last executing test programs: 48.478082529s ago: executing program 3 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000380)=0x43) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pread64(r1, &(0x7f0000000180)=""/37, 0x25, 0x10020) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x10001}}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x89fa, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0xa0, 0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000003, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r5, 0x1) recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1) ioctl$FIBMAP(r4, 0x5393, &(0x7f0000000100)=0x3) 48.309293956s ago: executing program 3 (id=73): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./my_configfs\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000019680)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') symlink(&(0x7f0000019740)='streaming/header/h\x00', &(0x7f0000019780)='streaming/header/h/u\x00') 48.279787109s ago: executing program 3 (id=74): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x6, 0x67, 0x2, 0x87, 0xffffffff, 0x40}) syz_clone3(&(0x7f0000000140)={0x801400, &(0x7f0000000400)=0xffffffffffffffff, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) keyctl$set_reqkey_keyring(0xe, 0x5) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./cgroup\x00', 0x14c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x10180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00010, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000007c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000840)={0x0, 0x1c78, 0x200, 0x3, 0x2f6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c33, 0x8000, 0x3, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6e, 0x400, 0x40000005, 0xd5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x2, 0x19f}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000340)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2c41, 0x0) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) r7 = pidfd_getfd(r0, r0, 0x0) setns(r7, 0x4000000) 47.409325239s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x97, 0x2, 0x9, 0x4}, {0xf, 0x8, 0xf, 0x80000000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x3000002, 0x10010, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x44c181, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fchmodat(r7, &(0x7f0000000400)='./file1\x00', 0x0) unlink(&(0x7f0000000440)='./file1\x00') mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000680)=0x20) ftruncate(r8, 0xf09) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000700)="66baf80c66ba2000b05eee87660f388059e0b805000000b91e4240000f01c10f20c035000000200f22d1c0c00fa20f0636263e660f381efc620f7c150c1b000000000500000026210000000f01c1c4e17929d8", 0x53}], 0x1, 0x11, 0x0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) move_mount(r10, &(0x7f0000000580)='.\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xce20, 0x400004, @loopback, 0x2}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wg2\x00', 0x0}) 47.255305575s ago: executing program 3 (id=88): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff010b00000000000000000000000001140004000000000000000000035378fd000000010c0002"], 0x50}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000640)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x2710}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff36, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100001040000000000000000ac1414aa000000000000000000000000640101010000000000000000000000004e220000000000000a00000073000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4041041}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000600), 0xffb2) mremap(&(0x7f00009c1000/0x2000)=nil, 0x2000, 0x4000, 0xf3e6c89352379abf, &(0x7f0000307000/0x4000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) unshare(0x28000600) r5 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x9a020006) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fsetxattr(r4, &(0x7f0000000380)=@known='security.selinux\x00', &(0x7f00000003c0)='.\x86\x9d\x00\x9e\x9c\xf6\x00\xbe\xe1\x00f\xb3n}\x92c*iU\xec\x00\xa5\x9a\xae\xfa\xec\xe8\xcbs\x1f\v\xb2e\x05O\x9fZ\xf4\x96', 0x28, 0x0) 47.165798874s ago: executing program 3 (id=89): r0 = socket(0x10, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) syz_usb_connect$midi(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110030000004963075001400001020301090212000101182004090400000001033006"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 47.165570144s ago: executing program 32 (id=89): r0 = socket(0x10, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) syz_usb_connect$midi(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110030000004963075001400001020301090212000101182004090400000001033006"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 44.393795591s ago: executing program 4 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x82, 0x120) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) r3 = openat$kvm(0x0, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008d80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), 0x80, &(0x7f0000002800)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000002880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000048c0)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004940)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a00)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000006a40)="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", 0x2000, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008b00)={0xd8, 0x0, 0xfffffffffffffff9, [{{0xfffffffffffffffa, 0x2, 0x2, 0x7, 0x2, 0x83, {0x6, 0x9, 0x322, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r7, r8, 0x1, 0x7}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000008c00), 0x400000, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000008c40), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008d40)='devices.list\x00', 0x26e1, 0x0) close(r11) socket$inet(0x2, 0x2, 0x1) write$cgroup_devices(r11, 0x0, 0xfffffeff) sendmsg$netlink(r1, &(0x7f0000008d00)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x5f433dad4a54f812}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000140)={0x74, 0x1a, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x9f, 0x0, 0x0, @u64=0x1000000000}, @nested={0x55, 0x7c, 0x0, 0x1, [@generic="ea", @nested={0x4, 0x162}, @generic="ee8a493864dd7d3467ee27f9ea5d4b5ea9f7e94165530e00467adf15c7269ae7a27747d36fce140d94f76415cb52254015589147a7fd1f5b4a0a0ce4026cc9917d3172d7e38ac8103513c9b0"]}]}, 0x74}, {&(0x7f0000000380)={0x18, 0xd, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x6}]}, 0x18}, {&(0x7f0000008dc0)={0x338, 0x25, 0xe355041e494d4226, 0x70bd2c, 0x25dfdbfb, "", [@generic="97951b09f7236815c40ea425ce4b2f3ba0d55afdf548daa7bdd92784e8c709c6ca29017ea8ca32dfb2539c5d5cbe15eb2f1e0f751ac89ebb2eb895a4cfdcab7140133883253e883f1b6174b279c92b139efd78ea4460aeffe08857a41be1bf8ad15914578d6443d201d38cba3aee21350b7123c276b9259e6c2af112d06dd551fbddb5e338e0ea101eee80b162966b0fc62f1db64b72d34372bb06bb6aff56c763cd22de0847", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x7fff}, @nested={0x25c, 0xd0, 0x0, 0x1, [@nested={0x4, 0x152}, @nested={0xf4, 0x127, 0x0, 0x1, [@generic="5c208b74ff4c30675dc4390784e905300bebec92ebbf042156e48009cf2ec9495b9c87f5be4e9f638e1ab104d7f420bcbc3c00e237ab20763a263fc02b50ccb2f1e1446d0b4a378573754d5aa02be1a671df3d7b804997e2ceffb711ff74a083d281c4562a33ebf40a051b0630913fc4a9dcdecd301bbbcc00501ceb7cfc868a78cb0e320c7a5f1539e2a576a9994b50cc2f1280c095368cefc8b8f8e486e858efb7e76cac1284243068f0457a7f9cc2280c972df1c7a0814e9b98f95944fb36517abe3ca98c22fe48177e12d14c74d032b43e65b61b27d2ac5385b30ffe3b5715ea69cd0d7318f62d9e4645a4471c67"]}, @nested={0x4, 0xe6}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x5}, @generic="ec5fd68bcb0de452ca7af298e878efc048dab5ae606d86e374c6fea89168a11152aa", @generic="061870dddee867a24b2c230275c14b6c1fae1158a01ef965391425884d7ab56d5858ea6582035fa3252db49f801e3994", @nested={0x4, 0x67}, @nested={0x4, 0x12e}, @generic="f98b79c86d6729985b19d3fc0a437eae21f0b27ec85ceafb071c20d2037ed70c1409a38550c9f647352f6ec7840ef797ce54b136f36c9f67e6be89807c923a5f0b6ed303fd58b1db752c8bc59d0843cfae91d6b15ae56349f398fa999d9b1e90681886626338032e54cd5f2aa0ac6c48a0f304ee628a275fe43512198f96e3f7c0b97eb9b516fb0791b3ae20f48a5be332a0476fd436e0f2a01cef78965b68c9e87c3308b3c663d5cc7a7529196829ebe3acd1ca438f40108054df601de97dd52767e441fb282e147cc094e4df2258ae074abbfbc3ba3195a41677bc80be17d2cb2e7c622bab1279414711c4034673bae72bd65026b6"]}, @nested={0x10, 0xb6, 0x0, 0x1, [@typed={0xc, 0x137, 0x0, 0x0, @u64=0x5}]}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r2}]}, 0x338}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000069588fbff5138db4fa77a50d00000000000000000001000000125b3b370b2c1e717efc97262c2a56915864322026472ad1a031a0ebe9c6615d355c91410086f52655441fa9daa456f67787e274f7cb209fd4f99c7fba6b31d4340a2621c3f67555d09d01125b93237be78ffced8624713dd07795e95a85a7c1917ec0a1feecac0099f6f570a7ddd7b02829497d9a668af4d4c431f245fd9ab095304e53bc7fa04475618bf20b2a611b4ed0682d5c718a60c9ec944e4701cfea6903960a9bb527426f8d73dfb226db8a", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x5d914930b32fbc0e}, 0x20008000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r12, &(0x7f0000000340)='1', 0x1) 44.195436051s ago: executing program 4 (id=113): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002140), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000021c0)=0x4280286) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r2) timer_gettime(r1, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000140)='./binderfs\x00', 0x0, 0x104852, 0x0) readv(r0, &(0x7f0000002200)=[{&(0x7f0000002240)=""/65, 0x41}], 0x1) pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000002300)="80fd", 0x2}], 0x1, 0x0, 0x0) 43.771371284s ago: executing program 4 (id=118): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./my_configfs\x00', &(0x7f0000019580)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000019680)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') symlink(0x0, &(0x7f0000019780)='streaming/header/h/u\x00') 43.770568504s ago: executing program 4 (id=119): r0 = socket$netlink(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000015c0)='.\x00', &(0x7f0000001600)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000001640)='./file0/../file0\x00') mount$bind(&(0x7f0000001680)='.\x00', &(0x7f00000016c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) (async) pivot_root(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='./file0/../file0\x00') (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}, 0x1, 0x0, 0x0, 0x40051}, 0x80) (async) r1 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000002940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x864f, 0x20000, 0x2, 0x18e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x4000, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bac, 0x4, 0x2, 0x1dd, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2010003, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000002bc0), &(0x7f0000002c00)=0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/4112, 0x1041}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2}, 0xb}], 0x1, 0x140, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000001280)={0x0, 'veth0_virt_wifi\x00'}) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='net/vlan/vlan1\x00') (async, rerun: 64) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000001300)={0x1, 'vlan1\x00', {}, 0x5832}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000001340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001500), 0x41, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001540)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x10000) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) (async) syz_open_procfs(0x0, &(0x7f0000001380)='fd/3\x00') (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001940)={{r3}, "ad329b3c34bb86243ab07d143830bfae1248bcc1403a021e322617f2d8db834ee6390bd503fea37ac54b40c558e49d950d66f22d0b519c0d1e41ed20f9a5adf739a04b72660c28ed769973dfaaa718015e0cb636002eb696e49417284d15c14fd32138ac0ab1b07f86e92ead171b54bbe79614163465ca235a54eb69801f0462a370e15ffbc3d1353f108cfc36ce20b353c2156844c4bb69458860a10d6683e0a8032f026a2e6adec0266ca710e816d51665d688196a6a7d3faf8ea53222edd0be925b292f04dd2b3f0c9409dea65f0095b0029a789b5a6fee58c96ae64e79e8b81f8eea8f2bee745ec8d48f0a01547dff4b3bb51a8c1dc5dbff0a504b3d67d855640aa27caf44d463bb57fd25a342c1802429e1643c915a3a3dc3159d0859b20cafa9fad499d44c871c61a311aeeb9c9bc418ad644a1bce8495847ab4e073a4aee689bf9f2d27c0ed8859e87542b4e24d0a5e92973461049d7fc5a573c730a471c0629c4c7655be6a5663960b132d708d13164272403053f320ebdee249b0e6281472f449d44ae1821d243549f1626632538ab649aa00f33b9bc59eb4c2d277a5928913d69568ba42048e5348bb92acd0b52f0f107840f403d438b3e9ac196b0b2a1c10b8ae66aeb69ba9e194b44be656dc8f306d807b57ed25360765b7a7afd7a607bd84cd0868b1df3376f9a472ffbf50e3bd6aa329e4a1b8d4db439b4abd6055a936569e0cc65476f3962c64d40729ae841cfd976576922bc42b3f2358adaa262dfb407a921518fc9145d851b0e9fd509c5653e8b6e17a0281a588683c924952b0bb74a063d39d775c4a6f54fc641cb286947f9f4d6ff9bdceefc1cc3c6214e946924e1d589cb41a93fed6337643ed2e81a2d74e9488e481483b728e6214aa98e9194016bbf69e33e543c37fdfbd4c1a417e45e6e168226f3d1ddbf7e89c067ec6f0c27197778daf7a6f45ccc430845bc989428c2b4c4e592cdb690a0b65cd08623ac1c1f7c7dd318150ce3d6700022040517683d1c103a10529009817ef56383b8bf43eb6bb677a216dd6866afb72ec0f4b8240374df1128040dc7c851a03ef524debd582ea0a0d5fe4c45970602336dec2a1c11b4b76e21b25b91a34929a85d7b421dac3a5822735a3d19e24ee5eacc0a5969be9806de2667893513a69088c3b2c81415d14a94f928ba7dce53bdd8408cb4891653ed3a7c8a887d72d51c927550243c373b12a51bbf492048dbd873ecaabcfdf7892d9782f31072fe682f29628563cac9b1ca4462559e95d2bfdd9c3454e645ce53f8c23ad9a2437248ea4d5d9e1ab6ca6cff17c57b36090d936a664105d25247634f65254ee37767135f1e6f81600984b96a2b1f038ee967a9879e44bd47bf214eae7c810639a7f24901575148926c06453de28d74e1a63fe4a42e0ee8535f531f2562d18d530a8fe108efb00e5e1eafa7a527f65c9fb6f2955d033fe63c52bc985be43c04891ddc57c8a404796700770d2e620c4afda05008b6f29b644359d32b0cab92f9a5a794efb95656a45739f049b60a0585f1d0551fab9eb49a5cfab25fecc7d2ad526f29a459087bb5e695458bab5c63ef40c5bde57ff4d44529aa93906dcef7cfa17ebb238e3b43a0b2561f5918e6bbd0782b818e4d38eed7c3ff28d151e26ecaec226f07550897ebaeec73082b6e96d1def209b40402a6a5980f8dca08dbf6b187f9df2ed1fecf75e7b7ec02a4f8a512a22adb95e647389cf6495203018ebec62c751ab243163fd8beb36e8b21ecd0cd3e3793c71aa56f35a6f082887c31c46b34503ff05c809d1b1f7cd6dbea1d19c5ea2f4d9826c578542720c3648d37e5bced306d4f65e326dc025bcf2a7b640938f86f8dec79cca91bd1941c87374eb49c548f2f457c3aab4ab83eb58992aec260521c574c0e8a4b1ec85aaedf5ade1e135dca22055e90c39357b51952f0b2b62ef2e9752bd7c6f495c20859fce9dd0ecf80f40ee78ddd601652d5d4ebc2e11924e993bda10e4a45ad1a70ee26373f5e35159bc2121700fba6ebd9c073665b0b1938aa861cefa5954c74b5406032a7f91f4f41c726467962cae1df4a907f149b3fe1d0d5b792cea97c73df3119aa27ebb595a0830abf58dc9c57c00b1c5763e45d6c0f24f84e776b162e8d07675d6cb67310a0707e14684389ec716d819031acfa6431e39a56ad966f6d66d026411f6c0d4d4142aca69646e86dabda3d9fac4b74a654e9e4edaa907e8b239a7da70c6a42d0eaa89f33cb154b87e7d95a79b4c3a6428473d3738b130eaa0b4ddafc643c256ae1fd503bce88a92d77f243f7512aadca405f7f188e870fe6145d75473cc74f3ccf414ddfdc305b964905885ee6180c7fe10cb5da1931b37025f0e19755dacecc8e7366f754fe9cd70aba94203cc550056abb6da0db9b58a1ae29ad4b48f86d88624eef255b5b8be1ba30ebbca69749e50d27472b2ace8c75757fa86f66e43cbe9cf453f2d66f5bc2933849f0560863e1173ec043ae20908b80916cfeb62ec08fdb0679f0e66319f2a18522d5e43e95652a648480bb1ddb997a3b766d96f334e44360c59926237e175969851ee6321e2828e728e3ef234d31bfaedbbc5e7267e9b1173cfb1d835f21f9becc5a77d9a87a74b1c334a300bc4c1a60458c3e2ff7f68284d0640096228b80e737f8063a2654b87a2425a412afc9e0dc8f8bed0e17ee379fc5624f6a895bb54ed8d94075bfaecabbbb1a88f811ffb2c03cc713827c8baf3678e08563f9e225bf939069b63cdb13da81e14263b6e785da05623e50131a27700a0e747ee30dcb012a6ff177eb470d8e26b619e12d843bb72ab8cb76183de3e4b5148b4121624a613289788bcdd07c3df2ae387379dca0b96f895e8b1dffb32955d13f551c6a5bf407b809cf677b05e7e61f8632e7cf4301b7cacf038dd73c40ab0de375ffaad41aaa9af8d6d505c9faf3843292975d586313bcfa9bd7bebb33a681c07b8b1d3ccbf64f90abde770ea965a46623a1dc29510c2910faea48fae2c62b882ced3db99c008739288439ea1cdb7dfa7003896ba7285754138767975520ba7c8c705b942e7c2bd751a47cd82c7d7ff2bdf5bcf622e5d5339346aa5759ef863fc47ff9d91d49f19ac9c5010f82a9f403841df53000ac07cc9f211ed874064079eb912ee9d9d1669cec2a6379a68898857455075b3048573740a4ba985b5df2e675876689b41600d0c7f6093aa9cece564eb157632c08886437485c53d335479cd55a748744e9ac4eae9088ab10da216c8806ba94093f40b07747c9b9f51d317b021492002ece5e5208e88b0e836bd5cc6feb752a8c7a117f358561fa1dedd9f39e652a85a26369b56e8ceefd7b7754a251070bbe99caac6e612bb97d88aa4c17702643515c36f067a65014ad7f63714953c667792ff9a77a7e1cc79abfa6019168875cf2e0c60e89723bb05ec0490fddb9be300a7feada9e3f3b558405279af351efef6bb28d5dbedc0dcb6c1a9e9286fc108a6a1ea9781192c04785dff6aa9a361f9eec67f8b241e2e3e998fc99ba6329a5820b6965be64a4da51f33f08c8031ed01a46241998ccf6ff7f664365d6eb08654a36c68b29935d53a53fb39a44324020d706f6cc624e91126c26d5c477bb53ccd05e9ca727fc61c8c7f8b52f5e905f85d1bbbe6930c8abbe5557e0ab2722989650492ae799d47a46dc7fb3a7f716edd235e65d15f29d4d05f1affccc165d6d6b15e3e52bb1f4c35e3018434ca6a9becb630fb651d47bd5dc319163a8207f0f4f6955192705f3f57d9c55587d56f7490e9a8223bae27e5f83d6b29e43e8a438c5efb0169dc0aa5130e6e3f542098b58c6fafc00bf8b767cb64a0ee9b98dcea52e194077eb9e48a92508ae224616cf7429ca266aa5e2a0a5ccaa64614de12a9dcf7b4604cf5cd5c95a7b3eb9b70646e37549a087853d001921a27e70af0b85f8cbc64d2c094d2c139146d955c995ab6af23e5770c825e3685e5327d9b79dd8404560e7b30e89017fbffad02d264e534c82a6aa2ff3440416c5426e814db4c2f556e102041590817d5656a0b5d391acaa0f10145f3bc851ca8371763e820e35c8353561eed57a29e59959d4d53458eba7e1f25acd817a60855c0950f274b93eb0795f6c4f07024bc3af9626aea5133293914f982367890eec808c2fc13e49c6e2be29170c352a1803b18df49078377709534b821370532f27402e626b49f45a92648594b6ad2deca22623c2a925d10de4f88f6587685334a8bdd27811a39f7a85db92fa10121050bd7d675a1a62ef59b1fac25c1c1348df1189b93b77c984c005138fb98b52237c3b7ea5a7960ba25d65e83778ca89b82939defd6177f85091bbf56c5d00f8e9b8b3bfd4231e8441d3e7ef31c8d075407be55948f779d7896808ce9e100fde57f8ee78c881674940c3931fad052b9ce28770eccc9a168cce9a01e445d6af88cf15b56fb3350072b45e66af4c3c2e51141b4c41b03fa95cffaca878308f01e57dec395d44be70410518b482350dc58fcfbe0a18f776d1d5c7bbd8e3ea7a7fbd4c0345b8f03fc7b84537992894862cfec2772e05617ab0b6c594d22f3720bdd575168d576871bf11f3b315f5643be69b28f3b8e3b7977ad9a4d05d5e5d988c8d6c48b245033af568aad889206db6b502806fe4943005adf307181f91bad8f9dccdaa00087dae8d7154ed96f00f807906d89022757d8f5123ca578b8f28af6468d2515e328d2fb79eb7c4bb861bd6f2e3998f855e1445710faeef93632536883d4b19d6608802ae801e6ced526f15a54cee711a80e7492072df499f695cc91e68b8f628c7c62263bc38299c404bc69ec57c276408879cecae5b0493d786ff4ab75283db3721ed55f7b03c3f5f12507245f984b17bbbd60c25140a7f9594391366013d0450b9ad5a637271cae90849a6381f0686c72f2eb1c5fe1d6cde8a835ba728a80087ea46bf09a26d76c47a04a238360a7286a85ae66840a42c7551b342f8d6ec935f1a663c8e1c48619ce67100158c48c93e64d4694f2f9d86b23769ebdf2a84217288c08dd57a107b5b23ce594d0bf4fa3e6ad8f871dbe7521c84c63d96e37ab6464816b52231bf400ae4b007b79d8b1f20baaed347194da05e702be91344470cfcb83eb8505950da65bf3159d10c5ca38fac0fdc334013706d0bfa77c8b919efb0388d44d2c03521c6e22752d691e2d526294e1ab44de41ef8ad4cbf887e2fd7483ba6112e8232e3c5a067748b3347ed242e9bb4ef5fb90acd6f223eda3ed7fd79fd231f4cf8b71a1caabfc5f5ed7229d0fad03a190d846610cfa7d2754dd4663a0c3fa1761464bcb90ab8d47fc274e9c0b78393beb64ad5b7538bfa10147f57b74528abfb8105265173273302a6d1059ac5ec4bf449e52c5c07663e4c18d1f1b96e2c9cae76c8b62b386468be56489992fd3987436a5c3fa28bd193ce63895c52a029fafc24f1dcb6587b51568aac6e7dddb2e069f28f0d9da3713d63f04fc0225bb0177e1f926e0e15253e698328eb3cf25631cf7878f2853eb91e278b1c55113e29812120e7138ffd74f14058db9f5d4f89b11f2a5bb45a6646802537e0156245e0dcd288f97a3acf90205908038dfb8daca5c01e2596190c28a4bfa519a86536dd1bd34c4d1b79e3046f1d4b4968e4b32d95fe86881076d5c9287efc1639fff35e8c624299c4b1e76e6d4e9cb1dcfdc6e8ee0c7ab83c33b8457037039dac1bae1d7b43eae5a9f817d5c1e3a4c5fb038d414dcff5f09aba9a968d344"}) fcntl$lock(r2, 