last executing test programs: 36.240807193s ago: executing program 1 (id=740): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x1bf61000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='\r=b', 0x3}], 0x1, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}}], 0x1, 0x10) 35.388886871s ago: executing program 1 (id=743): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="01000000feffff7f640000f9ffffffffffffff00000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0xa11be4da162171a2}, 0x0) pipe(&(0x7f0000001a80)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 35.364562243s ago: executing program 1 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0xfd3, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xddcd3000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.280190712s ago: executing program 1 (id=745): syz_usb_connect(0x0, 0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0800000109029616cb0300000009040000000e010000082403"], 0x0) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000400)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tcp_congestion(r2, 0x0, 0x35) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000280)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0xffffffffffffff4f}, @nested_intel_msr_list_add={0x155, 0x30, {0x2, 0x2, 0x27c, 0x80000001}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x60}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x9000, 0x100000}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x400c4d00, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='r', 0x1) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000005c0)={'netdevsim0\x00', 0x1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 34.027242172s ago: executing program 1 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xb8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x1e, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0xb, "a6"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @main=@item_4={0x3, 0x0, 0x0, "2198ad4b"}, @global=@item_4={0x3, 0x1, 0x2, "f412d25e"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000600)={0x2, 0x0, 0x98, &(0x7f0000000640)={0x2000, 0x24000, 0x1}}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)={0xd0a78e394dce5d1f, 0x1}, 0x0, 0x0, &(0x7f00000004c0), 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x5, 0xff, 0x36, 0x4, 0x0, 0x75, 0x2, 0x3, 0x1, 0xb, 0x1, 0xb4, 0x3, 0x4, 0xff, 0x6}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x3, 0xb018}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001f00), 0x20341, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 33.85200276s ago: executing program 1 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000000680)=0x0) timer_settime(r1, 0x1, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000700)=0x0) timer_settime(r2, 0x0, &(0x7f0000000740)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000540)={0x0, 0xfffd, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x300}, 0x8000) 33.666096909s ago: executing program 32 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000000680)=0x0) timer_settime(r1, 0x1, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000700)=0x0) timer_settime(r2, 0x0, &(0x7f0000000740)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000540)={0x0, 0xfffd, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x300}, 0x8000) 28.599289433s ago: executing program 0 (id=795): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) statx(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 27.555959031s ago: executing program 0 (id=810): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000380)={0x0, 0xbd, 0x11, 0x1, 0x7f}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x800, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46c3, 0x800, 0x40001, 0x26d}}], 0x1, 0x0, 0x0) (fail_nth: 14) 27.485994188s ago: executing program 0 (id=813): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x16b858e2, 0x2000) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000740)={{{0xf, 0x1}}, 0x87, 0x0, &(0x7f0000000680)="5e0585bf1d92f05df6e46126127f03804043107935d8f5a46dd9d1d86c9bae35f9931e4b9a9f3f90717089ff2612cb87b43d5f21082b0bff02edcf6c2c36c65ca244d117f02a6ca07595fe92259824d50f21b90782f20207af7a371512391758b70bbb7918d44366d385a7d8e6548065e2ac3127379cbebf91a7d59e82b342f8abeabbd315b040"}) r3 = socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000640)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000000680), 0x800001d, 0x810) socket$inet6(0xa, 0x5, 0x19) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30048b88) 27.387866348s ago: executing program 0 (id=815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, 0xa8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000003c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000400)=0x8, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xffffffff7ffffffd]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(&(0x7f0000000140)={[0xe]}, 0x0, 0x0, 0x8) tkill(r4, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) 27.359007071s ago: executing program 0 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000680)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0xffb2) getsockopt$inet6_tcp_TLS(r5, 0x11a, 0x2, &(0x7f00000005c0)=""/62, &(0x7f0000000600)=0x3e) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xfffffffffffffffe, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000580)={0x0, 0xdfffffff, 0x1000, 0x0, 0x3}, 0x20) dup2(r1, r1) 26.467811513s ago: executing program 0 (id=825): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.485755752s ago: executing program 33 (id=825): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.90472874s ago: executing program 2 (id=977): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0xfd3, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xddcd3000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.817422819s ago: executing program 2 (id=980): unshare(0x2040400) socket(0x1e, 0x80004, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28180, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f6c0a000) r3 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000040)=0x520) lsm_get_self_attr(0x65, &(0x7f0000000140)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000001180)=0x1020, 0x0) r4 = fsopen$ext4(&(0x7f00000011c0)='ext3\x00', 0x1) fsconfig$ext4_string(r4, 0x1, &(0x7f0000001240)='max_dir_size_kb\x00', &(0x7f0000001280)='0\x00', 0x0) syz_usb_connect$uac3(0x0, 0x8c, &(0x7f00000012c0)=ANY=[@ANYBLOB="12011017004000408205250040000517000000027a0003017fa006080b0002012030230904000000f00030000a24011016000a0000000c240b80007f00000008a300090401000001023000090401010101023000090584991846250100000025010400000505000904020000010830009f4ca83d98ceb52f7554d1c6ba0904020101010230000905820900027309c00a2525ffffff7fffdd0b1887ca762fcacf045dfcf0cdd5417216b0961f4a8fbf5d4f7e76b89eb9e6faa5846892360f4904abbed7b3b351d1b71248cbc1e5baa1f991c26e0dab7d81fe9479f85e3a49f6cdef4db600d247015d3b01f00461ed083f1749533a97e91fd3681f7ebf3307bfbc7d0389d143c7fa28f8eee10e54ea28ea1dbacfdb1a837dd281f90659412d0440fc17bf36a5ceb6360b4ebe0f2e2c0ba7c17248211d48731a33507802c8b2a84e13e4868144e4f81fedf98a172798384cc7bbe6"], 0x0) 2.981956482s ago: executing program 5 (id=1010): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1c, r1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0xbd, 0x11, 0x1, 0x7f}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x800, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x46c3, 0x800, 0x40001, 0x26d}}], 0x1, 0x0, 0x0) 2.851860395s ago: executing program 5 (id=1012): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd28, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000200008011"], 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, 0x0) (async) syz_usb_connect$uac2(0x0, 0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305", @ANYBLOB="0cd69da606"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2.764021464s ago: executing program 2 (id=1014): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x0, "73fcff92"}, @global=@item_4={0x3, 0x1, 0x5, "fc78b632"}, @main=@item_4={0x3, 0x0, 0xc, "9f663475"}, @global=@item_012={0x1, 0x1, 0x1, "1a"}, @local=@item_4={0x3, 0x2, 0x9, "eeb1740f"}]}}, 0x0}, 0x0) 1.781752006s ago: executing program 3 (id=1023): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x45, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b7, 0x6, 0x9, 0xfe1, 0x6, 0x8, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x2, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x76, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0xa, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x800007ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x8, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x46, 0x6, 0x4c2336d3, 0x24, 0x0, 0xfffbfff4, 0x3, 0x46, 0x5, 0x8, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfff7fffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0xf4b00000, 0x2, 0x48d, 0x9, 0x200026, 0x3, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2800004, 0x1, 0x7ff, 0x5, 0x9, 0x9b, 0x0, 0x9, 0x3, 0xc7, 0x8fff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xdb, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x4000008, 0x5, 0xa, 0xffff0000, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x2, 0x7f, 0x54, 0x7ff, 0xff, 0x1007, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8d2, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x44, 0x2, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) unshare(0x60000600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xf0}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000540)={0x0, {0x0, 0xffffffffffffffc0, 0x5, 0x3, 0xb}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={r1, 0x1, 0xfffffffffffffff8}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000280)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000000203030000000000000001000000008000080001000500000015161fcf1bba24eed20123fd9f39d08d742e12a03e294bbc7624b662b692832196754038b69ef35b33276f144437c0e89a50d3dfa9ba879536e9b7db8708737488bea5d7bc2560283ccbd99ae1ddddfdda428296d7d2cf187707d0f10a2d81b3dc99703fbfe8427f"], 0x1c}}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000303010100000000000000000500b9bda18000000c0002000000000000000300"], 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) chdir(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.706264874s ago: executing program 5 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (fail_nth: 9) 1.705845444s ago: executing program 5 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000100)=0x10, 0x4) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000900)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x8000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x4, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x24040802) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000880)="d3daea00800000fe00c744240057730000c744240209500000c7442406000000000f011424660f3a60ee8f260f30ea00000000a000c4e2791ca8fe00000066baa00066b8e91566ef0f20e035010000000f22e0d9fb", 0x55}], 0x1, 0x11, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[], 0x44}}, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x559, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000dc0)={0x0, &(0x7f0000000a80)=[@nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x1, 0x1173, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x68, 0x3, 0x2, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x4295, 0x2, 0x7}}, @in_dx={0x69, 0x20, {0x1fc9, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x6e, 0x1, 0xff, 0x8}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x563, 0xe, 0x8, 0x6254}}, @code={0xa, 0x5a, {"32fac74424004f000000c744240200700000ff1c2466ba2100edb8010000000f01c1c442fd23a1b0633987b8010000000f01c1f2400f017200c441d95c1d001000000f01c24e0fc72e"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6816, 0x4, 0x9, 0x4}}, @cpuid={0x64, 0x18, {0x1, 0x200}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x29, 0x2, 0x8}}, @rdmsr={0x66, 0x18, {0x84d}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x91, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @unmapped=0xf0000000}}, @out_dx={0x6a, 0x28, {0x95ed, 0x0, 0xff}}], 0x31a}) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000e00)={0x7, 0x0, [{0x80000019, 0x7fffffff, 0x4, 0x4, 0x4}, {0x80000000, 0x0, 0x101, 0x3fc, 0x3ff}, {0x7, 0xd97a, 0x5, 0x10001, 0x86d}, {0xb, 0x3, 0x7, 0x14d16bc, 0x272}, {0x40000000, 0x10, 0x1, 0x4, 0x7}, {0xc0000000, 0x6, 0x4, 0x6, 0x10}, {0xb, 0x18, 0x562, 0x1, 0x80000000}]}) 1.566179338s ago: executing program 5 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.565347288s ago: executing program 4 (id=1028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000012c0), 0x800, 0x0) pidfd_getfd(r3, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', r4, 0x700, 0x10, 0x40, 0x6, {{0x13, 0x4, 0x2, 0x3b, 0x4c, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x7, 0x4, [@multicast2]}, @end, @timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x4, [{@loopback, 0x9}, {@multicast2, 0x9}, {@local, 0x8}, {@rand_addr=0x64010100, 0x101}, {@broadcast, 0x5}]}, @noop]}}}}}) creat(&(0x7f0000000240)='./file0\x00', 0x523ad701bc22e172) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800, &(0x7f0000001280)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x40, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in6=@private2, @in=@local, 0x4e22, 0xf40, 0x4e23, 0x9, 0xa, 0x20, 0xa0, 0xee, r5, r6}, {0x5, 0x9ba, 0x1, 0x2, 0x6, 0x7f8, 0x30, 0xa}, {0x7, 0x4, 0xb0d6, 0x7f}, 0xc, 0x6e6bb0, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3501, 0x4, 0x3, 0x8, 0xfff, 0x2, 0x80000000}}, 0xe8) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r7, 0x8010aebb, &(0x7f0000000100)={0x7000, 0x110000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) 1.495964025s ago: executing program 3 (id=1029): syz_kvm_add_vcpu$x86(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0xfd3, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xddcd3000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.426585303s ago: executing program 3 (id=1030): unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e"], 0xf0}}, 0x804) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000600140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.378146048s ago: executing program 3 (id=1031): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.35477408s ago: executing program 5 (id=1032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6(0x10, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000080)}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x35, 0xfff, 0xc84a, 0x1, 0x100000000, 0x4, 0xf2, 0xd, 0x7fffffffffffe, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.25586418s ago: executing program 4 (id=1033): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x38, 0x44000006, 0x8, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x0, 0x7f, 0x4, 0x0, @multicast1, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000003c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)=""/4112, 0x1010}, {&(0x7f0000001700)=""/200, 0xc8}, {&(0x7f0000001800)=""/285, 0x11d}, {&(0x7f0000001940)=""/161, 0xa1}, {&(0x7f0000001a00)=""/221, 0xdd}, {&(0x7f0000001b00)=""/76, 0x4c}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001c80)=""/120, 0x78}, {&(0x7f0000001d00)=""/76, 0x4c}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001f80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8, @ANYBLOB="010000000000ffdbdf2508000000180001801400020073697430000000000000000000000000a800028061000400654cec66172a245bec952be01b347f92738eb671a12f0bdab511f5e4c4d7d07c12900a64f902398548715cc6b003c0d93fa4fa978823ac9d049623c6dc85451e05b865741db44a6e81d1a38150d064db188c96658e2bddde3021533ca000000040000380300001800c000200657468746f6f6c000400030004000300060002003a000000050002000000000008000100080000000c0001800800010000000000"], 0xd4}}, 0x880) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000200)={&(0x7f0000001e40)=""/120, 0xffffffffffffff28}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000001ec0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000001f00)={0xa, 0x0, 0xd496, @private1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001f40), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f00000000c0)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x57f, 0xd, 0x3, 0x6}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000100), 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x200, @local}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000040)={0x5, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpid() 1.190130147s ago: executing program 4 (id=1034): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = syz_clone(0x0, &(0x7f0000000780)="f2bf541f1bfcf6405ed091e61ee369ba5a932b19fc267a11", 0x18, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f00000009c0)='\\') fcntl$setownex(r3, 0xf, &(0x7f0000000a00)={0x0, r4}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_DEPS(r1, 0xc138fd0b, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x140, 0x138, 0x0, 0x0, 0x10, 0x0, 0x0, @by_dev={r2}, "73deb8b09952a134"}) setresuid(0x0, 0xee01, 0xffffffffffffffff) write$cgroup_subtree(r0, 0x0, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.143109422s ago: executing program 4 (id=1035): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.074017219s ago: executing program 2 (id=1036): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0xfd3, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xddcd3000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 907.080926ms ago: executing program 2 (id=1037): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket(0x15, 0x4, 0x0) (async) r1 = socket(0x15, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) (async) clock_gettime(0xfffffffffffffffe, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000002680)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0xffe, {0x2}, 0x0, 0xffffffffffff74a3}, {"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", "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"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002440)={0x1ff, 0x0, 0x1ffe, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000025c0)={'bridge_slave_1\x00', &(0x7f0000002600)=@ethtool_eee={0x45, 0x700000, 0x42, 0x4, 0x3, 0x6, 0xedb, 0x2, [0x7fff, 0x918f]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x2f) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) syslog(0x0, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20088004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x6}, 0x1c) (async) sendto$inet6(r7, 0x0, 0x0, 0x20088004, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x6}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r6, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff010000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500e0000001000000000000000000000000000000003c00000002000000000000000000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000140)=0x1, 0x4) getrandom(&(0x7f0000000000)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000240)=0x5, 0x4) (async) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000240)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, 0x0, &(0x7f0000000280)) bind$inet(r1, &(0x7f0000002640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) (async) bind$inet(r1, &(0x7f0000002640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) madvise(&(0x7f0000b64000/0x2000)=nil, 0x2000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 233.586296ms ago: executing program 3 (id=1038): syz_kvm_add_vcpu$x86(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0xfd3, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a], 0xddcd3000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 115.424508ms ago: executing program 4 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) pwritev(r1, 0x0, 0x0, 0x7fff, 0x4) read$FUSE(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x80242, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x19e) mount$incfs(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0xc002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x4000000, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0xc00, 0x0) process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) link(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0) 58.703004ms ago: executing program 4 (id=1040): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000380)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005e000101000000000800410000000000", @ANYRES32=0x0, @ANYBLOB="0400e5"], 0x1c}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/15, 0xf}], 0x1, 0x3, 0x5ef23d34) timer_create(0x3, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000280)={{}, {r4, r5+60000000}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) tkill(r2, 0x7) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000600)=0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000640)={0xa, 0x20e6, 0x0, @empty, 0xfffffffd}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r10}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', 0x2}) write$tun(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e60012", @ANYRES16], 0x64) close_range(r6, 0xffffffffffffffff, 0x0) 57.907214ms ago: executing program 3 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=1042): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x5, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 22.542569][ T36] audit: type=1400 audit(1794552961.470:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.565660][ T36] audit: type=1400 audit(1794552961.500:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.568424][ T287] cgroup: Unknown subsys name 'net' [ 22.593621][ T36] audit: type=1400 audit(1794552961.520:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.593969][ T287] cgroup: Unknown subsys name 'devices' [ 22.697209][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.702866][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.798660][ T36] audit: type=1400 audit(1794552961.730:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.821896][ T36] audit: type=1400 audit(1794552961.730:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.846724][ T36] audit: type=1400 audit(1794552961.730:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.870972][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.879812][ T36] audit: type=1400 audit(1794552961.810:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.905328][ T36] audit: type=1400 audit(1794552961.810:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.941885][ T36] audit: type=1400 audit(1794552961.870:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.967540][ T36] audit: type=1400 audit(1794552961.870:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.968202][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.740326][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.752915][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.760108][ T294] bridge_slave_0: entered allmulticast mode [ 23.766642][ T294] bridge_slave_0: entered promiscuous mode [ 23.773274][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.780748][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.787928][ T294] bridge_slave_1: entered allmulticast mode [ 23.794384][ T294] bridge_slave_1: entered promiscuous mode [ 23.949364][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.956566][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.963667][ T298] bridge_slave_0: entered allmulticast mode [ 23.970087][ T298] bridge_slave_0: entered promiscuous mode [ 23.977011][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.984090][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.991225][ T298] bridge_slave_1: entered allmulticast mode [ 23.997625][ T298] bridge_slave_1: entered promiscuous mode [ 24.005593][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.012678][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.019905][ T301] bridge_slave_0: entered allmulticast mode [ 24.026300][ T301] bridge_slave_0: entered promiscuous mode [ 24.033038][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.040162][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.047368][ T301] bridge_slave_1: entered allmulticast mode [ 24.053666][ T301] bridge_slave_1: entered promiscuous mode [ 24.080784][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.087898][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.095077][ T299] bridge_slave_0: entered allmulticast mode [ 24.101339][ T299] bridge_slave_0: entered promiscuous mode [ 24.107942][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.115056][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.122151][ T299] bridge_slave_1: entered allmulticast mode [ 24.128534][ T299] bridge_slave_1: entered promiscuous mode [ 24.170196][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177305][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.184589][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.191710][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.298455][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.305555][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.312870][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.320063][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.339664][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.346776][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.354073][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.361143][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.370574][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.377963][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.385871][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.393047][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.400586][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.407955][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.419382][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.426465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.441813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.448894][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.499015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.506132][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.513794][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.520872][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.539323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546502][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.560116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.567208][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.576169][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.583254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.609158][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.616268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.640874][ T298] veth0_vlan: entered promiscuous mode [ 24.655434][ T299] veth0_vlan: entered promiscuous mode [ 24.677015][ T294] veth0_vlan: entered promiscuous mode [ 24.683082][ T301] veth0_vlan: entered promiscuous mode [ 24.691383][ T298] veth1_macvtap: entered promiscuous mode [ 24.704867][ T299] veth1_macvtap: entered promiscuous mode [ 24.721246][ T294] veth1_macvtap: entered promiscuous mode [ 24.750814][ T301] veth1_macvtap: entered promiscuous mode [ 24.781127][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.830934][ T318] FAULT_INJECTION: forcing a failure. [ 24.830934][ T318] name failslab, interval 1, probability 0, space 0, times 1 [ 24.844378][ T318] CPU: 1 UID: 0 PID: 318 Comm: syz.2.3 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 24.844417][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 24.844443][ T318] Call Trace: [ 24.844451][ T318] [ 24.844459][ T318] __dump_stack+0x21/0x30 [ 24.844490][ T318] dump_stack_lvl+0x140/0x1c0 [ 24.844512][ T318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.844537][ T318] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 24.844577][ T318] dump_stack+0x19/0x20 [ 24.844598][ T318] should_fail_ex+0x3c2/0x510 [ 24.844621][ T318] should_failslab+0xac/0x100 [ 24.844647][ T318] kmem_cache_alloc_noprof+0x42/0x410 [ 24.844682][ T318] ? __kernfs_new_node+0xf1/0x740 [ 24.844710][ T318] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 24.844738][ T318] __kernfs_new_node+0xf1/0x740 [ 24.844764][ T318] ? __kasan_check_write+0x18/0x20 [ 24.844800][ T318] ? kernfs_new_node+0x280/0x280 [ 24.844833][ T318] ? down_write+0xee/0x2b0 [ 24.844869][ T318] ? __cfi_down_write+0x10/0x10 [ 24.844908][ T318] ? __kasan_check_write+0x18/0x20 [ 24.844941][ T318] ? up_write+0x66/0x280 [ 24.844969][ T318] ? kernfs_activate+0x1ee/0x200 [ 24.844997][ T318] kernfs_new_node+0x154/0x280 [ 24.845024][ T318] __kernfs_create_file+0x52/0x280 [ 24.845056][ T318] sysfs_add_file_mode_ns+0x1d2/0x280 [ 24.845089][ T318] internal_create_group+0x66c/0xe70 [ 24.845112][ T318] ? __kasan_check_write+0x18/0x20 [ 24.845148][ T318] ? sysfs_create_group+0x40/0x40 [ 24.845170][ T318] ? kernfs_activate+0x1ee/0x200 [ 24.845198][ T318] sysfs_create_groups+0x5c/0x130 [ 24.845221][ T318] device_add_attrs+0x12d/0x850 [ 24.845250][ T318] ? device_add_class_symlinks+0x260/0x260 [ 24.845279][ T318] ? __kasan_check_write+0x18/0x20 [ 24.845314][ T318] ? kobject_put+0x1cc/0x2a0 [ 24.845337][ T318] ? device_add_class_symlinks+0x22e/0x260 [ 24.845366][ T318] device_add+0x4db/0xbf0 [ 24.845393][ T318] input_register_device+0x9af/0x1080 [ 24.845431][ T318] uinput_create_device+0x416/0x670 [ 24.845469][ T318] uinput_ioctl_handler+0x3ea/0x1360 [ 24.845504][ T318] ? uinput_release+0x70/0x70 [ 24.845539][ T318] ? __fget_files+0x2bc/0x330 [ 24.845565][ T318] uinput_ioctl+0x2c/0x40 [ 24.845596][ T318] ? __cfi_uinput_ioctl+0x10/0x10 [ 24.845628][ T318] __se_sys_ioctl+0x123/0x1b0 [ 24.845652][ T318] __x64_sys_ioctl+0x7f/0xa0 [ 24.845675][ T318] x64_sys_call+0x1878/0x2ee0 [ 24.845700][ T318] do_syscall_64+0x57/0xf0 [ 24.845724][ T318] ? clear_bhb_loop+0x50/0xa0 [ 24.845758][ T318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.845791][ T318] RIP: 0033:0x7f9bfbda94d9 [ 24.845824][ T318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.845853][ T318] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.845885][ T318] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 24.845903][ T318] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 24.845919][ T318] RBP: 00007f9bfbe3804e R08: 0000000000000000 R09: 0000000000000000 [ 24.845934][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.845948][ T318] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 24.845969][ T318] [ 24.895794][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.039834][ T324] random: crng reseeded on system resumption [ 25.253104][ T327] syzkaller0: entered promiscuous mode [ 25.255378][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.258677][ T327] syzkaller0: entered allmulticast mode [ 25.415007][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 25.421495][ T333] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 25.440005][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.451096][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 25.471968][ T312] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 25.484250][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.494983][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.515219][ T312] usb 4-1: config 0 descriptor?? [ 25.532291][ T312] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 25.541196][ T312] usbhid 4-1:0.0: can't add hid device: -22 [ 25.547773][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 25.657140][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 25.665413][ T63] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 25.684552][ T63] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 25.693766][ T63] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 25.702568][ T63] usb 1-1: Product: syz [ 25.707024][ T63] usb 1-1: Manufacturer: syz [ 25.721147][ T63] r8152-cfgselector 1-1: Unknown version 0x0000 [ 25.735231][ T312] usb 4-1: USB disconnect, device number 2 [ 25.741645][ T63] r8152-cfgselector 1-1: config 0 descriptor?? [ 25.765239][ T63] cdc_acm 1-1:0.0: Zero length descriptor references [ 25.772057][ T63] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 25.828205][ T342] kvm: pic: non byte read [ 25.832689][ T342] kvm: pic: non byte read [ 25.837401][ T342] kvm: pic: non byte read [ 25.841829][ T342] kvm: pic: non byte read [ 25.847537][ T342] kvm: pic: non byte read [ 26.065376][ T322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.085202][ T322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.093540][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.112017][ T322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 26.186574][ T63] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 26.261777][ T358] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.8192.0), cmd(9) [ 26.264551][ T361] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 26.885012][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.006375][ T396] syzkaller0: entered promiscuous mode [ 27.011918][ T396] syzkaller0: entered allmulticast mode [ 27.046225][ T312] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.057478][ T312] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.070607][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.077472][ T312] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 27.086812][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.098275][ T312] usb 2-1: config 0 descriptor?? [ 27.507275][ T312] hid-picolcd 0003:04D8:F002.0001: collection stack underflow [ 27.515033][ T312] hid-picolcd 0003:04D8:F002.0001: item 0 4 0 12 parsing failed [ 27.532317][ T312] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 27.540111][ T312] hid-picolcd 0003:04D8:F002.0001: probe with driver hid-picolcd failed with error -22 [ 27.561918][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 27.561936][ T36] audit: type=1400 audit(1794552966.490:157): avc: denied { append } for pid=401 comm="syz.3.30" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.701225][ T36] audit: type=1400 audit(1794552966.630:158): avc: denied { read append } for pid=407 comm="syz.3.32" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.718496][ T312] usb 2-1: USB disconnect, device number 2 [ 27.732923][ T408] capability: warning: `syz.3.32' uses deprecated v2 capabilities in a way that may be insecure [ 27.763734][ T36] audit: type=1400 audit(1794552966.630:159): avc: denied { open } for pid=407 comm="syz.3.32" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.810884][ T36] audit: type=1400 audit(1794552966.630:160): avc: denied { write } for pid=407 comm="syz.3.32" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.865042][ T36] audit: type=1400 audit(1794552966.630:161): avc: denied { ioctl } for pid=407 comm="syz.3.32" path="socket:[4904]" dev="sockfs" ino=4904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.891050][ T36] audit: type=1400 audit(1794552966.680:162): avc: denied { ioctl } for pid=407 comm="syz.3.32" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 28.115178][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 28.115203][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.132387][ T419] syzkaller0: entered promiscuous mode [ 28.139210][ T419] syzkaller0: entered allmulticast mode [ 28.257147][ T428] random: crng reseeded on system resumption [ 28.316886][ T436] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.8192.0), cmd(9) [ 28.427100][ T450] syzkaller0: entered promiscuous mode [ 28.432704][ T450] syzkaller0: entered allmulticast mode [ 28.554988][ T63] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.704982][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 28.715032][ T63] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 28.735011][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.749495][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 28.764959][ T63] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 28.785053][ T63] usb 2-1: Product: syz [ 28.789309][ T63] usb 2-1: Manufacturer: syz [ 28.801549][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 28.815140][ T63] r8152-cfgselector 2-1: config 0 descriptor?? [ 28.822667][ T63] cdc_acm 2-1:0.0: Zero length descriptor references [ 28.835190][ T63] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 28.896977][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.925041][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.932351][ T36] audit: type=1326 audit(1794552967.860:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=468 comm="syz.3.57" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d01a94d9 code=0x0 [ 28.945052][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.995113][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 29.004292][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.006076][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.019186][ T9] usb 1-1: config 0 descriptor?? [ 29.040278][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.049897][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.061012][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.087602][ T428] Dead loop on virtual device ip6_vti0, fix it urgently! [ 29.137514][ T45] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 29.446824][ T9] hid-picolcd 0003:04D8:F002.0002: collection stack underflow [ 29.454482][ T9] hid-picolcd 0003:04D8:F002.0002: item 0 4 0 12 parsing failed [ 29.462401][ T9] hid-picolcd 0003:04D8:F002.0002: device report parse failed [ 29.470038][ T9] hid-picolcd 0003:04D8:F002.0002: probe with driver hid-picolcd failed with error -22 [ 29.648549][ T9] usb 1-1: USB disconnect, device number 3 [ 29.743188][ T483] syzkaller0: entered promiscuous mode [ 29.748831][ T483] syzkaller0: entered allmulticast mode [ 30.095334][ T504] kvm: pic: non byte read [ 30.099848][ T504] kvm: pic: non byte read [ 30.104353][ T504] kvm: pic: non byte read [ 30.108824][ T504] kvm: pic: non byte read [ 30.113407][ T504] kvm: pic: non byte read [ 30.300575][ T510] syzkaller0: entered promiscuous mode [ 30.314837][ T510] syzkaller0: entered allmulticast mode [ 31.074975][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 31.074983][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.125978][ T533] syzkaller0: entered promiscuous mode [ 31.131522][ T533] syzkaller0: entered allmulticast mode [ 31.204266][ T300] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.376030][ T300] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.394974][ T300] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.408641][ T300] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.415487][ T300] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 31.424564][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.433909][ T300] usb 2-1: config 0 descriptor?? [ 31.611716][ T559] syzkaller0: entered promiscuous mode [ 31.624983][ T559] syzkaller0: entered allmulticast mode [ 31.842108][ T300] hid-picolcd 0003:04D8:F002.0003: collection stack underflow [ 31.857804][ T300] hid-picolcd 0003:04D8:F002.0003: item 0 4 0 12 parsing failed [ 31.875194][ T300] hid-picolcd 0003:04D8:F002.0003: device report parse failed [ 31.884840][ T300] hid-picolcd 0003:04D8:F002.0003: probe with driver hid-picolcd failed with error -22 [ 32.055861][ T45] usb 2-1: USB disconnect, device number 4 [ 32.370839][ T586] kvm: pic: non byte read [ 32.378972][ T586] kvm: pic: non byte read [ 32.383367][ T586] kvm: pic: non byte read [ 32.387853][ T586] kvm: pic: non byte read [ 32.392285][ T586] kvm: pic: non byte read [ 32.460805][ T589] syzkaller0: entered promiscuous mode [ 32.466471][ T589] syzkaller0: entered allmulticast mode [ 32.862728][ T615] syzkaller0: entered promiscuous mode [ 32.884995][ T615] syzkaller0: entered allmulticast mode [ 33.244965][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.406121][ T45] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.425014][ T45] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.452426][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.467173][ T45] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 33.484991][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.501207][ T45] usb 2-1: config 0 descriptor?? [ 33.686554][ T644] syzkaller0: entered promiscuous mode [ 33.692148][ T644] syzkaller0: entered allmulticast mode [ 33.898267][ T36] audit: type=1326 audit(1794552972.830:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=652 comm="syz.2.130" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bfbda94d9 code=0x0 [ 33.924584][ T45] hid-picolcd 0003:04D8:F002.0004: collection stack underflow [ 33.935501][ T45] hid-picolcd 0003:04D8:F002.0004: item 0 4 0 12 parsing failed [ 33.945150][ T45] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 33.952994][ T45] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 34.125574][ T45] usb 2-1: USB disconnect, device number 5 [ 34.280641][ T671] syzkaller0: entered promiscuous mode [ 34.286239][ T671] syzkaller0: entered allmulticast mode [ 34.357645][ T677] FAULT_INJECTION: forcing a failure. [ 34.357645][ T677] name failslab, interval 1, probability 0, space 0, times 0 [ 34.370506][ T677] CPU: 1 UID: 0 PID: 677 Comm: syz.0.138 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 34.370547][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.370567][ T677] Call Trace: [ 34.370577][ T677] [ 34.370588][ T677] __dump_stack+0x21/0x30 [ 34.370620][ T677] dump_stack_lvl+0x140/0x1c0 [ 34.370651][ T677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.370678][ T677] dump_stack+0x19/0x20 [ 34.370708][ T677] should_fail_ex+0x3c2/0x510 [ 34.370735][ T677] should_failslab+0xac/0x100 [ 34.370770][ T677] kmem_cache_alloc_noprof+0x42/0x410 [ 34.370814][ T677] ? security_file_alloc+0x49/0x220 [ 34.370854][ T677] ? kasan_save_alloc_info+0x3a/0x50 [ 34.370897][ T677] security_file_alloc+0x49/0x220 [ 34.370938][ T677] init_file+0x9e/0x210 [ 34.370979][ T677] alloc_empty_file+0xd9/0x270 [ 34.371017][ T677] path_openat+0xf4/0x35a0 [ 34.371049][ T677] ? stack_depot_save_flags+0x38/0x800 [ 34.371084][ T677] ? kasan_save_track+0x4f/0x80 [ 34.371110][ T677] ? kasan_save_track+0x3e/0x80 [ 34.371141][ T677] ? kasan_save_alloc_info+0x3a/0x50 [ 34.371179][ T677] ? __kasan_slab_alloc+0x73/0x90 [ 34.371210][ T677] ? getname+0x1b/0x30 [ 34.371234][ T677] ? do_sys_openat2+0xda/0x1d0 [ 34.371272][ T677] ? __x64_sys_openat+0x13a/0x170 [ 34.371311][ T677] ? x64_sys_call+0xe69/0x2ee0 [ 34.371341][ T677] ? do_syscall_64+0x57/0xf0 [ 34.371370][ T677] ? do_filp_open+0x440/0x440 [ 34.371399][ T677] do_filp_open+0x1f2/0x440 [ 34.371427][ T677] ? __cfi_do_filp_open+0x10/0x10 [ 34.371458][ T677] ? alloc_fd+0x4c1/0x570 [ 34.371490][ T677] do_sys_openat2+0x134/0x1d0 [ 34.371520][ T677] ? fput+0x1a4/0x230 [ 34.371546][ T677] ? do_sys_open+0x100/0x100 [ 34.371580][ T677] __x64_sys_openat+0x13a/0x170 [ 34.371611][ T677] x64_sys_call+0xe69/0x2ee0 [ 34.371636][ T677] do_syscall_64+0x57/0xf0 [ 34.371667][ T677] ? clear_bhb_loop+0x50/0xa0 [ 34.371706][ T677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.371747][ T677] RIP: 0033:0x7f20543a94d9 [ 34.371770][ T677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.371796][ T677] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.371826][ T677] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 34.371851][ T677] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 34.371871][ T677] RBP: 00007f205443804e R08: 0000000000000000 R09: 0000000000000000 [ 34.371889][ T677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.371910][ T677] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 34.371936][ T677] [ 34.697637][ T677] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 35.201692][ T701] syzkaller0: entered promiscuous mode [ 35.215889][ T701] syzkaller0: entered allmulticast mode [ 35.223089][ T36] audit: type=1326 audit(1794552974.150:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=702 comm="syz.0.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 35.403360][ T36] audit: type=1400 audit(1794552974.330:166): avc: denied { read } for pid=711 comm="syz.2.151" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.450461][ T36] audit: type=1400 audit(1794552974.330:167): avc: denied { open } for pid=711 comm="syz.2.151" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.498518][ T36] audit: type=1400 audit(1794552974.360:168): avc: denied { ioctl } for pid=711 comm="syz.2.151" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.160934][ T729] syzkaller0: entered promiscuous mode [ 36.167402][ T729] syzkaller0: entered allmulticast mode [ 36.566608][ T36] audit: type=1326 audit(1794552975.500:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=752 comm="syz.1.167" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55b19a94d9 code=0x0 [ 37.171130][ T765] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.209935][ T767] syzkaller0: entered promiscuous mode [ 37.224987][ T767] syzkaller0: entered allmulticast mode [ 37.539893][ T795] syzkaller0: entered promiscuous mode [ 37.555001][ T795] syzkaller0: entered allmulticast mode [ 37.943336][ T36] audit: type=1326 audit(1794552976.870:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=804 comm="syz.0.186" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 38.527166][ T822] syzkaller0: entered promiscuous mode [ 38.532688][ T822] syzkaller0: entered allmulticast mode [ 38.834968][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.986128][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.012926][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.026400][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.033307][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 39.044538][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.055252][ T9] usb 2-1: config 0 descriptor?? [ 39.093669][ T851] syzkaller0: entered promiscuous mode [ 39.099257][ T851] syzkaller0: entered allmulticast mode [ 39.126970][ T36] audit: type=1326 audit(1794552978.060:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=852 comm="syz.0.204" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 39.465833][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 39.471928][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.483694][ T9] usb 2-1: USB disconnect, device number 6 [ 40.043408][ T882] syzkaller0: entered promiscuous mode [ 40.049247][ T882] syzkaller0: entered allmulticast mode [ 40.141304][ T890] kvm: pic: non byte read [ 40.148388][ T890] kvm: pic: non byte read [ 40.152954][ T890] kvm: pic: non byte read [ 40.157834][ T890] kvm: pic: non byte read [ 40.162380][ T890] kvm: pic: non byte read [ 40.444952][ T36] audit: type=1326 audit(1794552979.360:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.0.221" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 41.121680][ T36] audit: type=1400 audit(1794552980.050:173): avc: denied { wake_alarm } for pid=915 comm="syz.1.225" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.144975][ T343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.169210][ T918] syzkaller0: entered promiscuous mode [ 41.174877][ T918] syzkaller0: entered allmulticast mode [ 41.274628][ T923] kvm: pic: non byte read [ 41.279188][ T923] kvm: pic: non byte read [ 41.283635][ T923] kvm: pic: non byte read [ 41.295337][ T923] kvm: pic: non byte read [ 41.300699][ T923] kvm: pic: non byte read [ 41.316563][ T343] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.327537][ T343] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.341022][ T343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.347832][ T343] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 41.359074][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.385731][ T343] usb 4-1: config 0 descriptor?? [ 41.802666][ T343] usbhid 4-1:0.0: can't add hid device: -71 [ 41.812429][ T343] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.833681][ T343] usb 4-1: USB disconnect, device number 3 [ 42.315829][ T945] syzkaller0: entered promiscuous mode [ 42.321763][ T945] syzkaller0: entered allmulticast mode [ 42.378295][ T36] audit: type=1400 audit(1794552981.310:174): avc: denied { mount } for pid=949 comm="syz.1.237" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.402376][ T36] audit: type=1400 audit(1794552981.330:175): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.459178][ T36] audit: type=1326 audit(1794552981.390:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=954 comm="syz.0.239" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 42.824975][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.996177][ T45] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.018386][ T45] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.044576][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.057924][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 43.077338][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.095899][ T45] usb 4-1: config 0 descriptor?? [ 43.312517][ T36] audit: type=1400 audit(1794552982.240:177): avc: denied { create } for pid=977 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.414963][ T36] audit: type=1400 audit(1794552982.270:178): avc: denied { write } for pid=977 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.537333][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 43.543342][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.561768][ T45] usb 4-1: USB disconnect, device number 4 [ 43.598485][ T986] syzkaller0: entered promiscuous mode [ 43.604057][ T986] syzkaller0: entered allmulticast mode [ 43.721800][ T36] audit: type=1326 audit(1794552982.650:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz.2.255" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bfbda94d9 code=0x0 [ 44.865700][ T1035] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.8448.0), cmd(9) [ 45.048165][ T36] audit: type=1326 audit(1794552983.980:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.1.271" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55b19a94d9 code=0x0 [ 45.209593][ T1053] picdev_read: 15 callbacks suppressed [ 45.209615][ T1053] kvm: pic: non byte read [ 45.219574][ T459] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 45.227376][ T1053] kvm: pic: non byte read [ 45.231866][ T1053] kvm: pic: non byte read [ 45.236742][ T1053] kvm: pic: non byte read [ 45.241108][ T1053] kvm: pic: non byte read [ 45.386153][ T459] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.399700][ T459] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.423757][ T459] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.437229][ T459] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 45.454969][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.465401][ T459] usb 3-1: config 0 descriptor?? [ 45.887832][ T459] usbhid 3-1:0.0: can't add hid device: -71 [ 45.893907][ T459] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.916382][ T459] usb 3-1: USB disconnect, device number 2 [ 46.373422][ T36] audit: type=1400 audit(1794552985.300:181): avc: denied { create } for pid=1083 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.405109][ T36] audit: type=1400 audit(1794552985.320:182): avc: denied { connect } for pid=1083 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.439523][ T36] audit: type=1400 audit(1794552985.320:183): avc: denied { setopt } for pid=1083 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.460721][ T36] audit: type=1326 audit(1794552985.360:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.0.285" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 46.586287][ T36] audit: type=1326 audit(1794552985.520:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1092 comm="syz.2.288" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bfbda94d9 code=0x0 [ 46.638845][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.255027][ T459] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.426129][ T459] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.454963][ T459] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.474938][ T459] usb 2-1: config 0 interface 0 has no altsetting 0 [ 47.481613][ T459] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 47.504936][ T459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.525256][ T459] usb 2-1: config 0 descriptor?? [ 47.945515][ T459] usbhid 2-1:0.0: can't add hid device: -71 [ 47.951575][ T459] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 47.962744][ T459] usb 2-1: USB disconnect, device number 7 [ 48.674999][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 