last executing test programs: 48.079987815s ago: executing program 1 (id=1158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) syz_io_uring_setup(0x8, &(0x7f0000001140)={0x0, 0xcdc5, 0x6, 0x1, 0xe5}, &(0x7f00000011c0), 0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) clock_gettime(0xfffffffffffffff9, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000340)="420f23a3c4c3594071fb26660fd4363e660f38827b0d66b8be000f00d00f213f0f07360f1eeab9800000c00f3235000100000f3067f3f342ddce", 0x3a}], 0x1, 0x43, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x70, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "a3ff72cc5ea43a7b017ad2530e095a3d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000840)="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", 0x175}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c1", 0x2a}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7", 0x29}], 0x4}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1", 0xc4}, {&(0x7f0000000700)="223aa707c08a7eca577ac4e5fca75231526b9876be28f3", 0x17}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000140)={0x1, 0xb67, &(0x7f0000000040)="09fc7f67018ab7ea7eba6ae771e3c3efc96df1943be8cb1cdb903daf8eb4ac0a1b418b527a959a9822220fc861d5d992", &(0x7f00000000c0)="176dfeae9e0ada3b65d22534c4d375e6b0f7208d6cf55d81d14c5eb47b4a367548ff26d27d0d39cb5478cf18cde6661fe2c07b1e7c250270706b58711295e45f08abb9ec525decd7183f374f67b3664918bc2cb5cad62d1bf4c8657d354d24da15e745a4b34019681ac964dd76231aa6a3cd89e52b27c0ee", 0x30, 0x78}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 47.960458028s ago: executing program 1 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) write(r0, &(0x7f0000000800)='1\n\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') syz_open_procfs(0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r1, 0x406, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) fcntl$dupfd(r2, 0x0, r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) dup(0xffffffffffffffff) 47.931158559s ago: executing program 1 (id=1160): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) readlink(&(0x7f0000000000)='./sys/bus/platform/drivers/dummy_udc/bind\x00', &(0x7f0000000040)=""/81, 0x51) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 47.852566121s ago: executing program 1 (id=1161): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2000003}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 46.124607212s ago: executing program 1 (id=1173): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d02, &(0x7f0000000900)) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r3 = dup2(r0, r2) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) r4 = inotify_init() ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x400) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000140)={0x10003, 0x0, &(0x7f00004a5000/0x1000)=nil}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 45.878714398s ago: executing program 1 (id=1182): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x4, 0x8c, "aad7680f0430"}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 30.849631809s ago: executing program 32 (id=1182): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x4, 0x8c, "aad7680f0430"}}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.35250713s ago: executing program 2 (id=1679): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) pipe2(&(0x7f0000000200), 0x80000) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000600)={0x10, 0x16, 0x1, 0x70bd28, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x44040) read$eventfd(r0, &(0x7f0000000080), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r4, 0x409, 0x8) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e1d, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) listen(r3, 0xffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0xa0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xd, [], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x5, 0x9, 0xca, {0x14, 0x25, 0x1, 0x10, "912c9cc79366468c8c0181353a9997b3"}}}]}}}}}]}}, 0x0) 819.903141ms ago: executing program 0 (id=1730): r0 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2, 0x36, 0x7) 791.590341ms ago: executing program 0 (id=1732): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x8, &(0x7f0000000f00)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781e"], 0xfebc) 716.923093ms ago: executing program 0 (id=1733): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0xd}, 0xa, 0x23, &(0x7f0000000140)="5bcd8ce58cf0e4172c4c0393d41b0bb3b25354886564d98ed36d89362fbd075eadffe22431620eb9f28aa1d239e5e7f50d67ec13fb345a763a0e331d2a8aa7d97a26d0b78bcc87448c4556f732614039b2caa37096018174075c395e476b2902ec972bce8d5a3eaff1466ae6e660effa8a301d58d08b", 0x76, 0xfc, 0xd, 0x0, 0x4, 0x8008, &(0x7f0000000000)="986e2e0ce48bdf45fa4a248b1b73efb1d875a072ab8cef48033330fbbe152a8be58b2f03bd513f02c52dd658580967cb28ba41131a8e44011503150d12aa920ab8bed4dc79827cc2665f2b3cbfdde9911aaaa7e67ca63bb074d506d711a15d6c863d7717454034678d8a2da152c55c5f71f7756731454e16b44db31d53b486c821e1cbee403c746c09bd93aa0547d4bb20efc5735daaa64ffd7f0c07d3cf0a53"}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) 716.806443ms ago: executing program 0 (id=1734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400005, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2040, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8) close_range(r1, r1, 0x0) 606.193556ms ago: executing program 0 (id=1736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x2a, {"4831ff48c7c60010040048893e48c7c60050020048893e0f0b"}}], 0x2a}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x6, 0x2, 0x0, &(0x7f0000000180)=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 566.994927ms ago: executing program 0 (id=1739): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xd12, 0x200, 0x5, 0x5, 0x7, "ea71000500f9000000024200215f058400", 0xacc9, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x42) read(r0, &(0x7f00000004c0)=""/202, 0xca) 303.560563ms ago: executing program 2 (id=1750): ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2, 0x36, 0x7) 303.315873ms ago: executing program 3 (id=1751): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)='I', 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000b40)='Q', 0x1}, {&(0x7f0000000500)="df", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000840)="ee1d", 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000002040)='\\', 0x1}, {&(0x7f0000000d80)}, {&(0x7f0000000a00)='e', 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f0000000740)="6a86", 0x2}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="9e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="1e84d7a8dbea48", 0x7}], 0x1}}], 0x4, 0x4008440) 303.173553ms ago: executing program 2 (id=1752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe800000000000000000000000feffbb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x800) 236.951334ms ago: executing program 3 (id=1754): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 236.807884ms ago: executing program 2 (id=1755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x4, 0x7, 0x0, {0x2, 0x5, 0x54f, 0x2, 0x3, 0x0, 0x7fffffff, 0xd, 0x7, 0x4000, 0x8, 0x0, 0x0, 0x2, 0x2}}}, 0x78) wait4(0x0, 0x0, 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x1ff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 226.606255ms ago: executing program 3 (id=1756): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x8, &(0x7f0000000f00)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757821"], 0xfebc) 193.051425ms ago: executing program 4 (id=1758): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) pipe2(&(0x7f0000000200), 0x80000) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000600)={0x10, 0x16, 0x1, 0x70bd28, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x44040) read$eventfd(r0, &(0x7f0000000080), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r4, 0x409, 0x8) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e1d, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) listen(r3, 0xffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 158.100216ms ago: executing program 3 (id=1759): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, 0x0, 0xfebc) 157.983196ms ago: executing program 4 (id=1760): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffffffffffff, 0x80002) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xcbf0c) 156.889076ms ago: executing program 2 (id=1761): ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2, 0x36, 0x7) 146.148617ms ago: executing program 3 (id=1762): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)='I', 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000b40)='Q', 0x1}, {&(0x7f0000000500)="df", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000840)="ee1d", 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000000d80)="e3", 0x1}, {&(0x7f0000000a00)='e', 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f0000000740)="6a86", 0x2}, {&(0x7f0000002bc0)='>', 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="9e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="1e84d7a8dbea48", 0x7}], 0x1}}], 0x4, 0x4008440) 122.341998ms ago: executing program 4 (id=1763): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={0x14, 0x14, 0x1, 0x4, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r2, 0x6, 0x8, 0x0, &(0x7f0000001040)) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x8, 0x6}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80001) fcntl$getown(r1, 0x9) ioctl$EVIOCGKEYCODE(r3, 0x80084504, 0x0) 101.885588ms ago: executing program 2 (id=1764): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x8, &(0x7f0000000f00)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x2000006, 0x8, 0x155f, 0x10000006, 0x3, 0x401, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x7, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x20401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0x2, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x800, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x8, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x61, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x9, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) fsmount(r8, 0x0, 0x70) 99.169268ms ago: executing program 3 (id=1765): ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000000)={0x6, 0x6, 0x5e8, 0x130}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x1000007, 0xfff, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0xa, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x80100) 51.919769ms ago: executing program 4 (id=1766): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x2a, {"4831ff48c7c60010040048893e48c7c60050020048893e0f0b"}}], 0x2a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000140)={0x6, 0x2, 0x0, &(0x7f0000000180)=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 28.485629ms ago: executing program 4 (id=1774): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)='I', 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000b40)='Q', 0x1}, {&(0x7f0000000500)="df", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000840)="ee1d", 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000000d80)="e3", 0x1}, {&(0x7f0000000a00)='e', 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f0000000740)="6a86", 0x2}, {&(0x7f0000002bc0)='>', 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="9e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="1e84d7a8dbea48", 0x7}], 0x1}}], 0x4, 0x4008440) 0s ago: executing program 4 (id=1775): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x2a, {"4831ff48c7c60010040048893e48c7c60050020048893e0f0b"}}], 0x2a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000140)={0x6, 0x2, 0x0, &(0x7f0000000180)=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 150.685183][ T4011] ? mutex_lock+0x97/0x1d0 [ 150.685205][ T4011] ? __cfi_mutex_lock+0x10/0x10 [ 150.685228][ T4011] ksys_read+0x145/0x260 [ 150.685245][ T4011] ? __cfi_ksys_read+0x10/0x10 [ 150.685261][ T4011] ? __kasan_check_read+0x15/0x20 [ 150.685282][ T4011] __x64_sys_read+0x7f/0x90 [ 150.685302][ T4011] x64_sys_call+0x2638/0x2ee0 [ 150.685317][ T4011] do_syscall_64+0x57/0xf0 [ 150.685334][ T4011] ? clear_bhb_loop+0x50/0xa0 [ 150.685356][ T4011] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.685377][ T4011] RIP: 0033:0x7f899a35e6ce [ 150.685392][ T4011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.685407][ T4011] RSP: 002b:00007f8998df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.685424][ T4011] RAX: ffffffffffffffda RBX: 00007f8998df76c0 RCX: 00007f899a35e6ce [ 150.685437][ T4011] RDX: 000000000000000f RSI: 00007f8998df70a0 RDI: 0000000000000004 [ 150.685448][ T4011] RBP: 00007f8998df7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.685459][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.685470][ T4011] R13: 00007f899a626038 R14: 00007f899a625fa0 R15: 00007ffc6d53fd58 [ 150.685485][ T4011] [ 151.437529][ T4015] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 151.454617][ T4015] SELinux: failed to load policy [ 151.518841][ T4020] kvm: kvm [4016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 151.528800][ T36] audit: type=1400 audit(2016777530.432:620): avc: denied { create } for pid=4018 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.554632][ T4020] kvm: kvm [4016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 151.584340][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 151.648142][ T4025] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 151.734206][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 151.768529][ T4033] input: syz1 as /devices/virtual/input/input11 [ 151.786989][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 151.807137][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 151.840405][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 151.864106][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.873175][ T4039] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 151.893796][ T10] usb 4-1: Product: syz [ 151.898146][ T4039] SELinux: failed to load policy [ 151.903160][ T10] usb 4-1: Manufacturer: ᶍ刯萹븕黭픭䡏餪民㲐卆塻옪⭜璍ꥮ䨮㼂륿劑卡蚰年添꛽仦鬙礉襰ᤷ⺯儓赤Ꭻퟒᬒ⾝쨲䀬⡶핪퍵⸋첮쮖ꈐ쩵磁欤霿ﳲ석ᬕ兌鑗쿹쇑쵯ྴ幀﵍埖蛌旻껅ㄆ러셯缽븳ꢰ苅㶯肍쀖諠ⲇ๋䷵輦넭椰㾋룦찆琺捝댻敭伭먯㎦∑茕 [ 152.008922][ T10] usb 4-1: SerialNumber: syz [ 152.024971][ T4013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.194016][ T378] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 152.233366][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.245584][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.279750][ T10] usb 4-1: USB disconnect, device number 47 [ 152.366035][ T378] usb 3-1: Using ep0 maxpacket: 32 [ 152.384603][ T378] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 152.411107][ T378] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 152.430489][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.450699][ T378] usb 3-1: Product: syz [ 152.462956][ T378] usb 3-1: Manufacturer: syz [ 152.477069][ T378] usb 3-1: SerialNumber: syz [ 152.498359][ T4043] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.800915][ T4048] fuse: Unknown parameter '' [ 153.127801][ T4064] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 153.151778][ T4064] SELinux: failed to load policy [ 153.366062][ T4077] fuse: Bad value for 'group_id' [ 153.383903][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 153.408817][ T4077] fuse: Bad value for 'group_id' [ 153.564277][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 153.583248][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.615464][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 153.660614][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 153.669958][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.692238][ T10] usb 4-1: Product: syz [ 153.705158][ T10] usb 4-1: Manufacturer: syz [ 153.720328][ T10] usb 4-1: SerialNumber: syz [ 153.737324][ T10] usb 4-1: config 0 descriptor?? [ 153.755002][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 153.773145][ T10] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 154.024001][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.053265][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.930061][ T378] usb 3-1: MIDIStreaming interface descriptor not found [ 154.962444][ T378] usb 3-1: USB disconnect, device number 55 [ 155.358876][ T4111] SELinux: policydb string does not match my string SE Linux [ 155.384513][ T4111] SELinux: failed to load policy [ 155.527453][ T4122] FAULT_INJECTION: forcing a failure. [ 155.527453][ T4122] name failslab, interval 1, probability 0, space 0, times 0 [ 155.558623][ T4122] CPU: 0 UID: 0 PID: 4122 Comm: syz.0.1317 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 155.558660][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.558674][ T4122] Call Trace: [ 155.558682][ T4122] [ 155.558692][ T4122] __dump_stack+0x21/0x30 [ 155.558735][ T4122] dump_stack_lvl+0x140/0x1c0 [ 155.558758][ T4122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.558782][ T4122] dump_stack+0x19/0x20 [ 155.558803][ T4122] should_fail_ex+0x3c2/0x510 [ 155.558822][ T4122] ? io_alloc_hash_table+0x52/0x160 [ 155.558847][ T4122] should_failslab+0xac/0x100 [ 155.558867][ T4122] __kmalloc_noprof+0x69/0x510 [ 155.558883][ T4122] ? io_alloc_hash_table+0x52/0x160 [ 155.558907][ T4122] ? init_hash_table+0x1ae/0x270 [ 155.558937][ T4122] io_alloc_hash_table+0x52/0x160 [ 155.558962][ T4122] io_ring_ctx_alloc+0x10b/0x1dc0 [ 155.558980][ T4122] io_uring_create+0x2e0/0x13f0 [ 155.558996][ T4122] ? __kasan_check_write+0x18/0x20 [ 155.559013][ T4122] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 155.559035][ T4122] ? __kasan_check_write+0x18/0x20 [ 155.559051][ T4122] ? __x64_sys_io_uring_setup+0x80/0x80 [ 155.559075][ T4122] ? __kasan_check_read+0x15/0x20 [ 155.559091][ T4122] __x64_sys_io_uring_setup+0x5f/0x80 [ 155.559113][ T4122] x64_sys_call+0x22c0/0x2ee0 [ 155.559128][ T4122] do_syscall_64+0x57/0xf0 [ 155.559146][ T4122] ? clear_bhb_loop+0x50/0xa0 [ 155.559168][ T4122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.559188][ T4122] RIP: 0033:0x7fdee3d9de99 [ 155.559202][ T4122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.559216][ T4122] RSP: 002b:00007fdee4be8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 155.559234][ T4122] RAX: ffffffffffffffda RBX: 0000200000001140 RCX: 00007fdee3d9de99 [ 155.559247][ T4122] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000008 [ 155.559257][ T4122] RBP: 00007fdee4be9090 R08: 0000000000000000 R09: 0000000000000101 [ 155.559268][ T4122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.559278][ T4122] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffcd185e028 [ 155.559292][ T4122] [ 156.276355][ T4127] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 156.334559][ T4132] fuse: Bad value for 'user_id' [ 156.368386][ T4134] TCP: TCP_TX_DELAY enabled [ 156.381943][ T4132] fuse: Bad value for 'user_id' [ 156.389557][ T36] audit: type=1400 audit(2016777535.294:621): avc: denied { name_bind } for pid=4133 comm="syz.0.1322" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 156.453491][ T4132] ip6gretap0: entered promiscuous mode [ 156.491902][ T4132] ip6gretap0: entered allmulticast mode [ 156.531961][ T4132] syzkaller1: entered promiscuous mode [ 156.551172][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.561838][ T4132] syzkaller1: entered allmulticast mode [ 156.584189][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.104911][ T36] audit: type=1400 audit(2016777536.015:622): avc: denied { map } for pid=4160 comm="syz.3.1328" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.110359][ T4161] rust_binder: Failed to allocate buffer. len:4144, is_oneway:true [ 157.227051][ T4161] rust_binder: Failure in copy_transaction_data: ENOSPC [ 157.275587][ T4161] rust_binder: 4160:4161 transaction to 4160 failed: ENOSPC [ 157.711898][ T4169] FAULT_INJECTION: forcing a failure. [ 157.711898][ T4169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.832112][ T4169] CPU: 0 UID: 0 PID: 4169 Comm: syz.3.1331 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 157.832140][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.832152][ T4169] Call Trace: [ 157.832158][ T4169] [ 157.832165][ T4169] __dump_stack+0x21/0x30 [ 157.832193][ T4169] dump_stack_lvl+0x140/0x1c0 [ 157.832215][ T4169] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.832239][ T4169] dump_stack+0x19/0x20 [ 157.832260][ T4169] should_fail_ex+0x3c2/0x510 [ 157.832278][ T4169] should_fail+0xf/0x20 [ 157.832294][ T4169] should_fail_usercopy+0x1e/0x30 [ 157.832314][ T4169] strncpy_from_user+0x29/0x280 [ 157.832332][ T4169] getname_flags+0x106/0x6b0 [ 157.832352][ T4169] user_path_at+0x2b/0x60 [ 157.832371][ T4169] path_getxattr+0xae/0x210 [ 157.832390][ T4169] ? path_setxattr+0x5a0/0x5a0 [ 157.832409][ T4169] __x64_sys_getxattr+0xa5/0xc0 [ 157.832425][ T4169] x64_sys_call+0x2c80/0x2ee0 [ 157.832439][ T4169] do_syscall_64+0x57/0xf0 [ 157.832457][ T4169] ? clear_bhb_loop+0x50/0xa0 [ 157.832479][ T4169] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.832500][ T4169] RIP: 0033:0x7f01a7b9de99 [ 157.832513][ T4169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.832527][ T4169] RSP: 002b:00007f01a8a03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 157.832545][ T4169] RAX: ffffffffffffffda RBX: 00007f01a7e25fa0 RCX: 00007f01a7b9de99 [ 157.832558][ T4169] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 157.832569][ T4169] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000000 [ 157.832580][ T4169] R10: 00000000000000ed R11: 0000000000000246 R12: 0000000000000001 [ 157.832590][ T4169] R13: 00007f01a7e26038 R14: 00007f01a7e25fa0 R15: 00007ffc6821ad08 [ 157.832604][ T4169] [ 158.040123][ T4173] fuse: blksize only supported for fuseblk [ 158.056582][ T36] audit: type=1400 audit(2016777536.965:623): avc: denied { setopt } for pid=4174 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.141787][ T4178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 158.596186][ T36] audit: type=1400 audit(2016777537.505:624): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 158.676063][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.683863][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.696717][ T4192] bridge_slave_0: entered allmulticast mode [ 158.704223][ T4192] bridge_slave_0: entered promiscuous mode [ 158.711253][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.718343][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.725790][ T4192] bridge_slave_1: entered allmulticast mode [ 158.732740][ T4192] bridge_slave_1: entered promiscuous mode [ 158.804230][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.811379][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.818776][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.825913][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.855858][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.864393][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.875641][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.884073][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.894722][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.901834][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.941309][ T4192] veth0_vlan: entered promiscuous mode [ 158.958030][ T4192] veth1_macvtap: entered promiscuous mode [ 158.985818][ T36] audit: type=1400 audit(2016777537.896:625): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.gzRpFQ/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 159.017389][ T36] audit: type=1400 audit(2016777537.926:626): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.gzRpFQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 159.070592][ T36] audit: type=1400 audit(2016777537.926:627): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/root/syzkaller.gzRpFQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 159.090911][ T4201] FAULT_INJECTION: forcing a failure. [ 159.090911][ T4201] name failslab, interval 1, probability 0, space 0, times 0 [ 159.100030][ T36] audit: type=1400 audit(2016777537.926:628): avc: denied { mounton } for pid=4192 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 159.143794][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: syz.3.1341 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 159.143834][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.143849][ T4201] Call Trace: [ 159.143858][ T4201] [ 159.143867][ T4201] __dump_stack+0x21/0x30 [ 159.143904][ T4201] dump_stack_lvl+0x140/0x1c0 [ 159.143934][ T4201] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.143967][ T4201] dump_stack+0x19/0x20 [ 159.143996][ T4201] should_fail_ex+0x3c2/0x510 [ 159.144022][ T4201] should_failslab+0xac/0x100 [ 159.144050][ T4201] __kmalloc_node_noprof+0x69/0x500 [ 159.144074][ T4201] ? __kvmalloc_node_noprof+0x128/0x300 [ 159.144111][ T4201] __kvmalloc_node_noprof+0x128/0x300 [ 159.144147][ T4201] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 159.144194][ T4201] ? percpu_ref_init+0x190/0x4d0 [ 159.144222][ T4201] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 159.144249][ T4201] io_ring_ctx_alloc+0x35a/0x1dc0 [ 159.144274][ T4201] io_uring_create+0x2e0/0x13f0 [ 159.144297][ T4201] ? __kasan_check_write+0x18/0x20 [ 159.144321][ T4201] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 159.144352][ T4201] ? __kasan_check_write+0x18/0x20 [ 159.144374][ T4201] ? __x64_sys_io_uring_setup+0x80/0x80 [ 159.144409][ T4201] ? __kasan_check_read+0x15/0x20 [ 159.144433][ T4201] __x64_sys_io_uring_setup+0x5f/0x80 [ 159.144466][ T4201] x64_sys_call+0x22c0/0x2ee0 [ 159.144489][ T4201] do_syscall_64+0x57/0xf0 [ 159.144515][ T4201] ? clear_bhb_loop+0x50/0xa0 [ 159.144545][ T4201] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.144573][ T4201] RIP: 0033:0x7f01a7b9de99 [ 159.144593][ T4201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.144613][ T4201] RSP: 002b:00007f01a8a02fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 159.144637][ T4201] RAX: ffffffffffffffda RBX: 0000200000001140 RCX: 00007f01a7b9de99 [ 159.144655][ T4201] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000008 [ 159.144672][ T4201] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000101 [ 159.144688][ T4201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.144702][ T4201] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffc6821ad08 [ 159.144722][ T4201] [ 159.459939][ T4218] virtio-fs: tag not found [ 159.465361][ T4218] virtio-fs: tag not found [ 159.470767][ T4219] virtio-fs: tag not found [ 159.476036][ T4218] virtio-fs: tag not found [ 159.481559][ T4218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.490116][ T4218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.696936][ T36] audit: type=1400 audit(2016777538.606:629): avc: denied { view } for pid=4237 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 159.769020][ T4242] FAULT_INJECTION: forcing a failure. [ 159.769020][ T4242] name failslab, interval 1, probability 0, space 0, times 0 [ 159.800195][ T4242] CPU: 1 UID: 0 PID: 4242 Comm: syz.4.1355 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 159.800238][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.800255][ T4242] Call Trace: [ 159.800264][ T4242] [ 159.800276][ T4242] __dump_stack+0x21/0x30 [ 159.800325][ T4242] dump_stack_lvl+0x140/0x1c0 [ 159.800367][ T4242] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.800411][ T4242] dump_stack+0x19/0x20 [ 159.800451][ T4242] should_fail_ex+0x3c2/0x510 [ 159.800488][ T4242] should_failslab+0xac/0x100 [ 159.800526][ T4242] __kmalloc_node_noprof+0x69/0x500 [ 159.800561][ T4242] ? __kvmalloc_node_noprof+0x128/0x300 [ 159.800610][ T4242] __kvmalloc_node_noprof+0x128/0x300 [ 159.800653][ T4242] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 159.800699][ T4242] ? percpu_ref_init+0x190/0x4d0 [ 159.800735][ T4242] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 159.800770][ T4242] io_ring_ctx_alloc+0x428/0x1dc0 [ 159.800805][ T4242] io_uring_create+0x2e0/0x13f0 [ 159.800838][ T4242] ? __kasan_check_write+0x18/0x20 [ 159.800870][ T4242] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 159.800913][ T4242] ? __kasan_check_write+0x18/0x20 [ 159.800944][ T4242] ? __x64_sys_io_uring_setup+0x80/0x80 [ 159.800991][ T4242] ? __kasan_check_read+0x15/0x20 [ 159.801023][ T4242] __x64_sys_io_uring_setup+0x5f/0x80 [ 159.801065][ T4242] x64_sys_call+0x22c0/0x2ee0 [ 159.801095][ T4242] do_syscall_64+0x57/0xf0 [ 159.801140][ T4242] ? clear_bhb_loop+0x50/0xa0 [ 159.801180][ T4242] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.801219][ T4242] RIP: 0033:0x7fe749f9de99 [ 159.801246][ T4242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.801272][ T4242] RSP: 002b:00007fe7489f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 159.801305][ T4242] RAX: ffffffffffffffda RBX: 0000200000001140 RCX: 00007fe749f9de99 [ 159.801326][ T4242] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000008 [ 159.801344][ T4242] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000101 [ 159.801365][ T4242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.801385][ T4242] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffef9a34288 [ 159.801413][ T4242] [ 159.810196][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 160.280007][ T4252] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 160.324027][ T4257] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 160.343828][ T4257] SELinux: failed to load policy [ 160.355510][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.374148][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.391839][ T36] audit: type=1400 audit(2016777539.306:630): avc: denied { getopt } for pid=4253 comm="syz.3.