: attempt power cycle [ 65.775021][ T1099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.784394][ T1099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.951583][ T310] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 65.972675][ T310] usb 4-1: device descriptor read/8, error -71 [ 65.993549][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 66.004409][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.014243][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 66.025346][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 66.035208][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 66.045999][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.055703][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 66.069137][ T9] usb 2-1: USB disconnect, device number 22 [ 66.102510][ T310] usb 4-1: device descriptor read/8, error -71 [ 66.361566][ T310] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 66.382605][ T310] usb 4-1: device descriptor read/8, error -71 [ 66.513458][ T310] usb 4-1: device descriptor read/8, error -71 [ 66.523484][ T1101] new mount options do not match the existing superblock, will be ignored [ 66.533423][ T1101] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 66.553864][ T1101] bridge_slave_0: default FDB implementation only supports local addresses [ 66.641727][ T310] usb usb4-port1: unable to enumerate USB device [ 66.754021][ T36] audit: type=1326 audit(1788987356.129:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.805018][ T36] audit: type=1326 audit(1788987356.149:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.830706][ T36] audit: type=1326 audit(1788987356.149:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.863261][ T36] audit: type=1326 audit(1788987356.149:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.896574][ T36] audit: type=1326 audit(1788987356.149:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.922035][ T36] audit: type=1326 audit(1788987356.149:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.961894][ T36] audit: type=1326 audit(1788987356.159:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 66.987473][ T36] audit: type=1326 audit(1788987356.159:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 67.013040][ T36] audit: type=1326 audit(1788987356.159:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 67.038499][ T36] audit: type=1326 audit(1788987356.159:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1106 comm="syz.1.306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d59e159 code=0x7ffc0000 [ 67.071708][ T310] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 67.231574][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 67.238018][ T310] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 67.246518][ T310] usb 2-1: config 0 has no interface number 0 [ 67.252926][ T310] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 67.266657][ T310] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 67.276060][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.284303][ T310] usb 2-1: Product: syz [ 67.288627][ T310] usb 2-1: Manufacturer: syz [ 67.293539][ T310] usb 2-1: SerialNumber: syz [ 67.302431][ T310] usb 2-1: config 0 descriptor?? [ 67.307802][ T1109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.332346][ T558] usb 3-1: USB disconnect, device number 13 [ 67.540981][ T1109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.651589][ T558] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 67.812685][ T558] usb 3-1: config index 0 descriptor too short (expected 35972, got 152) [ 67.821169][ T558] usb 3-1: config 64 has too many interfaces: 159, using maximum allowed: 32 [ 67.830248][ T558] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 67.840622][ T558] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 159 [ 67.851630][ T558] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.860756][ T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.869031][ T558] usb 3-1: Product: syz [ 67.873385][ T558] usb 3-1: Manufacturer: syz [ 67.877997][ T558] usb 3-1: SerialNumber: syz [ 68.097408][ T558] usb 3-1: USB disconnect, device number 14 [ 68.291615][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.451577][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 68.457991][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 68.466668][ T45] usb 4-1: config 0 has no interface number 0 [ 68.473063][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 68.481474][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 68.490910][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.499137][ T45] usb 4-1: Product: syz [ 68.503584][ T45] usb 4-1: Manufacturer: syz [ 68.508265][ T45] usb 4-1: SerialNumber: syz [ 68.514073][ T45] usb 4-1: config 0 descriptor?? [ 68.522184][ T45] smsc75xx v1.0.0 [ 68.628332][ T1123] new mount options do not match the existing superblock, will be ignored [ 68.924760][ T1121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.934723][ T1121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.081586][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 69.145024][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 69.157962][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.167614][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 69.178644][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 69.188531][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 69.199142][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 69.208826][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 69.217231][ T31] usb 3-1: device descriptor read/64, error -71 [ 69.227368][ T45] usb 4-1: USB disconnect, device number 16 [ 69.471598][ T31] usb 3-1: device descriptor read/64, error -71 [ 69.721607][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 69.871595][ T31] usb 3-1: device descriptor read/64, error -71 [ 69.921657][ T1143] netlink: 'syz.3.321': attribute type 46 has an invalid length. [ 70.111598][ T31] usb 3-1: device descriptor read/64, error -71 [ 70.221718][ T31] usb usb3-port1: attempt power cycle [ 70.261318][ T310] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 70.274168][ T310] asix 2-1:0.188: probe with driver asix failed with error -71 [ 70.285419][ T310] usb 2-1: USB disconnect, device number 23 [ 70.331651][ T1131] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 70.481600][ T1131] usb 4-1: Using ep0 maxpacket: 32 [ 70.488032][ T1131] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.496721][ T1131] usb 4-1: config 0 has no interface number 0 [ 70.504106][ T1131] usb 4-1: config 0 interface 184 has no altsetting 0 [ 70.512433][ T1131] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.530350][ T1131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.538573][ T1131] usb 4-1: Product: syz [ 70.543066][ T1131] usb 4-1: Manufacturer: syz [ 70.547688][ T1131] usb 4-1: SerialNumber: syz [ 70.556885][ T1131] usb 4-1: config 0 descriptor?? [ 70.562076][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 70.570737][ T1131] smsc75xx v1.0.0 [ 70.582588][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.722683][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.961615][ T31] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 70.982739][ T31] usb 3-1: device descriptor read/8, error -71 [ 70.990568][ T1154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.001743][ T1154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.132683][ T31] usb 3-1: device descriptor read/8, error -71 [ 71.223977][ T1172] FAULT_INJECTION: forcing a failure. [ 71.223977][ T1172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.227379][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 71.237231][ T1172] CPU: 0 UID: 0 PID: 1172 Comm: syz.1.334 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 71.237259][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.237271][ T1172] Call Trace: [ 71.237278][ T1172] [ 71.237286][ T1172] __dump_stack+0x21/0x30 [ 71.237316][ T1172] dump_stack_lvl+0x140/0x1c0 [ 71.237340][ T1172] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.237365][ T1172] ? check_stack_object+0x138/0x150 [ 71.237385][ T1172] dump_stack+0x19/0x20 [ 71.237408][ T1172] should_fail_ex+0x3c2/0x510 [ 71.237430][ T1172] should_fail+0xf/0x20 [ 71.237450][ T1172] should_fail_usercopy+0x1e/0x30 [ 71.237472][ T1172] _copy_to_user+0x24/0xa0 [ 71.237497][ T1172] simple_read_from_buffer+0xed/0x160 [ 71.237522][ T1172] proc_fail_nth_read+0x1aa/0x220 [ 71.237548][ T1172] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 71.237574][ T1172] ? do_splice+0x149d/0x1cc0 [ 71.237596][ T1172] ? bpf_lsm_file_permission+0xd/0x20 [ 71.237620][ T1172] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 71.237644][ T1172] vfs_read+0x28b/0xc70 [ 71.237664][ T1172] ? __cfi_vfs_read+0x10/0x10 [ 71.237681][ T1172] ? __kasan_check_write+0x18/0x20 [ 71.237699][ T1172] ? mutex_lock+0x97/0x1d0 [ 71.237720][ T1172] ? __cfi_mutex_lock+0x10/0x10 [ 71.237742][ T1172] ksys_read+0x145/0x260 [ 71.237760][ T1172] ? __cfi_ksys_read+0x10/0x10 [ 71.237779][ T1172] ? __kasan_check_read+0x15/0x20 [ 71.237797][ T1172] __x64_sys_read+0x7f/0x90 [ 71.237816][ T1172] x64_sys_call+0x2638/0x2ee0 [ 71.237833][ T1172] do_syscall_64+0x57/0xf0 [ 71.237849][ T1172] ? clear_bhb_loop+0x50/0xa0 [ 71.237870][ T1172] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.237891][ T1172] RIP: 0033:0x7f088d55e98e [ 71.237907][ T1172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.237923][ T1172] RSP: 002b:00007f088e3fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.237943][ T1172] RAX: ffffffffffffffda RBX: 00007f088e3fd6c0 RCX: 00007f088d55e98e [ 71.237958][ T1172] RDX: 000000000000000f RSI: 00007f088e3fd0a0 RDI: 0000000000000006 [ 71.237970][ T1172] RBP: 00007f088e3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 71.237982][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.237993][ T1172] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007ffedefe7448 [ 71.238009][ T1172] [ 71.488200][ T31] usb usb3-port1: unable to enumerate USB device [ 71.495043][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.511606][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 71.522695][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 71.533462][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 71.543775][ T1131] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 71.553253][ T1131] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 71.563935][ T1131] usb 4-1: USB disconnect, device number 17 [ 71.741599][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 71.847861][ T796] bridge_slave_1: left allmulticast mode [ 71.857812][ T796] bridge_slave_1: left promiscuous mode [ 71.864024][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 71.864040][ T36] audit: type=1400 audit(1788987361.239:352): avc: denied { mounton } for pid=1182 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.881658][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.901564][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 71.907789][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 71.918233][ T796] bridge_slave_0: left allmulticast mode [ 71.923933][ T796] bridge_slave_0: left promiscuous mode [ 71.929570][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.936846][ T9] usb 2-1: config 0 has no interface number 0 [ 71.943172][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 71.954813][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 71.964003][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.973629][ T9] usb 2-1: Product: syz [ 71.977820][ T9] usb 2-1: Manufacturer: syz [ 71.987707][ T36] audit: type=1400 audit(1788987361.359:353): avc: denied { create } for pid=1191 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.007191][ T9] usb 2-1: SerialNumber: syz [ 72.012784][ T9] usb 2-1: config 0 descriptor?? [ 72.018092][ T1178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.060844][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.067959][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.075325][ T1182] bridge_slave_0: entered allmulticast mode [ 72.082172][ T1182] bridge_slave_0: entered promiscuous mode [ 72.088721][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.095866][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.103235][ T1182] bridge_slave_1: entered allmulticast mode [ 72.109468][ T1182] bridge_slave_1: entered promiscuous mode [ 72.116249][ T796] veth1_macvtap: left promiscuous mode [ 72.212813][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.219883][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.227238][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.228763][ T1178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.234310][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.241484][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 72.267325][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.274635][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.284573][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291651][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.300568][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.307645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.332714][ T1182] veth0_vlan: entered promiscuous mode [ 72.344815][ T1182] veth1_macvtap: entered promiscuous mode [ 72.362898][ T36] audit: type=1400 audit(1788987361.739:354): avc: denied { mount } for pid=1182 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.385755][ T36] audit: type=1400 audit(1788987361.739:355): avc: denied { mounton } for pid=1182 comm="syz-executor" path="/root/syzkaller.ztVme3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.412561][ T1131] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 72.441759][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 72.447844][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 72.457841][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.472839][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 72.481974][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.490160][ T10] usb 3-1: Product: syz [ 72.494376][ T10] usb 3-1: Manufacturer: syz [ 72.498980][ T10] usb 3-1: SerialNumber: syz [ 72.504684][ T1192] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 72.562877][ T1131] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.574497][ T1131] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.584709][ T1131] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 72.593889][ T1131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.714027][ T1192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.722650][ T1192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.732505][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 72.741032][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 72.753828][ T10] usb 3-1: USB disconnect, device number 19 [ 72.760927][ T10] usblp0: removed [ 73.006909][ T1131] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 73.014478][ T1131] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 73.021922][ T1131] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 73.029339][ T1131] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x4 [ 73.091634][ T1131] hid-picolcd 0003:04D8:C002.0006: unsupported KEY_STATE report [ 73.099622][ T1131] hid-picolcd 0003:04D8:C002.0006: probe with driver hid-picolcd failed with error -22 [ 73.209156][ T10] usb 4-1: USB disconnect, device number 18 [ 73.398266][ T1215] new mount options do not match the existing superblock, will be ignored [ 73.418511][ T1217] bridge_slave_0: default FDB implementation only supports local addresses [ 73.502968][ T36] audit: type=1400 audit(1788987362.879:356): avc: denied { create } for pid=1223 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 73.741577][ T64] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 73.901603][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 73.907785][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.918023][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.928369][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.937504][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.945938][ T64] usb 3-1: Product: syz [ 73.950099][ T64] usb 3-1: Manufacturer: syz [ 73.954741][ T64] usb 3-1: SerialNumber: syz [ 74.061619][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 74.162995][ T64] usb 3-1: 0:2 : does not exist [ 74.170092][ T64] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 74.181028][ T64] usb 3-1: USB disconnect, device number 20 [ 74.188291][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.221686][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 74.229238][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 74.238347][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.246393][ T31] usb 4-1: Product: syz [ 74.250616][ T31] usb 4-1: Manufacturer: syz [ 74.255601][ T31] usb 4-1: SerialNumber: syz [ 74.495080][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.515773][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 74.526477][ T31] usb 4-1: USB disconnect, device number 19 [ 74.535058][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.673236][ T36] audit: type=1400 audit(1788987364.049:357): avc: denied { load_policy } for pid=1241 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.673485][ T1242] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 74.702984][ T1242] SELinux: failed to load policy [ 74.746747][ T36] audit: type=1400 audit(1788987364.119:358): avc: denied { connect } for pid=1247 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.908832][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 74.919176][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 74.928554][ T9] usb 2-1: USB disconnect, device number 24 [ 74.951975][ T36] audit: type=1400 audit(1788987364.329:359): avc: denied { wake_alarm } for pid=1251 comm="syz.2.366" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.311603][ T1131] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 75.411593][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 75.462738][ T1131] usb 3-1: config index 0 descriptor too short (expected 35972, got 152) [ 75.471221][ T1131] usb 3-1: config 64 has too many interfaces: 159, using maximum allowed: 32 [ 75.480253][ T1131] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 75.490479][ T1131] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 159 [ 75.501730][ T1131] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.512916][ T1131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.520938][ T1131] usb 3-1: Product: syz [ 75.525187][ T1131] usb 3-1: Manufacturer: syz [ 75.529778][ T1131] usb 3-1: SerialNumber: syz [ 75.586069][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 75.595241][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.615589][ T1284] FAULT_INJECTION: forcing a failure. [ 75.615589][ T1284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.628908][ T1284] CPU: 0 UID: 0 PID: 1284 Comm: syz.4.380 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 75.628941][ T1284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.628952][ T1284] Call Trace: [ 75.628958][ T1284] [ 75.628965][ T1284] __dump_stack+0x21/0x30 [ 75.628996][ T1284] dump_stack_lvl+0x140/0x1c0 [ 75.629019][ T1284] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.629041][ T1284] dump_stack+0x19/0x20 [ 75.629061][ T1284] should_fail_ex+0x3c2/0x510 [ 75.629081][ T1284] should_fail+0xf/0x20 [ 75.629099][ T1284] should_fail_usercopy+0x1e/0x30 [ 75.629120][ T1284] _copy_from_user+0x20/0xa0 [ 75.629144][ T1284] arp_ioctl+0x147/0x3c0 [ 75.629162][ T1284] ? __cfi_arp_ioctl+0x10/0x10 [ 75.629182][ T1284] inet_ioctl+0x3cb/0x570 [ 75.629198][ T1284] ? __cfi_inet_ioctl+0x10/0x10 [ 75.629217][ T1284] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 75.629244][ T1284] ? _raw_spin_lock_irq+0x93/0x120 [ 75.629261][ T1284] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 75.629278][ T1284] sock_do_ioctl+0x115/0x330 [ 75.629296][ T1284] ? sock_show_fdinfo+0xd0/0xd0 [ 75.629313][ T1284] ? __cfi_vfs_write+0x10/0x10 [ 75.629330][ T1284] ? __kasan_check_write+0x18/0x20 [ 75.629349][ T1284] ? mutex_unlock+0x90/0x240 [ 75.629367][ T1284] sock_ioctl+0x568/0x7e0 [ 75.629384][ T1284] ? __cfi_sock_ioctl+0x10/0x10 [ 75.629400][ T1284] ? __fget_files+0x2bc/0x330 [ 75.629424][ T1284] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.629446][ T1284] ? security_file_ioctl+0x3e/0x110 [ 75.629466][ T1284] ? __cfi_sock_ioctl+0x10/0x10 [ 75.629483][ T1284] __se_sys_ioctl+0x126/0x1b0 [ 75.629506][ T1284] __x64_sys_ioctl+0x7f/0xa0 [ 75.629527][ T1284] x64_sys_call+0x1878/0x2ee0 [ 75.629544][ T1284] do_syscall_64+0x57/0xf0 [ 75.629561][ T1284] ? clear_bhb_loop+0x50/0xa0 [ 75.629593][ T1284] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.629614][ T1284] RIP: 0033:0x7f0d9999e159 [ 75.629630][ T1284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.629647][ T1284] RSP: 002b:00007f0d9a92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.629669][ T1284] RAX: ffffffffffffffda RBX: 00007f0d99c25fa0 RCX: 00007f0d9999e159 [ 75.629683][ T1284] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 75.629695][ T1284] RBP: 00007f0d9a92a090 R08: 0000000000000000 R09: 0000000000000000 [ 75.629708][ T1284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.629720][ T1284] R13: 00007f0d99c26038 R14: 00007f0d99c25fa0 R15: 00007fff51de1e08 [ 75.629736][ T1284] [ 75.893727][ T1131] usb 3-1: USB disconnect, device number 21 [ 75.904636][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 75.930789][ T1292] bridge_slave_0: default FDB implementation only supports local addresses [ 75.939572][ T1292] FAULT_INJECTION: forcing a failure. [ 75.939572][ T1292] name failslab, interval 1, probability 0, space 0, times 0 [ 75.952351][ T1292] CPU: 1 UID: 0 PID: 1292 Comm: syz.4.384 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 75.952382][ T1292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.952393][ T1292] Call Trace: [ 75.952400][ T1292] [ 75.952407][ T1292] __dump_stack+0x21/0x30 [ 75.952436][ T1292] dump_stack_lvl+0x140/0x1c0 [ 75.952460][ T1292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.952485][ T1292] ? rtnl_fdb_add+0x77b/0xa10 [ 75.952504][ T1292] dump_stack+0x19/0x20 [ 75.952528][ T1292] should_fail_ex+0x3c2/0x510 [ 75.952551][ T1292] should_failslab+0xac/0x100 [ 75.952574][ T1292] kmem_cache_alloc_node_noprof+0x45/0x420 [ 75.952603][ T1292] ? __alloc_skb+0x10c/0x360 [ 75.952625][ T1292] __alloc_skb+0x10c/0x360 [ 75.952646][ T1292] netlink_ack+0x155/0xa50 [ 75.952669][ T1292] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 75.952691][ T1292] ? avc_has_perm+0x155/0x240 [ 75.952715][ T1292] netlink_rcv_skb+0x2cb/0x4e0 [ 75.952740][ T1292] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 75.952760][ T1292] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 75.952784][ T1292] ? selinux_netlink_send+0x7df/0x8b0 [ 75.952812][ T1292] ? netlink_autobind+0x1c0/0x1c0 [ 75.952839][ T1292] ? is_vmalloc_addr+0x11/0x40 [ 75.952863][ T1292] rtnetlink_rcv+0x20/0x30 [ 75.952882][ T1292] netlink_unicast+0x8bf/0xa70 [ 75.952907][ T1292] netlink_sendmsg+0x7d1/0xad0 [ 75.952932][ T1292] ? __cfi_netlink_sendmsg+0x10/0x10 [ 75.952959][ T1292] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 75.952980][ T1292] ? security_socket_sendmsg+0x3d/0x100 [ 75.953007][ T1292] ____sys_sendmsg+0x99e/0xa00 [ 75.953033][ T1292] ? __import_iovec+0x5b9/0x7d0 [ 75.953050][ T1292] ? __sys_sendmsg_sock+0x50/0x50 [ 75.953076][ T1292] ? import_iovec+0x80/0xb0 [ 75.953093][ T1292] ___sys_sendmsg+0x2a6/0x370 [ 75.953119][ T1292] ? __sys_sendmsg+0x260/0x260 [ 75.953143][ T1292] ? proc_fail_nth_write+0x184/0x220 [ 75.953171][ T1292] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 75.953200][ T1292] ? __fget_files+0x2bc/0x330 [ 75.953223][ T1292] __x64_sys_sendmsg+0x1be/0x2a0 [ 75.953244][ T1292] ? fput+0x1a4/0x230 [ 75.953258][ T1292] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 75.953273][ T1292] ? ksys_write+0x1f3/0x260 [ 75.953285][ T1292] ? __kasan_check_read+0x15/0x20 [ 75.953296][ T1292] x64_sys_call+0x2a4c/0x2ee0 [ 75.953305][ T1292] do_syscall_64+0x57/0xf0 [ 75.953315][ T1292] ? clear_bhb_loop+0x50/0xa0 [ 75.953328][ T1292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.953341][ T1292] RIP: 0033:0x7f0d9999e159 [ 75.953351][ T1292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.953360][ T1292] RSP: 002b:00007f0d9a92a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.953373][ T1292] RAX: ffffffffffffffda RBX: 00007f0d99c25fa0 RCX: 00007f0d9999e159 [ 75.953381][ T1292] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 75.953389][ T1292] RBP: 00007f0d9a92a090 R08: 0000000000000000 R09: 0000000000000000 [ 75.953395][ T1292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.953402][ T1292] R13: 00007f0d99c26038 R14: 00007f0d99c25fa0 R15: 00007fff51de1e08 [ 75.953411][ T1292] [ 75.965044][ T1295] bridge_slave_0: default FDB implementation only supports local addresses [ 76.145454][ T36] audit: type=1400 audit(1788987365.519:360): avc: denied { view } for pid=1267 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.146588][ T9] usb 4-1: USB disconnect, device number 20 [ 76.191589][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 76.413158][ T36] audit: type=1400 audit(1788987365.789:361): avc: denied { write } for pid=1298 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.471610][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 76.479883][ T45] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 76.488203][ T45] usb 2-1: config 0 has no interface number 0 [ 76.494573][ T45] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.506269][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 76.515420][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.523451][ T45] usb 2-1: Product: syz [ 76.527609][ T45] usb 2-1: Manufacturer: syz [ 76.532230][ T45] usb 2-1: SerialNumber: syz [ 76.537526][ T45] usb 2-1: config 0 descriptor?? [ 76.542820][ T1293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.565641][ T1333] bridge_slave_0: default FDB implementation only supports local addresses [ 76.709532][ T1342] bridge_slave_0: default FDB implementation only supports local addresses [ 76.755572][ T1293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.985600][ T1360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 77.384566][ T1369] netlink: 'syz.3.408': attribute type 46 has an invalid length. [ 77.569332][ T1381] FAULT_INJECTION: forcing a failure. [ 77.569332][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.582776][ T1381] CPU: 0 UID: 0 PID: 1381 Comm: syz.2.414 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 77.582809][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.582823][ T1381] Call Trace: [ 77.582829][ T1381] [ 77.582837][ T1381] __dump_stack+0x21/0x30 [ 77.582869][ T1381] dump_stack_lvl+0x140/0x1c0 [ 77.582894][ T1381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.582920][ T1381] ? vfs_write+0xbcf/0xfd0 [ 77.582941][ T1381] dump_stack+0x19/0x20 [ 77.582964][ T1381] should_fail_ex+0x3c2/0x510 [ 77.582986][ T1381] should_fail+0xf/0x20 [ 77.583005][ T1381] should_fail_usercopy+0x1e/0x30 [ 77.583038][ T1381] _copy_from_user+0x20/0xa0 [ 77.583067][ T1381] __se_sys_io_uring_setup+0x170/0x2b0 [ 77.583096][ T1381] ? __se_sys_futex+0x13c/0x320 [ 77.583113][ T1381] ? __x64_sys_io_uring_setup+0x80/0x80 [ 77.583129][ T1381] ? __kasan_check_write+0x18/0x20 [ 77.583141][ T1381] __x64_sys_io_uring_setup+0x5f/0x80 [ 77.583155][ T1381] x64_sys_call+0x22c0/0x2ee0 [ 77.583169][ T1381] do_syscall_64+0x57/0xf0 [ 77.583186][ T1381] ? clear_bhb_loop+0x50/0xa0 [ 77.583211][ T1381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.583234][ T1381] RIP: 0033:0x7f6c04d9e159 [ 77.583251][ T1381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.583260][ T1381] RSP: 002b:00007f6c05ca9fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 77.583273][ T1381] RAX: ffffffffffffffda RBX: 0000200000001640 RCX: 00007f6c04d9e159 [ 77.583282][ T1381] RDX: 0000200000001700 RSI: 0000200000001640 RDI: 0000000000005668 [ 77.583289][ T1381] RBP: 00007f6c04e3503b R08: 0000000000000000 R09: 0000000000000000 [ 77.583297][ T1381] R10: 0000200000001740 R11: 0000000000000206 R12: 0000200000001700 [ 77.583304][ T1381] R13: 0000200000001740 R14: 00002000000016c0 R15: 00007ffcd707b0a8 [ 77.583315][ T1381] [ 77.881635][ T1131] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 77.911584][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 78.031594][ T1131] usb 3-1: Using ep0 maxpacket: 32 [ 78.037944][ T1131] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.046411][ T1131] usb 3-1: config 0 has no interface number 0 [ 78.052585][ T1131] usb 3-1: config 0 interface 184 has no altsetting 0 [ 78.060675][ T1131] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.069775][ T1131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.072807][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 78.077812][ T1131] usb 3-1: Product: syz [ 78.089242][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 78.093075][ T1131] usb 3-1: Manufacturer: syz [ 78.093094][ T1131] usb 3-1: SerialNumber: syz [ 78.094446][ T1131] usb 3-1: config 0 descriptor?? [ 78.111600][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.113491][ T1131] smsc75xx v1.0.0 [ 78.522335][ T9] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 78.722453][ T1377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.731026][ T1377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.741077][ T9] lg-g15 0003:046D:C222.0007: Error getting LED brightness: -71 [ 78.749467][ T9] lg-g15 0003:046D:C222.0007: probe with driver lg-g15 failed with error -71 [ 78.760314][ T9] usb 4-1: USB disconnect, device number 21 [ 78.915533][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 78.926423][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.935783][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.946590][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 