last executing test programs: 9m43.077272757s ago: executing program 2 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) 9m43.048315717s ago: executing program 2 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m42.9303589s ago: executing program 2 (id=657): r0 = syz_open_procfs(0x0, 0x0) ftruncate(r0, 0x7fffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x46900, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000004200)=""/4096, 0xe000}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) 9m42.780208894s ago: executing program 2 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 9m42.779843144s ago: executing program 2 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 9m42.646006027s ago: executing program 2 (id=664): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000028a", @ANYRES16, @ANYRES32=0x0], 0x30}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) 9m42.608638838s ago: executing program 32 (id=664): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000028a", @ANYRES16, @ANYRES32=0x0], 0x30}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) 9m30.86170878s ago: executing program 0 (id=842): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setns(0xc9, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 9m30.810346472s ago: executing program 0 (id=844): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201050000"], 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) 9m30.694028744s ago: executing program 0 (id=847): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)={0x28, 0x4, 0x0, {0x1, 0x6}}, 0x28) unshare(0x20400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m30.688832015s ago: executing program 0 (id=849): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 9m30.644400076s ago: executing program 0 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e2a, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "008c0f3db24e2eb9", "76e64b3892cb7025848c9f400000f916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) 9m29.658005999s ago: executing program 0 (id=868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m29.657921209s ago: executing program 33 (id=868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m33.287766378s ago: executing program 5 (id=3941): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f, 0x4}, {0x59eededb, 0x4}]}}) 6m33.273749079s ago: executing program 5 (id=3942): syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003000000209904541040000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f0080090401"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 6m32.070819418s ago: executing program 5 (id=3966): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f00000001c0)) 6m32.034934139s ago: executing program 5 (id=3968): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 6m32.011783849s ago: executing program 5 (id=3969): syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000088205a30040000102030109026000030108809b0904040000010100000a240101000a0002010209040100000102000009040101010102000009050109"], 0x0) 6m31.897645692s ago: executing program 5 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) 6m31.823889073s ago: executing program 34 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) 1.64385792s ago: executing program 6 (id=12357): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x91, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0xffffffff, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0x0, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.537193602s ago: executing program 6 (id=12360): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0xffea, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0000001e39be"], 0x34}], 0x1}, 0x0) 1.536833672s ago: executing program 4 (id=12361): arch_prctl$ARCH_GET_CPUID(0x1011) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xe3\x03\xc8\xb6\xa9D\xcc\xf4#\x9e4vmB\xd3\'\a\"\x80_N\t>\xd6\x98\x06\x00\x00\x00\x00\x00\x00\x00l\xcf\xa2\xb8\xdf4\xd8\x1d\x83\xf3\xf4\xedn_\xad\xbdt', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x53, 0x1, 0x0, 0x12, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "9100000000000000000000000000fcffffff00", [0x100000, 0x6]}}) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x7) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x30, r1, 0x5bd5b000) 1.536638852s ago: executing program 6 (id=12362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 1.497649393s ago: executing program 4 (id=12363): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r1 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000200)={&(0x7f0000000180)=""/102, 0x66}) (async, rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) syz_usb_disconnect(r0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) close_range(r2, r3, 0x2) (async) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) (async) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) (async, rerun: 32) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) waitid(0x0, r5, 0x0, 0x8, 0x0) (async) wait4(r4, 0x0, 0xa, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_int(r6, &(0x7f0000000d80)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x280000000000) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r8 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r8) (async) socket$pppl2tp(0x18, 0x1, 0x1) bind$xdp(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) (async, rerun: 32) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0, &(0x7f0000000000)) (rerun: 32) 1.497284583s ago: executing program 6 (id=12364): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.441906565s ago: executing program 6 (id=12365): r0 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240e800076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 1.440688455s ago: executing program 6 (id=12366): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x3004c020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) r3 = dup(r0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8ee}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000010}, 0x4) syz_socket_connect_nvme_tcp() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000008, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001e0021002bbd7000000000000200000016000100"], 0x2c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2(&(0x7f0000000280), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r11, r10, &(0x7f0000000480)={0x0, 0x18c2, 0x800, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x43}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x4000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r9, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r5}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r9, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 858.791748ms ago: executing program 1 (id=12370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x35, {0xb, 0xc, 0x1203fffc, 0x7, 0x3, 0x80000205}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x4b, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0x9, "4070f43f"}]}}, 0x0}, 0x0) 661.876543ms ago: executing program 4 (id=12369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f028100400086dd63acca10001000ff000000000000000000000000000000002001000000000000000000000000000167010103", @ANYBLOB="ad460c45c8e7a6"], 0x4e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf2501000000000000000b000000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) 461.741248ms ago: executing program 4 (id=12372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00@\x00', @ANYRES16=r1, @ANYBLOB="01002cbf7000ff00df2501000000000000007f00e1ffff"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 461.442008ms ago: executing program 4 (id=12373): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001140)=@vmx={0x8, 0x0, 0x2080, {0x8000000, 0x808d000, {0x1}, 0x1, 0x4}, {"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", "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"}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x13, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r3, 0x200000000004, 0x2) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc08a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xdb, "", [{{0x9, 0x4, 0x0, 0x6, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd8f, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0) (async) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x1a, 0xc5}, [@processing_unit={0x5, 0x24, 0x8, 0x6, 