0x5, 0x0) (async) ioctl$TIOCGPTPEER(r7, 0x5441, 0x81) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000017c0)={0x1, &(0x7f0000001800)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) openat$kvm(0x0, &(0x7f0000001840), 0x0, 0x0) 43.645862697s ago: executing program 4 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@remote, 0x4e20, 0xb, 0xf803, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x400}, {0x1, 0x1000006, 0x80}, 0xfffffffc}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x4d6, 0x3c}, 0x4, @in6=@loopback, 0x3502, 0x4, 0x3, 0xff, 0x800, 0x803, 0xfffffffd}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f73db4683b05fae0f49ded5ce7b25e27c44302e00b77a88a92e18e9efbb47aed2192f687200d3b2ccc303c82cf38e1330ff47555fba346365027013434692879c0a6af51d8029c80dc783d1fca445d1e7fb034d2fa59d3b32a6efeff8690e97105acde33e830de75425b8193218d76d76fdb125d20c08c7321b2e4b6d6c6ffeceef2b97"]) 43.575897345s ago: executing program 4 (id=123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x10001}}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89fa, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000003, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) 43.474223615s ago: executing program 33 (id=123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x10001}}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89fa, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000003, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) 39.84633818s ago: executing program 0 (id=177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ee0000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ee0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 39.781940346s ago: executing program 0 (id=178): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) lsetxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0/file1\x00', &(0x7f0000000500), 0x0, 0x0, 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x3, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioperm(0x1, 0x3, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x19) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4558, 0x7, 0x0, 0x9, r3}) ptrace(0x4207, r4) (async) ptrace(0x4207, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) write$tun(r5, &(0x7f0000000380)={@val={0x0, 0x809b}, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x7}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x9d, 0x64, 0x0, 0x2, 0x2, 0x0, @multicast1, @empty}, {0x11, 0x8, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, "4f952005406a1297f124cbec13bc43b5b9a2479f275a548172d7a72dc979a8ad193bd0eb0f8f0f413b866babbe13918cdbb806ab7530c5aadb8d1147d17f177985cb7eb1fa200b1d0faa31d2cc012930e53b25c888e4737ef46c96c95b144356de05e01109e0763da77ad49137daaff66ae16cce64a800a76707225924707dd48e"}}}, 0xab) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) (async) ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000001c0)={0x0, 0x300}) 39.629814882s ago: executing program 0 (id=179): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e030600bc5cb601288763", @ANYRESDEC], 0xffdd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161140, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000006c0)={"84b5c55533ea32a5ac6710520be5880f24e2a5ba3a6d0c708dab3fd6c7b6dac17b5104c1bbe5b9362356542e8c57fdb61654acdd04366960786ac65db68b9c8ca802334868984db6ae8025851f49b67fc56dcf3fc5f2efca41e94417af50361a93b000827a02ae72edd43656cac0fad2922d604e3285134aa1f7684d4ed071a5d49ba3a56565e118ac9832ff602b2bbf755cd25f345073b23ddfbc0832b689a8a81860b6dcf3359073d2ad88c6a17dd75d8d39cd4bcc3ff422d28c6a933fc2b62d21d5eb9f320299cd98e0676405b337be9c41df98a8c3ff98c1e45290339008ece4aa7d9dea3d5f16f9153049449d0ad4b651b58ffa5da8b78a1a71d2c1a7501716920118c1b0b7bd9c78685540fade2496b79083d584ed4f918a43c504e81048cdc8e5d8aeb032fb090f8ac9831805ce79f1d41bc94cb23e5cf8879cf7c6d029d7134696f6cda8ea050b68c8026682632f5e54801037f10949d2b5752534d7d23f22d220b7758b127bccbabe1637cd438ab8c76ff2ca86918c35384509c4f8fe2cbc4588337c46d773debe779b44523205f120753c237dd7849c213355980591f6c41edb773402eac5660aa1b1c525b985590dab02cccf115c750fc07f7a08bffacdc0a4a1fb41340e273973bcd727bc5b7761829cb6ab72bdfb5e890330241957e7e84a81ad75413314c359cc01b3ac00fde545a408aec653427ce71ae30140df3d3296e4d02d4c582130362e1e0cf6fa50386d965fd5f5cdaa387f6fc45229ed4e60f4b15853f2faed095064599a076c211e4ed2f434cbdc84dc59c6b9164f60a54ac981c023b103bc530f666784308608503367c7e6cf2a9096d5d8dceb382984913eb2b5e4581a9cde9afd3558ba77fa5d3f2d2803365251947199d8b31f474c73ad2928eedde5bac28f42bfda4dab0ac17cf194f5b09ed1944a1427ec55654d5ab8c2f2d2fefd0abc6ae9d55e7361368a10ca4275ec2edd155ad8cb58d5b907d30f5a74baa447b23fcfbb510d351f48ff45b8eb9c399d5b7509e562acc36000dcc663b46244a5bc5b89b4c2a580ebb61c38bd34ea55fe3c4779e374a9cc0db6d9d97b347c8074dc081d65f2418e7aad89ffd6d8f2ffd9c3b470f9e54c2ecce5ef6a6f302c6ed5350e3e32a682ef6bcde709b7b0f115d74c7d3ce16c457eb2eabf088c320b2de00ccd20f6d08dcda1153545262978adcc758f15b7b77f9ac3882012e31e85824793e6d6d0b70081efb90766c39f0475e35e62e2830e7d25825dd20bf060240d46dd1b17899ea62c101c673df9db674ad56c56ba5613e9b260f2a0b7499a7ffabb069996b0978b1bb3bacd6af0b3fc1cd0b27fe19ec1a79d96335742865655f0b9e99b2c91a50fe38e8177c6dae00546da80f84993b3503af265d033c2fec310175cd3114e3795b1b5807519eae18ce7e0c6f0b022ba54"}) 39.373112498s ago: executing program 0 (id=180): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="13000000120001e7ffff92000000000000000000000000000d0035e4d95242d221a1d75407386279a9eb7d802c22041f6256bf1f994a5d9aa11123ee3e2af62c5d245678c003c43411a0429dd54a0ad52bdc419a7e3fe0e9c3aabcaae46cc55d799fa1fb77648d4c657b70dae7c506274b490028ff891eb6a988fb15cf411e00f6b8054f32a7ec2b0e41d4744d22417751466e15a066aa318811b6db53a39456bd766b3a2d6394342e888d2faef958c446be4c935afcbaff6e13bf5ae49236e3e3a2583fc1b574a66a853227559522d02f4d9de818b381b42057dae427d58c"], 0x30}], 0x1}, 0x80) 39.36098354s ago: executing program 0 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x80002, 0x0) read$FUSE(r1, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$security_evm(&(0x7f00000004c0)='./sys\x00', &(0x7f0000000500), &(0x7f0000000540)=@md5={0x1, "8e711f3f1880b884b5bad63b7a85b86f"}, 0x11, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000240)=0x18, 0x4) chdir(&(0x7f0000000000)='./sys\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x9b00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0xf) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000040)) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/200, 0xc8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001680)) r6 = getpid() sendmsg$netlink(r0, &(0x7f0000001980)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900), 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r2, r3}}}], 0x20, 0x20008805}, 0x2004007c) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1200000056000106020000000000000007"], 0x18}], 0x1}, 0x0) 39.288626797s ago: executing program 0 (id=182): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000001980)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/4100, 0x1004}, {&(0x7f00000014c0)=""/250, 0xfa}, {&(0x7f00000015c0)=""/293, 0x125}, {&(0x7f0000001700)=""/69, 0x45}, {&(0x7f0000001b40)=""/231, 0xe7}, {&(0x7f0000001a80)=""/165, 0xa5}], 0x8}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x801}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x6, 0x0, 0x0) 24.082886175s ago: executing program 34 (id=182): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000001980)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/4100, 0x1004}, {&(0x7f00000014c0)=""/250, 0xfa}, {&(0x7f00000015c0)=""/293, 0x125}, {&(0x7f0000001700)=""/69, 0x45}, {&(0x7f0000001b40)=""/231, 0xe7}, {&(0x7f0000001a80)=""/165, 0xa5}], 0x8}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x801}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x6, 0x0, 0x0) 11.509849732s ago: executing program 2 (id=344): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000f00000009003d140f2c369197100000000890a4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x4, 0xffffffff, 0x8, 0x4, 0x0, 0x3fe}) 9.844908324s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) 8.187426225s ago: executing program 2 (id=351): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x10, 0x8, 0x1000, 0x1000, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (fail_nth: 2) 8.049768669s ago: executing program 5 (id=355): close(0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000380)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x2, 0x40000b7) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8804) getsockopt$inet6_int(r1, 0x29, 0x34, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.049550379s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) 6.279761572s ago: executing program 2 (id=357): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff010b00000000000000000000000001140004000000000000000000035378fd000000010c0002"], 0x50}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000640)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x2710}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff36, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100001040000000000000000ac1414aa000000000000000000000000640101010000000000000000000000004e220000000000000a00000073000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4041041}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000600), 0xffb2) mremap(&(0x7f00009c1000/0x2000)=nil, 0x2000, 0x4000, 0xf3e6c89352379abf, &(0x7f0000307000/0x4000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x9a020006) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fsetxattr(r3, &(0x7f0000000380)=@known='security.selinux\x00', &(0x7f00000003c0)='.\x86\x9d\x00\x9e\x9c\xf6\x00\xbe\xe1\x00f\xb3n}\x92c*iU\xec\x00\xa5\x9a\xae\xfa\xec\xe8\xcbs\x1f\v\xb2e\x05O\x9fZ\xf4\x96', 0x28, 0x0) 6.277247042s ago: executing program 5 (id=358): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r0, &(0x7f0000000280)=""/247) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) 6.20282117s ago: executing program 2 (id=359): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x10, 0x8, 0x1000, 0x1000, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.153657115s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) 4.321391734s ago: executing program 5 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prctl$PR_GET_IO_FLUSHER(0x3a) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0xe000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) syz_usb_connect(0x6, 0x63, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES64=r2], 0x0) 4.247963272s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) 2.315569621s ago: executing program 1 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x6, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000180)={0x1e, 0x0, 0x4fe9, 0x0, 0xffffffff, 0x4, 0xfffffffffffffffe, 0xffffffffffffffef}, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10) 2.312940851s ago: executing program 2 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb10e7180, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000980)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000009c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000a00)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.312520101s ago: executing program 5 (id=365): r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20080, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0xffffffff, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000002d80)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10010800, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) syz_ublk_setup_io_uring(0x7b5d, &(0x7f0000000080)={0x0, 0xf81a, 0x1, 0x1, 0x228, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000006c0)={0x0, 0x1b39b, 0x82, 0x0, 0x146, 0x0, r0}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6af7, 0x200, 0x3, 0x1d2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba1a, 0x80, 0x2, 0x333, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde76, 0x1, 0x2, 0x368}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4ce, 0x10, 0x2, 0x129, 0x0, r0}}], 0x4, &(0x7f000000c240)={0x2e, 0x41, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff}, 0x0, 0x0, '\x00', {0x0, 0x821, 0x0, &(0x7f000000b240)=@buf_1k="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"}}, &(0x7f000000c2c0)) mmap$IORING_OFF_SQES(0x0, 0x4, 0x3000000, 0x10010, 0xffffffffffffffff, 0x10000000) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f000000c300), 0x2, 0x0) syz_ublk_add_dev(r0, r4, r5, r6, &(0x7f000000c380)={0x2e, 0x40, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f000000c340)=@any_dev={0x4, 0xb11, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1}}}, &(0x7f000000c400)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) keyctl$session_to_parent(0x12) syz_fuse_handle_req(r2, &(0x7f0000002e00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ec0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004f00)="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", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x40000, 0x1) read$FUSE(r9, &(0x7f0000009200)={0x2020}, 0x2020) r10 = openat(0xffffffffffffff9c, &(0x7f0000007040)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000007080)="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", 0x2000, &(0x7f0000009080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x12) writev(r10, &(0x7f0000009180)=[{&(0x7f00000091c0)='n', 0xfdef}], 0x1) dup3(r2, r10, 0x6700000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 2.2335447s ago: executing program 5 (id=366): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x10, 0x8, 0x1000, 0x1000, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (fail_nth: 3) 2.23322692s ago: executing program 1 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./trace\x00', 0x13b) mount(0x0, &(0x7f00000009c0)='./trace\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./trace/set_event\x00', 0x2, 0x40) write(r0, &(0x7f0000000a80)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8eb892797a5f6d6fdd831aeb23efe29cc6b68749780e60f63b5ec07b8def4a1cdf2cddb34f3852c04f35fccbd69b488f6a6c440e4469ddf96ece04a18c72bd6f84923e6375d2fdf1569175d7a834591fa2c2e3b6f3df92cac830649c839cf4ecfb55", 0x81) eventfd2(0x100, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newsa={0x134, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in=@empty, 0xfffc, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d3, 0x32}, @in=@rand_addr=0x64010101, {0x1, 0xf, 0x9, 0x9, 0x10001, 0x1, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5e, 0x3514}, {0x1, 0xffffff55}, 0x100, 0x2, 0x2, 0x0, 0x0, 0x23}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d6, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x4, 0x1, 0x10, 0x5, 0x400000, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000500)=@newsa={0x1f0, 0x10, 0x10, 0x70bd2c, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x805, 0x4e23, 0xfffa, 0x2, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x3, 0x9, 0x9, 0xfffd}, {0x20000004, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x5}, [@algo_crypt={0x100, 0x2, {{'ecb(cipher_null)\x00'}, 0x5c0, "4ec3b541d537be70bcbebf1230140a5f250f92f9a9bbd30bd1132545738d5602de693c056d41c6bdf72be500ba5cf8a6899ad9324113ad2af0c3123dce9cf05015b6f1e58117df558cafffe0b01493403d85b0d5614c6a8db859365713b7fb0a4e77d376117d5ddec8f509742423c820ef5d2ecb51c07243d35d4bea40989441f000e8125f98372585d15e02ad2cd6a2447617b43c68baee7157da31dd35c2e554e6487e9a93b9fc82a2daeb528b45b21cb822d74205e13d"}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) unshare(0x22020400) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x1) syz_ublk_setup_queues(r5, r3, &(0x7f0000000140)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000440)="0f3acc6975020f78460266b9b50b000066b88935000066ba000000000f30b8a8028ed8652e0f080f01cb66b9940300000f32660f6a7b4eba4000ece200", 0x3d}], 0x1, 0x8a, &(0x7f00000004c0)=[@efer={0x2, 0x2100}], 0x1) 2.232696689s ago: executing program 1 (id=368): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff010b00000000000000000000000001140004000000000000000000035378fd000000010c0002"], 0x50}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000640)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x2710}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff36, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100001040000000000000000ac1414aa000000000000000000000000640101010000000000000000000000004e220000000000000a00000073000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000cd232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffffffff7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000002000409000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd73687918a77f0f919fa56bda43d9cdc115427b1f6c4130705caeb69ad180fac10ec0abe73e83d373e6920b57cdd52a04a65da45576289d612c341f89c32c182c3919edf1dd175f044c75352d74f6"], 0x138}, 0x1, 0x0, 0x0, 0x4041041}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000600), 0xffb2) mremap(&(0x7f00009c1000/0x2000)=nil, 0x2000, 0x4000, 0xf3e6c89352379abf, &(0x7f0000307000/0x4000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x9a020006) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fsetxattr(r3, &(0x7f0000000380)=@known='security.selinux\x00', &(0x7f00000003c0)='.