78.956262][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 78.966541][ T1131] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.976033][ T1131] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 78.987196][ T1131] usb 3-1: USB disconnect, device number 22 [ 79.191782][ T45] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 79.202134][ T45] asix 2-1:0.188: probe with driver asix failed with error -71 [ 79.213897][ T45] usb 2-1: USB disconnect, device number 25 [ 79.233419][ T1389] bridge_slave_0: default FDB implementation only supports local addresses [ 79.280438][ T1397] bridge_slave_0: default FDB implementation only supports local addresses [ 79.452636][ T1410] overlayfs: missing 'lowerdir' [ 79.467399][ T1412] netlink: 'syz.2.428': attribute type 46 has an invalid length. [ 79.777057][ T1432] bridge_slave_0: default FDB implementation only supports local addresses [ 79.795511][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 79.795527][ T36] audit: type=1400 audit(1788987369.169:363): avc: denied { map } for pid=1433 comm="syz.1.439" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.795844][ T1434] __vm_enough_memory: pid: 1434, comm: syz.1.439, bytes: 279172874240 not enough memory for the allocation [ 79.801723][ T36] audit: type=1400 audit(1788987369.169:364): avc: denied { execute } for pid=1433 comm="syz.1.439" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.841581][ T365] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 80.012460][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 80.022341][ T365] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.030734][ T365] usb 3-1: config 0 has no interface number 0 [ 80.037091][ T365] usb 3-1: config 0 interface 184 has no altsetting 0 [ 80.052487][ T365] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.062705][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.071002][ T365] usb 3-1: Product: syz [ 80.075396][ T365] usb 3-1: Manufacturer: syz [ 80.080069][ T365] usb 3-1: SerialNumber: syz [ 80.091793][ T365] usb 3-1: config 0 descriptor?? [ 80.097784][ T365] smsc75xx v1.0.0 [ 80.906919][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 80.917795][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.927136][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.937934][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 80.947589][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 80.957850][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 80.967379][ T365] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 80.977811][ T365] usb 3-1: USB disconnect, device number 23 [ 81.031602][ T1131] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 81.051644][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 81.182722][ T1131] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 81.192626][ T1131] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 81.202638][ T1131] usb 4-1: config 1 interface 0 has no altsetting 0 [ 81.211267][ T1131] usb 4-1: string descriptor 0 read error: -22 [ 81.212707][ T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 81.217539][ T1131] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 4.40 [ 81.229271][ T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.237619][ T1131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.250779][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.262693][ T1450] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.265286][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 81.272684][ T1450] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.281494][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.297858][ T9] usb 2-1: config 0 descriptor?? [ 81.303138][ T1452] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 81.513444][ T36] audit: type=1400 audit(1788987370.889:365): avc: denied { watch } for pid=1451 comm="syz.1.445" path="/96" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.515548][ T1452] netlink: 116 bytes leftover after parsing attributes in process `syz.1.445'. [ 81.616148][ T1460] bridge_slave_0: default FDB implementation only supports local addresses [ 81.750398][ T9] hid (null): unknown global tag 0xc [ 81.756463][ T9] kye 0003:0458:501A.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 81.767175][ T9] kye 0003:0458:501A.0008: unknown main item tag 0x2 [ 81.773904][ T9] kye 0003:0458:501A.0008: unknown main item tag 0x7 [ 81.780632][ T9] kye 0003:0458:501A.0008: unknown global tag 0xc [ 81.787074][ T9] kye 0003:0458:501A.0008: item 0 2 1 12 parsing failed [ 81.794152][ T9] kye 0003:0458:501A.0008: parse failed [ 81.799715][ T9] kye 0003:0458:501A.0008: probe with driver kye failed with error -22 [ 81.958474][ T9] usb 2-1: USB disconnect, device number 26 [ 82.467807][ T1468] capability: warning: `syz.2.453' uses deprecated v2 capabilities in a way that may be insecure [ 82.499351][ T1473] FAULT_INJECTION: forcing a failure. [ 82.499351][ T1473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.513287][ T1473] CPU: 0 UID: 0 PID: 1473 Comm: syz.2.456 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 82.513323][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.513335][ T1473] Call Trace: [ 82.513343][ T1473] [ 82.513351][ T1473] __dump_stack+0x21/0x30 [ 82.513385][ T1473] dump_stack_lvl+0x140/0x1c0 [ 82.513411][ T1473] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.513436][ T1473] ? __kasan_check_write+0x18/0x20 [ 82.513455][ T1473] ? prep_new_page+0x42/0x180 [ 82.513480][ T1473] dump_stack+0x19/0x20 [ 82.513504][ T1473] should_fail_ex+0x3c2/0x510 [ 82.513526][ T1473] should_fail_alloc_page+0xec/0x110 [ 82.513551][ T1473] __alloc_pages_noprof+0x1c0/0x7e0 [ 82.513578][ T1473] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.513609][ T1473] __pud_alloc+0xb0/0x8f0 [ 82.513631][ T1473] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 82.513657][ T1473] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 82.513678][ T1473] ? __cfi___pud_alloc+0x10/0x10 [ 82.513701][ T1473] ? lruvec_init+0x261/0x280 [ 82.513723][ T1473] __get_locked_pte+0x1fe/0x2a0 [ 82.513744][ T1473] map_ldt_struct+0x413/0x730 [ 82.513768][ T1473] ? alloc_ldt_struct+0x2f0/0x2f0 [ 82.513791][ T1473] ? alloc_ldt_struct+0xf9/0x2f0 [ 82.513812][ T1473] ? __kasan_check_write+0x18/0x20 [ 82.513833][ T1473] write_ldt+0x5fe/0x760 [ 82.513855][ T1473] ? native_write_gdt_entry+0x40/0x40 [ 82.513877][ T1473] ? xfd_validate_state+0x68/0x140 [ 82.513904][ T1473] __se_sys_modify_ldt+0x70/0x2e0 [ 82.513928][ T1473] __x64_sys_modify_ldt+0x7f/0xa0 [ 82.513950][ T1473] x64_sys_call+0x143d/0x2ee0 [ 82.513969][ T1473] do_syscall_64+0x57/0xf0 [ 82.513988][ T1473] ? clear_bhb_loop+0x50/0xa0 [ 82.514019][ T1473] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.514041][ T1473] RIP: 0033:0x7f6c04d9e159 [ 82.514060][ T1473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.514078][ T1473] RSP: 002b:00007f6c05caa028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 82.514101][ T1473] RAX: ffffffffffffffda RBX: 00007f6c05025fa0 RCX: 00007f6c04d9e159 [ 82.514117][ T1473] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000001 [ 82.514130][ T1473] RBP: 00007f6c04e3503b R08: 0000000000000000 R09: 0000000000000000 [ 82.514143][ T1473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.514156][ T1473] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 82.514174][ T1473] [ 82.731652][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 82.782911][ T1131] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 82.808316][ T1487] bridge_slave_0: default FDB implementation only supports local addresses [ 82.852210][ T1493] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 82.921677][ T1131] usb 3-1: device descriptor read/64, error -71 [ 82.942750][ T45] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.954057][ T45] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.966854][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.973516][ T45] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 82.982568][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.991163][ T45] usb 2-1: config 0 descriptor?? [ 83.171589][ T1131] usb 3-1: device descriptor read/64, error -71 [ 83.401238][ T45] hid-multitouch 0003:0EEF:72C4.0009: item fetching failed at offset 22/24 [ 83.410117][ T45] hid-multitouch 0003:0EEF:72C4.0009: probe with driver hid-multitouch failed with error -22 [ 83.420384][ T1131] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 83.551626][ T1131] usb 3-1: device descriptor read/64, error -71 [ 83.602766][ T45] usb 2-1: USB disconnect, device number 27 [ 83.736248][ T64] usb 4-1: USB disconnect, device number 22 [ 83.791570][ T1131] usb 3-1: device descriptor read/64, error -71 [ 83.799735][ T1505] bridge_slave_0: default FDB implementation only supports local addresses [ 83.901707][ T1131] usb usb3-port1: attempt power cycle [ 84.118793][ T1509] bridge_slave_0: default FDB implementation only supports local addresses [ 84.241627][ T1131] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 84.262584][ T1131] usb 3-1: device descriptor read/8, error -71 [ 84.271819][ T64] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 84.392595][ T1131] usb 3-1: device descriptor read/8, error -71 [ 84.401635][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 84.409169][ T64] usb 4-1: device descriptor read/64, error -71 [ 84.541649][ T9] usb 2-1: device descriptor read/64, error -71 [ 84.631628][ T1131] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 84.652244][ T64] usb 4-1: device descriptor read/64, error -71 [ 84.652883][ T1131] usb 3-1: device descriptor read/8, error -71 [ 84.791581][ T9] usb 2-1: device descriptor read/64, error -71 [ 84.792621][ T1131] usb 3-1: device descriptor read/8, error -71 [ 84.891657][ T64] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 84.921657][ T1131] usb usb3-port1: unable to enumerate USB device [ 85.021705][ T64] usb 4-1: device descriptor