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.459857][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 160.471081][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 160.483609][ T9] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 160.493137][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.519325][ T9] usb 3-1: Product: syz [ 160.523914][ T9] usb 3-1: Manufacturer: syz [ 160.528561][ T9] usb 3-1: SerialNumber: syz [ 160.544922][ T4225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 160.687354][ T4270] FAULT_INJECTION: forcing a failure. [ 160.687354][ T4270] name failslab, interval 1, probability 0, space 0, times 0 [ 160.700441][ T4270] CPU: 0 UID: 0 PID: 4270 Comm: syz.0.1367 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 160.700469][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.700480][ T4270] Call Trace: [ 160.700486][ T4270] [ 160.700492][ T4270] __dump_stack+0x21/0x30 [ 160.700522][ T4270] dump_stack_lvl+0x140/0x1c0 [ 160.700544][ T4270] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.700568][ T4270] dump_stack+0x19/0x20 [ 160.700589][ T4270] should_fail_ex+0x3c2/0x510 [ 160.700610][ T4270] should_failslab+0xac/0x100 [ 160.700631][ T4270] __kmalloc_node_noprof+0x69/0x500 [ 160.700648][ T4270] ? __kvmalloc_node_noprof+0x128/0x300 [ 160.700675][ T4270] __kvmalloc_node_noprof+0x128/0x300 [ 160.700699][ T4270] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 160.700724][ T4270] ? percpu_ref_init+0x190/0x4d0 [ 160.700743][ T4270] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 160.700761][ T4270] io_ring_ctx_alloc+0x428/0x1dc0 [ 160.700778][ T4270] io_uring_create+0x2e0/0x13f0 [ 160.700794][ T4270] ? __kasan_check_write+0x18/0x20 [ 160.700810][ T4270] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 160.700833][ T4270] ? __kasan_check_write+0x18/0x20 [ 160.700849][ T4270] ? __x64_sys_io_uring_setup+0x80/0x80 [ 160.700873][ T4270] ? __kasan_check_read+0x15/0x20 [ 160.700888][ T4270] __x64_sys_io_uring_setup+0x5f/0x80 [ 160.700910][ T4270] x64_sys_call+0x22c0/0x2ee0 [ 160.700924][ T4270] do_syscall_64+0x57/0xf0 [ 160.700942][ T4270] ? clear_bhb_loop+0x50/0xa0 [ 160.700964][ T4270] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.700985][ T4270] RIP: 0033:0x7fdee3d9de99 [ 160.700998][ T4270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.701012][ T4270] RSP: 002b:00007fdee4be8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 160.701030][ T4270] RAX: ffffffffffffffda RBX: 0000200000001140 RCX: 00007fdee3d9de99 [ 160.701043][ T4270] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000008 [ 160.701054][ T4270] RBP: 00007fdee4be9090 R08: 0000000000000000 R09: 0000000000000101 [ 160.701070][ T4270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.701081][ T4270] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffcd185e028 [ 160.701094][ T4270] [ 161.070726][ T4275] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 161.079539][ T406] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 161.147540][ T4283] fuse: Unknown parameter '0x000000000000000300000000000000000071' [ 161.163790][ T4281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.173250][ T4281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.250595][ T406] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.261748][ T406] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.272431][ T406] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 161.283530][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.291744][ T406] usb 5-1: SerialNumber: syz [ 161.300839][ T406] usb 5-1: bad CDC descriptors [ 161.305866][ T406] usb-storage 5-1:1.0: USB Mass Storage device detected [ 161.317892][ T406] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 161.326149][ T406] scsi host1: usb-storage 5-1:1.0 [ 161.821366][ T4305] overlayfs: missing 'lowerdir' [ 161.857958][ T4307] FAULT_INJECTION: forcing a failure. [ 161.857958][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 161.886710][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.0.1378 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 161.886739][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.886751][ T4307] Call Trace: [ 161.886757][ T4307] [ 161.886766][ T4307] __dump_stack+0x21/0x30 [ 161.886797][ T4307] dump_stack_lvl+0x140/0x1c0 [ 161.886820][ T4307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.886845][ T4307] dump_stack+0x19/0x20 [ 161.886867][ T4307] should_fail_ex+0x3c2/0x510 [ 161.886886][ T4307] should_failslab+0xac/0x100 [ 161.886907][ T4307] __kmalloc_node_noprof+0x69/0x500 [ 161.886924][ T4307] ? __kvmalloc_node_noprof+0x128/0x300 [ 161.886958][ T4307] __kvmalloc_node_noprof+0x128/0x300 [ 161.886983][ T4307] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 161.887008][ T4307] ? percpu_ref_init+0x190/0x4d0 [ 161.887026][ T4307] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 161.887044][ T4307] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 161.887061][ T4307] io_uring_create+0x2e0/0x13f0 [ 161.887077][ T4307] ? __kasan_check_write+0x18/0x20 [ 161.887093][ T4307] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 161.887117][ T4307] ? __kasan_check_write+0x18/0x20 [ 161.887133][ T4307] ? __x64_sys_io_uring_setup+0x80/0x80 [ 161.887157][ T4307] ? __kasan_check_read+0x15/0x20 [ 161.887172][ T4307] __x64_sys_io_uring_setup+0x5f/0x80 [ 161.887195][ T4307] x64_sys_call+0x22c0/0x2ee0 [ 161.887209][ T4307] do_syscall_64+0x57/0xf0 [ 161.887227][ T4307] ? clear_bhb_loop+0x50/0xa0 [ 161.887249][ T4307] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.887269][ T4307] RIP: 0033:0x7fdee3d9de99 [ 161.887284][ T4307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.887298][ T4307] RSP: 002b:00007fdee4be8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 161.887315][ T4307] RAX: ffffffffffffffda RBX: 0000200000001140 RCX: 00007fdee3d9de99 [ 161.887328][ T4307] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000008 [ 161.887339][ T4307] RBP: 00007fdee4be9090 R08: 0000000000000000 R09: 0000000000000101 [ 161.887350][ T4307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.887360][ T4307] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffcd185e028 [ 161.887373][ T4307] [ 162.126129][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.134784][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.417851][ T4311] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 162.556276][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 162.609804][ T9] usb 3-1: USB disconnect, device number 56 [ 162.624006][ T4322] FAULT_INJECTION: forcing a failure. [ 162.624006][ T4322] name failslab, interval 1, probability 0, space 0, times 0 [ 162.651406][ T1765] udevd[1765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.659113][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.2.1385 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 162.659226][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 162.659261][ T4322] Call Trace: [ 162.659283][ T4322] [ 162.659312][ T4322] __dump_stack+0x21/0x30 [ 162.659401][ T4322] dump_stack_lvl+0x140/0x1c0 [ 162.659478][ T4322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.659563][ T4322] ? check_stack_object+0x81/0x150 [ 162.659627][ T4322] ? __virt_addr_valid+0x2a1/0x370 [ 162.659703][ T4322] dump_stack+0x19/0x20 [ 162.659784][ T4322] should_fail_ex+0x3c2/0x510 [ 162.659849][ T4322] should_failslab+0xac/0x100 [ 162.659934][ T4322] __kmalloc_cache_noprof+0x41/0x470 [ 162.660012][ T4322] ? memdup_user+0xb1/0x170 [ 162.660124][ T4322] ? __se_sys_mount+0x15f/0x480 [ 162.660200][ T4322] __se_sys_mount+0x15f/0x480 [ 162.660263][ T4322] ? ksys_write+0x1f3/0x260 [ 162.660329][ T4322] ? __x64_sys_mount+0xf0/0xf0 [ 162.660393][ T4322] __x64_sys_mount+0xc3/0xf0 [ 162.660451][ T4322] x64_sys_call+0x2021/0x2ee0 [ 162.660506][ T4322] do_syscall_64+0x57/0xf0 [ 162.660569][ T4322] ? clear_bhb_loop+0x50/0xa0 [ 162.660645][ T4322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.660719][ T4322] RIP: 0033:0x7f899a39de99 [ 162.660772][ T4322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.660823][ T4322] RSP: 002b:00007f8998df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.660887][ T4322] RAX: ffffffffffffffda RBX: 00007f899a625fa0 RCX: 00007f899a39de99 [ 162.660947][ T4322] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 162.660990][ T4322] RBP: 00007f8998df7090 R08: 0000200000000280 R09: 0000000000000000 [ 162.661031][ T4322] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 162.661065][ T4322] R13: 00007f899a626038 R14: 00007f899a625fa0 R15: 00007ffc6d53fd58 [ 162.661119][ T4322] [ 162.744268][ T4325] FAULT_INJECTION: forcing a failure. [ 162.744268][ T4325] name failslab, interval 1, probability 0, space 0, times 0 [ 162.744301][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: syz.0.1387 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 162.744332][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 162.744345][ T4325] Call Trace: [ 162.744353][ T4325] [ 162.744363][ T4325] __dump_stack+0x21/0x30 [ 162.744461][ T4325] dump_stack_lvl+0x140/0x1c0 [ 162.744565][ T4325] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.744650][ T4325] ? kernel_text_address+0xa9/0xe0 [ 162.744736][ T4325] ? unwind_get_return_address+0x51/0x90 [ 162.744811][ T4325] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 162.744895][ T4325] dump_stack+0x19/0x20 [ 162.744979][ T4325] should_fail_ex+0x3c2/0x510 [ 162.745044][ T4325] should_failslab+0xac/0x100 [ 162.745118][ T4325] __kmalloc_node_noprof+0x69/0x500 [ 162.745181][ T4325] ? __kvmalloc_node_noprof+0x128/0x300 [ 162.745278][ T4325] __kvmalloc_node_noprof+0x128/0x300 [ 162.745369][ T4325] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 162.745488][ T4325] ? __x64_sys_getxattr+0xa5/0xc0 [ 162.745551][ T4325] ? mfill_atomic_pte_zeropage+0x3a0/0x3b0 [ 162.745624][ T4325] do_getxattr+0xf1/0x430 [ 162.745680][ T4325] getxattr+0x196/0x250 [ 162.745752][ T4325] ? path_getxattr+0x210/0x210 [ 162.745826][ T4325] ? putname+0x113/0x150 [ 162.745930][ T4325] path_getxattr+0x10b/0x210 [ 162.746016][ T4325] ? path_setxattr+0x5a0/0x5a0 [ 162.746082][ T4325] __x64_sys_getxattr+0xa5/0xc0 [ 162.746144][ T4325] x64_sys_call+0x2c80/0x2ee0 [ 162.746198][ T4325] do_syscall_64+0x57/0xf0 [ 162.746265][ T4325] ? clear_bhb_loop+0x50/0xa0 [ 162.746348][ T4325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.746415][ T4325] RIP: 0033:0x7fdee3d9de99 [ 162.746461][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.746521][ T4325] RSP: 002b:00007fdee4be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 162.746583][ T4325] RAX: ffffffffffffffda RBX: 00007fdee4025fa0 RCX: 00007fdee3d9de99 [ 162.746628][ T4325] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 162.746670][ T4325] RBP: 00007fdee4be9090 R08: 0000000000000000 R09: 0000000000000000 [ 162.746710][ T4325] R10: 00000000000000ed R11: 0000000000000246 R12: 0000000000000001 [ 162.746751][ T4325] R13: 00007fdee4026038 R14: 00007fdee4025fa0 R15: 00007ffcd185e028 [ 162.746806][ T4325] [ 162.748448][ T4323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.138574][ T4330] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 163.215588][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 163.215608][ T36] audit: type=1400 audit(2016777542.118:632): avc: denied { getopt } for pid=4331 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.284773][ T4323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.336521][ T4346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.345622][ T4346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.608324][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 163.728524][ T406] usb 5-1: USB disconnect, device number 2 [ 163.758247][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 163.764745][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.775375][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.787130][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.796419][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.804634][ T9] usb 3-1: Product: syz [ 163.809060][ T9] usb 3-1: Manufacturer: syz [ 163.813747][ T9] usb 3-1: SerialNumber: syz [ 163.948105][ T406] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 164.099228][ T406] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.107311][ T406] usb 5-1: config 0 has no interface number 0 [ 164.113731][ T406] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.124885][ T406] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.134856][ T406] usb 5-1: config 0 interface 1 has no altsetting 0 [ 164.141553][ T406] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 164.150659][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.160111][ T406] usb 5-1: config 0 descriptor?? [ 164.327174][ T4352] syzkaller1: entered promiscuous mode [ 164.332816][ T4352] syzkaller1: entered allmulticast mode [ 164.851497][ T36] audit: type=1400 audit(2016777543.758:633): avc: denied { read } for pid=4333 comm="syz.4.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.959507][ T4358] FAULT_INJECTION: forcing a failure. [ 164.959507][ T4358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.972935][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.3.1398 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 164.972963][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.972974][ T4358] Call Trace: [ 164.972998][ T4358] [ 164.973009][ T4358] __dump_stack+0x21/0x30 [ 164.973049][ T4358] dump_stack_lvl+0x140/0x1c0 [ 164.973082][ T4358] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.973106][ T4358] ? check_stack_object+0x138/0x150 [ 164.973124][ T4358] dump_stack+0x19/0x20 [ 164.973166][ T4358] should_fail_ex+0x3c2/0x510 [ 164.973191][ T4358] should_fail+0xf/0x20 [ 164.973216][ T4358] should_fail_usercopy+0x1e/0x30 [ 164.973242][ T4358] _copy_to_user+0x24/0xa0 [ 164.973264][ T4358] simple_read_from_buffer+0xed/0x160 [ 164.973305][ T4358] proc_fail_nth_read+0x1aa/0x220 [ 164.973338][ T4358] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.973376][ T4358] ? getxattr+0x1a3/0x250 [ 164.973395][ T4358] ? bpf_lsm_file_permission+0xd/0x20 [ 164.973416][ T4358] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 164.973458][ T4358] vfs_read+0x28b/0xc70 [ 164.973481][ T4358] ? __cfi_vfs_read+0x10/0x10 [ 164.973502][ T4358] ? __kasan_check_write+0x18/0x20 [ 164.973530][ T4358] ? mutex_lock+0x97/0x1d0 [ 164.973552][ T4358] ? __cfi_mutex_lock+0x10/0x10 [ 164.973575][ T4358] ksys_read+0x145/0x260 [ 164.973610][ T4358] ? __cfi_ksys_read+0x10/0x10 [ 164.973634][ T4358] ? __kasan_check_read+0x15/0x20 [ 164.973656][ T4358] __x64_sys_read+0x7f/0x90 [ 164.973681][ T4358] x64_sys_call+0x2638/0x2ee0 [ 164.973696][ T4358] do_syscall_64+0x57/0xf0 [ 164.973713][ T4358] ? clear_bhb_loop+0x50/0xa0 [ 164.973761][ T4358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.973789][ T4358] RIP: 0033:0x7f01a7b5e6ce [ 164.973808][ T4358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.973832][ T4358] RSP: 002b:00007f01a8a02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.973849][ T4358] RAX: ffffffffffffffda RBX: 00007f01a8a036c0 RCX: 00007f01a7b5e6ce [ 164.973861][ T4358] RDX: 000000000000000f RSI: 00007f01a8a030a0 RDI: 0000000000000003 [ 164.973872][ T4358] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000000 [ 164.973898][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.973914][ T4358] R13: 00007f01a7e26038 R14: 00007f01a7e25fa0 R15: 00007ffc6821ad08 [ 164.973934][ T4358] [ 165.250195][ T4362] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 166.203106][ T36] audit: type=1400 audit(2016777545.109:634): avc: denied { remount } for pid=4371 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.206653][ T4372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.239809][ T4372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.335022][ T9] usb 3-1: 0:2 : does not exist [ 166.345041][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 166.357556][ T36] audit: type=1400 audit(2016777545.269:635): avc: denied { read } for pid=4379 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.384330][ T9] usb 3-1: USB disconnect, device number 57 [ 166.404848][ T36] audit: type=1400 audit(2016777545.269:636): avc: denied { open } for pid=4379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.448370][ T36] audit: type=1400 audit(2016777545.269:637): avc: denied { getattr } for pid=4379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.474937][ T406] usbhid 5-1:0.1: can't add hid device: -71 [ 166.489677][ T406] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 166.497764][ T4376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.500105][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.537832][ T4376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.547333][ T406] usb 5-1: USB disconnect, device number 3 [ 166.619833][ T36] audit: type=1400 audit(2016777545.529:638): avc: denied { write } for pid=4377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.659775][ T36] audit: type=1400 audit(2016777545.529:639): avc: denied { add_name } for pid=4377 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.696023][ T36] audit: type=1400 audit(2016777545.529:640): avc: denied { create } for pid=4377 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.719485][ T36] audit: type=1400 audit(2016777545.529:641): avc: denied { write } for pid=4377 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=5827 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.801765][ T4403] netlink: 'syz.4.1407': attribute type 3 has an invalid length. [ 166.809909][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 166.916633][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 166.925671][ T4413] fuse: Bad value for 'fd' [ 