0x1}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x2, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x28) (async) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1060000000000000002c0c0", @ANYRES64=r4, @ANYRES64=r4, @ANYRES8=r4, @ANYRES32, @ANYRES16=r4, @ANYRESHEX=r4], 0x0}, 0x0) 461.182408ms ago: executing program 3 (id=12374): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 329.927432ms ago: executing program 4 (id=12375): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x6373, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0x2, 0x0, &(0x7f0000001100)={0x2, 0x4e22, @remote}, 0x10) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000180)=""/147, 0x93}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000100)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="100089bd1329b1895ce76e12f2edff40f600b50400010001000000"], 0x10}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x3, 0x25}, 'syz0\x00', 0x2e}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x6) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x8008770b, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff76, &(0x7f00000002c0)="b942") openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='my_tracefs/events/task/task_rename/filter\x00', &(0x7f0000000240), 0x1000) 329.762481ms ago: executing program 3 (id=12376): r0 = socket(0x5, 0x5, 0x6) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)="3e824352e017dabaa8aa3abc0aa1ba608559a384f05b9cb679e7ae05c9e467514be79fefbc18e78d4ba269292d04ce289c13209345c5a7568a3a7f92eb9db10de6d91ccbc49df960dd185ea0fcd402fd2cbb5e14bb8066b0a1a50cd9f6c6b79dce941db47729da89da913cd9bb6275d373a55767eaad8136d0ae7b5806f506aa30ad0bfe807a3a01fe01465290f40a5c9e2d50c6e6f7d9383e64cf94ef988f685789b39df1795d33ad9db7c44ce9d20bb11db0e191db225cf91ab25a354a9965a72ea821d2faa8e9423e7ab43942fc2c65b3d393cf12241059136ea64078af839fdd5f35cdadf15913e7b889bf6fdfe5179232cf7f", 0xf5}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="ab8e7d8988623c883bc84bcb0b38013bc8bd31ec0268b54c869d24f014833e0cc3faa550f74a78da645eb51200f38014366c3471069a4b3110e0e4d69a57ce091df194f9d61d7d53e4d55439aa", 0x4d}], 0x3, 0x0, 0x0, 0x400c080}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x3000000a}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, 0x0, 0x0, 0x734, 0x0, 0x0) 326.318672ms ago: executing program 3 (id=12377): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 314.671372ms ago: executing program 1 (id=12378): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800006b0002010300000000000000000200001028000a8008000140"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40202, 0x105) ioctl$KVM_RUN(r2, 0xae80, 0x0) 300.337002ms ago: executing program 3 (id=12379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x20d3e, 0xa, 0xfffffffffffffffa, 0x4, 0x4000002, 0x20000, 0x1000, 0xfffffffffffffff2, 0x4bfb, 0x40000000004, 0x7ff, 0x2, 0x20005, 0x5, 0x9, 0x100000090], 0x25000, 0xa8657}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xa) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000027c0)='\x00\x00\x03\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xb7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\ntZ\xd1\xcdT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xee\x0f\x00\x00\x00\x00\x00\x004\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x81\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x12\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\x00') 233.210434ms ago: executing program 1 (id=12380): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x2, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x0, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x34, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x31, 0x30, 0x1230a2fae9ecffe3, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 192.763955ms ago: executing program 3 (id=12381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 161.287126ms ago: executing program 1 (id=12382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket(0xc, 0x6, 0x3) recvfrom$inet(r0, &(0x7f0000000000)=""/12, 0xc, 0x720, 0x0, 0x0) 40.310248ms ago: executing program 3 (id=12383): mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000e40)={0xf2, 0x100072}, 0x20) syz_usb_connect$uac2(0x3, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000408205640040000102030109028500030107a009080b0101010520030904000000010120000924010300051500000c240301060004013b25447f09010000010220000904010101010220000905010900046700080825010033fa050009040200000102200009040201010102200010240186050203000000010100000007090582092000020709082501823c040000"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 40.087369ms ago: executing program 1 (id=12384): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x5, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x8, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x81, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x0, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000010000000000000000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=12385): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 79][ T36] audit: type=1400 audit(1787616018.680:28808): avc: denied { create } for pid=21846 comm="syz.1.8548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 503.801737][ T36] audit: type=1400 audit(1787616018.750:28809): avc: denied { create } for pid=21852 comm="syz.1.8551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 503.861096][ T7646] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 504.021066][ T7646] usb 7-1: Using ep0 maxpacket: 16 [ 504.031904][ T7646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.043069][ T7646] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.056410][ T7646] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.065687][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.077987][ T7646] usb 7-1: config 0 descriptor?? [ 504.114994][T21872] netlink: 'syz.1.8559': attribute type 1 has an invalid length. [ 504.291658][ T36] audit: type=1400 audit(1787616019.240:28810): avc: denied { connect } for pid=21837 comm="syz.6.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 504.503688][T21903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8569'. [ 504.515165][ T7646] HID 045e:07da: Invalid code 65791 type 1 [ 504.525814][ T7646] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0016/input/input17 [ 504.539907][ T7646] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 504.717389][ T36] audit: type=1400 audit(1787616019.660:28811): avc: denied { read } for pid=21837 comm="syz.6.8544" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 504.742558][ T36] audit: type=1400 audit(1787616019.660:28812): avc: denied { open } for pid=21837 comm="syz.6.8544" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 505.849907][ T7646] usb 7-1: USB disconnect, device number 48 [ 506.161085][ T7646] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 506.324125][ T7646] usb 7-1: too many configurations: 72, using maximum allowed: 8 [ 506.343120][ T7646] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 506.361068][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.371475][ T7646] usb 7-1: config 0 descriptor?? [ 506.612582][T21977] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 506.620364][T21977] SELinux: failed to load policy [ 506.626086][ T7646] usb 7-1: USB disconnect, device number 49 [ 506.886114][T22022] netlink: 'syz.4.8611': attribute type 2 has an invalid length. [ 506.893942][T22022] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8611'. [ 507.080671][T22036] 9pnet_fd: Insufficient options for proto=fd [ 507.128733][ T36] audit: type=1400 audit(1787616022.070:28813): avc: denied { nlmsg_write } for pid=22037 comm="syz.4.8619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 507.421096][ T7646] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 507.601102][ T7646] usb 7-1: Using ep0 maxpacket: 16 [ 507.612200][ T7646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.624433][ T7646] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.637683][ T7646] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.646945][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.665248][ T7646] usb 7-1: config 0 descriptor?? [ 508.129621][ T36] audit: type=1400 audit(1787616023.070:28814): avc: denied { read append } for pid=22043 comm="syz.6.8623" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 508.155630][ T7646] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 508.163076][ T7646] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 508.170316][ T7646] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 508.177584][ T7646] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 508.184871][ T7646] microsoft 0003:045E:07DA.0017: item fetching failed at offset 33/34 [ 508.193271][ T7646] microsoft 0003:045E:07DA.0017: parse failed [ 508.199383][ T7646] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22 [ 508.968426][ T36] audit: type=1400 audit(1787616023.910:28815): avc: denied { create } for pid=22113 comm="syz.4.8649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 510.010304][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8669'. [ 510.213448][ T46] usb 7-1: USB disconnect, device number 50 [ 510.223622][ T36] audit: type=1400 audit(1787616025.160:28816): avc: denied { unmount } for pid=10370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 510.304583][T22189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8678'. [ 510.604104][T22215] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22215 comm=syz.4.8689 [ 510.619239][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8689'. [ 510.672869][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8690'. [ 510.698765][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8690'. [ 511.029817][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8709'. [ 511.581232][T22297] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22297 comm=syz.4.8725 [ 511.594184][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8725'. [ 511.767536][T22322] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8732'. [ 511.781043][ T36] audit: type=1400 audit(1787616026.720:28817): avc: denied { lock } for pid=22323 comm="syz.3.8737" path="socket:[348237]" dev="sockfs" ino=348237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 511.939034][T22353] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8750'. [ 511.949633][T22353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.164330][T22372] netlink: 4512 bytes leftover after parsing attributes in process `syz.6.8758'. [ 512.200000][T22376] FAULT_INJECTION: forcing a failure. [ 512.200000][T22376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 512.213237][T22376] CPU: 1 UID: 0 PID: 22376 Comm: syz.6.8760 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 512.213275][T22376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.213290][T22376] Call Trace: [ 512.213296][T22376] [ 512.213303][T22376] __dump_stack+0x21/0x30 [ 512.213456][T22376] dump_stack_lvl+0x140/0x1c0 [ 512.213478][T22376] ? __cfi_dump_stack_lvl+0x10/0x10 [ 512.213501][T22376] ? vfs_write+0xbcf/0xfd0 [ 512.213586][T22376] dump_stack+0x19/0x20 [ 512.213608][T22376] should_fail_ex+0x3c2/0x510 [ 512.213679][T22376] should_fail+0xf/0x20 [ 512.213696][T22376] should_fail_usercopy+0x1e/0x30 [ 512.213715][T22376] _copy_from_user+0x20/0xa0 [ 512.213792][T22376] __se_sys_io_uring_setup+0x170/0x2b0 [ 512.213867][T22376] ? __kasan_check_write+0x18/0x20 [ 512.213908][T22376] ? __x64_sys_io_uring_setup+0x80/0x80 [ 512.213932][T22376] ? __kasan_check_read+0x15/0x20 [ 512.213948][T22376] __x64_sys_io_uring_setup+0x5f/0x80 [ 512.213970][T22376] x64_sys_call+0x22c0/0x2ee0 [ 512.213984][T22376] do_syscall_64+0x57/0xf0 [ 512.214050][T22376] ? clear_bhb_loop+0x50/0xa0 [ 512.214089][T22376] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 512.214136][T22376] RIP: 0033:0x7fc8aef9e0d9 [ 512.214151][T22376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.214165][T22376] RSP: 002b:00007fc8ad9e2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 512.214183][T22376] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fc8aef9e0d9 [ 512.214195][T22376] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 512.214206][T22376] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 512.214216][T22376] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 512.214228][T22376] R13: 0000200000000b10 R14: 00007fc8ad9e2fd8 R15: 0000000000000000 [ 512.214240][T22376] [ 512.500798][T22399] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 512.501245][T22398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=22398 comm=syz.3.8768 [ 512.511870][ T36] audit: type=1400 audit(1787616027.450:28818): avc: denied { relabelto } for pid=22396 comm="syz.3.8768" name="cgroup" dev="tmpfs" ino=11823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 512.561948][ T36] audit: type=1400 audit(1787616027.450:28819): avc: denied { associate } for pid=22396 comm="syz.3.8768" name="cgroup" dev="tmpfs" ino=11823 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0" [ 512.871099][ T7646] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 513.022123][ T7646] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.032385][ T7646] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.041421][ T7646] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 513.052992][ T7646] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 513.065423][ T7646] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 513.074525][ T7646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.082582][ T7646] usb 7-1: Product: syz [ 513.086767][ T7646] usb 7-1: Manufacturer: syz [ 513.091429][ T7646] usb 7-1: SerialNumber: syz [ 513.299988][ T7646] usb 7-1: Can't get UAC3 power state for id 11 [ 513.310137][ T7646] usb 7-1: 5:0: failed to get current value for ch 0 (-71) [ 513.320040][ T7646] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 513.333416][ T7646] usb 7-1: USB disconnect, device number 51 [ 514.061081][ T7646] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 514.211545][ T7646] usb 7-1: Using ep0 maxpacket: 16 [ 514.218018][ T7646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.229179][ T7646] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.242361][ T7646] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.251637][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.260592][ T7646] usb 7-1: config 0 descriptor?? [ 514.279078][ T36] audit: type=1400 audit(1787616029.220:28820): avc: denied { create } for pid=22472 comm="syz.4.8801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 514.677184][ T7646] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0018/input/input18 [ 514.694876][ T7646] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 516.822228][ T7646] usb 7-1: USB disconnect, device number 52 [ 516.838850][T22618] __nla_validate_parse: 4 callbacks suppressed [ 516.838871][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8861'. [ 517.981830][T22670] 9pnet_fd: Insufficient options for proto=fd [ 517.987079][ T36] audit: type=1400 audit(1787616032.930:28821): avc: denied { mount } for pid=22668 comm="syz.3.8882" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 518.310038][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8894'. [ 518.441079][ T7646] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 518.489558][ T36] audit: type=1326 audit(1787616033.430:28822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22711 comm="syz.1.8900" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc82159e0d9 code=0x0 [ 518.591529][ T7646] usb 7-1: too many configurations: 72, using maximum allowed: 8 [ 518.605351][ T7646] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 518.614667][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.624004][ T7646] usb 7-1: config 0 descriptor?? [ 518.784220][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8905'. [ 518.833044][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.842369][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.853077][ T311] usb 7-1: USB disconnect, device number 53 [ 520.269116][T22814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=22814 comm=syz.4.8941 [ 521.258041][T22868] input: syz1 as /devices/virtual/input/input19 [ 522.218143][T22912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22912 comm=syz.1.8981 [ 522.231037][T22912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8981'. [ 522.487631][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8986'. [ 522.688191][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8991'. [ 522.771658][T22941] fuse: Unknown parameter 'pèm»¹­' [ 523.243577][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9001'. [ 523.677560][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9011'. [ 523.942379][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9030'. [ 524.401597][ T7646] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 524.568594][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9076'. [ 524.578636][ T7646] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.591107][ T7646] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.604221][ T7646] usb 7-1: config 0 interface 