last executing test programs: 33.376474238s ago: executing program 1 (id=552): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x4) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kheaders.tar.xz', 0x0, 0x10) read$char_usb(r2, &(0x7f0000000400)=""/177, 0x39) setsockopt$sock_int(r1, 0x1, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r3, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000300)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r4) setrlimit(0xf, &(0x7f0000000080)={0x0, 0x3}) socket(0x400000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x180) sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) 33.376199138s ago: executing program 1 (id=553): pselect6(0x40, &(0x7f00000003c0)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1, 0xfffffffe, 0xfc, "0000000000000004f95dc8507fff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x13) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0xff83, 0xfffffffd, 0x1, 0x7fff, 0x2, "db2d416fbecfb84b5452b768e07ee2df361089"}) poll(&(0x7f0000000200)=[{r2, 0x5280}], 0x1, 0x8000) r3 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, r1) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x17f, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r5}, {0x40, @crypt}}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000300)=""/138) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x8) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES8], 0x1c}], 0x1}, 0x4040040) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x80000, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x824, 0x9, 0x3, 0x1, 0x12, 0x2}, 0x30, 0x1) landlock_restrict_self(r6, 0xd) 32.561138552s ago: executing program 1 (id=556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8cfd, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x1, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@empty=0xac141424, @in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x0, 0x0, 0x7ffffffffffffffd, 0x5, 0x8000040000000003, 0xb3, 0x800008, 0xffffffffffffeb28, 0x2, 0x65ea1418, 0x5, 0x10000000007, 0x800, 0xe6, 0x4], 0xb000, 0x382fc2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82f41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x4, '\x00', {0xc, 0x6, '\x00', 0x401, 0x1d, 0x1, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, [@routing={0x87, 0x0, 0x2, 0x9}]}}}}}}}}, 0x72) 32.443986204s ago: executing program 1 (id=557): mkdir(&(0x7f0000000240)='my_sys\x00', 0x0) (async) mkdir(&(0x7f0000000240)='my_sys\x00', 0x0) mount(0x0, &(0x7f0000000680)='my_sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) openat(r2, &(0x7f00000003c0)='my_sys\x00', 0x2, 0x3) (async) r3 = openat(r2, &(0x7f00000003c0)='my_sys\x00', 0x2, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) r5 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002400)={0x2020}, 0x2020) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 32.439026494s ago: executing program 1 (id=558): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setrlimit(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x400000efff) r2 = getpid() syz_pidfd_open(r2, 0x0) setpriority(0x0, r2, 0x1) timer_gettime(r1, &(0x7f0000000040)) socketpair(0x22, 0x3, 0x80000000, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r0) clock_gettime(0x1, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000100)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0xa6909500, 0x0, 0x1, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r0, 0x7, 0xffffffffffffffff, 0x0) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000000000)) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) setrlimit(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) truncate(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x400000efff) (async) getpid() (async) syz_pidfd_open(r2, 0x0) (async) setpriority(0x0, r2, 0x1) (async) timer_gettime(r1, &(0x7f0000000040)) (async) socketpair(0x22, 0x3, 0x80000000, &(0x7f00000001c0)) (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r0) (async) clock_gettime(0x1, &(0x7f0000000140)) (async) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x77359400}, {r4, r5+60000000}}, &(0x7f0000000100)) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa6909500, 0x0, 0x1, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r6, r0, 0x7, 0xffffffffffffffff, 0x0) (async) 32.410707907s ago: executing program 1 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TCFLSH(r0, 0x800455ca, 0x1) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='270', 0x3) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000580)=""/83) (async, rerun: 32) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000480)={0x2, 0xfffffcff, 0x7}) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000000)="bff9074bc1851c6e8dd1a5832ed480ec6fd318d6d5ff569f95e4936d4518eb3b30e1", 0x22) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') (rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="263e0f1823470f20c567410f09660f383dd7b97a030000b845000000ba000000000f3066baf80cb844044c85ef66bafc0cb800000000efc4c1b1fcc8470f326666410f7069a30b66ba410066ed", 0x4d}], 0x1, 0x3d, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r9 = syz_create_resource$futex(&(0x7f0000000540)) (async) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) (async) futex(0x0, 0x85, 0x0, 0x0, r9, 0xc5fffffd) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 32.38435694s ago: executing program 32 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TCFLSH(r0, 0x800455ca, 0x1) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='270', 0x3) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000580)=""/83) (async, rerun: 32) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000480)={0x2, 0xfffffcff, 0x7}) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000000)="bff9074bc1851c6e8dd1a5832ed480ec6fd318d6d5ff569f95e4936d4518eb3b30e1", 0x22) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') (rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="263e0f1823470f20c567410f09660f383dd7b97a030000b845000000ba000000000f3066baf80cb844044c85ef66bafc0cb800000000efc4c1b1fcc8470f326666410f7069a30b66ba410066ed", 0x4d}], 0x1, 0x3d, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r9 = syz_create_resource$futex(&(0x7f0000000540)) (async) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) (async) futex(0x0, 0x85, 0x0, 0x0, r9, 0xc5fffffd) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 26.727457316s ago: executing program 2 (id=616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}]}, 0x28}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x57d, 0x8000000, 0x0, 0x0, 0x7, 0x8, 0x5, 0x0, 0xd8, 0xffffffffffffffff], 0x0, 0x302a80}) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000000940)) (async) r7 = dup(r6) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r8, &(0x7f0000000580)='100', 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) (async) add_key(&(0x7f0000000600)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r9 = request_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\[\xed\x18\v\xc4\xd6\xa9\xb7\xd3\x03\xfc\xba[b~f\xf3\x88\xeaX\x99U\x0f\x91\x8f\x8aH\xb7^\x00\xfe;\xceg\"(\x7f\xc3\xee\xac\v\xb7\xaf\t&\x18W;\xdd\xe5\xe5\xae_\x19M\x18\x9d\xd2$r]\x8e\xfc$\x96U\xbf\xf0\xb2j\xfd\xcdz\x90\xfazt\x8cO\x1e\x85\xf4\xb7\xa6\xf7\x8f\xae\x81GL\xcf\x19\x99n\x16\x1a\xf3\x81\x01\x9c\x9c\xd0\xe4:R\xec\xdb\x03q\xef\x86\xb9\x12\xbaXh6QH\x0f\x9b\xe9\xf9\x1eC4-\x92a\xc1\xe6\xae\xc1<\xe2\r&.@*\v\t\x10\xec\xcd\xa6\xd9\x18\xea\x92r\x99\x92\xe1\x928\x1e\xce\xd9\\\xf9\xb4\x06v\xab\xaf\x86\xbbB0\xa0\f\x13\xa8\xcf\x9a\x98\x9ez\xa7\xc4w6(\xc6^C\xbd\xfb\xbfs\xf6Z\x9e,\x10\x15\x9e\xc0h\x968\xbd\xfa\x96', 0x0) request_key(0x0, 0x0, 0x0, r9) (async) mkdir(&(0x7f0000000840)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x8, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000200)={{0x40000, 0xdbbfd10c3372dd8d, 0x10, 0x3, 0x80, 0x7, 0x9, 0x40, 0xe1, 0x4, 0x82, 0x5}, {0xc000, 0x3ff8, 0x8, 0x6, 0x40, 0x0, 0x43, 0x0, 0x7, 0xff, 0x5, 0x1}, {0x26000, 0x26000, 0xd, 0xcc, 0x9, 0xfd, 0x6, 0x66, 0x0, 0x0, 0x7f, 0x3}, {0xffe, 0xfec00000, 0xa, 0x4, 0x2, 0x8b, 0x2, 0x4, 0x81, 0x8, 0xae, 0x9}, {0xdddd1000, 0xa000, 0xb, 0xf8, 0x6, 0x4, 0x60, 0x4, 0x9, 0x4, 0x65}, {0xc000, 0x3000, 0xd, 0x35, 0x8, 0x3c, 0x3, 0x2, 0x4, 0x9, 0x8c, 0x7}, {0x1ff8, 0x30000, 0xf, 0x24, 0xfb, 0x1, 0x38, 0x5, 0x1, 0xf8, 0x6c, 0x6}, {0x3ff8, 0x40000, 0x8, 0x7, 0xc9, 0x5, 0x0, 0x9, 0xbb, 0x4, 0x7, 0x4}, {0xfffab004, 0x4}, {0x0, 0x1}, 0x20000002, 0x0, 0x1ff8, 0x20, 0x4, 0x3001, 0x1, 0x1, [0x4, 0x3, 0x4, 0xfffffffffffeffff]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000400)=@arm64={0x8, 0x9, 0x9, '\x00', 0x3}) (async) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000000440)=0x10001) 26.639617245s ago: executing program 2 (id=617): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x15, r0, 0x2002, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x1}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x0, 0x0, 0xb}) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) epoll_pwait2(r4, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000000c0), &(0x7f0000000100)={[0x4]}, 0x8) 25.632850748s ago: executing program 2 (id=626): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x108, 0xf5ff}}], 0x2, 0xc040) 25.529895608s ago: executing program 2 (id=628): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_usb_connect$midi(0x5, 0x4f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003000000404409000240000102030109023d00010118980409040000020103000609188e0b20000fd702052501012709058c0220006df78014250110050028afbc"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x200002, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_clone3(&(0x7f0000000700)={0x180801600, &(0x7f0000000780)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_mrelease(r4, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40043d0d, 0x0) r6 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x50, {"48c7c00000000148c7000000000048c740080000000048c740100000000048c740180100000048c740200100000048c7c11300020048c7c2000000010f01c1"}}], 0x50}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000680)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace\x00', 0x1ff) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x1, 0x0, 0x31237648}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x0, 0x3}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bff000/0x400000)=nil) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.235340004s ago: executing program 0 (id=655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xa6, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0xf, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x7, 0xf7, 0x4, 0x8, 0xf7}, 0xe4, &(0x7f00000004c0)={0x5, 0xf, 0xe4, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0xd, 0xa4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x7ffff01, 0xf0f, 0x3ff, [0xe307adc7fd4ef72d]}, @generic={0xad, 0x10, 0x3, "2209cf4fae8f33295f216de0503a9606a3288c70531ecc8780fc35af87534d48f2a13f5199a6fdca06f7f15cd0f2e9f37dcd538da9f9c4a7b14644efc9b818e8ce34769a42d228d37e3ade7dc388619ed80f1f3fd371d1d692762083d3344d86844cac83e58715888102221c6f12fc8cd83b03f08069d75ff5ed5149d6481eae7c00f4f4a14cf70d9978a8e692b5779c51105fbbb0fb3676c2941b8583f3445f77c5a0fc0e71cf1a9536"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x2, 0x2}]}, 0x8, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x100, &(0x7f0000000600)=@string={0x100, 0x3, "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"}}, {0x44, &(0x7f0000000700)=@string={0x44, 0x3, "e4aae310fc0240fd10ad902d5e392523ceecf06db744220618667b76ca5707c04fe59877fe2b8c6f5e5e0511352885e092048eab03bec01588c92fe37bc8c2e1972f"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40e}}, {0x53, &(0x7f0000000880)=@string={0x53, 0x3, "e01a3dea424f05398d998d06e38f7eebb869b127ed154877d7a28bd21962655f272a28299be0eb29fb98414017a48a284432c675bcf4f9fa4067329f68eb16eca0b05c43c6dabe033a3216172fb61c52ac"}}, {0xcb, &(0x7f0000000900)=@string={0xcb, 0x3, "523faa40cc09bb25991b96bdc59af781ab92d68eac8204a80af0a4096d7db3c6144e6b3ee1054a2724ac91f3ca1102f15bee28b866452cf07a8c9f6cec4a76982cc5d59dd7224aeabf9a7a5aeeb543e0a9193091276875645413695e9835bc14fc77658702b56b0d3fc1a61d9633cbb0f7a05adf4673c4d41896318471bdb1eac4cbfb613cd1da5877a844a912cd8b470068460c89efe4b2b94a50c86f3f3b6508eb0eb4fcf3f259af45135613bd8ac39c64c7d409d56b0c108da8aa515b9a9814a07afced2f2f56ef"}}, {0x69, &(0x7f0000000a00)=@string={0x69, 0x3, "baf9dd5b7bc246a4372a567b2b80ef98cedb6ee4e553210959d905666bb1c93358c17e570c9b17a225199855a76ac583cd5a3ceac7fd006e1673af02f04f789d3b443fcb5bd27c83ed59e2d377cd87a8e1c346d4a163cd445b00ab5652805d5c21a25d12c48374"}}, {0xe6, &(0x7f0000000a80)=@string={0xe6, 0x3, "c48ac7e794685f50a17854b74f9ac59abbd4f499caa85e65a9c593145205ca09b08a7621d4a20d470d3e010ae4892f763fa568fd432ad2703c68309753f0fc9adbaa2b1847776f7a053e34c979c1cdcda05134f577bd3df3d9da8d952a256e5864bf9b6d14b873b4f728b8508d00f2ae45cec4d7098347be2a44f6b786918acd6d1764abd0b2556f6d8075c3d649d37bbaa0ba06e3767f6884040d31400f3647bd6a36cdc5777a48c3f4f2c07131a688b4803cb5181dae6d72729056e0c96f61cf964f2d92f53958ad00d9c5852cf337c96e8785036d0faa412354968d74fa022deda9b8"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)={0x40, 0x9, 0x4a, {0x4a, 0x21, "23d1dd97570c04eba71e916e96b12b7843d72f3a0fa5b387cd66c97bb60d81aadb1b06b0a453055f1e0d2a632546483bbccc23b9dae4cdae8ce8323967e4aed57af7f0e6bfa8a711"}}, &(0x7f0000000c80)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "6c9ef6294968ca682df69b0fa6b248593fbd2040ed5669b8af7865b7740f2df3df1a8a2357981dce27b9e0b8026447c1ae2d5d0cc59743358fccf86df29ec98e1335fadf9c634c0fc860bc369a1eec11eb252bc39560433380664a031b68adf00114489b50bf7bb009007cb055e35fd20449acf55383b75981278d49d2231ea7e3ec62ea1db9d6bd74d4e39bf03803c47218d9e09d05234abb1f42c6bccbe9c2315b197322a283d44a89d8ad32ac82e7c82336c68a406189851fa655e88ad910e648cb0be44f35a4f324a711c0b7e7150177ae459d"}}}, &(0x7f0000001040)={0x34, &(0x7f0000000dc0)={0x40, 0x1, 0xad, "1ee51f5bd10c77d0894c77effddbf2cdf01d7f12f75a3db211098d94888ce7410af61d5502ab431d263a201edcab0e53325e899a0a42bde54635d5406d1c4dd888c89e53ff2f4cc3ca6a827ec0b86900ee2c319ea65cd0329d69e879a4ec2aab7087de36d4ac65271fe9698c7974b92c7c724e16698a4492d97d0467be3d46e09ce901893a1dc115906f7273cc6d8b6f28010f05b6a369598d7ca304292e96dc522f3d11adfb4f38ae1ed49f90"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f00)={0x20, 0x0, 0x8b, {0x89, "6bf2a47e79fc5060068a2857ed6051fd048854f8ff2190ed6b6677c70bfa0954ba6003237e3b5475f8b2d31adc0070c44a596f5f13dbc1453dfd357eb8a9d304f881559c867a1c5448563c57a43296984343b915beb0e30e79e3133fedd8df5333373079ea7dc2992344f5f739c1957c32c907239965dbd4b5ad0fb02ec445cc8eb48dd786970a8dc3"}}, &(0x7f0000000fc0)={0x20, 0x1, 0x1, 0x63}, &(0x7f0000001000)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x60, 0x11, 0x5c, {0x5c, 0x7, "76d7760173e72b65c7f37bffc50043ce79f6a91cf0762582785ffbfbfb03a75bea0360cf79ed42b844e7ddf3452748bf80ade24553368e8fc3d876718cb75c41ded05ad760d085050966a8e3462e243d68ac6b4059a8466f478e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000280)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x3d, 0x3, 0x10, 0x6, 0x2d}]}}, 0x0, 0x0}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x0, 0xd, 0x18, "12a932a1fa43bc7a1111d92bc9287dbb6db452ed258eb275"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r1, 0x9, 0xcd, &(0x7f0000001080)="50ea788b297ebf869c21e0899bff266878c5f67c5377c4bd018ad3e613af56c6db187f9781dfa1802f4cc0fefa6720893f6a41ea9526cd057fa067ab8715927f9a2cd4de5c4a1290e0eac5d75bf3e818c780473dc848a5a0bc9e2ea46b056d5a798b9beeb7ee6f454b5a7ddec9aa3c92b0a3390b8ea2f17bb9aaf48a68419a7250681b707843bb50edb38d654cd0738ed72c5134fba726d293e3f23d5cc2fef87a1bfb72096253990c08bcf36d766718227892115c996bef62820575152e31d386924e2d9c179a0b8cd51a0053") 21.571964422s ago: executing program 0 (id=660): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r0 = open(&(0x7f0000000600)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00') (async) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x1}, 0x8) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0xfffa, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000200)={0x2, 0xfffa, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0xc1, 0xfffff034}, {0x6, 0xba, 0x1, 0x200ffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0xc1, 0xfffff034}, {0x6, 0xba, 0x1, 0x200ffff}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2}, 0xa0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000300000/0x4000)=nil, 0x4000, 0x17) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000006c0), 0x1, 0x0) pwrite64(r4, &(0x7f0000000700)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r5, 0xc138fd0e, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @core='@stats_delete 0'}}) (async) ioctl$DM_TARGET_MSG(r5, 0xc138fd0e, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @core='@stats_delete 0'}}) r6 = syz_create_resource$futex(&(0x7f0000000000)=0x1) setresuid(0xee01, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/softnet_stat\x00') pread64(r7, &(0x7f0000000800)=""/4084, 0xff4, 0x10000000000007f) setfsuid(0x0) (async) setfsuid(0x0) futex(r6, 0xd, 0x2, 0x0, 0x0, 0x2) 21.132880596s ago: executing program 2 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003700)='fd/3\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000003780)=""/4072, 0xfe8}], 0x1) 20.779652622s ago: executing program 0 (id=668): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000500)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000380)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async, rerun: 32) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e23, 0xe204, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x43}, {0x0, 0x38b2, 0x800, 0x45, 0x7, 0x0, 0x8, 0x100}, {0xd96, 0x3, 0xffff, 0x8}, 0x8, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0xff, 0xcc23, 0x4}}, 0xe8) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x5f, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f00000008c0)={0x2, 0x5e23, @local}, 0x10) (async) close(0x4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000900)='net/icmp6\x00') pread64(r6, &(0x7f0000000940)=""/195, 0xc3, 0x100) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @void, @val={0xc, 0x99, {0x8000, 0x47}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x13}, 0x1, 0x0, 0x0, 0x40002}, 0x8001) (async) write$cgroup_subtree(r7, &(0x7f0000000740)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r7, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d8", @ANYRES16], 0x0) (async, rerun: 64) close(r3) (async) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000780)=""/225, &(0x7f0000000880)=0xe1) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @mcast1, 0x9}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0xae2f, 0x4) connect$vsock_stream(r2, &(0x7f0000001580)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.866163995s ago: executing program 0 (id=671): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x400003a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x17f) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0xf, 0x6, 0x200, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)={0x4440, 0xad}, 0x18) r2 = openat(r1, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x6c) write(r2, &(0x7f0000000100)='3', 0x4e) prctl$PR_SET_KEEPCAPS(0x8, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b0500000000000904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 19.323888411s ago: executing program 2 (id=672): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000025c0)={0x2, 0x0, @loopback}, &(0x7f0000003680)=0x10, 0x0) sendmsg$inet(r1, &(0x7f00000039c0)={&(0x7f00000036c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000002900)="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", 