166.953797][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.962530][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.076578][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 167.083121][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 167.095718][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.105231][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.113142][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.121506][ T9] usb 3-1: Product: syz [ 167.125757][ T9] usb 3-1: Manufacturer: Џ [ 167.130754][ T9] usb 3-1: SerialNumber: syz [ 167.276478][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 167.293197][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 167.314754][ T10] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 167.334116][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.349432][ T10] usb 5-1: Product: syz [ 167.358803][ T10] usb 5-1: Manufacturer: syz [ 167.363456][ T10] usb 5-1: SerialNumber: syz [ 167.382161][ T4411] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 167.904372][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.917417][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 167.935000][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 167.946906][ T9] usb 3-1: USB disconnect, device number 58 [ 167.965053][ T10] usb 5-1: USB disconnect, device number 4 [ 167.966615][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.002627][ T1766] udevd[1766]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 168.164432][ T4440] FAULT_INJECTION: forcing a failure. [ 168.164432][ T4440] name failslab, interval 1, probability 0, space 0, times 0 [ 168.180738][ T4440] CPU: 1 UID: 0 PID: 4440 Comm: syz.4.1423 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 168.180769][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.180783][ T4440] Call Trace: [ 168.180789][ T4440] [ 168.180797][ T4440] __dump_stack+0x21/0x30 [ 168.180830][ T4440] dump_stack_lvl+0x140/0x1c0 [ 168.180857][ T4440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.180884][ T4440] ? kstrtouint_from_user+0x117/0x170 [ 168.180907][ T4440] dump_stack+0x19/0x20 [ 168.180933][ T4440] should_fail_ex+0x3c2/0x510 [ 168.180954][ T4440] ? kernfs_fop_write_iter+0x15e/0x510 [ 168.180983][ T4440] should_failslab+0xac/0x100 [ 168.181008][ T4440] __kmalloc_noprof+0x69/0x510 [ 168.181029][ T4440] ? kernfs_fop_write_iter+0x15e/0x510 [ 168.181056][ T4440] ? __kasan_check_write+0x18/0x20 [ 168.181075][ T4440] ? proc_fail_nth_write+0x184/0x220 [ 168.181103][ T4440] kernfs_fop_write_iter+0x15e/0x510 [ 168.181131][ T4440] vfs_write+0x762/0xfd0 [ 168.181152][ T4440] ? __cfi_vfs_write+0x10/0x10 [ 168.181172][ T4440] ? __cfi_mutex_lock+0x10/0x10 [ 168.181201][ T4440] ksys_write+0x145/0x260 [ 168.181221][ T4440] ? __cfi_ksys_write+0x10/0x10 [ 168.181241][ T4440] ? __kasan_check_read+0x15/0x20 [ 168.181261][ T4440] __x64_sys_write+0x7f/0x90 [ 168.181281][ T4440] x64_sys_call+0x271c/0x2ee0 [ 168.181299][ T4440] do_syscall_64+0x57/0xf0 [ 168.181319][ T4440] ? clear_bhb_loop+0x50/0xa0 [ 168.181345][ T4440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.181369][ T4440] RIP: 0033:0x7fe749f9de99 [ 168.181386][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.181403][ T4440] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.181424][ T4440] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 168.181439][ T4440] RDX: 0000000000000002 RSI: 0000200000000800 RDI: 0000000000000003 [ 168.181452][ T4440] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.181465][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.181477][ T4440] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 168.181501][ T4440] [ 168.463361][ T4453] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 168.473053][ T4454] netlink: 'syz.3.1428': attribute type 22 has an invalid length. [ 168.496551][ T4454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4454 comm=syz.3.1428 [ 168.509431][ T4454] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1428'. [ 168.572037][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 168.572057][ T36] audit: type=1400 audit(2016777547.480:645): avc: denied { read } for pid=4463 comm="syz.4.1432" path="socket:[41639]" dev="sockfs" ino=41639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.615793][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 168.669048][ T4477] FAULT_INJECTION: forcing a failure. [ 168.669048][ T4477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.693780][ T4477] CPU: 1 UID: 0 PID: 4477 Comm: syz.4.1435 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 168.693819][ T4477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.693835][ T4477] Call Trace: [ 168.693844][ T4477] [ 168.693854][ T4477] __dump_stack+0x21/0x30 [ 168.693892][ T4477] dump_stack_lvl+0x140/0x1c0 [ 168.693924][ T4477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.693959][ T4477] dump_stack+0x19/0x20 [ 168.693990][ T4477] should_fail_ex+0x3c2/0x510 [ 168.694017][ T4477] should_fail+0xf/0x20 [ 168.694042][ T4477] should_fail_usercopy+0x1e/0x30 [ 168.694070][ T4477] _copy_from_iter+0x1a6/0x1520 [ 168.694103][ T4477] ? __virt_addr_valid+0x2a1/0x370 [ 168.694132][ T4477] ? __cfi__copy_from_iter+0x10/0x10 [ 168.694163][ T4477] ? __check_object_size+0x54c/0x870 [ 168.694189][ T4477] ? __cfi___check_object_size+0x10/0x10 [ 168.694214][ T4477] ? __kmalloc_noprof+0x261/0x510 [ 168.694241][ T4477] kernfs_fop_write_iter+0x1a4/0x510 [ 168.694276][ T4477] vfs_write+0x762/0xfd0 [ 168.694302][ T4477] ? __cfi_vfs_write+0x10/0x10 [ 168.694326][ T4477] ? __cfi_mutex_lock+0x10/0x10 [ 168.694361][ T4477] ksys_write+0x145/0x260 [ 168.694385][ T4477] ? __cfi_ksys_write+0x10/0x10 [ 168.694410][ T4477] ? __kasan_check_read+0x15/0x20 [ 168.694434][ T4477] __x64_sys_write+0x7f/0x90 [ 168.694468][ T4477] x64_sys_call+0x271c/0x2ee0 [ 168.694491][ T4477] do_syscall_64+0x57/0xf0 [ 168.694516][ T4477] ? clear_bhb_loop+0x50/0xa0 [ 168.694548][ T4477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.694577][ T4477] RIP: 0033:0x7fe749f9de99 [ 168.694597][ T4477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.694618][ T4477] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.694644][ T4477] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 168.694662][ T4477] RDX: 0000000000000002 RSI: 0000200000000800 RDI: 0000000000000003 [ 168.694679][ T4477] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.694694][ T4477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.694710][ T4477] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 168.694731][ T4477] [ 168.805752][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 168.996707][ T4486] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 169.025624][ T4486] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1437'. [ 169.087263][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.101900][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.146875][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.156151][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.164281][ T10] usb 3-1: Product: syz [ 169.182364][ T10] usb 3-1: Manufacturer: syz [ 169.188867][ T10] usb 3-1: SerialNumber: syz [ 169.201835][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 169.227167][ T4495] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 169.290019][ T4501] netlink: 'syz.3.1444': attribute type 19 has an invalid length. [ 169.321037][ T4501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.339988][ T4501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.408211][ T10] usb 3-1: USB disconnect, device number 59 [ 169.476163][ T4517] FAULT_INJECTION: forcing a failure. [ 169.476163][ T4517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.489710][ T4517] CPU: 1 UID: 0 PID: 4517 Comm: syz.4.1450 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 169.489749][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.489764][ T4517] Call Trace: [ 169.489773][ T4517] [ 169.489782][ T4517] __dump_stack+0x21/0x30 [ 169.489821][ T4517] dump_stack_lvl+0x140/0x1c0 [ 169.489853][ T4517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.489886][ T4517] ? check_stack_object+0x138/0x150 [ 169.489912][ T4517] dump_stack+0x19/0x20 [ 169.489943][ T4517] should_fail_ex+0x3c2/0x510 [ 169.489970][ T4517] should_fail+0xf/0x20 [ 169.489994][ T4517] should_fail_usercopy+0x1e/0x30 [ 169.490022][ T4517] _copy_to_user+0x24/0xa0 [ 169.490054][ T4517] simple_read_from_buffer+0xed/0x160 [ 169.490087][ T4517] proc_fail_nth_read+0x1aa/0x220 [ 169.490122][ T4517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 169.490157][ T4517] ? bpf_lsm_file_permission+0xd/0x20 [ 169.490194][ T4517] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 169.490228][ T4517] vfs_read+0x28b/0xc70 [ 169.490252][ T4517] ? __cfi_vfs_read+0x10/0x10 [ 169.490275][ T4517] ? __kasan_check_write+0x18/0x20 [ 169.490299][ T4517] ? mutex_lock+0x97/0x1d0 [ 169.490330][ T4517] ? __cfi_mutex_lock+0x10/0x10 [ 169.490365][ T4517] ksys_read+0x145/0x260 [ 169.490398][ T4517] ? __cfi_ksys_read+0x10/0x10 [ 169.490423][ T4517] ? __kasan_check_read+0x15/0x20 [ 169.490447][ T4517] __x64_sys_read+0x7f/0x90 [ 169.490471][ T4517] x64_sys_call+0x2638/0x2ee0 [ 169.490493][ T4517] do_syscall_64+0x57/0xf0 [ 169.490523][ T4517] ? clear_bhb_loop+0x50/0xa0 [ 169.490554][ T4517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.490585][ T4517] RIP: 0033:0x7fe749f5e6ce [ 169.490605][ T4517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.490626][ T4517] RSP: 002b:00007fe7489f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.490651][ T4517] RAX: ffffffffffffffda RBX: 00007fe7489f76c0 RCX: 00007fe749f5e6ce [ 169.490669][ T4517] RDX: 000000000000000f RSI: 00007fe7489f70a0 RDI: 0000000000000004 [ 169.490685][ T4517] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.490701][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.490716][ T4517] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 169.490737][ T4517] [ 169.733669][ T4515] rust_binder: Failure in copy_transaction_data: EINVAL [ 169.733700][ T4515] rust_binder: 4514:4515 transaction to 4514 failed: EINVAL [ 169.745717][ T4519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=4519 comm=syz.4.1451 [ 169.768235][ T4515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.768425][ T4515] tmpfs: Unsupported parameter 'mpol' [ 169.789728][ T4522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'. [ 169.799221][ T4522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'. [ 169.870736][ T4528] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 170.173633][ T4543] FAULT_INJECTION: forcing a failure. [ 170.173633][ T4543] name failslab, interval 1, probability 0, space 0, times 0 [ 170.194148][ T4543] CPU: 1 UID: 0 PID: 4543 Comm: syz.4.1460 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 170.194185][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.194201][ T4543] Call Trace: [ 170.194210][ T4543] [ 170.194221][ T4543] __dump_stack+0x21/0x30 [ 170.194259][ T4543] dump_stack_lvl+0x140/0x1c0 [ 170.194293][ T4543] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.194328][ T4543] dump_stack+0x19/0x20 [ 170.194367][ T4543] should_fail_ex+0x3c2/0x510 [ 170.194395][ T4543] should_failslab+0xac/0x100 [ 170.194425][ T4543] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 170.194453][ T4543] ? v9fs_session_init+0xb7/0x18a0 [ 170.194478][ T4543] kstrdup+0x4d/0x130 [ 170.194511][ T4543] ? v9fs_session_init+0xa6/0x18a0 [ 170.194535][ T4543] v9fs_session_init+0xb7/0x18a0 [ 170.194561][ T4543] ? __cfi_v9fs_session_init+0x10/0x10 [ 170.194585][ T4543] ? kasan_save_alloc_info+0x3a/0x50 [ 170.194621][ T4543] ? __kasan_kmalloc+0x96/0xb0 [ 170.194650][ T4543] ? __kmalloc_cache_noprof+0x23c/0x470 [ 170.194676][ T4543] ? v9fs_mount+0xc1/0x9d0 [ 170.194704][ T4543] v9fs_mount+0xdb/0x9d0 [ 170.194733][ T4543] ? __cfi_v9fs_mount+0x10/0x10 [ 170.194761][ T4543] ? selinux_capable+0x38/0x50 [ 170.194792][ T4543] legacy_get_tree+0x103/0x1b0 [ 170.194823][ T4543] ? __cfi_v9fs_mount+0x10/0x10 [ 170.194851][ T4543] vfs_get_tree+0xa1/0x290 [ 170.194880][ T4543] do_new_mount+0x251/0xb40 [ 170.194903][ T4543] ? security_capable+0x44/0x130 [ 170.194930][ T4543] path_mount+0x66a/0xff0 [ 170.194953][ T4543] ? putname+0x113/0x150 [ 170.194980][ T4543] __se_sys_mount+0x2bf/0x480 [ 170.195005][ T4543] ? ksys_write+0x1f3/0x260 [ 170.195030][ T4543] ? __x64_sys_mount+0xf0/0xf0 [ 170.195056][ T4543] __x64_sys_mount+0xc3/0xf0 [ 170.195081][ T4543] x64_sys_call+0x2021/0x2ee0 [ 170.195103][ T4543] do_syscall_64+0x57/0xf0 [ 170.195129][ T4543] ? clear_bhb_loop+0x50/0xa0 [ 170.195162][ T4543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.195192][ T4543] RIP: 0033:0x7fe749f9de99 [ 170.195213][ T4543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.195233][ T4543] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.195259][ T4543] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 170.195279][ T4543] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 170.195295][ T4543] RBP: 00007fe7489f7090 R08: 0000200000000280 R09: 0000000000000000 [ 170.195312][ T4543] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 170.195328][ T4543] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 170.195357][ T4543] [ 170.761623][ T4557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.762012][ T4557] rust_binder: Error in use_page_slow: ESRCH [ 170.768653][ T4557] rust_binder: use_range failure ESRCH [ 170.775351][ T4557] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 170.781079][ T4557] rust_binder: Failure in copy_transaction_data: ESRCH [ 170.789956][ T4557] rust_binder: 4556:4557 transaction to 4514 failed: ESRCH [ 170.804666][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.923922][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.947882][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.024564][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 171.050426][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=7000, bcdDevice= 0.40 [ 171.076108][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.102298][ T10] usb 5-1: Product: syz [ 171.115783][ T10] usb 5-1: Manufacturer: syz [ 171.130584][ T10] usb 5-1: SerialNumber: syz [ 171.171666][ T4580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=4580 comm=syz.3.1472 [ 171.207096][ T4580] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 171.224862][ T4580] fuse: Unknown parameter 'gaH$o00000000000000000000' [ 171.344600][ T4585] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 171.350694][ T4550] Invalid argument reading file caps for ./file0 [ 171.366118][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.378787][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.399467][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 171.419836][ T10] usb 5-1: USB disconnect, device number 5 [ 171.429525][ T391] udevd[391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.552475][ T4589] FAULT_INJECTION: forcing a failure. [ 171.552475][ T4589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.579985][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.0.1476 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 171.580013][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.580025][ T4589] Call Trace: [ 171.580030][ T4589] [ 171.580038][ T4589] __dump_stack+0x21/0x30 [ 171.580065][ T4589] dump_stack_lvl+0x140/0x1c0 [ 171.580088][ T4589] ? __cfi_dump_stack_lvl+0x10/0x10 [ 171.580111][ T4589] ? kernel_text_address+0xa9/0xe0 [ 171.580134][ T4589] ? unwind_get_return_address+0x51/0x90 [ 171.580156][ T4589] dump_stack+0x19/0x20 [ 171.580178][ T4589] should_fail_ex+0x3c2/0x510 [ 171.580201][ T4589] should_fail+0xf/0x20 [ 171.580217][ T4589] should_fail_usercopy+0x1e/0x30 [ 171.580237][ T4589] copy_fpstate_to_sigframe+0x906/0xbb0 [ 171.580260][ T4589] ? copy_fpstate_to_sigframe+0x177/0xbb0 [ 171.580282][ T4589] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 171.580304][ T4589] ? get_signal+0xa2a/0x1490 [ 171.580326][ T4589] ? arch_do_signal_or_restart+0xbc/0x700 [ 171.580342][ T4589] ? irqentry_exit_to_user_mode+0x4d/0xb0 [ 171.580368][ T4589] ? irqentry_exit+0x16/0x60 [ 171.580391][ T4589] ? exc_page_fault+0x65/0xc0 [ 171.580413][ T4589] ? asm_exc_page_fault+0x2b/0x30 [ 171.580435][ T4589] ? fpu__alloc_mathframe+0xb7/0x150 [ 171.580456][ T4589] get_sigframe+0x604/0x830 [ 171.580481][ T4589] ? __cfi_get_sigframe+0x10/0x10 [ 171.580507][ T4589] x64_setup_rt_frame+0x162/0xc20 [ 171.580522][ T4589] ? __kasan_slab_free+0x6a/0x80 [ 171.580543][ T4589] ? __asan_memcpy+0x5a/0x80 [ 171.580559][ T4589] ? _raw_spin_unlock_irq+0x45/0x70 [ 171.580578][ T4589] ? get_signal+0x120a/0x1490 [ 171.580600][ T4589] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 171.580616][ T4589] arch_do_signal_or_restart+0x328/0x700 [ 171.580632][ T4589] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 171.580649][ T4589] ? fget+0x4f/0x60 [ 171.580668][ T4589] irqentry_exit_to_user_mode+0x4d/0xb0 [ 171.580693][ T4589] irqentry_exit+0x16/0x60 [ 171.580716][ T4589] exc_page_fault+0x65/0xc0 [ 171.580738][ T4589] asm_exc_page_fault+0x2b/0x30 [ 171.580758][ T4589] RIP: 0033:0x7fdee3c52d71 [ 171.580772][ T4589] Code: af 43 04 03 43 64 39 d0 0f 42 c2 45 31 c9 31 ff ba 03 00 00 00 89 c6 e8 7d ae 14 00 ba 03 00 00 00 41 b9 00 00 00 10 41 89 e8 <49> 89 04 24 8b 43 08 b9 01 80 00 00 25 00 04 00 00 83 f8 01 19 f6 [ 171.580787][ T4589] RSP: 002b:00007fdee4be8fc0 EFLAGS: 00010217 [ 171.580802][ T4589] RAX: ffffffffffffffff RBX: 0000200000001140 RCX: 00007fdee3d9dc02 [ 171.580815][ T4589] RDX: 0000000000000003 RSI: 00000000000cdc50 RDI: 0000000000000000 [ 171.580825][ T4589] RBP: ffffffffffffffff R08: 00000000ffffffff R09: 0000000010000000 [ 171.580836][ T4589] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000000 [ 171.580847][ T4589] R13: 0000000000000000 R14: 00002000000011c0 R15: 00007ffcd185e028 [ 171.580867][ T4589] [ 171.916513][ T310] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 172.075051][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.086018][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.095855][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.108820][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.118026][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.127897][ T310] usb 3-1: config 0 descriptor?? [ 172.329431][ T4596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'. [ 172.350176][ T4596] 9pnet_fd: Insufficient options for proto=fd [ 172.404785][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 172.464237][ T4600] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 172.538884][ T4610] SELinux: policydb string SE Linu does not match my string SE Linux [ 172.546097][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 172.547704][ T36] audit: type=1400 audit(2016777551.452:646): avc: denied { setattr } for pid=4586 comm="syz.2.1475" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.563989][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.589245][ T4610] SELinux: failed to load policy [ 172.614812][ T310] usb 3-1: USB disconnect, device number 60 [ 172.903634][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.066187][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 173.073103][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 173.084905][ T46] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 173.088376][ T4628] fuse: Bad value for 'fd' [ 173.094057][ T36] audit: type=1400 audit(2016777552.003:647): avc: denied { mounton } for pid=4627 comm="syz.2.1491" path="/330/file0" dev="tmpfs" ino=1832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.123073][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.132293][ T46] usb 5-1: Product: syz [ 173.136798][ T46] usb 5-1: Manufacturer: syz [ 173.141446][ T46] usb 5-1: SerialNumber: syz [ 173.145640][ T4628] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1491'. [ 173.150768][ T36] audit: type=1400 audit(2016777552.033:648): avc: denied { setattr } for pid=4627 comm="syz.2.1491" name="file0" dev="tmpfs" ino=1832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.179868][ T4615] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.382777][ T4635] FAULT_INJECTION: forcing a failure. [ 173.382777][ T4635] name failslab, interval 1, probability 0, space 0, times 0 [ 173.410398][ T4635] CPU: 0 UID: 0 PID: 4635 Comm: syz.2.1492 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 173.410436][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.410451][ T4635] Call Trace: [ 173.410459][ T4635] [ 173.410468][ T4635] __dump_stack+0x21/0x30 [ 173.410505][ T4635] dump_stack_lvl+0x140/0x1c0 [ 173.410538][ T4635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.410572][ T4635] ? kasan_save_track+0x4f/0x80 [ 173.410615][ T4635] ? kasan_save_track+0x3e/0x80 [ 173.410641][ T4635] ? kasan_save_alloc_info+0x3a/0x50 [ 173.410674][ T4635] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 173.410699][ T4635] ? kstrdup+0x4d/0x130 [ 173.410732][ T4635] dump_stack+0x19/0x20 [ 173.410763][ T4635] should_fail_ex+0x3c2/0x510 [ 173.410791][ T4635] should_failslab+0xac/0x100 [ 173.410819][ T4635] __kmalloc_cache_noprof+0x41/0x470 [ 173.410843][ T4635] ? p9_client_create+0xeb/0x12d0 [ 173.410878][ T4635] p9_client_create+0xeb/0x12d0 [ 173.410912][ T4635] ? __cfi_p9_client_create+0x10/0x10 [ 173.410945][ T4635] ? __kasan_kmalloc+0x96/0xb0 [ 173.410985][ T4635] ? __kmalloc_cache_noprof+0x23c/0x470 [ 173.411009][ T4635] ? v9fs_mount+0xc1/0x9d0 [ 173.411036][ T4635] ? kasan_save_alloc_info+0x3a/0x50 [ 173.411071][ T4635] ? __kasan_kmalloc+0x96/0xb0 [ 173.411098][ T4635] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 173.411123][ T4635] ? kstrdup+0x7b/0x130 [ 173.411156][ T4635] ? __asan_memset+0x39/0x50 [ 173.411179][ T4635] v9fs_session_init+0x1c4/0x18a0 [ 173.411204][ T4635] ? __cfi_v9fs_session_init+0x10/0x10 [ 173.411226][ T4635] ? kasan_save_alloc_info+0x3a/0x50 [ 173.411259][ T4635] ? __kasan_kmalloc+0x96/0xb0 [ 173.411286][ T4635] ? __kmalloc_cache_noprof+0x23c/0x470 [ 173.411310][ T4635] ? v9fs_mount+0xc1/0x9d0 [ 173.411338][ T4635] v9fs_mount+0xdb/0x9d0 [ 173.411364][ T4635] ? __cfi_v9fs_mount+0x10/0x10 [ 173.411391][ T4635] ? selinux_capable+0x38/0x50 [ 173.411420][ T4635] legacy_get_tree+0x103/0x1b0 [ 173.411450][ T4635] ? __cfi_v9fs_mount+0x10/0x10 [ 173.411479][ T4635] vfs_get_tree+0xa1/0x290 [ 173.411502][ T4635] do_new_mount+0x251/0xb40 [ 173.411524][ T4635] ? security_capable+0x44/0x130 [ 173.411550][ T4635] path_mount+0x66a/0xff0 [ 173.411572][ T4635] ? putname+0x113/0x150 [ 173.411598][ T4635] __se_sys_mount+0x2bf/0x480 [ 173.411632][ T4635] ? ksys_write+0x1f3/0x260 [ 173.411656][ T4635] ? __x64_sys_mount+0xf0/0xf0 [ 173.411681][ T4635] __x64_sys_mount+0xc3/0xf0 [ 173.411705][ T4635] x64_sys_call+0x2021/0x2ee0 [ 173.411727][ T4635] do_syscall_64+0x57/0xf0 [ 173.411752][ T4635] ? clear_bhb_loop+0x50/0xa0 [ 173.411785][ T4635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.411814][ T4635] RIP: 0033:0x7f899a39de99 [ 173.411835][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.411856][ T4635] RSP: 002b:00007f8998df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.411880][ T4635] RAX: ffffffffffffffda RBX: 00007f899a625fa0 RCX: 00007f899a39de99 [ 173.411898][ T4635] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 173.411915][ T4635] RBP: 00007f8998df7090 R08: 0000200000000280 R09: 0000000000000000 [ 173.411931][ T4635] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 173.411947][ T4635] R13: 00007f899a626038 R14: 00007f899a625fa0 R15: 00007ffc6d53fd58 [ 173.411968][ T4635] [ 173.412219][ T46] usb 5-1: MIDIStreaming interface descriptor not found [ 173.761910][ T46] usb 5-1: USB disconnect, device number 6 [ 173.784347][ T1765] udevd[1765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.805215][ T4643] SELinux: policydb version 64 does not match my version range 15-33 [ 173.830194][ T4645] fuse: Bad value for 'user_id' [ 173.837399][ T4643] SELinux: failed to load policy [ 173.846773][ T4645] fuse: Bad value for 'user_id' [ 173.988840][ T4661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.988998][ T4661] rust_binder: Error in use_page_slow: ESRCH [ 174.003860][ T4661] rust_binder: use_range failure ESRCH [ 174.018263][ T4661] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 174.029287][ T4661] rust_binder: Failure in copy_transaction_data: ESRCH [ 174.046476][ T4661] rust_binder: 4660:4661 transaction to 4514 failed: ESRCH [ 174.287045][ T4674] SELinux: policydb version 64 does not match my version range 15-33 [ 174.302918][ T4674] SELinux: failed to load policy [ 174.452073][ T36] audit: type=1400 audit(2016777553.363:649): avc: denied { create } for pid=4683 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 174.475398][ T36] audit: type=1400 audit(2016777553.393:650): avc: denied { write } for pid=4683 comm="syz.4.1509" path="socket:[43341]" dev="sockfs" ino=43341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 174.678944][ T4689] input: syz1 as /devices/virtual/input/input13 [ 174.795648][ T4700] SELinux: policydb version 64 does not match my version range 15-33 [ 174.835888][ T4700] SELinux: failed to load policy [ 174.858268][ T4701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.884969][ T4701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.929731][ T4705] dummy0: entered allmulticast mode [ 174.964243][ T4705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.004405][ T4705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.056108][ T4707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1517'. [ 175.192494][ T378] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 175.236861][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.246044][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.333718][ T378] usb 3-1: device descriptor read/64, error -71 [ 175.477002][ T4731] FAULT_INJECTION: forcing a failure. [ 175.477002][ T4731] name failslab, interval 1, probability 0, space 0, times 0 [ 175.496649][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz.3.1526 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 175.496677][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.496689][ T4731] Call Trace: [ 175.496695][ T4731] [ 175.496702][ T4731] __dump_stack+0x21/0x30 [ 175.496730][ T4731] dump_stack_lvl+0x140/0x1c0 [ 175.496753][ T4731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.496778][ T4731] dump_stack+0x19/0x20 [ 175.496799][ T4731] should_fail_ex+0x3c2/0x510 [ 175.496818][ T4731] should_failslab+0xac/0x100 [ 175.496839][ T4731] __kmalloc_cache_node_noprof+0x46/0x430 [ 175.496857][ T4731] ? __get_vm_area_node+0x150/0x390 [ 175.496882][ T4731] __get_vm_area_node+0x150/0x390 [ 175.496906][ T4731] __vmalloc_node_range_noprof+0x340/0x1300 [ 175.496931][ T4731] ? sel_write_load+0x1ce/0x600 [ 175.496948][ T4731] ? kernel_text_address+0xa9/0xe0 [ 175.496977][ T4731] ? unwind_get_return_address+0x51/0x90 [ 175.497000][ T4731] ? _parse_integer_limit+0x195/0x1e0 [ 175.497018][ T4731] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 175.497042][ T4731] ? avc_has_perm_noaudit+0x26b/0x360 [ 175.497061][ T4731] ? __asan_memcpy+0x5a/0x80 [ 175.497076][ T4731] ? avc_has_perm_noaudit+0x289/0x360 [ 175.497096][ T4731] ? sel_write_load+0x1ce/0x600 [ 175.497111][ T4731] vmalloc_noprof+0x103/0x1d0 [ 175.497135][ T4731] ? sel_write_load+0x1ce/0x600 [ 175.497150][ T4731] ? __cfi_avc_has_perm+0x10/0x10 [ 175.497167][ T4731] ? selinux_file_permission+0x318/0xb60 [ 175.497182][ T4731] ? __cfi_vmalloc_noprof+0x10/0x10 [ 175.497207][ T4731] sel_write_load+0x1ce/0x600 [ 175.497224][ T4731] ? __cfi_sel_write_load+0x10/0x10 [ 175.497241][ T4731] ? bpf_lsm_file_permission+0xd/0x20 [ 175.497263][ T4731] ? __cfi_sel_write_load+0x10/0x10 [ 175.497279][ T4731] vfs_write+0x3c4/0xfd0 [ 175.497296][ T4731] ? __cfi_vfs_write+0x10/0x10 [ 175.497312][ T4731] ? __kasan_check_write+0x18/0x20 [ 175.497327][ T4731] ? mutex_lock+0x97/0x1d0 [ 175.497349][ T4731] ? __cfi_mutex_lock+0x10/0x10 [ 175.497373][ T4731] ksys_write+0x145/0x260 [ 175.497389][ T4731] ? __cfi_ksys_write+0x10/0x10 [ 175.497406][ T4731] ? __kasan_check_read+0x15/0x20 [ 175.497421][ T4731] __x64_sys_write+0x7f/0x90 [ 175.497438][ T4731] x64_sys_call+0x271c/0x2ee0 [ 175.497453][ T4731] do_syscall_64+0x57/0xf0 [ 175.497472][ T4731] ? clear_bhb_loop+0x50/0xa0 [ 175.497493][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.497514][ T4731] RIP: 0033:0x7f01a7b9de99 [ 175.497528][ T4731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.497542][ T4731] RSP: 002b:00007f01a8a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.497559][ T4731] RAX: ffffffffffffffda RBX: 00007f01a7e25fa0 RCX: 00007f01a7b9de99 [ 175.497572][ T4731] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 175.497583][ T4731] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000000 [ 175.497593][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.497603][ T4731] R13: 00007f01a7e26038 R14: 00007f01a7e25fa0 R15: 00007ffc6821ad08 [ 175.497617][ T4731] [ 175.497626][ T4731] syz.3.1526: vmalloc error: size 65212, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 175.824872][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz.3.1526 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 175.824903][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.824918][ T4731] Call Trace: [ 175.824925][ T4731] [ 175.824934][ T4731] __dump_stack+0x21/0x30 [ 175.824973][ T4731] dump_stack_lvl+0x140/0x1c0 [ 175.825006][ T4731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.825038][ T4731] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 175.825068][ T4731] dump_stack+0x19/0x20 [ 175.825099][ T4731] warn_alloc+0x1e7/0x2c0 [ 175.825132][ T4731] ? __kasan_kmalloc+0x28/0xb0 [ 175.825162][ T4731] ? __cfi_warn_alloc+0x10/0x10 [ 175.825194][ T4731] ? __get_vm_area_node+0x150/0x390 [ 175.825229][ T4731] ? __get_vm_area_node+0x382/0x390 [ 175.825264][ T4731] __vmalloc_node_range_noprof+0x365/0x1300 [ 175.825299][ T4731] ? kernel_text_address+0xa9/0xe0 [ 175.825338][ T4731] ? unwind_get_return_address+0x51/0x90 [ 175.825387][ T4731] ? _parse_integer_limit+0x195/0x1e0 [ 175.825420][ T4731] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 175.825465][ T4731] ? avc_has_perm_noaudit+0x26b/0x360 [ 175.825490][ T4731] ? __asan_memcpy+0x5a/0x80 [ 175.825513][ T4731] ? avc_has_perm_noaudit+0x289/0x360 [ 175.825541][ T4731] ? sel_write_load+0x1ce/0x600 [ 175.825565][ T4731] vmalloc_noprof+0x103/0x1d0 [ 175.825600][ T4731] ? sel_write_load+0x1ce/0x600 [ 175.825624][ T4731] ? __cfi_avc_has_perm+0x10/0x10 [ 175.825650][ T4731] ? selinux_file_permission+0x318/0xb60 [ 175.825673][ T4731] ? __cfi_vmalloc_noprof+0x10/0x10 [ 175.825720][ T4731] sel_write_load+0x1ce/0x600 [ 175.825753][ T4731] ? __cfi_sel_write_load+0x10/0x10 [ 175.825785][ T4731] ? bpf_lsm_file_permission+0xd/0x20 [ 175.825825][ T4731] ? __cfi_sel_write_load+0x10/0x10 [ 175.825858][ T4731] vfs_write+0x3c4/0xfd0 [ 175.825891][ T4731] ? __cfi_vfs_write+0x10/0x10 [ 175.825923][ T4731] ? __kasan_check_write+0x18/0x20 [ 175.825950][ T4731] ? mutex_lock+0x97/0x1d0 [ 175.825989][ T4731] ? __cfi_mutex_lock+0x10/0x10 [ 175.826034][ T4731] ksys_write+0x145/0x260 [ 175.826067][ T4731] ? __cfi_ksys_write+0x10/0x10 [ 175.826101][ T4731] ? __kasan_check_read+0x15/0x20 [ 175.826132][ T4731] __x64_sys_write+0x7f/0x90 [ 175.826165][ T4731] x64_sys_call+0x271c/0x2ee0 [ 175.826193][ T4731] do_syscall_64+0x57/0xf0 [ 175.826224][ T4731] ? clear_bhb_loop+0x50/0xa0 [ 175.826267][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.826305][ T4731] RIP: 0033:0x7f01a7b9de99 [ 175.826330][ T4731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.826356][ T4731] RSP: 