0 has no altsetting 0 [ 524.610885][ T7646] usb 7-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 524.620340][ T7646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.629369][ T7646] usb 7-1: config 0 descriptor?? [ 525.028680][ T36] audit: type=1400 audit(1787616039.970:28823): avc: denied { listen } for pid=23167 comm="syz.3.9099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 525.044922][ T7646] lg-g15 0003:046D:0A07.0019: unknown main item tag 0x0 [ 525.077658][ T7646] lg-g15 0003:046D:0A07.0019: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.6-1/input0 [ 525.193780][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9114'. [ 525.223168][ T36] audit: type=1400 audit(1787616040.170:28824): avc: denied { connect } for pid=23202 comm="syz.4.9116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.246039][ T7646] usb 7-1: USB disconnect, device number 54 [ 525.260326][T23206] netlink: 'syz.1.9117': attribute type 3 has an invalid length. [ 525.281072][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9117'. [ 525.398014][T23222] netlink: 39 bytes leftover after parsing attributes in process `syz.1.9125'. [ 526.471484][ T36] audit: type=1400 audit(1787616041.420:28825): avc: denied { mount } for pid=23356 comm="syz.3.9187" name="/" dev="incremental-fs" ino=12461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 526.518138][ T36] audit: type=1400 audit(1787616041.460:28826): avc: denied { create } for pid=23358 comm="syz.3.9188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.291695][T23405] input: syz1 as /devices/virtual/input/input20 [ 528.956932][T23518] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23518 comm=syz.1.9258 [ 528.970573][T23518] __nla_validate_parse: 5 callbacks suppressed [ 528.970593][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9258'. [ 529.454820][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9266'. [ 529.478138][T23542] input: syz1 as /devices/virtual/input/input21 [ 529.984208][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9276'. [ 530.446920][T23597] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.9286'. [ 531.709047][T23665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9314'. [ 535.070019][ T36] audit: type=1400 audit(1787616051.016:28827): avc: denied { map } for pid=23892 comm="syz.4.9411" path="socket:[376637]" dev="sockfs" ino=376637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 535.344064][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9428'. [ 535.589778][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9437'. [ 536.057501][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9446'. [ 536.355522][T24006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9456'. [ 536.483058][T24017] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.490390][T24017] netlink: 'syz.3.9461': attribute type 1 has an invalid length. [ 536.514186][T24017] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9461'. [ 536.555887][T24025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9465'. [ 536.798101][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9477'. [ 536.891082][ T7653] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 536.923301][T24069] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9484'. [ 536.998969][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9489'. [ 537.042157][ T7653] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.055933][ T7653] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.069714][T24087] ip6tnl0: mtu greater than device maximum [ 537.072163][ T7653] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.085571][ T7653] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.098719][ T7653] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.107980][ T7653] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.117375][ T7653] usb 7-1: config 0 descriptor?? [ 537.316362][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9502'. [ 537.531483][ T7653] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 537.544490][ T7653] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 537.690211][T24152] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 537.709077][T24154] overlayfs: failed to resolve './bus': -2 [ 537.716384][T24154] fuse: Unknown parameter '000000000000000000000050x0000000000000005' [ 537.836622][T24155] netlink: 'syz.6.9471': attribute type 27 has an invalid length. [ 537.872097][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.879372][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.958298][T24172] usb 7-1: USB disconnect, device number 55 [ 538.641759][T24241] input: syz1 as /devices/virtual/input/input23 [ 538.909046][T24286] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24286 comm=syz.4.9575 [ 539.084952][T24311] syzkaller1: entered allmulticast mode [ 539.634678][T24381] syzkaller1: entered allmulticast mode [ 539.813616][T24397] netlink: 'syz.1.9622': attribute type 4 has an invalid length. [ 539.841269][T24397] netlink: 'syz.1.9622': attribute type 4 has an invalid length. [ 540.636052][T24420] overlayfs: failed to clone upperpath [ 540.723365][ T36] audit: type=1400 audit(1787616056.666:28828): avc: denied { shutdown } for pid=24423 comm="syz.4.9633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 540.974627][T24447] fuse: Bad value for 'fd' [ 541.712184][T24500] FAULT_INJECTION: forcing a failure. [ 541.712184][T24500] name failslab, interval 1, probability 0, space 0, times 0 [ 541.731323][T24500] CPU: 0 UID: 0 PID: 24500 Comm: syz.6.9666 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 541.731361][T24500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.731375][T24500] Call Trace: [ 541.731383][T24500] [ 541.731391][T24500] __dump_stack+0x21/0x30 [ 541.731427][T24500] dump_stack_lvl+0x140/0x1c0 [ 541.731458][T24500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 541.731489][T24500] ? selinux_file_permission+0x318/0xb60 [ 541.731609][T24500] dump_stack+0x19/0x20 [ 541.731640][T24500] should_fail_ex+0x3c2/0x510 [ 541.731668][T24500] should_failslab+0xac/0x100 [ 541.731703][T24500] __kmalloc_cache_noprof+0x41/0x470 [ 541.731760][T24500] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 541.731784][T24500] io_ring_ctx_alloc+0x61/0x1dc0 [ 541.731814][T24500] ? __cfi_vfs_write+0x10/0x10 [ 541.731839][T24500] io_uring_create+0x2e0/0x13f0 [ 541.731862][T24500] ? __kasan_check_write+0x18/0x20 [ 541.731887][T24500] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 541.731920][T24500] ? __kasan_check_write+0x18/0x20 [ 541.731943][T24500] ? __x64_sys_io_uring_setup+0x80/0x80 [ 541.731978][T24500] ? __kasan_check_read+0x15/0x20 [ 541.732001][T24500] __x64_sys_io_uring_setup+0x5f/0x80 [ 541.732033][T24500] x64_sys_call+0x22c0/0x2ee0 [ 541.732053][T24500] do_syscall_64+0x57/0xf0 [ 541.732083][T24500] ? clear_bhb_loop+0x50/0xa0 [ 541.732105][T24500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 541.732141][T24500] RIP: 0033:0x7fc8aef9e0d9 [ 541.732160][T24500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.732179][T24500] RSP: 002b:00007fc8ad9e2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 541.732203][T24500] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fc8aef9e0d9 [ 541.732220][T24500] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 541.732234][T24500] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 541.732249][T24500] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 541.732265][T24500] R13: 0000200000000b10 R14: 00007fc8ad9e2fd8 R15: 0000000000000000 [ 541.732284][T24500] [ 542.441019][ T36] audit: type=1400 audit(1787616058.386:28829): avc: denied { ioctl } for pid=24516 comm="syz.6.9672" path="net:[4026532313]" dev="nsfs" ino=4026532313 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 543.330859][ T36] audit: type=1326 audit(1787616059.276:28830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24575 comm="syz.1.9691" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc82159e0d9 code=0x0 [ 543.766436][T24598] __nla_validate_parse: 4 callbacks suppressed [ 543.766451][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9699'. [ 544.215998][ T36] audit: type=1400 audit(1787616060.166:28831): avc: denied { mounton } for pid=24623 comm="syz.1.9709" path="/config" dev="configfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 544.282721][ T36] audit: type=1400 audit(1787616060.196:28832): avc: denied { mount } for pid=24629 comm="syz.4.9711" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 544.657892][T24668] overlayfs: cannot append lower layer [ 