\x86\x9d\x00\x9e\x9c\xf6\x00\xbe\xe1\x00f\xb3n}\x92c*iU\xec\x00\xa5\x9a\xae\xfa\xec\xe8\xcbs\x1f\v\xb2e\x05O\x9fZ\xf4\x96', 0x28, 0x0) 2.209234382s ago: executing program 1 (id=369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f0009", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000f00000009003d140f2c369197100000000890a4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x4, 0xffffffff, 0x8, 0x4, 0x0, 0x3fe}) 2.191828633s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) 119.453298ms ago: executing program 1 (id=370): add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000d80)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000e80)={[0x5]}, 0x8, 0x80000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000ec0)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000f00)="240000001a005f0214f9f407000904001f00fe0000000000000000000800040001000000", 0x24) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x1, &(0x7f0000000f80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt\x00', 0x24) open$dir(&(0x7f0000001000)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000010c0)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r3, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001380)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000013c0)) syz_ublk_setup_io_uring(0x467c, &(0x7f0000001400)={0x0, 0xcfab, 0x2000, 0x0, 0x118}, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) 119.227138ms ago: executing program 2 (id=371): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r0, &(0x7f0000000280)=""/247) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000480)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) 73.612432ms ago: executing program 5 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendfile(r1, r0, &(0x7f0000000000)=0x8000000000000000, 0x6) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000200)={0x70003, 0x0, {[0xd, 0xfffffffd, 0x400000000001001d, 0xfffffffffffffff6, 0x7, 0xa8, 0x3ff, 0x1]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.877437ms ago: executing program 1 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x112}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'pimreg0\x00', 0x4}, 0x18) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00222200000096230500b681"], 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_ep_write(r3, 0xa4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf250200000006000a003a2b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x4, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x10100, 0x0) mkdirat(r10, &(0x7f0000000480)='./debug/tracing/options/context-info\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x2204090, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00'}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4824, 0x6, 0x83, 0x8000}}], 0x68}) kernel console output (not intermixed with test programs): d { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.576275][ T36] audit: type=1400 audit(1793828954.220:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.605945][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.614738][ T36] audit: type=1400 audit(1793828954.300:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.640313][ T36] audit: type=1400 audit(1793828954.300:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.673301][ T36] audit: type=1400 audit(1793828954.360:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.674465][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.699098][ T36] audit: type=1400 audit(1793828954.360:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.571258][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.578610][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.585702][ T294] bridge_slave_0: entered allmulticast mode [ 22.592141][ T294] bridge_slave_0: entered promiscuous mode [ 22.601626][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.608815][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.615977][ T294] bridge_slave_1: entered allmulticast mode [ 22.622383][ T294] bridge_slave_1: entered promiscuous mode [ 22.639105][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.646160][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.653263][ T293] bridge_slave_0: entered allmulticast mode [ 22.659525][ T293] bridge_slave_0: entered promiscuous mode [ 22.665929][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.672998][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.680171][ T293] bridge_slave_1: entered allmulticast mode [ 22.686400][ T293] bridge_slave_1: entered promiscuous mode [ 22.737399][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.744513][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.751629][ T296] bridge_slave_0: entered allmulticast mode [ 22.757847][ T296] bridge_slave_0: entered promiscuous mode [ 22.776546][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.783694][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.790837][ T296] bridge_slave_1: entered allmulticast mode [ 22.797024][ T296] bridge_slave_1: entered promiscuous mode [ 22.803197][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.810252][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.817305][ T295] bridge_slave_0: entered allmulticast mode [ 22.823654][ T295] bridge_slave_0: entered promiscuous mode [ 22.832287][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.839414][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.846514][ T295] bridge_slave_1: entered allmulticast mode [ 22.852903][ T295] bridge_slave_1: entered promiscuous mode [ 22.982531][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.989641][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.996916][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.003963][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.024318][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.031403][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.038732][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.045773][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.080507][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.087574][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.094890][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.102020][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.124235][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.131349][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.138649][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.145680][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.166780][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.174772][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.182494][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.190489][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.197840][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.205359][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.212673][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.220194][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.234261][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.241351][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.249043][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.256086][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.264686][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.271752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.294690][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.301788][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.309502][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.316620][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.324420][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.331585][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.373548][ T294] veth0_vlan: entered promiscuous mode [ 23.381728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.388803][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.401077][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.408171][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.422184][ T294] veth1_macvtap: entered promiscuous mode [ 23.463171][ T296] veth0_vlan: entered promiscuous mode [ 23.470419][ T293] veth0_vlan: entered promiscuous mode [ 23.477732][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.498050][ T296] veth1_macvtap: entered promiscuous mode [ 23.509930][ T293] veth1_macvtap: entered promiscuous mode [ 23.534260][ T295] veth0_vlan: entered promiscuous mode [ 23.556842][ T295] veth1_macvtap: entered promiscuous mode [ 23.557682][ T315] capability: warning: `syz.1.5' uses deprecated v2 capabilities in a way that may be insecure [ 23.579974][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.656771][ T319] syzkaller1: entered promiscuous mode [ 23.662365][ T319] syzkaller1: entered allmulticast mode [ 23.988212][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.003948][ T329] Zero length message leads to an empty skb [ 24.020623][ T337] /dev/md1: Can't lookup blockdev [ 24.149606][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 24.165429][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 24.183855][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 24.193927][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.202965][ T9] usb 1-1: Product: syz [ 24.207946][ T9] usb 1-1: Manufacturer: syz [ 24.215026][ T9] usb 1-1: SerialNumber: syz [ 24.237623][ T9] usb 1-1: config 0 descriptor?? [ 24.243729][ T324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.255743][ T324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.477371][ T321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.496471][ T321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 24.655684][ T349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 24.679827][ T349] SELinux: Context . is not valid (left unmapped). [ 24.884308][ T371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 24.893481][ T371] capability: warning: `syz.3.16' uses 32-bit capabilities (legacy support in use) [ 24.975416][ T374] netlink: 80 bytes leftover after parsing attributes in process `syz.3.16'. [ 25.005936][ T9] Error reading MAC address [ 25.019014][ T9] usb 1-1: USB disconnect, device number 2 [ 25.204416][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 25.250841][ T384] netlink: 'syz.3.20': attribute type 16 has an invalid length. [ 25.259211][ T384] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.20'. [ 25.269486][ T384] rust_binder: 383:384 got reply transaction with no transaction stack [ 25.278026][ T384] rust_binder: 383:384 transaction reply to 0:0 failed EINVAL, code 2 size 104-24 line thread.rs:1556 [ 25.289592][ T384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.338251][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.468273][ T311] usb 2-1: device descriptor read/64, error -71 [ 25.544051][ T394] veth1_to_bond: entered allmulticast mode [ 25.550280][ T393] veth1_to_bond: left allmulticast mode [ 25.588420][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.718266][ T311] usb 2-1: device descriptor read/64, error -71 [ 25.735030][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 25.748198][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 25.754856][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.767998][ T9] usb 4-1: config 3 interface 1 has no altsetting 0 [ 25.780206][ T9] usb 4-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 25.787579][ T427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.789623][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.799485][ T427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.806164][ T9] usb 4-1: SerialNumber: syz [ 25.978207][ T311] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 26.022079][ T9] usb 4-1: selecting invalid altsetting 0 [ 26.028207][ T317] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.028254][ T9] rndis_host 4-1:3.0: probe with driver rndis_host failed with error -22 [ 26.045817][ T9] usb 4-1: USB disconnect, device number 2 [ 26.108222][ T311] usb 2-1: device descriptor read/64, error -71 [ 26.178201][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 26.184501][ T317] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 26.192757][ T317] usb 3-1: config 0 has no interface number 0 [ 26.200317][ T317] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 26.209516][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.217603][ T317] usb 3-1: Product: syz [ 26.221817][ T317] usb 3-1: Manufacturer: syz [ 26.226416][ T317] usb 3-1: SerialNumber: syz [ 26.231820][ T317] usb 3-1: config 0 descriptor?? [ 26.237563][ T317] smsc95xx v2.0.0 [ 26.248216][ T347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.348226][ T311] usb 2-1: device descriptor read/64, error -71 [ 26.398239][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 26.404480][ T347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.414746][ T347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.425257][ T347] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.434345][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.442365][ T347] usb 1-1: Product: syz [ 26.446531][ T347] usb 1-1: Manufacturer: syz [ 26.451444][ T347] usb 1-1: SerialNumber: syz [ 26.458585][ T311] usb usb2-port1: attempt power cycle [ 26.562343][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 26.562369][ T36] audit: type=1400 audit(1793828959.250:167): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 26.668227][ T36] audit: type=1400 audit(1793828959.350:168): avc: denied { map } for pid=434 comm="syz.0.33" path="socket:[5314]" dev="sockfs" ino=5314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.702315][ T448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 26.745550][ T36] audit: type=1400 audit(1793828959.430:169): avc: denied { create } for pid=449 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.765002][ T36] audit: type=1400 audit(1793828959.430:170): avc: denied { ioctl } for pid=449 comm="syz.3.38" path="socket:[5348]" dev="sockfs" ino=5348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.789855][ T36] audit: type=1400 audit(1793828959.430:171): avc: denied { connect } for pid=449 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.812098][ T36] audit: type=1400 audit(1793828959.430:172): avc: denied { write } for pid=449 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.831515][ T311] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 26.840291][ T36] audit: type=1400 audit(1793828959.530:173): avc: denied { accept } for pid=451 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 26.870273][ T311] usb 2-1: device descriptor read/8, error -71 [ 26.904638][ T36] audit: type=1400 audit(1793828959.590:174): avc: denied { ioctl } for pid=451 comm="syz.3.39" path="socket:[5429]" dev="sockfs" ino=5429 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.009417][ T311] usb 2-1: device descriptor read/8, error -71 [ 27.168378][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.258224][ T311] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 27.279268][ T311] usb 2-1: device descriptor read/8, error -71 [ 27.319602][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.327906][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 27.336660][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.347019][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.358633][ T45] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 27.367928][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.376158][ T45] usb 4-1: Product: syz [ 27.380664][ T45] usb 4-1: Manufacturer: syz [ 27.385323][ T45] usb 4-1: SerialNumber: syz [ 27.409469][ T311] usb 2-1: device descriptor read/8, error -71 [ 27.518319][ T311] usb usb2-port1: unable to enumerate USB device [ 28.116188][ T36] audit: type=1400 audit(1793828960.800:175): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.128512][ T459] FAULT_INJECTION: forcing a failure. [ 28.128512][ T459] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.149364][ T459] CPU: 0 UID: 0 PID: 459 Comm: syz.1.40 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 28.149393][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 28.149403][ T459] Call Trace: [ 28.149410][ T459] [ 28.149418][ T459] __dump_stack+0x21/0x30 [ 28.149442][ T459] dump_stack_lvl+0x140/0x1c0 [ 28.149465][ T459] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.149483][ T459] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 28.149501][ T459] dump_stack+0x19/0x20 [ 28.149511][ T459] should_fail_ex+0x3c2/0x510 [ 28.149528][ T459] should_fail_alloc_page+0xec/0x110 [ 28.149541][ T459] __alloc_pages_noprof+0x1c0/0x7e0 [ 28.149561][ T459] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.149583][ T459] ? kasan_save_alloc_info+0x3a/0x50 [ 28.149607][ T459] ? __kasan_kmalloc+0x96/0xb0 [ 28.149640][ T459] ? __kmalloc_noprof+0x261/0x510 [ 28.149658][ T459] blk_rq_map_user_iov+0xfd5/0x1c50 [ 28.149671][ T459] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 28.149684][ T459] ? __asan_memset+0x39/0x50 [ 28.149698][ T459] ? import_ubuf+0x112/0x1f0 [ 28.149720][ T459] blk_rq_map_user_io+0x2af/0x440 [ 28.149741][ T459] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 28.149762][ T459] ? cred_has_capability+0x296/0x3a0 [ 28.149791][ T459] ? selinux_perf_event_alloc+0x110/0x110 [ 28.149818][ T459] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 28.149834][ T459] ? selinux_capable+0x38/0x50 [ 28.149847][ T459] ? bpf_lsm_capable+0xd/0x20 [ 28.149863][ T459] ? security_capable+0x44/0x130 [ 28.149883][ T459] ? capable+0x8e/0xf0 [ 28.149902][ T459] sg_io+0x523/0x8a0 [ 28.149924][ T459] scsi_ioctl+0x13a8/0x1f90 [ 28.149946][ T459] ? __cfi_scsi_ioctl+0x10/0x10 [ 28.149967][ T459] ? _parse_integer+0x2e/0x40 [ 28.149983][ T459] ? __asan_set_shadow_00+0x12/0x20 [ 28.149996][ T459] ? blkdev_common_ioctl+0x11e7/0x2740 [ 28.150006][ T459] ? avc_has_perm_noaudit+0x26b/0x360 [ 28.150024][ T459] ? __asan_memcpy+0x5a/0x80 [ 28.150056][ T459] ? avc_has_perm_noaudit+0x289/0x360 [ 28.150078][ T459] ? selinux_perf_event_alloc+0x110/0x110 [ 28.150104][ T459] ? _raw_spin_lock_irq+0x93/0x120 [ 28.150117][ T459] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 28.150131][ T459] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 28.150145][ T459] ? selinux_capable+0x38/0x50 [ 28.150157][ T459] ? bpf_lsm_capable+0xd/0x20 [ 28.150176][ T459] ? security_capable+0x44/0x130 [ 28.150195][ T459] sd_ioctl+0x14a/0x190 [ 28.150219][ T459] ? __cfi_sd_ioctl+0x10/0x10 [ 28.150242][ T459] blkdev_ioctl+0x54b/0x690 [ 28.150264][ T459] ? __cfi_blkdev_ioctl+0x10/0x10 [ 28.150279][ T459] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.150291][ T459] ? security_file_ioctl+0x3e/0x110 [ 28.150305][ T459] ? __cfi_blkdev_ioctl+0x10/0x10 [ 28.150325][ T459] __se_sys_ioctl+0x123/0x1b0 [ 28.150344][ T459] __x64_sys_ioctl+0x7f/0xa0 [ 28.150364][ T459] x64_sys_call+0x1878/0x2ee0 [ 28.150384][ T459] do_syscall_64+0x57/0xf0 [ 28.150403][ T459] ? clear_bhb_loop+0x50/0xa0 [ 28.150419][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.150433][ T459] RIP: 0033:0x7fbfbe79fb19 [ 28.150445][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.150454][ T459] RSP: 002b:00007fbfbf66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.150470][ T459] RAX: ffffffffffffffda RBX: 00007fbfbea25fa0 RCX: 00007fbfbe79fb19 [ 28.150485][ T459] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 28.150497][ T459] RBP: 00007fbfbf66c090 R08: 0000000000000000 R09: 0000000000000000 [ 28.150510][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 28.150522][ T459] R13: 00007fbfbea26038 R14: 00007fbfbea25fa0 R15: 00007ffc51ad31b8 [ 28.150538][ T459] [ 28.178588][ T36] audit: type=1400 audit(1793828960.850:176): avc: denied { connect } for pid=462 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.699092][ T482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 28.787486][ T317] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 28.797919][ T317] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 28.806178][ T486] FAULT_INJECTION: forcing a failure. [ 28.806178][ T486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 28.808652][ T317] usb 3-1: USB disconnect, device number 2 [ 28.819521][ T486] CPU: 0 UID: 0 PID: 486 Comm: syz.2.49 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 28.819548][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 28.819559][ T486] Call Trace: [ 28.819566][ T486] [ 28.819573][ T486] __dump_stack+0x21/0x30 [ 28.819600][ T486] dump_stack_lvl+0x140/0x1c0 [ 28.819617][ T486] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.819634][ T486] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 28.819658][ T486] dump_stack+0x19/0x20 [ 28.819673][ T486] should_fail_ex+0x3c2/0x510 [ 28.819699][ T486] should_fail_alloc_page+0xec/0x110 [ 28.819719][ T486] __alloc_pages_noprof+0x1c0/0x7e0 [ 28.819740][ T486] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.819761][ T486] ? kasan_save_alloc_info+0x3a/0x50 [ 28.819784][ T486] ? __kasan_kmalloc+0x96/0xb0 [ 28.819803][ T486] ? __kmalloc_noprof+0x261/0x510 [ 28.819829][ T486] blk_rq_map_user_iov+0xfd5/0x1c50 [ 28.819851][ T486] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 28.819872][ T486] ? __asan_memset+0x39/0x50 [ 28.819896][ T486] ? import_ubuf+0x112/0x1f0 [ 28.819918][ T486] blk_rq_map_user_io+0x2af/0x440 [ 28.819938][ T486] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 28.819956][ T486] ? cred_has_capability+0x296/0x3a0 [ 28.819982][ T486] ? selinux_perf_event_alloc+0x110/0x110 [ 28.820007][ T486] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 28.820031][ T486] ? selinux_capable+0x38/0x50 [ 28.820051][ T486] ? bpf_lsm_capable+0xd/0x20 [ 28.820073][ T486] ? security_capable+0x44/0x130 [ 28.820091][ T486] ? capable+0x8e/0xf0 [ 28.820110][ T486] sg_io+0x523/0x8a0 [ 28.820131][ T486] scsi_ioctl+0x13a8/0x1f90 [ 28.820151][ T486] ? __cfi_scsi_ioctl+0x10/0x10 [ 28.820170][ T486] ? _parse_integer+0x2e/0x40 [ 28.820195][ T486] ? __asan_set_shadow_00+0x12/0x20 [ 28.820216][ T486] ? blkdev_common_ioctl+0x11e7/0x2740 [ 28.820233][ T486] ? avc_has_perm_noaudit+0x26b/0x360 [ 28.820252][ T486] ? __asan_memcpy+0x5a/0x80 [ 28.820276][ T486] ? avc_has_perm_noaudit+0x289/0x360 [ 28.820296][ T486] ? selinux_perf_event_alloc+0x110/0x110 [ 28.820321][ T486] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 28.820344][ T486] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 28.820367][ T486] ? selinux_capable+0x38/0x50 [ 28.820386][ T486] ? bpf_lsm_capable+0xd/0x20 [ 28.820414][ T486] ? security_capable+0x44/0x130 [ 28.820433][ T486] sd_ioctl+0x14a/0x190 [ 28.820455][ T486] ? __cfi_sd_ioctl+0x10/0x10 [ 28.820477][ T486] blkdev_ioctl+0x54b/0x690 [ 28.820502][ T486] ? __cfi_blkdev_ioctl+0x10/0x10 [ 28.820539][ T486] ? bpf_lsm_file_ioctl+0xd/0x20 [ 28.820562][ T486] ? security_file_ioctl+0x3e/0x110 [ 28.820586][ T486] ? __cfi_blkdev_ioctl+0x10/0x10 [ 28.820610][ T486] __se_sys_ioctl+0x123/0x1b0 [ 28.820629][ T486] __x64_sys_ioctl+0x7f/0xa0 [ 28.820647][ T486] x64_sys_call+0x1878/0x2ee0 [ 28.820666][ T486] do_syscall_64+0x57/0xf0 [ 28.820684][ T486] ? clear_bhb_loop+0x50/0xa0 [ 28.820708][ T486] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.820731][ T486] RIP: 0033:0x7f2e20d9fb19 [ 28.820747][ T486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.820761][ T486] RSP: 002b:00007f2e21d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.820782][ T486] RAX: ffffffffffffffda RBX: 00007f2e21025fa0 RCX: 00007f2e20d9fb19 [ 28.820795][ T486] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 28.820807][ T486] RBP: 00007f2e21d21090 R08: 0000000000000000 R09: 0000000000000000 [ 28.820819][ T486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 28.820830][ T486] R13: 00007f2e21026038 R14: 00007f2e21025fa0 R15: 00007ffe775d4c48 [ 28.820845][ T486] [ 28.920908][ T347] usb 1-1: 0:2 : does not exist [ 28.962048][ T494] rust_binder: 493:494 no such ref 2 [ 28.968228][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.986075][ T496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 29.000403][ T347] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 29.252444][ T347] usb 1-1: USB disconnect, device number 3 [ 29.253376][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.271926][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 29.276245][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.296647][ T512] FAULT_INJECTION: forcing a failure. [ 29.296647][ T512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.309340][ T311] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 29.311049][ T512] CPU: 1 UID: 0 PID: 512 Comm: syz.0.58 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 29.311075][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.311086][ T512] Call Trace: [ 29.311093][ T512] [ 29.311100][ T512] __dump_stack+0x21/0x30 [ 29.311122][ T512] dump_stack_lvl+0x140/0x1c0 [ 29.311139][ T512] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.311156][ T512] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 29.311179][ T512] dump_stack+0x19/0x20 [ 29.311194][ T512] should_fail_ex+0x3c2/0x510 [ 29.311220][ T512] should_fail_alloc_page+0xec/0x110 [ 29.311240][ T512] __alloc_pages_noprof+0x1c0/0x7e0 [ 29.311262][ T512] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.311283][ T512] ? kasan_save_alloc_info+0x3a/0x50 [ 29.311305][ T512] ? __kasan_kmalloc+0x96/0xb0 [ 29.311324][ T512] ? __kmalloc_noprof+0x261/0x510 [ 29.311350][ T512] blk_rq_map_user_iov+0xfd5/0x1c50 [ 29.311372][ T512] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 29.311400][ T512] ? __asan_memset+0x39/0x50 [ 29.311423][ T512] ? import_ubuf+0x112/0x1f0 [ 29.311453][ T512] blk_rq_map_user_io+0x2af/0x440 [ 29.311473][ T512] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 29.311491][ T512] ? cred_has_capability+0x296/0x3a0 [ 29.311517][ T512] ? selinux_perf_event_alloc+0x110/0x110 [ 29.311542][ T512] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 29.311566][ T512] ? selinux_capable+0x38/0x50 [ 29.311587][ T512] ? bpf_lsm_capable+0xd/0x20 [ 29.311609][ T512] ? security_capable+0x44/0x130 [ 29.311627][ T512] ? capable+0x8e/0xf0 [ 29.311646][ T512] sg_io+0x523/0x8a0 [ 29.311667][ T512] scsi_ioctl+0x13a8/0x1f90 [ 29.311687][ T512] ? __cfi_scsi_ioctl+0x10/0x10 [ 29.311706][ T512] ? _parse_integer+0x2e/0x40 [ 29.311730][ T512] ? __asan_set_shadow_00+0x12/0x20 [ 29.311752][ T512] ? blkdev_common_ioctl+0x11e7/0x2740 [ 29.311769][ T512] ? avc_has_perm_noaudit+0x26b/0x360 [ 29.311788][ T512] ? __asan_memcpy+0x5a/0x80 [ 29.311811][ T512] ? avc_has_perm_noaudit+0x289/0x360 [ 29.311831][ T512] ? selinux_perf_event_alloc+0x110/0x110 [ 29.311856][ T512] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 29.311879][ T512] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 29.311901][ T512] ? selinux_capable+0x38/0x50 [ 29.311928][ T512] ? bpf_lsm_capable+0xd/0x20 [ 29.311953][ T512] ? security_capable+0x44/0x130 [ 29.311971][ T512] sd_ioctl+0x14a/0x190 [ 29.311994][ T512] ? __cfi_sd_ioctl+0x10/0x10 [ 29.312015][ T512] blkdev_ioctl+0x54b/0x690 [ 29.312040][ T512] ? __cfi_blkdev_ioctl+0x10/0x10 [ 29.312065][ T512] ? bpf_lsm_file_ioctl+0xd/0x20 [ 29.312083][ T512] ? security_file_ioctl+0x3e/0x110 [ 29.312107][ T512] ? __cfi_blkdev_ioctl+0x10/0x10 [ 29.312131][ T512] __se_sys_ioctl+0x123/0x1b0 [ 29.312151][ T512] __x64_sys_ioctl+0x7f/0xa0 [ 29.312168][ T512] x64_sys_call+0x1878/0x2ee0 [ 29.312187][ T512] do_syscall_64+0x57/0xf0 [ 29.312205][ T512] ? clear_bhb_loop+0x50/0xa0 [ 29.312228][ T512] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.312257][ T512] RIP: 0033:0x7f9d38b9fb19 [ 29.312274][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.312287][ T512] RSP: 002b:00007f9d39a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.312308][ T512] RAX: ffffffffffffffda RBX: 00007f9d38e25fa0 RCX: 00007f9d38b9fb19 [ 29.312322][ T512] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 29.312334][ T512] RBP: 00007f9d39a72090 R08: 0000000000000000 R09: 0000000000000000 [ 29.312346][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 29.312357][ T512] R13: 00007f9d38e26038 R14: 00007f9d38e25fa0 R15: 00007ffdffb95558 [ 29.312372][ T512] [ 29.327816][ T514] ======================================================= [ 29.327816][ T514] WARNING: The mand mount option has been deprecated and [ 29.327816][ T514] and is ignored by this kernel. Remove the mand [ 29.327816][ T514] option from the mount to silence this warning. [ 29.327816][ T514] ======================================================= [ 29.333270][ T311] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.352588][ T514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 29.354139][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.367413][ T514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 29.369394][ T311] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 29.374117][ T45] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 29.378198][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.385189][ T45] usb 4-1: USB disconnect, device number 3 [ 29.403633][ T311] usb 2-1: config 0 descriptor?? [ 29.482984][ T457] udevd[457]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.890147][ T484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.899806][ T484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.909077][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 29.915054][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.925127][ T311] usb 2-1: USB disconnect, device number 6 [ 29.964628][ T54] Bluetooth: hci0: sending frame failed (-49) [ 29.970913][ T520] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 30.186012][ T546] FAULT_INJECTION: forcing a failure. [ 30.186012][ T546] name failslab, interval 1, probability 0, space 0, times 1 [ 30.217514][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 30.218192][ T546] CPU: 0 UID: 0 PID: 546 Comm: syz.3.65 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 30.218222][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.218234][ T546] Call Trace: [ 30.218241][ T546] [ 30.218248][ T546] __dump_stack+0x21/0x30 [ 30.218271][ T546] dump_stack_lvl+0x140/0x1c0 [ 30.218290][ T546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.218308][ T546] ? vfs_write+0xbd2/0xfd0 [ 30.218338][ T546] dump_stack+0x19/0x20 [ 30.218355][ T546] should_fail_ex+0x3c2/0x510 [ 30.218382][ T546] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 30.218411][ T546] should_failslab+0xac/0x100 [ 30.218437][ T546] __kmalloc_noprof+0x69/0x510 [ 30.218462][ T546] ? __se_sys_futex+0x13c/0x320 [ 30.218483][ T546] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 30.218508][ T546] ? strnlen_user+0xaa/0x180 [ 30.218526][ T546] __se_sys_memfd_create+0x2cb/0x8f0 [ 30.218551][ T546] ? __x64_sys_memfd_create+0x80/0x80 [ 30.218577][ T546] ? __kasan_check_write+0x18/0x20 [ 30.218603][ T546] __x64_sys_memfd_create+0x5f/0x80 [ 30.218628][ T546] x64_sys_call+0x29f8/0x2ee0 [ 30.218647][ T546] do_syscall_64+0x57/0xf0 [ 30.218666][ T546] ? clear_bhb_loop+0x50/0xa0 [ 30.218690][ T546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.218713][ T546] RIP: 0033:0x7f21d479fb19 [ 30.218730][ T546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.218745][ T546] RSP: 002b:00007f21d56f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 30.218766][ T546] RAX: ffffffffffffffda RBX: 00007f21d4a26090 RCX: 00007f21d479fb19 [ 30.218780][ T546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000780 [ 30.218793][ T546] RBP: 00007f21d4837b70 R08: 0000000000000000 R09: 0000000000000000 [ 30.218805][ T546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.218817][ T546] R13: 00007f21d4a26128 R14: 00007f21d4a26090 R15: 00007ffd36c47998 [ 30.218832][ T546] [ 30.428798][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.579243][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.590270][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.600124][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 30.617874][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.633251][ T45] usb 3-1: config 0 descriptor?? [ 30.698827][ T559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 30.978191][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.045329][ T45] wacom 0003:056A:0331.0001: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 31.129985][ T31] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 31.145073][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.161408][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.176694][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.187525][ T31] usb 2-1: SerialNumber: syz [ 31.242971][ T311] usb 3-1: USB disconnect, device number 3 [ 31.397634][ T563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 31.409019][ T563] veth2: entered allmulticast mode [ 31.451635][ T31] usb 2-1: 0:2 : does not exist [ 31.456576][ T31] usb 2-1: unit 5: unexpected type 0x0c [ 31.464096][ T31] usb 2-1: USB disconnect, device number 7 [ 31.487117][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.586649][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 31.753336][ T591] netlink: 72 bytes leftover after parsing attributes in process `syz.2.80'. [ 31.763276][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 31.763293][ T36] audit: type=1400 audit(1793828964.450:206): avc: denied { create } for pid=590 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.788717][ T36] audit: type=1400 audit(1793828964.450:207): avc: denied { setopt } for pid=590 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.808178][ T36] audit: type=1400 audit(1793828964.450:208): avc: denied { bind } for pid=590 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.868370][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 31.933923][ T36] audit: type=1400 audit(1793828964.620:209): avc: denied { bind } for pid=600 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.954392][ T36] audit: type=1400 audit(1793828964.620:210): avc: denied { create } for pid=600 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 31.974888][ T36] audit: type=1400 audit(1793828964.620:211): avc: denied { create } for pid=600 comm="syz.2.84" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.001540][ T36] audit: type=1400 audit(1793828964.620:212): avc: denied { write } for pid=600 comm="syz.2.84" name="file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.023939][ T36] audit: type=1400 audit(1793828964.620:213): avc: denied { open } for pid=600 comm="syz.2.84" path="/17/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.048960][ T36] audit: type=1400 audit(1793828964.620:214): avc: denied { ioctl } for pid=600 comm="syz.2.84" path="/17/file0" dev="tmpfs" ino=112 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.072842][ T36] audit: type=1400 audit(1793828964.620:215): avc: denied { setopt } for pid=600 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.073176][ T610] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 32.093833][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.108549][ T45] usb 1-1: can't read configurations, error -22 [ 32.228212][ T347] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.248193][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 32.305641][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.312776][ T612] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.320067][ T612] bridge_slave_0: entered allmulticast mode [ 32.326284][ T612] bridge_slave_0: entered promiscuous mode [ 32.333119][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.340339][ T612] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.347614][ T612] bridge_slave_1: entered allmulticast mode [ 32.353988][ T612] bridge_slave_1: entered promiscuous mode [ 32.392035][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.395526][ T612] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.406788][ T612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.409239][ T347] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 32.414110][ T612] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.422012][ T347] usb 3-1: can't read configurations, error -71 [ 32.428638][ T612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.443477][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.443657][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.458670][ T45] usb 1-1: can't read configurations, error -22 [ 32.459063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.465069][ T45] usb usb1-port1: attempt power cycle [ 32.493183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.500353][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.509883][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.516961][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.543427][ T612] veth0_vlan: entered promiscuous mode [ 32.554098][ T612] veth1_macvtap: entered promiscuous mode [ 32.808273][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 32.829892][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.838233][ T45] usb 1-1: can't read configurations, error -22 [ 32.925928][ T624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.93'. [ 32.968259][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 32.989941][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.998035][ T45] usb 1-1: can't read configurations, error -22 [ 33.004652][ T45] usb usb1-port1: unable to enumerate USB device [ 33.324565][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 33.428641][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.578202][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 33.589275][ T45] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 33.597529][ T45] usb 5-1: config 0 has no interface number 0 [ 33.603677][ T45] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 33.613769][ T45] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 33.623750][ T45] usb 5-1: config 0 interface 41 has no altsetting 0 [ 33.632019][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 33.641424][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.649600][ T45] usb 5-1: Product: syz [ 33.653770][ T45] usb 5-1: Manufacturer: syz [ 33.658482][ T45] usb 5-1: SerialNumber: syz [ 33.663769][ T45] usb 5-1: config 0 descriptor?? [ 33.669077][ T638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 33.676881][ T638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 33.887711][ T638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 33.895642][ T638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 34.202174][ T658] sd 0:0:1:0: PR command failed: 1026 [ 34.207767][ T658] sd 0:0:1:0: Sense Key : 0x5 [current] [ 34.213592][ T658] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 34.533081][ T45] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 0e:02:1e:be:45:5a [ 34.545879][ T45] usb 5-1: USB disconnect, device number 2 [ 34.552649][ T45] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 34.948246][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.000857][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 35.029013][ T456] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.098258][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 35.104497][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.115643][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.125411][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.139085][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.148696][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.158487][ T31] usb 2-1: config 0 descriptor?? [ 35.168814][ T456] usb 1-1: device descriptor read/64, error -71 [ 35.242401][ T715] process 'syz.2.115' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 35.282857][ T721] FAULT_INJECTION: forcing a failure. [ 35.282857][ T721] name failslab, interval 1, probability 0, space 0, times 0 [ 35.295737][ T721] CPU: 0 UID: 0 PID: 721 Comm: syz.2.116 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 35.295773][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.295786][ T721] Call Trace: [ 35.295792][ T721] [ 35.295801][ T721] __dump_stack+0x21/0x30 [ 35.295826][ T721] dump_stack_lvl+0x140/0x1c0 [ 35.295845][ T721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.295866][ T721] dump_stack+0x19/0x20 [ 35.295884][ T721] should_fail_ex+0x3c2/0x510 [ 35.295912][ T721] should_failslab+0xac/0x100 [ 35.295933][ T721] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 35.295964][ T721] ? get_random_u32+0x2ef/0x4e0 [ 35.295987][ T721] ? __d_alloc+0x42/0x8c0 [ 35.296014][ T721] __d_alloc+0x42/0x8c0 [ 35.296040][ T721] ? __cfi_inode_set_ctime_current+0x10/0x10 [ 35.296067][ T721] d_alloc_pseudo+0x23/0xc0 [ 35.296094][ T721] alloc_file_pseudo+0xde/0x1f0 [ 35.296118][ T721] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 35.296140][ T721] ? shmem_get_inode+0x81c/0xc10 [ 35.296162][ T721] ? __kasan_check_write+0x18/0x20 [ 35.296189][ T721] ? clear_nlink+0x8e/0xf0 [ 35.296210][ T721] __shmem_file_setup+0x242/0x2c0 [ 35.296228][ T721] shmem_zero_setup+0x90/0x130 [ 35.296246][ T721] mmap_region+0x1659/0x1d10 [ 35.296274][ T721] ? __cfi_mmap_region+0x10/0x10 [ 35.296301][ T721] ? avc_has_perm_noaudit+0x289/0x360 [ 35.296323][ T721] ? avc_has_perm+0x155/0x240 [ 35.296342][ T721] ? __kasan_check_read+0x15/0x20 [ 35.296368][ T721] ? __get_unmapped_area+0x406/0x470 [ 35.296392][ T721] ? futex_wait+0x2b8/0x7c0 [ 35.296417][ T721] do_mmap+0xa47/0x1370 [ 35.296441][ T721] ? __cfi_selinux_mmap_file+0x10/0x10 [ 35.296480][ T721] ? __cfi_do_mmap+0x10/0x10 [ 35.296505][ T721] ? __kasan_check_write+0x18/0x20 [ 35.296531][ T721] ? down_write_killable+0xee/0x2d0 [ 35.296558][ T721] ? __cfi_down_write_killable+0x10/0x10 [ 35.296586][ T721] ? do_futex+0x32a/0x510 [ 35.296609][ T721] vm_mmap_pgoff+0x367/0x4b0 [ 35.296638][ T721] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 35.296668][ T721] ? __x64_sys_futex+0x110/0x110 [ 35.296690][ T721] ksys_mmap_pgoff+0xfa/0x1e0 [ 35.296718][ T721] ? __kasan_check_write+0x18/0x20 [ 35.296748][ T721] __x64_sys_mmap+0x121/0x140 [ 35.296772][ T721] x64_sys_call+0x13bf/0x2ee0 [ 35.296793][ T721] do_syscall_64+0x57/0xf0 [ 35.296814][ T721] ? clear_bhb_loop+0x50/0xa0 [ 35.296838][ T721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.296864][ T721] RIP: 0033:0x7f2e20d9fb19 [ 35.296882][ T721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.296898][ T721] RSP: 002b:00007f2e21d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 35.296922][ T721] RAX: ffffffffffffffda RBX: 00007f2e21025fa0 RCX: 00007f2e20d9fb19 [ 35.296937][ T721] RDX: 000000000200000e RSI: 0000000000c00000 RDI: 0000000000000000 [ 35.296951][ T721] RBP: 00007f2e20e37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 35.296965][ T721] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 35.296978][ T721] R13: 00007f2e21026038 R14: 00007f2e21025fa0 R15: 00007ffe775d4c48 [ 35.296996][ T721] [ 35.625590][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 35.668195][ T456] usb 1-1: device descriptor read/64, error -71 [ 35.863178][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 35.878267][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.898118][ T31] usb 2-1: USB disconnect, device number 8 [ 35.918208][ T456] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.058224][ T456] usb 1-1: device descriptor read/64, error -71 [ 36.075016][ T741] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.082271][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.089400][ T741] bridge_slave_0: entered allmulticast mode [ 36.095832][ T741] bridge_slave_0: entered promiscuous mode [ 36.102920][ T741] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.110035][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.117115][ T741] bridge_slave_1: entered allmulticast mode [ 36.123688][ T741] bridge_slave_1: entered promiscuous mode [ 36.129868][ T310] bridge_slave_1: left allmulticast mode [ 36.135668][ T310] bridge_slave_1: left promiscuous mode [ 36.141375][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.149098][ T310] bridge_slave_0: left allmulticast mode [ 36.154759][ T310] bridge_slave_0: left promiscuous mode [ 36.160550][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.251090][ T310] veth1_macvtap: left promiscuous mode [ 36.256614][ T310] veth0_vlan: left promiscuous mode [ 36.305830][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.312943][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.318204][ T456] usb 1-1: device descriptor read/64, error -71 [ 36.322879][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.333696][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.362275][ T741] veth0_vlan: entered promiscuous mode [ 36.377422][ T741] veth1_macvtap: entered promiscuous mode [ 36.380225][ T746] FAULT_INJECTION: forcing a failure. [ 36.380225][ T746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 36.398594][ T746] CPU: 0 UID: 0 PID: 746 Comm: syz.1.125 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 36.398627][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.398639][ T746] Call Trace: [ 36.398645][ T746] [ 36.398652][ T746] __dump_stack+0x21/0x30 [ 36.398676][ T746] dump_stack_lvl+0x140/0x1c0 [ 36.398693][ T746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.398712][ T746] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 36.398738][ T746] dump_stack+0x19/0x20 [ 36.398755][ T746] should_fail_ex+0x3c2/0x510 [ 36.398783][ T746] should_fail_alloc_page+0xec/0x110 [ 36.398804][ T746] __alloc_pages_noprof+0x1c0/0x7e0 [ 36.398828][ T746] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 36.398851][ T746] ? kasan_save_alloc_info+0x3a/0x50 [ 36.398877][ T746] ? __kasan_kmalloc+0x96/0xb0 [ 36.398896][ T746] ? __kmalloc_noprof+0x261/0x510 [ 36.398925][ T746] blk_rq_map_user_iov+0xfd5/0x1c50 [ 36.398947][ T746] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 36.398969][ T746] ? __asan_memset+0x39/0x50 [ 36.398993][ T746] ? import_ubuf+0x112/0x1f0 [ 36.399016][ T746] blk_rq_map_user_io+0x2af/0x440 [ 36.399037][ T746] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 36.399057][ T746] ? cred_has_capability+0x296/0x3a0 [ 36.399084][ T746] ? selinux_perf_event_alloc+0x110/0x110 [ 36.399112][ T746] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 36.399139][ T746] ? selinux_capable+0x38/0x50 [ 36.399160][ T746] ? bpf_lsm_capable+0xd/0x20 [ 36.399183][ T746] ? security_capable+0x44/0x130 [ 36.399203][ T746] ? capable+0x8e/0xf0 [ 36.399223][ T746] sg_io+0x523/0x8a0 [ 36.399246][ T746] scsi_ioctl+0x13a8/0x1f90 [ 36.399277][ T746] ? __cfi_scsi_ioctl+0x10/0x10 [ 36.399298][ T746] ? _parse_integer+0x2e/0x40 [ 36.399325][ T746] ? __asan_set_shadow_00+0x12/0x20 [ 36.399348][ T746] ? blkdev_common_ioctl+0x11e7/0x2740 [ 36.399367][ T746] ? avc_has_perm_noaudit+0x26b/0x360 [ 36.399387][ T746] ? __asan_memcpy+0x5a/0x80 [ 36.399414][ T746] ? avc_has_perm_noaudit+0x289/0x360 [ 36.399436][ T746] ? selinux_perf_event_alloc+0x110/0x110 [ 36.399465][ T746] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 36.399489][ T746] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 36.399515][ T746] ? selinux_capable+0x38/0x50 [ 36.399537][ T746] ? bpf_lsm_capable+0xd/0x20 [ 36.399559][ T746] ? security_capable+0x44/0x130 [ 36.399584][ T746] sd_ioctl+0x14a/0x190 [ 36.399608][ T746] ? __cfi_sd_ioctl+0x10/0x10 [ 36.399632][ T746] blkdev_ioctl+0x54b/0x690 [ 36.399659][ T746] ? __cfi_blkdev_ioctl+0x10/0x10 [ 36.399686][ T746] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.399704][ T746] ? security_file_ioctl+0x3e/0x110 [ 36.399729][ T746] ? __cfi_blkdev_ioctl+0x10/0x10 [ 36.399756][ T746] __se_sys_ioctl+0x123/0x1b0 [ 36.399776][ T746] __x64_sys_ioctl+0x7f/0xa0 [ 36.399796][ T746] x64_sys_call+0x1878/0x2ee0 [ 36.399816][ T746] do_syscall_64+0x57/0xf0 [ 36.399835][ T746] ? clear_bhb_loop+0x50/0xa0 [ 36.399860][ T746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.399884][ T746] RIP: 0033:0x7fbfbe79fb19 [ 36.399901][ T746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.399916][ T746] RSP: 002b:00007fbfbf66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.399938][ T746] RAX: ffffffffffffffda RBX: 00007fbfbea25fa0 RCX: 00007fbfbe79fb19 [ 36.399952][ T746] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 36.399966][ T746] RBP: 00007fbfbf66c090 R08: 0000000000000000 R09: 0000000000000000 [ 36.399978][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.399991][ T746] R13: 00007fbfbea26038 R14: 00007fbfbea25fa0 R15: 00007ffc51ad31b8 [ 36.400007][ T746] [ 36.458852][ T456] usb usb1-port1: attempt power cycle [ 36.726425][ T752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 36.823571][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 36.823590][ T36] audit: type=1326 audit(1793828969.510:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 36.830296][ T760] cgroup: Unknown subsys name 'appraise' [ 36.861857][ T36] audit: type=1326 audit(1793828969.550:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 36.871106][ T760] syz.1.130: attempt to access beyond end of device [ 36.871106][ T760] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 36.887457][ T36] audit: type=1326 audit(1793828969.550:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 36.900575][ T760] FAT-fs (loop1): unable to read boot sector [ 36.927128][ T36] audit: type=1326 audit(1793828969.550:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 36.957206][ T36] audit: type=1326 audit(1793828969.550:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 36.986841][ T36] audit: type=1326 audit(1793828969.550:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 37.013071][ T36] audit: type=1326 audit(1793828969.550:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 37.038473][ T36] audit: type=1326 audit(1793828969.550:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 37.064917][ T36] audit: type=1400 audit(1793828969.550:268): avc: denied { mounton } for pid=759 comm="syz.1.130" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 37.088839][ T456] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.096686][ T36] audit: type=1326 audit(1793828969.620:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=756 comm="syz.5.124" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x7ffc0000 [ 37.124147][ T766] kvm: MWAIT instruction emulated as NOP! [ 37.135982][ T771] FAULT_INJECTION: forcing a failure. [ 37.135982][ T771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 37.149503][ T771] CPU: 1 UID: 0 PID: 771 Comm: syz.1.133 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.149534][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.149545][ T771] Call Trace: [ 37.149551][ T771] [ 37.149558][ T771] __dump_stack+0x21/0x30 [ 37.149582][ T771] dump_stack_lvl+0x140/0x1c0 [ 37.149602][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.149624][ T771] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 37.149647][ T771] dump_stack+0x19/0x20 [ 37.149659][ T771] should_fail_ex+0x3c2/0x510 [ 37.149676][ T771] should_fail_alloc_page+0xec/0x110 [ 37.149688][ T771] __alloc_pages_noprof+0x1c0/0x7e0 [ 37.149701][ T771] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.149714][ T771] ? kasan_save_alloc_info+0x3a/0x50 [ 37.149729][ T771] ? __kasan_kmalloc+0x96/0xb0 [ 37.149740][ T771] ? __kmalloc_noprof+0x261/0x510 [ 37.149765][ T771] blk_rq_map_user_iov+0xfd5/0x1c50 [ 37.149779][ T771] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 37.149791][ T771] ? __asan_memset+0x39/0x50 [ 37.149805][ T771] ? import_ubuf+0x112/0x1f0 [ 37.149819][ T771] blk_rq_map_user_io+0x2af/0x440 [ 37.149832][ T771] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 37.149843][ T771] ? cred_has_capability+0x296/0x3a0 [ 37.149859][ T771] ? selinux_perf_event_alloc+0x110/0x110 [ 37.149875][ T771] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 37.149890][ T771] ? selinux_capable+0x38/0x50 [ 37.149903][ T771] ? bpf_lsm_capable+0xd/0x20 [ 37.149917][ T771] ? security_capable+0x44/0x130 [ 37.149928][ T771] ? capable+0x8e/0xf0 [ 37.149940][ T771] sg_io+0x523/0x8a0 [ 37.149953][ T771] scsi_ioctl+0x13a8/0x1f90 [ 37.149966][ T771] ? __cfi_scsi_ioctl+0x10/0x10 [ 37.149978][ T771] ? _parse_integer+0x2e/0x40 [ 37.149993][ T771] ? __asan_set_shadow_00+0x12/0x20 [ 37.150006][ T771] ? blkdev_common_ioctl+0x11e7/0x2740 [ 37.150017][ T771] ? avc_has_perm_noaudit+0x26b/0x360 [ 37.150029][ T771] ? __asan_memcpy+0x5a/0x80 [ 37.150043][ T771] ? avc_has_perm_noaudit+0x289/0x360 [ 37.150056][ T771] ? selinux_perf_event_alloc+0x110/0x110 [ 37.150072][ T771] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 37.150086][ T771] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 37.150100][ T771] ? selinux_capable+0x38/0x50 [ 37.150116][ T771] ? bpf_lsm_capable+0xd/0x20 [ 37.150137][ T771] ? security_capable+0x44/0x130 [ 37.150157][ T771] sd_ioctl+0x14a/0x190 [ 37.150180][ T771] ? __cfi_sd_ioctl+0x10/0x10 [ 37.150202][ T771] blkdev_ioctl+0x54b/0x690 [ 37.150229][ T771] ? __cfi_blkdev_ioctl+0x10/0x10 [ 37.150247][ T771] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.150261][ T771] ? security_file_ioctl+0x3e/0x110 [ 37.150276][ T771] ? __cfi_blkdev_ioctl+0x10/0x10 [ 37.150291][ T771] __se_sys_ioctl+0x123/0x1b0 [ 37.150304][ T771] __x64_sys_ioctl+0x7f/0xa0 [ 37.150315][ T771] x64_sys_call+0x1878/0x2ee0 [ 37.150327][ T771] do_syscall_64+0x57/0xf0 [ 37.150338][ T771] ? clear_bhb_loop+0x50/0xa0 [ 37.150353][ T771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.150367][ T771] RIP: 0033:0x7fbfbe79fb19 [ 37.150378][ T771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.150388][ T771] RSP: 002b:00007fbfbf66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.150403][ T771] RAX: ffffffffffffffda RBX: 00007fbfbea25fa0 RCX: 00007fbfbe79fb19 [ 37.150411][ T771] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 37.150419][ T771] RBP: 00007fbfbf66c090 R08: 0000000000000000 R09: 0000000000000000 [ 37.150427][ T771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.150434][ T771] R13: 00007fbfbea26038 R14: 00007fbfbea25fa0 R15: 00007ffc51ad31b8 [ 37.150443][ T771] [ 37.151334][ T456] usb 1-1: device descriptor read/8, error -71 [ 37.664150][ T456] usb 1-1: device descriptor read/8, error -71 [ 37.719091][ T791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.139'. [ 37.769627][ T800] FAULT_INJECTION: forcing a failure. [ 37.769627][ T800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 37.783103][ T800] CPU: 1 UID: 0 PID: 800 Comm: syz.5.142 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.783136][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.783144][ T800] Call Trace: [ 37.783149][ T800] [ 37.783154][ T800] __dump_stack+0x21/0x30 [ 37.783171][ T800] dump_stack_lvl+0x140/0x1c0 [ 37.783182][ T800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.783193][ T800] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 37.783207][ T800] dump_stack+0x19/0x20 [ 37.783217][ T800] should_fail_ex+0x3c2/0x510 [ 37.783239][ T800] should_fail_alloc_page+0xec/0x110 [ 37.783251][ T800] __alloc_pages_noprof+0x1c0/0x7e0 [ 37.783265][ T800] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.783278][ T800] ? kasan_save_alloc_info+0x3a/0x50 [ 37.783292][ T800] ? __kasan_kmalloc+0x96/0xb0 [ 37.783304][ T800] ? __kmalloc_noprof+0x261/0x510 [ 37.783320][ T800] blk_rq_map_user_iov+0xfd5/0x1c50 [ 37.783333][ T800] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 37.783346][ T800] ? __asan_memset+0x39/0x50 [ 37.783360][ T800] ? import_ubuf+0x112/0x1f0 [ 37.783373][ T800] blk_rq_map_user_io+0x2af/0x440 [ 37.783385][ T800] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 37.783397][ T800] ? cred_has_capability+0x296/0x3a0 [ 37.783413][ T800] ? selinux_perf_event_alloc+0x110/0x110 [ 37.783429][ T800] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 37.783455][ T800] ? selinux_capable+0x38/0x50 [ 37.783468][ T800] ? bpf_lsm_capable+0xd/0x20 [ 37.783481][ T800] ? security_capable+0x44/0x130 [ 37.783493][ T800] ? capable+0x8e/0xf0 [ 37.783509][ T800] sg_io+0x523/0x8a0 [ 37.783527][ T800] scsi_ioctl+0x13a8/0x1f90 [ 37.783542][ T800] ? __cfi_scsi_ioctl+0x10/0x10 [ 37.783554][ T800] ? _parse_integer+0x2e/0x40 [ 37.783569][ T800] ? __asan_set_shadow_00+0x12/0x20 [ 37.783583][ T800] ? blkdev_common_ioctl+0x11e7/0x2740 [ 37.783593][ T800] ? avc_has_perm_noaudit+0x26b/0x360 [ 37.783605][ T800] ? __asan_memcpy+0x5a/0x80 [ 37.783620][ T800] ? avc_has_perm_noaudit+0x289/0x360 [ 37.783632][ T800] ? selinux_perf_event_alloc+0x110/0x110 [ 37.783647][ T800] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 37.783661][ T800] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 37.783675][ T800] ? selinux_capable+0x38/0x50 [ 37.783688][ T800] ? bpf_lsm_capable+0xd/0x20 [ 37.783700][ T800] ? security_capable+0x44/0x130 [ 37.783711][ T800] sd_ioctl+0x14a/0x190 [ 37.783734][ T800] ? __cfi_sd_ioctl+0x10/0x10 [ 37.783747][ T800] blkdev_ioctl+0x54b/0x690 [ 37.783762][ T800] ? __cfi_blkdev_ioctl+0x10/0x10 [ 37.783778][ T800] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.783790][ T800] ? security_file_ioctl+0x3e/0x110 [ 37.783804][ T800] ? __cfi_blkdev_ioctl+0x10/0x10 [ 37.783819][ T800] __se_sys_ioctl+0x123/0x1b0 [ 37.783831][ T800] __x64_sys_ioctl+0x7f/0xa0 [ 37.783843][ T800] x64_sys_call+0x1878/0x2ee0 [ 37.783854][ T800] do_syscall_64+0x57/0xf0 [ 37.783866][ T800] ? clear_bhb_loop+0x50/0xa0 [ 37.783880][ T800] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.783894][ T800] RIP: 0033:0x7faf2699fb19 [ 37.783905][ T800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.783915][ T800] RSP: 002b:00007faf2793c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.783930][ T800] RAX: ffffffffffffffda RBX: 00007faf26c25fa0 RCX: 00007faf2699fb19 [ 37.783939][ T800] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 37.783946][ T800] RBP: 00007faf2793c090 R08: 0000000000000000 R09: 0000000000000000 [ 37.783954][ T800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.783961][ T800] R13: 00007faf26c26038 R14: 00007faf26c25fa0 R15: 00007fffa639b5d8 [ 37.783970][ T800] [ 37.811944][ T802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.238246][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.270621][ T820] syz.5.148 (820): /proc/819/oom_adj is deprecated, please use /proc/819/oom_score_adj instead. [ 38.291206][ T824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.149'. [ 38.404558][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.419737][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 38.429758][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.437762][ T31] usb 2-1: Product: syz [ 38.442218][ T31] usb 2-1: Manufacturer: syz [ 38.446827][ T31] usb 2-1: SerialNumber: syz [ 38.457992][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 38.463983][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 38.658279][ T455] usb 2-1: USB disconnect, device number 9 [ 38.662919][ T812] FAULT_INJECTION: forcing a failure. [ 38.662919][ T812] name failslab, interval 1, probability 0, space 0, times 0 [ 38.676955][ T812] CPU: 1 UID: 0 PID: 812 Comm: syz.1.144 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 38.677002][ T812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.677012][ T812] Call Trace: [ 38.677017][ T812] [ 38.677022][ T812] __dump_stack+0x21/0x30 [ 38.677040][ T812] dump_stack_lvl+0x140/0x1c0 [ 38.677051][ T812] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.677062][ T812] ? kasan_save_alloc_info+0x3a/0x50 [ 38.677079][ T812] ? __kasan_kmalloc+0x96/0xb0 [ 38.677091][ T812] dump_stack+0x19/0x20 [ 38.677102][ T812] should_fail_ex+0x3c2/0x510 [ 38.677120][ T812] should_failslab+0xac/0x100 [ 38.677134][ T812] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 38.677151][ T812] ? rust_binder_new_context+0x3d4/0x680 [ 38.677163][ T812] ? alloc_inode+0xa9/0x270 [ 38.677176][ T812] alloc_inode+0xa9/0x270 [ 38.677188][ T812] new_inode+0x25/0x1e0 [ 38.677200][ T812] binderfs_binder_device_create+0x1af/0xaf0 [ 38.677215][ T812] binderfs_fill_super+0x90b/0xfe0 [ 38.677228][ T812] ? ida_alloc_range+0xa44/0xa80 [ 38.677244][ T812] ? __cfi_binderfs_fill_super+0x10/0x10 [ 38.677259][ T812] ? shrinker_register+0x162/0x220 [ 38.677275][ T812] ? sget_fc+0x97e/0xa70 [ 38.677294][ T812] ? __cfi_set_anon_super_fc+0x10/0x10 [ 38.677310][ T812] get_tree_nodev+0xce/0x170 [ 38.677325][ T812] ? __cfi_binderfs_fill_super+0x10/0x10 [ 38.677339][ T812] binderfs_fs_context_get_tree+0x20/0x30 [ 38.677353][ T812] vfs_get_tree+0xa1/0x290 [ 38.677368][ T812] do_new_mount+0x251/0xb40 [ 38.677388][ T812] ? security_capable+0x44/0x130 [ 38.677401][ T812] path_mount+0x66a/0xff0 [ 38.677416][ T812] ? putname+0x113/0x150 [ 38.677427][ T812] __se_sys_mount+0x2bf/0x480 [ 38.677438][ T812] ? __x64_sys_mount+0xf0/0xf0 [ 38.677448][ T812] ? __kasan_check_write+0x18/0x20 [ 38.677464][ T812] ? fpregs_restore_userregs+0x11c/0x260 [ 38.677479][ T812] __x64_sys_mount+0xc3/0xf0 [ 38.677489][ T812] x64_sys_call+0x2021/0x2ee0 [ 38.677501][ T812] do_syscall_64+0x57/0xf0 [ 38.677513][ T812] ? clear_bhb_loop+0x50/0xa0 [ 38.677529][ T812] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.677543][ T812] RIP: 0033:0x7fbfbe79fb19 [ 38.677555][ T812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.677564][ T812] RSP: 002b:00007fbfbf66c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.677579][ T812] RAX: ffffffffffffffda RBX: 00007fbfbea25fa0 RCX: 00007fbfbe79fb19 [ 38.677588][ T812] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 38.677596][ T812] RBP: 00007fbfbe837b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.677604][ T812] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 38.677611][ T812] R13: 00007fbfbea26038 R14: 00007fbfbea25fa0 R15: 00007ffc51ad31b8 [ 38.677621][ T812] [ 39.088261][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.188870][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.260280][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.272188][ T31] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 39.281898][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.291450][ T31] usb 6-1: config 0 descriptor?? [ 39.447941][ T891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.499912][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 39.506432][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 39.518736][ T31] usb 6-1: USB disconnect, device number 2 [ 39.519138][ T347] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 39.644714][ T910] kvm: kvm [909]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 39.689730][ T347] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 39.702328][ T347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.708245][ T456] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.712716][ T347] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 39.737592][ T347] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 39.746743][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.754816][ T347] usb 2-1: Product: syz [ 39.759057][ T347] usb 2-1: Manufacturer: syz [ 39.763673][ T347] usb 2-1: SerialNumber: syz [ 39.776727][ T915] syzkaller0: entered promiscuous mode [ 39.782417][ T915] syzkaller0: entered allmulticast mode [ 39.782552][ T347] usb 2-1: config 0 descriptor?? [ 39.801990][ T347] usb-storage 2-1:0.0: USB Mass Storage device detected [ 39.811501][ T915] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 39.820866][ T347] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 39.828724][ T915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 39.889594][ T456] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.904247][ T456] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 39.913895][ T456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.922170][ T456] usb 3-1: Product: syz [ 39.926558][ T456] usb 3-1: Manufacturer: syz [ 39.931354][ T456] usb 3-1: SerialNumber: syz [ 39.943007][ T456] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 39.949372][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.956957][ T456] cdc_wdm 3-1:1.0: Unknown control protocol [ 40.011396][ T311] usb 2-1: USB disconnect, device number 10 [ 40.109242][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.130640][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 40.151389][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.167971][ T31] usb 6-1: config 0 descriptor?? [ 40.553617][ T975] SELinux: Context is not valid (left unmapped). [ 40.773654][ T986] FAULT_INJECTION: forcing a failure. [ 40.773654][ T986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.787237][ T986] CPU: 0 UID: 0 PID: 986 Comm: syz.1.186 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 40.787271][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 40.787282][ T986] Call Trace: [ 40.787288][ T986] [ 40.787296][ T986] __dump_stack+0x21/0x30 [ 40.787321][ T986] dump_stack_lvl+0x140/0x1c0 [ 40.787340][ T986] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.787360][ T986] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 40.787385][ T986] dump_stack+0x19/0x20 [ 40.787402][ T986] should_fail_ex+0x3c2/0x510 [ 40.787431][ T986] should_fail_alloc_page+0xec/0x110 [ 40.787453][ T986] __alloc_pages_noprof+0x1c0/0x7e0 [ 40.787476][ T986] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.787500][ T986] ? kasan_save_alloc_info+0x3a/0x50 [ 40.787526][ T986] ? __kasan_kmalloc+0x96/0xb0 [ 40.787547][ T986] ? __kmalloc_noprof+0x261/0x510 [ 40.787575][ T986] blk_rq_map_user_iov+0xfd5/0x1c50 [ 40.787599][ T986] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 40.787622][ T986] ? __asan_memset+0x39/0x50 [ 40.787647][ T986] ? import_ubuf+0x112/0x1f0 [ 40.787672][ T986] blk_rq_map_user_io+0x2af/0x440 [ 40.787693][ T986] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 40.787713][ T986] ? cred_has_capability+0x296/0x3a0 [ 40.787742][ T986] ? selinux_perf_event_alloc+0x110/0x110 [ 40.787771][ T986] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 40.787808][ T986] ? selinux_capable+0x38/0x50 [ 40.787830][ T986] ? bpf_lsm_capable+0xd/0x20 [ 40.787855][ T986] ? security_capable+0x44/0x130 [ 40.787874][ T986] ? capable+0x8e/0xf0 [ 40.787895][ T986] sg_io+0x523/0x8a0 [ 40.787918][ T986] scsi_ioctl+0x13a8/0x1f90 [ 40.787941][ T986] ? __cfi_scsi_ioctl+0x10/0x10 [ 40.787963][ T986] ? _parse_integer+0x2e/0x40 [ 40.787990][ T986] ? __asan_set_shadow_00+0x12/0x20 [ 40.788011][ T986] ? blkdev_common_ioctl+0x11e7/0x2740 [ 40.788031][ T986] ? avc_has_perm_noaudit+0x26b/0x360 [ 40.788054][ T986] ? __asan_memcpy+0x5a/0x80 [ 40.788080][ T986] ? avc_has_perm_noaudit+0x289/0x360 [ 40.788101][ T986] ? selinux_perf_event_alloc+0x110/0x110 [ 40.788130][ T986] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 40.788160][ T986] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 40.788186][ T986] ? selinux_capable+0x38/0x50 [ 40.788208][ T986] ? bpf_lsm_capable+0xd/0x20 [ 40.788230][ T986] ? security_capable+0x44/0x130 [ 40.788250][ T986] sd_ioctl+0x14a/0x190 [ 40.788275][ T986] ? __cfi_sd_ioctl+0x10/0x10 [ 40.788299][ T986] blkdev_ioctl+0x54b/0x690 [ 40.788326][ T986] ? __cfi_blkdev_ioctl+0x10/0x10 [ 40.788354][ T986] ? bpf_lsm_file_ioctl+0xd/0x20 [ 40.788374][ T986] ? security_file_ioctl+0x3e/0x110 [ 40.788400][ T986] ? __cfi_blkdev_ioctl+0x10/0x10 [ 40.788436][ T986] __se_sys_ioctl+0x123/0x1b0 [ 40.788457][ T986] __x64_sys_ioctl+0x7f/0xa0 [ 40.788478][ T986] x64_sys_call+0x1878/0x2ee0 [ 40.788498][ T986] do_syscall_64+0x57/0xf0 [ 40.788519][ T986] ? clear_bhb_loop+0x50/0xa0 [ 40.788544][ T986] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.788570][ T986] RIP: 0033:0x7fbfbe79fb19 [ 40.788587][ T986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.788605][ T986] RSP: 002b:00007fbfbf66c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.788628][ T986] RAX: ffffffffffffffda RBX: 00007fbfbea25fa0 RCX: 00007fbfbe79fb19 [ 40.788643][ T986] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 40.788657][ T986] RBP: 00007fbfbf66c090 R08: 0000000000000000 R09: 0000000000000000 [ 40.788671][ T986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.788683][ T986] R13: 00007fbfbea26038 R14: 00007fbfbea25fa0 R15: 00007ffc51ad31b8 [ 40.788701][ T986] [ 41.148711][ T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.176884][ T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.187961][ T31] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 41.220826][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 41.539017][ T993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.548882][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.557415][ T993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.568677][ T999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.577979][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.586712][ T999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.330908][ T1012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 42.354115][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 42.354133][ T36] audit: type=1400 audit(1793828975.040:298): avc: denied { ioctl } for pid=1016 comm="syz.1.192" path="socket:[13523]" dev="sockfs" ino=13523 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.402407][ T36] audit: type=1400 audit(1793828975.090:299): avc: denied { ioctl } for pid=1018 comm="syz.1.193" path="socket:[12851]" dev="sockfs" ino=12851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.427423][ T36] audit: type=1400 audit(1793828975.090:300): avc: denied { create } for pid=1018 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.447296][ T36] audit: type=1400 audit(1793828975.090:301): avc: denied { unmount } for pid=1018 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.486234][ T31] usb 3-1: USB disconnect, device number 6 [ 42.506925][ T1026] FAULT_INJECTION: forcing a failure. [ 42.506925][ T1026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.521743][ T1026] CPU: 0 UID: 0 PID: 1026 Comm: syz.2.196 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 42.521775][ T1026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.521787][ T1026] Call Trace: [ 42.521794][ T1026] [ 42.521801][ T1026] __dump_stack+0x21/0x30 [ 42.521827][ T1026] dump_stack_lvl+0x140/0x1c0 [ 42.521845][ T1026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.521864][ T1026] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 42.521890][ T1026] dump_stack+0x19/0x20 [ 42.521907][ T1026] should_fail_ex+0x3c2/0x510 [ 42.521936][ T1026] should_fail_alloc_page+0xec/0x110 [ 42.521957][ T1026] __alloc_pages_noprof+0x1c0/0x7e0 [ 42.521981][ T1026] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.522005][ T1026] ? kasan_save_alloc_info+0x3a/0x50 [ 42.522030][ T1026] ? __kasan_kmalloc+0x96/0xb0 [ 42.522050][ T1026] ? __kmalloc_noprof+0x261/0x510 [ 42.522080][ T1026] blk_rq_map_user_iov+0xfd5/0x1c50 [ 42.522104][ T1026] ? __cfi_blk_rq_map_user_iov+0x10/0x10 [ 42.522127][ T1026] ? __asan_memset+0x39/0x50 [ 42.522152][ T1026] ? import_ubuf+0x112/0x1f0 [ 42.522177][ T1026] blk_rq_map_user_io+0x2af/0x440 [ 42.522198][ T1026] ? __cfi_blk_rq_map_user_io+0x10/0x10 [ 42.522218][ T1026] ? cred_has_capability+0x296/0x3a0 [ 42.522247][ T1026] ? selinux_perf_event_alloc+0x110/0x110 [ 42.522275][ T1026] ? __cfi_blk_mq_alloc_request+0x10/0x10 [ 42.522302][ T1026] ? selinux_capable+0x38/0x50 [ 42.522324][ T1026] ? bpf_lsm_capable+0xd/0x20 [ 42.522347][ T1026] ? security_capable+0x44/0x130 [ 42.522368][ T1026] ? capable+0x8e/0xf0 [ 42.522389][ T1026] sg_io+0x523/0x8a0 [ 42.522412][ T1026] scsi_ioctl+0x13a8/0x1f90 [ 42.522434][ T1026] ? __cfi_scsi_ioctl+0x10/0x10 [ 42.522456][ T1026] ? _parse_integer+0x2e/0x40 [ 42.522484][ T1026] ? __asan_set_shadow_00+0x12/0x20 [ 42.522506][ T1026] ? blkdev_common_ioctl+0x11e7/0x2740 [ 42.522525][ T1026] ? avc_has_perm_noaudit+0x26b/0x360 [ 42.522547][ T1026] ? __asan_memcpy+0x5a/0x80 [ 42.522574][ T1026] ? avc_has_perm_noaudit+0x289/0x360 [ 42.522595][ T1026] ? selinux_perf_event_alloc+0x110/0x110 [ 42.522624][ T1026] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 42.522649][ T1026] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 42.522683][ T1026] ? selinux_capable+0x38/0x50 [ 42.522705][ T1026] ? bpf_lsm_capable+0xd/0x20 [ 42.522727][ T1026] ? security_capable+0x44/0x130 [ 42.522748][ T1026] sd_ioctl+0x14a/0x190 [ 42.522773][ T1026] ? __cfi_sd_ioctl+0x10/0x10 [ 42.522796][ T1026] blkdev_ioctl+0x54b/0x690 [ 42.522824][ T1026] ? __cfi_blkdev_ioctl+0x10/0x10 [ 42.522851][ T1026] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.522872][ T1026] ? security_file_ioctl+0x3e/0x110 [ 42.522898][ T1026] ? __cfi_blkdev_ioctl+0x10/0x10 [ 42.522924][ T1026] __se_sys_ioctl+0x123/0x1b0 [ 42.522946][ T1026] __x64_sys_ioctl+0x7f/0xa0 [ 42.522967][ T1026] x64_sys_call+0x1878/0x2ee0 [ 42.522987][ T1026] do_syscall_64+0x57/0xf0 [ 42.523007][ T1026] ? clear_bhb_loop+0x50/0xa0 [ 42.523033][ T1026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.523057][ T1026] RIP: 0033:0x7f2e20d9fb19 [ 42.523075][ T1026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.523090][ T1026] RSP: 002b:00007f2e21d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.523112][ T1026] RAX: ffffffffffffffda RBX: 00007f2e21025fa0 RCX: 00007f2e20d9fb19 [ 42.523127][ T1026] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000004 [ 42.523140][ T1026] RBP: 00007f2e21d21090 R08: 0000000000000000 R09: 0000000000000000 [ 42.523152][ T1026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.523164][ T1026] R13: 00007f2e21026038 R14: 00007f2e21025fa0 R15: 00007ffe775d4c48 [ 42.523180][ T1026] [ 42.750218][ T31] usb 6-1: USB disconnect, device number 3 [ 42.925472][ T1030] 9pnet: p9_errstr2errno: server reported unknown error [ 42.998370][ T36] audit: type=1400 audit(1793828975.670:302): avc: denied { getopt } for pid=1042 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.264769][ T1050] mmap: syz.1.204 (1050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.286664][ T1050] netlink: 'syz.1.204': attribute type 13 has an invalid length. [ 43.297554][ T1050] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 43.388238][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.428230][ T347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.538211][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 43.544525][ T31] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 43.553070][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.563352][ T31] usb 6-1: config 0 has no interface number 0 [ 43.578235][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 43.579263][ T347] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 43.587457][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.603889][ T31] usb 6-1: Product: syz [ 43.605785][ T347] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 43.608375][ T31] usb 6-1: Manufacturer: syz [ 43.623315][ T31] usb 6-1: SerialNumber: syz [ 43.629252][ T31] usb 6-1: config 0 descriptor?? [ 43.636839][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 43.638920][ T31] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 43.650179][ T347] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.665602][ T31] usb 6-1: No valid video chain found. [ 43.674342][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.688419][ T347] usb 3-1: config 0 descriptor?? [ 43.694685][ T347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 43.869337][ T31] usb 6-1: USB disconnect, device number 4 [ 43.950655][ T36] audit: type=1400 audit(1793828976.640:303): avc: denied { accept } for pid=1057 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.970739][ T36] audit: type=1400 audit(1793828976.660:304): avc: denied { write } for pid=1057 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.021454][ T36] audit: type=1400 audit(1793828976.710:305): avc: denied { read } for pid=1057 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.595583][ T36] audit: type=1400 audit(1793828977.280:306): avc: denied { name_bind } for pid=1071 comm="syz.5.211" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.768430][ T1081] netlink: 'syz.1.214': attribute type 7 has an invalid length. [ 44.777201][ T1081] netlink: 'syz.1.214': attribute type 5 has an invalid length. [ 44.785577][ T1081] netlink: 17 bytes leftover after parsing attributes in process `syz.1.214'. [ 44.870289][ T311] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 44.903159][ T36] audit: type=1400 audit(1793828977.590:307): avc: denied { setopt } for pid=1087 comm="syz.1.216" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.028204][ T311] usb 6-1: Using ep0 maxpacket: 8 [ 45.034571][ T311] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 45.043176][ T311] usb 6-1: config 179 has no interface number 0 [ 45.049797][ T311] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 45.061286][ T311] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 45.072858][ T311] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 45.084301][ T311] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 45.101022][ T311] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 45.114623][ T311] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 45.123973][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.133729][ T1076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 45.345374][ T311] usb 6-1: USB disconnect, device number 5 [ 45.351295][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 45.351334][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 45.481702][ T1099] /dev/sg0: Can't lookup blockdev [ 46.015577][ T1104] overlayfs: failed to clone upperpath [ 46.024888][ T1104] overlayfs: failed to clone upperpath [ 46.202127][ T455] usb 3-1: USB disconnect, device number 7 [ 46.226818][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 46.361844][ T1126] rust_binder: 1125:1126 got transaction to invalid handle 2 [ 46.371344][ T1126] rust_binder: 1125:1126 transaction call to 0:0 failed ENOENT, code 0 size 80-24 line process.rs:958 [ 47.027287][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.236'. [ 47.180003][ T1154] veth1_macvtap: left promiscuous mode [ 47.185598][ T1154] macsec0: entered promiscuous mode [ 47.191231][ T1154] macsec0: entered allmulticast mode [ 47.199664][ T1154] veth1_macvtap: entered promiscuous mode [ 47.206154][ T1154] veth1_macvtap: entered allmulticast mode [ 47.215594][ T1154] macsec0: left promiscuous mode [ 47.223808][ T1154] macsec0: left allmulticast mode [ 47.229173][ T1154] veth1_macvtap: left allmulticast mode [ 47.243657][ T1154] ./dev/sda1: Can't lookup blockdev [ 47.283418][ T1157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.345943][ T1169] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 47.618204][ T455] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.769465][ T455] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 47.780335][ T455] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 47.791637][ T455] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 47.805461][ T455] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.815970][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.826364][ T455] usb 3-1: config 0 descriptor?? [ 47.834956][ T455] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 47.884963][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 47.986444][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 47.986462][ T36] audit: type=1400 audit(1793828980.670:313): avc: denied { bind } for pid=1176 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.014075][ T36] audit: type=1400 audit(1793828980.670:314): avc: denied { node_bind } for pid=1176 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.045937][ T36] audit: type=1400 audit(1793828980.700:315): avc: denied { create } for pid=1176 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.110925][ T491] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.681407][ T36] audit: type=1326 audit(1793828981.370:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1196 comm="syz.1.254" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfbe79fb19 code=0x0 [ 49.527691][ T1201] netlink: 'syz.1.255': attribute type 4 has an invalid length. [ 49.538208][ T1201] netlink: 'syz.1.255': attribute type 5 has an invalid length. [ 49.546054][ T1201] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.255'. [ 49.559001][ T36] audit: type=1400 audit(1793828982.250:317): avc: denied { create } for pid=1200 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.092761][ T1205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 50.128612][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 50.134813][ T520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.144127][ T36] audit: type=1400 audit(1793828982.830:318): avc: denied { sqpoll } for pid=1206 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.220496][ T36] audit: type=1400 audit(1793828982.910:319): avc: denied { write } for pid=1219 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.392924][ T455] usb 3-1: USB disconnect, device number 8 [ 50.422581][ T1231] netlink: 104 bytes leftover after parsing attributes in process `syz.2.263'. [ 50.810981][ T1235] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 50.818878][ T1235] netlink: 17 bytes leftover after parsing attributes in process `syz.1.265'. [ 50.952099][ T1239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 50.988712][ T36] audit: type=1400 audit(1793828983.680:320): avc: denied { create } for pid=1240 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 51.288287][ T455] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 51.412700][ T36] audit: type=1400 audit(1793828984.100:321): avc: denied { lock } for pid=1259 comm="syz.1.274" path="socket:[14329]" dev="sockfs" ino=14329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 51.438202][ T456] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 51.446261][ T455] usb 3-1: device descriptor read/64, error -71 [ 51.609406][ T456] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 51.617847][ T456] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 51.633148][ T456] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 51.647278][ T456] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.656879][ T456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.670245][ T456] usb 6-1: config 0 descriptor?? [ 51.680418][ T456] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 51.699237][ T455] usb 3-1: device descriptor read/64, error -71 [ 51.948199][ T455] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 52.099703][ T455] usb 3-1: device descriptor read/64, error -71 [ 52.348208][ T455] usb 3-1: device descriptor read/64, error -71 [ 52.469423][ T455] usb usb3-port1: attempt power cycle [ 52.551966][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 52.621573][ T1278] : renamed from lo (while UP) [ 52.628811][ T1278] mmap: syz.1.280 (1278): VmData 29073408 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 52.808226][ T455] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 52.829304][ T455] usb 3-1: device descriptor read/8, error -71 [ 52.959311][ T455] usb 3-1: device descriptor read/8, error -71 [ 53.198216][ T455] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 53.219239][ T455] usb 3-1: device descriptor read/8, error -71 [ 53.274027][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 53.322201][ T1299] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 53.349297][ T455] usb 3-1: device descriptor read/8, error -71 [ 53.478346][ T455] usb usb3-port1: unable to enumerate USB device [ 54.045556][ T36] audit: type=1400 audit(1793828986.730:322): avc: denied { ioctl } for pid=1305 comm="syz.2.290" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.200120][ T9] usb 6-1: USB disconnect, device number 6 [ 54.568220][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 54.729706][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.744396][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 54.758243][ T9] usb 6-1: config 4 has an invalid interface number: 106 but max is 0 [ 54.760376][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 54.766975][ T9] usb 6-1: config 4 has no interface number 0 [ 54.767013][ T9] usb 6-1: config 4 interface 106 has no altsetting 0 [ 54.796955][ T9] usb 6-1: string descriptor 0 read error: -22 [ 54.803969][ T9] usb 6-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 54.813534][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.826348][ T9] usb 6-1: Found UVC 0.00 device (0408:4033) [ 54.835032][ T9] usb 6-1: Forcing UVC version to 1.0a [ 54.840778][ T9] usb 6-1: No valid video chain found. [ 54.848225][ T45] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 54.978217][ T45] usb 3-1: device descriptor read/64, error -71 [ 55.040996][ T456] usb 6-1: USB disconnect, device number 7 [ 55.238236][ T45] usb 3-1: device descriptor read/64, error -71 [ 55.488197][ T45] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 55.648257][ T45] usb 3-1: device descriptor read/64, error -71 [ 55.710642][ T36] audit: type=1400 audit(1793828988.400:323): avc: denied { write } for pid=1335 comm="syz.5.302" name="ip6_mr_vif" dev="proc" ino=4026533006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.782526][ T297] bridge_slave_1: left allmulticast mode [ 55.788343][ T297] bridge_slave_1: left promiscuous mode [ 55.795299][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.804210][ T297] bridge_slave_0: left allmulticast mode [ 55.810091][ T297] bridge_slave_0: left promiscuous mode [ 55.815864][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.864122][ T36] audit: type=1326 audit(1793828988.550:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1340 comm="syz.5.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2699fb19 code=0x0 [ 55.880296][ T1348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 55.900212][ T45] usb 3-1: device descriptor read/64, error -71 [ 55.924341][ T36] audit: type=1400 audit(1793828988.610:325): avc: denied { relabelto } for pid=1347 comm="syz.1.306" name="blkio.bfq.io_serviced" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2E869D [ 55.949962][ T36] audit: type=1400 audit(1793828988.610:326): avc: denied { unlink } for pid=294 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2E869D [ 55.979448][ T297] veth1_macvtap: left promiscuous mode [ 55.985239][ T297] veth0_vlan: left promiscuous mode [ 56.010997][ T45] usb usb3-port1: attempt power cycle [ 56.358298][ T45] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 56.379413][ T45] usb 3-1: device descriptor read/8, error -71 [ 56.490310][ T36] audit: type=1400 audit(1793828989.180:327): avc: denied { ioctl } for pid=1357 comm="syz.1.310" path="socket:[14598]" dev="sockfs" ino=14598 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.519212][ T45] usb 3-1: device descriptor read/8, error -71 [ 56.668276][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 56.758235][ T45] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 56.779386][ T45] usb 3-1: device descriptor read/8, error -71 [ 56.829635][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.839968][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.853181][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 56.862376][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.909406][ T45] usb 3-1: device descriptor read/8, error -71 [ 57.018327][ T45] usb usb3-port1: unable to enumerate USB device [ 57.050260][ T36] audit: type=1400 audit(1793828989.740:328): avc: denied { connect } for pid=1360 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.823839][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 57.898187][ T36] audit: type=1400 audit(1793828990.580:329): avc: denied { cmd } for pid=1377 comm="iou-wrk-1378" path="socket:[14632]" dev="sockfs" ino=14632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.877417][ T1392] ./dev/sda1: Can't lookup blockdev [ 58.968195][ T455] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 59.119297][ T455] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 59.127695][ T455] usb 3-1: config 127 has no interface number 0 [ 59.134337][ T455] usb 3-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 59.145558][ T455] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 59.156587][ T455] usb 3-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 59.171579][ T455] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 59.180783][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.188832][ T455] usb 3-1: Product: syz [ 59.193019][ T455] usb 3-1: Manufacturer: syz [ 59.198203][ T455] usb 3-1: SerialNumber: syz [ 59.204167][ T1390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.622991][ T1390] FAULT_INJECTION: forcing a failure. [ 59.622991][ T1390] name failslab, interval 1, probability 0, space 0, times 0 [ 59.636365][ T1390] CPU: 1 UID: 0 PID: 1390 Comm: syz.2.319 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 59.636400][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.636410][ T1390] Call Trace: [ 59.636416][ T1390] [ 59.636421][ T1390] __dump_stack+0x21/0x30 [ 59.636438][ T1390] dump_stack_lvl+0x140/0x1c0 [ 59.636449][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.636506][ T1390] dump_stack+0x19/0x20 [ 59.636525][ T1390] should_fail_ex+0x3c2/0x510 [ 59.636553][ T1390] should_failslab+0xac/0x100 [ 59.636567][ T1390] __kmalloc_cache_noprof+0x41/0x470 [ 59.636585][ T1390] ? dummy_alloc_request+0x8e/0x1f0 [ 59.636600][ T1390] ? dummy_enable+0x78d/0xa10 [ 59.636622][ T1390] dummy_alloc_request+0x8e/0x1f0 [ 59.636650][ T1390] usb_ep_alloc_request+0x78/0x1c0 [ 59.636675][ T1390] raw_ioctl+0x26f8/0x37a0 [ 59.636699][ T1390] ? __cfi_raw_ioctl+0x10/0x10 [ 59.636713][ T1390] ? selinux_file_ioctl+0x732/0x1480 [ 59.636731][ T1390] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 59.636749][ T1390] ? __hrtimer_run_queues+0x877/0x8e0 [ 59.636770][ T1390] ? hook_file_ioctl+0x1ef/0x590 [ 59.636795][ T1390] ? sched_clock_noinstr+0xd/0x30 [ 59.636821][ T1390] ? sched_clock+0x44/0x60 [ 59.636848][ T1390] ? __cfi_hook_file_ioctl+0x10/0x10 [ 59.636863][ T1390] ? sched_clock_cpu+0x75/0x400 [ 59.636875][ T1390] ? clockevents_program_event+0x254/0x350 [ 59.636891][ T1390] ? __cfi_sched_clock_cpu+0x10/0x10 [ 59.636905][ T1390] ? hrtimer_reprogram+0x336/0x3d0 [ 59.636927][ T1390] ? __fget_files+0x2bc/0x330 [ 59.636948][ T1390] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.636969][ T1390] ? security_file_ioctl+0x3e/0x110 [ 59.636997][ T1390] ? __cfi_raw_ioctl+0x10/0x10 [ 59.637010][ T1390] __se_sys_ioctl+0x123/0x1b0 [ 59.637022][ T1390] __x64_sys_ioctl+0x7f/0xa0 [ 59.637034][ T1390] x64_sys_call+0x1878/0x2ee0 [ 59.637046][ T1390] do_syscall_64+0x57/0xf0 [ 59.637059][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 59.637085][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.637120][ T1390] RIP: 0033:0x7f2e20d9f7ab [ 59.637138][ T1390] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 59.637153][ T1390] RSP: 002b:00007f2e21d1eef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.637169][ T1390] RAX: ffffffffffffffda RBX: 00007f2e21150320 RCX: 00007f2e20d9f7ab [ 59.637178][ T1390] RDX: 00007f2e2115034c RSI: 0000000040095505 RDI: 0000000000000003 [ 59.637187][ T1390] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000039 [ 59.637195][ T1390] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 59.637203][ T1390] R13: 00007f2e21150530 R14: 0000000000000000 R15: 00007f2e2115034e [ 59.637218][ T1390] [ 59.637233][ T1390] raw-gadget.1 gadget.2: fail, usb_ep_alloc_request failed [ 59.933095][ T1390] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.996132][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.007581][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 60.018996][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.031272][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 60.042333][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 60.053241][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 60.065977][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 60.078982][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.092173][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.105813][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.118479][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.132196][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.148231][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.151704][ T455] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 