0x1f1}], 0x1, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0xd0}, 0x4000001) r2 = openat$kvm(0x0, &(0x7f0000006040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000006080)={0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000060c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000064c0)=0x1ff8) r7 = openat$kvm(0x0, &(0x7f0000006500), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) listen(r0, 0xfff) sendmsg$sock(r0, &(0x7f0000006000)={&(0x7f0000003a00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000005ec0), 0x0, &(0x7f00000024c0)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x500006}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0xf9cfb3c9f3f9bd64, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xd92}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xd8}, 0x4) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000200)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x44, &(0x7f0000002680)={0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x40010, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001380)={{r0, &(0x7f0000000280)='tracefs\x00', 0x800, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0xa8]}, {0x419, 0x1, 0x3, 0x100000000}}, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x7}, {[0x8, 0x5, 0x8, 0xf2]}, 0x5, 0x1000, &(0x7f0000000380)=""/4096}) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000002440)=@file={0x1}, 0x6e) listen(r10, 0x0) 19.323158201s ago: executing program 33 (id=672): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000025c0)={0x2, 0x0, @loopback}, &(0x7f0000003680)=0x10, 0x0) sendmsg$inet(r1, &(0x7f00000039c0)={&(0x7f00000036c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000037c0)=[{&(0x7f0000002900)="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", 0x1f1}], 0x1, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0xd0}, 0x4000001) r2 = openat$kvm(0x0, &(0x7f0000006040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000006080)={0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000060c0)={"3e4b16111bb1c1780eaadec54d639c20ea278aa671c4da3909dde2cff55518ca6f547a57e3bbfb8ce58ecac20ee7444532c30f466c519890915732a6c0bfdd72ff506b148559519df456783e80b9efcc6e75a62f86804bf8fbf985faea60166bfe2079fe7d14ee23fdaee6b1bef35c5ec135d1dd1c6c33eb03309e369a0383dfbf3086800a76a2c592e18b0b8a9b3fc06ea2f4a9ec5a88ccd488687d0ed6fcedb026c78aba6f94eef28f01bc5129ea11462270787d478c21cc9a89aca8a91348690d79b75f055f01dbb15c8e64416ebda7acc736720abf75c5b8c05f293f504bb810f50523869fa3bf9c298d0c80fd830fcbdfa68037dcdf5447b8b3913bcb13e972448325782146323adc1caeeb4acc414fbaae623697ada7b83af4a2e8173541db2947a8ef84ca209f4c54b58bdea1fa1d85ee8a88fceef4e077136102382ea1869b119880317646c2b79488491dee1b68d131357016bf98e3080c42aa243ef2234abb761f1ceeffb244731fd2e004e4e1ed8ffa52b3dab54769909121ffdbbee376ac3f4d1e907de8e4f85f227b3f35f746c4dce4ab5daa43a66cf4e3d7a46a4b2af2213ff86ca18bd51ff03e543928adb22d188e31ff7b9e426fe4de9d7466e4b55ecbd325b16c2bfbe4c5d4eeae3c3f4b468f77fc801024c9c916dd0de337e3ca3d64abfe751d9d7aff85f4b8276a6fe304d5bb576c5d4923d80a53af97678df44ff41957c2d27cf92be161013e4d91c9b0e25f15675c2cc96da17399be1705aac0e0b44ec6f4dc01d896fa3296c1f778a7c56ceb542d852d3fa58ec49d650cfb2c8eeb9f7df747c241c1190546726f2e49a7899a17b3397f388a09905b3a317aece3f6e9246976a95670decb0e657dcabb7f505925cbe1813ac9379d50595e38d14af6df98697f0a7878d666319fcd2ae3fdd7ddafe8af8fa5b83d957a90a00bcc1e2d82a0b422812625e4af451a117ab1726d37f3652786c07f07a95359a1ab304107b22ead61500163413c5faa38c1d1cafebf29e10a6295e849b3addec2bf56bc323c8f619b2f5464559d7c862b8cb797ec78d2fd861a89d681e1694d32f99e746aa949fc5e057402f564f5bad7067296803b245c5b29a2d5f4a96b4cc64929b54261f019b8bb2daf0f31406ade3b1ccba02a147eb43b2a18e645eba6b7fc9b2e650fabf0561239bfa212d36845b37c646acbf4c5affb547c8d2deeb9b6f254c1c8cfcc528f552e23d5d5d1abf4e0dc227aa490dca36b4b3e87140de98fc472aa041a7ac4183636c5a8d8976ede4cc35947e4d379e0926c7ab00508b83adec2632f4e2471a04417efd52cb1e261d2413c34ec1b84bc2fc4d14a22a26964ccf0d08e5b37a5aa9ba5925f0c8d344630a682f5e1677617f1e222621cfb4221e4001fe98f3c11c603c2b86389e8a525879c3a688fe7d2070824373cfa08"}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000064c0)=0x1ff8) r7 = openat$kvm(0x0, &(0x7f0000006500), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) listen(r0, 0xfff) sendmsg$sock(r0, &(0x7f0000006000)={&(0x7f0000003a00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000005ec0), 0x0, &(0x7f00000024c0)=[@timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x500006}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0xf9cfb3c9f3f9bd64, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xd92}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xd8}, 0x4) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000200)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x44, &(0x7f0000002680)={0x0, 0x0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x40010, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001380)={{r0, &(0x7f0000000280)='tracefs\x00', 0x800, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0xa8]}, {0x419, 0x1, 0x3, 0x100000000}}, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x7}, {[0x8, 0x5, 0x8, 0xf2]}, 0x5, 0x1000, &(0x7f0000000380)=""/4096}) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000002440)=@file={0x1}, 0x6e) listen(r10, 0x0) 19.322287821s ago: executing program 0 (id=673): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='/,0x7f0000800000,0x7', 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x13) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) fcntl$setown(r3, 0x8, r2) ptrace(0x10, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000040)={'tunl0\x00'}) mremap(&(0x7f0000744000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000026d000/0x2000)=nil) ptrace(0x11, r2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19.248805978s ago: executing program 0 (id=675): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) read$FUSE(r0, 0x0, 0x9) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 4.080423474s ago: executing program 3 (id=771): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000100)=0x0) r2 = eventfd(0x8e) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000001900)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0x0) r5 = dup3(r2, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='27', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f00009f9000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x3, 0x1000000fb9, 0x200000001000b, 0x5, 0x20000ce7, 0x4, 0x9, 0x10, 0x73, 0x8000008000000000, 0x79, 0x1, 0x4, 0x8000000000000b, 0xffffffffffffffff, 0x6]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = eventfd2(0x81, 0xc0000) io_submit(r3, 0x8, &(0x7f0000001ec0)=[&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000780)="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", 0x1000, 0x7, 0x0, 0x2, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x6, 0xe32, r2, &(0x7f00000017c0)="fdf53edb618a7078fe10d609cae6a0ec7de7c16e7a956cdb5090bc8c3dc60aa6fec8bbc6e009d2072ddee499ab141502ae6c16f73fcac477395f4efb5e095fb052ba14cdfd4efc4b60c5a0451e5b5e85f93a25fdbfaecb84ad78", 0x5a, 0x9, 0x0, 0x0, r0}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0xa, r2, &(0x7f0000001880)="fe054af232eb4d09d971ec7478804b282db90cf0ed606053dfdbea6fb930e273030e0a6f603692", 0x27, 0x3, 0x0, 0x1, r2}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x3, 0x101, r4, &(0x7f0000001940)="074eb2b772d937cb2c447c98e952351183507cd2a1fff6741e8afbdcfaf7aa98d91a339414ae7cb52e498264e4e3f69b86a7856f623b1619766ba894456b2c7fe93e4c07bfa8bea91b1d6a7b94894caf3d4035e5ae0f1a013508fc56709db2b3b464d314b3f4b82f0812a918a59c76d4789f1291e6d7eb88d22b4b825b", 0x7d, 0x5, 0x0, 0x1, r2}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x6, 0xfffc, r0, &(0x7f0000001a00)="47ebc632d6127e8b510839b75d08750a22fd497f9224ce313ebc81138a101a3cc69ac9e26fb27eb33869a9dd0ada8514cafd4f9ea9682f3258d4ab85e642c8624f399557a991329504560bc8948232ad89f9bb508ef021c22578b8d7a054b284bd68421efac382129f6e0c486030b5113151745c3709551ed8421eeb615ec9a534ad9241b7e7950ac9afaccfb0749c45e192f3ad8c193abae0", 0x99, 0x9, 0x0, 0x3, r5}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000001b00)="3ed04f15a0538584526d3936fcfc4ef924eedfbddc380f3b598b110f016e01ffc824fa3225d7d33927f5537f958f47a63dde64688118953edc17b8d4170b2b15797bd1625ef3ea24ec3d49343b0fd66988ffe98d43500e403faf8fa8734425c328c73fc9105b53ed227529443ac1bca870ca7eeea61883698dbaedad895f2c0bb54d0b759be9aaa24d72fca88c24f6ac9e754d90173dfbcef44b2e6bcc0b511c65edf061f796fdf5234463d00f8ff8d3beb3d5fc6ba2323be7423544ed218aacb11db9723a32fc0dc9f72478a285fb6921b3e231d4fd420264a5e294c41be6df1f44", 0xe2, 0xd, 0x0, 0x0, r2}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000001c40)="abf8ca5cb888fd560ecca7fa3aa4bf29a75165a3b4330b3bd92c0ac1d0744c1672baa1b8334bea5b214d88614ab9ceaa8a1f6a44b8837fd514136e0da4629a96c54fa3934f021a34ccf911f0cbad8c46143dbf92206ed9336c89367d23211fc4e101b50b5adb68dd0db3bba53706cd32048fd06891df9a85d98239e21c8cda7f06d150c8cc922093991db179801f849bddb85dbe86c2d2a45eb5c54abb7b3ab1f328ea5af7611b285837948f1511da7e8a0454ce96cd6cd11b11c02093027977bf2a2b925e5ae3ad6b958b20d88dee7f531fb108288206bc65", 0xd9, 0x46d, 0x0, 0x2, r11}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000001d80)="97946eb6c17908873971f354ad39eee831d8646231e45f4df773c5ece1ca0c9a5eec909b771d5938b3c08eec1e0ec016773633012abf7e7583507d561d4fc308ef0865440d34e60d37cca8321f08333f269429530e0fa7c0c15eb8bef770b3201d6ebd05f094c837137818673eccb53875ce31cdb3ca9bb6b66dbe01788c62b21c212643b0b4314eabb6d17634694d982bafb157332f20e5b6bdc84af20e7ff78a101a7b27d4e73ab12a6897e7243789550042b3cb9498a728bfbf3d87e965cec336202ff5a98004736617f84f78ce61ec1b8b096dbd7dc46bb05fb21d936a3f99fd3f4534dc2a82f7ccf7a4", 0xec, 0x9, 0x0, 0x2, r0}]) io_submit(r1, 0x2, &(0x7f0000000740)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x6, r0, 0x0, 0x0, 0x8}]) 3.499862023s ago: executing program 5 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) (async) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100), 0x0, &(0x7f00000002c0)={0x8e8, 0x9, 0x9, 0x9, 0x3, 0x2, 0x9, 0x6, 0xffff}) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000600)={0x0, 0xfffffffffffffea5, &(0x7f0000000640)=[{&(0x7f0000000680)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002000000000000000000080000000c00030001000000000000200000000000000000", 0x50}], 0x1}, 0x0) (async) sendmsg(r4, &(0x7f0000000600)={0x0, 0xfffffffffffffea5, &(0x7f0000000640)=[{&(0x7f0000000680)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002000000000000000000080000000c00030001000000000000200000000000000000", 0x50}], 0x1}, 0x0) write(r3, &(0x7f00000003c0)='7', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.400605473s ago: executing program 5 (id=774): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r1, 0x400, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x0, {0x2a, 0x3, 0x0, 0x0, 0x2d66bb65}}) listen(0xffffffffffffffff, 0x3) process_vm_readv(0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/145, 0x91}], 0x2, 0x0, 0x0, 0x0) tkill(0x0, 0x23) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='h', 0x1}], 0x1, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/256, 0x100}], 0x1, &(0x7f00000006c0)=""/39, 0x27}, 0x40010101) open(&(0x7f0000000040)='./file0\x00', 0xe0841, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000002380), 0xa, 0x62080) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, 0x0) 3.382115575s ago: executing program 3 (id=775): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000140)={0x5, 0x5, 0x1, 0x77, 0x2, [0x9, 0x8bc4, 0x2, 0x6]}) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x140000000) (async, rerun: 32) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x32874000) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, 0x0) 3.295930314s ago: executing program 3 (id=776): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="02010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000540)={0x40, 0xa, 0x2, "5ed4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.823918102s ago: executing program 34 (id=675): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) read$FUSE(r0, 0x0, 0x9) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x96, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe4b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 2.304315115s ago: executing program 6 (id=777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002c40)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002cc0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002d00)=0x6, 0x4) sendto$packet(r1, &(0x7f0000002d40)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000002dc0)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000240)="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", 0x40, 0x4865, 0x0, 0x26) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc012}, {r0}, {r0, 0x800a}], 0x3, &(0x7f0000000100), 0x0, 0x0) 2.283296997s ago: executing program 6 (id=778): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0xfb6c, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main, @main=@item_4={0x3, 0x0, 0xa, "d3aa33a0"}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x2, 0xb, {0xb, 0xc, "f506f751a14dc17587"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20, 0x15, 0x80, "d7f5272d0fa0a0af02c440149533eda1fcd0892486e6aaa828a2ef82c13d2588a7c5b12fb22dfdb68f649e6cec8316a5b29447be24b447d6130c520b541ed8503a9a2414a2e03586734c03a5827810b7a7ddbaf0b3b57ac3ba2a0ca0fdc7f85bae157e316971a533e9ece008c0bcdf81a0c141b7b598838abc73a82e96d76e23"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000280)={0x20, 0x81, 0x3, "2ff5a1"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a1"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "12"}, &(0x7f0000000340)={0x20, 0x84, 0x1, 'A'}, &(0x7f0000000380)={0x20, 0x85, 0x3, "e437e1"}}) 1.579987909s ago: executing program 5 (id=779): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000040)={0x40, 0x15, 0x25, 0x3, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0x3, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @arbitrary=0xf0004000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1d4e, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f00000001c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x3fffffff}}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) 1.578139459s ago: executing program 5 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x98) mount(0x0, &(0x7f0000001440)='./sys\x00', &(0x7f0000001480)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000101, 0x0, 0x101}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)={0x10000000000000cf, 0x0, [{}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200021002bbd7000000000000a060000000000000000000014000100"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/class/devcoredump/disabled\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r8, &(0x7f0000003540)='./sys/bus/usb/devices/usb2/power/level\x00') sendfile(r7, r7, 0x0, 0x7fffffffffffffff) 1.46913455s ago: executing program 5 (id=781): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x108}, 0x12000000}], 0x2, 0xc040) 1.461733921s ago: executing program 5 (id=782): r0 = openat(0xffffffffffffff9c, 0x0, 0x1aec1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect$midi(0x1, 0x69, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x80, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x4, 0x3, [{0x7, 0x3}, {0x3, 0x9}, {0x4, 0x5}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x86, 0x15}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x4, 0x3, 0x0, {0xf, 0x25, 0x1, 0xb, "69a9201e342b2ff6e584c1"}}}]}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x8, 0x1, 0xff, 0x10, 0x4}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0xff00, 0x6, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xa, 0x7, 0x7ff}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8b, &(0x7f0000000180)=@generic={0x6, 0x0, 0x83, "3e2bbf7c", "b70eff07bfa194855a2ac31e3084424945bd388fd1396228eec8443f881415c74a7f962d82dba8ec95567a3b3f738f1eecfedfbe7dd85cb5af758f9ee5920c3b22fde922856c7083697044374bc27855fff991cefb7b67eef9ac95c342066731e640ac745d2cc637873de962fd8fdcb6f66c82961590dd969a18078c79ece99ad9fc29"}) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x3061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xfb, 0x70, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x1, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x7, 0x25, {0x8, 0x25, 0x1, 0x0, 0xf, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x5, 0x1, 0x1001, 0x4, 0x10000, 0x9}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x1, 0x7, "761b"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0xd6e2, 0x80, "fec3a5e3ed83"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x5, 0x5, {0x8, 0x25, 0x1, 0x82, 0xc, 0x40, 0x83e}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x111, 0x9, 0x8, 0xd, 0x20, 0x8}, 0x51, &(0x7f0000000340)={0x5, 0xf, 0x51, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x6, 0x49}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x8, 0x1, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7ffff2f, 0xf, 0x3ff, [0xf, 0xff0030, 0xc00f]}, @ssp_cap={0x14, 0x10, 0xa, 0x1a, 0x2, 0x4, 0xf000, 0xfe1, [0x3e8f, 0xf]}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x1a1, 0xf, 0x4}]}, 0x3, [{0x12, &(0x7f00000003c0)=@string={0x12, 0x3, "25eaf203ec03906726f5a10ed86b0b3b"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x413}}, {0xda, &(0x7f0000000640)=@string={0xda, 0x3, "4e3823eb71c504877d15fd21500f2bb9a3047e154975426b91f1921123fb707ce2eb59dae41943bbb679d49b8c37e6d7604cf46e1ae0b47e942d9dd234612603d96ba0ff8d2bec13e0dd71c76986114413495090623c4b08dbb0cc97ee2a775fb267bf8cb611fbad608c7f1fd92bd0e7c50df23739d14635ae6aa70667596125f18f71cbf3a5d07875f8f3402a8ae749cf4a679900916be88fa80f7a8e67bcbe44d4e0efce76ccb27b49977ffaf021da8f179902bda0f4ae4f6d60677d8f3f7dfb180d53a961597002156f13c8623ccf6b6c0e9b5ca3eb60"}}]}) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000000, 0x110, r0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0}) 1.060049102s ago: executing program 4 (id=785): openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) socket(0x29, 0x3, 0x8) r0 = fsopen(&(0x7f0000000000)='logfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x62, 0x3, 0x3, 0x8}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8880, 0x85) lseek(r3, 0x501, 0x1) getdents(r3, 0x0, 0x0) close(0x3) 1.059783922s ago: executing program 4 (id=786): openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x60040, 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x2008800, &(0x7f00000009c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r0, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002a80)="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", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x20, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000004b80)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000004c00)='./file0\x00', 0x40042, 0x13) (async, rerun: 32) close(r0) r2 = open(&(0x7f0000000640)='./file0\x00', 0x181c42, 0x81) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010020, 0x0, 0xffc}]}) (async) ftruncate(r2, 0x200004) 1.034664124s ago: executing program 4 (id=787): socket$inet6(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0142, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x404, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000019}, 0x4040855) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) write$P9_RCLUNK(r0, &(0x7f0000000140)={0x7, 0x79, 0x4}, 0x7) r6 = gettid() capset(&(0x7f0000000740)={0x20080522, r6}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) 761.423242ms ago: executing