544.747040][T24674] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9730'. [ 544.991062][T24169] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 545.152310][T24169] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.162632][T24169] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.173889][T24169] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 187, using maximum allowed: 30 [ 545.185251][T24169] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 545.200397][T24169] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.209760][T24169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.217977][T24169] usb 7-1: Product: syz [ 545.222403][T24169] usb 7-1: Manufacturer: syz [ 545.227081][T24169] usb 7-1: SerialNumber: syz [ 545.234209][T24169] cdc_mbim 7-1:1.0: skipping garbage [ 546.238314][T24169] cdc_mbim 7-1:1.0: bind() failure [ 546.252302][T24169] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 546.271044][T24169] cdc_ncm 7-1:1.1: bind() failure [ 546.449625][T24674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24674 comm=syz.6.9730 [ 546.471498][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9730'. [ 546.491742][ T312] usb 7-1: USB disconnect, device number 56 [ 547.601114][T24169] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 547.725544][T24829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9796'. [ 547.741537][T24169] usb 7-1: device descriptor read/64, error -71 [ 547.774037][T24829] team_slave_1: entered promiscuous mode [ 547.780184][T24829] team_slave_1: entered allmulticast mode [ 547.805926][T24833] overlayfs: failed to clone upperpath [ 548.001063][T24169] usb 7-1: device descriptor read/64, error -71 [ 548.048672][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9801'. [ 548.241079][T24169] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 548.371057][T24169] usb 7-1: device descriptor read/64, error -71 [ 548.611095][T24169] usb 7-1: device descriptor read/64, error -71 [ 548.719354][T24865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9812'. [ 548.721488][T24169] usb usb7-port1: attempt power cycle [ 548.728722][T24865] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9812'. [ 548.742873][T24865] netlink: 'syz.4.9812': attribute type 6 has an invalid length. [ 548.750736][T24865] netlink: 'syz.4.9812': attribute type 5 has an invalid length. [ 548.758566][T24865] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9812'. [ 548.916064][T24885] tmpfs: Unknown parameter '00000000000000000000000' [ 549.071055][T24169] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 549.092131][T24169] usb 7-1: device descriptor read/8, error -71 [ 549.232167][T24169] usb 7-1: device descriptor read/8, error -71 [ 549.501065][T24169] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 549.522128][T24169] usb 7-1: device descriptor read/8, error -71 [ 549.662107][T24169] usb 7-1: device descriptor read/8, error -71 [ 549.771182][T24169] usb usb7-port1: unable to enumerate USB device [ 549.981873][T24925] sit0: entered promiscuous mode [ 549.990653][T24925] netlink: 'syz.4.9839': attribute type 1 has an invalid length. [ 549.999607][T24925] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9839'. [ 550.433072][T24948] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9849'. [ 550.569974][ T36] audit: type=1400 audit(1787616066.516:28833): avc: denied { write } for pid=24958 comm="syz.6.9854" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 550.594547][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.605381][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.621081][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.637560][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.648684][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.659695][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.670387][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.681231][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.691946][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.702385][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.714866][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.725350][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.770053][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.789715][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.811051][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.829604][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.855072][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.873717][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.884255][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.894647][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.919585][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.934903][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.945492][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.977422][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 550.995355][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.012968][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.023567][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.037404][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.047948][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.067698][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.079287][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.089895][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.100461][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.111282][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.131069][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.151087][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.173349][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.192997][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.208193][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.218968][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.229705][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.241145][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.260389][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.271238][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.282024][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.292969][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.303622][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.314678][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.325838][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.336306][T25005] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9874'. [ 551.345810][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.356984][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.367752][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.378362][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.388961][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.399635][T24961] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 551.484044][T25020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25020 comm=syz.4.9881 [ 551.497589][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9881'. [ 551.947133][T25065] incfs: Error accessing: ./file4. [ 551.952439][T25065] incfs: mount failed -20 [ 552.401418][ T312] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 552.409562][ T312] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.490177][T25100] netlink: 'syz.3.9916': attribute type 4 has an invalid length. [ 552.500200][T25100] netlink: 'syz.3.9916': attribute type 4 has an invalid length. [ 552.544190][T25100] IPv6: syztnl0: Disabled Multicast RS [ 552.630469][T25114] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25114 comm=syz.3.9920 [ 552.671259][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9920'. [ 552.923826][T25155] overlayfs: failed to clone upperpath [ 553.173485][T25175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9949'. [ 553.183549][T25175] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9949'. [ 553.281078][T25192] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9956'. [ 554.350415][ T36] audit: type=1400 audit(1787616070.296:28834): avc: denied { ioctl } for pid=25257 comm="syz.1.9982" path="socket:[400794]" dev="sockfs" ino=400794 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 554.668908][T25312] overlayfs: failed to clone upperpath [ 554.991051][T24172] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 555.142119][T24172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 555.152016][T24172] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 