read/64, error -71 [ 85.031631][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 85.161636][ T9] usb 2-1: device descriptor read/64, error -71 [ 85.261628][ T64] usb 4-1: device descriptor read/64, error -71 [ 85.371728][ T64] usb usb4-port1: attempt power cycle [ 85.401625][ T9] usb 2-1: device descriptor read/64, error -71 [ 85.511684][ T9] usb usb2-port1: attempt power cycle [ 85.556373][ T1517] No source specified [ 85.560873][ T36] audit: type=1400 audit(1788987374.929:366): avc: denied { create } for pid=1516 comm="syz.2.475" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.561452][ T1517] netlink: 188 bytes leftover after parsing attributes in process `syz.2.475'. [ 85.595071][ T36] audit: type=1400 audit(1788987374.969:367): avc: denied { append } for pid=1516 comm="syz.2.475" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.617386][ T36] audit: type=1400 audit(1788987374.969:368): avc: denied { open } for pid=1516 comm="syz.2.475" path="/132/file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.639961][ T36] audit: type=1400 audit(1788987374.969:369): avc: denied { read } for pid=1516 comm="syz.2.475" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.663445][ T36] audit: type=1400 audit(1788987374.969:370): avc: denied { open } for pid=1516 comm="syz.2.475" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.687413][ T36] audit: type=1400 audit(1788987375.019:371): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.710137][ T36] audit: type=1400 audit(1788987375.039:372): avc: denied { getopt } for pid=1519 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.730139][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 85.756344][ T64] usb 4-1: device descriptor read/8, error -71 [ 85.788030][ T36] audit: type=1400 audit(1788987375.159:373): avc: denied { shutdown } for pid=1523 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.851864][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 85.872693][ T9] usb 2-1: device descriptor read/8, error -71 [ 85.892816][ T64] usb 4-1: device descriptor read/8, error -71 [ 86.002780][ T9] usb 2-1: device descriptor read/8, error -71 [ 86.061629][ T310] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 86.131640][ T64] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 86.152689][ T64] usb 4-1: device descriptor read/8, error -71 [ 86.211592][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 86.218476][ T310] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.226768][ T310] usb 3-1: config 0 has no interface number 0 [ 86.233158][ T310] usb 3-1: config 0 interface 184 has no altsetting 0 [ 86.241195][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.241594][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 86.250326][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.266343][ T310] usb 3-1: Product: syz [ 86.270516][ T310] usb 3-1: Manufacturer: syz [ 86.272667][ T9] usb 2-1: device descriptor read/8, error -71 [ 86.275144][ T310] usb 3-1: SerialNumber: syz [ 86.282762][ T64] usb 4-1: device descriptor read/8, error -71 [ 86.286621][ T310] usb 3-1: config 0 descriptor?? [ 86.297668][ T310] smsc75xx v1.0.0 [ 86.401759][ T64] usb usb4-port1: unable to enumerate USB device [ 86.412710][ T9] usb 2-1: device descriptor read/8, error -71 [ 86.521690][ T9] usb usb2-port1: unable to enumerate USB device [ 86.899802][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 86.910855][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.920470][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.931684][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 86.941689][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 86.952135][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.961747][ T310] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 86.972649][ T310] usb 3-1: USB disconnect, device number 28 [ 87.291644][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 87.442904][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.451321][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 87.462358][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 87.473558][ T45] usb 4-1: config 1 interface 2 has no altsetting 0 [ 87.482172][ T45] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 87.491489][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.499539][ T45] usb 4-1: Product: syz [ 87.503741][ T45] usb 4-1: Manufacturer: syz [ 87.508327][ T45] usb 4-1: SerialNumber: syz [ 87.661576][ T64] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 87.714746][ T1532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.723449][ T1532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.734918][ T45] usb 4-1: Can't get UAC3 power state for id 10 [ 87.742212][ T45] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 87.751374][ T45] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 87.764236][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 87.780189][ T45] usb 4-1: USB disconnect, device number 27 [ 87.797739][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.821591][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 87.827858][ T64] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.839380][ T64] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.849182][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.856095][ T64] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.865215][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.876329][ T64] usb 3-1: config 0 descriptor?? [ 87.928177][ T36] audit: type=1400 audit(1788987377.299:374): avc: denied { remount } for pid=1555 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.928194][ T1556] binder: Unknown parameter '00000000000000000000007efcontextr˜ØŸëHÀŽ‰É•àM¿šþà šìÛoQ°æÀâL~ߣ™²>ÛtL©&˜¹8n~Ü%½Ðù!pG' [ 88.169435][ T1562] bridge_slave_0: default FDB implementation only supports local addresses [ 88.180391][ T36] audit: type=1400 audit(1788987377.549:375): avc: denied { relabelfrom } for pid=1561 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.278692][ T1570] FAULT_INJECTION: forcing a failure. [ 88.278692][ T1570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.292165][ T1570] CPU: 0 UID: 0 PID: 1570 Comm: syz.1.500 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 88.292195][ T1570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.292209][ T1570] Call Trace: [ 88.292214][ T1570] [ 88.292221][ T1570] __dump_stack+0x21/0x30 [ 88.292250][ T1570] dump_stack_lvl+0x140/0x1c0 [ 88.292272][ T1570] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.292295][ T1570] ? check_stack_object+0x138/0x150 [ 88.292314][ T1570] dump_stack+0x19/0x20 [ 88.292336][ T1570] should_fail_ex+0x3c2/0x510 [ 88.292356][ T1570] should_fail+0xf/0x20 [ 88.292374][ T1570] should_fail_usercopy+0x1e/0x30 [ 88.292395][ T1570] _copy_to_user+0x24/0xa0 [ 88.292418][ T1570] simple_read_from_buffer+0xed/0x160 [ 88.292450][ T1570] proc_fail_nth_read+0x1aa/0x220 [ 88.292474][ T1570] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.292498][ T1570] ? bpf_lsm_file_permission+0xd/0x20 [ 88.292521][ T1570] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.292544][ T1570] vfs_read+0x28b/0xc70 [ 88.292562][ T1570] ? __cfi_vfs_read+0x10/0x10 [ 88.292579][ T1570] ? __kasan_check_write+0x18/0x20 [ 88.292597][ T1570] ? mutex_lock+0x97/0x1d0 [ 88.292616][ T1570] ? __cfi_mutex_lock+0x10/0x10 [ 88.292637][ T1570] ksys_read+0x145/0x260 [ 88.292654][ T1570] ? __cfi_ksys_read+0x10/0x10 [ 88.292670][ T1570] ? __kasan_check_write+0x18/0x20 [ 88.292687][ T1570] ? fput+0x1a4/0x230 [ 88.292709][ T1570] ? __kasan_check_read+0x15/0x20 [ 88.292726][ T1570] __x64_sys_read+0x7f/0x90 [ 88.292743][ T1570] x64_sys_call+0x2638/0x2ee0 [ 88.292760][ T1570] do_syscall_64+0x57/0xf0 [ 88.292775][ T1570] ? clear_bhb_loop+0x50/0xa0 [ 88.292796][ T1570] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.292815][ T1570] RIP: 0033:0x7f088d55e98e [ 88.292830][ T1570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.292845][ T1570] RSP: 002b:00007f088e3fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.292865][ T1570] RAX: ffffffffffffffda RBX: 00007f088e3fd6c0 RCX: 00007f088d55e98e [ 88.292879][ T1570] RDX: 000000000000000f RSI: 00007f088e3fd0a0 RDI: 0000000000000004 [ 88.292890][ T1570] RBP: 00007f088e3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 88.292902][ T1570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.292913][ T1570] R13: 00007f088d826038 R14: 00007f088d825fa0 R15: 00007ffedefe7448 [ 88.292928][ T1570] [ 88.549080][ T64] hid (null): unknown global tag 0xe [ 88.554449][ T64] hid (null): bogus close delimiter [ 88.559697][ T64] hid (null): unknown global tag 0xe [ 88.566216][ T64] hid (null): usage index exceeded [ 88.574999][ T64] usb 3-1: USB disconnect, device number 29 [ 88.727411][ T1580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.505'. [ 88.736647][ T1580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.505'. [ 88.774364][ T1594] bridge_slave_0: default FDB implementation only supports local addresses [ 88.873333][ T1599] netlink: 'syz.1.514': attribute type 14 has an invalid length. [ 88.975132][ T1612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 88.991627][ T343] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 89.142665][ T343] usb 4-1: config index 0 descriptor too short (expected 38012, got 152) [ 89.151424][ T343] usb 4-1: config 193 has too many interfaces: 70, using maximum allowed: 32 [ 89.166082][ T343] usb 4-1: config 193 has an invalid descriptor of length 1, skipping remainder of the config [ 89.191191][ T343] usb 4-1: config 193 has 0 interfaces, different from the descriptor's value: 70 [ 89.212824][ T343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.222018][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.230288][ T343] usb 4-1: Product: syz [ 89.234539][ T343] usb 4-1: Manufacturer: syz [ 89.239145][ T343] usb 4-1: SerialNumber: syz [ 89.302374][ T1622] Mass Storage Function, version: 2009/09/11 [ 89.309455][ T1622] LUN: removable file: (no