002b:00007f01a8a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.826382][ T4731] RAX: ffffffffffffffda RBX: 00007f01a7e25fa0 RCX: 00007f01a7b9de99 [ 175.826399][ T4731] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 175.826417][ T4731] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000000 [ 175.826442][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.826459][ T4731] R13: 00007f01a7e26038 R14: 00007f01a7e25fa0 R15: 00007ffc6821ad08 [ 175.826481][ T4731] [ 175.826552][ T4731] Mem-Info: [ 176.140889][ T378] usb 3-1: device descriptor read/64, error -71 [ 176.147845][ T4731] active_anon:42072 inactive_anon:9 isolated_anon:0 [ 176.147845][ T4731] active_file:12830 inactive_file:11336 isolated_file:0 [ 176.147845][ T4731] unevictable:0 dirty:52 writeback:0 [ 176.147845][ T4731] slab_reclaimable:6002 slab_unreclaimable:73423 [ 176.147845][ T4731] mapped:25014 shmem:33067 pagetables:1196 [ 176.147845][ T4731] sec_pagetables:0 bounce:0 [ 176.147845][ T4731] kernel_misc_reclaimable:0 [ 176.147845][ T4731] free:1480141 free_pcp:2749 free_cma:0 [ 176.194894][ T4731] Node 0 active_anon:168288kB inactive_anon:36kB active_file:51320kB inactive_file:45344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100056kB dirty:208kB writeback:0kB shmem:132268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7136kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no [ 176.227372][ T4731] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5236kB free_cma:0kB [ 176.278655][ T4733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.288676][ T4731] lowmem_reserve[]: 0 3921 3921 [ 176.293736][ T4731] Normal free:2960524kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:169824kB inactive_anon:36kB active_file:51320kB inactive_file:45344kB unevictable:0kB writepending:212kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:6472kB local_pcp:3608kB free_cma:0kB [ 176.332259][ T4733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.351734][ T4733] SELinux: unknown common [ 176.354453][ T36] audit: type=1400 audit(2016777555.264:651): avc: denied { ioctl } for pid=4732 comm="syz.0.1527" path="socket:[43783]" dev="sockfs" ino=43783 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.360170][ T4731] lowmem_reserve[]: [ 176.381260][ T4733] SELinux: failed to load policy [ 176.401402][ T378] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 176.409716][ T4733] netlink: 'syz.0.1527': attribute type 13 has an invalid length. [ 176.418259][ T4731] 0 0 0 [ 176.421890][ T4731] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 176.455271][ T4731] Normal: 364*4kB (UM) 108*8kB (UE) 1*16kB (U) 199*32kB (UM) 293*64kB (UME) 156*128kB (UME) 81*256kB (UME) 39*512kB (UME) 28*1024kB (UME) 11*2048kB (UME) 687*4096kB (M) = 2953280kB [ 176.485927][ T4740] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 176.492446][ T4731] 60563 total pagecache pages [ 176.512909][ T4742] FAULT_INJECTION: forcing a failure. [ 176.512909][ T4742] name failslab, interval 1, probability 0, space 0, times 0 [ 176.518672][ T4731] 34 pages in swap cache [ 176.526582][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.4.1531 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 176.526668][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 176.526709][ T4742] Call Trace: [ 176.526730][ T4742] [ 176.526752][ T4742] __dump_stack+0x21/0x30 [ 176.526857][ T4742] dump_stack_lvl+0x140/0x1c0 [ 176.526941][ T4742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.527034][ T4742] ? stack_depot_save_flags+0x38/0x800 [ 176.527132][ T4742] dump_stack+0x19/0x20 [ 176.527209][ T4742] should_fail_ex+0x3c2/0x510 [ 176.527302][ T4742] should_failslab+0xac/0x100 [ 176.527391][ T4742] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 176.527455][ T4742] ? __x64_sys_mount+0xc3/0xf0 [ 176.527511][ T4742] ? do_syscall_64+0x57/0xf0 [ 176.527576][ T4742] ? parse_opts+0x189/0x5d0 [ 176.527649][ T4742] kstrdup+0x4d/0x130 [ 176.527734][ T4742] parse_opts+0x189/0x5d0 [ 176.527798][ T4742] ? p9_fd_show_options+0x1c0/0x1c0 [ 176.527881][ T4742] p9_fd_create+0x39/0x4c0 [ 176.527947][ T4742] p9_client_create+0x89a/0x12d0 [ 176.528041][ T4742] ? __cfi_p9_client_create+0x10/0x10 [ 176.528126][ T4742] ? __kasan_kmalloc+0x96/0xb0 [ 176.528190][ T4742] ? __kmalloc_cache_noprof+0x23c/0x470 [ 176.528255][ T4742] ? v9fs_mount+0xc1/0x9d0 [ 176.528328][ T4742] ? kasan_save_alloc_info+0x3a/0x50 [ 176.528414][ T4742] ? __kasan_kmalloc+0x96/0xb0 [ 176.528479][ T4742] ? kstrdup+0x7b/0x130 [ 176.528564][ T4742] ? __asan_memset+0x39/0x50 [ 176.528641][ T4742] v9fs_session_init+0x1c4/0x18a0 [ 176.528719][ T4742] ? __cfi_v9fs_session_init+0x10/0x10 [ 176.528781][ T4742] ? kasan_save_alloc_info+0x3a/0x50 [ 176.528873][ T4742] ? __kasan_kmalloc+0x96/0xb0 [ 176.528938][ T4742] ? __kmalloc_cache_noprof+0x23c/0x470 [ 176.529009][ T4742] ? v9fs_mount+0xc1/0x9d0 [ 176.529090][ T4742] v9fs_mount+0xdb/0x9d0 [ 176.529155][ T4742] ? __cfi_v9fs_mount+0x10/0x10 [ 176.529227][ T4742] ? selinux_capable+0x38/0x50 [ 176.529301][ T4742] legacy_get_tree+0x103/0x1b0 [ 176.529376][ T4742] ? __cfi_v9fs_mount+0x10/0x10 [ 176.529442][ T4742] vfs_get_tree+0xa1/0x290 [ 176.529506][ T4742] do_new_mount+0x251/0xb40 [ 176.529556][ T4742] ? security_capable+0x44/0x130 [ 176.529629][ T4742] path_mount+0x66a/0xff0 [ 176.529682][ T4742] ? putname+0x113/0x150 [ 176.529747][ T4742] __se_sys_mount+0x2bf/0x480 [ 176.529811][ T4742] ? ksys_write+0x1f3/0x260 [ 176.529874][ T4742] ? __x64_sys_mount+0xf0/0xf0 [ 176.529945][ T4742] __x64_sys_mount+0xc3/0xf0 [ 176.529992][ T4742] x64_sys_call+0x2021/0x2ee0 [ 176.530019][ T4742] do_syscall_64+0x57/0xf0 [ 176.530103][ T4742] ? clear_bhb_loop+0x50/0xa0 [ 176.530222][ T4742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.530298][ T4742] RIP: 0033:0x7fe749f9de99 [ 176.530351][ T4742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.530403][ T4742] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.530467][ T4742] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 176.530513][ T4742] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 176.530555][ T4742] RBP: 00007fe7489f7090 R08: 0000200000000280 R09: 0000000000000000 [ 176.530598][ T4742] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 176.530640][ T4742] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 176.530692][ T4742] [ 176.869811][ T378] usb 3-1: device descriptor read/64, error -71 [ 176.910981][ T4749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 177.000607][ T36] audit: type=1326 audit(2016777555.915:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.1534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe749f9de99 code=0x0 [ 177.051082][ T36] audit: type=1326 audit(2016777555.965:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.1534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe749f9de99 code=0x0 [ 177.103220][ T36] audit: type=1326 audit(2016777556.025:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.4.1534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe749f9de99 code=0x0 [ 177.183964][ T4731] Free swap = 124652kB [ 177.188226][ T4731] Total swap = 124996kB [ 177.192887][ T4731] 2097051 pages RAM [ 177.196793][ T4731] 0 pages HighMem/MovableOnly [ 177.201598][ T4731] 352235 pages reserved [ 177.205800][ T4731] 0 pages cma reserved [ 177.212025][ T4731] Memory allocations: [ 177.216085][ T4731] 0 B 0 init/main.c:1477 func:do_initcalls [ 177.223945][ T4731] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 177.233073][ T4731] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 177.240857][ T4731] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 177.248974][ T4731] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 177.257064][ T4731] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 177.265984][ T4731] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 177.300134][ T4731] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 177.316816][ T4731] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 177.324918][ T378] usb 3-1: device descriptor read/64, error -71 [ 177.338826][ T4731] 0 B 0 init/initramfs.c:101 func:find_link [ 177.374016][ T4757] SELinux: unknown common [ 177.384008][ T4757] SELinux: failed to load policy [ 177.431410][ T378] usb usb3-port1: attempt power cycle [ 177.500891][ T36] audit: type=1400 audit(2016777556.415:655): avc: denied { mount } for pid=4765 comm="syz.3.1539" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.526097][ T36] audit: type=1400 audit(2016777556.425:656): avc: denied { write } for pid=4765 comm="syz.3.1539" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 177.552780][ T36] audit: type=1400 audit(2016777556.475:657): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.628957][ T36] audit: type=1400 audit(2016777556.545:658): avc: denied { create } for pid=4776 comm="syz.3.1544" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.665008][ T4780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 177.721278][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.730017][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.771143][ T378] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 177.792721][ T378] usb 3-1: device descriptor read/8, error -71 [ 177.870766][ T4794] netlink: 'syz.3.1550': attribute type 27 has an invalid length. [ 177.895025][ T4794] bridge0: left allmulticast mode [ 177.928442][ T378] usb 3-1: device descriptor read/8, error -71 [ 177.947089][ T4797] netlink: 'syz.3.1550': attribute type 27 has an invalid length. [ 178.008208][ T4797] veth0_vlan: left promiscuous mode [ 178.021934][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.041353][ T4797] veth0_vlan: entered promiscuous mode [ 178.048631][ T4797] veth1_macvtap: left promiscuous mode [ 178.071728][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.095085][ T4797] veth1_macvtap: entered promiscuous mode [ 178.104078][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.111244][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.163002][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.170317][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.182027][ T4805] SELinux: unknown common [ 178.186639][ T4805] SELinux: failed to load policy [ 178.280720][ T4807] SELinux: unknown common [ 178.285800][ T4807] SELinux: failed to load policy [ 178.437997][ T4811] virtio-fs: tag not found [ 178.459496][ T4811] virtio-fs: tag not found [ 178.483688][ T4811] cgroup: Unknown parameter 'qn' [ 178.636727][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 178.891532][ T4827] kvm: pic: single mode not supported [ 178.891756][ T4827] kvm: pic: level sensitive irq not supported [ 178.897954][ T4827] kvm: pic: single mode not supported [ 178.905308][ T4827] kvm: pic: single mode not supported [ 178.919919][ T4827] kvm: pic: single mode not supported [ 178.925848][ T4827] kvm: pic: level sensitive irq not supported [ 178.933627][ T4827] kvm: pic: single mode not supported [ 178.949028][ T4827] kvm: pic: single mode not supported [ 178.954560][ T4827] kvm: pic: level sensitive irq not supported [ 178.964892][ T4827] kvm: pic: single mode not supported [ 178.971592][ T4827] kvm: pic: single mode not supported [ 178.977060][ T4827] kvm: pic: level sensitive irq not supported [ 178.983434][ T4827] kvm: pic: single mode not supported [ 178.989565][ T4827] kvm: pic: level sensitive irq not supported [ 178.995909][ T4827] kvm: pic: single mode not supported [ 179.002076][ T4827] kvm: pic: level sensitive irq not supported [ 179.007812][ T4827] kvm: pic: level sensitive irq not supported [ 179.022570][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.037982][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.107794][ T4836] netlink: 'syz.4.1563': attribute type 25 has an invalid length. [ 179.189664][ T4838] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 179.270453][ T378] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 179.440311][ T378] usb 3-1: Using ep0 maxpacket: 8 [ 179.450009][ T4851] FAULT_INJECTION: forcing a failure. [ 179.450009][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 179.452294][ T378] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.463801][ T4851] CPU: 1 UID: 0 PID: 4851 Comm: syz.4.1570 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 179.463894][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.463936][ T4851] Call Trace: [ 179.463958][ T4851] [ 179.463981][ T4851] __dump_stack+0x21/0x30 [ 179.464080][ T4851] dump_stack_lvl+0x140/0x1c0 [ 179.464163][ T4851] ? __cfi_dump_stack_lvl+0x10/0x10 [ 179.464236][ T4851] ? kstrtouint_from_user+0x117/0x170 [ 179.464311][ T4851] dump_stack+0x19/0x20 [ 179.464386][ T4851] should_fail_ex+0x3c2/0x510 [ 179.464449][ T4851] ? kernfs_fop_write_iter+0x15e/0x510 [ 179.464548][ T4851] should_failslab+0xac/0x100 [ 179.464688][ T4851] __kmalloc_noprof+0x69/0x510 [ 179.464758][ T4851] ? kernfs_fop_write_iter+0x15e/0x510 [ 179.464845][ T4851] ? __kasan_check_write+0x18/0x20 [ 179.464901][ T4851] ? proc_fail_nth_write+0x184/0x220 [ 179.464989][ T4851] kernfs_fop_write_iter+0x15e/0x510 [ 179.465084][ T4851] vfs_write+0x762/0xfd0 [ 179.465148][ T4851] ? __cfi_vfs_write+0x10/0x10 [ 179.465214][ T4851] ? __cfi_mutex_lock+0x10/0x10 [ 179.465300][ T4851] ksys_write+0x145/0x260 [ 179.465362][ T4851] ? __cfi_ksys_write+0x10/0x10 [ 179.465426][ T4851] ? __kasan_check_read+0x15/0x20 [ 179.465481][ T4851] __x64_sys_write+0x7f/0x90 [ 179.465544][ T4851] x64_sys_call+0x271c/0x2ee0 [ 179.465598][ T4851] do_syscall_64+0x57/0xf0 [ 179.465671][ T4851] ? clear_bhb_loop+0x50/0xa0 [ 179.465747][ T4851] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.465821][ T4851] RIP: 0033:0x7fe749f9de99 [ 179.465874][ T4851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.465934][ T4851] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.466014][ T4851] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 179.466073][ T4851] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000003 [ 179.466115][ T4851] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.466151][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.466184][ T4851] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 179.466238][ T4851] [ 179.709634][ T378] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.725625][ T378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.734925][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.743305][ T378] usb 3-1: Product: syz [ 179.770176][ T378] usb 3-1: Manufacturer: syz [ 179.777886][ T378] usb 3-1: SerialNumber: syz [ 179.789712][ T378] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 179.820209][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 179.820229][ T36] audit: type=1400 audit(2016777558.736:663): avc: denied { read write } for pid=4861 comm="syz.3.1575" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.854757][ T36] audit: type=1400 audit(2016777558.746:664): avc: denied { open } for pid=4861 comm="syz.3.1575" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.881871][ T4865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'. [ 179.940198][ T406] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.998699][ T378] usb 3-1: USB disconnect, device number 65 [ 180.029631][ T4875] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 180.100280][ T406] usb 5-1: Using ep0 maxpacket: 32 [ 180.117252][ T406] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.128000][ T406] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 180.137399][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.145725][ T406] usb 5-1: Product: syz [ 180.151871][ T406] usb 5-1: Manufacturer: syz [ 180.156538][ T406] usb 5-1: SerialNumber: syz [ 180.608621][ T4853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.624167][ T4853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.633057][ T406] usb 5-1: unit 0 not found! [ 180.680166][ T4887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1583'. [ 180.690975][ T4889] SELinux: policydb string length 150994952 does not match expected length 8 [ 180.710457][ T4889] SELinux: failed to load policy [ 180.771229][ T4896] FAULT_INJECTION: forcing a failure. [ 180.771229][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 180.808843][ T4896] CPU: 0 UID: 0 PID: 4896 Comm: syz.0.1586 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 180.808882][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.808898][ T4896] Call Trace: [ 180.808906][ T4896] [ 180.808916][ T4896] __dump_stack+0x21/0x30 [ 180.808956][ T4896] dump_stack_lvl+0x140/0x1c0 [ 180.808988][ T4896] ? __cfi_dump_stack_lvl+0x10/0x10 [ 180.809022][ T4896] dump_stack+0x19/0x20 [ 180.809053][ T4896] should_fail_ex+0x3c2/0x510 [ 180.809080][ T4896] ? p9_fcall_init+0x12d/0x360 [ 180.809105][ T4896] should_failslab+0xac/0x100 [ 180.809135][ T4896] __kmalloc_noprof+0x69/0x510 [ 180.809159][ T4896] ? p9_fcall_init+0x12d/0x360 [ 180.809183][ T4896] p9_fcall_init+0x12d/0x360 [ 180.809205][ T4896] ? p9_msg_buf_size+0x1911/0x2180 [ 180.809232][ T4896] p9_client_prepare_req+0x2f4/0xa50 [ 180.809256][ T4896] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 180.809279][ T4896] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 180.809306][ T4896] ? __kasan_check_write+0x18/0x20 [ 180.809327][ T4896] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 180.809354][ T4896] p9_client_rpc+0x191/0xb50 [ 180.809389][ T4896] ? llcp_sock_poll+0x3fb/0x520 [ 180.809413][ T4896] ? p9_fid_create+0x3d0/0x3d0 [ 180.809446][ T4896] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 180.809474][ T4896] ? __cfi_sock_poll+0x10/0x10 [ 180.809500][ T4896] ? p9_conn_create+0x4d7/0x590 [ 180.809526][ T4896] ? p9_fd_create+0x2f4/0x4c0 [ 180.809554][ T4896] p9_client_create+0xa26/0x12d0 [ 180.809601][ T4896] ? __cfi_p9_client_create+0x10/0x10 [ 180.809635][ T4896] ? __kasan_kmalloc+0x96/0xb0 [ 180.809663][ T4896] ? __kmalloc_cache_noprof+0x23c/0x470 [ 180.809686][ T4896] ? v9fs_mount+0xc1/0x9d0 [ 180.809712][ T4896] ? kasan_save_alloc_info+0x3a/0x50 [ 180.809746][ T4896] ? __kasan_kmalloc+0x96/0xb0 [ 180.809774][ T4896] ? kstrdup+0x7b/0x130 [ 180.809808][ T4896] ? __asan_memset+0x39/0x50 [ 180.809830][ T4896] v9fs_session_init+0x1c4/0x18a0 [ 180.809861][ T4896] ? __cfi_v9fs_session_init+0x10/0x10 [ 180.809878][ T4896] ? kasan_save_alloc_info+0x3a/0x50 [ 180.809903][ T4896] ? __kasan_kmalloc+0x96/0xb0 [ 180.809956][ T4896] ? __kmalloc_cache_noprof+0x23c/0x470 [ 180.809980][ T4896] ? v9fs_mount+0xc1/0x9d0 [ 180.810015][ T4896] v9fs_mount+0xdb/0x9d0 [ 180.810033][ T4896] ? __cfi_v9fs_mount+0x10/0x10 [ 180.810052][ T4896] ? selinux_capable+0x38/0x50 [ 180.810098][ T4896] legacy_get_tree+0x103/0x1b0 [ 180.810128][ T4896] ? __cfi_v9fs_mount+0x10/0x10 [ 180.810154][ T4896] vfs_get_tree+0xa1/0x290 [ 180.810177][ T4896] do_new_mount+0x251/0xb40 [ 180.810203][ T4896] ? security_capable+0x44/0x130 [ 180.810237][ T4896] path_mount+0x66a/0xff0 [ 180.810260][ T4896] ? putname+0x113/0x150 [ 180.810286][ T4896] __se_sys_mount+0x2bf/0x480 [ 180.810311][ T4896] ? ksys_write+0x1f3/0x260 [ 180.810333][ T4896] ? __x64_sys_mount+0xf0/0xf0 [ 180.810351][ T4896] __x64_sys_mount+0xc3/0xf0 [ 180.810367][ T4896] x64_sys_call+0x2021/0x2ee0 [ 180.810401][ T4896] do_syscall_64+0x57/0xf0 [ 180.810427][ T4896] ? clear_bhb_loop+0x50/0xa0 [ 180.810459][ T4896] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 180.810485][ T4896] RIP: 0033:0x7fdee3d9de99 [ 180.810500][ T4896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.810514][ T4896] RSP: 002b:00007fdee4be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.810549][ T4896] RAX: ffffffffffffffda RBX: 00007fdee4025fa0 RCX: 00007fdee3d9de99 [ 180.810574][ T4896] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 180.810590][ T4896] RBP: 00007fdee4be9090 R08: 0000200000000280 R09: 0000000000000000 [ 180.810605][ T4896] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 180.810624][ T4896] R13: 00007fdee4026038 R14: 00007fdee4025fa0 R15: 00007ffcd185e028 [ 180.810638][ T4896] [ 180.851644][ T406] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 181.121720][ T4902] SELinux: unknown common [ 181.148524][ T406] usb 5-1: unit 0 not found! [ 181.190525][ T4902] SELinux: failed to load policy [ 181.198774][ T406] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 181.231383][ T406] usb 5-1: unit 0 not found! [ 181.246236][ T406] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 181.257238][ T406] usb 5-1: USB disconnect, device number 7 [ 181.264457][ T1765] udevd[1765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.289138][ T4906] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 181.300487][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.343863][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.352676][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.362307][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.385290][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.409305][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.640550][ T4925] FAULT_INJECTION: forcing a failure. [ 181.640550][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 181.653820][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.4.1598 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 181.653858][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 181.653873][ T4925] Call Trace: [ 181.653881][ T4925] [ 181.653891][ T4925] __dump_stack+0x21/0x30 [ 181.653927][ T4925] dump_stack_lvl+0x140/0x1c0 [ 181.653958][ T4925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.653993][ T4925] ? avc_has_perm+0x155/0x240 [ 181.654028][ T4925] ? __cfi_avc_has_perm+0x10/0x10 [ 181.654056][ T4925] dump_stack+0x19/0x20 [ 181.654086][ T4925] should_fail_ex+0x3c2/0x510 [ 181.654113][ T4925] should_failslab+0xac/0x100 [ 181.654143][ T4925] __kmalloc_cache_noprof+0x41/0x470 [ 181.654168][ T4925] ? vhost_task_create+0x12c/0x3f0 [ 181.654193][ T4925] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 181.654221][ T4925] vhost_task_create+0x12c/0x3f0 [ 181.654243][ T4925] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 181.654269][ T4925] ? __cfi_vhost_task_create+0x10/0x10 [ 181.654294][ T4925] ? __cfi_vhost_task_fn+0x10/0x10 [ 181.654318][ T4925] ? __kasan_check_write+0x18/0x20 [ 181.654339][ T4925] ? mutex_lock+0x97/0x1d0 [ 181.654371][ T4925] ? __cfi_mutex_lock+0x10/0x10 [ 181.654399][ T4925] ? kernel_text_address+0xa9/0xe0 [ 181.654431][ T4925] kvm_mmu_post_init_vm+0x161/0x300 [ 181.654464][ T4925] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 181.654495][ T4925] ? _parse_integer_limit+0x195/0x1e0 [ 181.654521][ T4925] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 181.654552][ T4925] ? kstrtoull+0x13b/0x1e0 [ 181.654575][ T4925] ? kstrtouint+0x78/0xf0 [ 181.654598][ T4925] ? ioctl_has_perm+0x1bc/0x500 [ 181.654619][ T4925] ? __asan_memcpy+0x5a/0x80 [ 181.654640][ T4925] ? ioctl_has_perm+0x408/0x500 [ 181.654662][ T4925] ? has_cap_mac_admin+0xd0/0xd0 [ 181.654683][ T4925] ? __kasan_check_write+0x18/0x20 [ 181.654706][ T4925] ? mutex_lock_killable+0x97/0x1d0 [ 181.654737][ T4925] ? __cfi_mutex_lock_killable+0x10/0x10 [ 181.654769][ T4925] ? proc_fail_nth_write+0x184/0x220 [ 181.654804][ T4925] kvm_vcpu_ioctl+0xa43/0x1000 [ 181.654828][ T4925] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 181.654850][ T4925] ? __cfi_vfs_write+0x10/0x10 [ 181.654875][ T4925] ? __kasan_check_write+0x18/0x20 [ 181.654896][ T4925] ? mutex_unlock+0x90/0x240 [ 181.654926][ T4925] ? __cfi_mutex_unlock+0x10/0x10 [ 181.654960][ T4925] ? bpf_lsm_file_ioctl+0xd/0x20 [ 181.654990][ T4925] ? security_file_ioctl+0x3e/0x110 [ 181.655031][ T4925] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 181.655054][ T4925] __se_sys_ioctl+0x132/0x1b0 [ 181.655082][ T4925] __x64_sys_ioctl+0x7f/0xa0 [ 181.655109][ T4925] x64_sys_call+0x1878/0x2ee0 [ 181.655130][ T4925] do_syscall_64+0x57/0xf0 [ 181.655155][ T4925] ? clear_bhb_loop+0x50/0xa0 [ 181.655185][ T4925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.655213][ T4925] RIP: 0033:0x7fe749f9de99 [ 181.655234][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.655252][ T4925] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.655277][ T4925] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 181.655301][ T4925] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.655312][ T4925] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.655322][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.655332][ T4925] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 181.655346][ T4925] [ 182.047951][ T36] audit: type=1400 audit(2016777560.957:665): avc: denied { watch } for pid=4927 comm="syz.2.1599" path="/352/file0" dev="tmpfs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.070620][ T36] audit: type=1400 audit(2016777560.957:666): avc: denied { watch_reads } for pid=4927 comm="syz.2.1599" path="/352/file0" dev="tmpfs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.241954][ T4939] FAULT_INJECTION: forcing a failure. [ 182.241954][ T4939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.255483][ T4939] CPU: 0 UID: 0 PID: 4939 Comm: syz.3.1602 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 182.255520][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.255535][ T4939] Call Trace: [ 182.255541][ T4939] [ 182.255551][ T4939] __dump_stack+0x21/0x30 [ 182.255589][ T4939] dump_stack_lvl+0x140/0x1c0 [ 182.255620][ T4939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 182.255653][ T4939] ? check_stack_object+0x138/0x150 [ 182.255678][ T4939] dump_stack+0x19/0x20 [ 182.255708][ T4939] should_fail_ex+0x3c2/0x510 [ 182.255734][ T4939] should_fail+0xf/0x20 [ 182.255758][ T4939] should_fail_usercopy+0x1e/0x30 [ 182.255786][ T4939] _copy_to_user+0x24/0xa0 [ 182.255817][ T4939] simple_read_from_buffer+0xed/0x160 [ 182.255849][ T4939] proc_fail_nth_read+0x1aa/0x220 [ 182.255883][ T4939] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 182.255915][ T4939] ? __cfi_sysfs_kf_write+0x10/0x10 [ 182.255939][ T4939] ? bpf_lsm_file_permission+0xd/0x20 [ 182.255970][ T4939] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 182.256004][ T4939] vfs_read+0x28b/0xc70 [ 182.256028][ T4939] ? __cfi_vfs_read+0x10/0x10 [ 182.256050][ T4939] ? __kasan_check_write+0x18/0x20 [ 182.256073][ T4939] ? mutex_lock+0x97/0x1d0 [ 182.256103][ T4939] ? __cfi_mutex_lock+0x10/0x10 [ 182.256134][ T4939] ksys_read+0x145/0x260 [ 182.256156][ T4939] ? __cfi_ksys_read+0x10/0x10 [ 182.256179][ T4939] ? __kasan_check_read+0x15/0x20 [ 182.256201][ T4939] __x64_sys_read+0x7f/0x90 [ 182.256223][ T4939] x64_sys_call+0x2638/0x2ee0 [ 182.256243][ T4939] do_syscall_64+0x57/0xf0 [ 182.256267][ T4939] ? clear_bhb_loop+0x50/0xa0 [ 182.256295][ T4939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.256323][ T4939] RIP: 0033:0x7f01a7b5e6ce [ 182.256342][ T4939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.256361][ T4939] RSP: 002b:00007f01a8a02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.256386][ T4939] RAX: ffffffffffffffda RBX: 00007f01a8a036c0 RCX: 00007f01a7b5e6ce [ 182.256404][ T4939] RDX: 000000000000000f RSI: 00007f01a8a030a0 RDI: 0000000000000004 [ 182.256419][ T4939] RBP: 00007f01a8a03090 R08: 0000000000000000 R09: 0000000000000000 [ 182.256443][ T4939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.256456][ T4939] R13: 00007f01a7e26038 R14: 00007f01a7e25fa0 R15: 00007ffc6821ad08 [ 182.256475][ T4939] [ 182.558855][ T378] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 182.617201][ T4948] SELinux: policydb table sizes (8,7) do not match mine (6,7) [ 182.624958][ T4948] SELinux: failed to load policy [ 182.641377][ T4952] SELinux: unknown common [ 182.646058][ T4952] SELinux: failed to load policy [ 182.684291][ T4957] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 182.748768][ T36] audit: type=1400 audit(2016777561.647:667): avc: denied { ioctl } for pid=4967 comm="syz.3.1614" path="pid:[4026532294]" dev="nsfs" ino=4026532294 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.782415][ T378] usb 3-1: Using ep0 maxpacket: 8 [ 182.799179][ T378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 182.809413][ T378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 182.824186][ T378] usb 3-1: string descriptor 0 read error: -71 [ 182.830656][ T378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.847534][ T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.871798][ T378] usb 3-1: can't set config #1, error -71 [ 182.882458][ T378] usb 3-1: USB disconnect, device number 66 [ 182.994118][ T4988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1620'. [ 183.089956][ T4991] FAULT_INJECTION: forcing a failure. [ 183.089956][ T4991] name failslab, interval 1, probability 0, space 0, times 0 [ 183.103027][ T4991] CPU: 1 UID: 0 PID: 4991 Comm: syz.4.1621 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 183.103067][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.103083][ T4991] Call Trace: [ 183.103092][ T4991] [ 183.103101][ T4991] __dump_stack+0x21/0x30 [ 183.103140][ T4991] dump_stack_lvl+0x140/0x1c0 [ 183.103172][ T4991] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.103207][ T4991] dump_stack+0x19/0x20 [ 183.103238][ T4991] should_fail_ex+0x3c2/0x510 [ 183.103265][ T4991] should_failslab+0xac/0x100 [ 183.103294][ T4991] kmem_cache_alloc_node_noprof+0x45/0x420 [ 183.103319][ T4991] ? dup_task_struct+0xc1/0xd80 [ 183.103349][ T4991] ? kasan_save_alloc_info+0x3a/0x50 [ 183.103385][ T4991] ? __kasan_kmalloc+0x96/0xb0 [ 183.103423][ T4991] ? __kmalloc_cache_noprof+0x23c/0x470 [ 183.103449][ T4991] dup_task_struct+0xc1/0xd80 [ 183.103478][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.103501][ T4991] ? _raw_spin_lock_irq+0x93/0x120 [ 183.103528][ T4991] ? copy_process+0x3350/0x3350 [ 183.103557][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.103581][ T4991] copy_process+0x57c/0x3350 [ 183.103614][ T4991] ? kasan_save_alloc_info+0x3a/0x50 [ 183.103649][ T4991] ? __cfi_copy_process+0x10/0x10 [ 183.103679][ T4991] ? __kmalloc_cache_noprof+0x23c/0x470 [ 183.103704][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.103728][ T4991] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 183.103757][ T4991] vhost_task_create+0x1f7/0x3f0 [ 183.103782][ T4991] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 183.103812][ T4991] ? __cfi_vhost_task_create+0x10/0x10 [ 183.103840][ T4991] ? __cfi_vhost_task_fn+0x10/0x10 [ 183.103864][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.103888][ T4991] ? mutex_lock+0x97/0x1d0 [ 183.103918][ T4991] ? __cfi_mutex_lock+0x10/0x10 [ 183.103949][ T4991] ? kernel_text_address+0xa9/0xe0 [ 183.103983][ T4991] kvm_mmu_post_init_vm+0x161/0x300 [ 183.104017][ T4991] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 183.104050][ T4991] ? _parse_integer_limit+0x195/0x1e0 [ 183.104076][ T4991] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 183.104109][ T4991] ? kstrtoull+0x13b/0x1e0 [ 183.104133][ T4991] ? kstrtouint+0x78/0xf0 [ 183.104157][ T4991] ? ioctl_has_perm+0x1bc/0x500 [ 183.104180][ T4991] ? __asan_memcpy+0x5a/0x80 [ 183.104204][ T4991] ? ioctl_has_perm+0x408/0x500 [ 183.104227][ T4991] ? has_cap_mac_admin+0xd0/0xd0 [ 183.104250][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.104272][ T4991] ? mutex_lock_killable+0x97/0x1d0 [ 183.104306][ T4991] ? __cfi_mutex_lock_killable+0x10/0x10 [ 183.104339][ T4991] ? proc_fail_nth_write+0x184/0x220 [ 183.104376][ T4991] kvm_vcpu_ioctl+0xa43/0x1000 [ 183.104407][ T4991] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 183.104431][ T4991] ? __cfi_vfs_write+0x10/0x10 [ 183.104456][ T4991] ? __kasan_check_write+0x18/0x20 [ 183.104479][ T4991] ? mutex_unlock+0x90/0x240 [ 183.104511][ T4991] ? __cfi_mutex_unlock+0x10/0x10 [ 183.104545][ T4991] ? bpf_lsm_file_ioctl+0xd/0x20 [ 183.104576][ T4991] ? security_file_ioctl+0x3e/0x110 [ 183.104611][ T4991] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 183.104633][ T4991] __se_sys_ioctl+0x132/0x1b0 [ 183.104663][ T4991] __x64_sys_ioctl+0x7f/0xa0 [ 183.104691][ T4991] x64_sys_call+0x1878/0x2ee0 [ 183.104713][ T4991] do_syscall_64+0x57/0xf0 [ 183.104739][ T4991] ? clear_bhb_loop+0x50/0xa0 [ 183.104770][ T4991] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.104800][ T4991] RIP: 0033:0x7fe749f9de99 [ 183.104821][ T4991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.104842][ T4991] RSP: 002b:00007fe7489f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.104868][ T4991] RAX: ffffffffffffffda RBX: 00007fe74a225fa0 RCX: 00007fe749f9de99 [ 183.104886][ T4991] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 183.104902][ T4991] RBP: 00007fe7489f7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.104918][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.104934][ T4991] R13: 00007fe74a226038 R14: 00007fe74a225fa0 R15: 00007ffef9a34288 [ 183.104955][ T4991] [ 183.701812][ T5020] SELinux: unknown common [ 183.706434][ T5020] SELinux: failed to load policy [ 183.813560][ T5027] ip6gre0: entered allmulticast mode [ 183.932815][ T5035] netlink: 'syz.2.1637': attribute type 32 has an invalid length. [ 184.058026][ T406] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.228410][ T406] usb 5-1: Using ep0 maxpacket: 32 [ 184.235205][ T406] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.243895][ T406] usb 5-1: config 7 has an invalid interface number: 165 but max is 0 [ 184.252455][ T406] usb 5-1: config 7 has no interface number 0 [ 184.258830][ T406] usb 5-1: config 7 interface 165 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 184.270244][ T406] usb 5-1: config 7 interface 165 altsetting 14 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 184.283180][ T406] usb 5-1: config 7 interface 165 altsetting 14 bulk endpoint 0xC has invalid maxpacket 32 [ 184.293526][ T406] usb 5-1: config 7 interface 165 has no altsetting 0 [ 184.302124][ T406] usb 5-1: New USB device found, idVendor=ca0f, idProduct=0e41, bcdDevice=b4.7e [ 184.315040][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.323885][ T406] usb 5-1: Product: 锂焿䪈ᑀ쫍龕뚆邜ꤟ駷챏亂ꈈけ섄镊媱ៀ狙堝台ᑡ숞룠 [ 184.335080][ T406] usb 5-1: Manufacturer: ꌇ应བྷ艁윽碩뚉塃폁뫨꜌帵ິႂ僁戣籡㒁룅궏鬏卍딶簙썭럒ʰ媭霃酿뭢䁄쯈元ࣶ㩃Д㨷⿭㹓 [ 184.351794][ T406] usb 5-1: SerialNumber: ๤葉蔬㣰눯뤁㮱䡞돪⬼靇儷䗒䛙㉐ꩽ䙙ล뇀충캶嗊ﭧ矀苼늇䟾觝븢謙 [ 184.404330][ T5044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1640'. [ 184.572386][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.581968][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.601751][ T406] usb 5-1: USB disconnect, device number 8 [ 184.733699][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.742397][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.795764][ T5073] kvm: pic: single mode not supported [ 184.795927][ T5073] kvm: pic: level sensitive irq not supported [ 184.802228][ T5073] kvm: pic: single mode not supported [ 184.809023][ T5073] kvm: pic: single mode not supported [ 184.814666][ T5073] kvm: pic: single mode not supported [ 184.820206][ T5073] kvm: pic: level sensitive irq not supported [ 184.826126][ T5073] kvm: pic: single mode not supported [ 184.832512][ T5073] kvm: pic: single mode not supported [ 184.837950][ T5073] kvm: pic: level sensitive irq not supported [ 184.843974][ T5073] kvm: pic: single mode not supported [ 184.862660][ T5073] kvm: pic: single mode not supported [ 184.868108][ T5073] kvm: pic: level sensitive irq not supported [ 184.873858][ T5073] kvm: pic: single mode not supported [ 184.880111][ T5073] kvm: pic: level sensitive irq not supported [ 184.885933][ T5073] kvm: pic: single mode not supported [ 184.892112][ T5073] kvm: pic: level sensitive irq not supported [ 184.897948][ T5073] kvm: pic: level sensitive irq not supported [ 185.086407][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.103303][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.323297][ T5108] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 185.331067][ T5108] SELinux: failed to load policy [ 185.388195][ T5118] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 185.396942][ T5118] SELinux: failed to load policy [ 185.415247][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.423976][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.477458][ T406] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.627221][ T406] usb 5-1: Using ep0 maxpacket: 16 [ 185.633657][ T406] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.642178][ T406] usb 5-1: config 0 has no interface number 0 [ 185.648625][ T406] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 185.659924][ T406] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 185.672015][ T406] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 185.681285][ T406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.693292][ T406] usb 5-1: config 0 descriptor?? [ 185.693324][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.699523][ T5106] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 185.709179][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.961772][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.974801][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.990453][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.999158][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.238350][ T5143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 186.298689][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 186.327077][ T406] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000F/input/input14 [ 186.347344][ T406] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000F/input/input15 [ 186.365934][ T406] uclogic 0003:28BD:0071.000F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 186.424330][ T5155] overlayfs: disabling nfs_export due to verity=require [ 186.431873][ T5155] overlayfs: missing 'lowerdir' [ 186.437990][ T5155] SELinux: security_context_str_to_sid () failed with errno=-22 [ 186.456833][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 186.463002][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 186.474227][ T10] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 186.483532][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.500445][ T10] usb 3-1: Product: syz [ 186.504690][ T10] usb 3-1: Manufacturer: syz [ 186.524017][ T406] usb 5-1: USB disconnect, device number 9 [ 186.546399][ T10] usb 3-1: SerialNumber: syz [ 186.555700][ T5164] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 186.569833][ T5141] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 186.584072][ T5164] SELinux: failed to load policy [ 186.698404][ T5170] kvm: emulating exchange as write [ 186.821950][ T5173] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 186.838472][ T5173] SELinux: failed to load policy [ 186.900033][ T5177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.900234][ T5177] rust_binder: Error in use_page_slow: ESRCH [ 186.914482][ T5177] rust_binder: use_range failure ESRCH [ 186.927164][ T5177] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 186.939203][ T5177] rust_binder: Failure in copy_transaction_data: ESRCH [ 186.955632][ T5177] rust_binder: 5176:5177 transaction to 4514 failed: ESRCH [ 187.059652][ T5187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1697'. [ 187.215244][ T5192] syz.0.1700 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.239366][ T5193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.279293][ T5203] SELinux: policydb table sizes (205,8) do not match mine (8,7) [ 187.293749][ T5203] SELinux: failed to load policy [ 187.331321][ T5210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.332857][ T5210] rust_binder: Error in use_page_slow: ESRCH [ 187.348653][ T5210] rust_binder: use_range failure ESRCH [ 187.354835][ T5210] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 187.360496][ T5210] rust_binder: Failure in copy_transaction_data: ESRCH [ 187.368459][ T5210] rust_binder: 5207:5210 transaction to 4514 failed: ESRCH [ 187.524685][ T5230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.532228][ T5230] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 187.552509][ T5230] rust_binder: 5229:5230 transaction to 0 failed: EINVAL [ 187.592781][ T5230] SELinux: unknown common [ 187.614723][ T5230] SELinux: failed to load policy [ 187.636257][ T406] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 187.662220][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.682475][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.786167][ T406] usb 5-1: Using ep0 maxpacket: 8 [ 187.792741][ T406] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.803250][ T406] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.818123][ T406] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.828403][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.836787][ T406] usb 5-1: Product: syz [ 187.841245][ T406] usb 5-1: Manufacturer: syz [ 187.847578][ T406] usb 5-1: SerialNumber: syz [ 187.854677][ T406] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 188.057964][ T406] usb 5-1: USB disconnect, device number 10 [ 188.214583][ T5241] new mount options do not match the existing superblock, will be ignored [ 188.237015][ T5241] input: syz1 as /devices/virtual/input/input16 [ 188.270920][ T36] audit: type=1400 audit(2016777567.190:668): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 188.490696][ T5259] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 188.499392][ T5259] SELinux: failed to load policy [ 188.539248][ T5264] loop5: detected capacity change from 0 to 7 [ 188.556523][ T5266] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 188.565283][ T5266] SELinux: failed to load policy [ 188.588469][ T5268] SELinux: policydb version 275 does not match my version range 15-33 [ 188.597020][ T5268] SELinux: failed to load policy [ 188.645059][ T5273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1735'. [ 188.702836][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 188.712684][ C1] buffer_io_error: 2 callbacks suppressed [ 188.712702][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 188.845759][ T5293] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2617188248 (167500047872 ns) > initial count (33766357632 ns). Using initial count to start timer. [ 188.985814][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 189.019795][ T10] usb 3-1: USB disconnect, device number 67 [ 189.079471][ T5317] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 189.079601][ T5319] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 189.096441][ T5319] SELinux: failed to load policy [ 189.136134][ T5326] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 0) [ 189.150532][ T5326] SELinux: failed to load policy [ 189.213738][ T36] audit: type=1400 audit(2016777568.131:669): avc: denied { lock } for pid=5339 comm="syz.4.1763" path="socket:[49524]" dev="sockfs" ino=49524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 189.329293][ T5356] ------------[ cut here ]------------ [ 189.334859][ T5356] WARNING: CPU: 0 PID: 5356 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 189.344477][ T5356] Modules linked in: [ 189.348543][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.2.1764 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 189.360290][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.370455][ T5356] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 189.376622][ T5356] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 54 d5 0b 06 00 0f 85 c2 00 00 00 c6 05 47 d5 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 189.396955][ T5356] RSP: 0018:ffffc9000d78f520 EFLAGS: 00010246 [ 189.403542][ T5356] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 189.412037][ T5356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d78f5d8 [ 189.420111][ T5356] RBP: ffffc9000d78f660 R08: ffffc9000d78f5d7 R09: 0000000000000000 [ 189.428875][ T5356] R10: ffffc9000d78f5c0 R11: fffff52001af1ebb R12: ffffc9000d78f560 [ 189.437149][ T5356] R13: dffffc0000000000 R14: 1ffff92001af1ea8 R15: 0000000000000000 [ 189.445299][ T5356] FS: 00007f8998dd66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 189.454281][ T5356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.460979][ T5356] CR2: 0000200000010000 CR3: 0000000118fba000 CR4: 00000000003526b0 [ 189.469806][ T5356] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 189.477850][ T5356] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 189.485999][ T5356] Call Trace: [ 189.489313][ T5356] [ 189.492283][ T5356] ? vfs_write+0x3c4/0xfd0 [ 189.496774][ T5356] ? ksys_write+0x145/0x260 [ 189.501402][ T5356] ? x64_sys_call+0x271c/0x2ee0 [ 189.506571][ T5356] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 189.512324][ T5356] ? hashtab_init+0xd6/0x1f0 [ 189.517050][ T5356] ___kmalloc_large_node+0x81/0x220 [ 189.522505][ T5356] ? hashtab_init+0xd6/0x1f0 [ 189.527169][ T5356] __kmalloc_large_node_noprof+0x1e/0xd0 [ 189.532884][ T5356] ? hashtab_init+0xd6/0x1f0 [ 189.538800][ T5356] __kmalloc_noprof+0x326/0x510 [ 189.544344][ T5356] ? kasan_save_alloc_info+0x3a/0x50 [ 189.549732][ T5356] hashtab_init+0xd6/0x1f0 [ 189.554205][ T5356] ? class_read+0x17f/0x8a0 [ 189.558793][ T5356] symtab_init+0x44/0x70 [ 189.563089][ T5356] class_read+0x208/0x8a0 [ 189.567852][ T5356] ? __kasan_kmalloc+0x96/0xb0 [ 189.572681][ T5356] ? hashtab_init+0xd6/0x1f0 [ 189.577972][ T5356] ? __cfi_class_read+0x10/0x10 [ 189.583405][ T5356] ? hashtab_init+0x100/0x1f0 [ 189.588511][ T5356] policydb_read+0xa83/0x2860 [ 189.593520][ T5356] ? __kasan_kmalloc+0x96/0xb0 [ 189.598424][ T5356] ? __cfi_policydb_read+0x10/0x10 [ 189.603606][ T5356] ? security_load_policy+0x130/0x12d0 [ 189.609174][ T5356] security_load_policy+0x16a/0x12d0 [ 189.614614][ T5356] ? irqentry_exit+0x4a/0x60 [ 189.619290][ T5356] ? __kasan_check_write+0x18/0x20 [ 189.624461][ T5356] ? mutex_lock+0x97/0x1d0 [ 189.628974][ T5356] ? __cfi_security_load_policy+0x10/0x10 [ 189.634935][ T5356] ? rep_movs_alternative+0x4a/0xa0 [ 189.641099][ T5356] sel_write_load+0x258/0x600 [ 189.646252][ T5356] ? __cfi_sel_write_load+0x10/0x10 [ 189.651509][ T5356] ? bpf_lsm_file_permission+0xd/0x20 [ 189.657153][ T5356] ? __cfi_sel_write_load+0x10/0x10 [ 189.662402][ T5356] vfs_write+0x3c4/0xfd0 [ 189.666725][ T5356] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 189.672347][ T5356] ? __cfi_vfs_write+0x10/0x10 [ 189.677384][ T5356] ? __kasan_check_write+0x18/0x20 [ 189.682748][ T5356] ? mutex_lock+0x97/0x1d0 [ 189.687259][ T5356] ? __cfi_mutex_lock+0x10/0x10 [ 189.692188][ T5356] ksys_write+0x145/0x260 [ 189.696616][ T5356] ? __cfi_ksys_write+0x10/0x10 [ 189.701504][ T5356] ? __kasan_check_read+0x15/0x20 [ 189.707163][ T5356] __x64_sys_write+0x7f/0x90 [ 189.711795][ T5356] x64_sys_call+0x271c/0x2ee0 [ 189.716558][ T5356] do_syscall_64+0x57/0xf0 [ 189.721046][ T5356] ? clear_bhb_loop+0x50/0xa0 [ 189.725893][ T5356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.732373][ T5356] RIP: 0033:0x7f899a39de99 [ 189.736877][ T5356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.756873][ T5356] RSP: 002b:00007f8998dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.765620][ T5356] RAX: ffffffffffffffda RBX: 00007f899a626090 RCX: 00007f899a39de99 [ 189.773644][ T5356] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000003 [ 189.781816][ T5356] RBP: 00007f899a433eaf R08: 0000000000000000 R09: 0000000000000000 [ 189.790394][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.798458][ T5356] R13: 00007f899a626128 R14: 00007f899a626090 R15: 00007ffc6d53fd58 [ 189.806499][ T5356] [ 189.809533][ T5356] ---[ end trace 0000000000000000 ]--- [ 190.215021][ T5359] overlay: ./file0 is not a directory [ 190.306730][ T5356] SELinux: failed to load policy