555.161990][T24172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 555.172116][T24172] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 555.183731][T24172] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 555.197094][T24172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.205673][T24172] usb 7-1: Product: syz [ 555.210312][T24172] usb 7-1: Manufacturer: syz [ 555.215261][T24172] usb 7-1: SerialNumber: syz [ 555.221771][T24172] usb 7-1: config 0 descriptor?? [ 555.229895][T24172] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 555.324729][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10025'. [ 555.433916][T24172] scsi host1: usb-storage 7-1:0.0 [ 555.449140][T24172] usb 7-1: USB disconnect, device number 61 [ 555.703879][T25384] netlink: 316 bytes leftover after parsing attributes in process `syz.4.10033'. [ 556.449784][T25423] overlayfs: failed to clone upperpath [ 556.804899][T25441] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 557.101351][T24172] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 557.263160][T24172] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.272956][T24172] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 557.284024][T24172] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 557.293823][T24172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.301892][T24172] usb 7-1: Product: syz [ 557.306088][T24172] usb 7-1: Manufacturer: syz [ 557.310682][T24172] usb 7-1: SerialNumber: syz [ 557.317614][T24172] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 557.327100][T24172] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 557.327100][T24172] Please send a copy of this message to and [ 557.716989][ T36] audit: type=1326 audit(1787616073.666:28835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.744219][ T36] audit: type=1326 audit(1787616073.666:28836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.770663][ T36] audit: type=1326 audit(1787616073.696:28837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.804809][ T36] audit: type=1326 audit(1787616073.696:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.830774][ T36] audit: type=1326 audit(1787616073.696:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.856862][ T36] audit: type=1326 audit(1787616073.696:28840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.882601][ T36] audit: type=1326 audit(1787616073.696:28841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.908403][ T36] audit: type=1326 audit(1787616073.696:28842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.934087][ T36] audit: type=1326 audit(1787616073.696:28843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 557.960319][ T36] audit: type=1326 audit(1787616073.696:28844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25495 comm="syz.4.10083" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff6639e0d9 code=0x7ffc0000 [ 558.111770][T24172] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 558.121127][T24172] usb 7-1: USB disconnect, device number 62 [ 558.985441][T25526] overlayfs: failed to clone upperpath [ 559.066704][T25538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=25538 comm=syz.3.10100 [ 559.568903][T25568] overlayfs: failed to clone upperpath [ 559.780802][T25601] overlayfs: failed to clone upperpath [ 559.862012][T25619] netlink: 'syz.4.10128': attribute type 25 has an invalid length. [ 560.604170][T25655] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25884 sclass=netlink_xfrm_socket pid=25655 comm=syz.3.10142 [ 563.836767][T25806] fuse: Unknown parameter 'root]ode' [ 564.014698][ T36] kauditd_printk_skb: 4479 callbacks suppressed [ 564.014719][ T36] audit: type=1326 audit(1787616079.966:33324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.1.10208" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc82159e0d9 code=0x0 [ 564.099175][T25823] tipc: Enabling of bearer rejected, already enabled [ 564.108529][T25823] tipc: Disabling bearer [ 564.114850][T25823] netlink: 'syz.1.10212': attribute type 63 has an invalid length. [ 564.122852][T25823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10212'. [ 564.381058][T24169] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 564.511067][T24169] usb 7-1: device descriptor read/64, error -71 [ 564.751099][T24169] usb 7-1: device descriptor read/64, error -71 [ 564.933306][ T36] audit: type=1326 audit(1787616080.886:33325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.4.10213" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x7fc00000 [ 564.961110][ T36] audit: type=1326 audit(1787616080.886:33326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz.4.10213" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff6639e0d9 code=0x7fc00000 [ 564.991053][T24169] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 565.121081][T24169] usb 7-1: device descriptor read/64, error -71 [ 565.361067][T24169] usb 7-1: device descriptor read/64, error -71 [ 565.471225][T24169] usb usb7-port1: attempt power cycle [ 565.558268][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10233'. [ 565.568054][T25876] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10233'. [ 565.811171][T24169] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 565.832086][T24169] usb 7-1: device descriptor read/8, error -71 [ 565.962230][T24169] usb 7-1: device descriptor read/8, error -71 [ 566.194661][T25902] overlayfs: failed to resolve './cgroup': -2 [ 566.201176][T24169] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 566.222117][T24169] usb 7-1: device descriptor read/8, error -71 [ 566.352131][T24169] usb 7-1: device descriptor read/8, error -71 [ 566.461161][T24169] usb usb7-port1: unable to enumerate USB device [ 567.333019][T25962] netlink: 'syz.3.10267': attribute type 1 has an invalid length. [ 567.341121][T25962] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10267'. [ 567.482043][T25966] overlayfs: failed to clone upperpath [ 567.582221][T25973] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25973 comm=syz.4.10272 [ 567.596467][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10272'. [ 567.643326][ T36] audit: type=1400 audit(1787616083.596:33327): avc: denied { mounton } for pid=25976 comm="syz.4.10274" path="/sys/dev" dev="proc" ino=420573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_dev_t tclass=dir permissive=1 [ 567.801941][T25986] overlayfs: failed to clone upperpath [ 568.147496][T26013] overlayfs: failed to clone upperpath [ 568.176024][T26015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10290'. [ 568.186104][T26015] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10290'. [ 568.346546][T26036] overlayfs: failed to resolve './bus': -2 [ 568.378213][T26038] netlink: 200 bytes leftover after parsing attributes in process `syz.1.10300'. [ 568.388018][T26038] tc_dump_action: action bad kind [ 568.671242][T26074] 9p: Unknown access argument 18446744073709551615: -34 [ 568.727128][T26084] netlink: 200 bytes leftover after parsing attributes in process `syz.4.10321'. [ 568.776741][T26090] overlayfs: failed to resolve './bus': -2 [ 568.888570][T26104] netlink: 200 bytes leftover after parsing attributes in process `syz.1.10330'. [ 569.015829][T26117] 9p: Unknown uid 00000000004294967295 [ 569.830244][T26177] overlayfs: failed to clone upperpath [ 569.906611][T26184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26184 comm=syz.4.10365 [ 570.058604][T26191] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10368'. [ 570.497237][T26202] overlayfs: failed to clone upperpath [ 570.596404][T26211] netlink: 'syz.4.10375': attribute type 21 has an invalid length. [ 570.622837][T26211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49938 sclass=netlink_route_socket pid=26211 comm=syz.4.10375 [ 571.791070][T24166] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 571.941084][T24166] usb 7-1: Using ep0 maxpacket: 32 [ 571.948098][T24166] usb 7-1: unable to get BOS descriptor or descriptor too short [ 571.956926][T24166] usb 7-1: config 2 has an invalid interface number: 171 but max is 0 [ 571.965380][T24166] usb 7-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 571.974983][T24166] usb 7-1: config 2 has no interface number 1 [ 571.981270][T24166] usb 7-1: too many endpoints for config 2 interface 0 altsetting 51: 64, using maximum allowed: 30 [ 571.992402][T24166] usb 7-1: config 2 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 572.005934][T24166] usb 7-1: config 2 interface 171 has no altsetting 0 [ 572.012933][T24166] usb 7-1: config 2 interface 0 has no altsetting 0 [ 572.021250][T24166] usb 