program 4 (id=788): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev/sda\x00', &(0x7f0000000100)='ext4\x00', 0x201800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x101042, 0x5) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000180)=0x47) 712.041277ms ago: executing program 4 (id=789): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000180)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000340)="f780090096eaf54e8d7cc4", 0xb, 0x3b00, 0x0, 0x0) 711.823687ms ago: executing program 4 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/1, 0x1f80}], 0x310, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/1, 0x2034afa5}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') lseek(r2, 0x2000, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x25, 0x2, 0x1) write(r5, &(0x7f0000000000)="fc00000015000704ab5b25090700030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa1553c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba6e8308b591b38a8c5d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2010000000058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async, rerun: 64) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (rerun: 64) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001300010027bd700000e8ffff09"], 0x14}}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 66.984473ms ago: executing program 3 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./trace\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='traceon', 0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1f1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d10fb8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x71, 0x0, 0x0) clock_adjtime(0x41, &(0x7f0000000240)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x19) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f00000001c0)) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x149000, 0x19a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x80002, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000004c0)={0xa, 0x7fffffff, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0xa, 0x8, 0x5, 0x0, 0x400, 0x2, 0x3, 0x2, 0xa, 0x0, 0x5, 0x9, 0x0, 0xa35, 0x8, 0x4, 0x0, 0x6, 0x2, '\x00', 0xf, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 55.796034ms ago: executing program 3 (id=792): memfd_create(&(0x7f0000000000)='key_or_keyring:', 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 0s ago: executing program 3 (id=793): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x48042, 0x1ff) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000180)=[{0x9c, 0x81, 0x10, 0x2}, {0x494a5dc6, 0x2, 0x3c, 0x200}, {0x5, 0x3, 0x8, 0x6}, {0x3, 0x80, 0x7, 0x4}], 0x4, 0x20, 0x9, 0x4}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000040)={0x40, 0xf, 0x25, 0x3, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fefffff, 0x3, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000016020358401ffb04001e6265df15ef03162f0000000000000000000000ffffac14142cfc0000000000000000000000000000003a1900000000000080c71e8702454b65d544881c743d178111e0dd651fe3b3cac367340fe1345706189350a5020d41a1f141cfaad3e9b467c7455d15d7aeb8218a36a1181394c71466f60f41d609afdb5d3c4f2e31acd4537d5d3c19b7febe136301576b110a73439ca6c8b107fb8dc64b138f5d682d63d80a78ad2e284fbb96ffe4896c7016438169f3d161151a10740b6e18f283dcaa1234f64a040af89334a4a45852e98277499ee83682926cf1cf422e4701ffce49911a3b973edaa5c4b3ec0ae89a09f20f4bb90eb4d75ad4654057000000000000000c20880b007f00012940ddb03310daed3f9bf7d610cfe236ae888302658c0cc71f91e16ef1ae44e482b2bb3522452d373fe764c6e61ee35232dba25174c36212e23c07d1dc7a573ac4d80c2290c306ee391c02a6cd05fd964499eb8e9bde0c189f83b7fd039a8de316706916018a30806e7d9993e5aa52ec34f520eeb4cf5e5fbe157d125280730900080015bbe05c019260c7ea224ca0d664f4392a3d5f449f9fb317f10b3d8f0eb49546801ed2ab33e9b94f1fd42ea801bfd2c403140a2804f25e46e5cd9168b8966ec41309f51ef896dde0d34424820c19228d5c7a96fdf9d506bf45b50a1405ba19ed5b94fdc99bf2f1a178c7cb72edc966b4fbbf98e38677e688d1045dbf790988fea065fade8532a1dad75c2fdcda40b37f098d12a91c2c2675e49ba248e11b2598e9de1603695a0d0086dd000880010002af3511e0545503a57044c90bfc1f6c055e2f1ade15ea7e2797df3bfa914e015ce89c925d5db173b49155e80d3bd2a3ab23ebc19b6ef4b05ccb6dc4c8b9da449e211027609a6bf917cbbea80c855e0fd401b92bf1f773c0195b006f9b751b4d58d5a127ad55a3a37ca9ad772e14823c9994ac5c245dd9ad932541615024e003b072a9e725fc79c20ab261bad1a725f424a42ce6d381ea397cfb97d528c42549919dbe2a3e76851bfd9a564f665edfb60266ade6e0bef6ca7478e9f20a9ded7e0a1b2d765cb0a8fb81d19d899c080088be000000021100bb00010000000000000208000001ff00ab71030800655800000003595a86"], 0x34c) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000600), 0x6) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) kernel console output (not intermixed with test programs): criptor, different from the interface descriptor's value: 2 [ 74.691450][ T342] usb 4-1: config 3 interface 45 has no altsetting 0 [ 74.699846][ T342] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 74.709351][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.717734][ T342] usb 4-1: Product: syz [ 74.722072][ T342] usb 4-1: Manufacturer: syz [ 74.726762][ T342] usb 4-1: SerialNumber: syz [ 74.942744][ T342] usb 4-1: USB disconnect, device number 17 [ 74.947658][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.127582][ T1908] fuse: Bad value for 'group_id' [ 75.132718][ T1908] fuse: Bad value for 'group_id' [ 75.390589][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 75.538885][ T1921] fuse: Unknown parameter 'e' [ 75.543786][ T9] usb 2-1: device descriptor read/64, error -71 [ 75.790417][ T9] usb 2-1: device descriptor read/64, error -71 [ 76.030450][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.065368][ T1935] kvm: kvm [1934]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 76.074231][ T1935] kvm: kvm [1934]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 76.160415][ T9] usb 2-1: device descriptor read/64, error -71 [ 76.410492][ T9] usb 2-1: device descriptor read/64, error -71 [ 76.480497][ T618] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 76.528545][ T9] usb usb2-port1: attempt power cycle [ 76.640402][ T618] usb 1-1: Using ep0 maxpacket: 8 [ 76.648300][ T618] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 76.657618][ T618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.666544][ T618] usb 1-1: Product: syz [ 76.671116][ T618] usb 1-1: Manufacturer: syz [ 76.675731][ T618] usb 1-1: SerialNumber: syz [ 76.870445][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 76.884496][ T1940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.894407][ T9] usb 2-1: device descriptor read/8, error -71 [ 76.901031][ T1940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.914708][ T618] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 76.925545][ T618] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.939148][ T618] usb 1-1: USB disconnect, device number 28 [ 76.954230][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.033088][ T1972] SELinux: unknown common [ 77.042678][ T9] usb 2-1: device descriptor read/8, error -71 [ 77.053634][ T1972] SELinux: failed to load policy [ 77.300416][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 77.321542][ T9] usb 2-1: device descriptor read/8, error -71 [ 77.461578][ T9] usb 2-1: device descriptor read/8, error -71 [ 77.570535][ T9] usb usb2-port1: unable to enumerate USB device [ 77.720418][ T618] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 77.870420][ T618] usb 1-1: Using ep0 maxpacket: 16 [ 77.877854][ T618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.888564][ T618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.899266][ T618] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.909152][ T618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.926472][ T618] usb 1-1: Product: syz [ 77.934115][ T618] usb 1-1: Manufacturer: syz [ 77.944305][ T618] usb 1-1: SerialNumber: syz [ 77.997617][ T2018] device-mapper: ioctl: Invalid ioctl structure: name syzc0, dev fc03 [ 78.011332][ T2023] device-mapper: ioctl: Invalid ioctl structure: name syzc0, dev fc03 [ 78.170065][ T618] usb 1-1: 0:2 : does not exist [ 78.178370][ T618] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 78.191960][ T2042] FAULT_INJECTION: forcing a failure. [ 78.191960][ T2042] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.205207][ T2042] CPU: 1 UID: 0 PID: 2042 Comm: syz.1.436 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 78.205237][ T2042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 78.205249][ T2042] Call Trace: [ 78.205254][ T2042] [ 78.205262][ T2042] __dump_stack+0x21/0x30 [ 78.205286][ T2042] dump_stack_lvl+0x140/0x1c0 [ 78.205302][ T2042] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.205318][ T2042] ? __kasan_check_write+0x18/0x20 [ 78.205345][ T2042] dump_stack+0x19/0x20 [ 78.205360][ T2042] should_fail_ex+0x3c2/0x510 [ 78.205376][ T2042] should_fail+0xf/0x20 [ 78.205388][ T2042] get_futex_key+0x178/0x940 [ 78.205406][ T2042] ? fanout_add+0x13e0/0x13e0 [ 78.205424][ T2042] ? __cfi_get_futex_key+0x10/0x10 [ 78.205445][ T2042] futex_wake+0x150/0x950 [ 78.205468][ T2042] ? packet_setsockopt+0x8c3/0x1510 [ 78.205491][ T2042] ? __cfi_packet_setsockopt+0x10/0x10 [ 78.205515][ T2042] ? __cfi_futex_wake+0x10/0x10 [ 78.205537][ T2042] ? selinux_socket_setsockopt+0x324/0x3d0 [ 78.205560][ T2042] ? security_file_alloc+0x49/0x220 [ 78.205585][ T2042] do_futex+0x37d/0x510 [ 78.205601][ T2042] ? errseq_sample+0x48/0x70 [ 78.205620][ T2042] ? file_init_path+0x434/0x590 [ 78.205640][ T2042] ? __cfi_do_futex+0x10/0x10 [ 78.205658][ T2042] __se_sys_futex+0x13c/0x320 [ 78.205678][ T2042] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 78.205702][ T2042] ? __x64_sys_futex+0x110/0x110 [ 78.205721][ T2042] ? __kasan_check_write+0x18/0x20 [ 78.205745][ T2042] __x64_sys_futex+0xe9/0x110 [ 78.205775][ T2042] x64_sys_call+0x227f/0x2ee0 [ 78.205793][ T2042] do_syscall_64+0x57/0xf0 [ 78.205813][ T2042] ? clear_bhb_loop+0x50/0xa0 [ 78.205835][ T2042] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.205860][ T2042] RIP: 0033:0x7f5d0439fb19 [ 78.205875][ T2042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.205890][ T2042] RSP: 002b:00007f5d0518c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.205908][ T2042] RAX: ffffffffffffffda RBX: 00007f5d04625fa8 RCX: 00007f5d0439fb19 [ 78.205920][ T2042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d04625fac [ 78.205932][ T2042] RBP: 00007f5d04625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 78.205945][ T2042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.205954][ T2042] R13: 00007f5d04626038 R14: 00007ffd6f5c8040 R15: 00007ffd6f5c8128 [ 78.205968][ T2042] [ 78.206161][ T618] usb 1-1: USB disconnect, device number 29 [ 78.472159][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 78.573557][ T36] kauditd_printk_skb: 8395 callbacks suppressed [ 78.573573][ T36] audit: type=1400 audit(1794040354.978:15488): avc: denied { write } for pid=2050 comm="syz.1.439" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.573954][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.611174][ T9] usb 3-1: device descriptor read/64, error -71 [ 78.614095][ T2055] rust_binder: 2050:2055 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 78.627744][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.634415][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.637243][ T2058] page size migration: [2058 (syz.3.438)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 78.641051][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.660688][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.667204][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.674394][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.681140][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.687839][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.694440][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.860418][ T9] usb 3-1: device descriptor read/64, error -71 [ 78.963742][ T36] audit: type=1400 audit(1794040355.368:15489): avc: denied { create } for pid=2080 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.985100][ T2081] TCP: TCP_TX_DELAY enabled [ 79.022367][ T2085] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 79.060033][ T36] audit: type=1400 audit(1794040355.458:15490): avc: denied { execmem } for pid=2086 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.110411][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 79.250448][ T9] usb 3-1: device descriptor read/64, error -71 [ 79.317139][ T1958] bridge_slave_1: left allmulticast mode [ 79.324603][ T1958] bridge_slave_1: left promiscuous mode [ 79.335862][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.351630][ T1958] bridge_slave_0: left allmulticast mode [ 79.363242][ T1958] bridge_slave_0: left promiscuous mode [ 79.379667][ T1958] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.500453][ T338] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 79.510417][ T9] usb 3-1: device descriptor read/64, error -71 [ 79.522635][ T1958] veth1_macvtap: left promiscuous mode [ 79.528742][ T1958] veth0_vlan: left promiscuous mode [ 79.613060][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.620206][ T2102] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.620894][ T9] usb usb3-port1: attempt power cycle [ 79.628082][ T2102] bridge_slave_0: entered allmulticast mode [ 79.639503][ T2102] bridge_slave_0: entered promiscuous mode [ 79.646851][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.654240][ T2102] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.661519][ T338] usb 2-1: Using ep0 maxpacket: 32 [ 79.662033][ T2102] bridge_slave_1: entered allmulticast mode [ 79.668453][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.673607][ T2102] bridge_slave_1: entered promiscuous mode [ 79.684087][ T338] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 79.699953][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.710951][ T338] usb 2-1: config 0 descriptor?? [ 79.756116][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.763764][ T2102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.764076][ T36] audit: type=1400 audit(1794040356.168:15491): avc: denied { create } for pid=2106 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.771078][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.771096][ T2102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.772102][ T2107] netlink: 72 bytes leftover after parsing attributes in process `syz.0.456'. [ 79.791929][ T36] audit: type=1400 audit(1794040356.178:15492): avc: denied { write } for pid=2106 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.835311][ T36] audit: type=1400 audit(1794040356.178:15493): avc: denied { nlmsg_write } for pid=2106 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.835384][ T1955] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.865740][ T1955] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.877043][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.884170][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.893244][ T1955] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.900590][ T1955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.921543][ T338] a4tech 0003:09DA:0006.0009: item fetching failed at offset 0/2 [ 79.929554][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.934487][ T2102] veth0_vlan: entered promiscuous mode [ 79.939503][ T338] a4tech 0003:09DA:0006.0009: parse failed [ 79.954886][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.956164][ T2102] veth1_macvtap: entered promiscuous mode [ 79.965788][ T338] a4tech 0003:09DA:0006.0009: probe with driver a4tech failed with error -22 [ 79.980747][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 80.011840][ T9] usb 3-1: device descriptor read/8, error -71 [ 80.070505][ T618] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 80.120748][ T338] usb 2-1: USB disconnect, device number 23 [ 80.142374][ T9] usb 3-1: device descriptor read/8, error -71 [ 80.242056][ T618] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 80.255881][ T618] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 80.268519][ T618] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.282609][ T618] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.289784][ T618] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 80.301230][ T618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.310113][ T618] usb 1-1: config 0 descriptor?? [ 80.316927][ T2113] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.390445][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 80.411497][ T9] usb 3-1: device descriptor read/8, error -71 [ 80.529823][ T2126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.539423][ T2126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.541841][ T9] usb 3-1: device descriptor read/8, error -71 [ 80.660956][ T9] usb usb3-port1: unable to enumerate USB device [ 80.729205][ T618] usbhid 1-1:0.0: can't add hid device: -71 [ 80.737643][ T618] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.749634][ T618] usb 1-1: USB disconnect, device number 30 [ 80.853023][ T2139] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 80.873804][ T36] audit: type=1400 audit(1794040357.278:15494): avc: denied { ioctl } for pid=2140 comm="syz.3.461" path="socket:[20971]" dev="sockfs" ino=20971 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.878403][ T2141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2141 comm=syz.3.461 [ 81.040520][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 81.191144][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 81.200164][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.215079][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 81.225165][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.243142][ T9] usb 2-1: Found UVC 1.00 device (046d:0825) [ 81.386232][ T36] audit: type=1400 audit(1794040357.788:15495): avc: denied { bind } for pid=2159 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.442124][ T9] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 81.455720][ T2161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.465'. [ 81.456248][ T9] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 81.474006][ T9] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 81.484065][ T9] usb 2-1: USB disconnect, device number 24 [ 81.615218][ T36] audit: type=1400 audit(1794040358.018:15496): avc: denied { nlmsg_read } for pid=2167 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.641478][ T2168] kvm: user requested TSC rate below hardware speed [ 81.815285][ T2173] FAULT_INJECTION: forcing a failure. [ 81.815285][ T2173] name failslab, interval 1, probability 0, space 0, times 0 [ 81.829867][ T2173] CPU: 1 UID: 0 PID: 2173 Comm: syz.3.469 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 81.829899][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 81.829912][ T2173] Call Trace: [ 81.829921][ T2173] [ 81.829929][ T2173] __dump_stack+0x21/0x30 [ 81.829945][ T2173] dump_stack_lvl+0x140/0x1c0 [ 81.829962][ T2173] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.829977][ T2173] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 81.829989][ T2173] ? mutex_unlock+0x90/0x240 [ 81.830003][ T2173] ? pcpu_alloc_noprof+0x1440/0x1440 [ 81.830013][ T2173] dump_stack+0x19/0x20 [ 81.830023][ T2173] should_fail_ex+0x3c2/0x510 [ 81.830034][ T2173] should_failslab+0xac/0x100 [ 81.830046][ T2173] __kmalloc_cache_noprof+0x41/0x470 [ 81.830065][ T2173] ? percpu_ref_init+0xe3/0x4d0 [ 81.830075][ T2173] percpu_ref_init+0xe3/0x4d0 [ 81.830084][ T2173] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 81.830106][ T2173] io_ring_ctx_alloc+0x141/0x1dc0 [ 81.830129][ T2173] ? do_futex+0x32a/0x510 [ 81.830141][ T2173] io_uring_create+0x2e0/0x13f0 [ 81.830153][ T2173] ? __kasan_check_write+0x18/0x20 [ 81.830169][ T2173] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 81.830185][ T2173] ? __se_sys_futex+0x13c/0x320 [ 81.830196][ T2173] ? __x64_sys_io_uring_setup+0x80/0x80 [ 81.830211][ T2173] ? __kasan_check_write+0x18/0x20 [ 81.830226][ T2173] __x64_sys_io_uring_setup+0x5f/0x80 [ 81.830239][ T2173] x64_sys_call+0x22c0/0x2ee0 [ 81.830250][ T2173] do_syscall_64+0x57/0xf0 [ 81.830260][ T2173] ? clear_bhb_loop+0x50/0xa0 [ 81.830274][ T2173] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.830287][ T2173] RIP: 0033:0x7fbe7ff9fb19 [ 81.830297][ T2173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.830306][ T2173] RSP: 002b:00007fbe7e9e2fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 81.830318][ T2173] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007fbe7ff9fb19 [ 81.830326][ T2173] RDX: 0000200000000000 RSI: 0000200000000300 RDI: 00000000000072de [ 81.830334][ T2173] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 81.830340][ T2173] R10: 0000200000000400 R11: 0000000000000206 R12: 0000200000000000 [ 81.830354][ T2173] R13: 0000200000000400 R14: 0000200000000380 R15: 00007ffd689b0a78 [ 81.830368][ T2173] [ 82.200055][ T2183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 82.240571][ T36] audit: type=1400 audit(1794040358.638:15497): avc: denied { shutdown } for pid=2186 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.281803][ T2193] cgroup: Invalid name [ 82.370475][ T338] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 82.513036][ T2211] tc_dump_action: action bad kind [ 82.521829][ T338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.530308][ T338] usb 2-1: not running at top speed; connect to a high speed hub [ 82.543550][ T338] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 82.554366][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.562635][ T338] usb 2-1: Product: syz [ 82.567331][ T338] usb 2-1: Manufacturer: syz [ 82.573175][ T338] usb 2-1: SerialNumber: syz [ 82.670470][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 82.683412][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 82.692844][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 82.702654][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 82.721967][ T2226] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.488'. [ 82.823496][ T2227] kvm: pic: non byte write [ 82.830428][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.984613][ T2231] FAULT_INJECTION: forcing a failure. [ 82.984613][ T2231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.998021][ T2231] CPU: 0 UID: 0 PID: 2231 Comm: syz.2.489 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 82.998053][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 82.998066][ T2231] Call Trace: [ 82.998072][ T2231] [ 82.998079][ T2231] __dump_stack+0x21/0x30 [ 82.998100][ T2231] dump_stack_lvl+0x140/0x1c0 [ 82.998109][ T2231] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.998119][ T2231] ? check_stack_object+0x81/0x150 [ 82.998135][ T2231] dump_stack+0x19/0x20 [ 82.998144][ T2231] should_fail_ex+0x3c2/0x510 [ 82.998154][ T2231] should_fail+0xf/0x20 [ 82.998165][ T2231] should_fail_usercopy+0x1e/0x30 [ 82.998183][ T2231] _copy_from_user+0x20/0xa0 [ 82.998202][ T2231] memdup_user+0x81/0x170 [ 82.998225][ T2231] kvm_vcpu_ioctl+0x661/0x1000 [ 82.998244][ T2231] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.998255][ T2231] ? hook_file_ioctl+0x1ef/0x590 [ 82.998269][ T2231] ? __cfi_vfs_write+0x10/0x10 [ 82.998283][ T2231] ? __cfi_hook_file_ioctl+0x10/0x10 [ 82.998296][ T2231] ? __kasan_check_write+0x18/0x20 [ 82.998315][ T2231] ? mutex_unlock+0x90/0x240 [ 82.998337][ T2231] ? __cfi_mutex_unlock+0x10/0x10 [ 82.998360][ T2231] ? __fget_files+0x2bc/0x330 [ 82.998378][ T2231] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.998392][ T2231] ? security_file_ioctl+0x3e/0x110 [ 82.998407][ T2231] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.998417][ T2231] __se_sys_ioctl+0x123/0x1b0 [ 82.998429][ T2231] __x64_sys_ioctl+0x7f/0xa0 [ 82.998439][ T2231] x64_sys_call+0x1878/0x2ee0 [ 82.998453][ T2231] do_syscall_64+0x57/0xf0 [ 82.998471][ T2231] ? clear_bhb_loop+0x50/0xa0 [ 82.998494][ T2231] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.998515][ T2231] RIP: 0033:0x7f77d319fb19 [ 82.998532][ T2231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.998540][ T2231] RSP: 002b:00007f77d3ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.998561][ T2231] RAX: ffffffffffffffda RBX: 00007f77d3426090 RCX: 00007f77d319fb19 [ 82.998569][ T2231] RDX: 0000200000000280 RSI: 000000004138ae84 RDI: 0000000000000005 [ 82.998576][ T2231] RBP: 00007f77d3ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 82.998583][ T2231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.998589][ T2231] R13: 00007f77d3426128 R14: 00007f77d3426090 R15: 00007ffe09de3558 [ 82.998619][ T2231] [ 83.300434][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.520683][ T2250] process 'syz.2.496' launched './file1' with NULL argv: empty string added [ 83.560467][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 83.603119][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 83.603133][ T36] audit: type=1326 audit(1794040360.008:15506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2254 comm="syz.2.498" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d319fb19 code=0x7fc00000 [ 83.700606][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.810404][ T364] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 83.843084][ T2263] FAULT_INJECTION: forcing a failure. [ 83.843084][ T2263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.856181][ T2263] CPU: 0 UID: 0 PID: 2263 Comm: syz.2.500 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 83.856213][ T2263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 83.856226][ T2263] Call Trace: [ 83.856233][ T2263] [ 83.856249][ T2263] __dump_stack+0x21/0x30 [ 83.856264][ T2263] dump_stack_lvl+0x140/0x1c0 [ 83.856274][ T2263] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.856285][ T2263] ? check_stack_object+0x138/0x150 [ 83.856311][ T2263] dump_stack+0x19/0x20 [ 83.856330][ T2263] should_fail_ex+0x3c2/0x510 [ 83.856347][ T2263] should_fail+0xf/0x20 [ 83.856363][ T2263] should_fail_usercopy+0x1e/0x30 [ 83.856375][ T2263] _copy_to_user+0x24/0xa0 [ 83.856387][ T2263] simple_read_from_buffer+0xed/0x160 [ 83.856400][ T2263] proc_fail_nth_read+0x1aa/0x220 [ 83.856413][ T2263] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.856425][ T2263] ? kvm_vcpu_ioctl+0xcae/0x1000 [ 83.856442][ T2263] ? bpf_lsm_file_permission+0xd/0x20 [ 83.856462][ T2263] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.856483][ T2263] vfs_read+0x28b/0xc70 [ 83.856506][ T2263] ? __cfi_vfs_read+0x10/0x10 [ 83.856527][ T2263] ? __kasan_check_write+0x18/0x20 [ 83.856550][ T2263] ? mutex_lock+0x97/0x1d0 [ 83.856572][ T2263] ? __cfi_mutex_lock+0x10/0x10 [ 83.856595][ T2263] ksys_read+0x145/0x260 [ 83.856618][ T2263] ? __cfi_ksys_read+0x10/0x10 [ 83.856641][ T2263] ? __kasan_check_write+0x18/0x20 [ 83.856658][ T2263] ? fput+0x1a4/0x230 [ 83.856669][ T2263] ? __kasan_check_read+0x15/0x20 [ 83.856682][ T2263] __x64_sys_read+0x7f/0x90 [ 83.856691][ T2263] x64_sys_call+0x2638/0x2ee0 [ 83.856702][ T2263] do_syscall_64+0x57/0xf0 [ 83.856713][ T2263] ? clear_bhb_loop+0x50/0xa0 [ 83.856736][ T2263] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.856758][ T2263] RIP: 0033:0x7f77d316034e [ 83.856774][ T2263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.856788][ T2263] RSP: 002b:00007f77d401efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.856802][ T2263] RAX: ffffffffffffffda RBX: 00007f77d401f6c0 RCX: 00007f77d316034e [ 83.856810][ T2263] RDX: 000000000000000f RSI: 00007f77d401f0a0 RDI: 0000000000000006 [ 83.856817][ T2263] RBP: 00007f77d401f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.856824][ T2263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.856830][ T2263] R13: 00007f77d3426038 R14: 00007f77d3425fa0 R15: 00007ffe09de3558 [ 83.856839][ T2263] [ 83.990561][ T364] usb 1-1: device descriptor read/64, error -71 [ 84.060402][ T9] usb 4-1: device descriptor read/64, error -71 [ 84.157508][ T2266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 84.166399][ T2266] bridge_slave_1: left allmulticast mode [ 84.172278][ T2266] bridge_slave_1: left promiscuous mode [ 84.177945][ T2266] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.185609][ T2266] bridge_slave_0: left allmulticast mode [ 84.191371][ T2266] bridge_slave_0: left promiscuous mode [ 84.197043][ T2266] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.230542][ T9] usb usb4-port1: attempt power cycle [ 84.300427][ T364] usb 1-1: device descriptor read/64, error -71 [ 84.443629][ T36] audit: type=1400 audit(1794040360.848:15507): avc: denied { accept } for pid=2275 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.505698][ T2282] batadv_slave_0: entered promiscuous mode [ 84.513184][ T2282] batadv_slave_0: left promiscuous mode [ 84.550404][ T364] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 84.570408][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 84.611396][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.700440][ T364] usb 1-1: device descriptor read/64, error -71 [ 84.751388][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.795805][ T2292] fuse: Bad value for 'rootmode' [ 84.804167][ T2293] netlink: 72 bytes leftover after parsing attributes in process `syz.2.511'. [ 84.813589][ T2293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 84.822464][ T2293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 84.882032][ T36] audit: type=1400 audit(1794040361.288:15508): avc: denied { write } for pid=2297 comm="syz.2.512" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.940443][ T364] usb 1-1: device descriptor read/64, error -71 [ 84.990433][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 85.011446][ T9] usb 4-1: device descriptor read/8, error -71 [ 85.050537][ T364] usb usb1-port1: attempt power cycle [ 85.074011][ T338] usb 2-1: MBOX3: Invalid descriptor size=96. [ 85.081569][ T338] usb 2-1: MBOX3: Invalid descriptor size=96. [ 85.088390][ T338] usb 2-1: MBOX3: Invalid descriptor size=96. [ 85.103290][ T338] usb 2-1: USB disconnect, device number 25 [ 85.151855][ T9] usb 4-1: device descriptor read/8, error -71 [ 85.270527][ T9] usb usb4-port1: unable to enumerate USB device [ 85.390491][ T364] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 85.400465][ T338] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 85.411467][ T364] usb 1-1: device descriptor read/8, error -71 [ 85.472409][ T36] audit: type=1401 audit(1794040361.878:15509): op=fscreate invalid_context=CF [ 85.541777][ T364] usb 1-1: device descriptor read/8, error -71 [ 85.550559][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 85.556294][ T338] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 85.565327][ T338] usb 2-1: config 0 has no interfaces? [ 85.571539][ T338] usb 2-1: config 0 has no interfaces? [ 85.577756][ T338] usb 2-1: config 0 has no interfaces? [ 85.583996][ T338] usb 2-1: config 0 has no interfaces? [ 85.590197][ T338] usb 2-1: config 0 has no interfaces? [ 85.596500][ T338] usb 2-1: config 0 has no interfaces? [ 85.602823][ T338] usb 2-1: config 0 has no interfaces? [ 85.608999][ T338] usb 2-1: config 0 has no interfaces? [ 85.621466][ T338] usb 2-1: string descriptor 0 read error: -71 [ 85.627718][ T338] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 85.636921][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.648105][ T338] r8152-cfgselector 2-1: Unknown version 0x0000 [ 85.654691][ T338] r8152-cfgselector 2-1: config 0 descriptor?? [ 85.661280][ T338] r8152-cfgselector 2-1: can't set config #0, error -71 [ 85.669061][ T338] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 85.790559][ T364] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 85.811519][ T364] usb 1-1: device descriptor read/8, error -71 [ 85.941608][ T364] usb 1-1: device descriptor read/8, error -71 [ 86.020465][ T618] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 86.050563][ T364] usb usb1-port1: unable to enumerate USB device [ 86.181713][ T618] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.192143][ T618] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 86.201751][ T618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.211916][ T618] usb 3-1: Found UVC 1.00 device (046d:0825) [ 86.611996][ T618] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 86.623215][ T2318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.634646][ T618] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 86.644340][ T2318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.652829][ T618] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 86.674698][ T2342] FAULT_INJECTION: forcing a failure. [ 86.674698][ T2342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.693086][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: syz.0.527 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 86.693118][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 86.693132][ T2342] Call Trace: [ 86.693141][ T2342] [ 86.693151][ T2342] __dump_stack+0x21/0x30 [ 86.693176][ T2342] dump_stack_lvl+0x140/0x1c0 [ 86.693189][ T2342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.693200][ T2342] dump_stack+0x19/0x20 [ 86.693210][ T2342] should_fail_ex+0x3c2/0x510 [ 86.693220][ T2342] should_fail_alloc_page+0xec/0x110 [ 86.693233][ T2342] __alloc_pages_noprof+0x1c0/0x7e0 [ 86.693246][ T2342] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 86.693260][ T2342] ? kvm_sched_clock_read+0x15/0x30 [ 86.693274][ T2342] ? sched_clock_noinstr+0xd/0x30 [ 86.693287][ T2342] ? __kasan_check_write+0x18/0x20 [ 86.693302][ T2342] __folio_alloc_noprof+0x14/0x80 [ 86.693314][ T2342] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 86.693326][ T2342] ? shmem_replace_folio+0x9b0/0x9b0 [ 86.693337][ T2342] ? shmem_huge_global_enabled+0x2da/0x360 [ 86.693347][ T2342] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 86.693357][ T2342] shmem_get_folio_gfp+0x5cd/0x12e0 [ 86.693368][ T2342] ? shmem_get_folio+0xc0/0xc0 [ 86.693377][ T2342] ? inode_to_bdi+0x6d/0x100 [ 86.693389][ T2342] shmem_write_begin+0xf4/0x260 [ 86.693400][ T2342] generic_perform_write+0x329/0x970 [ 86.693412][ T2342] ? __cfi_generic_perform_write+0x10/0x10 [ 86.693424][ T2342] ? generic_write_checks_count+0x426/0x540 [ 86.693437][ T2342] ? file_update_time+0xa3/0x210 [ 86.693450][ T2342] shmem_file_write_iter+0x105/0x130 [ 86.693462][ T2342] vfs_write+0x765/0xfd0 [ 86.693476][ T2342] ? __cfi_vfs_write+0x10/0x10 [ 86.693490][ T2342] ? __cfi_mutex_lock+0x10/0x10 [ 86.693503][ T2342] ksys_write+0x145/0x260 [ 86.693512][ T2342] ? __cfi_ksys_write+0x10/0x10 [ 86.693521][ T2342] ? __kasan_check_write+0x18/0x20 [ 86.693535][ T2342] ? fpregs_restore_userregs+0x11c/0x260 [ 86.693549][ T2342] __x64_sys_write+0x7f/0x90 [ 86.693558][ T2342] x64_sys_call+0x271c/0x2ee0 [ 86.693569][ T2342] do_syscall_64+0x57/0xf0 [ 86.693579][ T2342] ? clear_bhb_loop+0x50/0xa0 [ 86.693593][ T2342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.693658][ T2342] RIP: 0033:0x7f029699fb19 [ 86.693670][ T2342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.693680][ T2342] RSP: 002b:00007f0297908028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.693694][ T2342] RAX: ffffffffffffffda RBX: 00007f0296c25fa0 RCX: 00007f029699fb19 [ 86.693702][ T2342] RDX: 000000000000045c RSI: 00002000000007c0 RDI: 0000000000000006 [ 86.693710][ T2342] RBP: 00007f0296a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 86.693717][ T2342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.693724][ T2342] R13: 00007f0296c26038 R14: 00007f0296c25fa0 R15: 00007ffc509f5128 [ 86.693732][ T2342] [ 87.196191][ T2350] tipc: Started in network mode [ 87.201199][ T2350] tipc: Node identity aaaaaaaaaa2d, cluster identity 4711 [ 87.209009][ T2350] tipc: Enabled bearer , priority 10 [ 87.216607][ T2350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 87.320500][ T364] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 87.481748][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.490186][ T364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.500607][ T364] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.511018][ T364] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 87.520148][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.528405][ T364] usb 2-1: Product: syz [ 87.532785][ T364] usb 2-1: Manufacturer: syz [ 87.537425][ T364] usb 2-1: SerialNumber: syz [ 87.545924][ T364] usb 2-1: selecting invalid altsetting 1 [ 87.552595][ T364] usb 2-1: unit 6 not found! [ 87.747141][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.755717][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.200423][ T9] tipc: Node number set to 8891050 [ 88.330653][ T2371] cgroup2: Unknown parameter 'Ù' [ 88.336623][ T36] audit: type=1400 audit(1794040364.738:15510): avc: denied { nlmsg_read } for pid=2367 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.365940][ T364] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 88.376427][ T364] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.393475][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.409772][ T364] usb 2-1: USB disconnect, device number 27 [ 88.443919][ T2383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.452422][ T2383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.545215][ T2388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.680414][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 88.767869][ T2393] futex_wake_op: syz.3.542 tries to shift op by 144; fix this program [ 88.796287][ T2393] kvm: kvm [2392]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 88.810521][ T9] usb 3-1: USB disconnect, device number 27 [ 88.810574][ T31] usb 1-1: device descriptor read/64, error -71 [ 88.828209][ T2396] FAULT_INJECTION: forcing a failure. [ 88.828209][ T2396] name failslab, interval 1, probability 0, space 0, times 0 [ 88.841828][ T2393] kvm: kvm [2392]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 88.842350][ T2396] CPU: 0 UID: 0 PID: 2396 Comm: syz.2.543 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 88.842378][ T2396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 88.842391][ T2396] Call Trace: [ 88.842397][ T2396] [ 88.842404][ T2396] __dump_stack+0x21/0x30 [ 88.842429][ T2396] dump_stack_lvl+0x140/0x1c0 [ 88.842446][ T2396] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.842464][ T2396] ? kasan_save_alloc_info+0x3a/0x50 [ 88.842489][ T2396] dump_stack+0x19/0x20 [ 88.842505][ T2396] should_fail_ex+0x3c2/0x510 [ 88.842522][ T2396] ? sk_prot_alloc+0x104/0x3a0 [ 88.842543][ T2396] should_failslab+0xac/0x100 [ 88.842563][ T2396] __kmalloc_noprof+0x69/0x510 [ 88.842589][ T2396] ? sk_prot_alloc+0x104/0x3a0 [ 88.842611][ T2396] sk_prot_alloc+0x104/0x3a0 [ 88.842632][ T2396] ? security_socket_post_create+0x48/0x140 [ 88.842655][ T2396] sk_alloc+0x40/0x590 [ 88.842675][ T2396] __netlink_kernel_create+0x173/0x8a0 [ 88.842698][ T2396] ? __cfi___netlink_kernel_create+0x10/0x10 [ 88.842721][ T2396] ? __asan_memcpy+0x5a/0x80 [ 88.842743][ T2396] audit_net_init+0x108/0x240 [ 88.842766][ T2396] ? __cfi_audit_net_init+0x10/0x10 [ 88.842788][ T2396] ? __cfi_audit_receive+0x10/0x10 [ 88.842810][ T2396] ? __cfi_audit_multicast_bind+0x10/0x10 [ 88.842833][ T2396] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 88.842857][ T2396] ? __kmalloc_noprof+0x261/0x510 [ 88.842880][ T2396] ? ops_init+0x81/0x5d0 [ 88.842897][ T2396] ops_init+0x302/0x5d0 [ 88.842913][ T2396] ? __kasan_check_write+0x18/0x20 [ 88.842937][ T2396] ? rwsem_read_trylock+0x275/0x5a0 [ 88.842959][ T2396] setup_net+0x227/0x9b0 [ 88.842984][ T2396] ? copy_net_ns+0xa20/0xa20 [ 88.843008][ T2396] ? down_read_killable+0x7f/0x100 [ 88.843032][ T2396] ? __cfi_down_read_killable+0x10/0x10 [ 88.843066][ T2396] copy_net_ns+0x4fc/0xa20 [ 88.843092][ T2396] create_new_namespaces+0x390/0x6f0 [ 88.843113][ T2396] unshare_nsproxy_namespaces+0x124/0x180 [ 88.843133][ T2396] ksys_unshare+0x4f9/0x920 [ 88.843150][ T2396] ? fput+0x1a4/0x230 [ 88.843170][ T2396] ? __cfi_ksys_unshare+0x10/0x10 [ 88.843186][ T2396] ? __kasan_check_write+0x18/0x20 [ 88.843210][ T2396] __x64_sys_unshare+0x3c/0x50 [ 88.843226][ T2396] x64_sys_call+0x2998/0x2ee0 [ 88.843245][ T2396] do_syscall_64+0x57/0xf0 [ 88.843263][ T2396] ? clear_bhb_loop+0x50/0xa0 [ 88.843286][ T2396] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.843308][ T2396] RIP: 0033:0x7f77d319fb19 [ 88.843325][ T2396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.843340][ T2396] RSP: 002b:00007f77d401f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 88.843360][ T2396] RAX: ffffffffffffffda RBX: 00007f77d3425fa0 RCX: 00007f77d319fb19 [ 88.843375][ T2396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 88.843387][ T2396] RBP: 00007f77d3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 88.843399][ T2396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.843410][ T2396] R13: 00007f77d3426038 R14: 00007f77d3425fa0 R15: 00007ffe09de3558 [ 88.843427][ T2396] [ 88.843456][ T2396] audit: cannot initialize netlink socket in namespace [ 89.080489][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.310426][ T364] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 89.420474][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 89.461883][ T364] usb 2-1: config 0 has no interfaces? [ 89.467514][ T364] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 89.470426][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 89.477535][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.493845][ T364] usb 2-1: config 0 descriptor?? [ 89.550462][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.630443][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 89.636906][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.648197][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.660029][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.669539][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.678150][ T9] usb 3-1: Product: syz [ 89.682377][ T9] usb 3-1: Manufacturer: syz [ 89.687088][ T9] usb 3-1: SerialNumber: syz [ 89.692272][ T9] usb 3-1: config 0 descriptor?? [ 89.703664][ T9] usb 2-1: USB disconnect, device number 28 [ 89.790467][ T31] usb 1-1: device descriptor read/64, error -71 [ 89.900667][ T31] usb usb1-port1: attempt power cycle [ 89.902436][ T9] usb 3-1: USB disconnect, device number 28 [ 90.240483][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 90.261438][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.292889][ T2406] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 90.391484][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.611000][ T2425] kvm: pic: non byte read [ 90.615628][ T2425] kvm: pic: non byte write [ 90.630534][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 90.661971][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.680549][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 90.791596][ T31] usb 1-1: device descriptor read/8, error -71 [ 90.807766][ T2434] device-mapper: ioctl: The device has no table. [ 90.831931][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 90.840856][ T9] usb 3-1: config 8 has an invalid interface number: 10 but max is 3 [ 90.848961][ T9] usb 3-1: config 8 has an invalid interface number: 8 but max is 3 [ 90.857034][ T9] usb 3-1: config 8 has an invalid interface number: 253 but max is 3 [ 90.865255][ T9] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 90.874003][ T9] usb 3-1: config 8 has an invalid descriptor of length 215, skipping remainder of the config [ 90.884438][ T9] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 90.893443][ T9] usb 3-1: config 8 has no interface number 0 [ 90.899598][ T9] usb 3-1: config 8 has no interface number 1 [ 90.905733][ T9] usb 3-1: config 8 has no interface number 2 [ 90.910550][ T31] usb usb1-port1: unable to enumerate USB device [ 90.911913][ T9] usb 3-1: config 8 interface 10 altsetting 251 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 90.929366][ T9] usb 3-1: config 8 interface 10 altsetting 251 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 90.941224][ T9] usb 3-1: config 8 interface 10 altsetting 251 has a duplicate endpoint with address 0x5, skipping [ 90.952069][ T9] usb 3-1: config 8 interface 8 altsetting 230 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 90.963087][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0xC, skipping [ 90.973819][ T9] usb 3-1: config 8 interface 8 altsetting 230 has an invalid descriptor for endpoint zero, skipping [ 90.984725][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x2, skipping [ 90.995503][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x8, skipping [ 91.006648][ T9] usb 3-1: config 8 interface 8 altsetting 230 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 91.017577][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x8, skipping [ 91.028323][ T9] usb 3-1: config 8 interface 8 altsetting 230 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 91.039335][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x3, skipping [ 91.050217][ T9] usb 3-1: config 8 interface 8 altsetting 230 has an invalid descriptor for endpoint zero, skipping [ 91.061456][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x2, skipping [ 91.072272][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0x4, skipping [ 91.084785][ T9] usb 3-1: config 8 interface 8 altsetting 230 has a duplicate endpoint with address 0xC, skipping [ 91.095538][ T9] usb 3-1: config 8 interface 8 altsetting 230 has an invalid descriptor for endpoint zero, skipping [ 91.108426][ T9] usb 3-1: config 8 interface 253 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 91.119739][ T9] usb 3-1: config 8 interface 253 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 91.131083][ T9] usb 3-1: config 8 interface 253 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 91.142660][ T9] usb 3-1: config 8 interface 253 altsetting 0 has a duplicate endpoint with address 0x83, skipping [ 91.154468][ T9] usb 3-1: config 8 interface 253 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 91.166390][ T9] usb 3-1: config 8 interface 253 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.178265][ T9] usb 3-1: config 8 interface 10 has no altsetting 0 [ 91.185594][ T9] usb 3-1: config 8 interface 8 has no altsetting 0 [ 91.193544][ T9] usb 3-1: New USB device found, idVendor=07b8, idProduct=200c, bcdDevice=ac.a8 [ 91.202801][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.210946][ T9] usb 3-1: Product: syz [ 91.215174][ T9] usb 3-1: Manufacturer: и [ 91.219695][ T9] usb 3-1: SerialNumber: syz [ 91.225692][ T2415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.441344][ T9] usb 3-1: USB disconnect, device number 29 [ 91.715128][ T36] audit: type=1400 audit(1794040368.118:15511): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.803732][ T1991] gretap0: left allmulticast mode [ 91.808868][ T1991] gretap0: left promiscuous mode [ 91.814051][ T1991] bridge0: port 3(gretap0) entered disabled state [ 91.823312][ T1991] bridge_slave_1: left allmulticast mode [ 91.830402][ T1991] bridge_slave_1: left promiscuous mode [ 91.836194][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.843993][ T1991] bridge_slave_0: left allmulticast mode [ 91.849648][ T1991] bridge_slave_0: left promiscuous mode [ 91.855585][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.860452][ T317] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 91.953700][ T36] audit: type=1400 audit(1794040368.358:15512): avc: denied { getopt } for pid=2456 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.989187][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 91.998704][ T1991] veth1_macvtap: left promiscuous mode [ 92.004631][ T1991] veth0_vlan: left promiscuous mode [ 92.031471][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 92.043453][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.067479][ T2451] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.068549][ T317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.074922][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.092238][ T2451] bridge_slave_0: entered allmulticast mode [ 92.098547][ T2451] bridge_slave_0: entered promiscuous mode [ 92.105565][ T2451] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.113277][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.120421][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 92.120482][ T2451] bridge_slave_1: entered allmulticast mode [ 92.128204][ T317] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.135065][ T2451] bridge_slave_1: entered promiscuous mode [ 92.155189][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.170648][ T317] usb 1-1: config 0 descriptor?? [ 92.183206][ T317] hub 1-1:0.0: USB hub found [ 92.204871][ T2451] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.211985][ T2451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.219286][ T2451] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.226365][ T2451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.250461][ T1946] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.257809][ T1946] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.267447][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.274602][ T1962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.285530][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.292632][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.311977][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.318420][ T2451] veth0_vlan: entered promiscuous mode [ 92.327343][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.333878][ T2451] veth1_macvtap: entered promiscuous mode [ 92.351880][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.358901][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 92.368782][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.381999][ T9] usb 4-1: config 0 descriptor?? [ 92.432821][ T317] hub 1-1:0.0: 1 port detected [ 92.497813][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 92.597543][ T2488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.571'. [ 92.620461][ T36] audit: type=1400 audit(1794040369.018:15513): avc: denied { listen } for pid=2489 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 92.642655][ T2440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.671956][ T317] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 92.672311][ T2440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.678336][ T317] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 92.698655][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.711862][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 92.724567][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 92.732667][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 92.742205][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.750297][ T10] usb 3-1: Product: syz [ 92.754866][ T10] usb 3-1: Manufacturer: syz [ 92.759532][ T10] usb 3-1: SerialNumber: syz [ 92.767671][ T2477] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 92.776495][ T2477] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 92.789155][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 92.796224][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 92.807523][ T9] usb 4-1: USB disconnect, device number 22 [ 92.938090][ T317] usbhid 1-1:0.0: can't add hid device: -71 [ 92.944469][ T317] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 92.971101][ T317] usb 1-1: USB disconnect, device number 39 [ 93.560429][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 93.652070][ T2539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.660778][ T2539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.678000][ T2539] syzkaller0: entered promiscuous mode [ 93.683567][ T2539] syzkaller0: entered allmulticast mode [ 93.689945][ T36] audit: type=1400 audit(1794040370.088:15514): avc: denied { relabelfrom } for pid=2537 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.709986][ T36] audit: type=1400 audit(1794040370.088:15515): avc: denied { relabelto } for pid=2537 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.740403][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 93.746960][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.755455][ T31] usb 1-1: config 5 has an invalid interface number: 113 but max is 2 [ 93.763731][ T31] usb 1-1: config 5 has an invalid interface number: 32 but max is 2 [ 93.772046][ T31] usb 1-1: config 5 has an invalid interface number: 237 but max is 2 [ 93.780520][ T31] usb 1-1: config 5 has no interface number 0 [ 93.786645][ T31] usb 1-1: config 5 has no interface number 1 [ 93.788225][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:00:03:55:d5:be [ 93.792768][ T31] usb 1-1: config 5 has no interface number 2 [ 93.792801][ T31] usb 1-1: config 5 interface 113 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 93.805783][ T10] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 93.809696][ T31] usb 1-1: config 5 interface 113 altsetting 2 endpoint 0xE has invalid maxpacket 2023, setting to 64 [ 93.823932][ T10] usb 3-1: USB disconnect, device number 30 [ 93.827650][ T31] usb 1-1: config 5 interface 113 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 93.853560][ T31] usb 1-1: config 5 interface 113 altsetting 2 endpoint 0x2 has invalid maxpacket 929, setting to 64 [ 93.864540][ T31] usb 1-1: config 5 interface 237 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 93.875337][ T31] usb 1-1: config 5 interface 113 has no altsetting 0 [ 93.882148][ T31] usb 1-1: config 5 interface 32 has no altsetting 0 [ 93.888863][ T31] usb 1-1: config 5 interface 237 has no altsetting 0 [ 93.897615][ T31] usb 1-1: New USB device found, idVendor=103e, idProduct=03e8, bcdDevice=b4.51 [ 93.906792][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.914869][ T338] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 93.922462][ T31] usb 1-1: Product: syz [ 93.926661][ T31] usb 1-1: Manufacturer: syz [ 93.931466][ T31] usb 1-1: SerialNumber: syz [ 93.936814][ T31] usb 1-1: Interface #113 referenced by multiple IADs [ 94.081480][ T338] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.092444][ T338] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.105587][ T338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.112287][ T338] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 94.121374][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.129960][ T338] usb 4-1: config 0 descriptor?? [ 94.147458][ T31] ftdi_sio 1-1:5.113: FTDI USB Serial Device converter detected [ 94.155458][ T31] ftdi_sio ttyUSB0: unknown device type: 0xb451 [ 94.163380][ T31] ftdi_sio 1-1:5.32: FTDI USB Serial Device converter detected [ 94.171363][ T31] ftdi_sio ttyUSB1: unknown device type: 0xb451 [ 94.178696][ T31] ftdi_sio 1-1:5.237: FTDI USB Serial Device converter detected [ 94.187375][ T31] ftdi_sio ttyUSB2: unknown device type: 0xb451 [ 94.196307][ T31] usb 1-1: USB disconnect, device number 40 [ 94.208223][ T31] ftdi_sio 1-1:5.113: device disconnected [ 94.214607][ T31] ftdi_sio 1-1:5.32: device disconnected [ 94.221098][ T31] ftdi_sio 1-1:5.237: device disconnected [ 94.383591][ T338] usbhid 4-1:0.0: can't add hid device: -71 [ 94.389688][ T338] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 94.402051][ T338] usb 4-1: USB disconnect, device number 23 [ 95.130474][ T317] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 95.250539][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 95.280424][ T317] usb 4-1: Using ep0 maxpacket: 8 [ 95.286723][ T317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.297303][ T317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.306214][ T317] usb 4-1: config 1 has no interface number 0 [ 95.312381][ T317] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 95.323026][ T317] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 95.332201][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.340260][ T317] usb 4-1: Product: syz [ 95.344476][ T317] usb 4-1: Manufacturer: syz [ 95.349090][ T317] usb 4-1: SerialNumber: syz [ 95.362003][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.401607][ T10] usb 3-1: config 0 has no interfaces? [ 95.408392][ T10] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 95.417452][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.425526][ T10] usb 3-1: SerialNumber: syz [ 95.431093][ T10] usb 3-1: config 0 descriptor?? [ 95.556413][ T10] usb 4-1: USB disconnect, device number 24 [ 95.637470][ T317] usb 3-1: USB disconnect, device number 31 [ 96.097340][ T317] rust_binder: 2565: undelivered TRANSACTION_COMPLETE [ 96.104261][ T317] rust_binder: 2565: undelivered TRANSACTION_COMPLETE [ 96.129642][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.137582][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.145701][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.155017][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.164513][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.172511][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.180648][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.188493][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.196750][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.204942][ T2575] netlink: 'syz.4.593': attribute type 27 has an invalid length. [ 96.243664][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.251695][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.259701][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.267870][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.277314][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.285469][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.299166][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.307144][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.315059][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.323029][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.330983][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.338836][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.347005][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.354961][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.363092][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.371024][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.379031][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.386994][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.394987][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.402911][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.410842][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.418771][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.427162][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.435732][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.444018][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.452167][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.460549][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.468558][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.476501][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.484852][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.493005][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.501681][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.509579][ T2591] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc05 [ 96.908920][ T2616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 97.087222][ T36] audit: type=1400 audit(1794040373.488:15516): avc: denied { mounton } for pid=2621 comm="syz.0.608" path="/49/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.088786][ T2622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 97.129595][ T36] audit: type=1400 audit(1794040373.528:15517): avc: denied { watch } for pid=2625 comm="syz.0.609" path="/50/control" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.370407][ T317] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 97.382515][ T2644] rust_binder: 2643:2644 failed to claim space for a BINDER_TYPE_PTR (offset: 96, limit: 96, size: 1) [ 97.394628][ T2644] rust_binder: 2643:2644 error while translating object: EINVAL [ 97.402825][ T2644] rust_binder: 2643:2644 transaction call to 2643:0 failed EINVAL, code 0 size 72-24 line thread.rs:926 [ 97.414785][ T10] rust_binder: 2643: undelivered TRANSACTION_ERROR: 29201 [ 97.432218][ T36] audit: type=1400 audit(1794040373.838:15518): avc: denied { write } for pid=2646 comm="syz.2.616" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 97.455712][ T36] audit: type=1400 audit(1794040373.838:15519): avc: denied { write } for pid=2646 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.551756][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.568592][ T317] usb 1-1: not running at top speed; connect to a high speed hub [ 97.586640][ T317] usb 1-1: string descriptor 0 read error: -22 [ 97.599763][ T317] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 97.619143][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.640584][ T317] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 97.840686][ T317] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.904243][ T317] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 97.906254][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.929435][ T317] usb 1-1: USB disconnect, device number 41 [ 98.072512][ T2653] cgroup: fork rejected by pids controller in /syz2 [ 98.370406][ T36] audit: type=1400 audit(1794040374.768:15520): avc: denied { accept } for pid=2702 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 98.566931][ T2709] netlink: 140 bytes leftover after parsing attributes in process `syz.3.627'. [ 98.810433][ T338] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 98.973877][ T338] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.983092][ T338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 98.995245][ T338] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 99.009447][ T338] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 99.020572][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.029278][ T338] usb 4-1: Product: syz [ 99.033836][ T338] usb 4-1: Manufacturer: syz [ 99.038509][ T338] usb 4-1: SerialNumber: syz [ 99.258766][ T338] usb 4-1: unit 4: unexpected type 0x03 [ 99.270714][ T338] usb 4-1: unit 0 not found! [ 99.275723][ T338] usb 4-1: unit 8 not found! [ 99.290427][ T618] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 99.295664][ T338] usb 4-1: USB disconnect, device number 25 [ 99.470933][ T618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.494148][ T618] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 99.510415][ T618] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.553870][ T618] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 99.570417][ T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.578460][ T618] usb 3-1: Product: syz [ 99.600424][ T618] usb 3-1: Manufacturer: syz [ 99.605141][ T618] usb 3-1: SerialNumber: syz [ 99.619450][ T2712] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 99.680416][ T317] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 99.834225][ T317] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.852089][ T317] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 99.866018][ T36] audit: type=1400 audit(1794040376.268:15521): avc: denied { ioctl } for pid=2723 comm="syz.3.633" path="socket:[31962]" dev="sockfs" ino=31962 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.880398][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.905514][ T2726] Invalid ELF header type: 3 != 1 [ 99.910805][ T36] audit: type=1400 audit(1794040376.308:15522): avc: denied { module_load } for pid=2725 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.916933][ T317] usb 1-1: Product: syz [ 99.931740][ T2726] Invalid ELF header type: 2 != 1 [ 99.942529][ T2726] Invalid ELF header type: 3 != 1 [ 99.950397][ T317] usb 1-1: Manufacturer: syz [ 99.955085][ T317] usb 1-1: SerialNumber: syz [ 99.962652][ T36] audit: type=1400 audit(1794040376.368:15523): avc: denied { bind } for pid=2727 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.996889][ T36] audit: type=1400 audit(1794040376.388:15524): avc: denied { name_bind } for pid=2727 comm="syz.3.635" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.019856][ T36] audit: type=1400 audit(1794040376.388:15525): avc: denied { node_bind } for pid=2727 comm="syz.3.635" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 100.048741][ T364] rust_binder: 2738: undelivered freeze notification, 0000000000000001 [ 100.138505][ T2742] kvm: kvm [2741]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 100.147517][ T2742] kvm: kvm [2741]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 100.282231][ T2743] FAULT_INJECTION: forcing a failure. [ 100.282231][ T2743] name failslab, interval 1, probability 0, space 0, times 0 [ 100.518193][ T2743] CPU: 0 UID: 0 PID: 2743 Comm: syz.2.628 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 100.518216][ T2743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 100.518225][ T2743] Call Trace: [ 100.518230][ T2743] [ 100.518236][ T2743] __dump_stack+0x21/0x30 [ 100.518251][ T2743] dump_stack_lvl+0x140/0x1c0 [ 100.518263][ T2743] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.518275][ T2743] dump_stack+0x19/0x20 [ 100.518284][ T2743] should_fail_ex+0x3c2/0x510 [ 100.518296][ T2743] should_failslab+0xac/0x100 [ 100.518308][ T2743] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 100.518325][ T2743] ? __x64_sys_mkdirat+0x8b/0xa0 [ 100.518346][ T2743] ? do_syscall_64+0x57/0xf0 [ 100.518364][ T2743] ? sidtab_sid2str_get+0x135/0x360 [ 100.518388][ T2743] kmemdup_noprof+0x31/0x80 [ 100.518404][ T2743] sidtab_sid2str_get+0x135/0x360 [ 100.518424][ T2743] security_sid_to_context_core+0x30d/0x5d0 [ 100.518437][ T2743] security_sid_to_context_force+0x31/0x40 [ 100.518456][ T2743] selinux_inode_init_security+0x659/0x950 [ 100.518471][ T2743] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 100.518485][ T2743] ? security_inode_init_security+0x11c/0x600 [ 100.518499][ T2743] ? __cfi_shmem_initxattrs+0x10/0x10 [ 100.518512][ T2743] ? __cfi_shmem_initxattrs+0x10/0x10 [ 100.518525][ T2743] security_inode_init_security+0x1a8/0x600 [ 100.518538][ T2743] ? __cfi_security_inode_init_security+0x10/0x10 [ 100.518551][ T2743] ? set_cached_acl+0xe1/0x1a0 [ 100.518564][ T2743] ? simple_acl_create+0x190/0x1c0 [ 100.518578][ T2743] shmem_mknod+0xd5/0x200 [ 100.518589][ T2743] shmem_mkdir+0x3b/0x80 [ 100.518601][ T2743] vfs_mkdir+0x58e/0x810 [ 100.518613][ T2743] do_mkdirat+0x240/0x530 [ 100.518625][ T2743] ? __cfi_do_mkdirat+0x10/0x10 [ 100.518637][ T2743] ? __kasan_check_write+0x18/0x20 [ 100.518654][ T2743] ? getname_flags+0x203/0x6b0 [ 100.518669][ T2743] ? __kasan_check_write+0x18/0x20 [ 100.518690][ T2743] __x64_sys_mkdirat+0x8b/0xa0 [ 100.518709][ T2743] x64_sys_call+0x2ba8/0x2ee0 [ 100.518727][ T2743] do_syscall_64+0x57/0xf0 [ 100.518745][ T2743] ? clear_bhb_loop+0x50/0xa0 [ 100.518769][ T2743] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.518786][ T2743] RIP: 0033:0x7f77d319fb19 [ 100.518797][ T2743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.518807][ T2743] RSP: 002b:00007f77d3ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.518819][ T2743] RAX: ffffffffffffffda RBX: 00007f77d3426090 RCX: 00007f77d319fb19 [ 100.518828][ T2743] RDX: 00000000000001ff RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 100.518835][ T2743] RBP: 00007f77d3237b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.518842][ T2743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.518848][ T2743] R13: 00007f77d3426128 R14: 00007f77d3426090 R15: 00007ffe09de3558 [ 100.518856][ T2743] [ 101.084964][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.094398][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.857787][ T2793] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 101.923509][ T2806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.942001][ T2806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.960835][ T2806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.969452][ T2806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.069719][ T2813] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=8 [ 102.078679][ T2813] rust_binder: 2812:2813 error while translating object: EINVAL [ 102.087097][ T2813] rust_binder: 2812:2813 transaction call to 2812:0 failed EINVAL, code 0 size 112-24 line thread.rs:955 [ 102.099541][ T338] rust_binder: 2812: undelivered TRANSACTION_ERROR: 29201 [ 102.183991][ T2817] FAULT_INJECTION: forcing a failure. [ 102.183991][ T2817] name failslab, interval 1, probability 0, space 0, times 0 [ 102.199823][ T2817] CPU: 1 UID: 0 PID: 2817 Comm: syz.3.659 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 102.199858][ T2817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 102.199872][ T2817] Call Trace: [ 102.199878][ T2817] [ 102.199886][ T2817] __dump_stack+0x21/0x30 [ 102.199911][ T2817] dump_stack_lvl+0x140/0x1c0 [ 102.199930][ T2817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.199950][ T2817] dump_stack+0x19/0x20 [ 102.199966][ T2817] should_fail_ex+0x3c2/0x510 [ 102.199986][ T2817] should_failslab+0xac/0x100 [ 102.200007][ T2817] __kmalloc_cache_noprof+0x41/0x470 [ 102.200033][ T2817] ? allocate_cgrp_cset_links+0xe6/0x430 [ 102.200061][ T2817] ? __kasan_kmalloc+0x96/0xb0 [ 102.200080][ T2817] allocate_cgrp_cset_links+0xe6/0x430 [ 102.200106][ T2817] find_css_set+0x999/0x1b50 [ 102.200134][ T2817] ? cgroup_migrate_prepare_dst+0xa20/0xa20 [ 102.200161][ T2817] ? _parse_integer_limit+0x195/0x1e0 [ 102.200188][ T2817] ? __kasan_check_write+0x18/0x20 [ 102.200213][ T2817] ? _raw_spin_lock_irq+0x93/0x120 [ 102.200233][ T2817] cgroup_migrate_prepare_dst+0xc8/0xa20 [ 102.200260][ T2817] cgroup_attach_task+0x32c/0x630 [ 102.200287][ T2817] ? __cfi_cgroup_attach_task+0x10/0x10 [ 102.200314][ T2817] ? __cfi_cgroup_procs_write_start+0x10/0x10 [ 102.200334][ T2817] __cgroup1_procs_write+0x300/0x510 [ 102.200355][ T2817] ? cgroup_pidlist_destroy_work_fn+0x230/0x230 [ 102.200376][ T2817] ? __kasan_check_write+0x18/0x20 [ 102.200400][ T2817] ? _copy_from_iter+0x215/0x1520 [ 102.200421][ T2817] cgroup1_procs_write+0x2e/0x40 [ 102.200439][ T2817] ? __cfi_cgroup1_procs_write+0x10/0x10 [ 102.200457][ T2817] cgroup_file_write+0x2a9/0x5a0 [ 102.200480][ T2817] ? __cfi_cgroup_file_write+0x10/0x10 [ 102.200501][ T2817] ? mutex_lock+0x97/0x1d0 [ 102.200523][ T2817] ? __cfi_mutex_lock+0x10/0x10 [ 102.200546][ T2817] ? __kmalloc_noprof+0x261/0x510 [ 102.200580][ T2817] ? __kasan_check_write+0x18/0x20 [ 102.200607][ T2817] ? __cfi_cgroup_file_write+0x10/0x10 [ 102.200630][ T2817] kernfs_fop_write_iter+0x319/0x510 [ 102.200656][ T2817] vfs_write+0x765/0xfd0 [ 102.200685][ T2817] ? __cfi_vfs_write+0x10/0x10 [ 102.200712][ T2817] ? __cfi_mutex_lock+0x10/0x10 [ 102.200738][ T2817] ksys_write+0x145/0x260 [ 102.200754][ T2817] ? xfd_validate_state+0x68/0x140 [ 102.200772][ T2817] ? __cfi_ksys_write+0x10/0x10 [ 102.200788][ T2817] ? __kasan_check_write+0x18/0x20 [ 102.200809][ T2817] ? fpregs_restore_userregs+0x11c/0x260 [ 102.200833][ T2817] __x64_sys_write+0x7f/0x90 [ 102.200850][ T2817] x64_sys_call+0x271c/0x2ee0 [ 102.200869][ T2817] do_syscall_64+0x57/0xf0 [ 102.200888][ T2817] ? clear_bhb_loop+0x50/0xa0 [ 102.200913][ T2817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.200936][ T2817] RIP: 0033:0x7fbe7ff9fb19 [ 102.200953][ T2817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.200967][ T2817] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.200994][ T2817] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 102.201009][ T2817] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 102.201022][ T2817] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 102.201035][ T2817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.201048][ T2817] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 102.201064][ T2817] [ 102.553768][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 102.553785][ T36] audit: type=1400 audit(1794040378.957:15529): avc: denied { name_bind } for pid=2818 comm="syz.0.660" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 103.354058][ T2839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.374543][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.384448][ T2839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.395135][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.403312][ T2847] FAULT_INJECTION: forcing a failure. [ 103.403312][ T2847] name failslab, interval 1, probability 0, space 0, times 0 [ 103.405341][ T618] usb 3-1: MIDIStreaming interface descriptor not found [ 103.416429][ T2847] CPU: 1 UID: 0 PID: 2847 Comm: syz.3.669 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 103.416458][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 103.416470][ T2847] Call Trace: [ 103.416476][ T2847] [ 103.416484][ T2847] __dump_stack+0x21/0x30 [ 103.416508][ T2847] dump_stack_lvl+0x140/0x1c0 [ 103.416526][ T2847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.416543][ T2847] ? avc_has_perm_noaudit+0x289/0x360 [ 103.416565][ T2847] dump_stack+0x19/0x20 [ 103.416581][ T2847] should_fail_ex+0x3c2/0x510 [ 103.416599][ T2847] should_failslab+0xac/0x100 [ 103.416617][ T2847] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 103.416644][ T2847] ? sock_alloc_inode+0x48/0x150 [ 103.416663][ T2847] sock_alloc_inode+0x48/0x150 [ 103.416681][ T2847] ? __cfi_sock_alloc_inode+0x10/0x10 [ 103.416700][ T2847] alloc_inode+0x7a/0x270 [ 103.416719][ T2847] ? bpf_lsm_socket_create+0xd/0x20 [ 103.416745][ T2847] new_inode_pseudo+0x19/0x40 [ 103.416763][ T2847] __sock_create+0x130/0x810 [ 103.416783][ T2847] __sys_socket+0xe1/0x1c0 [ 103.416802][ T2847] __x64_sys_socket+0x7e/0x90 [ 103.416821][ T2847] x64_sys_call+0x2608/0x2ee0 [ 103.416839][ T2847] do_syscall_64+0x57/0xf0 [ 103.416857][ T2847] ? clear_bhb_loop+0x50/0xa0 [ 103.416880][ T2847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.416902][ T2847] RIP: 0033:0x7fbe7ff9fb19 [ 103.416919][ T2847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.416933][ T2847] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.416952][ T2847] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 103.416973][ T2847] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 103.416986][ T2847] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.416998][ T2847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.417010][ T2847] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 103.417026][ T2847] [ 103.417054][ T2847] socket: no more sockets [ 103.429302][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.504489][ T2848] rust_binder: Write failure EFAULT in pid:172 [ 103.545750][ T618] usb 3-1: USB disconnect, device number 32 [ 103.547119][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.638297][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.641813][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.692710][ T36] audit: type=1400 audit(1794040380.106:15530): avc: denied { map } for pid=2846 comm="syz.3.669" path="/55/proc/172/task/173/fail-nth" dev="proc" ino=32807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 103.729138][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.737440][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.746569][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.755223][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.764168][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.298262][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.307316][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.904940][ T317] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.937726][ T317] usb 1-1: USB disconnect, device number 42 [ 105.007391][ T2858] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.017846][ T2858] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.029452][ T2858] bridge_slave_0: entered allmulticast mode [ 105.036021][ T2858] bridge_slave_0: entered promiscuous mode [ 105.043162][ T2858] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.050459][ T2858] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.057554][ T2858] bridge_slave_1: entered allmulticast mode [ 105.064170][ T2858] bridge_slave_1: entered promiscuous mode [ 105.144253][ T1991] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.151383][ T1991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.164567][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.171657][ T1984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.202534][ T2858] veth0_vlan: entered promiscuous mode [ 105.217480][ T2858] veth1_macvtap: entered promiscuous mode [ 105.319004][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.328407][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.339279][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.348943][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.357895][ T338] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 105.532016][ T31] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 105.704411][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.716289][ T31] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 105.726087][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.734464][ T31] usb 6-1: Product: syz [ 105.738937][ T31] usb 6-1: Manufacturer: syz [ 105.743866][ T31] usb 6-1: SerialNumber: syz [ 105.751734][ T31] usb 6-1: config 0 descriptor?? [ 105.978864][ T2867] kernel profiling enabled (shift: 9) [ 105.985868][ T2867] FAULT_INJECTION: forcing a failure. [ 105.985868][ T2867] name failslab, interval 1, probability 0, space 0, times 0 [ 105.998746][ T2867] CPU: 1 UID: 0 PID: 2867 Comm: syz.5.674 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 105.998776][ T2867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 105.998789][ T2867] Call Trace: [ 105.998795][ T2867] [ 105.998802][ T2867] __dump_stack+0x21/0x30 [ 105.998826][ T2867] dump_stack_lvl+0x140/0x1c0 [ 105.998848][ T2867] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.998866][ T2867] ? check_stack_object+0x81/0x150 [ 105.998905][ T2867] dump_stack+0x19/0x20 [ 105.998922][ T2867] should_fail_ex+0x3c2/0x510 [ 105.998942][ T2867] should_failslab+0xac/0x100 [ 105.998962][ T2867] __kmalloc_cache_noprof+0x41/0x470 [ 105.998990][ T2867] ? memdup_user+0xb1/0x170 [ 105.999013][ T2867] ? __se_sys_mount+0x15f/0x480 [ 105.999031][ T2867] __se_sys_mount+0x15f/0x480 [ 105.999048][ T2867] ? __x64_sys_mount+0xf0/0xf0 [ 105.999065][ T2867] ? __kasan_check_write+0x18/0x20 [ 105.999090][ T2867] ? fpregs_restore_userregs+0x11c/0x260 [ 105.999115][ T2867] __x64_sys_mount+0xc3/0xf0 [ 105.999132][ T2867] x64_sys_call+0x2021/0x2ee0 [ 105.999152][ T2867] do_syscall_64+0x57/0xf0 [ 105.999171][ T2867] ? clear_bhb_loop+0x50/0xa0 [ 105.999201][ T2867] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.999226][ T2867] RIP: 0033:0x7fe6e519fb19 [ 105.999243][ T2867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.999260][ T2867] RSP: 002b:00007fe6e3bf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.999280][ T2867] RAX: ffffffffffffffda RBX: 00007fe6e5425fa0 RCX: 00007fe6e519fb19 [ 105.999293][ T2867] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000000000000000 [ 105.999307][ T2867] RBP: 00007fe6e5237b70 R08: 0000200000000540 R09: 0000000000000000 [ 105.999319][ T2867] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.999331][ T2867] R13: 00007fe6e5426038 R14: 00007fe6e5425fa0 R15: 00007fffed6a57e8 [ 105.999347][ T2867] [ 106.208922][ T342] usb 6-1: USB disconnect, device number 2 [ 106.764302][ T2876] netlink: 152 bytes leftover after parsing attributes in process `syz.5.680'. [ 106.963834][ T2884] ./dev/sda1: Can't lookup blockdev [ 107.314783][ T317] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 107.472972][ T317] usb 6-1: Invalid ep0 maxpacket: 64 [ 107.608785][ T317] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 107.766782][ T317] usb 6-1: Invalid ep0 maxpacket: 64 [ 107.772333][ T317] usb usb6-port1: attempt power cycle [ 108.147953][ T317] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 108.175286][ T317] usb 6-1: Invalid ep0 maxpacket: 64 [ 108.327695][ T317] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 108.362791][ T317] usb 6-1: Invalid ep0 maxpacket: 64 [ 108.368350][ T317] usb usb6-port1: unable to enumerate USB device [ 108.631105][ T36] audit: type=1400 audit(1794040384.874:15531): avc: denied { cmd } for pid=2900 comm="iou-wrk-2901" path="socket:[33134]" dev="sockfs" ino=33134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.778563][ T2909] fuse: Bad value for 'user_id' [ 108.783521][ T2909] fuse: Bad value for 'user_id' [ 108.796642][ T2908] FAULT_INJECTION: forcing a failure. [ 108.796642][ T2908] name failslab, interval 1, probability 0, space 0, times 0 [ 108.809389][ T2908] CPU: 1 UID: 0 PID: 2908 Comm: syz.3.690 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 108.809423][ T2908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.809443][ T2908] Call Trace: [ 108.809450][ T2908] [ 108.809458][ T2908] __dump_stack+0x21/0x30 [ 108.809482][ T2908] dump_stack_lvl+0x140/0x1c0 [ 108.809501][ T2908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.809520][ T2908] ? do_futex+0x32a/0x510 [ 108.809621][ T2908] dump_stack+0x19/0x20 [ 108.809638][ T2908] should_fail_ex+0x3c2/0x510 [ 108.809658][ T2908] should_failslab+0xac/0x100 [ 108.809679][ T2908] kmem_cache_alloc_noprof+0x42/0x410 [ 108.809706][ T2908] ? __se_sys_getcwd+0x6c/0x440 [ 108.809733][ T2908] __se_sys_getcwd+0x6c/0x440 [ 108.809758][ T2908] ? __kasan_check_write+0x18/0x20 [ 108.809782][ T2908] ? fpregs_restore_userregs+0x11c/0x260 [ 108.809807][ T2908] __x64_sys_getcwd+0x5f/0x80 [ 108.809831][ T2908] x64_sys_call+0x1c71/0x2ee0 [ 108.809851][ T2908] do_syscall_64+0x57/0xf0 [ 108.809870][ T2908] ? clear_bhb_loop+0x50/0xa0 [ 108.809895][ T2908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.809920][ T2908] RIP: 0033:0x7fbe7ff9fb19 [ 108.809937][ T2908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.809953][ T2908] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 108.809974][ T2908] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 108.809993][ T2908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.810005][ T2908] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.810019][ T2908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.810030][ T2908] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 108.810047][ T2908] [ 109.332158][ T36] audit: type=1400 audit(1794040385.533:15532): avc: denied { remove_name } for pid=2916 comm="syz.3.692" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.367076][ T36] audit: type=1400 audit(1794040385.561:15533): avc: denied { unlink } for pid=2916 comm="syz.3.692" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.391136][ T36] audit: type=1400 audit(1794040385.561:15534): avc: denied { rename } for pid=2916 comm="syz.3.692" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.487763][ T2920] syzkaller1: entered promiscuous mode [ 109.493861][ T2920] syzkaller1: entered allmulticast mode [ 109.627670][ T2926] SELinux: policydb string SE Li does not match my string SE Linux [ 109.635781][ T2926] SELinux: failed to load policy [ 109.657712][ T36] audit: type=1400 audit(1794040385.843:15535): avc: denied { create } for pid=2927 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.699670][ T2934] tipc: Started in network mode [ 109.704780][ T2934] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 109.712294][ T2934] tipc: Enabled bearer , priority 10 [ 110.448844][ T2951] SELinux: policydb string SE Li does not match my string SE Linux [ 110.467729][ T2951] SELinux: failed to load policy [ 110.586611][ T2956] /dev/nbd3: Can't lookup blockdev [ 110.906085][ T10] tipc: Node number set to 11709098 [ 111.604785][ T2973] SELinux: policydb string SE Linu does not match my string SE Linux [ 111.613153][ T2973] SELinux: failed to load policy [ 111.624888][ T338] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 111.796570][ T338] usb 6-1: Using ep0 maxpacket: 8 [ 111.802917][ T338] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 111.811655][ T338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.822792][ T338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.832719][ T338] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.845824][ T338] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 111.855065][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.871872][ T338] usb 6-1: config 0 descriptor?? [ 112.667348][ T317] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 112.747697][ T338] sony 0003:1345:3008.000A: can't set operational mode: step 1 [ 112.755354][ T338] sony 0003:1345:3008.000A: Failed to set controller into operational mode [ 112.775587][ T338] sony 0003:1345:3008.000A: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 112.796394][ T338] sony 0003:1345:3008.000A: failed to claim input [ 112.809143][ T338] usb 6-1: USB disconnect, device number 7 [ 112.830133][ T317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.838260][ T317] usb 4-1: not running at top speed; connect to a high speed hub [ 112.848715][ T317] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 112.860830][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.869115][ T317] usb 4-1: Product: syz [ 112.874236][ T317] usb 4-1: Manufacturer: syz [ 112.878842][ T317] usb 4-1: SerialNumber: syz [ 113.110201][ T317] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 113.126958][ T317] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 113.138330][ T317] usb 4-1: USB disconnect, device number 27 [ 113.148436][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.498155][ T3005] SELinux: policydb string SE Linu does not match my string SE Linux [ 113.506385][ T3005] SELinux: failed to load policy [ 113.522987][ T3007] validate_nla: 55 callbacks suppressed [ 113.523004][ T3007] netlink: 'syz.5.723': attribute type 29 has an invalid length. [ 113.830295][ T3023] netlink: 92 bytes leftover after parsing attributes in process `syz.5.728'. [ 113.840104][ T3023] netlink: 140 bytes leftover after parsing attributes in process `syz.5.728'. [ 113.931314][ T3030] SELinux: policydb string SE Linu does not match my string SE Linux [ 113.939653][ T3030] SELinux: failed to load policy [ 114.391372][ T3064] SELinux: policydb version 64 does not match my version range 15-33 [ 114.401280][ T3064] SELinux: failed to load policy [ 114.620795][ T3077] binder: Unknown parameter 'subj_role' [ 114.622591][ T36] audit: type=1400 audit(1794040390.461:15536): avc: denied { mounton } for pid=3076 comm="syz.3.745" path="/84/proc/263/task/264/fail-nth" dev="proc" ino=34673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.626909][ T3077] FAULT_INJECTION: forcing a failure. [ 114.626909][ T3077] name failslab, interval 1, probability 0, space 0, times 0 [ 114.663846][ T3077] CPU: 0 UID: 0 PID: 3077 Comm: syz.3.745 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 114.663877][ T3077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 114.663890][ T3077] Call Trace: [ 114.663898][ T3077] [ 114.663905][ T3077] __dump_stack+0x21/0x30 [ 114.663930][ T3077] dump_stack_lvl+0x140/0x1c0 [ 114.663948][ T3077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.663966][ T3077] ? __kmalloc_node_noprof+0x252/0x500 [ 114.663994][ T3077] ? __kvmalloc_node_noprof+0x128/0x300 [ 114.664021][ T3077] dump_stack+0x19/0x20 [ 114.664038][ T3077] should_fail_ex+0x3c2/0x510 [ 114.664057][ T3077] ? shmem_initxattrs+0x2a8/0x530 [ 114.664079][ T3077] should_failslab+0xac/0x100 [ 114.664100][ T3077] __kmalloc_noprof+0x69/0x510 [ 114.664125][ T3077] ? shmem_initxattrs+0x2a8/0x530 [ 114.664148][ T3077] ? simple_xattr_alloc+0xa2/0x140 [ 114.664168][ T3077] shmem_initxattrs+0x2a8/0x530 [ 114.664191][ T3077] security_inode_init_security+0x431/0x600 [ 114.664216][ T3077] ? __cfi_shmem_initxattrs+0x10/0x10 [ 114.664239][ T3077] ? __cfi_security_inode_init_security+0x10/0x10 [ 114.664262][ T3077] ? set_cached_acl+0xe1/0x1a0 [ 114.664287][ T3077] ? simple_acl_create+0x190/0x1c0 [ 114.664313][ T3077] shmem_mknod+0xd5/0x200 [ 114.664343][ T3077] shmem_mkdir+0x3b/0x80 [ 114.664366][ T3077] vfs_mkdir+0x58e/0x810 [ 114.664389][ T3077] do_mkdirat+0x240/0x530 [ 114.664412][ T3077] ? __cfi_do_mkdirat+0x10/0x10 [ 114.664435][ T3077] ? __kasan_check_write+0x18/0x20 [ 114.664459][ T3077] ? getname_flags+0x203/0x6b0 [ 114.664477][ T3077] ? __kasan_check_write+0x18/0x20 [ 114.664503][ T3077] __x64_sys_mkdirat+0x8b/0xa0 [ 114.664526][ T3077] x64_sys_call+0x2ba8/0x2ee0 [ 114.664545][ T3077] do_syscall_64+0x57/0xf0 [ 114.664564][ T3077] ? clear_bhb_loop+0x50/0xa0 [ 114.664589][ T3077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.664613][ T3077] RIP: 0033:0x7fbe7ff9fb19 [ 114.664630][ T3077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.664646][ T3077] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.664667][ T3077] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 114.664682][ T3077] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 114.664696][ T3077] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.664709][ T3077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.664719][ T3077] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 114.664735][ T3077] [ 114.984717][ T618] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.009625][ T36] audit: type=1400 audit(1794040390.822:15537): avc: denied { append } for pid=3084 comm="syz.4.748" name="file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.090145][ T3088] netlink: 'syz.4.748': attribute type 16 has an invalid length. [ 115.098191][ T3088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.748'. [ 115.189787][ T618] usb 6-1: Using ep0 maxpacket: 32 [ 115.197460][ T618] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.205715][ T618] usb 6-1: config 0 has no interface number 0 [ 115.212004][ T618] usb 6-1: config 0 interface 184 has no altsetting 0 [ 115.220259][ T618] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.243723][ T618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.254541][ T618] usb 6-1: Product: syz [ 115.258774][ T618] usb 6-1: Manufacturer: syz [ 115.268544][ T618] usb 6-1: SerialNumber: syz [ 115.274032][ T618] usb 6-1: config 0 descriptor?? [ 115.279921][ T618] smsc75xx v1.0.0 [ 115.280162][ T3093] SELinux: policydb version 64 does not match my version range 15-33 [ 115.299983][ T3093] SELinux: failed to load policy [ 115.539883][ T3103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 115.562790][ T36] audit: type=1326 audit(1794040391.332:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.4.754" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106df9fb19 code=0x7ffc0000 [ 115.600883][ T36] audit: type=1326 audit(1794040391.332:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.4.754" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f106df9fb19 code=0x7ffc0000 [ 115.629076][ T36] audit: type=1326 audit(1794040391.332:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.4.754" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106df9fb19 code=0x7ffc0000 [ 115.654742][ T36] audit: type=1326 audit(1794040391.359:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.4.754" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f106df9fb19 code=0x7ffc0000 [ 115.976655][ T3120] SELinux: policydb version 64 does not match my version range 15-33 [ 115.985236][ T3120] SELinux: failed to load policy [ 116.118791][ T338] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 116.291628][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 116.297906][ T338] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 116.306301][ T338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.316614][ T338] usb 4-1: config 0 has no interface number 0 [ 116.322709][ T338] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 116.332860][ T338] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.343172][ T338] usb 4-1: config 0 interface 98 has no altsetting 0 [ 116.351661][ T338] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 116.363430][ T36] audit: type=1400 audit(1794040392.081:15542): avc: denied { read } for pid=3071 comm="syz.5.743" path="socket:[35257]" dev="sockfs" ino=35257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.363611][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.396926][ T338] usb 4-1: Product: syz [ 116.401427][ T338] usb 4-1: Manufacturer: syz [ 116.406041][ T338] usb 4-1: SerialNumber: syz [ 116.415020][ T338] usb 4-1: config 0 descriptor?? [ 116.420311][ T3117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.427762][ T3117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.613479][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 116.624380][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.637662][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 116.648679][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 116.658335][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 116.661039][ T3117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.668763][ T618] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 116.685299][ T618] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 116.691713][ T3117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.695206][ T618] usb 6-1: USB disconnect, device number 8 [ 117.146244][ T338] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.156711][ T338] asix 4-1:0.98: probe with driver asix failed with error -71 [ 117.166462][ T338] usb 4-1: USB disconnect, device number 28 [ 118.112656][ T36] audit: type=1400 audit(1794040393.690:15543): avc: denied { remount } for pid=3160 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.133040][ T3161] overlayfs: overlapping lowerdir path [ 118.165571][ T36] audit: type=1400 audit(1794040393.746:15544): avc: denied { ioctl } for pid=3163 comm="syz.5.764" path="socket:[35991]" dev="sockfs" ino=35991 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.134039][ T3169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=3169 comm=syz.5.766 [ 119.183735][ T3173] SELinux: failed to load policy [ 119.216199][ T3176] FAULT_INJECTION: forcing a failure. [ 119.216199][ T3176] name failslab, interval 1, probability 0, space 0, times 0 [ 119.228965][ T3176] CPU: 1 UID: 0 PID: 3176 Comm: syz.5.769 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 119.229003][ T3176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 119.229015][ T3176] Call Trace: [ 119.229023][ T3176] [ 119.229029][ T3176] __dump_stack+0x21/0x30 [ 119.229052][ T3176] dump_stack_lvl+0x140/0x1c0 [ 119.229069][ T3176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.229089][ T3176] dump_stack+0x19/0x20 [ 119.229104][ T3176] should_fail_ex+0x3c2/0x510 [ 119.229123][ T3176] should_failslab+0xac/0x100 [ 119.229142][ T3176] __kmalloc_cache_node_noprof+0x46/0x430 [ 119.229167][ T3176] ? __get_vm_area_node+0x150/0x390 [ 119.229191][ T3176] __get_vm_area_node+0x150/0x390 [ 119.229212][ T3176] __vmalloc_node_range_noprof+0x340/0x1300 [ 119.229235][ T3176] ? sel_write_load+0x1ce/0x600 [ 119.229253][ T3176] ? kernel_text_address+0xa9/0xe0 [ 119.229279][ T3176] ? unwind_get_return_address+0x51/0x90 [ 119.229304][ T3176] ? _parse_integer_limit+0x195/0x1e0 [ 119.229328][ T3176] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 119.229351][ T3176] ? avc_has_perm_noaudit+0x26b/0x360 [ 119.229369][ T3176] ? __asan_memcpy+0x5a/0x80 [ 119.229390][ T3176] ? avc_has_perm_noaudit+0x289/0x360 [ 119.229410][ T3176] ? sel_write_load+0x1ce/0x600 [ 119.229426][ T3176] vmalloc_noprof+0x103/0x1d0 [ 119.229448][ T3176] ? sel_write_load+0x1ce/0x600 [ 119.229464][ T3176] ? __cfi_avc_has_perm+0x10/0x10 [ 119.229480][ T3176] ? selinux_file_permission+0x318/0xb60 [ 119.229504][ T3176] ? __cfi_vmalloc_noprof+0x10/0x10 [ 119.229526][ T3176] sel_write_load+0x1ce/0x600 [ 119.229543][ T3176] ? __cfi_sel_write_load+0x10/0x10 [ 119.229560][ T3176] ? bpf_lsm_file_permission+0xd/0x20 [ 119.229580][ T3176] ? __cfi_sel_write_load+0x10/0x10 [ 119.229596][ T3176] vfs_write+0x3c1/0xfd0 [ 119.229620][ T3176] ? __cfi_vfs_write+0x10/0x10 [ 119.229642][ T3176] ? __kasan_check_write+0x18/0x20 [ 119.229665][ T3176] ? mutex_lock+0x97/0x1d0 [ 119.229685][ T3176] ? __cfi_mutex_lock+0x10/0x10 [ 119.229709][ T3176] ksys_write+0x145/0x260 [ 119.229724][ T3176] ? __cfi_ksys_write+0x10/0x10 [ 119.229741][ T3176] ? __kasan_check_read+0x15/0x20 [ 119.229765][ T3176] __x64_sys_write+0x7f/0x90 [ 119.229781][ T3176] x64_sys_call+0x271c/0x2ee0 [ 119.229800][ T3176] do_syscall_64+0x57/0xf0 [ 119.229817][ T3176] ? clear_bhb_loop+0x50/0xa0 [ 119.229883][ T3176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.229905][ T3176] RIP: 0033:0x7fe6e519fb19 [ 119.229922][ T3176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.229936][ T3176] RSP: 002b:00007fe6e3bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.229956][ T3176] RAX: ffffffffffffffda RBX: 00007fe6e5425fa0 RCX: 00007fe6e519fb19 [ 119.229977][ T3176] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000005 [ 119.229990][ T3176] RBP: 00007fe6e3bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.230002][ T3176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.230020][ T3176] R13: 00007fe6e5426038 R14: 00007fe6e5425fa0 R15: 00007fffed6a57e8 [ 119.230036][ T3176] [ 119.230045][ T3176] syz.5.769: vmalloc error: size 65212, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 119.545986][ T36] audit: type=1400 audit(1794040395.012:15545): avc: denied { read write } for pid=3177 comm="syz.4.770" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.558923][ T3176] CPU: 1 UID: 0 PID: 3176 Comm: syz.5.769 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 119.558950][ T3176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 119.558962][ T3176] Call Trace: [ 119.558968][ T3176] [ 119.558974][ T3176] __dump_stack+0x21/0x30 [ 119.558996][ T3176] dump_stack_lvl+0x140/0x1c0 [ 119.559012][ T3176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.559029][ T3176] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 119.559050][ T3176] dump_stack+0x19/0x20 [ 119.559065][ T3176] warn_alloc+0x1e7/0x2c0 [ 119.559085][ T3176] ? __kasan_kmalloc+0x28/0xb0 [ 119.559103][ T3176] ? __cfi_warn_alloc+0x10/0x10 [ 119.559121][ T3176] ? __get_vm_area_node+0x150/0x390 [ 119.559143][ T3176] ? __get_vm_area_node+0x382/0x390 [ 119.559164][ T3176] __vmalloc_node_range_noprof+0x365/0x1300 [ 119.559186][ T3176] ? kernel_text_address+0xa9/0xe0 [ 119.559210][ T3176] ? unwind_get_return_address+0x51/0x90 [ 119.559234][ T3176] ? _parse_integer_limit+0x195/0x1e0 [ 119.559257][ T3176] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 119.559279][ T3176] ? avc_has_perm_noaudit+0x26b/0x360 [ 119.559298][ T3176] ? __asan_memcpy+0x5a/0x80 [ 119.559320][ T3176] ? avc_has_perm_noaudit+0x289/0x360 [ 119.559339][ T3176] ? sel_write_load+0x1ce/0x600 [ 119.559355][ T3176] vmalloc_noprof+0x103/0x1d0 [ 119.559376][ T3176] ? sel_write_load+0x1ce/0x600 [ 119.559392][ T3176] ? __cfi_avc_has_perm+0x10/0x10 [ 119.559409][ T3176] ? selinux_file_permission+0x318/0xb60 [ 119.559432][ T3176] ? __cfi_vmalloc_noprof+0x10/0x10 [ 119.559454][ T3176] sel_write_load+0x1ce/0x600 [ 119.559471][ T3176] ? __cfi_sel_write_load+0x10/0x10 [ 119.559488][ T3176] ? bpf_lsm_file_permission+0xd/0x20 [ 119.559507][ T3176] ? __cfi_sel_write_load+0x10/0x10 [ 119.559524][ T3176] vfs_write+0x3c1/0xfd0 [ 119.559547][ T3176] ? __cfi_vfs_write+0x10/0x10 [ 119.559569][ T3176] ? __kasan_check_write+0x18/0x20 [ 119.559590][ T3176] ? mutex_lock+0x97/0x1d0 [ 119.559610][ T3176] ? __cfi_mutex_lock+0x10/0x10 [ 119.559632][ T3176] ksys_write+0x145/0x260 [ 119.559647][ T3176] ? __cfi_ksys_write+0x10/0x10 [ 119.559663][ T3176] ? __kasan_check_read+0x15/0x20 [ 119.559685][ T3176] __x64_sys_write+0x7f/0x90 [ 119.559700][ T3176] x64_sys_call+0x271c/0x2ee0 [ 119.559718][ T3176] do_syscall_64+0x57/0xf0 [ 119.559735][ T3176] ? clear_bhb_loop+0x50/0xa0 [ 119.559756][ T3176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.559778][ T3176] RIP: 0033:0x7fe6e519fb19 [ 119.559795][ T3176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.559809][ T3176] RSP: 002b:00007fe6e3bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.559835][ T3176] RAX: ffffffffffffffda RBX: 00007fe6e5425fa0 RCX: 00007fe6e519fb19 [ 119.559848][ T3176] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000005 [ 119.559861][ T3176] RBP: 00007fe6e3bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.559872][ T3176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.559883][ T3176] R13: 00007fe6e5426038 R14: 00007fe6e5425fa0 R15: 00007fffed6a57e8 [ 119.559899][ T3176] [ 119.559924][ T3176] Mem-Info: [ 119.898630][ T3176] active_anon:7570 inactive_anon:0 isolated_anon:0 [ 119.898630][ T3176] active_file:15418 inactive_file:4745 isolated_file:0 [ 119.898630][ T3176] unevictable:0 dirty:156 writeback:0 [ 119.898630][ T3176] slab_reclaimable:4195 slab_unreclaimable:84436 [ 119.898630][ T3176] mapped:24715 shmem:162 pagetables:884 [ 119.898630][ T3176] sec_pagetables:0 bounce:0 [ 119.898630][ T3176] kernel_misc_reclaimable:0 [ 119.898630][ T3176] free:1510016 free_pcp:2379 free_cma:0 [ 119.943404][ T3176] Node 0 active_anon:30280kB inactive_anon:0kB active_file:61672kB inactive_file:18980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98860kB dirty:624kB writeback:0kB shmem:648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6756kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no [ 119.975083][ T3176] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:4752kB free_cma:0kB [ 120.005295][ T3176] lowmem_reserve[]: 0 3920 3920 [ 120.010171][ T3176] Normal free:3089700kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30280kB inactive_anon:0kB active_file:61672kB inactive_file:18980kB unevictable:0kB writepending:624kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4604kB local_pcp:4252kB free_cma:0kB [ 120.041704][ T3176] lowmem_reserve[]: 0 0 0 [ 120.056601][ T3176] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 120.091601][ T3176] Normal: 809*4kB (UME) 1378*8kB (UME) 1187*16kB (UME) 795*32kB (UME) 531*64kB (UME) 320*128kB (UME) 159*256kB (UME) 94*512kB (UME) 65*1024kB (UME) 23*2048kB (UM) 673*4096kB (UM) = 3092740kB [ 120.112155][ T3176] 20350 total pagecache pages [ 120.112589][ T3180] FAULT_INJECTION: forcing a failure. [ 120.112589][ T3180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.116903][ T3176] 4 pages in swap cache [ 120.116913][ T3176] Free swap = 124324kB [ 120.116921][ T3176] Total swap = 124996kB [ 120.116928][ T3176] 2097051 pages RAM [ 120.116936][ T3176] 0 pages HighMem/MovableOnly [ 120.151186][ T3176] 354592 pages reserved [ 120.155370][ T3176] 0 pages cma reserved [ 120.161131][ T3176] Memory allocations: [ 120.162843][ T3180] CPU: 0 UID: 0 PID: 3180 Comm: syz.3.771 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 120.162871][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 120.162883][ T3180] Call Trace: [ 120.162890][ T3180] [ 120.162897][ T3180] __dump_stack+0x21/0x30 [ 120.162921][ T3180] dump_stack_lvl+0x140/0x1c0 [ 120.162938][ T3180] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.162957][ T3180] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 120.162985][ T3180] dump_stack+0x19/0x20 [ 120.163002][ T3180] should_fail_ex+0x3c2/0x510 [ 120.163020][ T3180] should_fail_alloc_page+0xec/0x110 [ 120.163038][ T3180] __alloc_pages_noprof+0x1c0/0x7e0 [ 120.163061][ T3180] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 120.163084][ T3180] ? folio_add_lru+0x116/0x400 [ 120.163104][ T3180] ? __cfi_folio_add_lru+0x10/0x10 [ 120.163125][ T3180] __folio_alloc_noprof+0x14/0x80 [ 120.163148][ T3180] folio_prealloc+0x46/0x220 [ 120.163167][ T3180] do_pte_missing+0x16af/0x4440 [ 120.163189][ T3180] ? pte_marker_clear+0x1b0/0x1b0 [ 120.163208][ T3180] ? cgroup_rstat_updated+0x144/0x800 [ 120.163233][ T3180] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 120.163258][ T3180] handle_mm_fault+0x1189/0x1ba0 [ 120.163275][ T3180] ? __kasan_check_write+0x18/0x20 [ 120.163300][ T3180] ? __cfi_handle_mm_fault+0x10/0x10 [ 120.163318][ T3180] ? follow_page_pte+0x4b2/0xba0 [ 120.163340][ T3180] ? gup_must_unshare+0x1e0/0x1e0 [ 120.163360][ T3180] ? vma_is_secretmem+0x11/0x50 [ 120.163381][ T3180] ? check_vma_flags+0x36d/0x3a0 [ 120.163401][ T3180] __get_user_pages+0x114b/0x22d0 [ 120.163424][ T3180] ? populate_vma_page_range+0x220/0x220 [ 120.163443][ T3180] ? down_read+0x7f/0xe0 [ 120.163466][ T3180] ? __cfi_down_read+0x10/0x10 [ 120.163488][ T3180] ? __cfi_do_mmap+0x10/0x10 [ 120.163510][ T3180] __mm_populate+0x300/0x440 [ 120.163530][ T3180] vm_mmap_pgoff+0x426/0x4b0 [ 120.163553][ T3180] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 120.163576][ T3180] ? xfd_validate_state+0x68/0x140 [ 120.163594][ T3180] ksys_mmap_pgoff+0xfa/0x1e0 [ 120.163616][ T3180] ? __kasan_check_write+0x18/0x20 [ 120.163640][ T3180] __x64_sys_mmap+0x121/0x140 [ 120.163659][ T3180] x64_sys_call+0x13bf/0x2ee0 [ 120.163677][ T3180] do_syscall_64+0x57/0xf0 [ 120.163695][ T3180] ? clear_bhb_loop+0x50/0xa0 [ 120.163718][ T3180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.163740][ T3180] RIP: 0033:0x7fbe7ff9fb19 [ 120.163766][ T3180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.163782][ T3180] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.163803][ T3180] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 120.163818][ T3180] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 120.163832][ T3180] RBP: 00007fbe80037b70 R08: ffffffffffffffff R09: 00000000cd0b3000 [ 120.163845][ T3180] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 120.163857][ T3180] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 120.163874][ T3180] [ 120.479265][ T3176] 0 B 0 init/main.c:1477 func:do_initcalls [ 120.486732][ T3176] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 120.495087][ T3176] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 120.502928][ T3176] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 120.510839][ T3176] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 120.519329][ T3176] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 120.528128][ T3176] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 120.536198][ T3176] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 120.544893][ T3176] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 120.552806][ T3176] 0 B 0 init/initramfs.c:101 func:find_link [ 120.775026][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 120.775043][ T36] audit: type=1400 audit(1794040396.157:15548): avc: denied { map } for pid=3191 comm="syz.3.775" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.031148][ T338] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.204411][ T338] usb 6-1: Using ep0 maxpacket: 16 [ 121.210804][ T338] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.221486][ T338] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.232654][ T338] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.243154][ T338] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 121.256269][ T338] usb 6-1: config 0 interface 0 has no altsetting 0 [ 121.268789][ T338] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 121.289338][ T338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.309190][ T338] usb 6-1: config 0 descriptor?? [ 121.447540][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.454711][ T3199] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.461824][ T3199] bridge_slave_0: entered allmulticast mode [ 121.468164][ T3199] bridge_slave_0: entered promiscuous mode [ 121.474782][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.481936][ T3199] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.489101][ T3199] bridge_slave_1: entered allmulticast mode [ 121.495449][ T3199] bridge_slave_1: entered promiscuous mode [ 121.501758][ T1953] bridge_slave_1: left allmulticast mode [ 121.507482][ T1953] bridge_slave_1: left promiscuous mode [ 121.513136][ T1953] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.520740][ T1953] bridge_slave_0: left allmulticast mode [ 121.526382][ T1953] bridge_slave_0: left promiscuous mode [ 121.532102][ T1953] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.622899][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.629988][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.637753][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.644793][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.653852][ T1953] tipc: Disabling bearer [ 121.660251][ T1953] tipc: Left network mode [ 121.666131][ T1953] veth1_macvtap: left promiscuous mode [ 121.671928][ T1953] veth0_vlan: left promiscuous mode [ 121.722333][ T1980] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.729767][ T1980] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.739795][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.747319][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.757205][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.765781][ T1980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.776619][ T338] logitech-djreceiver 0003:046D:C53A.000B: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 121.814332][ T3199] veth0_vlan: entered promiscuous mode [ 121.825568][ T3199] veth1_macvtap: entered promiscuous mode [ 121.977165][ T338] usb 6-1: USB disconnect, device number 9 [ 122.537398][ T36] audit: type=1400 audit(1794040397.782:15549): avc: denied { setattr } for pid=3208 comm="syz.5.779" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.538006][ T3209] SELinux: failed to load policy [ 122.589815][ T36] audit: type=1400 audit(1794040397.828:15550): avc: denied { mounton } for pid=3210 comm="syz.5.780" path="/39/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 122.778449][ T3217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.783'. [ 122.796038][ T3219] FAULT_INJECTION: forcing a failure. [ 122.796038][ T3219] name failslab, interval 1, probability 0, space 0, times 0 [ 122.808964][ T3219] CPU: 0 UID: 0 PID: 3219 Comm: syz.4.784 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 122.808992][ T3219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.809006][ T3219] Call Trace: [ 122.809013][ T3219] [ 122.809020][ T3219] __dump_stack+0x21/0x30 [ 122.809043][ T3219] dump_stack_lvl+0x140/0x1c0 [ 122.809058][ T3219] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.809075][ T3219] dump_stack+0x19/0x20 [ 122.809090][ T3219] should_fail_ex+0x3c2/0x510 [ 122.809109][ T3219] should_failslab+0xac/0x100 [ 122.809128][ T3219] kmem_cache_alloc_noprof+0x42/0x410 [ 122.809155][ T3219] ? key_alloc+0x2ee/0x1060 [ 122.809180][ T3219] ? key_user_lookup+0x263/0x4f0 [ 122.809203][ T3219] key_alloc+0x2ee/0x1060 [ 122.809219][ T3219] keyring_alloc+0x4b/0xc0 [ 122.809234][ T3219] join_session_keyring+0x121/0x440 [ 122.809247][ T3219] ? lookup_user_key+0x548/0x1230 [ 122.809265][ T3219] lookup_user_key+0x54f/0x1230 [ 122.809277][ T3219] ? __cfi_lookup_user_key+0x10/0x10 [ 122.809295][ T3219] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 122.809308][ T3219] ? strncpy_from_user+0x14f/0x280 [ 122.809319][ T3219] __se_sys_add_key+0x317/0x4b0 [ 122.809330][ T3219] ? __x64_sys_add_key+0xf0/0xf0 [ 122.809341][ T3219] __x64_sys_add_key+0xc3/0xf0 [ 122.809352][ T3219] x64_sys_call+0x195f/0x2ee0 [ 122.809364][ T3219] do_syscall_64+0x57/0xf0 [ 122.809375][ T3219] ? clear_bhb_loop+0x50/0xa0 [ 122.809389][ T3219] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.809402][ T3219] RIP: 0033:0x7f106df9fb19 [ 122.809416][ T3219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.809425][ T3219] RSP: 002b:00007f106ee7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 122.809438][ T3219] RAX: ffffffffffffffda RBX: 00007f106e225fa0 RCX: 00007f106df9fb19 [ 122.809447][ T3219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 122.809454][ T3219] RBP: 00007f106e037b70 R08: fffffffffffffffd R09: 0000000000000000 [ 122.809461][ T3219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.809468][ T3219] R13: 00007f106e226038 R14: 00007f106e225fa0 R15: 00007ffeeeb8b688 [ 122.809477][ T3219] [ 123.024653][ T342] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 123.054005][ T36] audit: type=1400 audit(1794040398.253:15551): avc: denied { create } for pid=3228 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 123.184952][ T3235] netlink: 'syz.4.787': attribute type 19 has an invalid length. [ 123.197376][ T3235] tipc: Enabled bearer , priority 0 [ 123.208262][ T342] usb 6-1: Invalid ep0 maxpacket: 32 [ 123.216403][ T3235] syzkaller0: entered promiscuous mode [ 123.222423][ T3235] syzkaller0: entered allmulticast mode [ 123.228393][ T3235] tipc: Resetting bearer [ 123.315885][ T3234] tipc: Resetting bearer [ 123.328588][ T3234] tipc: Disabling bearer [ 123.349085][ T342] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 123.496982][ T36] audit: type=1400 audit(1794040398.668:15552): avc: denied { create } for pid=3240 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.511562][ T342] usb 6-1: Invalid ep0 maxpacket: 32 [ 123.528899][ T342] usb usb6-port1: attempt power cycle [ 123.912407][ T342] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 123.934420][ T342] usb 6-1: Invalid ep0 maxpacket: 32 [ 124.074923][ T342] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 124.107769][ T342] usb 6-1: Invalid ep0 maxpacket: 32 [ 124.110676][ T3251] ------------[ cut here ]------------ [ 124.113233][ T342] usb usb6-port1: unable to enumerate USB device [ 124.118636][ T3251] WARNING: CPU: 0 PID: 3251 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 124.134464][ T3251] Modules linked in: [ 124.138402][ T3251] CPU: 0 UID: 0 PID: 3251 Comm: syz.3.793 Not tainted syzkaller #0 1c9c13191c392e8d374fa2f59d394ca06c0f036a [ 124.150251][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 124.160339][ T3251] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 124.166354][ T3251] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d eb ef 89 06 00 0f 85 c2 00 00 00 c6 05 de ef 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 124.186180][ T3251] RSP: 0018:ffffc90010b6f520 EFLAGS: 00010246 [ 124.192262][ T3251] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 124.200279][ T3251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010b6f5d8 [ 124.208287][ T3251] RBP: ffffc90010b6f660 R08: ffffc90010b6f5d7 R09: 0000000000000000 [ 124.216298][ T3251] R10: ffffc90010b6f5c0 R11: fffff5200216debb R12: ffffc90010b6f560 [ 124.224277][ T3251] R13: dffffc0000000000 R14: 1ffff9200216dea8 R15: 0000000000000000 [ 124.232288][ T3251] FS: 00007fbe7e9e36c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 124.241256][ T3251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.247948][ T3251] CR2: 0000200000010000 CR3: 0000000126cf4000 CR4: 00000000003526b0 [ 124.255967][ T3251] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 124.264078][ T3251] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.272150][ T3251] Call Trace: [ 124.275434][ T3251] [ 124.278365][ T3251] ? vfs_write+0x3c1/0xfd0 [ 124.282840][ T3251] ? ksys_write+0x145/0x260 [ 124.287344][ T3251] ? x64_sys_call+0x271c/0x2ee0 [ 124.292215][ T3251] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 124.298020][ T3251] ? hashtab_init+0xd6/0x1f0 [ 124.302645][ T3251] ___kmalloc_large_node+0x81/0x220 [ 124.307868][ T3251] ? hashtab_init+0xd6/0x1f0 [ 124.312461][ T3251] __kmalloc_large_node_noprof+0x1e/0xd0 [ 124.318135][ T3251] ? hashtab_init+0xd6/0x1f0 [ 124.322732][ T3251] __kmalloc_noprof+0x326/0x510 [ 124.327614][ T3251] ? kasan_save_alloc_info+0x3a/0x50 [ 124.332906][ T3251] hashtab_init+0xd6/0x1f0 [ 124.337376][ T3251] ? class_read+0x17f/0x8a0 [ 124.341893][ T3251] symtab_init+0x44/0x70 [ 124.346178][ T3251] class_read+0x208/0x8a0 [ 124.350512][ T3251] ? __kasan_kmalloc+0x96/0xb0 [ 124.355269][ T3251] ? hashtab_init+0xd6/0x1f0 [ 124.359932][ T3251] ? __cfi_class_read+0x10/0x10 [ 124.364806][ T3251] ? hashtab_init+0x100/0x1f0 [ 124.369539][ T3251] policydb_read+0xa83/0x2860 [ 124.374221][ T3251] ? __kasan_kmalloc+0x96/0xb0 [ 124.379038][ T3251] ? __cfi_policydb_read+0x10/0x10 [ 124.384190][ T3251] ? security_load_policy+0x130/0x12d0 [ 124.389675][ T3251] security_load_policy+0x16a/0x12d0 [ 124.394964][ T3251] ? irqentry_exit+0x4a/0x60 [ 124.399553][ T3251] ? __kasan_check_write+0x18/0x20 [ 124.404724][ T3251] ? mutex_lock+0x97/0x1d0 [ 124.409179][ T3251] ? __cfi_security_load_policy+0x10/0x10 [ 124.414944][ T3251] ? rep_movs_alternative+0x4a/0xa0 [ 124.420160][ T3251] sel_write_load+0x258/0x600 [ 124.424861][ T3251] ? __cfi_sel_write_load+0x10/0x10 [ 124.430079][ T3251] ? bpf_lsm_file_permission+0xd/0x20 [ 124.435519][ T3251] ? __cfi_sel_write_load+0x10/0x10 [ 124.440716][ T3251] vfs_write+0x3c1/0xfd0 [ 124.445014][ T3251] ? __cfi_vfs_write+0x10/0x10 [ 124.449981][ T3251] ? __kasan_check_write+0x18/0x20 [ 124.455194][ T3251] ? mutex_lock+0x97/0x1d0 [ 124.459623][ T3251] ? __cfi_mutex_lock+0x10/0x10 [ 124.464476][ T3251] ksys_write+0x145/0x260 [ 124.468863][ T3251] ? xfd_validate_state+0x68/0x140 [ 124.473980][ T3251] ? __cfi_ksys_write+0x10/0x10 [ 124.478863][ T3251] ? __kasan_check_write+0x18/0x20 [ 124.483982][ T3251] ? fpregs_restore_userregs+0x11c/0x260 [ 124.489636][ T3251] __x64_sys_write+0x7f/0x90 [ 124.494226][ T3251] x64_sys_call+0x271c/0x2ee0 [ 124.498913][ T3251] do_syscall_64+0x57/0xf0 [ 124.503333][ T3251] ? clear_bhb_loop+0x50/0xa0 [ 124.508002][ T3251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.513916][ T3251] RIP: 0033:0x7fbe7ff9fb19 [ 124.518334][ T3251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.538010][ T3251] RSP: 002b:00007fbe7e9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.546480][ T3251] RAX: ffffffffffffffda RBX: 00007fbe80225fa0 RCX: 00007fbe7ff9fb19 [ 124.554504][ T3251] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000009 [ 124.562550][ T3251] RBP: 00007fbe80037b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.570554][ T3251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.578550][ T3251] R13: 00007fbe80226038 R14: 00007fbe80225fa0 R15: 00007ffd689b0a78 [ 124.586578][ T3251] [ 124.589593][ T3251] ---[ end trace 0000000000000000 ]--- [ 124.595248][ T3251] SELinux: failed to load policy