48.681383][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.741366][ T36] audit: type=1400 audit(1794552987.670:186): avc: denied { setopt } for pid=1156 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.809294][ T36] audit: type=1400 audit(1794552987.670:187): avc: denied { read } for pid=1156 comm="syz.2.312" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.862347][ T36] audit: type=1400 audit(1794552987.780:188): avc: denied { read } for pid=1158 comm="syz.2.313" dev="sockfs" ino=19830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.084959][ T459] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 49.234950][ T459] usb 3-1: Using ep0 maxpacket: 16 [ 49.245011][ T459] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.264939][ T459] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.284981][ T459] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 49.304937][ T459] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.321827][ T459] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 49.334951][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.347212][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.355087][ T459] usb 3-1: config 0 descriptor?? [ 49.526120][ T45] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.546388][ T45] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.559850][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 49.567154][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 49.576640][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.595614][ T45] usb 4-1: config 0 descriptor?? [ 49.781353][ T1174] syzkaller0: entered promiscuous mode [ 49.795027][ T1174] syzkaller0: entered allmulticast mode [ 49.874610][ T36] audit: type=1326 audit(1794552988.800:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1175 comm="syz.0.320" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 49.926880][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.933387][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.971702][ T459] usb 3-1: USB disconnect, device number 3 [ 50.015846][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 50.023420][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.032760][ T45] usb 4-1: USB disconnect, device number 5 [ 50.148089][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 50.148107][ T36] audit: type=1400 audit(1794552989.080:191): avc: denied { cmd } for pid=1187 comm="syz.1.324" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 50.178743][ T36] audit: type=1400 audit(1794552989.110:192): avc: denied { map } for pid=1187 comm="syz.1.324" path="/dev/ublkc0" dev="devtmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.178749][ T36] audit: type=1400 audit(1794552990.110:193): avc: denied { write } for pid=1203 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.201265][ T1204] netlink: 104 bytes leftover after parsing attributes in process `syz.1.328'. [ 51.219100][ T36] audit: type=1400 audit(1794552990.110:194): avc: denied { nlmsg_write } for pid=1203 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.339705][ T1206] syzkaller0: entered promiscuous mode [ 51.361475][ T1206] syzkaller0: entered allmulticast mode [ 51.462588][ T36] audit: type=1400 audit(1794552990.390:195): avc: denied { connect } for pid=1210 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.575928][ T1222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 51.718887][ T36] audit: type=1400 audit(1794552990.650:196): avc: denied { create } for pid=1228 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.864990][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.954985][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 51.961107][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.015634][ T1235] syzkaller0: entered promiscuous mode [ 52.016336][ T63] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.021643][ T1235] syzkaller0: entered allmulticast mode [ 52.044937][ T63] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.057905][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.064582][ T63] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 52.073731][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.083070][ T63] usb 2-1: config 0 descriptor?? [ 52.658836][ T36] audit: type=1326 audit(1794552991.590:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.3.347" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d01a94d9 code=0x0 [ 52.694107][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 52.707623][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.724499][ T63] usb 2-1: USB disconnect, device number 8 [ 52.725397][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.142875][ T1278] tipc: Enabling of bearer rejected, failed to enable media [ 53.231965][ T36] audit: type=1400 audit(1794552992.160:198): avc: denied { append } for pid=1281 comm="syz.1.356" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.283098][ T36] audit: type=1400 audit(1794552992.190:199): avc: denied { setopt } for pid=1281 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.302801][ T36] audit: type=1400 audit(1794552992.200:200): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.684063][ T1310] FAULT_INJECTION: forcing a failure. [ 53.684063][ T1310] name failslab, interval 1, probability 0, space 0, times 0 [ 53.697067][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: syz.0.366 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 53.697111][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 53.697128][ T1310] Call Trace: [ 53.697138][ T1310] [ 53.697147][ T1310] __dump_stack+0x21/0x30 [ 53.697183][ T1310] dump_stack_lvl+0x140/0x1c0 [ 53.697208][ T1310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.697242][ T1310] dump_stack+0x19/0x20 [ 53.697265][ T1310] should_fail_ex+0x3c2/0x510 [ 53.697296][ T1310] ? crypt_alloc_tfms+0xa1/0x4d0 [ 53.697336][ T1310] should_failslab+0xac/0x100 [ 53.697376][ T1310] __kmalloc_noprof+0x69/0x510 [ 53.697418][ T1310] ? crypt_alloc_tfms+0xa1/0x4d0 [ 53.697459][ T1310] crypt_alloc_tfms+0xa1/0x4d0 [ 53.697504][ T1310] crypt_ctr+0x14ee/0x3a80 [ 53.697549][ T1310] ? __cfi_crypt_ctr+0x10/0x10 [ 53.697593][ T1310] ? __kmalloc_cache_noprof+0x23c/0x470 [ 53.697634][ T1310] ? dm_split_args+0xa1/0x740 [ 53.697664][ T1310] ? skip_spaces+0x80/0xa0 [ 53.697700][ T1310] ? dm_split_args+0x4f0/0x740 [ 53.697732][ T1310] dm_table_add_target+0x59c/0xcb0 [ 53.697761][ T1310] table_load+0x2eb/0x7d0 [ 53.697802][ T1310] ? __check_object_size+0x99/0x870 [ 53.697845][ T1310] ? __cfi_table_load+0x10/0x10 [ 53.697883][ T1310] ? __kasan_check_write+0x18/0x20 [ 53.697924][ T1310] ? __cfi_table_load+0x10/0x10 [ 53.697960][ T1310] dm_ctl_ioctl+0x8f3/0xde0 [ 53.698006][ T1310] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 53.698052][ T1310] ? __fget_files+0x2bc/0x330 [ 53.698080][ T1310] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.698114][ T1310] ? security_file_ioctl+0x3e/0x110 [ 53.698152][ T1310] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 53.698190][ T1310] __se_sys_ioctl+0x123/0x1b0 [ 53.698222][ T1310] __x64_sys_ioctl+0x7f/0xa0 [ 53.698256][ T1310] x64_sys_call+0x1878/0x2ee0 [ 53.698283][ T1310] do_syscall_64+0x57/0xf0 [ 53.698314][ T1310] ? clear_bhb_loop+0x50/0xa0 [ 53.698362][ T1310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.698396][ T1310] RIP: 0033:0x7f20543a94d9 [ 53.698422][ T1310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.698444][ T1310] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.698475][ T1310] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 53.698497][ T1310] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 53.698515][ T1310] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 53.698536][ T1310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.698555][ T1310] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 53.698577][ T1310] [ 53.698675][ T1310] device-mapper: table: 252:1: crypt: Error allocating crypto tfm (-ENOMEM) [ 53.976703][ T1310] device-mapper: ioctl: error adding target to table [ 54.104945][ T343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 54.286085][ T343] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.299743][ T343] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.312754][ T343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 54.319510][ T343] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 54.329116][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.339548][ T343] usb 3-1: config 0 descriptor?? [ 54.765004][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.771215][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 54.952266][ T343] usbhid 3-1:0.0: can't add hid device: -71 [ 54.963909][ T343] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 54.980493][ T343] usb 3-1: USB disconnect, device number 4 [ 55.175227][ T1333] FAULT_INJECTION: forcing a failure. [ 55.175227][ T1333] name failslab, interval 1, probability 0, space 0, times 0 [ 55.190450][ T1333] CPU: 1 UID: 0 PID: 1333 Comm: syz.0.374 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 55.190485][ T1333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 55.190499][ T1333] Call Trace: [ 55.190506][ T1333] [ 55.190514][ T1333] __dump_stack+0x21/0x30 [ 55.190546][ T1333] dump_stack_lvl+0x140/0x1c0 [ 55.190572][ T1333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.190596][ T1333] ? avc_has_perm+0x155/0x240 [ 55.190631][ T1333] ? __cfi_avc_has_perm+0x10/0x10 [ 55.190660][ T1333] ? hook_file_open+0x1f2/0x8d0 [ 55.190698][ T1333] dump_stack+0x19/0x20 [ 55.190722][ T1333] should_fail_ex+0x3c2/0x510 [ 55.190753][ T1333] should_failslab+0xac/0x100 [ 55.190781][ T1333] __kmalloc_cache_noprof+0x41/0x470 [ 55.190826][ T1333] ? vhost_task_create+0x12c/0x3f0 [ 55.190863][ T1333] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 55.190900][ T1333] vhost_task_create+0x12c/0x3f0 [ 55.190935][ T1333] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 55.190975][ T1333] ? __cfi_vhost_task_create+0x10/0x10 [ 55.191010][ T1333] ? __cfi_vhost_task_fn+0x10/0x10 [ 55.191045][ T1333] ? __kasan_check_write+0x18/0x20 [ 55.191083][ T1333] ? mutex_lock+0x97/0x1d0 [ 55.191120][ T1333] ? __cfi_mutex_lock+0x10/0x10 [ 55.191156][ T1333] ? kernel_text_address+0xa9/0xe0 [ 55.191211][ T1333] kvm_mmu_post_init_vm+0x161/0x300 [ 55.191240][ T1333] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 55.191283][ T1333] ? _parse_integer_limit+0x195/0x1e0 [ 55.191325][ T1333] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 55.191370][ T1333] ? kstrtoull+0x13b/0x1e0 [ 55.191411][ T1333] ? kstrtouint+0x78/0xf0 [ 55.191452][ T1333] ? ioctl_has_perm+0x1bc/0x500 [ 55.191477][ T1333] ? __asan_memcpy+0x5a/0x80 [ 55.191518][ T1333] ? ioctl_has_perm+0x408/0x500 [ 55.191542][ T1333] ? has_cap_mac_admin+0xd0/0xd0 [ 55.191571][ T1333] ? __kasan_check_write+0x18/0x20 [ 55.191609][ T1333] ? mutex_lock_killable+0x97/0x1d0 [ 55.191648][ T1333] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.191687][ T1333] ? proc_fail_nth_write+0x184/0x220 [ 55.191724][ T1333] kvm_vcpu_ioctl+0xa43/0x1000 [ 55.191759][ T1333] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.191788][ T1333] ? hook_file_ioctl+0x1ef/0x590 [ 55.191826][ T1333] ? __cfi_vfs_write+0x10/0x10 [ 55.191867][ T1333] ? __cfi_hook_file_ioctl+0x10/0x10 [ 55.191902][ T1333] ? __kasan_check_write+0x18/0x20 [ 55.191944][ T1333] ? mutex_unlock+0x90/0x240 [ 55.191981][ T1333] ? __cfi_mutex_unlock+0x10/0x10 [ 55.192017][ T1333] ? __fget_files+0x2bc/0x330 [ 55.192051][ T1333] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.192079][ T1333] ? security_file_ioctl+0x3e/0x110 [ 55.192121][ T1333] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.192154][ T1333] __se_sys_ioctl+0x123/0x1b0 [ 55.192190][ T1333] __x64_sys_ioctl+0x7f/0xa0 [ 55.192222][ T1333] x64_sys_call+0x1878/0x2ee0 [ 55.192251][ T1333] do_syscall_64+0x57/0xf0 [ 55.192282][ T1333] ? clear_bhb_loop+0x50/0xa0 [ 55.192320][ T1333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.192357][ T1333] RIP: 0033:0x7f20543a94d9 [ 55.192383][ T1333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.192404][ T1333] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.192435][ T1333] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 55.192457][ T1333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 55.192475][ T1333] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 55.192495][ T1333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.192514][ T1333] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 55.192536][ T1333] [ 55.694003][ T1340] syzkaller0: entered promiscuous mode [ 55.700410][ T1340] syzkaller0: entered allmulticast mode [ 55.811899][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 55.811917][ T36] audit: type=1326 audit(1794552994.740:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1346 comm="syz.0.379" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20543a94d9 code=0x0 [ 55.873244][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.892630][ T36] audit: type=1400 audit(1794552994.820:209): avc: denied { mounton } for pid=1351 comm="syz.3.380" path="/84/file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.145276][ T1363] ======================================================= [ 56.145276][ T1363] WARNING: The mand mount option has been deprecated and [ 56.145276][ T1363] and is ignored by this kernel. Remove the mand [ 56.145276][ T1363] option from the mount to silence this warning. [ 56.145276][ T1363] ======================================================= [ 56.203826][ T369] Bluetooth: hci1: Frame reassembly failed (-84) [ 56.222322][ T36] audit: type=1400 audit(1794552995.150:210): avc: denied { setattr } for pid=1362 comm="syz.1.384" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.904970][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 56.997764][ T1373] syzkaller0: entered promiscuous mode [ 57.003289][ T1373] syzkaller0: entered allmulticast mode [ 57.057368][ T45] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.068400][ T45] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.082085][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.088886][ T45] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 57.098261][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.107172][ T45] usb 3-1: config 0 descriptor?? [ 57.722727][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 57.730328][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.743359][ T45] usb 3-1: USB disconnect, device number 5 [ 57.875378][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.875882][ T1365] Bluetooth: hci0: command 0x1003 tx timeout [ 58.105761][ T1396] syzkaller0: entered promiscuous mode [ 58.111342][ T1396] syzkaller0: entered allmulticast mode [ 58.171408][ T1400] FAULT_INJECTION: forcing a failure. [ 58.171408][ T1400] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.184774][ T1400] CPU: 1 UID: 0 PID: 1400 Comm: syz.0.398 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 58.184827][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.184843][ T1400] Call Trace: [ 58.184853][ T1400] [ 58.184863][ T1400] __dump_stack+0x21/0x30 [ 58.184899][ T1400] dump_stack_lvl+0x140/0x1c0 [ 58.184920][ T1400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.184942][ T1400] ? kernel_text_address+0xa9/0xe0 [ 58.184986][ T1400] ? unwind_get_return_address+0x51/0x90 [ 58.185024][ T1400] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 58.185056][ T1400] dump_stack+0x19/0x20 [ 58.185079][ T1400] should_fail_ex+0x3c2/0x510 [ 58.185109][ T1400] should_fail+0xf/0x20 [ 58.185133][ T1400] should_fail_usercopy+0x1e/0x30 [ 58.185160][ T1400] _copy_from_user+0x20/0xa0 [ 58.185195][ T1400] ___sys_recvmsg+0x174/0x590 [ 58.185236][ T1400] ? kstrtoull+0x13b/0x1e0 [ 58.185273][ T1400] ? __sys_recvmsg+0x260/0x260 [ 58.185314][ T1400] ? kstrtouint_from_user+0x117/0x170 [ 58.185350][ T1400] ? __x64_sys_openat+0x13a/0x170 [ 58.185393][ T1400] do_recvmmsg+0x328/0x790 [ 58.185436][ T1400] ? __sys_recvmmsg+0x2a0/0x2a0 [ 58.185475][ T1400] ? __cfi_vfs_write+0x10/0x10 [ 58.185521][ T1400] ? fput+0x1a4/0x230 [ 58.185552][ T1400] __x64_sys_recvmmsg+0x199/0x250 [ 58.185595][ T1400] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 58.185637][ T1400] ? __kasan_check_read+0x15/0x20 [ 58.185674][ T1400] x64_sys_call+0x292c/0x2ee0 [ 58.185707][ T1400] do_syscall_64+0x57/0xf0 [ 58.185734][ T1400] ? clear_bhb_loop+0x50/0xa0 [ 58.185775][ T1400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.185820][ T1400] RIP: 0033:0x7f20543a94d9 [ 58.185854][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.185878][ T1400] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 58.185907][ T1400] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 58.185927][ T1400] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000003 [ 58.185949][ T1400] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 58.185967][ T1400] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 58.185985][ T1400] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 58.186012][ T1400] [ 58.275161][ T352] Bluetooth: hci1: command 0x1003 tx timeout [ 58.277454][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 58.835436][ T1423] syzkaller0: entered promiscuous mode [ 58.841070][ T1423] syzkaller0: entered allmulticast mode [ 58.982359][ T36] audit: type=1400 audit(1794552997.910:211): avc: denied { create } for pid=1427 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.254995][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 59.406646][ T63] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.417798][ T63] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.431352][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.438039][ T63] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 59.447193][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.465188][ T63] usb 2-1: config 0 descriptor?? [ 59.495909][ T1447] syzkaller0: entered promiscuous mode [ 59.501531][ T1447] syzkaller0: entered allmulticast mode [ 60.074754][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 60.095012][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.103662][ T63] usb 2-1: USB disconnect, device number 9 [ 60.594934][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.595475][ T352] Bluetooth: hci0: command 0x1003 tx timeout [ 60.615691][ T1475] FAULT_INJECTION: forcing a failure. [ 60.615691][ T1475] name failslab, interval 1, probability 0, space 0, times 0 [ 60.628681][ T1475] CPU: 0 UID: 0 PID: 1475 Comm: syz.1.426 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 60.628716][ T1475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.628731][ T1475] Call Trace: [ 60.628739][ T1475] [ 60.628747][ T1475] __dump_stack+0x21/0x30 [ 60.628786][ T1475] dump_stack_lvl+0x140/0x1c0 [ 60.628807][ T1475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.628830][ T1475] dump_stack+0x19/0x20 [ 60.628850][ T1475] should_fail_ex+0x3c2/0x510 [ 60.628871][ T1475] should_failslab+0xac/0x100 [ 60.628895][ T1475] __kmalloc_node_noprof+0x69/0x500 [ 60.628928][ T1475] ? __kvmalloc_node_noprof+0x128/0x300 [ 60.628959][ T1475] ? __kasan_kmalloc+0x96/0xb0 [ 60.628983][ T1475] __kvmalloc_node_noprof+0x128/0x300 [ 60.629013][ T1475] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 60.629043][ T1475] ? __kvmalloc_node_noprof+0x173/0x300 [ 60.629074][ T1475] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 60.629104][ T1475] io_futex_cache_init+0x4e/0x1a0 [ 60.629129][ T1475] io_ring_ctx_alloc+0x762/0x1dc0 [ 60.629157][ T1475] io_uring_create+0x2e0/0x13f0 [ 60.629182][ T1475] ? __kasan_check_write+0x18/0x20 [ 60.629222][ T1475] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 60.629254][ T1475] ? __kasan_check_write+0x18/0x20 [ 60.629285][ T1475] ? __x64_sys_io_uring_setup+0x80/0x80 [ 60.629318][ T1475] ? __kasan_check_read+0x15/0x20 [ 60.629349][ T1475] __x64_sys_io_uring_setup+0x5f/0x80 [ 60.629379][ T1475] x64_sys_call+0x22c0/0x2ee0 [ 60.629403][ T1475] do_syscall_64+0x57/0xf0 [ 60.629426][ T1475] ? clear_bhb_loop+0x50/0xa0 [ 60.629457][ T1475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.629486][ T1475] RIP: 0033:0x7f55b19a94d9 [ 60.629505][ T1475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.629523][ T1475] RSP: 002b:00007f55b281cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 60.629547][ T1475] RAX: ffffffffffffffda RBX: 0000200000000408 RCX: 00007f55b19a94d9 [ 60.629564][ T1475] RDX: 0000200000000488 RSI: 0000200000000408 RDI: 00000000000003c9 [ 60.629579][ T1475] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 60.629594][ T1475] R10: 0000200000000490 R11: 0000000000000206 R12: 0000200000000488 [ 60.629609][ T1475] R13: 0000200000000490 R14: 00007f55b281cfd8 R15: 0000000000000000 [ 60.629627][ T1475] [ 60.898297][ T1488] syzkaller0: entered promiscuous mode [ 60.903905][ T1488] syzkaller0: entered allmulticast mode [ 61.095202][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.101864][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.284953][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 61.446129][ T45] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.467132][ T45] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.493601][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.505011][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 61.514266][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.523748][ T45] usb 4-1: config 0 descriptor?? [ 61.963078][ T1518] syzkaller0: entered promiscuous mode [ 61.968798][ T1518] syzkaller0: entered allmulticast mode [ 62.070299][ T36] audit: type=1400 audit(1794553001.000:212): avc: denied { name_bind } for pid=1519 comm="syz.1.441" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.111342][ T36] audit: type=1400 audit(1794553001.000:213): avc: denied { node_bind } for pid=1519 comm="syz.1.441" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.135147][ T36] audit: type=1400 audit(1794553001.020:214): avc: denied { mount } for pid=1519 comm="syz.1.441" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.137963][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 62.165994][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.175237][ T45] usb 4-1: USB disconnect, device number 6 [ 62.182379][ T36] audit: type=1400 audit(1794553001.110:215): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.330342][ T1530] netlink: 5 bytes leftover after parsing attributes in process `syz.2.445'. [ 62.339256][ T1530] 0ªî{X¹¦: renamed from gretap0 [ 62.345757][ T1530] 0ªî{X¹¦: entered allmulticast mode [ 62.351219][ T1530] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 62.382785][ T36] audit: type=1400 audit(1794553001.310:216): avc: denied { nlmsg_read } for pid=1534 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 62.448384][ T1540] syzkaller0: entered promiscuous mode [ 62.453902][ T1540] syzkaller0: entered allmulticast mode [ 63.154953][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.254969][ T300] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 63.404953][ T300] usb 4-1: device descriptor read/64, error -71 [ 63.582733][ T1567] syzkaller0: entered promiscuous mode [ 63.588629][ T1567] syzkaller0: entered allmulticast mode [ 63.655048][ T300] usb 4-1: device descriptor read/64, error -71 [ 63.767839][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 63.864970][ T312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 63.894972][ T300] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 64.016243][ T312] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.027436][ T300] usb 4-1: device descriptor read/64, error -71 [ 64.033817][ T312] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.047180][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.053957][ T312] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 64.063463][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.072850][ T312] usb 2-1: config 0 descriptor?? [ 64.078081][ T1507] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 64.166847][ T1592] kvm: pic: non byte read [ 64.171381][ T1592] kvm: pic: non byte read [ 64.176212][ T1592] kvm: pic: non byte read [ 64.180701][ T1592] kvm: pic: non byte read [ 64.185480][ T1592] kvm: pic: non byte read [ 64.305005][ T300] usb 4-1: device descriptor read/64, error -71 [ 64.435157][ T300] usb usb4-port1: attempt power cycle [ 64.697651][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 64.706676][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.728821][ T312] usb 2-1: USB disconnect, device number 10 [ 64.755601][ T1600] FAULT_INJECTION: forcing a failure. [ 64.755601][ T1600] name failslab, interval 1, probability 0, space 0, times 0 [ 64.768445][ T1600] CPU: 0 UID: 0 PID: 1600 Comm: syz.2.470 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 64.768482][ T1600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.768502][ T1600] Call Trace: [ 64.768511][ T1600] [ 64.768521][ T1600] __dump_stack+0x21/0x30 [ 64.768554][ T1600] dump_stack_lvl+0x140/0x1c0 [ 64.768580][ T1600] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.768606][ T1600] dump_stack+0x19/0x20 [ 64.768642][ T1600] should_fail_ex+0x3c2/0x510 [ 64.768667][ T1600] should_failslab+0xac/0x100 [ 64.768701][ T1600] __kmalloc_cache_node_noprof+0x46/0x430 [ 64.768744][ T1600] ? __get_vm_area_node+0x150/0x390 [ 64.768779][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 64.768817][ T1600] ? __kasan_slab_alloc+0x73/0x90 [ 64.768844][ T1600] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 64.768888][ T1600] __get_vm_area_node+0x150/0x390 [ 64.768923][ T1600] __vmalloc_node_range_noprof+0x340/0x1300 [ 64.768963][ T1600] ? copy_process+0x579/0x33a0 [ 64.769008][ T1600] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.769046][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 64.769085][ T1600] ? __kasan_slab_alloc+0x73/0x90 [ 64.769114][ T1600] ? arch_dup_task_struct+0x5b/0xe0 [ 64.769144][ T1600] ? __asan_memcpy+0x5a/0x80 [ 64.769183][ T1600] dup_task_struct+0x5d6/0xd80 [ 64.769221][ T1600] ? copy_process+0x579/0x33a0 [ 64.769261][ T1600] ? _raw_spin_lock_irq+0x93/0x120 [ 64.769289][ T1600] ? copy_process+0x33a0/0x33a0 [ 64.769330][ T1600] ? __kasan_check_write+0x18/0x20 [ 64.769370][ T1600] copy_process+0x579/0x33a0 [ 64.769411][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 64.769445][ T1600] ? __cfi_copy_process+0x10/0x10 [ 64.769483][ T1600] ? __kmalloc_cache_noprof+0x23c/0x470 [ 64.769523][ T1600] ? __kasan_check_write+0x18/0x20 [ 64.769564][ T1600] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 64.769602][ T1600] vhost_task_create+0x1f7/0x3f0 [ 64.769644][ T1600] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 64.769684][ T1600] ? __cfi_vhost_task_create+0x10/0x10 [ 64.769718][ T1600] ? __cfi_vhost_task_fn+0x10/0x10 [ 64.769754][ T1600] ? __kasan_check_write+0x18/0x20 [ 64.769793][ T1600] ? mutex_lock+0x97/0x1d0 [ 64.769827][ T1600] ? __cfi_mutex_lock+0x10/0x10 [ 64.769863][ T1600] ? kernel_text_address+0xa9/0xe0 [ 64.769904][ T1600] kvm_mmu_post_init_vm+0x161/0x300 [ 64.769936][ T1600] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 64.769977][ T1600] ? _parse_integer_limit+0x195/0x1e0 [ 64.770018][ T1600] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 64.770063][ T1600] ? kstrtoull+0x13b/0x1e0 [ 64.770098][ T1600] ? kstrtouint+0x78/0xf0 [ 64.770137][ T1600] ? ioctl_has_perm+0x1bc/0x500 [ 64.770161][ T1600] ? __asan_memcpy+0x5a/0x80 [ 64.770207][ T1600] ? ioctl_has_perm+0x408/0x500 [ 64.770230][ T1600] ? has_cap_mac_admin+0xd0/0xd0 [ 64.770258][ T1600] ? __kasan_check_write+0x18/0x20 [ 64.770294][ T1600] ? mutex_lock_killable+0x97/0x1d0 [ 64.770333][ T1600] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.770371][ T1600] ? proc_fail_nth_write+0x184/0x220 [ 64.770407][ T1600] kvm_vcpu_ioctl+0xa43/0x1000 [ 64.770443][ T1600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 64.770471][ T1600] ? hook_file_ioctl+0x1ef/0x590 [ 64.770509][ T1600] ? __cfi_vfs_write+0x10/0x10 [ 64.770546][ T1600] ? __cfi_hook_file_ioctl+0x10/0x10 [ 64.770579][ T1600] ? __kasan_check_write+0x18/0x20 [ 64.770619][ T1600] ? mutex_unlock+0x90/0x240 [ 64.770663][ T1600] ? __cfi_mutex_unlock+0x10/0x10 [ 64.770700][ T1600] ? __fget_files+0x2bc/0x330 [ 64.770732][ T1600] ? bpf_lsm_file_ioctl+0xd/0x20 [ 64.770762][ T1600] ? security_file_ioctl+0x3e/0x110 [ 64.770804][ T1600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 64.770832][ T1600] __se_sys_ioctl+0x123/0x1b0 [ 64.770866][ T1600] __x64_sys_ioctl+0x7f/0xa0 [ 64.770894][ T1600] x64_sys_call+0x1878/0x2ee0 [ 64.770927][ T1600] do_syscall_64+0x57/0xf0 [ 64.770953][ T1600] ? clear_bhb_loop+0x50/0xa0 [ 64.770994][ T1600] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.771036][ T1600] RIP: 0033:0x7f9bfbda94d9 [ 64.771059][ T1600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.771081][ T1600] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.771115][ T1600] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 64.771135][ T1600] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 64.771153][ T1600] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 64.771176][ T1600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.771193][ T1600] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 64.771216][ T1600] [ 64.771230][ T1600] syz.2.470: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 64.808430][ T300] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 64.813861][ T1600] ,cpuset= [ 64.856748][ T300] usb 4-1: device descriptor read/8, error -71 [ 64.859958][ T1600] syz2 [ 65.016818][ T300] usb 4-1: device descriptor read/8, error -71 [ 65.020418][ T1600] ,mems_allowed=0 [ 65.265022][ T300] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 65.267880][ T1600] [ 65.286322][ T1600] CPU: 0 UID: 0 PID: 1600 Comm: syz.2.470 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 65.286363][ T1600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 65.286379][ T1600] Call Trace: [ 65.286387][ T1600] [ 65.286398][ T1600] __dump_stack+0x21/0x30 [ 65.286429][ T1600] dump_stack_lvl+0x140/0x1c0 [ 65.286452][ T1600] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.286484][ T1600] dump_stack+0x19/0x20 [ 65.286508][ T1600] warn_alloc+0x1e7/0x2c0 [ 65.286545][ T1600] ? __kasan_kmalloc+0x28/0xb0 [ 65.286573][ T1600] ? __cfi_warn_alloc+0x10/0x10 [ 65.286618][ T1600] ? __get_vm_area_node+0x150/0x390 [ 65.286659][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 65.286696][ T1600] ? __get_vm_area_node+0x382/0x390 [ 65.286734][ T1600] __vmalloc_node_range_noprof+0x365/0x1300 [ 65.286788][ T1600] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 65.286826][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 65.286867][ T1600] ? __kasan_slab_alloc+0x73/0x90 [ 65.286894][ T1600] ? arch_dup_task_struct+0x5b/0xe0 [ 65.286927][ T1600] ? __asan_memcpy+0x5a/0x80 [ 65.286966][ T1600] dup_task_struct+0x5d6/0xd80 [ 65.287005][ T1600] ? copy_process+0x579/0x33a0 [ 65.287045][ T1600] ? _raw_spin_lock_irq+0x93/0x120 [ 65.287074][ T1600] ? copy_process+0x33a0/0x33a0 [ 65.287114][ T1600] ? __kasan_check_write+0x18/0x20 [ 65.287152][ T1600] copy_process+0x579/0x33a0 [ 65.287198][ T1600] ? kasan_save_alloc_info+0x3a/0x50 [ 65.287237][ T1600] ? __cfi_copy_process+0x10/0x10 [ 65.287273][ T1600] ? __kmalloc_cache_noprof+0x23c/0x470 [ 65.287319][ T1600] ? __kasan_check_write+0x18/0x20 [ 65.287360][ T1600] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 65.287396][ T1600] vhost_task_create+0x1f7/0x3f0 [ 65.287432][ T1600] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 65.287471][ T1600] ? __cfi_vhost_task_create+0x10/0x10 [ 65.287507][ T1600] ? __cfi_vhost_task_fn+0x10/0x10 [ 65.287542][ T1600] ? __kasan_check_write+0x18/0x20 [ 65.287590][ T1600] ? mutex_lock+0x97/0x1d0 [ 65.287627][ T1600] ? __cfi_mutex_lock+0x10/0x10 [ 65.287663][ T1600] ? kernel_text_address+0xa9/0xe0 [ 65.287704][ T1600] kvm_mmu_post_init_vm+0x161/0x300 [ 65.287737][ T1600] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 65.287774][ T1600] ? _parse_integer_limit+0x195/0x1e0 [ 65.287819][ T1600] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 65.287861][ T1600] ? kstrtoull+0x13b/0x1e0 [ 65.287898][ T1600] ? kstrtouint+0x78/0xf0 [ 65.287938][ T1600] ? ioctl_has_perm+0x1bc/0x500 [ 65.287962][ T1600] ? __asan_memcpy+0x5a/0x80 [ 65.288004][ T1600] ? ioctl_has_perm+0x408/0x500 [ 65.288027][ T1600] ? has_cap_mac_admin+0xd0/0xd0 [ 65.288057][ T1600] ? __kasan_check_write+0x18/0x20 [ 65.288230][ T1600] ? mutex_lock_killable+0x97/0x1d0 [ 65.288272][ T1600] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.288308][ T1600] ? proc_fail_nth_write+0x184/0x220 [ 65.288348][ T1600] kvm_vcpu_ioctl+0xa43/0x1000 [ 65.288383][ T1600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.288414][ T1600] ? hook_file_ioctl+0x1ef/0x590 [ 65.288452][ T1600] ? __cfi_vfs_write+0x10/0x10 [ 65.288492][ T1600] ? __cfi_hook_file_ioctl+0x10/0x10 [ 65.288531][ T1600] ? __kasan_check_write+0x18/0x20 [ 65.288568][ T1600] ? mutex_unlock+0x90/0x240 [ 65.288605][ T1600] ? __cfi_mutex_unlock+0x10/0x10 [ 65.288644][ T1600] ? __fget_files+0x2bc/0x330 [ 65.288691][ T1600] ? bpf_lsm_file_ioctl+0xd/0x20 [ 65.288724][ T1600] ? security_file_ioctl+0x3e/0x110 [ 65.288765][ T1600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.288797][ T1600] __se_sys_ioctl+0x123/0x1b0 [ 65.288828][ T1600] __x64_sys_ioctl+0x7f/0xa0 [ 65.288858][ T1600] x64_sys_call+0x1878/0x2ee0 [ 65.288887][ T1600] do_syscall_64+0x57/0xf0 [ 65.288919][ T1600] ? clear_bhb_loop+0x50/0xa0 [ 65.288959][ T1600] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.288993][ T1600] RIP: 0033:0x7f9bfbda94d9 [ 65.289018][ T1600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.289043][ T1600] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.289070][ T1600] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 65.289096][ T1600] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 65.289115][ T1600] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 65.289133][ T1600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.289154][ T1600] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 65.289172][ T1600] [ 65.289191][ T1600] Mem-Info: [ 65.316708][ T300] usb 4-1: device descriptor read/8, error -71 [ 65.333679][ T1600] active_anon:6755 inactive_anon:0 isolated_anon:0 [ 65.333679][ T1600] active_file:6160 inactive_file:2316 isolated_file:0 [ 65.333679][ T1600] unevictable:0 dirty:89 writeback:0 [ 65.333679][ T1600] slab_reclaimable:6356 slab_unreclaimable:69317 [ 65.333679][ T1600] mapped:24459 shmem:163 pagetables:857 [ 65.333679][ T1600] sec_pagetables:6 bounce:0 [ 65.333679][ T1600] kernel_misc_reclaimable:0 [ 65.333679][ T1600] free:1540741 free_pcp:2300 free_cma:0 [ 65.486492][ T300] usb 4-1: device descriptor read/8, error -71 [ 65.488954][ T1600] Node 0 active_anon:27020kB inactive_anon:0kB active_file:24640kB inactive_file:9264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97836kB dirty:356kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4668kB pagetables:3428kB sec_pagetables:24kB all_unreclaimable? no [ 65.605623][ T300] usb usb4-port1: unable to enumerate USB device [ 65.610294][ T1600] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:68kB free_cma:0kB [ 65.781160][ T1602] syzkaller0: entered promiscuous mode [ 65.789357][ T1600] lowmem_reserve[]: [ 65.815153][ T1602] syzkaller0: entered allmulticast mode [ 65.827999][ T1600] 0 3920 3920 [ 65.884055][ T1600] Normal free:3205992kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27020kB inactive_anon:0kB active_file:24640kB inactive_file:9264kB unevictable:0kB writepending:356kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4948kB local_pcp:3928kB free_cma:0kB [ 65.916937][ T1600] lowmem_reserve[]: 0 0 0 [ 65.921318][ T1600] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 65.936915][ T1600] Normal: 499*4kB (UME) 196*8kB (UME) 340*16kB (UME) 117*32kB (UME) 38*64kB (UME) 19*128kB (UME) 49*256kB (UM) 22*512kB (UME) 10*1024kB (M) 3*2048kB (M) 771*4096kB (M) = 3215820kB [ 65.954972][ T1600] 8635 total pagecache pages [ 65.959589][ T1600] 0 pages in swap cache [ 65.963739][ T1600] Free swap = 124996kB [ 65.967934][ T1600] Total swap = 124996kB [ 65.972105][ T1600] 2097051 pages RAM [ 65.975956][ T1600] 0 pages HighMem/MovableOnly [ 65.980656][ T1600] 354592 pages reserved [ 65.984804][ T1600] 0 pages cma reserved [ 65.990940][ T1600] Memory allocations: [ 65.994978][ T1600] 0 B 0 init/main.c:1477 func:do_initcalls [ 66.002198][ T1600] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 66.010427][ T1600] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 66.018141][ T1600] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 66.026385][ T1600] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 66.034332][ T1600] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 66.043301][ T1600] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 66.051531][ T1600] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 66.061978][ T1600] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 66.070316][ T1600] 0 B 0 init/initramfs.c:101 func:find_link [ 66.129476][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.182019][ T1620] FAULT_INJECTION: forcing a failure. [ 66.182019][ T1620] name failslab, interval 1, probability 0, space 0, times 0 [ 66.185698][ T1618] kvm: pic: non byte read [ 66.195292][ T1620] CPU: 1 UID: 0 PID: 1620 Comm: syz.3.478 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 66.195385][ T1620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 66.195420][ T1620] Call Trace: [ 66.195441][ T1620] [ 66.195462][ T1620] __dump_stack+0x21/0x30 [ 66.195541][ T1620] dump_stack_lvl+0x140/0x1c0 [ 66.195589][ T1620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.195650][ T1620] ? __kasan_check_write+0x18/0x20 [ 66.195736][ T1620] ? copy_mm+0x307/0x1da0 [ 66.195823][ T1620] dump_stack+0x19/0x20 [ 66.195881][ T1620] should_fail_ex+0x3c2/0x510 [ 66.195945][ T1620] should_failslab+0xac/0x100 [ 66.196008][ T1620] kmem_cache_alloc_noprof+0x42/0x410 [ 66.196103][ T1620] ? alloc_pid+0xa5/0xb80 [ 66.196177][ T1620] ? __asan_memcpy+0x5a/0x80 [ 66.196289][ T1620] alloc_pid+0xa5/0xb80 [ 66.196379][ T1620] copy_process+0x1494/0x33a0 [ 66.196467][ T1620] ? __cfi_copy_process+0x10/0x10 [ 66.196548][ T1620] ? __kmalloc_cache_noprof+0x23c/0x470 [ 66.196656][ T1620] ? __kasan_check_write+0x18/0x20 [ 66.196742][ T1620] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 66.196811][ T1620] vhost_task_create+0x1f7/0x3f0 [ 66.196884][ T1620] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 66.196969][ T1620] ? __cfi_vhost_task_create+0x10/0x10 [ 66.197043][ T1620] ? __cfi_vhost_task_fn+0x10/0x10 [ 66.197126][ T1620] ? __kasan_check_write+0x18/0x20 [ 66.197209][ T1620] ? mutex_lock+0x97/0x1d0 [ 66.197292][ T1620] ? __cfi_mutex_lock+0x10/0x10 [ 66.197359][ T1620] ? kernel_text_address+0xa9/0xe0 [ 66.197460][ T1620] kvm_mmu_post_init_vm+0x161/0x300 [ 66.197515][ T1620] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 66.197611][ T1620] ? _parse_integer_limit+0x195/0x1e0 [ 66.197697][ T1620] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 66.197807][ T1620] ? kstrtoull+0x13b/0x1e0 [ 66.197918][ T1620] ? kstrtouint+0x78/0xf0 [ 66.198002][ T1620] ? ioctl_has_perm+0x1bc/0x500 [ 66.198083][ T1620] ? __asan_memcpy+0x5a/0x80 [ 66.198155][ T1620] ? ioctl_has_perm+0x408/0x500 [ 66.198209][ T1620] ? has_cap_mac_admin+0xd0/0xd0 [ 66.198264][ T1620] ? __kasan_check_write+0x18/0x20 [ 66.198349][ T1620] ? mutex_lock_killable+0x97/0x1d0 [ 66.198425][ T1620] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.198508][ T1620] ? proc_fail_nth_write+0x184/0x220 [ 66.198581][ T1620] kvm_vcpu_ioctl+0xa43/0x1000 [ 66.198663][ T1620] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.198720][ T1620] ? hook_file_ioctl+0x1ef/0x590 [ 66.198803][ T1620] ? __cfi_vfs_write+0x10/0x10 [ 66.198889][ T1620] ? __cfi_hook_file_ioctl+0x10/0x10 [ 66.198971][ T1620] ? __kasan_check_write+0x18/0x20 [ 66.199075][ T1620] ? mutex_unlock+0x90/0x240 [ 66.199158][ T1620] ? __cfi_mutex_unlock+0x10/0x10 [ 66.199235][ T1620] ? __fget_files+0x2bc/0x330 [ 66.199306][ T1620] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.199346][ T1620] ? security_file_ioctl+0x3e/0x110 [ 66.199378][ T1620] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.199402][ T1620] __se_sys_ioctl+0x123/0x1b0 [ 66.199425][ T1620] __x64_sys_ioctl+0x7f/0xa0 [ 66.199489][ T1620] x64_sys_call+0x1878/0x2ee0 [ 66.199570][ T1620] do_syscall_64+0x57/0xf0 [ 66.199648][ T1620] ? clear_bhb_loop+0x50/0xa0 [ 66.199727][ T1620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.199804][ T1620] RIP: 0033:0x7f06d01a94d9 [ 66.199857][ T1620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.199909][ T1620] RSP: 002b:00007f06d113c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.199974][ T1620] RAX: ffffffffffffffda RBX: 00007f06d0425fa0 RCX: 00007f06d01a94d9 [ 66.200026][ T1620] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 66.200070][ T1620] RBP: 00007f06d113c090 R08: 0000000000000000 R09: 0000000000000000 [ 66.200112][ T1620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.200146][ T1620] R13: 00007f06d0426038 R14: 00007f06d0425fa0 R15: 00007ffec8040288 [ 66.200193][ T1620] [ 66.345015][ T343] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 66.349071][ T1618] kvm: pic: non byte read [ 66.516764][ T343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.520979][ T1618] kvm: pic: non byte read [ 66.540244][ T343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.548309][ T1618] kvm: pic: non byte read [ 66.559733][ T343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.562930][ T1618] kvm: pic: non byte read [ 66.571737][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.651009][ T343] usb 1-1: Product: syz [ 66.655279][ T343] usb 1-1: Manufacturer: syz [ 66.664805][ T343] usb 1-1: SerialNumber: syz [ 66.878431][ T343] usb 1-1: 0:2 : does not exist [ 66.885012][ T343] usb 1-1: unit 9 not found! [ 66.894045][ T343] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 66.909964][ T343] usb 1-1: USB disconnect, device number 4 [ 66.984951][ T63] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 67.136132][ T63] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.164968][ T63] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.178016][ T63] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.184682][ T63] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 67.194080][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.205184][ T63] usb 3-1: config 0 descriptor?? [ 67.468187][ T1634] syzkaller0: entered promiscuous mode [ 67.473880][ T1634] syzkaller0: entered allmulticast mode [ 67.815915][ T63] usbhid 3-1:0.0: can't add hid device: -71 [ 67.829840][ T63] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 67.850735][ T63] usb 3-1: USB disconnect, device number 6 [ 68.042923][ T36] audit: type=1400 audit(1794553006.970:217): avc: denied { mount } for pid=1651 comm="syz.3.489" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.065425][ T1652] syz_tun: entered allmulticast mode [ 68.084936][ T36] audit: type=1400 audit(1794553007.000:218): avc: denied { ioctl } for pid=1651 comm="syz.3.489" path="socket:[30044]" dev="sockfs" ino=30044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.114360][ T36] audit: type=1400 audit(1794553007.000:219): avc: denied { bind } for pid=1651 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.140347][ T36] audit: type=1400 audit(1794553007.070:220): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.194953][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 68.201154][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.410941][ T1658] syzkaller0: entered promiscuous mode [ 68.418397][ T1658] syzkaller0: entered allmulticast mode [ 68.874970][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.054953][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 69.065736][ T63] usb 1-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 69.084960][ T63] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.114949][ T63] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.123240][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.124263][ T1615] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 69.132639][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.146727][ T63] usb 1-1: Product: syz [ 69.151023][ T63] usb 1-1: Manufacturer: syz [ 69.155920][ T63] usb 1-1: SerialNumber: syz [ 69.205063][ T36] audit: type=1400 audit(1794553008.130:221): avc: denied { read write } for pid=1671 comm="syz.2.498" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.240224][ T1670] picdev_read: 5 callbacks suppressed [ 69.240271][ T1670] kvm: pic: non byte read [ 69.245398][ T36] audit: type=1400 audit(1794553008.130:222): avc: denied { open } for pid=1671 comm="syz.2.498" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.257623][ T1670] kvm: pic: non byte read [ 69.307112][ T1670] kvm: pic: non byte read [ 69.311524][ T1670] kvm: pic: non byte read [ 69.316659][ T1670] kvm: pic: non byte read [ 69.368992][ T63] cdc_ether 1-1:1.0: skipping garbage [ 69.374674][ T63] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 69.385310][ T63] usb 1-1: USB disconnect, device number 5 [ 69.454001][ T1680] syzkaller0: entered promiscuous mode [ 69.459565][ T1680] syzkaller0: entered allmulticast mode [ 69.501932][ T1684] netlink: 37 bytes leftover after parsing attributes in process `syz.1.503'. [ 69.512215][ T1685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.522470][ T1685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.534976][ T343] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 69.686226][ T343] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.697467][ T343] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.710798][ T343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.717774][ T343] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 69.727297][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.737567][ T343] usb 3-1: config 0 descriptor?? [ 69.744940][ T459] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 69.916085][ T459] usb 2-1: config 5 has an invalid interface number: 67 but max is 0 [ 69.923538][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.924227][ T459] usb 2-1: config 5 has no interface number 0 [ 69.924286][ T459] usb 2-1: config 5 interface 67 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 69.974950][ T459] usb 2-1: config 5 interface 67 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 69.996558][ T459] usb 2-1: New USB device found, idVendor=12ab, idProduct=390e, bcdDevice=90.9c [ 70.014946][ T459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.022994][ T459] usb 2-1: Product: syz [ 70.044961][ T459] usb 2-1: Manufacturer: syz [ 70.049639][ T459] usb 2-1: SerialNumber: syz [ 70.270477][ T459] usb 2-1: USB disconnect, device number 11 [ 70.352992][ T343] usbhid 3-1:0.0: can't add hid device: -71 [ 70.362720][ T343] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 70.374027][ T343] usb 3-1: USB disconnect, device number 7 [ 70.501548][ T36] audit: type=1400 audit(1794553009.430:223): avc: denied { create } for pid=1696 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.521297][ T36] audit: type=1400 audit(1794553009.430:224): avc: denied { write } for pid=1696 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.545863][ T36] audit: type=1400 audit(1794553009.480:225): avc: denied { create } for pid=1696 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.550099][ T1697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=1697 comm=syz.3.507 [ 70.566734][ T36] audit: type=1400 audit(1794553009.480:226): avc: denied { write } for pid=1696 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.649721][ T1700] Zero length message leads to an empty skb [ 70.787286][ T1705] kvm: pic: non byte read [ 70.791688][ T1705] kvm: pic: non byte read [ 70.796474][ T1705] kvm: pic: non byte read [ 70.800850][ T1705] kvm: pic: non byte read [ 70.805461][ T1705] kvm: pic: non byte read [ 70.906754][ T1711] syzkaller0: entered promiscuous mode [ 70.912484][ T1711] syzkaller0: entered allmulticast mode [ 70.967799][ T1718] kvm: user requested TSC rate below hardware speed [ 71.061479][ T1724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 71.077072][ T1725] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 71.100712][ T1729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1729 comm=syz.1.519 [ 71.338318][ T1740] syzkaller0: entered promiscuous mode [ 71.343943][ T1740] syzkaller0: entered allmulticast mode [ 71.385028][ T63] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 71.546667][ T63] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.564958][ T63] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.584980][ T63] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.591710][ T63] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 71.600856][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.615556][ T63] usb 2-1: config 0 descriptor?? [ 71.954970][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.963603][ T1694] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 72.033984][ T1766] syzkaller0: entered promiscuous mode [ 72.039652][ T1766] syzkaller0: entered allmulticast mode [ 72.133173][ T1776] WARNING! power/level is deprecated; use power/control instead [ 72.230069][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 72.236785][ T1786] overlayfs: disabling nfs_export due to verity=on [ 72.243977][ T1786] overlayfs: upper fs does not support file handles, falling back to index=off. [ 72.253114][ T63] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.262554][ T63] usb 2-1: USB disconnect, device number 12 [ 72.340976][ T1790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 72.806833][ T1806] FAULT_INJECTION: forcing a failure. [ 72.806833][ T1806] name failslab, interval 1, probability 0, space 0, times 0 [ 72.831861][ T1806] CPU: 1 UID: 0 PID: 1806 Comm: syz.0.548 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 72.831897][ T1806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 72.831913][ T1806] Call Trace: [ 72.831920][ T1806] [ 72.831929][ T1806] __dump_stack+0x21/0x30 [ 72.831955][ T1806] dump_stack_lvl+0x140/0x1c0 [ 72.831976][ T1806] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.831997][ T1806] ? __asan_set_shadow_00+0x12/0x20 [ 72.832027][ T1806] ? do_vfs_ioctl+0x1824/0x2010 [ 72.832053][ T1806] dump_stack+0x19/0x20 [ 72.832072][ T1806] should_fail_ex+0x3c2/0x510 [ 72.832095][ T1806] should_failslab+0xac/0x100 [ 72.832119][ T1806] __kmalloc_cache_noprof+0x41/0x470 [ 72.832159][ T1806] ? bus_add_driver+0x18c/0x730 [ 72.832184][ T1806] bus_add_driver+0x18c/0x730 [ 72.832205][ T1806] ? driver_find+0x19f/0x1b0 [ 72.832230][ T1806] driver_register+0x2b7/0x3c0 [ 72.832262][ T1806] usb_gadget_register_driver_owner+0xfc/0x270 [ 72.832298][ T1806] raw_ioctl+0x144c/0x37a0 [ 72.832338][ T1806] ? __cfi_raw_ioctl+0x10/0x10 [ 72.832366][ T1806] ? selinux_file_ioctl+0x732/0x1480 [ 72.832402][ T1806] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 72.832434][ T1806] ? hook_file_ioctl+0x1ef/0x590 [ 72.832464][ T1806] ? __cfi_hook_file_ioctl+0x10/0x10 [ 72.832496][ T1806] ? __fget_files+0x2bc/0x330 [ 72.832520][ T1806] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.832544][ T1806] ? security_file_ioctl+0x3e/0x110 [ 72.832577][ T1806] ? __cfi_raw_ioctl+0x10/0x10 [ 72.832604][ T1806] __se_sys_ioctl+0x123/0x1b0 [ 72.832627][ T1806] __x64_sys_ioctl+0x7f/0xa0 [ 72.832652][ T1806] x64_sys_call+0x1878/0x2ee0 [ 72.832675][ T1806] do_syscall_64+0x57/0xf0 [ 72.832699][ T1806] ? clear_bhb_loop+0x50/0xa0 [ 72.832730][ T1806] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.832759][ T1806] RIP: 0033:0x7f20543a916b [ 72.832778][ T1806] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 72.832797][ T1806] RSP: 002b:00007f205527bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.832822][ T1806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f20543a916b [ 72.832839][ T1806] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 72.832853][ T1806] RBP: 00007f205527cfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 72.832868][ T1806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.832882][ T1806] R13: 0000200000000540 R14: 0000000000000003 R15: 0000000000000000 [ 72.832900][ T1806] [ 72.833079][ T1806] UDC core: USB Raw Gadget: driver registration failed: -12 [ 73.093897][ T1806] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 73.392612][ T1813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1813 comm=syz.3.550 [ 73.645094][ T1819] FAULT_INJECTION: forcing