7-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0 [ 572.030498][T24166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.038754][T24166] usb 7-1: Product: syz [ 572.043214][T24166] usb 7-1: Manufacturer: syz [ 572.047842][T24166] usb 7-1: SerialNumber: syz [ 572.150233][T26269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10398'. [ 572.258738][T24166] usb 7-1: bad CDC descriptors [ 572.271734][T24166] ftdi_sio 7-1:2.171: FTDI USB Serial Device converter detected [ 572.280233][T24166] ftdi_sio ttyUSB0: unknown device type: 0xd2c0 [ 572.288672][T24166] ftdi_sio 7-1:2.0: FTDI USB Serial Device converter detected [ 572.296833][T24166] ftdi_sio ttyUSB1: unknown device type: 0xd2c0 [ 572.311818][T24166] usb 7-1: USB disconnect, device number 67 [ 572.318535][T24166] ftdi_sio 7-1:2.171: device disconnected [ 572.325459][T24166] ftdi_sio 7-1:2.0: device disconnected [ 572.491691][ T36] audit: type=1400 audit(1787616088.446:33328): avc: denied { setattr } for pid=26284 comm="syz.1.10405" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=421723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 572.833576][T26310] overlayfs: conflicting options: nfs_export=on,index=off [ 572.865993][T26312] overlayfs: failed to clone upperpath [ 573.628965][T26332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=26332 comm=syz.4.10425 [ 573.671553][T26332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10425'. [ 573.682065][T26332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4118 sclass=netlink_xfrm_socket pid=26332 comm=syz.4.10425 [ 573.722373][T26334] overlayfs: failed to clone upperpath [ 573.907340][T26353] overlayfs: failed to clone upperpath [ 573.968834][T26362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10439'. [ 573.978485][T26362] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10439'. [ 574.061287][T26374] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 574.120918][T26380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10448'. [ 574.133085][T26380] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10448'. [ 574.241207][ T36] audit: type=1326 audit(1787616090.196:33329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8aef9e0d9 code=0x7ffc0000 [ 574.272336][ T36] audit: type=1326 audit(1787616090.216:33330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8aef5e90e code=0x7ffc0000 [ 574.298315][ T36] audit: type=1326 audit(1787616090.216:33331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.324384][ T36] audit: type=1326 audit(1787616090.216:33332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.351725][ T36] audit: type=1326 audit(1787616090.216:33333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.379116][ T36] audit: type=1326 audit(1787616090.216:33334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.423668][ T36] audit: type=1326 audit(1787616090.326:33335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.450222][ T36] audit: type=1326 audit(1787616090.396:33336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.501042][T24166] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 574.509049][ T36] audit: type=1326 audit(1787616090.456:33337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26394 comm="syz.6.10455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8aef9dd6b code=0x7ffc0000 [ 574.681021][T24166] usb 7-1: Using ep0 maxpacket: 32 [ 574.689466][T24166] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.700049][T24166] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 574.710252][T24166] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 574.721644][T24166] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 574.736982][T24166] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 574.746318][T24166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.754981][T24166] usb 7-1: Product: syz [ 574.759345][T24166] usb 7-1: Manufacturer: syz [ 574.764236][T24166] usb 7-1: SerialNumber: syz [ 574.775160][T26395] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 574.988525][T24166] usb 7-1: MIDIStreaming interface descriptor not found [ 575.001252][T24166] usb 7-1: USB disconnect, device number 68 [ 575.107568][T26451] netlink: 608 bytes leftover after parsing attributes in process `syz.3.10479'. [ 575.911034][ T312] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 576.014240][T26548] netlink: 'syz.4.10518': attribute type 22 has an invalid length. [ 576.092098][ T312] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.112587][ T312] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.129977][ T312] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 576.139177][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.150531][ T312] usb 7-1: Product: syz [ 576.162027][ T312] usb 7-1: Manufacturer: syz [ 576.166707][ T312] usb 7-1: SerialNumber: syz [ 576.390264][ T312] usb 7-1: unit 5 not found! [ 576.397304][ T312] usb 7-1: unit 0 not found! [ 576.426833][ T312] usb 7-1: USB disconnect, device number 69 [ 576.731890][T26608] overlayfs: failed to clone upperpath [ 576.738572][T26608] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 576.800122][T26618] tipc: Enabling of bearer rejected, already enabled [ 576.808819][T26618] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10545'. [ 576.819912][T26618] tipc: Bearer : already 2 bearers with priority 10 [ 576.827652][T26618] tipc: Bearer : trying with adjusted priority [ 576.835070][T26618] tipc: Enabling of bearer rejected, failed to enable media [ 577.839113][T26698] tipc: Enabling of bearer rejected, failed to enable media [ 578.019261][T26706] 9pnet: Unknown protocol version OÓ°…%Âôã˜a 1VrÓ [ 578.947156][T26737] fuse: Bad value for 'max_read' [ 579.111824][T26761] netlink: 'syz.3.10604': attribute type 16 has an invalid length. [ 579.119951][T26761] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10604'. [ 579.451088][T24166] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 579.510255][T26795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10621'. [ 579.519561][T26795] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10621'. [ 579.554278][T26799] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10623'. [ 579.601341][T24166] usb 7-1: Using ep0 maxpacket: 32 [ 579.608014][T24166] usb 7-1: unable to get BOS descriptor or descriptor too short [ 579.616687][T24166] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.627012][T24166] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.637942][T24166] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 579.647707][T24166] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 579.662230][T24166] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 579.671474][T24166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.679626][T24166] usb 7-1: Product: syz [ 579.683852][T24166] usb 7-1: Manufacturer: syz [ 579.688466][T24166] usb 7-1: SerialNumber: syz [ 579.695461][T26775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 579.907022][T24166] usb 7-1: MIDIStreaming interface descriptor not found [ 579.916843][T24166] usb 7-1: USB disconnect, device number 70 [ 579.927716][T21397] udevd[21397]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 580.382703][T26819] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26819 comm=syz.3.10633 [ 580.395590][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10633'. [ 580.425735][T26823] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10635'. [ 580.435058][T26823] netlink: 240 bytes leftover after parsing attributes in process `syz.6.10635'. [ 580.701058][T24172] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 580.851064][T24172] usb 7-1: Using ep0 maxpacket: 16 [ 580.857420][T24172] usb 7-1: config 4 has an invalid interface number: 51 but max is 0 [ 580.865775][T24172] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 580.876080][T24172] usb 7-1: config 4 has no interface number 0 [ 580.882271][T24172] usb 7-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.895313][T24172] usb 7-1: config 4 interface 51 has no altsetting 0 [ 580.903395][T24172] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 580.912510][T24172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.920514][T24172] usb 7-1: Product: syz [ 580.924747][T24172] usb 7-1: Manufacturer: syz [ 580.929470][T24172] usb 7-1: SerialNumber: syz [ 580.936425][T24172] cdc_eem 7-1:4.51: probe with driver cdc_eem failed with error -22 [ 581.051503][T26844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10645'. [ 581.060921][T26844] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10645'. [ 