60.161310][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.173562][ T455] asix 3-1:127.57: probe with driver asix failed with error -71 [ 60.185691][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.199018][ T455] usb 3-1: USB disconnect, device number 17 [ 60.208259][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 60.222883][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.234990][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 60.247837][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 60.259629][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 60.271071][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.282335][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 60.307144][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.319232][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 60.332174][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.343827][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 60.355923][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 60.367906][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 60.379914][ T9] ax88179_178a 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 60.396292][ T9] ax88179_178a 6-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, be:6d:d7:67:12:af [ 60.415039][ T9] usb 6-1: USB disconnect, device number 8 [ 60.421618][ T9] ax88179_178a 6-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 60.962272][ T1432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 60.999860][ T36] audit: type=1400 audit(1793828993.690:330): avc: denied { remount } for pid=1433 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.026852][ T1385] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.100292][ T36] audit: type=1400 audit(1793828993.780:331): avc: denied { create } for pid=1439 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 61.148194][ T347] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 61.299490][ T347] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 61.308249][ T347] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 61.328352][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 61.342311][ T347] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.354737][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.366122][ T347] usb 3-1: config 0 descriptor?? [ 61.375334][ T347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 63.088271][ T520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.088268][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 63.668234][ T347] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 63.819731][ T347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.830991][ T347] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 63.842338][ T347] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.858255][ T347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.869445][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.877762][ T347] usb 6-1: Product: syz [ 63.882107][ T347] usb 6-1: Manufacturer: syz [ 63.886842][ T347] usb 6-1: SerialNumber: syz [ 63.914513][ T31] usb 3-1: USB disconnect, device number 18 [ 64.896997][ T347] cdc_ncm 6-1:1.0: bind() failure [ 64.903361][ T347] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 64.912021][ T347] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 64.921331][ T347] usb 6-1: USB disconnect, device number 9 [ 64.978259][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.129390][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.139580][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 65.150392][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.165072][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.174807][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.183422][ T9] usb 3-1: Product: syz [ 65.188294][ T9] usb 3-1: Manufacturer: syz [ 65.193273][ T9] usb 3-1: SerialNumber: syz [ 66.002020][ T1470] FAULT_INJECTION: forcing a failure. [ 66.002020][ T1470] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.015707][ T1470] CPU: 0 UID: 0 PID: 1470 Comm: syz.2.335 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 66.015740][ T1470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.015752][ T1470] Call Trace: [ 66.015760][ T1470] [ 66.015769][ T1470] __dump_stack+0x21/0x30 [ 66.015787][ T1470] dump_stack_lvl+0x140/0x1c0 [ 66.015797][ T1470] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.015809][ T1470] dump_stack+0x19/0x20 [ 66.015823][ T1470] should_fail_ex+0x3c2/0x510 [ 66.015841][ T1470] should_fail+0xf/0x20 [ 66.015851][ T1470] should_fail_usercopy+0x1e/0x30 [ 66.015867][ T1470] _copy_from_user+0x20/0xa0 [ 66.015885][ T1470] raw_ioctl+0xbf2/0x37a0 [ 66.015905][ T1470] ? proc_fail_nth_write+0x184/0x220 [ 66.015920][ T1470] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.015934][ T1470] ? __cfi_raw_ioctl+0x10/0x10 [ 66.015949][ T1470] ? selinux_file_ioctl+0x732/0x1480 [ 66.015965][ T1470] ? vfs_write+0xbd2/0xfd0 [ 66.015981][ T1470] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 66.015996][ T1470] ? hook_file_ioctl+0x1ef/0x590 [ 66.016012][ T1470] ? __cfi_vfs_write+0x10/0x10 [ 66.016027][ T1470] ? __cfi_hook_file_ioctl+0x10/0x10 [ 66.016041][ T1470] ? __kasan_check_write+0x18/0x20 [ 66.016057][ T1470] ? mutex_unlock+0x90/0x240 [ 66.016071][ T1470] ? __cfi_mutex_unlock+0x10/0x10 [ 66.016085][ T1470] ? __fget_files+0x2bc/0x330 [ 66.016097][ T1470] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.016109][ T1470] ? security_file_ioctl+0x3e/0x110 [ 66.016125][ T1470] ? __cfi_raw_ioctl+0x10/0x10 [ 66.016137][ T1470] __se_sys_ioctl+0x123/0x1b0 [ 66.016150][ T1470] __x64_sys_ioctl+0x7f/0xa0 [ 66.016161][ T1470] x64_sys_call+0x1878/0x2ee0 [ 66.016173][ T1470] do_syscall_64+0x57/0xf0 [ 66.016184][ T1470] ? clear_bhb_loop+0x50/0xa0 [ 66.016200][ T1470] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.016215][ T1470] RIP: 0033:0x7f2e20d9f7ab [ 66.016226][ T1470] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 66.016237][ T1470] RSP: 002b:00007f2e21d1ef50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.016251][ T1470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2e20d9f7ab [ 66.016260][ T1470] RDX: 00007f2e21d1ffe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 66.016268][ T1470] RBP: 00007f2e21d21090 R08: 0000000000000000 R09: 0000000000000000 [ 66.016276][ T1470] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 66.016283][ T1470] R13: 0000000000000000 R14: 00007f2e21025fa0 R15: 00007ffe775d4c48 [ 66.016292][ T1470] [ 66.016663][ T9] cdc_ncm 3-1:1.0: bind() failure [ 66.171337][ T1479] syz.1.336 uses obsolete (PF_INET,SOCK_PACKET) [ 66.178748][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 66.283534][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.337'. [ 66.292318][ T9] cdc_ncm 3-1:1.1: bind() failure [ 66.333863][ T9] usb 3-1: USB disconnect, device number 19 [ 66.368261][ T1485] netlink: 'syz.5.339': attribute type 21 has an invalid length. [ 67.808473][ T36] audit: type=1400 audit(1793829000.500:332): avc: denied { search } for pid=1487 comm="syz.2.341" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 67.831750][ T36] audit: type=1400 audit(1793829000.500:333): avc: denied { connect } for pid=1490 comm="syz.5.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.048266][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 68.098261][ T455] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 68.198296][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 68.205629][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 68.215540][ T9] usb 6-1: config 1 has an invalid interface number: 52 but max is 2 [ 68.225228][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.237764][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.248374][ T9] usb 6-1: config 1 has no interface number 0 [ 68.256018][ T9] usb 6-1: config 1 interface 52 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 68.269576][ T9] usb 6-1: config 1 interface 52 has no altsetting 0 [ 68.280268][ T455] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 68.281144][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=8b.ad [ 68.290622][ T455] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 68.301759][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.322630][ T455] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 68.323036][ T9] usb 6-1: Product: syz [ 68.340247][ T455] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.344835][ T9] usb 6-1: Manufacturer: syz [ 68.355531][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.360311][ T9] usb 6-1: SerialNumber: syz [ 68.371889][ T455] usb 3-1: config 0 descriptor?? [ 68.382308][ T455] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 68.579074][ T1494] 9pnet_fd: p9_fd_create_unix (1494): problem connecting socket: ./cgroup/file0: -2 [ 68.594814][ T9] rndis_host 6-1:1.52: More than one union descriptor, skipping ... [ 68.603531][ T9] usb 6-1: bad CDC descriptors [ 68.608839][ T9] cdc_acm 6-1:1.52: More than one union descriptor, skipping ... [ 68.622782][ T9] usb 6-1: USB disconnect, device number 10 [ 69.463494][ T1504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.346'. [ 70.872346][ T9] usb 3-1: USB disconnect, device number 20 [ 71.237763][ T1517] ./dev/sda1: Can't lookup blockdev [ 71.246782][ T36] audit: type=1400 audit(1793829003.930:334): avc: denied { ioctl } for pid=1516 comm="syz.1.350" path="socket:[16159]" dev="sockfs" ino=16159 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.387288][ T36] audit: type=1400 audit(1793829004.070:335): avc: denied { setopt } for pid=1525 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.468251][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 71.619617][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.631013][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 71.643174][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.658885][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.668501][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.676978][ T9] usb 3-1: Product: syz [ 71.681207][ T9] usb 3-1: Manufacturer: syz [ 71.687269][ T9] usb 3-1: SerialNumber: syz [ 72.497875][ T1519] FAULT_INJECTION: forcing a failure. [ 72.497875][ T1519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.513009][ T1519] CPU: 1 UID: 0 PID: 1519 Comm: syz.2.351 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 72.513043][ T1519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.513055][ T1519] Call Trace: [ 72.513063][ T1519] [ 72.513072][ T1519] __dump_stack+0x21/0x30 [ 72.513097][ T1519] dump_stack_lvl+0x140/0x1c0 [ 72.513116][ T1519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.513135][ T1519] ? __kasan_check_write+0x18/0x20 [ 72.513161][ T1519] ? check_stack_object+0x81/0x150 [ 72.513187][ T1519] ? __check_object_size+0x99/0x870 [ 72.513214][ T1519] dump_stack+0x19/0x20 [ 72.513228][ T1519] should_fail_ex+0x3c2/0x510 [ 72.513245][ T1519] should_fail+0xf/0x20 [ 72.513254][ T1519] should_fail_usercopy+0x1e/0x30 [ 72.513266][ T1519] _copy_to_user+0x24/0xa0 [ 72.513281][ T1519] raw_ioctl+0x2371/0x37a0 [ 72.513384][ T1519] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 72.513421][ T1519] ? __cfi_raw_ioctl+0x10/0x10 [ 72.513568][ T1519] ? selinux_file_ioctl+0x732/0x1480 [ 72.513599][ T1519] ? vfs_write+0xbd2/0xfd0 [ 72.513626][ T1519] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 72.513653][ T1519] ? hook_file_ioctl+0x1ef/0x590 [ 72.513678][ T1519] ? __cfi_vfs_write+0x10/0x10 [ 72.513694][ T1519] ? __cfi_hook_file_ioctl+0x10/0x10 [ 72.513711][ T1519] ? __kasan_check_write+0x18/0x20 [ 72.513727][ T1519] ? mutex_unlock+0x90/0x240 [ 72.513750][ T1519] ? __cfi_mutex_unlock+0x10/0x10 [ 72.513770][ T1519] ? __fget_files+0x2bc/0x330 [ 72.513788][ T1519] ? bpf_lsm_file_ioctl+0xd/0x20 [ 72.513808][ T1519] ? security_file_ioctl+0x3e/0x110 [ 72.513890][ T1519] ? __cfi_raw_ioctl+0x10/0x10 [ 72.513903][ T1519] __se_sys_ioctl+0x123/0x1b0 [ 72.513918][ T1519] __x64_sys_ioctl+0x7f/0xa0 [ 72.513929][ T1519] x64_sys_call+0x1878/0x2ee0 [ 72.513949][ T1519] do_syscall_64+0x57/0xf0 [ 72.514030][ T1519] ? clear_bhb_loop+0x50/0xa0 [ 72.514059][ T1519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.514083][ T1519] RIP: 0033:0x7f2e20d9f7ab [ 72.514098][ T1519] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 72.514109][ T1519] RSP: 002b:00007f2e21d1ef50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.514124][ T1519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2e20d9f7ab [ 72.514133][ T1519] RDX: 00007f2e21d1ffe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 72.514144][ T1519] RBP: 00007f2e21d21090 R08: 0000000000000000 R09: 0000000000000000 [ 72.514221][ T1519] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 72.514234][ T1519] R13: 0000000000000000 R14: 00007f2e21025fa0 R15: 00007ffe775d4c48 [ 72.514253][ T1519] [ 72.515155][ T9] cdc_ncm 3-1:1.0: bind() failure [ 72.822932][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 72.829895][ T9] cdc_ncm 3-1:1.1: bind() failure [ 72.839263][ T9] usb 3-1: USB disconnect, device number 21 [ 73.150565][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 73.186599][ T1533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.356'. [ 73.468327][ T455] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 73.629708][ T455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.641113][ T455] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 73.652558][ T455] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.667647][ T455] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.680300][ T455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.689386][ T455] usb 3-1: Product: syz [ 73.693617][ T455] usb 3-1: Manufacturer: syz [ 73.699279][ T455] usb 3-1: SerialNumber: syz [ 74.714059][ T455] cdc_ncm 3-1:1.0: bind() failure [ 74.720371][ T455] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 74.729577][ T455] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 74.739421][ T455] usb 3-1: USB disconnect, device number 22 [ 77.168822][ T1568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 77.378254][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 77.529848][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.540861][ T9] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 77.552680][ T9] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.570767][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.580894][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.590461][ T9] usb 6-1: Product: syz [ 77.594996][ T9] usb 6-1: Manufacturer: syz [ 77.600911][ T9] usb 6-1: SerialNumber: syz [ 78.611253][ T9] cdc_ncm 6-1:1.0: bind() failure [ 78.617449][ T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 78.626534][ T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 78.635849][ T9] usb 6-1: USB disconnect, device number 11 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=299 state=3 status=67 (errno 9: Bad file descriptor) [ 79.443247][ T36] audit: type=1400 audit(1793829012.130:336): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3161]" dev="pipefs" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 79.660411][ T1385] bridge_slave_1: left allmulticast mode [ 79.667696][ T1385] bridge_slave_1: left promiscuous mode [ 79.674713][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.683203][ T1385] bridge_slave_0: left allmulticast mode [ 79.690095][ T1385] bridge_slave_0: left promiscuous mode [ 79.696525][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.820438][ T1385] veth1_macvtap: left promiscuous mode [ 79.826427][ T1385] veth0_vlan: left promiscuous mode [ 80.100096][ T1385] bridge_slave_1: left allmulticast mode [ 80.107112][ T1385] bridge_slave_1: left promiscuous mode [ 80.113383][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.123554][ T1385] bridge_slave_0: left allmulticast mode [ 80.131714][ T1385] bridge_slave_0: left promiscuous mode [ 80.139964][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.149151][ T1385] bridge_slave_1: left allmulticast mode [ 80.155762][ T1385] bridge_slave_1: left promiscuous mode [ 80.162756][ T1385] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.171332][ T1385] bridge_slave_0: left allmulticast mode [ 80.178066][ T1385] bridge_slave_0: left promiscuous mode [ 80.185039][ T1385] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.312168][ T1385] veth1_macvtap: left promiscuous mode [ 80.320539][ T1385] veth0_vlan: left promiscuous mode [ 80.329439][ T1385] veth1_macvtap: left promiscuous mode [ 80.335394][ T1385] veth0_vlan: left promiscuous mode [ 82.533719][ T36] audit: type=1400 audit(1793829015.220:337): avc: denied { read } for pid=1588 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 82.910387][ T36] audit: type=1400 audit(1793829015.590:338): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 82.940227][ T36] audit: type=1400 audit(1793829015.630:339): avc: denied { read write } for pid=1610 comm="ip" path="/dev/console" dev="rootfs" ino=1128 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: [ 83.004811][ T36] audit: type=1400 audit(1793829015.690:340): avc: denied { read write } for pid=1614 comm="iptables" path="/dev/console" dev="rootfs" ino=1128 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 83.030327][ T36] audit: type=1400 audit(1793829015.690:341): avc: denied { search } for pid=1614 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 83.057066][ T36] audit: type=1400 audit(1793829015.690:342): avc: denied { write } for pid=1614 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 83.082146][ T36] audit: type=1400 audit(1793829015.690:343): avc: denied { add_name } for pid=1614 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 83.108932][ T36] audit: type=1400 audit(1793829015.690:344): avc: denied { create } for pid=1614 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.138941][ T36] audit: type=1400 audit(1793829015.690:345): avc: denied { read open } for pid=1614 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=1032 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: devtmpfs busy - remounted read-only [ 84.567725][ T1634] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro. The system is gSent SIGKILL to all processes Requesting system poweroff [ 86.648070][ T1635] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 86.659467][ T1635] ACPI: PM: Preparing to enter system sleep state S5 [ 86.667313][ T1635] kvm: exiting hardware virtualization [ 86.675119][ T1635] reboot: Power down serialport: VM disconnected.