a failure. [ 73.645094][ T1819] name failslab, interval 1, probability 0, space 0, times 0 [ 73.658063][ T1819] CPU: 1 UID: 0 PID: 1819 Comm: syz.0.552 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 73.658106][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 73.658128][ T1819] Call Trace: [ 73.658137][ T1819] [ 73.658148][ T1819] __dump_stack+0x21/0x30 [ 73.658183][ T1819] dump_stack_lvl+0x140/0x1c0 [ 73.658214][ T1819] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.658256][ T1819] dump_stack+0x19/0x20 [ 73.658285][ T1819] should_fail_ex+0x3c2/0x510 [ 73.658315][ T1819] should_failslab+0xac/0x100 [ 73.658347][ T1819] __kmalloc_cache_node_noprof+0x46/0x430 [ 73.658395][ T1819] ? __get_vm_area_node+0x150/0x390 [ 73.658435][ T1819] ? kasan_save_alloc_info+0x3a/0x50 [ 73.658475][ T1819] ? __kasan_slab_alloc+0x73/0x90 [ 73.658507][ T1819] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 73.658553][ T1819] __get_vm_area_node+0x150/0x390 [ 73.658593][ T1819] __vmalloc_node_range_noprof+0x340/0x1300 [ 73.658634][ T1819] ? copy_process+0x579/0x33a0 [ 73.658680][ T1819] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 73.658722][ T1819] ? kasan_save_alloc_info+0x3a/0x50 [ 73.658762][ T1819] ? __kasan_slab_alloc+0x73/0x90 [ 73.658796][ T1819] ? arch_dup_task_struct+0x5b/0xe0 [ 73.658828][ T1819] ? __asan_memcpy+0x5a/0x80 [ 73.658871][ T1819] dup_task_struct+0x5d6/0xd80 [ 73.658912][ T1819] ? copy_process+0x579/0x33a0 [ 73.658952][ T1819] ? _raw_spin_lock_irq+0x93/0x120 [ 73.658986][ T1819] ? copy_process+0x33a0/0x33a0 [ 73.659028][ T1819] ? __kasan_check_write+0x18/0x20 [ 73.659075][ T1819] copy_process+0x579/0x33a0 [ 73.659120][ T1819] ? kasan_save_alloc_info+0x3a/0x50 [ 73.659160][ T1819] ? __cfi_copy_process+0x10/0x10 [ 73.659201][ T1819] ? __kmalloc_cache_noprof+0x23c/0x470 [ 73.659255][ T1819] ? __kasan_check_write+0x18/0x20 [ 73.659297][ T1819] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 73.659337][ T1819] vhost_task_create+0x1f7/0x3f0 [ 73.659375][ T1819] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 73.659416][ T1819] ? __cfi_vhost_task_create+0x10/0x10 [ 73.659454][ T1819] ? __cfi_vhost_task_fn+0x10/0x10 [ 73.659491][ T1819] ? __kasan_check_write+0x18/0x20 [ 73.659533][ T1819] ? mutex_lock+0x97/0x1d0 [ 73.659571][ T1819] ? __cfi_mutex_lock+0x10/0x10 [ 73.659608][ T1819] ? kernel_text_address+0xa9/0xe0 [ 73.659654][ T1819] kvm_mmu_post_init_vm+0x161/0x300 [ 73.659686][ T1819] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 73.659730][ T1819] ? _parse_integer_limit+0x195/0x1e0 [ 73.659775][ T1819] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 73.659819][ T1819] ? kstrtoull+0x13b/0x1e0 [ 73.659861][ T1819] ? kstrtouint+0x78/0xf0 [ 73.659902][ T1819] ? ioctl_has_perm+0x1bc/0x500 [ 73.659932][ T1819] ? __asan_memcpy+0x5a/0x80 [ 73.659972][ T1819] ? ioctl_has_perm+0x408/0x500 [ 73.660001][ T1819] ? has_cap_mac_admin+0xd0/0xd0 [ 73.660028][ T1819] ? __kasan_check_write+0x18/0x20 [ 73.660069][ T1819] ? mutex_lock_killable+0x97/0x1d0 [ 73.660110][ T1819] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.660148][ T1819] ? proc_fail_nth_write+0x184/0x220 [ 73.660197][ T1819] kvm_vcpu_ioctl+0xa43/0x1000 [ 73.660239][ T1819] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.660272][ T1819] ? hook_file_ioctl+0x1ef/0x590 [ 73.660312][ T1819] ? __cfi_vfs_write+0x10/0x10 [ 73.660355][ T1819] ? __cfi_hook_file_ioctl+0x10/0x10 [ 73.660394][ T1819] ? __kasan_check_write+0x18/0x20 [ 73.660435][ T1819] ? mutex_unlock+0x90/0x240 [ 73.660473][ T1819] ? __cfi_mutex_unlock+0x10/0x10 [ 73.660514][ T1819] ? __fget_files+0x2bc/0x330 [ 73.660547][ T1819] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.660581][ T1819] ? security_file_ioctl+0x3e/0x110 [ 73.660623][ T1819] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.660656][ T1819] __se_sys_ioctl+0x123/0x1b0 [ 73.660687][ T1819] __x64_sys_ioctl+0x7f/0xa0 [ 73.660719][ T1819] x64_sys_call+0x1878/0x2ee0 [ 73.660751][ T1819] do_syscall_64+0x57/0xf0 [ 73.660783][ T1819] ? clear_bhb_loop+0x50/0xa0 [ 73.660824][ T1819] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.660863][ T1819] RIP: 0033:0x7f20543a94d9 [ 73.660889][ T1819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.660914][ T1819] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.660946][ T1819] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 73.660971][ T1819] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 73.660989][ T1819] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.661012][ T1819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.661029][ T1819] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 73.661057][ T1819] [ 73.665071][ T63] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 74.194996][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 74.201119][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.239651][ T1829] input: syz1 as /devices/virtual/input/input10 [ 74.247588][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 74.247607][ T36] audit: type=1400 audit(1794553013.180:235): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.276327][ T36] audit: type=1400 audit(1794553013.180:236): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.285066][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 74.300070][ T36] audit: type=1400 audit(1794553013.180:237): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=495 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.331065][ T63] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.350802][ T63] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.361028][ T63] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 74.374353][ T63] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.381286][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.390730][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.400126][ T63] usb 4-1: config 0 descriptor?? [ 74.461552][ T1839] FAULT_INJECTION: forcing a failure. [ 74.461552][ T1839] name failslab, interval 1, probability 0, space 0, times 0 [ 74.474948][ T1839] CPU: 1 UID: 0 PID: 1839 Comm: syz.1.560 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 74.474972][ T451] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 74.474985][ T1839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 74.475000][ T1839] Call Trace: [ 74.475008][ T1839] [ 74.475016][ T1839] __dump_stack+0x21/0x30 [ 74.475117][ T1839] dump_stack_lvl+0x140/0x1c0 [ 74.475208][ T1839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.475271][ T1839] dump_stack+0x19/0x20 [ 74.475323][ T1839] should_fail_ex+0x3c2/0x510 [ 74.475377][ T1839] ? ext4_find_extent+0x1f5/0xd80 [ 74.475460][ T1839] should_failslab+0xac/0x100 [ 74.475524][ T1839] __kmalloc_noprof+0x69/0x510 [ 74.475616][ T1839] ? irqentry_exit+0x4a/0x60 [ 74.475688][ T1839] ? ext4_find_extent+0x1f5/0xd80 [ 74.475763][ T1839] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 74.475853][ T1839] ext4_find_extent+0x1f5/0xd80 [ 74.475929][ T1839] ext4_ext_map_blocks+0x212/0x6080 [ 74.476022][ T1839] ? __kasan_check_write+0x18/0x20 [ 74.476106][ T1839] ? _raw_read_unlock+0x16/0x40 [ 74.476180][ T1839] ? __kasan_check_write+0x18/0x20 [ 74.476262][ T1839] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 74.476326][ T1839] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 74.476389][ T1839] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 74.476472][ T1839] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 74.476566][ T1839] ? ext4_es_lookup_extent+0x567/0x900 [ 74.476650][ T1839] ext4_map_blocks+0x873/0x17f0 [ 74.476739][ T1839] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 74.476823][ T1839] ? __cfi_ext4_map_blocks+0x10/0x10 [ 74.476926][ T1839] ? jbd2__journal_start+0x3c9/0x860 [ 74.476990][ T1839] ext4_alloc_file_blocks+0x3ca/0xc80 [ 74.477092][ T1839] ? ext4_es_is_delayed+0x60/0x60 [ 74.477189][ T1839] ? ext4_dirty_inode+0xdd/0x110 [ 74.477252][ T1839] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 74.477315][ T1839] ? __mark_inode_dirty+0x2ab/0xc50 [ 74.477400][ T1839] ? __cfi___mark_inode_dirty+0x10/0x10 [ 74.477494][ T1839] ext4_zero_range+0x32e/0xb30 [ 74.477580][ T1839] ext4_fallocate+0x6ad/0xb10 [ 74.477663][ T1839] vfs_fallocate+0x533/0x620 [ 74.477731][ T1839] __x64_sys_fallocate+0xc3/0x110 [ 74.477793][ T1839] x64_sys_call+0x2e48/0x2ee0 [ 74.477858][ T1839] do_syscall_64+0x57/0xf0 [ 74.477941][ T1839] ? clear_bhb_loop+0x50/0xa0 [ 74.478040][ T1839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.478123][ T1839] RIP: 0033:0x7f55b19a94d9 [ 74.478176][ T1839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.478229][ T1839] RSP: 002b:00007f55b281d028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 74.478300][ T1839] RAX: ffffffffffffffda RBX: 00007f55b1c25fa0 RCX: 00007f55b19a94d9 [ 74.478343][ T1839] RDX: 0000000000000300 RSI: 0100000000000011 RDI: 0000000000000003 [ 74.478385][ T1839] RBP: 00007f55b281d090 R08: 0000000000000000 R09: 0000000000000000 [ 74.478426][ T1839] R10: 0000000000002f93 R11: 0000000000000246 R12: 0000000000000001 [ 74.478472][ T1839] R13: 00007f55b1c26038 R14: 00007f55b1c25fa0 R15: 00007ffc6e5ffc58 [ 74.478523][ T1839] [ 74.789169][ T63] hid (null): unknown global tag 0xc [ 74.794588][ T63] hid (null): unknown global tag 0xe [ 74.946054][ T451] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.957087][ T451] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.974955][ T451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.981648][ T451] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 74.991167][ T312] usb 4-1: USB disconnect, device number 11 [ 75.004935][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.025260][ T451] usb 3-1: config 0 descriptor?? [ 75.527222][ T1848] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL) [ 75.538225][ T1848] device-mapper: ioctl: error adding target to table [ 75.546113][ T36] audit: type=1400 audit(1794553014.480:238): avc: denied { bind } for pid=1847 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.566537][ T1848] input: syz1 as /devices/virtual/input/input11 [ 75.582228][ T36] audit: type=1400 audit(1794553014.510:239): avc: denied { write } for pid=1847 comm="syz.0.562" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.634863][ T451] usbhid 3-1:0.0: can't add hid device: -71 [ 75.640932][ T451] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 75.663141][ T451] usb 3-1: USB disconnect, device number 8 [ 75.855791][ T1874] ./dev/sda1: Can't lookup blockdev [ 75.877980][ T36] audit: type=1400 audit(1794553014.810:240): avc: denied { create } for pid=1875 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.911946][ T36] audit: type=1400 audit(1794553014.830:241): avc: denied { setopt } for pid=1875 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.948729][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.490577][ T1893] input: syz0 as /devices/virtual/input/input12 [ 76.599028][ T1897] netlink: 96 bytes leftover after parsing attributes in process `syz.2.580'. [ 76.790367][ T36] audit: type=1400 audit(1794553015.720:242): avc: denied { create } for pid=1901 comm="syz.3.582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.831256][ T36] audit: type=1400 audit(1794553015.720:243): avc: denied { read } for pid=1901 comm="syz.3.582" name="file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.862191][ T36] audit: type=1400 audit(1794553015.720:244): avc: denied { open } for pid=1901 comm="syz.3.582" path="/153/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.054854][ T1912] FAULT_INJECTION: forcing a failure. [ 77.054854][ T1912] name failslab, interval 1, probability 0, space 0, times 0 [ 77.070371][ T1912] CPU: 1 UID: 0 PID: 1912 Comm: syz.0.585 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 77.070418][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 77.070438][ T1912] Call Trace: [ 77.070448][ T1912] [ 77.070458][ T1912] __dump_stack+0x21/0x30 [ 77.070491][ T1912] dump_stack_lvl+0x140/0x1c0 [ 77.070517][ T1912] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.070545][ T1912] dump_stack+0x19/0x20 [ 77.070566][ T1912] should_fail_ex+0x3c2/0x510 [ 77.070592][ T1912] should_failslab+0xac/0x100 [ 77.070622][ T1912] kmem_cache_alloc_noprof+0x42/0x410 [ 77.070661][ T1912] ? _raw_read_lock_irqsave+0x92/0xf0 [ 77.070692][ T1912] ? skb_clone+0x21d/0x470 [ 77.070728][ T1912] ? __cfi__raw_read_lock_irqsave+0x10/0x10 [ 77.070760][ T1912] skb_clone+0x21d/0x470 [ 77.070794][ T1912] netlink_broadcast_filtered+0x685/0x1230 [ 77.070832][ T1912] netlink_broadcast+0x3e/0x60 [ 77.070863][ T1912] kobject_uevent_net_broadcast+0x3de/0x5e0 [ 77.070896][ T1912] kobject_uevent_env+0x551/0x7e0 [ 77.070939][ T1912] kobject_uevent+0x21/0x40 [ 77.070970][ T1912] device_add+0x599/0xbf0 [ 77.071003][ T1912] input_register_device+0x9af/0x1080 [ 77.071047][ T1912] uinput_create_device+0x416/0x670 [ 77.071089][ T1912] uinput_ioctl_handler+0x3ea/0x1360 [ 77.071127][ T1912] ? uinput_release+0x70/0x70 [ 77.071166][ T1912] ? __fget_files+0x2bc/0x330 [ 77.071195][ T1912] uinput_ioctl+0x2c/0x40 [ 77.071231][ T1912] ? __cfi_uinput_ioctl+0x10/0x10 [ 77.071267][ T1912] __se_sys_ioctl+0x123/0x1b0 [ 77.071309][ T1912] __x64_sys_ioctl+0x7f/0xa0 [ 77.071338][ T1912] x64_sys_call+0x1878/0x2ee0 [ 77.071369][ T1912] do_syscall_64+0x57/0xf0 [ 77.071400][ T1912] ? clear_bhb_loop+0x50/0xa0 [ 77.071436][ T1912] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.071472][ T1912] RIP: 0033:0x7f20543a94d9 [ 77.071493][ T1912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.071514][ T1912] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.071552][ T1912] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 77.071573][ T1912] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 77.071591][ T1912] RBP: 00007f205443804e R08: 0000000000000000 R09: 0000000000000000 [ 77.071610][ T1912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.071626][ T1912] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 77.071650][ T1912] [ 77.072860][ T1912] input: syz0 as /devices/virtual/input/input13 [ 77.378788][ T1914] syzkaller0: entered promiscuous mode [ 77.385518][ T1914] syzkaller0: entered allmulticast mode [ 77.664973][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.755023][ T63] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 77.824935][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 77.831605][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.840453][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.854206][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 77.871224][ T45] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 77.884616][ T45] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 77.905126][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 77.916627][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 77.925081][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 77.933319][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.936846][ T63] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.945490][ T45] usb 1-1: Product: syz [ 77.956501][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 77.962543][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.974936][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.976826][ T45] usb 1-1: Manufacturer: syz [ 77.996214][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 78.007413][ T45] usb 1-1: SerialNumber: syz [ 78.024945][ T63] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 78.044282][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.060537][ T63] usb 4-1: config 0 descriptor?? [ 78.278389][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 78.284656][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 78.304129][ T63] usb 4-1: USB disconnect, device number 12 [ 78.377130][ T1946] input: syz0 as /devices/virtual/input/input14 [ 78.394374][ T1947] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 78.413703][ T1946] FAULT_INJECTION: forcing a failure. [ 78.413703][ T1946] name failslab, interval 1, probability 0, space 0, times 0 [ 78.426504][ T1947] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 78.445103][ T1947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.464930][ T1946] CPU: 0 UID: 0 PID: 1946 Comm: syz.1.596 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 78.464975][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.464997][ T1946] Call Trace: [ 78.465009][ T1946] [ 78.465020][ T1946] __dump_stack+0x21/0x30 [ 78.465059][ T1946] dump_stack_lvl+0x140/0x1c0 [ 78.465094][ T1946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.465120][ T1946] dump_stack+0x19/0x20 [ 78.465148][ T1946] should_fail_ex+0x3c2/0x510 [ 78.465172][ T1946] should_failslab+0xac/0x100 [ 78.465201][ T1946] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 78.465249][ T1946] ? kvasprintf_const+0xf6/0x250 [ 78.465296][ T1946] kvasprintf+0xf1/0x260 [ 78.465360][ T1946] ? __cfi_kvasprintf+0x10/0x10 [ 78.465405][ T1946] kvasprintf_const+0xf6/0x250 [ 78.465448][ T1946] kobject_set_name_vargs+0x65/0x120 [ 78.465486][ T1946] dev_set_name+0xe3/0x140 [ 78.465519][ T1946] ? __cfi_dev_set_name+0x10/0x10 [ 78.465547][ T1946] ? __kmalloc_cache_noprof+0x23c/0x470 [ 78.465603][ T1946] ? __kasan_check_write+0x18/0x20 [ 78.465650][ T1946] evdev_connect+0x16c/0x4c0 [ 78.465695][ T1946] input_register_device+0xce3/0x1080 [ 78.465745][ T1946] uinput_create_device+0x416/0x670 [ 78.465793][ T1946] uinput_ioctl_handler+0x3ea/0x1360 [ 78.465838][ T1946] ? uinput_release+0x70/0x70 [ 78.465884][ T1946] ? __fget_files+0x2bc/0x330 [ 78.465922][ T1946] uinput_ioctl+0x2c/0x40 [ 78.465961][ T1946] ? __cfi_uinput_ioctl+0x10/0x10 [ 78.466005][ T1946] __se_sys_ioctl+0x123/0x1b0 [ 78.466041][ T1946] __x64_sys_ioctl+0x7f/0xa0 [ 78.466072][ T1946] x64_sys_call+0x1878/0x2ee0 [ 78.466108][ T1946] do_syscall_64+0x57/0xf0 [ 78.466141][ T1946] ? clear_bhb_loop+0x50/0xa0 [ 78.466185][ T1946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.466226][ T1946] RIP: 0033:0x7f55b19a94d9 [ 78.466249][ T1946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.466272][ T1946] RSP: 002b:00007f55b281d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.466301][ T1946] RAX: ffffffffffffffda RBX: 00007f55b1c25fa0 RCX: 00007f55b19a94d9 [ 78.466334][ T1946] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 78.466352][ T1946] RBP: 00007f55b1a3804e R08: 0000000000000000 R09: 0000000000000000 [ 78.466368][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.466384][ T1946] R13: 00007f55b1c26038 R14: 00007f55b1c25fa0 R15: 00007ffc6e5ffc58 [ 78.466407][ T1946] [ 78.466712][ T1946] input: failed to attach handler evdev to device input14, error: -22 [ 78.892292][ T1958] FAULT_INJECTION: forcing a failure. [ 78.892292][ T1958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.905936][ T1958] CPU: 1 UID: 0 PID: 1958 Comm: syz.2.599 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 78.905977][ T1958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 78.905993][ T1958] Call Trace: [ 78.906001][ T1958] [ 78.906009][ T1958] __dump_stack+0x21/0x30 [ 78.906036][ T1958] dump_stack_lvl+0x140/0x1c0 [ 78.906058][ T1958] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.906080][ T1958] ? exc_page_fault+0x65/0xc0 [ 78.906114][ T1958] dump_stack+0x19/0x20 [ 78.906135][ T1958] should_fail_ex+0x3c2/0x510 [ 78.906158][ T1958] should_fail+0xf/0x20 [ 78.906177][ T1958] should_fail_usercopy+0x1e/0x30 [ 78.906201][ T1958] _copy_to_iter+0x1a6/0x1520 [ 78.906227][ T1958] ? filemap_read+0x1250/0x1250 [ 78.906252][ T1958] ? __cfi__copy_to_iter+0x10/0x10 [ 78.906277][ T1958] ? __kasan_check_write+0x18/0x20 [ 78.906311][ T1958] ? folio_mark_accessed+0x34b/0x620 [ 78.906338][ T1958] ? __cfi_folio_mark_accessed+0x10/0x10 [ 78.906363][ T1958] ? is_bpf_text_address+0x17b/0x1a0 [ 78.906393][ T1958] copy_page_to_iter+0x211/0x2f0 [ 78.906420][ T1958] filemap_read+0x92f/0x1250 [ 78.906443][ T1958] ? arch_stack_walk+0x10a/0x170 [ 78.906473][ T1958] ? __cfi_filemap_read+0x10/0x10 [ 78.906502][ T1958] ? down_read+0x7f/0xe0 [ 78.906534][ T1958] ? __cfi_down_read+0x10/0x10 [ 78.906566][ T1958] ? __kasan_check_write+0x18/0x20 [ 78.906600][ T1958] blkdev_read_iter+0x2f0/0x420 [ 78.906630][ T1958] vfs_read+0x60e/0xc70 [ 78.906661][ T1958] ? __cfi_vfs_read+0x10/0x10 [ 78.906695][ T1958] ksys_read+0x145/0x260 [ 78.906714][ T1958] ? __cfi_ksys_read+0x10/0x10 [ 78.906733][ T1958] ? __kasan_check_read+0x15/0x20 [ 78.906764][ T1958] __x64_sys_read+0x7f/0x90 [ 78.906792][ T1958] x64_sys_call+0x2638/0x2ee0 [ 78.906814][ T1958] do_syscall_64+0x57/0xf0 [ 78.906835][ T1958] ? clear_bhb_loop+0x50/0xa0 [ 78.906865][ T1958] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.906894][ T1958] RIP: 0033:0x7f9bfbda94d9 [ 78.906910][ T1958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.906928][ T1958] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.906950][ T1958] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 78.906966][ T1958] RDX: 00000000ffffffca RSI: 0000200000000240 RDI: 0000000000000003 [ 78.906981][ T1958] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 78.906996][ T1958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.907010][ T1958] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 78.907029][ T1958] [ 79.045141][ T459] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 79.336447][ T459] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.350843][ T459] usb 2-1: not running at top speed; connect to a high speed hub [ 79.359607][ T459] usb 2-1: config 8 has an invalid interface number: 154 but max is 0 [ 79.374963][ T459] usb 2-1: config 8 has no interface number 0 [ 79.381119][ T459] usb 2-1: config 8 interface 154 has no altsetting 0 [ 79.406491][ T459] usb 2-1: New USB device found, idVendor=a2f1, idProduct=e50d, bcdDevice=e4.00 [ 79.424930][ T459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.432992][ T459] usb 2-1: Product: syz [ 79.444955][ T459] usb 2-1: Manufacturer: syz [ 79.449616][ T459] usb 2-1: SerialNumber: syz [ 79.667941][ T459] usb-storage 2-1:8.154: USB Mass Storage device detected [ 79.675399][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 79.675419][ T36] audit: type=1400 audit(1794553018.600:255): avc: denied { getopt } for pid=1949 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.748569][ T459] usb 2-1: USB disconnect, device number 13 [ 80.269142][ T1972] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 80.457326][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.475016][ T45] usb 1-1: USB disconnect, device number 6 [ 80.564963][ T36] audit: type=1400 audit(1794553019.490:256): avc: denied { mounton } for pid=1981 comm="syz.0.606" path="/150/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 80.835330][ T1991] FAULT_INJECTION: forcing a failure. [ 80.835330][ T1991] name failslab, interval 1, probability 0, space 0, times 0 [ 80.874942][ T1991] CPU: 1 UID: 0 PID: 1991 Comm: syz.2.609 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 80.874990][ T1991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 80.875010][ T1991] Call Trace: [ 80.875019][ T1991] [ 80.875030][ T1991] __dump_stack+0x21/0x30 [ 80.875063][ T1991] dump_stack_lvl+0x140/0x1c0 [ 80.875093][ T1991] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.875126][ T1991] dump_stack+0x19/0x20 [ 80.875151][ T1991] should_fail_ex+0x3c2/0x510 [ 80.875182][ T1991] should_failslab+0xac/0x100 [ 80.875215][ T1991] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 80.875262][ T1991] ? bitmap_parse_user+0x29/0x80 [ 80.875303][ T1991] memdup_user_nul+0x40/0x1a0 [ 80.875343][ T1991] ? bitmap_parse_user+0x1f/0x80 [ 80.875381][ T1991] bitmap_parse_user+0x29/0x80 [ 80.875417][ T1991] irq_affinity_proc_write+0x139/0x230 [ 80.875453][ T1991] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 80.875485][ T1991] ? __kasan_check_write+0x18/0x20 [ 80.875532][ T1991] ? proc_fail_nth_write+0x184/0x220 [ 80.875581][ T1991] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 80.875612][ T1991] proc_reg_write+0x1fa/0x2f0 [ 80.875662][ T1991] ? __cfi_proc_reg_write+0x10/0x10 [ 80.875706][ T1991] vfs_write+0x3c1/0xfd0 [ 80.875735][ T1991] ? __cfi_vfs_write+0x10/0x10 [ 80.875778][ T1991] ? __kasan_check_write+0x18/0x20 [ 80.875821][ T1991] ? mutex_lock+0x97/0x1d0 [ 80.875859][ T1991] ? __cfi_mutex_lock+0x10/0x10 [ 80.875903][ T1991] ksys_write+0x145/0x260 [ 80.875930][ T1991] ? __cfi_ksys_write+0x10/0x10 [ 80.875960][ T1991] ? __kasan_check_read+0x15/0x20 [ 80.876001][ T1991] __x64_sys_write+0x7f/0x90 [ 80.876030][ T1991] x64_sys_call+0x271c/0x2ee0 [ 80.876064][ T1991] do_syscall_64+0x57/0xf0 [ 80.876093][ T1991] ? clear_bhb_loop+0x50/0xa0 [ 80.876134][ T1991] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.876196][ T1991] RIP: 0033:0x7f9bfbda94d9 [ 80.876223][ T1991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.876250][ T1991] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.876283][ T1991] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 80.876304][ T1991] RDX: 000000000000000d RSI: 00002000000004c0 RDI: 0000000000000003 [ 80.876327][ T1991] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 80.876346][ T1991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.876367][ T1991] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 80.876394][ T1991] [ 80.925085][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 81.239832][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.280719][ T36] audit: type=1400 audit(1794553020.210:257): avc: denied { getopt } for pid=1995 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.304946][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 81.315800][ T63] usb 2-1: config 2 has too many interfaces: 98, using maximum allowed: 32 [ 81.324487][ T63] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 81.344942][ T63] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 98 [ 81.354059][ T63] usb 2-1: config 2 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.386448][ T63] usb 2-1: config 2 interface 1 has no altsetting 0 [ 81.409096][ T63] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 81.418261][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.433040][ T63] usb 2-1: Product: syz [ 81.448217][ T63] usb 2-1: Manufacturer: syz [ 81.452906][ T63] usb 2-1: SerialNumber: syz [ 81.476301][ T63] usb 2-1: selecting invalid altsetting 0 [ 81.492558][ T2002] FAULT_INJECTION: forcing a failure. [ 81.492558][ T2002] name failslab, interval 1, probability 0, space 0, times 0 [ 81.505337][ T2002] CPU: 1 UID: 0 PID: 2002 Comm: syz.2.613 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 81.505374][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 81.505390][ T2002] Call Trace: [ 81.505398][ T2002] [ 81.505406][ T2002] __dump_stack+0x21/0x30 [ 81.505443][ T2002] dump_stack_lvl+0x140/0x1c0 [ 81.505465][ T2002] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.505489][ T2002] dump_stack+0x19/0x20 [ 81.505509][ T2002] should_fail_ex+0x3c2/0x510 [ 81.505532][ T2002] should_failslab+0xac/0x100 [ 81.505557][ T2002] kmem_cache_alloc_node_noprof+0x45/0x420 [ 81.505591][ T2002] ? dup_task_struct+0xc1/0xd80 [ 81.505623][ T2002] ? kasan_save_alloc_info+0x3a/0x50 [ 81.505653][ T2002] ? __kasan_kmalloc+0x96/0xb0 [ 81.505676][ T2002] ? __kmalloc_cache_noprof+0x23c/0x470 [ 81.505710][ T2002] dup_task_struct+0xc1/0xd80 [ 81.505741][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.505780][ T2002] ? _raw_spin_lock_irq+0x93/0x120 [ 81.505805][ T2002] ? copy_process+0x33a0/0x33a0 [ 81.505836][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.505870][ T2002] copy_process+0x579/0x33a0 [ 81.505905][ T2002] ? kasan_save_alloc_info+0x3a/0x50 [ 81.505935][ T2002] ? __cfi_copy_process+0x10/0x10 [ 81.505966][ T2002] ? __kmalloc_cache_noprof+0x23c/0x470 [ 81.506000][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.506033][ T2002] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 81.506063][ T2002] vhost_task_create+0x1f7/0x3f0 [ 81.506091][ T2002] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 81.506122][ T2002] ? __cfi_vhost_task_create+0x10/0x10 [ 81.506152][ T2002] ? __cfi_vhost_task_fn+0x10/0x10 [ 81.506179][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.506211][ T2002] ? mutex_lock+0x97/0x1d0 [ 81.506239][ T2002] ? __cfi_mutex_lock+0x10/0x10 [ 81.506267][ T2002] ? kernel_text_address+0xa9/0xe0 [ 81.506302][ T2002] kvm_mmu_post_init_vm+0x161/0x300 [ 81.506325][ T2002] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 81.506359][ T2002] ? _parse_integer_limit+0x195/0x1e0 [ 81.506393][ T2002] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 81.506436][ T2002] ? kstrtoull+0x13b/0x1e0 [ 81.506467][ T2002] ? kstrtouint+0x78/0xf0 [ 81.506497][ T2002] ? ioctl_has_perm+0x1bc/0x500 [ 81.506517][ T2002] ? __asan_memcpy+0x5a/0x80 [ 81.506550][ T2002] ? ioctl_has_perm+0x408/0x500 [ 81.506571][ T2002] ? has_cap_mac_admin+0xd0/0xd0 [ 81.506591][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.506622][ T2002] ? mutex_lock_killable+0x97/0x1d0 [ 81.506651][ T2002] ? __cfi_mutex_lock_killable+0x10/0x10 [ 81.506683][ T2002] ? proc_fail_nth_write+0x184/0x220 [ 81.506715][ T2002] kvm_vcpu_ioctl+0xa43/0x1000 [ 81.506741][ T2002] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 81.506765][ T2002] ? hook_file_ioctl+0x1ef/0x590 [ 81.506794][ T2002] ? __cfi_vfs_write+0x10/0x10 [ 81.506827][ T2002] ? __cfi_hook_file_ioctl+0x10/0x10 [ 81.506866][ T2002] ? __kasan_check_write+0x18/0x20 [ 81.506897][ T2002] ? mutex_unlock+0x90/0x240 [ 81.506925][ T2002] ? __cfi_mutex_unlock+0x10/0x10 [ 81.506957][ T2002] ? __fget_files+0x2bc/0x330 [ 81.506980][ T2002] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.507004][ T2002] ? security_file_ioctl+0x3e/0x110 [ 81.507042][ T2002] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 81.507066][ T2002] __se_sys_ioctl+0x123/0x1b0 [ 81.507092][ T2002] __x64_sys_ioctl+0x7f/0xa0 [ 81.507116][ T2002] x64_sys_call+0x1878/0x2ee0 [ 81.507140][ T2002] do_syscall_64+0x57/0xf0 [ 81.507163][ T2002] ? clear_bhb_loop+0x50/0xa0 [ 81.507194][ T2002] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.507226][ T2002] RIP: 0033:0x7f9bfbda94d9 [ 81.507245][ T2002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.507264][ T2002] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.507289][ T2002] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 81.507306][ T2002] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 81.507321][ T2002] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 81.507336][ T2002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.507351][ T2002] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 81.507371][ T2002] [ 81.685118][ T63] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 81.993417][ T2007] overlay: ./file0 is not a directory [ 82.009641][ T2007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'. [ 82.135351][ T36] audit: type=1400 audit(1794553021.070:258): avc: denied { read } for pid=2011 comm="syz.0.615" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.184937][ T36] audit: type=1400 audit(1794553021.070:259): avc: denied { open } for pid=2011 comm="syz.0.615" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.247052][ T459] usb 2-1: USB disconnect, device number 14 [ 82.424723][ T36] audit: type=1400 audit(1794553021.350:260): avc: denied { ioctl } for pid=2018 comm="syz.3.617" path="socket:[35652]" dev="sockfs" ino=35652 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.489200][ T36] audit: type=1400 audit(1794553021.380:261): avc: denied { getattr } for pid=2018 comm="syz.3.617" path="socket:[35654]" dev="sockfs" ino=35654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.507894][ T2021] input: syz0 as /devices/virtual/input/input15 [ 82.623802][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.937587][ T2026] netlink: 9 bytes leftover after parsing attributes in process `syz.1.620'. [ 82.965207][ T2026] gretap0: entered promiscuous mode [ 82.975636][ T2026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.620'. [ 82.995786][ T2026] 0ªî{X¹¦: renamed from gretap0 [ 83.015778][ T2026] 0ªî{X¹¦: left promiscuous mode [ 83.020879][ T2026] 0ªî{X¹¦: entered allmulticast mode [ 83.048014][ T2026] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 83.444938][ T63] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 83.476485][ T459] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 83.604923][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 83.616115][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.635012][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 83.655078][ T63] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 83.664417][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.672810][ T459] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 83.681267][ T459] usb 2-1: config 127 has no interface number 0 [ 83.688078][ T459] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 83.699535][ T63] usb 1-1: config 0 descriptor?? [ 83.706510][ T63] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 83.715439][ T459] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 83.724775][ T459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.738407][ T63] usbhid 1-1:0.0: can't add hid device: -22 [ 83.746589][ T459] usb 2-1: Product: syz [ 83.754149][ T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 83.763126][ T459] usb 2-1: Manufacturer: syz [ 83.773216][ T459] usb 2-1: SerialNumber: syz [ 83.784588][ T2036] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.932541][ T63] usb 1-1: USB disconnect, device number 7 [ 84.072090][ T36] audit: type=1400 audit(1794553023.000:262): avc: denied { read } for pid=2037 comm="syz.2.625" name="binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.096246][ T2038] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 84.113117][ T36] audit: type=1400 audit(1794553023.020:263): avc: denied { open } for pid=2037 comm="syz.2.625" path="/dev/binderfs/binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.145535][ T36] audit: type=1400 audit(1794553023.030:264): avc: denied { ioctl } for pid=2037 comm="syz.2.625" path="/dev/binderfs/binder0" dev="binder" ino=6 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.196074][ T2036] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.404479][ T459] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 84.417203][ T2045] mmap: syz.2.627 (2045) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.614836][ T459] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 79 [ 84.674952][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 84.681026][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.698873][ T2061] can0: slcan on ptm1. [ 84.762030][ T2061] can0 (unregistered): slcan off ptm1. [ 84.816900][ T459] usb 2-1: USB disconnect, device number 15 [ 84.818536][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 84.818610][ T36] audit: type=1400 audit(1794553023.750:271): avc: denied { write } for pid=2035 comm="syz.1.624" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.962957][ T36] audit: type=1400 audit(1794553023.890:273): avc: denied { map } for pid=2078 comm="syz.0.637" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.999205][ T36] audit: type=1400 audit(1794553023.890:272): avc: denied { map } for pid=2078 comm="syz.0.637" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.030843][ T2077] FAULT_INJECTION: forcing a failure. [ 85.030843][ T2077] name failslab, interval 1, probability 0, space 0, times 0 [ 85.063904][ T2077] CPU: 0 UID: 0 PID: 2077 Comm: syz.3.636 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 85.063943][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.063958][ T2077] Call Trace: [ 85.063965][ T2077] [ 85.063974][ T2077] __dump_stack+0x21/0x30 [ 85.064002][ T2077] dump_stack_lvl+0x140/0x1c0 [ 85.064023][ T2077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.064047][ T2077] dump_stack+0x19/0x20 [ 85.064066][ T2077] should_fail_ex+0x3c2/0x510 [ 85.064087][ T2077] should_failslab+0xac/0x100 [ 85.064112][ T2077] __kmalloc_cache_node_noprof+0x46/0x430 [ 85.064146][ T2077] ? __get_vm_area_node+0x150/0x390 [ 85.064175][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.064205][ T2077] ? __kasan_slab_alloc+0x73/0x90 [ 85.064227][ T2077] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 85.064262][ T2077] __get_vm_area_node+0x150/0x390 [ 85.064292][ T2077] __vmalloc_node_range_noprof+0x340/0x1300 [ 85.064322][ T2077] ? copy_process+0x579/0x33a0 [ 85.064358][ T2077] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 85.064390][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.064421][ T2077] ? __kasan_slab_alloc+0x73/0x90 [ 85.064450][ T2077] ? arch_dup_task_struct+0x5b/0xe0 [ 85.064474][ T2077] ? __asan_memcpy+0x5a/0x80 [ 85.064505][ T2077] dup_task_struct+0x5d6/0xd80 [ 85.064535][ T2077] ? copy_process+0x579/0x33a0 [ 85.064565][ T2077] ? _raw_spin_lock_irq+0x93/0x120 [ 85.064589][ T2077] ? copy_process+0x33a0/0x33a0 [ 85.064618][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.064656][ T2077] copy_process+0x579/0x33a0 [ 85.064691][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.064722][ T2077] ? __cfi_copy_process+0x10/0x10 [ 85.064753][ T2077] ? __kmalloc_cache_noprof+0x23c/0x470 [ 85.064787][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.064819][ T2077] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 85.064850][ T2077] vhost_task_create+0x1f7/0x3f0 [ 85.064882][ T2077] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 85.064913][ T2077] ? __cfi_vhost_task_create+0x10/0x10 [ 85.064941][ T2077] ? __cfi_vhost_task_fn+0x10/0x10 [ 85.064967][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.064999][ T2077] ? mutex_lock+0x97/0x1d0 [ 85.065028][ T2077] ? __cfi_mutex_lock+0x10/0x10 [ 85.065055][ T2077] ? kernel_text_address+0xa9/0xe0 [ 85.065091][ T2077] kvm_mmu_post_init_vm+0x161/0x300 [ 85.065114][ T2077] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 85.065148][ T2077] ? _parse_integer_limit+0x195/0x1e0 [ 85.065183][ T2077] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 85.065218][ T2077] ? kstrtoull+0x13b/0x1e0 [ 85.065250][ T2077] ? kstrtouint+0x78/0xf0 [ 85.065281][ T2077] ? ioctl_has_perm+0x1bc/0x500 [ 85.065301][ T2077] ? __asan_memcpy+0x5a/0x80 [ 85.065332][ T2077] ? ioctl_has_perm+0x408/0x500 [ 85.065352][ T2077] ? has_cap_mac_admin+0xd0/0xd0 [ 85.065372][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.065403][ T2077] ? mutex_lock_killable+0x97/0x1d0 [ 85.065434][ T2077] ? __cfi_mutex_lock_killable+0x10/0x10 [ 85.065463][ T2077] ? proc_fail_nth_write+0x184/0x220 [ 85.065494][ T2077] kvm_vcpu_ioctl+0xa43/0x1000 [ 85.065521][ T2077] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 85.065545][ T2077] ? hook_file_ioctl+0x1ef/0x590 [ 85.065576][ T2077] ? __cfi_vfs_write+0x10/0x10 [ 85.065609][ T2077] ? __cfi_hook_file_ioctl+0x10/0x10 [ 85.065639][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.065679][ T2077] ? mutex_unlock+0x90/0x240 [ 85.065707][ T2077] ? __cfi_mutex_unlock+0x10/0x10 [ 85.065737][ T2077] ? __fget_files+0x2bc/0x330 [ 85.065761][ T2077] ? bpf_lsm_file_ioctl+0xd/0x20 [ 85.065785][ T2077] ? security_file_ioctl+0x3e/0x110 [ 85.065817][ T2077] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 85.065841][ T2077] __se_sys_ioctl+0x123/0x1b0 [ 85.065865][ T2077] __x64_sys_ioctl+0x7f/0xa0 [ 85.065888][ T2077] x64_sys_call+0x1878/0x2ee0 [ 85.065912][ T2077] do_syscall_64+0x57/0xf0 [ 85.065934][ T2077] ? clear_bhb_loop+0x50/0xa0 [ 85.065965][ T2077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.065995][ T2077] RIP: 0033:0x7f06d01a94d9 [ 85.066015][ T2077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.066032][ T2077] RSP: 002b:00007f06d113c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.066057][ T2077] RAX: ffffffffffffffda RBX: 00007f06d0425fa0 RCX: 00007f06d01a94d9 [ 85.066074][ T2077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 85.066088][ T2077] RBP: 00007f06d113c090 R08: 0000000000000000 R09: 0000000000000000 [ 85.066103][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.066117][ T2077] R13: 00007f06d0426038 R14: 00007f06d0425fa0 R15: 00007ffec8040288 [ 85.066136][ T2077] [ 85.530105][ T2077] warn_alloc: 1 callbacks suppressed [ 85.530124][ T2077] syz.3.636: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 85.551633][ T2077] CPU: 0 UID: 0 PID: 2077 Comm: syz.3.636 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 85.551669][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.551684][ T2077] Call Trace: [ 85.551691][ T2077] [ 85.551699][ T2077] __dump_stack+0x21/0x30 [ 85.551726][ T2077] dump_stack_lvl+0x140/0x1c0 [ 85.551748][ T2077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.551771][ T2077] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 85.551800][ T2077] dump_stack+0x19/0x20 [ 85.551820][ T2077] warn_alloc+0x1e7/0x2c0 [ 85.551848][ T2077] ? __kasan_kmalloc+0x28/0xb0 [ 85.551874][ T2077] ? __cfi_warn_alloc+0x10/0x10 [ 85.551899][ T2077] ? __get_vm_area_node+0x150/0x390 [ 85.551927][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.551958][ T2077] ? __get_vm_area_node+0x382/0x390 [ 85.551988][ T2077] __vmalloc_node_range_noprof+0x365/0x1300 [ 85.552025][ T2077] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 85.552057][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.552088][ T2077] ? __kasan_slab_alloc+0x73/0x90 [ 85.552112][ T2077] ? arch_dup_task_struct+0x5b/0xe0 [ 85.552136][ T2077] ? __asan_memcpy+0x5a/0x80 [ 85.552168][ T2077] dup_task_struct+0x5d6/0xd80 [ 85.552199][ T2077] ? copy_process+0x579/0x33a0 [ 85.552231][ T2077] ? _raw_spin_lock_irq+0x93/0x120 [ 85.552255][ T2077] ? copy_process+0x33a0/0x33a0 [ 85.552286][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.552320][ T2077] copy_process+0x579/0x33a0 [ 85.552355][ T2077] ? kasan_save_alloc_info+0x3a/0x50 [ 85.552386][ T2077] ? __cfi_copy_process+0x10/0x10 [ 85.552418][ T2077] ? __kmalloc_cache_noprof+0x23c/0x470 [ 85.552452][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.552493][ T2077] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 85.552523][ T2077] vhost_task_create+0x1f7/0x3f0 [ 85.552550][ T2077] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 85.552580][ T2077] ? __cfi_vhost_task_create+0x10/0x10 [ 85.552608][ T2077] ? __cfi_vhost_task_fn+0x10/0x10 [ 85.552634][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.552671][ T2077] ? mutex_lock+0x97/0x1d0 [ 85.552698][ T2077] ? __cfi_mutex_lock+0x10/0x10 [ 85.552725][ T2077] ? kernel_text_address+0xa9/0xe0 [ 85.552759][ T2077] kvm_mmu_post_init_vm+0x161/0x300 [ 85.552782][ T2077] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 85.552815][ T2077] ? _parse_integer_limit+0x195/0x1e0 [ 85.552849][ T2077] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 85.552883][ T2077] ? kstrtoull+0x13b/0x1e0 [ 85.552914][ T2077] ? kstrtouint+0x78/0xf0 [ 85.552944][ T2077] ? ioctl_has_perm+0x1bc/0x500 [ 85.552965][ T2077] ? __asan_memcpy+0x5a/0x80 [ 85.552996][ T2077] ? ioctl_has_perm+0x408/0x500 [ 85.553016][ T2077] ? has_cap_mac_admin+0xd0/0xd0 [ 85.553037][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.553067][ T2077] ? mutex_lock_killable+0x97/0x1d0 [ 85.553097][ T2077] ? __cfi_mutex_lock_killable+0x10/0x10 [ 85.553126][ T2077] ? proc_fail_nth_write+0x184/0x220 [ 85.553157][ T2077] kvm_vcpu_ioctl+0xa43/0x1000 [ 85.553183][ T2077] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 85.553207][ T2077] ? hook_file_ioctl+0x1ef/0x590 [ 85.553237][ T2077] ? __cfi_vfs_write+0x10/0x10 [ 85.553270][ T2077] ? __cfi_hook_file_ioctl+0x10/0x10 [ 85.553298][ T2077] ? __kasan_check_write+0x18/0x20 [ 85.553330][ T2077] ? mutex_unlock+0x90/0x240 [ 85.553356][ T2077] ? __cfi_mutex_unlock+0x10/0x10 [ 85.553387][ T2077] ? __fget_files+0x2bc/0x330 [ 85.553412][ T2077] ? bpf_lsm_file_ioctl+0xd/0x20 [ 85.553436][ T2077] ? security_file_ioctl+0x3e/0x110 [ 85.553468][ T2077] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 85.553501][ T2077] __se_sys_ioctl+0x123/0x1b0 [ 85.553526][ T2077] __x64_sys_ioctl+0x7f/0xa0 [ 85.553549][ T2077] x64_sys_call+0x1878/0x2ee0 [ 85.553574][ T2077] do_syscall_64+0x57/0xf0 [ 85.553597][ T2077] ? clear_bhb_loop+0x50/0xa0 [ 85.553628][ T2077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.553658][ T2077] RIP: 0033:0x7f06d01a94d9 [ 85.553678][ T2077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.553699][ T2077] RSP: 002b:00007f06d113c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.553723][ T2077] RAX: ffffffffffffffda RBX: 00007f06d0425fa0 RCX: 00007f06d01a94d9 [ 85.553741][ T2077] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 85.553756][ T2077] RBP: 00007f06d113c090 R08: 0000000000000000 R09: 0000000000000000 [ 85.553771][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.553785][ T2077] R13: 00007f06d0426038 R14: 00007f06d0425fa0 R15: 00007ffec8040288 [ 85.553805][ T2077] [ 85.554658][ T2077] Mem-Info: [ 86.069284][ T36] audit: type=1400 audit(1794553024.960:274): avc: denied { audit_write } for pid=2090 comm="syz.1.641" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.115549][ T2094] random: crng reseeded on system resumption [ 86.162569][ T2077] active_anon:6303 inactive_anon:0 isolated_anon:0 [ 86.162569][ T2077] active_file:6167 inactive_file:6417 isolated_file:0 [ 86.162569][ T2077] unevictable:0 dirty:177 writeback:0 [ 86.162569][ T2077] slab_reclaimable:6670 slab_unreclaimable:77697 [ 86.162569][ T2077] mapped:24693 shmem:164 pagetables:861 [ 86.162569][ T2077] sec_pagetables:3 bounce:0 [ 86.162569][ T2077] kernel_misc_reclaimable:0 [ 86.162569][ T2077] free:1528339 free_pcp:1862 free_cma:0 [ 86.228307][ T2077] Node 0 active_anon:25212kB inactive_anon:0kB active_file:24668kB inactive_file:25668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98972kB dirty:708kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4828kB pagetables:3444kB sec_pagetables:12kB all_unreclaimable? no [ 86.264917][ T2077] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:68kB free_cma:0kB [ 86.295030][ T2077] lowmem_reserve[]: 0 3920 3920 [ 86.299940][ T2077] Normal free:3154092kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25212kB inactive_anon:0kB active_file:24668kB inactive_file:25668kB unevictable:0kB writepending:708kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:760kB local_pcp:188kB free_cma:0kB [ 86.332360][ T2077] lowmem_reserve[]: 0 0 0 [ 86.339629][ T2077] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 86.369748][ T2077] Normal: 126*4kB (ME) 142*8kB (UME) 387*16kB (UME) 305*32kB (UME) 98*64kB (UME) 49*128kB (UME) 24*256kB (UME) 19*512kB (UME) 13*1024kB (UME) 4*2048kB (ME) 756*4096kB (M) = 3164088kB [ 86.406540][ T2077] 12746 total pagecache pages [ 86.411362][ T2077] 2 pages in swap cache [ 86.418848][ T2103] netlink: 'syz.0.644': attribute type 12 has an invalid length. [ 86.426751][ T36] audit: type=1400 audit(1794553025.350:275): avc: denied { create } for pid=2102 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.431226][ T2077] Free swap = 124312kB [ 86.455760][ T36] audit: type=1400 audit(1794553025.390:276): avc: denied { map } for pid=2102 comm="syz.0.644" path="socket:[36400]" dev="sockfs" ino=36400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 86.484917][ T2077] Total swap = 124996kB [ 86.489156][ T2077] 2097051 pages RAM [ 86.510134][ T2077] 0 pages HighMem/MovableOnly [ 86.516196][ T2077] 354592 pages reserved [ 86.520448][ T2077] 0 pages cma reserved [ 86.528314][ T2077] Memory allocations: [ 86.532403][ T2077] 0 B 0 init/main.c:1477 func:do_initcalls [ 86.540013][ T2077] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 86.548311][ T2077] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 86.559737][ T2077] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 86.580916][ T2077] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 86.589095][ T2077] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 86.605864][ T2077] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 86.613888][ T2077] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 86.622103][ T2077] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 86.631271][ T2077] 0 B 0 init/initramfs.c:101 func:find_link [ 86.666961][ T36] audit: type=1400 audit(1794553025.600:277): avc: denied { connect } for pid=2106 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.711634][ T2113] fuse: Bad value for 'group_id' [ 86.724645][ T2113] fuse: Bad value for 'group_id' [ 86.756619][ T2118] input: syz0 as /devices/virtual/input/input16 [ 86.805160][ T2123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 86.830920][ T36] audit: type=1400 audit(1794553025.760:278): avc: denied { read write } for pid=2122 comm="syz.3.652" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.860312][ T36] audit: type=1400 audit(1794553025.760:279): avc: denied { open } for pid=2122 comm="syz.3.652" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.986907][ T36] audit: type=1400 audit(1794553025.920:280): avc: denied { bind } for pid=2128 comm="syz.3.654" laddr=fe80::4058:bff:fe59:4931 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.048401][ T2139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.658'. [ 87.650258][ T2162] FAULT_INJECTION: forcing a failure. [ 87.650258][ T2162] name failslab, interval 1, probability 0, space 0, times 0 [ 87.682874][ T2162] CPU: 1 UID: 0 PID: 2162 Comm: syz.1.667 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 87.682916][ T2162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 87.682935][ T2162] Call Trace: [ 87.682943][ T2162] [ 87.682952][ T2162] __dump_stack+0x21/0x30 [ 87.682982][ T2162] dump_stack_lvl+0x140/0x1c0 [ 87.683006][ T2162] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.683028][ T2162] ? cgroup_addrm_files+0x775/0xac0 [ 87.683057][ T2162] ? vfs_mkdir+0x58e/0x810 [ 87.683088][ T2162] dump_stack+0x19/0x20 [ 87.683110][ T2162] should_fail_ex+0x3c2/0x510 [ 87.683134][ T2162] should_failslab+0xac/0x100 [ 87.683161][ T2162] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 87.683206][ T2162] ? kstrdup_const+0x45/0x60 [ 87.683240][ T2162] kstrdup+0x4d/0x130 [ 87.683270][ T2162] ? kstrdup_const+0x3a/0x60 [ 87.683313][ T2162] kstrdup_const+0x45/0x60 [ 87.683345][ T2162] __kernfs_new_node+0xaa/0x740 [ 87.683375][ T2162] ? kernfs_new_node+0x280/0x280 [ 87.683404][ T2162] ? snprintf+0xe9/0x140 [ 87.683429][ T2162] kernfs_new_node+0x154/0x280 [ 87.683458][ T2162] __kernfs_create_file+0x52/0x280 [ 87.683492][ T2162] cgroup_addrm_files+0x775/0xac0 [ 87.683523][ T2162] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 87.683553][ T2162] ? delete_node+0x3df/0xa60 [ 87.683581][ T2162] ? __kasan_check_write+0x18/0x20 [ 87.683619][ T2162] ? idr_replace+0x137/0x1b0 [ 87.683658][ T2162] css_populate_dir+0x12d/0x3d0 [ 87.683694][ T2162] cgroup_apply_control_enable+0x62f/0xce0 [ 87.683723][ T2162] cgroup_mkdir+0x11f8/0x1590 [ 87.683759][ T2162] ? __cfi_cgroup_mkdir+0x10/0x10 [ 87.683783][ T2162] kernfs_iop_mkdir+0x1be/0x2d0 [ 87.683855][ T2162] vfs_mkdir+0x58e/0x810 [ 87.683887][ T2162] do_mkdirat+0x240/0x530 [ 87.683918][ T2162] ? __cfi_do_mkdirat+0x10/0x10 [ 87.683949][ T2162] ? __kasan_check_write+0x18/0x20 [ 87.683985][ T2162] ? getname_flags+0x203/0x6b0 [ 87.684008][ T2162] ? __kasan_check_write+0x18/0x20 [ 87.684046][ T2162] __x64_sys_mkdirat+0x8b/0xa0 [ 87.684075][ T2162] x64_sys_call+0x2ba8/0x2ee0 [ 87.684102][ T2162] do_syscall_64+0x57/0xf0 [ 87.684127][ T2162] ? clear_bhb_loop+0x50/0xa0 [ 87.684161][ T2162] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.684194][ T2162] RIP: 0033:0x7f55b19a94d9 [ 87.684214][ T2162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.684236][ T2162] RSP: 002b:00007f55b281d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.684262][ T2162] RAX: ffffffffffffffda RBX: 00007f55b1c25fa0 RCX: 00007f55b19a94d9 [ 87.684281][ T2162] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 87.684299][ T2162] RBP: 00007f55b1a3804e R08: 0000000000000000 R09: 0000000000000000 [ 87.684316][ T2162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.684331][ T2162] R13: 00007f55b1c26038 R14: 00007f55b1c25fa0 R15: 00007ffc6e5ffc58 [ 87.684355][ T2162] [ 87.737574][ T2162] cgroup: cgroup_addrm_files: failed to add cpus, err=-12 [ 87.898183][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.957351][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 88.049595][ T2169] FAULT_INJECTION: forcing a failure. [ 88.049595][ T2169] name failslab, interval 1, probability 0, space 0, times 0 [ 88.077891][ T2170] input: syz0 as /devices/virtual/input/input17 [ 88.116867][ T2169] CPU: 1 UID: 0 PID: 2169 Comm: syz.3.669 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 88.116906][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 88.116922][ T2169] Call