medium) [ 89.316467][ T1622] futex_wake_op: syz.2.526 tries to shift op by 144; fix this program [ 89.327836][ T1622] tipc: Started in network mode [ 89.332776][ T1622] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.340129][ T1622] tipc: Enabled bearer , priority 10 [ 89.460497][ T343] usb 4-1: USB disconnect, device number 28 [ 89.601596][ T1131] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 89.772906][ T1131] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.784433][ T1131] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.797356][ T1131] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.804489][ T1131] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 89.813740][ T1131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.822894][ T1131] usb 3-1: config 0 descriptor?? [ 90.021182][ T1628] bridge_slave_0: default FDB implementation only supports local addresses [ 90.245147][ T1131] usbhid 3-1:0.0: can't add hid device: -71 [ 90.254628][ T1131] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 90.267543][ T1131] usb 3-1: USB disconnect, device number 30 [ 90.311787][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 90.451587][ T310] tipc: Node number set to 2886997162 [ 90.782193][ T1634] FAULT_INJECTION: forcing a failure. [ 90.782193][ T1634] name failslab, interval 1, probability 0, space 0, times 0 [ 90.794849][ T1634] CPU: 0 UID: 0 PID: 1634 Comm: syz.2.531 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 90.794892][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.794906][ T1634] Call Trace: [ 90.794913][ T1634] [ 90.794924][ T1634] __dump_stack+0x21/0x30 [ 90.794961][ T1634] dump_stack_lvl+0x140/0x1c0 [ 90.794994][ T1634] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.795025][ T1634] ? __cfi___futex_queue+0x10/0x10 [ 90.795057][ T1634] dump_stack+0x19/0x20 [ 90.795100][ T1634] should_fail_ex+0x3c2/0x510 [ 90.795131][ T1634] should_failslab+0xac/0x100 [ 90.795159][ T1634] kmem_cache_alloc_noprof+0x42/0x410 [ 90.795186][ T1634] ? inc_rlimit_get_ucounts+0x3fb/0x470 [ 90.795210][ T1634] ? __sigqueue_alloc+0x15e/0x2b0 [ 90.795241][ T1634] __sigqueue_alloc+0x15e/0x2b0 [ 90.795272][ T1634] __send_signal_locked+0x19d/0xbc0 [ 90.795298][ T1634] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 90.795335][ T1634] send_signal_locked+0x41a/0x590 [ 90.795364][ T1634] force_sig_info_to_task+0x2f5/0x4c0 [ 90.795392][ T1634] force_sig_fault+0xf1/0x150 [ 90.795422][ T1634] ? __cfi_force_sig_fault+0x10/0x10 [ 90.795451][ T1634] ? fixup_vdso_exception+0x21d/0x330 [ 90.795476][ T1634] ? find_vma+0xd3/0x120 [ 90.795501][ T1634] __bad_area_nosemaphore+0x2fb/0x680 [ 90.795524][ T1634] ? __kasan_check_write+0x18/0x20 [ 90.795550][ T1634] bad_area_nosemaphore+0x2d/0x50 [ 90.795570][ T1634] do_user_addr_fault+0xdec/0x1230 [ 90.795614][ T1634] ? fpregs_restore_userregs+0x11c/0x260 [ 90.795648][ T1634] ? switch_fpu_return+0x12/0x20 [ 90.795676][ T1634] exc_page_fault+0x58/0xc0 [ 90.795706][ T1634] asm_exc_page_fault+0x2b/0x30 [ 90.795733][ T1634] RIP: 0033:0x7f6c04c52df8 [ 90.795753][ T1634] Code: 40 00 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 4c 89 44 24 d0 48 8b 74 24 e8 4c 8b 44 24 d0 48 8b 4c 24 d8 <81> 4e 08 00 0c 00 00 48 8b 54 24 e0 48 8b 7c 24 f0 e9 c2 fe ff ff [ 90.795774][ T1634] RSP: 002b:00007f6c05caa018 EFLAGS: 00010212 [ 90.795796][ T1634] RAX: 00007f6c04c52dd0 RBX: 00007f6c05025fa0 RCX: 0000000000000000 [ 90.795814][ T1634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000005668 [ 90.795830][ T1634] RBP: 00007f6c04e3503b R08: 0000000000000000 R09: 0000000000000000 [ 90.795846][ T1634] R10: 0000000000005668 R11: 0000000000000000 R12: 0000000000000000 [ 90.795862][ T1634] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 90.795883][ T1634] [ 91.128088][ T1642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1642 comm=syz.2.535 [ 91.141647][ T1642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1642 comm=syz.2.535 [ 91.154125][ T1642] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.535'. [ 91.164877][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 91.164893][ T36] audit: type=1400 audit(1788987380.539:384): avc: denied { sqpoll } for pid=1641 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.222249][ T36] audit: type=1400 audit(1788987380.539:385): avc: denied { bind } for pid=1641 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.245406][ T36] audit: type=1400 audit(1788987380.539:386): avc: denied { name_bind } for pid=1641 comm="syz.2.535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 91.266066][ T36] audit: type=1400 audit(1788987380.539:387): avc: denied { node_bind } for pid=1641 comm="syz.2.535" saddr=fc00::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.302869][ T1649] FAULT_INJECTION: forcing a failure. [ 91.302869][ T1649] name failslab, interval 1, probability 0, space 0, times 0 [ 91.329011][ T1649] CPU: 1 UID: 0 PID: 1649 Comm: syz.2.538 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 91.329043][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.329055][ T1649] Call Trace: [ 91.329060][ T1649] [ 91.329068][ T1649] __dump_stack+0x21/0x30 [ 91.329098][ T1649] dump_stack_lvl+0x140/0x1c0 [ 91.329122][ T1649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.329145][ T1649] ? stack_depot_save_flags+0x38/0x800 [ 91.329168][ T1649] ? avc_has_perm_noaudit+0x26b/0x360 [ 91.329190][ T1649] dump_stack+0x19/0x20 [ 91.329212][ T1649] should_fail_ex+0x3c2/0x510 [ 91.329232][ T1649] should_failslab+0xac/0x100 [ 91.329253][ T1649] __kmalloc_cache_noprof+0x41/0x470 [ 91.329273][ T1649] ? uinput_open+0x68/0x250 [ 91.329291][ T1649] ? mutex_lock+0x97/0x1d0 [ 91.329310][ T1649] ? __cfi_uinput_open+0x10/0x10 [ 91.329328][ T1649] uinput_open+0x68/0x250 [ 91.329345][ T1649] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 91.329362][ T1649] ? __cfi_uinput_open+0x10/0x10 [ 91.329379][ T1649] misc_open+0x2ec/0x370 [ 91.329397][ T1649] chrdev_open+0x4eb/0x610 [ 91.329416][ T1649] ? __cfi_chrdev_open+0x10/0x10 [ 91.329435][ T1649] ? bpf_lsm_file_open+0xd/0x20 [ 91.329458][ T1649] ? __cfi_chrdev_open+0x10/0x10 [ 91.329477][ T1649] do_dentry_open+0x97c/0x1510 [ 91.329502][ T1649] vfs_open+0x86/0x240 [ 91.329523][ T1649] ? __cfi_vfs_open+0x10/0x10 [ 91.329546][ T1649] ? may_open+0x352/0x430 [ 91.329568][ T1649] path_openat+0x2c49/0x35a0 [ 91.329590][ T1649] ? schedule+0xc5/0x240 [ 91.329608][ T1649] ? kasan_save_alloc_info+0x3a/0x50 [ 91.329631][ T1649] ? getname+0x1b/0x30 [ 91.329650][ T1649] ? x64_sys_call+0xe69/0x2ee0 [ 91.329666][ T1649] ? do_syscall_64+0x57/0xf0 [ 91.329684][ T1649] ? do_filp_open+0x440/0x440 [ 91.329709][ T1649] do_filp_open+0x1f2/0x440 [ 91.329732][ T1649] ? __cfi_do_filp_open+0x10/0x10 [ 91.329758][ T1649] ? alloc_fd+0x4c1/0x570 [ 91.329780][ T1649] do_sys_openat2+0x134/0x1d0 [ 91.329804][ T1649] ? fput+0x1a4/0x230 [ 91.329825][ T1649] ? do_sys_open+0x100/0x100 [ 91.329850][ T1649] __x64_sys_openat+0x13a/0x170 [ 91.329873][ T1649] x64_sys_call+0xe69/0x2ee0 [ 91.329889][ T1649] do_syscall_64+0x57/0xf0 [ 91.329904][ T1649] ? clear_bhb_loop+0x50/0xa0 [ 91.329925][ T1649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.329945][ T1649] RIP: 0033:0x7f6c04d9e159 [ 91.329959][ T1649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.329975][ T1649] RSP: 002b:00007f6c05caa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.329995][ T1649] RAX: ffffffffffffffda RBX: 00007f6c05025fa0 RCX: 00007f6c04d9e159 [ 91.330009][ T1649] RDX: 0000000000000802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 91.330021][ T1649] RBP: 00007f6c04e3503b R08: 0000000000000000 R09: 0000000000000000 [ 91.330033][ T1649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.330044][ T1649] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 91.330058][ T1649] [ 91.641101][ T1652] bridge_slave_0: default FDB implementation only supports local addresses [ 91.941605][ T45] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 91.941605][ T64] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 92.102339][ T45] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 92.112593][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 92.121841][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.121912][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.149098][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.160286][ T45] usb 3-1: Product: syz [ 92.170725][ T45] usb 3-1: Manufacturer: syz [ 92.178355][ T45] usb 3-1: SerialNumber: syz [ 92.344126][ T64] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 92.449129][ T45] usb 3-1: USB disconnect, device number 31 [ 93.005205][ T36] audit: type=1400 audit(1788987382.379:388): avc: denied { search } for pid=1666 comm="syz.2.545" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.221637][ T1674] FAULT_INJECTION: forcing a failure. [ 93.221637][ T1674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.235266][ T1674] CPU: 1 UID: 0 PID: 1674 Comm: syz.2.548 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 93.235304][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.235316][ T1674] Call Trace: [ 93.235322][ T1674] [ 93.235330][ T1674] __dump_stack+0x21/0x30 [ 93.235361][ T1674] dump_stack_lvl+0x140/0x1c0 [ 93.235386][ T1674] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.235417][ T1674] ? check_stack_object+0x138/0x150 [ 93.235448][ T1674] dump_stack+0x19/0x20 [ 93.235472][ T1674] should_fail_ex+0x3c2/0x510 [ 93.235496][ T1674] should_fail+0xf/0x20 [ 93.235517][ T1674] should_fail_usercopy+0x1e/0x30 [ 93.235541][ T1674] _copy_to_user+0x24/0xa0 [ 93.235567][ T1674] simple_read_from_buffer+0xed/0x160 [ 93.235594][ T1674] proc_fail_nth_read+0x1aa/0x220 [ 93.235622][ T1674] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.235647][ T1674] ? vfs_readv+0x764/0xa00 [ 93.235671][ T1674] ? bpf_lsm_file_permission+0xd/0x20 [ 93.235696][ T1674] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.235723][ T1674] vfs_read+0x28b/0xc70 [ 93.235743][ T1674] ? __cfi_vfs_read+0x10/0x10 [ 93.235762][ T1674] ? __kasan_check_write+0x18/0x20 [ 93.235782][ T1674] ? mutex_lock+0x97/0x1d0 [ 93.235803][ T1674] ? __cfi_mutex_lock+0x10/0x10 [ 93.235825][ T1674] ksys_read+0x145/0x260 [ 93.235844][ T1674] ? xfd_validate_state+0x68/0x140 [ 93.235870][ T1674] ? __cfi_ksys_read+0x10/0x10 [ 93.235890][ T1674] ? __kasan_check_write+0x18/0x20 [ 93.235908][ T1674] ? fpregs_restore_userregs+0x11c/0x260 [ 93.235929][ T1674] __x64_sys_read+0x7f/0x90 [ 93.235949][ T1674] x64_sys_call+0x2638/0x2ee0 [ 93.235967][ T1674] do_syscall_64+0x57/0xf0 [ 93.235984][ T1674] ? clear_bhb_loop+0x50/0xa0 [ 93.236007][ T1674] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.236029][ T1674] RIP: 0033:0x7f6c04d5e98e [ 93.236046][ T1674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.236063][ T1674] RSP: 002b:00007f6c05ca9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.236085][ T1674] RAX: ffffffffffffffda RBX: 00007f6c05caa6c0 RCX: 00007f6c04d5e98e [ 93.236101][ T1674] RDX: 000000000000000f RSI: 00007f6c05caa0a0 RDI: 0000000000000004 [ 93.236114][ T1674] RBP: 00007f6c05caa090 R08: 0000000000000000 R09: 0000000000000000 [ 93.236127][ T1674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.236140][ T1674] R13: 00007f6c05026038 R14: 00007f6c05025fa0 R15: 00007ffcd707b0a8 [ 93.236158][ T1674] [ 93.841570][ T64] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 94.001569][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 94.007906][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.018928][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.028762][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 94.037922][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.051790][ T64] usb 3-1: config 0 descriptor?? [ 94.464811][ T64] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 94.472191][ T64] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 94.479410][ T64] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 94.486716][ T64] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 94.493938][ T64] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 94.511421][ T64] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 94.671603][ T64] koneplus 0003:1E7D:2D51.000B: couldn't init struct koneplus_device [ 94.679729][ T64] koneplus 0003:1E7D:2D51.000B: couldn't install mouse [ 94.691953][ T64] koneplus 0003:1E7D:2D51.000B: probe with driver koneplus failed with error -71 [ 94.706351][ T64] usb 3-1: USB disconnect, device number 32 [ 95.358058][ T1692] bridge_slave_0: default FDB implementation only supports local addresses [ 95.367614][ T36] audit: type=1400 audit(1788987384.739:389): avc: denied { write } for pid=1691 comm="syz.4.556" path="socket:[15700]" dev="sockfs" ino=15700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.451598][ T310] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 95.602357][ T310] usb 3-1: not running at top speed; connect to a high speed hub [ 95.611583][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.621755][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.631794][ T310] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 95.641140][ T310] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 95.649744][ T310] usb 3-1: Product: syz [ 95.654357][ T310] usb 3-1: Manufacturer: syz [ 95.661358][ T310] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 95.668069][ T310] usb 3-1: No streaming interface found for terminal 2. [ 95.865766][ T310] usb 3-1: USB disconnect, device number 33 [ 97.860792][ T343] usb 4-1: USB disconnect, device number 30 [ 98.264974][ T1713] x_tables: unsorted entry at hook 2 [ 98.271722][ T343] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 98.344950][ T1715] ./dev/sda1: Can't lookup blockdev [ 98.444418][ T343] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 98.462925][ T343] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 98.483910][ T343] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 98.494007][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.502088][ T343] usb 4-1: Product: syz [ 98.506257][ T343] usb 4-1: Manufacturer: syz [ 98.510861][ T343] usb 4-1: SerialNumber: syz [ 98.631602][ T64] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 98.739276][ T343] usb 4-1: Can't get UAC3 power state for id 10 [ 98.747999][ T343] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 98.768210][ T343] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 98.792860][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.805413][ T343] usb 4-1: USB disconnect, device number 31 [ 98.811573][ T64] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.836987][ T64] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 98.847095][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.862890][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.870891][ T64] usb 3-1: Product: syz [ 98.875640][ T64] usb 3-1: Manufacturer: syz [ 98.880753][ T64] usb 3-1: SerialNumber: syz [ 98.892701][ T64] usb-storage 3-1:1.0: USB Mass Storage device detected [ 98.900985][ T64] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 98.909255][ T64] scsi host1: usb-storage 3-1:1.0 [ 99.093606][ T36] audit: type=1400 audit(1788987388.469:390): avc: denied { mounton } for pid=1716 comm="syz.2.566" path="/163/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.108226][ T1730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.126456][ T1730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.135101][ T310] usb 3-1: USB disconnect, device number 34 [ 99.571573][ T343] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 99.722704][ T343] usb 4-1: config 0 has no interfaces? [ 99.729795][ T343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.739037][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.747076][ T343] usb 4-1: Product: syz [ 99.751373][ T343] usb 4-1: Manufacturer: syz [ 99.756025][ T343] usb 4-1: SerialNumber: syz [ 99.764635][ T343] usb 4-1: config 0 descriptor?? [ 99.901621][ T64] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 99.971830][ T343] usb 4-1: USB disconnect, device number 32 [ 100.041401][ T64] usb 3-1: device descriptor read/64, error -71 [ 100.301611][ T64] usb 3-1: device descriptor read/64, error -71 [ 100.547162][ T64] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 100.691634][ T64] usb 3-1: device descriptor read/64, error -71 [ 100.731602][ T558] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 100.881637][ T558] usb 4-1: Using ep0 maxpacket: 32 [ 100.888047][ T558] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 100.896519][ T558] usb 4-1: config 0 has no interface number 0 [ 100.903012][ T558] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.914814][ T558] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 100.924168][ T558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.932387][ T64] usb 3-1: device descriptor read/64, error -71 [ 100.938773][ T558] usb 4-1: Product: syz [ 100.943173][ T558] usb 4-1: Manufacturer: syz [ 100.947779][ T558] usb 4-1: SerialNumber: syz [ 100.961839][ T558] usb 4-1: config 0 descriptor?? [ 100.967703][ T1738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.061736][ T64] usb usb3-port1: attempt power cycle [ 101.178447][ T1738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.411605][ T64] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 101.432907][ T64] usb 3-1: device descriptor read/8, error -71 [ 101.578714][ T64] usb 3-1: device descriptor read/8, error -71 [ 101.587601][ T1740] bridge_slave_0: default FDB implementation only supports local addresses [ 101.614507][ T1742] ./dev/sda1: Can't lookup blockdev [ 101.748480][ T1749] netlink: 96 bytes leftover after parsing attributes in process `syz.4.577'. [ 101.759033][ T36] audit: type=1400 audit(1788987391.129:391): avc: denied { read } for pid=1747 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.810093][ T1750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4129 sclass=netlink_route_socket pid=1750 comm=syz.4.577 [ 101.841591][ T64] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 101.872670][ T64] usb 3-1: device descriptor read/8, error -71 [ 102.013456][ T64] usb 3-1: device descriptor read/8, error -71 [ 102.121792][ T64] usb usb3-port1: unable to enumerate USB device [ 102.543808][ T36] audit: type=1400 audit(1788987391.919:392): avc: denied { connect } for pid=1751 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.565744][ T1752] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 102.578805][ T36] audit: type=1400 audit(1788987391.949:393): avc: denied { relabelto } for pid=1751 comm="syz.4.578" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 102.607969][ T36] audit: type=1400 audit(1788987391.949:394): avc: denied { associate } for pid=1751 comm="syz.4.578" name="file0" dev="tmpfs" ino=306 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0" [ 102.718156][ T36] audit: type=1400 audit(1788987392.089:395): avc: denied { unlink } for pid=1182 comm="syz-executor" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 102.750148][ T36] audit: type=1400 audit(1788987392.119:396): avc: denied { connect } for pid=1763 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.997509][ T1774] ./dev/sda1: Can't lookup blockdev [ 103.002927][ T1773] ./dev/sda1: Can't lookup blockdev [ 103.120466][ T1777] ./dev/sda1: Can't lookup blockdev [ 103.148471][ T36] audit: type=1400 audit(1788987392.519:397): avc: denied { getopt } for pid=1778 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.169373][ T343] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 103.183455][ T36] audit: type=1400 audit(1788987392.519:398): avc: denied { mounton } for pid=1778 comm="syz.4.585" path="/syzcgroup/unified/syz4/cgroup.procs" dev="cgroup2" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 103.209746][ T36] audit: type=1400 audit(1788987392.539:399): avc: denied { bind } for pid=1778 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.352322][ T343] usb 3-1: not running at top speed; connect to a high speed hub [ 103.361045][ T343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.372587][ T343] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 103.381808][ T343] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 103.390285][ T343] usb 3-1: Product: syz [ 103.394838][ T343] usb 3-1: Manufacturer: syz [ 103.408061][ T343] uvcvideo 3-1:1.1: Unknown video format 32595559-0000-0010-8000-00aa000a0000 [ 103.417454][ T343] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 103.423877][ T343] uvcvideo 3-1:1.1: No supported video formats found. [ 103.430771][ T343] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 103.621766][ T558] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 103.633132][ T343] usb 3-1: USB disconnect, device number 39 [ 103.646138][ T558] asix 4-1:0.188: probe with driver asix failed with error -71 [ 103.657967][ T558] usb 4-1: USB disconnect, device number 33 [ 104.286186][ T1790] netlink: 'syz.2.590': attribute type 46 has an invalid length. [ 104.323238][ T1788] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.330350][ T1788] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.337723][ T1788] bridge_slave_0: entered allmulticast mode [ 104.344145][ T1788] bridge_slave_0: entered promiscuous mode [ 104.350781][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.357922][ T1788] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.365299][ T1788] bridge_slave_1: entered allmulticast mode [ 104.371710][ T1788] bridge_slave_1: entered promiscuous mode [ 104.373473][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 104.373488][ T36] audit: type=1400 audit(1788987393.749:403): avc: denied { read } for pid=1791 comm="syz.2.591" name="file2" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.426507][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.433605][ T1788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.440900][ T1788] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.447957][ T1788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.471269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.479031][ T296] ------------[ cut here ]------------ [ 104.484624][ T296] WARNING: CPU: 1 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 104.494140][ T296] Modules linked in: [ 104.498052][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 104.509771][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.519890][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.525772][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 69 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 69 5e 03 cc e8 76 8f 3e ff <0f> 0b e9 3e ff ff ff e8 6a 8f 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 104.545667][ T296] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 104.551855][ T296] RAX: ffffffff8248e7ea RBX: 0000000000000000 RCX: ffff88812b679300 [ 104.555781][ T36] audit: type=1400 audit(1788987393.929:404): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1577]" dev="pipefs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 104.559989][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.591018][ T296] RBP: ffffc9000b66fbb0 R08: ffff88811bcbc7ff R09: 1ffff110237978ff [ 104.599067][ T296] R10: dffffc0000000000 R11: ffffed1023797900 R12: 0000000000000000 [ 104.607105][ T296] R13: dffffc0000000000 R14: ffff88811bcbc760 R15: ffff8881130bccc0 [ 104.615392][ T296] FS: 0000555591b6b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 104.624387][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.630992][ T296] CR2: 00007ffcd7079cc0 CR3: 000000012bdc4000 CR4: 00000000003526b0 [ 104.639021][ T296] Call Trace: [ 104.642482][ T296] [ 104.645404][ T296] ovl_do_remove+0x824/0xd10 [ 104.650078][ T296] ? ovl_set_redirect+0x780/0x780 [ 104.655375][ T296] ? __cfi_down_write+0x10/0x10 [ 104.660233][ T296] ovl_rmdir+0x1e/0x30 [ 104.664380][ T296] vfs_rmdir+0x3de/0x560 [ 104.668657][ T296] incfs_kill_sb+0x102/0x220 [ 104.673261][ T296] deactivate_locked_super+0xd5/0x270 [ 104.678645][ T296] deactivate_super+0xb8/0xe0 [ 104.683345][ T296] cleanup_mnt+0x438/0x4d0 [ 104.687765][ T296] __cleanup_mnt+0x1d/0x40 [ 104.692196][ T296] task_work_run+0x1e5/0x260 [ 104.696793][ T296] ? __cfi_task_work_run+0x10/0x10 [ 104.702022][ T296] ? __x64_sys_umount+0x12e/0x180 [ 104.707072][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 104.712480][ T296] ? __kasan_check_read+0x15/0x20 [ 104.717501][ T296] resume_user_mode_work+0x35/0x50 [ 104.722635][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 104.728098][ T296] do_syscall_64+0x63/0xf0 [ 104.732526][ T296] ? clear_bhb_loop+0x50/0xa0 [ 104.737244][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.743154][ T296] RIP: 0033:0x7f6c04d9f397 [ 104.747567][ T296] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.767207][ T296] RSP: 002b:00007ffcd707a318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.775666][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6c04d9f397 [ 104.783755][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd707a3d0 [ 104.791757][ T296] RBP: 00007ffcd707a3d0 R08: 00007ffcd707b3d0 R09: 00000000ffffffff [ 104.799730][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd707b460 [ 104.807717][ T296] R13: 00007f6c04e3448b R14: 00000000000197f8 R15: 00007ffcd707b4a0 [ 104.815749][ T296] [ 104.818796][ T296] ---[ end trace 0000000000000000 ]--- [ 104.824626][ T296] ------------[ cut here ]------------ [ 104.830103][ T296] WARNING: CPU: 0 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 104.831890][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.839452][ T296] Modules linked in: [ 104.846433][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.857569][ T296] [ 104.859887][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 104.873038][ T296] Tainted: [W]=WARN [ 104.876834][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.881611][ T310] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 104.886942][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 104.900111][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 fe 69 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 69 5e 03 cc e8 76 8f 3e ff <0f> 0b e9 3e ff ff ff e8 6a 8f 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 104.919800][ T296] RSP: 0018:ffffc9000b66fb88 EFLAGS: 00010293 [ 104.925916][ T296] RAX: ffffffff8248e7ea RBX: 0000000000000000 RCX: ffff88812b679300 [ 104.933940][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.941948][ T296] RBP: ffffc9000b66fbb0 R08: ffff88811bcbc7ff R09: 1ffff110237978ff [ 104.949923][ T296] R10: dffffc0000000000 R11: ffffed1023797900 R12: 0000000000000000 [ 104.957939][ T296] R13: dffffc0000000000 R14: ffff88811bcbc760 R15: ffff8881130bccc0 [ 104.966062][ T296] FS: 0000555591b6b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 104.975037][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.981647][ T296] CR2: 000055a8014baaf8 CR3: 000000012bdc4000 CR4: 00000000003526b0 [ 104.989632][ T296] Call Trace: [ 104.993066][ T296] [ 104.996014][ T296] ovl_do_remove+0x824/0xd10 [ 105.000629][ T296] ? ovl_set_redirect+0x780/0x780 [ 105.005754][ T296] ? __cfi_down_write+0x10/0x10 [ 105.010621][ T296] ovl_rmdir+0x1e/0x30 [ 105.014747][ T296] vfs_rmdir+0x3de/0x560 [ 105.019019][ T296] incfs_kill_sb+0x197/0x220 [ 105.023651][ T296] deactivate_locked_super+0xd5/0x270 [ 105.029038][ T296] deactivate_super+0xb8/0xe0 [ 105.033757][ T296] cleanup_mnt+0x438/0x4d0 [ 105.038190][ T296] __cleanup_mnt+0x1d/0x40 [ 105.042642][ T296] task_work_run+0x1e5/0x260 [ 105.047247][ T296] ? __cfi_task_work_run+0x10/0x10 [ 105.052507][ T296] ? __x64_sys_umount+0x12e/0x180 [ 105.057536][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 105.062964][ T296] ? __kasan_check_read+0x15/0x20 [ 105.067990][ T296] resume_user_mode_work+0x35/0x50 [ 105.073144][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 105.078623][ T296] do_syscall_64+0x63/0xf0 [ 105.083065][ T296] ? clear_bhb_loop+0x50/0xa0 [ 105.087751][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.093668][ T296] RIP: 0033:0x7f6c04d9f397 [ 105.098096][ T296] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.117785][ T296] RSP: 002b:00007ffcd707a318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.126239][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6c04d9f397 [ 105.134311][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd707a3d0 [ 105.142319][ T296] RBP: 00007ffcd707a3d0 R08: 00007ffcd707b3d0 R09: 00000000ffffffff [ 105.150305][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd707b460 [ 105.158332][ T296] R13: 00007f6c04e3448b R14: 00000000000197f8 R15: 00007ffcd707b4a0 [ 105.166348][ T296] [ 105.169374][ T296] ---[ end trace 0000000000000000 ]--- [ 105.323332][ T319] bridge_slave_1: left allmulticast mode [ 105.329034][ T319] bridge_slave_1: left promiscuous mode [ 105.334692][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.342123][ T319] bridge_slave_0: left allmulticast mode [ 105.347744][ T319] bridge_slave_0: left promiscuous mode [ 105.353590][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.463756][ T319] veth1_macvtap: left promiscuous mode [ 105.469268][ T319] veth0_vlan: left promiscuous mode [ 105.662366][ T319] bridge_slave_1: left allmulticast mode [ 105.668031][ T319] bridge_slave_1: left promiscuous mode [ 105.673672][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.681061][ T319] bridge_slave_0: left allmulticast mode [ 105.686812][ T319] bridge_slave_0: left promiscuous mode [ 105.692591][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.700307][ T319] bridge_slave_1: left allmulticast mode [ 105.706125][ T319] bridge_slave_1: left promiscuous mode [ 105.711805][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.719609][ T319] bridge_slave_0: left allmulticast mode [ 105.725392][ T319] bridge_slave_0: left promiscuous mode [ 105.731095][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.873557][ T319] tipc: Disabling bearer [ 105.878645][ T319] tipc: Left network mode [ 105.884359][ T319] veth1_macvtap: left promiscuous mode