Trace: [ 88.116930][ T2169] [ 88.116939][ T2169] __dump_stack+0x21/0x30 [ 88.116968][ T2169] dump_stack_lvl+0x140/0x1c0 [ 88.116989][ T2169] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.117015][ T2169] dump_stack+0x19/0x20 [ 88.117036][ T2169] should_fail_ex+0x3c2/0x510 [ 88.117058][ T2169] ? sock_kmalloc+0xde/0x1e0 [ 88.117090][ T2169] should_failslab+0xac/0x100 [ 88.117116][ T2169] __kmalloc_noprof+0x69/0x510 [ 88.117150][ T2169] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 88.117172][ T2169] ? sock_kmalloc+0xde/0x1e0 [ 88.117203][ T2169] ? arch_stack_walk+0x10a/0x170 [ 88.117231][ T2169] sock_kmalloc+0xde/0x1e0 [ 88.117262][ T2169] ____sys_sendmsg+0x1c3/0xa00 [ 88.117297][ T2169] ? __import_iovec+0x3fa/0x7d0 [ 88.117325][ T2169] ? __sys_sendmsg_sock+0x50/0x50 [ 88.117358][ T2169] ? import_iovec+0x80/0xb0 [ 88.117387][ T2169] ___sys_sendmsg+0x2a6/0x370 [ 88.117419][ T2169] ? __sys_sendmsg+0x260/0x260 [ 88.117451][ T2169] ? proc_fail_nth_write+0x184/0x220 [ 88.117482][ T2169] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 88.117518][ T2169] ? __fget_files+0x2bc/0x330 [ 88.117553][ T2169] __x64_sys_sendmsg+0x1be/0x2a0 [ 88.117585][ T2169] ? fput+0x1a4/0x230 [ 88.117611][ T2169] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 88.117643][ T2169] ? ksys_write+0x1f3/0x260 [ 88.117665][ T2169] ? __kasan_check_read+0x15/0x20 [ 88.117700][ T2169] x64_sys_call+0x2a4c/0x2ee0 [ 88.117725][ T2169] do_syscall_64+0x57/0xf0 [ 88.117750][ T2169] ? clear_bhb_loop+0x50/0xa0 [ 88.117792][ T2169] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.117823][ T2169] RIP: 0033:0x7f06d01a94d9 [ 88.117843][ T2169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.117864][ T2169] RSP: 002b:00007f06d113c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.117889][ T2169] RAX: ffffffffffffffda RBX: 00007f06d0425fa0 RCX: 00007f06d01a94d9 [ 88.117908][ T2169] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 88.117922][ T2169] RBP: 00007f06d113c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.117937][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.117952][ T2169] R13: 00007f06d0426038 R14: 00007f06d0425fa0 R15: 00007ffec8040288 [ 88.117973][ T2169] [ 88.267107][ T2172] /dev/md2: Can't lookup blockdev [ 88.606094][ T2180] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 88.622444][ T2180] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.631321][ T2180] anon flags: 0x4000000000000040(head|zone=1) [ 88.642006][ T2182] rust_binder: 2181:2182 got transaction to invalid handle 1 [ 88.649898][ T2180] page_type: f5(slab) [ 88.653949][ T2180] raw: 4000000000000040 ffff888101a42280 0000000000000000 dead000000000001 [ 88.663016][ T2182] rust_binder: 2181:2182 transaction async to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 88.680184][ T2180] raw: 0000000000000000 0000000000070007 00000001f5000000 0000000000000000 [ 88.709137][ T2180] head: 4000000000000040 ffff888101a42280 0000000000000000 dead000000000001 [ 88.720730][ T300] rust_binder: 2181: undelivered TRANSACTION_ERROR: 29201 [ 88.748362][ T2180] head: 0000000000000000 0000000000070007 00000001f5000000 0000000000000000 [ 88.764966][ T2180] head: 4000000000000003 ffffea0004600001 ffffffffffffffff 0000000000000000 [ 88.789682][ T2180] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 88.820227][ T2180] page dumped because: unmovable page [ 88.831406][ T2180] page_owner tracks the page as allocated [ 88.838425][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.845683][ T2180] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 111, tgid 111 (udevd), ts 82601668997, free_ts 82549227893 [ 88.867866][ T2180] post_alloc_hook+0x37d/0x3b0 [ 88.872713][ T2180] prep_new_page+0x2d/0x180 [ 88.877349][ T2180] get_page_from_freelist+0x4aea/0x4ba0 [ 88.882953][ T2180] __alloc_pages_noprof+0x35a/0x7e0 [ 88.888244][ T2180] alloc_slab_page+0x6b/0x1e0 [ 88.892968][ T2180] allocate_slab+0x69/0x430 [ 88.897535][ T2180] ___slab_alloc+0x591/0x8c0 [ 88.902164][ T2180] kmem_cache_alloc_noprof+0x290/0x410 [ 88.907712][ T2180] getname_flags+0xcc/0x6b0 [ 88.912351][ T2180] __x64_sys_unlink+0x3e/0x60 [ 88.917138][ T2180] x64_sys_call+0x286c/0x2ee0 [ 88.921875][ T2180] do_syscall_64+0x57/0xf0 [ 88.926481][ T2180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.932427][ T2180] page last free pid 111 tgid 111 stack trace: [ 88.938639][ T2180] free_unref_page+0xb99/0xf50 [ 88.943465][ T2180] __free_pages+0x6b/0x3b0 [ 88.947962][ T2180] __free_slab+0xb2/0x110 [ 88.952342][ T2180] free_slab+0x18/0xe0 [ 88.956486][ T2180] __put_partials+0x115/0x150 [ 88.961211][ T2180] put_cpu_partial+0x91/0xc0 [ 88.965877][ T2180] __slab_free+0x1cf/0x2a0 [ 88.970341][ T2180] ___cache_free+0xc9/0xe0 [ 88.974817][ T2180] qlist_free_all+0xb5/0x130 [ 88.979480][ T2180] kasan_quarantine_reduce+0x14f/0x180 [ 88.985047][ T2180] __kasan_slab_alloc+0x28/0x90 [ 88.989952][ T2180] kmem_cache_alloc_noprof+0x1bf/0x410 [ 88.995518][ T2180] getname_flags+0xcc/0x6b0 [ 89.000064][ T2180] __x64_sys_unlink+0x3e/0x60 [ 89.004801][ T2180] x64_sys_call+0x286c/0x2ee0 [ 89.009585][ T2180] do_syscall_64+0x57/0xf0 [ 89.101280][ T2198] netlink: 9 bytes leftover after parsing attributes in process `syz.0.679'. [ 89.127398][ T2198] gretap0: entered promiscuous mode [ 89.145022][ T2207] random: crng reseeded on system resumption [ 89.554351][ T2225] process 'syz.0.685' launched './file0' with NULL argv: empty string added [ 89.563457][ T2225] Invalid argument reading file caps for ./file0 [ 89.581268][ T2226] ./dev/sda1: Can't lookup blockdev [ 89.869600][ T2231] 9p: Unknown access argument Æ: -22 [ 89.921018][ T2232] tipc: Enabling of bearer rejected, failed to enable media [ 89.978045][ T2234] input: syz0 as /devices/virtual/input/input18 [ 90.284934][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.307035][ T2238] random: crng reseeded on system resumption [ 90.383568][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 90.383589][ T36] audit: type=1400 audit(1794553029.310:311): avc: denied { mount } for pid=2240 comm="syz.3.691" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.446059][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.463253][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.472761][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.481034][ T45] usb 1-1: SerialNumber: syz [ 90.547784][ T36] audit: type=1400 audit(1794553029.480:312): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.578653][ T2245] overlayfs: failed to resolve './file1': -2 [ 90.584935][ T36] audit: type=1400 audit(1794553029.510:313): avc: denied { mount } for pid=2244 comm="syz.2.693" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 90.754601][ T2247] can0: slcan on ptm1. [ 90.781365][ T2247] can0 (unregistered): slcan off ptm1. [ 90.837202][ T2251] FAULT_INJECTION: forcing a failure. [ 90.837202][ T2251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.850343][ T2251] CPU: 0 UID: 0 PID: 2251 Comm: syz.3.696 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 90.850381][ T2251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 90.850396][ T2251] Call Trace: [ 90.850404][ T2251] [ 90.850413][ T2251] __dump_stack+0x21/0x30 [ 90.850440][ T2251] dump_stack_lvl+0x140/0x1c0 [ 90.850462][ T2251] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.850540][ T2251] ? hook_file_open+0x1f2/0x8d0 [ 90.850574][ T2251] dump_stack+0x19/0x20 [ 90.850594][ T2251] should_fail_ex+0x3c2/0x510 [ 90.850617][ T2251] should_fail+0xf/0x20 [ 90.850644][ T2251] should_fail_usercopy+0x1e/0x30 [ 90.850668][ T2251] _copy_from_iter+0x1a6/0x1520 [ 90.850694][ T2251] ? __cfi__copy_from_iter+0x10/0x10 [ 90.850723][ T2251] tun_get_user+0x236/0x36d0 [ 90.850756][ T2251] ? __kernel_text_address+0x11/0x40 [ 90.850791][ T2251] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 90.850817][ T2251] ? _parse_integer_limit+0x195/0x1e0 [ 90.850851][ T2251] ? ptr_ring_consume+0x430/0x430 [ 90.850883][ T2251] ? _parse_integer+0x2e/0x40 [ 90.850915][ T2251] ? kstrtoull+0x13b/0x1e0 [ 90.850949][ T2251] ? __kasan_check_write+0x18/0x20 [ 90.850983][ T2251] ? ref_tracker_alloc+0x32b/0x5b0 [ 90.851008][ T2251] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 90.851033][ T2251] ? selinux_file_permission+0x318/0xb60 [ 90.851072][ T2251] ? __kasan_check_write+0x18/0x20 [ 90.851105][ T2251] ? proc_fail_nth_write+0x184/0x220 [ 90.851137][ T2251] tun_chr_write_iter+0x1fa/0x310 [ 90.851168][ T2251] vfs_write+0x765/0xfd0 [ 90.851191][ T2251] ? __cfi_vfs_write+0x10/0x10 [ 90.851229][ T2251] ksys_write+0x145/0x260 [ 90.851251][ T2251] ? __cfi_ksys_write+0x10/0x10 [ 90.851273][ T2251] ? __kasan_check_read+0x15/0x20 [ 90.851307][ T2251] __x64_sys_write+0x7f/0x90 [ 90.851328][ T2251] x64_sys_call+0x271c/0x2ee0 [ 90.851353][ T2251] do_syscall_64+0x57/0xf0 [ 90.851377][ T2251] ? clear_bhb_loop+0x50/0xa0 [ 90.851411][ T2251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.851442][ T2251] RIP: 0033:0x7f06d01a94d9 [ 90.851461][ T2251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.851523][ T2251] RSP: 002b:00007f06d113c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.851549][ T2251] RAX: ffffffffffffffda RBX: 00007f06d0425fa0 RCX: 00007f06d01a94d9 [ 90.851568][ T2251] RDX: 0000000000000012 RSI: 0000200000000900 RDI: 0000000000000003 [ 90.851584][ T2251] RBP: 00007f06d113c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.851598][ T2251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.851613][ T2251] R13: 00007f06d0426038 R14: 00007f06d0425fa0 R15: 00007ffec8040288 [ 90.851635][ T2251] [ 90.915099][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.920594][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 91.140318][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 91.232424][ T36] audit: type=1400 audit(1794553030.160:314): avc: denied { append } for pid=2264 comm="syz.3.699" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.278509][ T45] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 91.294988][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 91.315639][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.326734][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.336580][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.343276][ T9] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 91.352467][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.365152][ T9] usb 3-1: config 0 descriptor?? [ 91.411923][ T36] audit: type=1400 audit(1794553030.340:315): avc: denied { bind } for pid=2273 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.448336][ T36] audit: type=1400 audit(1794553030.340:316): avc: denied { name_bind } for pid=2273 comm="syz.1.703" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 91.487395][ T300] usb 1-1: USB disconnect, device number 8 [ 91.493391][ T36] audit: type=1400 audit(1794553030.340:317): avc: denied { node_bind } for pid=2273 comm="syz.1.703" saddr=ff01::1 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.516155][ T300] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 91.559659][ T2277] can0: slcan on ptm0. [ 91.584932][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 91.658553][ T2277] can0 (unregistered): slcan off ptm0. [ 91.683945][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.690432][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.697247][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.744935][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 91.773088][ T9] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 91.780355][ T9] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 91.780612][ T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 91.788190][ T9] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 91.803809][ T9] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 91.811127][ T9] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 91.815047][ T45] usb 4-1: config 0 has no interface number 0 [ 91.829251][ T45] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 91.839558][ T45] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.842376][ T9] itetech 0003:258A:6A88.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 91.849878][ T45] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.871845][ T45] usb 4-1: config 0 interface 196 has no altsetting 0 [ 91.880404][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 91.889798][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.898013][ T45] usb 4-1: Product: syz [ 91.902371][ T45] usb 4-1: Manufacturer: syz [ 91.907197][ T45] usb 4-1: SerialNumber: syz [ 91.912832][ T45] usb 4-1: config 0 descriptor?? [ 91.918345][ T2268] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 92.038005][ T9] usb 3-1: USB disconnect, device number 9 [ 92.327047][ T45] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 92.341829][ T45] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 92.529096][ T2283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.594924][ T36] audit: type=1400 audit(1794553031.520:318): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 92.726296][ T36] audit: type=1400 audit(1794553031.660:319): avc: denied { ioctl } for pid=2287 comm="syz.2.708" path="socket:[39160]" dev="sockfs" ino=39160 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.923652][ T2296] netlink: 'syz.2.711': attribute type 11 has an invalid length. [ 93.025477][ T2300] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.12288.0), cmd(9) [ 93.048635][ T2303] can0: slcan on ptm1. [ 93.092290][ T2303] can0 (unregistered): slcan off ptm1. [ 93.116279][ T2311] FAULT_INJECTION: forcing a failure. [ 93.116279][ T2311] name failslab, interval 1, probability 0, space 0, times 0 [ 93.129054][ T2311] CPU: 0 UID: 0 PID: 2311 Comm: syz.0.717 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 93.129088][ T2311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.129103][ T2311] Call Trace: [ 93.129112][ T2311] [ 93.129120][ T2311] __dump_stack+0x21/0x30 [ 93.129148][ T2311] dump_stack_lvl+0x140/0x1c0 [ 93.129170][ T2311] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.129190][ T2311] ? avc_has_perm+0x155/0x240 [ 93.129225][ T2311] ? __cfi_avc_has_perm+0x10/0x10 [ 93.129249][ T2311] ? hook_file_open+0x1f2/0x8d0 [ 93.129280][ T2311] dump_stack+0x19/0x20 [ 93.129299][ T2311] should_fail_ex+0x3c2/0x510 [ 93.129320][ T2311] should_failslab+0xac/0x100 [ 93.129345][ T2311] __kmalloc_cache_noprof+0x41/0x470 [ 93.129378][ T2311] ? vhost_task_create+0x12c/0x3f0 [ 93.129406][ T2311] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 93.129436][ T2311] vhost_task_create+0x12c/0x3f0 [ 93.129462][ T2311] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 93.129492][ T2311] ? __cfi_vhost_task_create+0x10/0x10 [ 93.129520][ T2311] ? __cfi_vhost_task_fn+0x10/0x10 [ 93.129547][ T2311] ? __kasan_check_write+0x18/0x20 [ 93.129579][ T2311] ? mutex_lock+0x97/0x1d0 [ 93.129608][ T2311] ? __cfi_mutex_lock+0x10/0x10 [ 93.129637][ T2311] ? kernel_text_address+0xa9/0xe0 [ 93.129675][ T2311] kvm_mmu_post_init_vm+0x161/0x300 [ 93.129698][ T2311] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 93.129734][ T2311] ? _parse_integer_limit+0x195/0x1e0 [ 93.129767][ T2311] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 93.129801][ T2311] ? kstrtoull+0x13b/0x1e0 [ 93.129832][ T2311] ? kstrtouint+0x78/0xf0 [ 93.129862][ T2311] ? ioctl_has_perm+0x1bc/0x500 [ 93.129881][ T2311] ? __asan_memcpy+0x5a/0x80 [ 93.129913][ T2311] ? ioctl_has_perm+0x408/0x500 [ 93.129932][ T2311] ? has_cap_mac_admin+0xd0/0xd0 [ 93.129953][ T2311] ? __kasan_check_write+0x18/0x20 [ 93.129983][ T2311] ? mutex_lock_killable+0x97/0x1d0 [ 93.130013][ T2311] ? __cfi_mutex_lock_killable+0x10/0x10 [ 93.130042][ T2311] ? proc_fail_nth_write+0x184/0x220 [ 93.130073][ T2311] kvm_vcpu_ioctl+0xa43/0x1000 [ 93.130098][ T2311] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 93.130122][ T2311] ? hook_file_ioctl+0x1ef/0x590 [ 93.130152][ T2311] ? __cfi_vfs_write+0x10/0x10 [ 93.130185][ T2311] ? __cfi_hook_file_ioctl+0x10/0x10 [ 93.130223][ T2311] ? __kasan_check_write+0x18/0x20 [ 93.130254][ T2311] ? mutex_unlock+0x90/0x240 [ 93.130287][ T2311] ? __cfi_mutex_unlock+0x10/0x10 [ 93.130318][ T2311] ? __fget_files+0x2bc/0x330 [ 93.130342][ T2311] ? bpf_lsm_file_ioctl+0xd/0x20 [ 93.130366][ T2311] ? security_file_ioctl+0x3e/0x110 [ 93.130398][ T2311] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 93.130422][ T2311] __se_sys_ioctl+0x123/0x1b0 [ 93.130446][ T2311] __x64_sys_ioctl+0x7f/0xa0 [ 93.130468][ T2311] x64_sys_call+0x1878/0x2ee0 [ 93.130492][ T2311] do_syscall_64+0x57/0xf0 [ 93.130514][ T2311] ? clear_bhb_loop+0x50/0xa0 [ 93.130546][ T2311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.130575][ T2311] RIP: 0033:0x7f20543a94d9 [ 93.130594][ T2311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.130614][ T2311] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.130637][ T2311] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 93.130655][ T2311] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 93.130669][ T2311] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 93.130684][ T2311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.130698][ T2311] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 93.130718][ T2311] [ 93.507759][ T2313] overlayfs: workdir and upperdir must be separate subtrees [ 93.715234][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 93.721409][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.801655][ T2330] can0: slcan on ptm1. [ 93.834976][ T343] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.846416][ T2330] can0 (unregistered): slcan off ptm1. [ 93.869449][ T36] audit: type=1400 audit(1794553032.800:320): avc: denied { getopt } for pid=2331 comm="syz.2.726" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.006141][ T343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.016392][ T343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.026151][ T343] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.035330][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.043506][ T343] usb 1-1: SerialNumber: syz [ 94.124981][ T300] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 94.252721][ T2334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.261442][ T300] usb 3-1: device descriptor read/64, error -71 [ 94.268902][ T2334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.280401][ T343] usb 1-1: 0:2 : does not exist [ 94.286129][ T343] usb 1-1: unit 5: unexpected type 0x0a [ 94.293744][ T343] usb 1-1: USB disconnect, device number 9 [ 94.322851][ T312] usb 4-1: USB disconnect, device number 13 [ 94.515022][ T300] usb 3-1: device descriptor read/64, error -71 [ 94.684730][ T2279] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 94.696366][ T312] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 94.757553][ T300] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 94.855975][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 94.883677][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 94.901123][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 94.912781][ T300] usb 3-1: device descriptor read/64, error -71 [ 94.920233][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.932329][ T312] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 94.943346][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.961756][ T312] usb 4-1: Product: syz [ 94.966199][ T312] usb 4-1: Manufacturer: syz [ 94.972375][ T312] usb 4-1: SerialNumber: syz [ 94.979766][ T2338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.987639][ T2338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.995800][ T312] pl2303 4-1:1.0: pl2303 converter detected [ 95.010429][ T312] pl2303 4-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 95.028475][ T2358] FAULT_INJECTION: forcing a failure. [ 95.028475][ T2358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.041673][ T2358] CPU: 0 UID: 0 PID: 2358 Comm: syz.1.735 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 95.041708][ T2358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 95.041724][ T2358] Call Trace: [ 95.041731][ T2358] [ 95.041739][ T2358] __dump_stack+0x21/0x30 [ 95.041767][ T2358] dump_stack_lvl+0x140/0x1c0 [ 95.041787][ T2358] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.041810][ T2358] ? find_vma+0xd3/0x120 [ 95.041845][ T2358] dump_stack+0x19/0x20 [ 95.041866][ T2358] should_fail_ex+0x3c2/0x510 [ 95.041890][ T2358] should_fail+0xf/0x20 [ 95.041909][ T2358] should_fail_usercopy+0x1e/0x30 [ 95.041934][ T2358] _copy_from_user+0x20/0xa0 [ 95.041960][ T2358] io_submit_one+0xe2/0x19e0 [ 95.042001][ T2358] ? lookup_ioctx+0x360/0x360 [ 95.042028][ T2358] ? asm_exc_page_fault+0x2b/0x30 [ 95.042062][ T2358] ? __get_user_4+0x18/0x40 [ 95.042096][ T2358] ? lookup_ioctx+0x206/0x360 [ 95.042123][ T2358] __se_sys_io_submit+0x17f/0x3f0 [ 95.042148][ T2358] ? __x64_sys_io_submit+0xa0/0xa0 [ 95.042171][ T2358] ? ksys_write+0x1f3/0x260 [ 95.042194][ T2358] ? __kasan_check_read+0x15/0x20 [ 95.042228][ T2358] __x64_sys_io_submit+0x7f/0xa0 [ 95.042252][ T2358] x64_sys_call+0x1c95/0x2ee0 [ 95.042277][ T2358] do_syscall_64+0x57/0xf0 [ 95.042300][ T2358] ? clear_bhb_loop+0x50/0xa0 [ 95.042328][ T2358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.042357][ T2358] RIP: 0033:0x7f55b19a94d9 [ 95.042376][ T2358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.042393][ T2358] RSP: 002b:00007f55b281d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.042416][ T2358] RAX: ffffffffffffffda RBX: 00007f55b1c25fa0 RCX: 00007f55b19a94d9 [ 95.042433][ T2358] RDX: 00002000000047c0 RSI: 0000000000000001 RDI: 00007f55b27f4000 [ 95.042448][ T2358] RBP: 00007f55b281d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.042462][ T2358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.042475][ T2358] R13: 00007f55b1c26038 R14: 00007f55b1c25fa0 R15: 00007ffc6e5ffc58 [ 95.042495][ T2358] [ 95.205078][ T300] usb 3-1: device descriptor read/64, error -71 [ 95.218915][ T63] usb 4-1: USB disconnect, device number 14 [ 95.293936][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.341574][ T2362] syz_tun: entered allmulticast mode [ 95.355061][ T300] usb usb3-port1: attempt power cycle [ 95.694995][ T300] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 95.716192][ T300] usb 3-1: device descriptor read/8, error -71 [ 95.857099][ T300] usb 3-1: device descriptor read/8, error -71 [ 96.104972][ T300] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.146149][ T300] usb 3-1: device descriptor read/8, error -71 [ 96.276149][ T300] usb 3-1: device descriptor read/8, error -71 [ 96.385224][ T300] usb usb3-port1: unable to enumerate USB device [ 96.734953][ T63] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 96.824615][ T2391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 96.884929][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 96.903797][ T63] usb 2-1: config index 0 descriptor too short (expected 5782, got 34) [ 96.914938][ T63] usb 2-1: config 3 has too many interfaces: 203, using maximum allowed: 32 [ 96.923864][ T63] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 96.944965][ T63] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 203 [ 96.955023][ T63] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 96.964147][ T63] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 96.973899][ T63] usb 2-1: Manufacturer: syz [ 97.132813][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 97.132832][ T36] audit: type=1400 audit(1794553036.060:326): avc: denied { getopt } for pid=2403 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.203623][ T36] audit: type=1400 audit(1794553036.130:327): avc: denied { read write } for pid=2386 comm="syz.1.745" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 97.228278][ T63] usb 2-1: USB disconnect, device number 16 [ 97.236108][ T36] audit: type=1400 audit(1794553036.130:328): avc: denied { open } for pid=2386 comm="syz.1.745" path="/175/bus/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 97.275824][ T36] audit: type=1400 audit(1794553036.130:329): avc: denied { ioctl } for pid=2386 comm="syz.1.745" path="/175/bus/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 97.295051][ T300] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 97.314959][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 97.321075][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.375267][ T36] audit: type=1400 audit(1794553036.310:330): avc: denied { ioctl } for pid=2392 comm="syz.2.748" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.454915][ T300] usb 3-1: Using ep0 maxpacket: 8 [ 97.465813][ T300] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.472479][ T300] usb 3-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.00 [ 97.491776][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.506237][ T300] usb 3-1: config 0 descriptor?? [ 97.739224][ T36] audit: type=1400 audit(1794553036.670:331): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.841134][ T369] bridge_slave_1: left allmulticast mode [ 97.846898][ T369] bridge_slave_1: left promiscuous mode [ 97.857176][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.876608][ T369] bridge_slave_0: left allmulticast mode [ 97.882347][ T369] bridge_slave_0: left promiscuous mode [ 97.914979][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.920086][ T300] input: HID 045e:071d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:071D.0008/input/input21 [ 97.927452][ T36] audit: type=1400 audit(1794553036.840:332): avc: denied { create } for pid=2392 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.960176][ T36] audit: type=1400 audit(1794553036.840:333): avc: denied { setopt } for pid=2392 comm="syz.2.748" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.969630][ T300] microsoft 0003:045E:071D.0008: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 045e:071d] on usb-dummy_hcd.2-1/input0 [ 97.982811][ T36] audit: type=1400 audit(1794553036.910:334): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.068479][ T36] audit: type=1400 audit(1794553036.910:335): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=527 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.118562][ T2393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.127351][ T2393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.140798][ T369] veth1_macvtap: left promiscuous mode [ 98.146577][ T369] veth0_vlan: left promiscuous mode [ 98.152914][ T300] usb 3-1: USB disconnect, device number 14 [ 98.288083][ T2360] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 98.372608][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.379761][ T2416] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.388654][ T2416] bridge_slave_0: entered allmulticast mode [ 98.395181][ T2416] bridge_slave_0: entered promiscuous mode [ 98.401883][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.419166][ T2416] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.433219][ T2416] bridge_slave_1: entered allmulticast mode [ 98.442576][ T2416] bridge_slave_1: entered promiscuous mode [ 98.569449][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.576579][ T2416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.583952][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.591055][ T2416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.622316][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.630211][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.640683][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.647792][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.658693][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.665806][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.734096][ T2416] veth0_vlan: entered promiscuous mode [ 98.752089][ T2438] FAULT_INJECTION: forcing a failure. [ 98.752089][ T2438] name failslab, interval 1, probability 0, space 0, times 0 [ 98.770781][ T2416] veth1_macvtap: entered promiscuous mode [ 98.784993][ T2438] CPU: 1 UID: 0 PID: 2438 Comm: syz.0.766 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 98.785032][ T2438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 98.785047][ T2438] Call Trace: [ 98.785054][ T2438] [ 98.785064][ T2438] __dump_stack+0x21/0x30 [ 98.785090][ T2438] dump_stack_lvl+0x140/0x1c0 [ 98.785111][ T2438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.785133][ T2438] ? __kasan_check_write+0x18/0x20 [ 98.785165][ T2438] ? rwsem_read_trylock+0x275/0x5a0 [ 98.785193][ T2438] dump_stack+0x19/0x20 [ 98.785213][ T2438] should_fail_ex+0x3c2/0x510 [ 98.785235][ T2438] should_failslab+0xac/0x100 [ 98.785258][ T2438] __kmalloc_cache_noprof+0x41/0x470 [ 98.785291][ T2438] ? crypto_larval_alloc+0x6b/0x360 [ 98.785325][ T2438] crypto_larval_alloc+0x6b/0x360 [ 98.785357][ T2438] ? crypto_alg_lookup+0x314/0x3b0 [ 98.785378][ T2438] crypto_alg_mod_lookup+0x1ad/0x5a0 [ 98.785412][ T2438] crypto_alloc_tfm_node+0x13f/0x350 [ 98.785434][ T2438] crypto_alloc_skcipher+0x34/0x40 [ 98.785456][ T2438] crypt_alloc_tfms+0x127/0x4d0 [ 98.785491][ T2438] crypt_ctr+0x14ee/0x3a80 [ 98.785525][ T2438] ? __cfi_crypt_ctr+0x10/0x10 [ 98.785560][ T2438] ? __kmalloc_cache_noprof+0x23c/0x470 [ 98.785602][ T2438] ? dm_split_args+0xa1/0x740 [ 98.785624][ T2438] ? skip_spaces+0x80/0xa0 [ 98.785653][ T2438] ? dm_split_args+0x4f0/0x740 [ 98.785676][ T2438] dm_table_add_target+0x59c/0xcb0 [ 98.785700][ T2438] table_load+0x2eb/0x7d0 [ 98.785730][ T2438] ? __check_object_size+0x99/0x870 [ 98.785765][ T2438] ? __cfi_table_load+0x10/0x10 [ 98.785795][ T2438] ? __kasan_check_write+0x18/0x20 [ 98.785826][ T2438] ? __cfi_table_load+0x10/0x10 [ 98.785857][ T2438] dm_ctl_ioctl+0x8f3/0xde0 [ 98.785889][ T2438] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 98.785926][ T2438] ? __fget_files+0x2bc/0x330 [ 98.785949][ T2438] ? bpf_lsm_file_ioctl+0xd/0x20 [ 98.785972][ T2438] ? security_file_ioctl+0x3e/0x110 [ 98.786005][ T2438] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 98.786036][ T2438] __se_sys_ioctl+0x123/0x1b0 [ 98.786060][ T2438] __x64_sys_ioctl+0x7f/0xa0 [ 98.786083][ T2438] x64_sys_call+0x1878/0x2ee0 [ 98.786107][ T2438] do_syscall_64+0x57/0xf0 [ 98.786131][ T2438] ? clear_bhb_loop+0x50/0xa0 [ 98.786161][ T2438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.786191][ T2438] RIP: 0033:0x7f20543a94d9 [ 98.786210][ T2438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.786230][ T2438] RSP: 002b:00007f205527e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.786253][ T2438] RAX: ffffffffffffffda RBX: 00007f2054625fa0 RCX: 00007f20543a94d9 [ 98.786271][ T2438] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 98.786286][ T2438] RBP: 00007f205527e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.786301][ T2438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.786315][ T2438] R13: 00007f2054626038 R14: 00007f2054625fa0 R15: 00007fffce410b58 [ 98.786335][ T2438] [ 98.786369][ T2438] device-mapper: table: 252:1: crypt: Error allocating crypto tfm (-ENOMEM) [ 99.097429][ T2438] device-mapper: ioctl: error adding target to table [ 99.144444][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.152187][ T369] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.255003][ T63] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 99.348132][ T298] syz_tun (unregistering): left allmulticast mode [ 99.381526][ T2448] FAULT_INJECTION: forcing a failure. [ 99.381526][ T2448] name failslab, interval 1, probability 0, space 0, times 0 [ 99.394366][ T2448] CPU: 1 UID: 0 PID: 2448 Comm: syz.4.770 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 99.394403][ T2448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.394419][ T2448] Call Trace: [ 99.394427][ T2448] [ 99.394435][ T2448] __dump_stack+0x21/0x30 [ 99.394463][ T2448] dump_stack_lvl+0x140/0x1c0 [ 99.394486][ T2448] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.394509][ T2448] dump_stack+0x19/0x20 [ 99.394530][ T2448] should_fail_ex+0x3c2/0x510 [ 99.394553][ T2448] should_failslab+0xac/0x100 [ 99.394578][ T2448] kmem_cache_alloc_node_noprof+0x45/0x420 [ 99.394616][ T2448] ? dup_task_struct+0xc1/0xd80 [ 99.394649][ T2448] ? kasan_save_alloc_info+0x3a/0x50 [ 99.394680][ T2448] ? __kasan_kmalloc+0x96/0xb0 [ 99.394704][ T2448] ? __kmalloc_cache_noprof+0x23c/0x470 [ 99.394741][ T2448] dup_task_struct+0xc1/0xd80 [ 99.394773][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.394807][ T2448] ? _raw_spin_lock_irq+0x93/0x120 [ 99.394832][ T2448] ? copy_process+0x33a0/0x33a0 [ 99.394869][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.394903][ T2448] copy_process+0x579/0x33a0 [ 99.394939][ T2448] ? kasan_save_alloc_info+0x3a/0x50 [ 99.394970][ T2448] ? __cfi_copy_process+0x10/0x10 [ 99.395003][ T2448] ? __kmalloc_cache_noprof+0x23c/0x470 [ 99.395039][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.395073][ T2448] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 99.395115][ T2448] vhost_task_create+0x1f7/0x3f0 [ 99.395144][ T2448] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 99.395176][ T2448] ? __cfi_vhost_task_create+0x10/0x10 [ 99.395207][ T2448] ? __cfi_vhost_task_fn+0x10/0x10 [ 99.395235][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.395268][ T2448] ? mutex_lock+0x97/0x1d0 [ 99.395298][ T2448] ? __cfi_mutex_lock+0x10/0x10 [ 99.395328][ T2448] ? kernel_text_address+0xa9/0xe0 [ 99.395364][ T2448] kvm_mmu_post_init_vm+0x161/0x300 [ 99.395389][ T2448] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 99.395424][ T2448] ? _parse_integer_limit+0x195/0x1e0 [ 99.395459][ T2448] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 99.395494][ T2448] ? kstrtoull+0x13b/0x1e0 [ 99.395525][ T2448] ? kstrtouint+0x78/0xf0 [ 99.395557][ T2448] ? ioctl_has_perm+0x1bc/0x500 [ 99.395579][ T2448] ? __asan_memcpy+0x5a/0x80 [ 99.395612][ T2448] ? ioctl_has_perm+0x408/0x500 [ 99.395633][ T2448] ? has_cap_mac_admin+0xd0/0xd0 [ 99.395654][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.395687][ T2448] ? mutex_lock_killable+0x97/0x1d0 [ 99.395718][ T2448] ? __cfi_mutex_lock_killable+0x10/0x10 [ 99.395748][ T2448] ? proc_fail_nth_write+0x184/0x220 [ 99.395781][ T2448] kvm_vcpu_ioctl+0xa43/0x1000 [ 99.395808][ T2448] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 99.395833][ T2448] ? hook_file_ioctl+0x1ef/0x590 [ 99.395866][ T2448] ? __cfi_vfs_write+0x10/0x10 [ 99.395901][ T2448] ? __cfi_hook_file_ioctl+0x10/0x10 [ 99.395931][ T2448] ? __kasan_check_write+0x18/0x20 [ 99.395964][ T2448] ? mutex_unlock+0x90/0x240 [ 99.395993][ T2448] ? __cfi_mutex_unlock+0x10/0x10 [ 99.396025][ T2448] ? __fget_files+0x2bc/0x330 [ 99.396050][ T2448] ? bpf_lsm_file_ioctl+0xd/0x20 [ 99.396075][ T2448] ? security_file_ioctl+0x3e/0x110 [ 99.396117][ T2448] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 99.396141][ T2448] __se_sys_ioctl+0x123/0x1b0 [ 99.396167][ T2448] __x64_sys_ioctl+0x7f/0xa0 [ 99.396191][ T2448] x64_sys_call+0x1878/0x2ee0 [ 99.396217][ T2448] do_syscall_64+0x57/0xf0 [ 99.396241][ T2448] ? clear_bhb_loop+0x50/0xa0 [ 99.396273][ T2448] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.396304][ T2448] RIP: 0033:0x7f0309fa94d9 [ 99.396323][ T2448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.396342][ T2448] RSP: 002b:00007f030ad89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.396367][ T2448] RAX: ffffffffffffffda RBX: 00007f030a225fa0 RCX: 00007f0309fa94d9 [ 99.396386][ T2448] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 99.396401][ T2448] RBP: 00007f030ad89090 R08: 0000000000000000 R09: 0000000000000000 [ 99.396415][ T2448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.396430][ T2448] R13: 00007f030a226038 R14: 00007f030a225fa0 R15: 00007ffc1d33e4c8 [ 99.396451][ T2448] [ 99.819974][ T63] usb 3-1: not running at top speed; connect to a high speed hub [ 99.832720][ T311] bridge_slave_1: left allmulticast mode [ 99.838639][ T311] bridge_slave_1: left promiscuous mode [ 99.844304][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.852408][ T311] bridge_slave_0: left allmulticast mode [ 99.858164][ T311] bridge_slave_0: left promiscuous mode [ 99.863809][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.893702][ T63] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.909058][ T63] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.956805][ T63] usb 3-1: config 1 interface 0 has no altsetting 0 [ 99.984508][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.003904][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.022172][ T63] usb 3-1: Product: ퟡ㧘ゞ絪캘褳䰲뿝༰녗冾ꥪ쁺莘齉ᰅ캾䔁豲뙁쯈绊솥䱒ᓽ祖㔚⏘勘㍕搒楆迾믠됥䩤ጄꥅ䐛䊨ꕱ㌈쁊焓熚⥪舺ᑗ縺졛ⳏ [ 100.042160][ T311] veth1_macvtap: left promiscuous mode [ 100.048669][ T311] veth0_vlan: left promiscuous mode [ 100.064144][ T63] usb 3-1: Manufacturer: ⛗専ᬋ䘅⏆팴˪ࣇ娋嶖嚗梮큥౿臽욱㞬膁㎶ⷲ܍▋淕ܳ鞌ᐼ [ 100.099987][ T63] usb 3-1: SerialNumber: ṛ [ 100.130813][ T2436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.359504][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.373207][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.402578][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.415229][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.442082][ T2456] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.446183][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.449462][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.466111][ T2456] bridge_slave_0: entered allmulticast mode [ 100.472654][ T2456] bridge_slave_0: entered promiscuous mode [ 100.480128][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.491832][ T2456] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.504676][ T2456] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.520210][ T2456] bridge_slave_1: entered allmulticast mode [ 100.532367][ T2456] bridge_slave_1: entered promiscuous mode [ 100.667318][ T2456] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.674527][ T2456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.681892][ T2456] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.688994][ T2456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.697084][ T2436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.727692][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.736923][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.758300][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.765463][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.789107][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.796245][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.866709][ T2456] veth0_vlan: entered promiscuous mode [ 100.898368][ T2456] veth1_macvtap: entered promiscuous mode [ 100.939093][ T63] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 100.954166][ T63] usb 3-1: USB disconnect, device number 15 [ 101.154984][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 101.161157][ T352] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.754965][ T312] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 101.917719][ T312] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.937296][ T2496] FAULT_INJECTION: forcing a failure. [ 101.937296][ T2496] name failslab, interval 1, probability 0, space 0, times 0 [ 101.937652][ T312] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.974936][ T2496] CPU: 0 UID: 0 PID: 2496 Comm: syz.4.784 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 101.974974][ T2496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 101.974990][ T2496] Call Trace: [ 101.975007][ T2496] [ 101.975017][ T2496] __dump_stack+0x21/0x30 [ 101.975052][ T2496] dump_stack_lvl+0x140/0x1c0 [ 101.975079][ T2496] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.975110][ T2496] ? avc_has_perm+0x155/0x240 [ 101.975140][ T2496] ? __cfi_avc_has_perm+0x10/0x10 [ 101.975173][ T2496] ? hook_file_open+0x1f2/0x8d0 [ 101.975208][ T2496] dump_stack+0x19/0x20 [ 101.975236][ T2496] should_fail_ex+0x3c2/0x510 [ 101.975268][ T2496] should_failslab+0xac/0x100 [ 101.975294][ T2496] __kmalloc_cache_noprof+0x41/0x470 [ 101.975331][ T2496] ? vhost_task_create+0x12c/0x3f0 [ 101.975369][ T2496] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 101.975410][ T2496] vhost_task_create+0x12c/0x3f0 [ 101.975442][ T2496] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 101.975483][ T2496] ? __cfi_vhost_task_create+0x10/0x10 [ 101.975517][ T2496] ? __cfi_vhost_task_fn+0x10/0x10 [ 101.975553][ T2496] ? __kasan_check_write+0x18/0x20 [ 101.975595][ T2496] ? mutex_lock+0x97/0x1d0 [ 101.975629][ T2496] ? __cfi_mutex_lock+0x10/0x10 [ 101.975667][ T2496] ? kernel_text_address+0xa9/0xe0 [ 101.975712][ T2496] kvm_mmu_post_init_vm+0x161/0x300 [ 101.975748][ T2496] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 101.975793][ T2496] ? _parse_integer_limit+0x195/0x1e0 [ 101.975837][ T2496] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 101.975879][ T2496] ? kstrtoull+0x13b/0x1e0 [ 101.975920][ T2496] ? kstrtouint+0x78/0xf0 [ 101.975961][ T2496] ? ioctl_has_perm+0x1bc/0x500 [ 101.975986][ T2496] ? __asan_memcpy+0x5a/0x80 [ 101.976028][ T2496] ? ioctl_has_perm+0x408/0x500 [ 101.976053][ T2496] ? has_cap_mac_admin+0xd0/0xd0 [ 101.976081][ T2496] ? __kasan_check_write+0x18/0x20 [ 101.976120][ T2496] ? mutex_lock_killable+0x97/0x1d0 [ 101.976159][ T2496] ? __cfi_mutex_lock_killable+0x10/0x10 [ 101.976193][ T2496] ? proc_fail_nth_write+0x184/0x220 [ 101.976235][ T2496] kvm_vcpu_ioctl+0xa43/0x1000 [ 101.976268][ T2496] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 101.976299][ T2496] ? hook_file_ioctl+0x1ef/0x590 [ 101.976338][ T2496] ? __cfi_vfs_write+0x10/0x10 [ 101.976377][ T2496] ? __cfi_hook_file_ioctl+0x10/0x10 [ 101.976411][ T2496] ? __kasan_check_write+0x18/0x20 [ 101.976452][ T2496] ? mutex_unlock+0x90/0x240 [ 101.976485][ T2496] ? __cfi_mutex_unlock+0x10/0x10 [ 101.976526][ T2496] ? __fget_files+0x2bc/0x330 [ 101.976555][ T2496] ? bpf_lsm_file_ioctl+0xd/0x20 [ 101.976588][ T2496] ? security_file_ioctl+0x3e/0x110 [ 101.976630][ T2496] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 101.976660][ T2496] __se_sys_ioctl+0x123/0x1b0 [ 101.976693][ T2496] __x64_sys_ioctl+0x7f/0xa0 [ 101.976722][ T2496] x64_sys_call+0x1878/0x2ee0 [ 101.976762][ T2496] do_syscall_64+0x57/0xf0 [ 101.976789][ T2496] ? clear_bhb_loop+0x50/0xa0 [ 101.976830][ T2496] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.976866][ T2496] RIP: 0033:0x7f0309fa94d9 [ 101.976892][ T2496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.976915][ T2496] RSP: 002b:00007f030ad89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.976947][ T2496] RAX: ffffffffffffffda RBX: 00007f030a225fa0 RCX: 00007f0309fa94d9 [ 101.976969][ T2496] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 101.976987][ T2496] RBP: 00007f030ad89090 R08: 0000000000000000 R09: 0000000000000000 [ 101.977010][ T2496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.977027][ T2496] R13: 00007f030a226038 R14: 00007f030a225fa0 R15: 00007ffc1d33e4c8 [ 101.977051][ T2496] [ 101.988663][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.155206][ T2441] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 102.212006][ T312] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 102.392509][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.425358][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 102.425379][ T36] audit: type=1400 audit(1794553041.350:394): avc: denied { create } for pid=2498 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.465284][ T312] usb 4-1: config 0 descriptor?? [ 102.481844][ T36] audit: type=1400 audit(1794553041.380:395): avc: denied { read write } for pid=2498 comm="syz.4.786" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 102.514262][ T36] audit: type=1400 audit(1794553041.380:396): avc: denied { open } for pid=2498 comm="syz.4.786" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 102.538529][ T36] audit: type=1400 audit(1794553041.380:397): avc: denied { map } for pid=2498 comm="syz.4.786" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.562942][ T36] audit: type=1400 audit(1794553041.380:398): avc: denied { read write } for pid=2498 comm="syz.4.786" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.596962][ T36] audit: type=1400 audit(1794553041.380:399): avc: denied { map } for pid=2498 comm="syz.4.786" path="socket:[42273]" dev="sockfs" ino=42273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 102.663186][ T36] audit: type=1400 audit(1794553041.470:400): avc: denied { setattr } for pid=2497 comm="syz.0.785" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 102.852407][ T2516] FAULT_INJECTION: forcing a failure. [ 102.852407][ T2516] name failslab, interval 1, probability 0, space 0, times 0 [ 102.867179][ T2516] CPU: 1 UID: 0 PID: 2516 Comm: syz.2.791 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 102.867215][ T2516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 102.867229][ T2516] Call Trace: [ 102.867237][ T2516] [ 102.867245][ T2516] __dump_stack+0x21/0x30 [ 102.867275][ T2516] dump_stack_lvl+0x140/0x1c0 [ 102.867296][ T2516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.867319][ T2516] dump_stack+0x19/0x20 [ 102.867338][ T2516] should_fail_ex+0x3c2/0x510 [ 102.867359][ T2516] ? iovec_from_user+0x94/0x310 [ 102.867387][ T2516] should_failslab+0xac/0x100 [ 102.867411][ T2516] __kmalloc_noprof+0x69/0x510 [ 102.867442][ T2516] ? iovec_from_user+0x94/0x310 [ 102.867469][ T2516] ? hrtimer_start_range_ns+0x123f/0x2030 [ 102.867497][ T2516] iovec_from_user+0x94/0x310 [ 102.867525][ T2516] __import_iovec+0x154/0x7d0 [ 102.867553][ T2516] import_iovec+0x80/0xb0 [ 102.867580][ T2516] ___sys_recvmsg+0x4bb/0x590 [ 102.867611][ T2516] ? kstrtoull+0x13b/0x1e0 [ 102.867641][ T2516] ? __sys_recvmsg+0x260/0x260 [ 102.867674][ T2516] ? kstrtouint_from_user+0x117/0x170 [ 102.867713][ T2516] do_recvmmsg+0x328/0x790 [ 102.867745][ T2516] ? __sys_recvmmsg+0x2a0/0x2a0 [ 102.867776][ T2516] ? __cfi_vfs_write+0x10/0x10 [ 102.867811][ T2516] ? fput+0x1a4/0x230 [ 102.867837][ T2516] __x64_sys_recvmmsg+0x199/0x250 [ 102.867869][ T2516] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 102.867901][ T2516] ? __kasan_check_read+0x15/0x20 [ 102.867933][ T2516] x64_sys_call+0x292c/0x2ee0 [ 102.867957][ T2516] do_syscall_64+0x57/0xf0 [ 102.867980][ T2516] ? clear_bhb_loop+0x50/0xa0 [ 102.868010][ T2516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.868040][ T2516] RIP: 0033:0x7f9bfbda94d9 [ 102.868059][ T2516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.868079][ T2516] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 102.868103][ T2516] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 102.868120][ T2516] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000003 [ 102.868135][ T2516] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 102.868149][ T2516] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 102.868169][ T2516] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 102.868189][ T2516] [ 103.216199][ T36] audit: type=1400 audit(1794553042.150:401): avc: denied { read append } for pid=2521 comm="syz.4.794" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 103.275790][ T36] audit: type=1400 audit(1794553042.150:402): avc: denied { ioctl open } for pid=2521 comm="syz.4.794" path="/12/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 103.314561][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 103.320708][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.331024][ T312] usb 4-1: USB disconnect, device number 15 [ 103.377724][ T36] audit: type=1400 audit(1794553042.310:403): avc: denied { read } for pid=2530 comm="syz.2.796" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.436496][ T2594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=2594 comm=syz.2.818 [ 104.450678][ T2595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2595 comm=syz.2.818 [ 104.471910][ T2596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2596 comm=syz.2.818 [ 104.484302][ T312] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 104.505424][ T2602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2602 comm=syz.2.818 [ 104.506114][ T2594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2594 comm=syz.2.818 [ 104.585355][ T2595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=2595 comm=syz.2.818 [ 104.625569][ T2594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2594 comm=syz.2.818 [ 104.637019][ T312] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.651098][ T312] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.684914][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.698297][ T312] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 104.717740][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.736374][ T312] usb 4-1: config 0 descriptor?? [ 105.015036][ T2612] netlink: 5 bytes leftover after parsing attributes in process `syz.2.822'. [ 105.040380][ T2612] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 105.062283][ T2612] 0ªî{X¹¦: entered allmulticast mode [ 105.078772][ T2612] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 105.349816][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 105.366026][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 105.384976][ T312] usb 4-1: USB disconnect, device number 16 [ 105.469774][ T2620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 105.475428][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 105.647358][ T45] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 105.664929][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.683162][ T45] usb 3-1: Product: syz [ 105.687468][ T45] usb 3-1: Manufacturer: syz [ 105.692094][ T45] usb 3-1: SerialNumber: syz [ 105.923100][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.940922][ T45] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.958697][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 105.979927][ T45] usb 3-1: USB disconnect, device number 16 [ 106.654923][ T451] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.666413][ T2657] FAULT_INJECTION: forcing a failure. [ 106.666413][ T2657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.714929][ T2657] CPU: 0 UID: 0 PID: 2657 Comm: syz.2.843 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 106.714968][ T2657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 106.714987][ T2657] Call Trace: [ 106.714995][ T2657] [ 106.715003][ T2657] __dump_stack+0x21/0x30 [ 106.715031][ T2657] dump_stack_lvl+0x140/0x1c0 [ 106.715051][ T2657] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.715075][ T2657] dump_stack+0x19/0x20 [ 106.715095][ T2657] should_fail_ex+0x3c2/0x510 [ 106.715119][ T2657] should_fail+0xf/0x20 [ 106.715138][ T2657] should_fail_usercopy+0x1e/0x30 [ 106.715162][ T2657] _copy_from_iter+0x1a6/0x1520 [ 106.715191][ T2657] ? __cfi__copy_from_iter+0x10/0x10 [ 106.715216][ T2657] ? __check_object_size+0x54c/0x870 [ 106.715252][ T2657] ? __cfi___check_object_size+0x10/0x10 [ 106.715287][ T2657] ? skb_put+0x10e/0x200 [ 106.715322][ T2657] netlink_sendmsg+0x66d/0xad0 [ 106.715356][ T2657] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.715389][ T2657] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 106.715411][ T2657] ? security_socket_sendmsg+0x3d/0x100 [ 106.715442][ T2657] ____sys_sendmsg+0x9a1/0xa00 [ 106.715476][ T2657] ? __import_iovec+0x5b9/0x7d0 [ 106.715504][ T2657] ? __sys_sendmsg_sock+0x50/0x50 [ 106.715538][ T2657] ? import_iovec+0x80/0xb0 [ 106.715567][ T2657] ___sys_sendmsg+0x2a6/0x370 [ 106.715600][ T2657] ? __sys_sendmsg+0x260/0x260 [ 106.715633][ T2657] ? proc_fail_nth_write+0x184/0x220 [ 106.715664][ T2657] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 106.715700][ T2657] ? __fget_files+0x2bc/0x330 [ 106.715726][ T2657] __x64_sys_sendmsg+0x1be/0x2a0 [ 106.715759][ T2657] ? fput+0x1a4/0x230 [ 106.715785][ T2657] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 106.715817][ T2657] ? ksys_write+0x1f3/0x260 [ 106.715840][ T2657] ? __kasan_check_read+0x15/0x20 [ 106.715883][ T2657] x64_sys_call+0x2a4c/0x2ee0 [ 106.715909][ T2657] do_syscall_64+0x57/0xf0 [ 106.715934][ T2657] ? clear_bhb_loop+0x50/0xa0 [ 106.715967][ T2657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.715999][ T2657] RIP: 0033:0x7f9bfbda94d9 [ 106.716019][ T2657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.716040][ T2657] RSP: 002b:00007f9bfcc42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.716065][ T2657] RAX: ffffffffffffffda RBX: 00007f9bfc025fa0 RCX: 00007f9bfbda94d9 [ 106.716083][ T2657] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 106.716099][ T2657] RBP: 00007f9bfcc42090 R08: 0000000000000000 R09: 0000000000000000 [ 106.716114][ T2657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.716129][ T2657] R13: 00007f9bfc026038 R14: 00007f9bfc025fa0 R15: 00007fffc1a840e8 [ 106.716150][ T2657] [ 107.016103][ T2659] printk: legacy console [ttyS0] disabled