581.095611][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 581.095632][ T36] audit: type=1400 audit(1787616097.046:33365): avc: denied { create } for pid=26847 comm="syz.3.10647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 581.137299][T24167] usb 7-1: USB disconnect, device number 71 [ 581.742797][T26863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26863 comm=syz.1.10653 [ 581.761309][T26863] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10653'. [ 581.777470][T26863] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10653'. [ 581.855454][T26867] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10654'. [ 581.864861][T26867] netlink: 240 bytes leftover after parsing attributes in process `syz.6.10654'. [ 581.901114][ T36] audit: type=1400 audit(1787616097.846:33366): avc: denied { write } for pid=26870 comm="syz.6.10656" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 581.924351][ T36] audit: type=1400 audit(1787616097.876:33367): avc: denied { map } for pid=26870 comm="syz.6.10656" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 581.947744][ T36] audit: type=1400 audit(1787616097.876:33368): avc: denied { ioctl } for pid=26870 comm="syz.6.10656" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 582.231060][ T312] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 582.324864][T26886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10663'. [ 582.381092][ T312] usb 7-1: Using ep0 maxpacket: 16 [ 582.391796][ T312] usb 7-1: config 4 has an invalid interface number: 51 but max is 0 [ 582.399933][ T312] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 582.421037][ T312] usb 7-1: config 4 has no interface number 0 [ 582.427180][ T312] usb 7-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.450084][ T312] usb 7-1: config 4 interface 51 has no altsetting 0 [ 582.458398][ T312] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 582.467581][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.475881][ T312] usb 7-1: Product: syz [ 582.480112][ T312] usb 7-1: Manufacturer: syz [ 582.484951][ T312] usb 7-1: SerialNumber: syz [ 582.491583][ T312] cdc_eem 7-1:4.51: probe with driver cdc_eem failed with error -22 [ 582.693093][ T312] usb 7-1: USB disconnect, device number 72 [ 582.836959][T26927] overlayfs: failed to clone upperpath [ 583.356508][T26972] syzkaller1: entered promiscuous mode [ 583.362099][T26972] syzkaller1: entered allmulticast mode [ 583.570075][T26993] FAULT_INJECTION: forcing a failure. [ 583.570075][T26993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.583311][T26993] CPU: 1 UID: 0 PID: 26993 Comm: syz.6.10709 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 583.583348][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.583364][T26993] Call Trace: [ 583.583372][T26993] [ 583.583381][T26993] __dump_stack+0x21/0x30 [ 583.583423][T26993] dump_stack_lvl+0x140/0x1c0 [ 583.583463][T26993] ? __cfi_dump_stack_lvl+0x10/0x10 [ 583.583496][T26993] ? _parse_integer+0x2e/0x40 [ 583.583523][T26993] ? kstrtoull+0x13b/0x1e0 [ 583.583547][T26993] dump_stack+0x19/0x20 [ 583.583577][T26993] should_fail_ex+0x3c2/0x510 [ 583.583605][T26993] should_fail+0xf/0x20 [ 583.583630][T26993] should_fail_usercopy+0x1e/0x30 [ 583.583658][T26993] _copy_from_user+0x20/0xa0 [ 583.583690][T26993] ___sys_sendmsg+0x1c7/0x370 [ 583.583894][T26993] ? __sys_sendmsg+0x2a0/0x2a0 [ 583.583923][T26993] ? proc_fail_nth_write+0x184/0x220 [ 583.584032][T26993] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 583.584071][T26993] ? __fget_files+0x2bc/0x330 [ 583.584132][T26993] __x64_sys_sendmsg+0x206/0x2e0 [ 583.584161][T26993] ? fput+0x1a4/0x230 [ 583.584216][T26993] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 583.584245][T26993] ? ksys_write+0x1f3/0x260 [ 583.584271][T26993] ? __kasan_check_read+0x15/0x20 [ 583.584297][T26993] x64_sys_call+0x2a4c/0x2ee0 [ 583.584320][T26993] do_syscall_64+0x57/0xf0 [ 583.584352][T26993] ? clear_bhb_loop+0x50/0xa0 [ 583.584376][T26993] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 583.584413][T26993] RIP: 0033:0x7fc8aef9e0d9 [ 583.584439][T26993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.584460][T26993] RSP: 002b:00007fc8ad9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.584485][T26993] RAX: ffffffffffffffda RBX: 00007fc8af225fa0 RCX: 00007fc8aef9e0d9 [ 583.584504][T26993] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 583.584520][T26993] RBP: 00007fc8ad9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 583.584535][T26993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.584550][T26993] R13: 00007fc8af226038 R14: 00007fc8af225fa0 R15: 00007fffeed8d6b8 [ 583.584571][T26993] [ 584.162363][T27019] kvm: pic: non byte write [ 584.401064][T24166] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 584.552254][T24166] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 584.562644][T24166] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.576482][T24166] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 584.585591][T24166] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.593621][T24166] usb 7-1: Manufacturer: syz [ 584.601131][T24166] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 584.822569][T27047] overlayfs: failed to clone upperpath [ 584.839904][ T36] audit: type=1400 audit(1787616100.786:33369): avc: denied { shutdown } for pid=27048 comm="syz.3.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 584.912333][ T36] audit: type=1400 audit(1787616100.866:33370): avc: denied { watch watch_reads } for pid=27018 comm="syz.6.10720" path="/913/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 584.926126][ T312] usb 7-1: USB disconnect, device number 73 [ 585.493158][T27055] 9pnet_fd: Insufficient options for proto=fd [ 586.574924][T27143] overlayfs: failed to clone upperpath [ 586.639343][T27151] __nla_validate_parse: 9 callbacks suppressed [ 586.639366][T27151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10775'. [ 586.655057][T27151] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10775'. [ 586.947573][T27157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10778'. [ 587.131383][T27171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10784'. [ 587.151434][T27171] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10784'. [ 587.778592][T27185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10790'. [ 587.864110][T27191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10793'. [ 587.881538][T27191] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10793'. [ 587.935188][T27197] overlayfs: failed to clone upperpath [ 588.005416][T27203] sda1: Can't mount, would change RO state [ 588.077112][ T36] audit: type=1400 audit(1787616104.026:33371): avc: denied { read } for pid=27205 comm="syz.6.10800" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 588.614617][T27240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10812'. [ 588.641242][T27240] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10812'. [ 589.181412][ T36] audit: type=1326 audit(1787616105.136:33372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27258 comm="syz.4.10821" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff6639e0d9 code=0x0 [ 589.937662][T27314] netlink: 'syz.4.10843': attribute type 27 has an invalid length. [ 591.403740][T27383] overlayfs: failed to clone upperpath [ 591.726713][T27424] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27424 comm=syz.1.10895 [ 592.910931][T27504] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27504 comm=syz.1.10930 [ 592.923947][T27504] __nla_validate_parse: 6 callbacks suppressed [ 592.923967][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10930'. [ 593.025910][T27521] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27521 comm=syz.4.10938 [ 593.040221][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10938'. [ 593.349303][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10967'. [ 594.045293][T27637] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 594.078372][T27646] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10994'. [ 594.092043][T27646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.720820][T27674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11005'. [ 594.730751][T27674] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11005'. [ 595.767457][ T36] audit: type=1400 audit(1787616111.716:33373): avc: denied { getopt } for pid=27761 comm="syz.3.11045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 596.245503][T27773] overlayfs: missing 'lowerdir' [ 596.628285][T27812] overlayfs: missing 'lowerdir' [ 596.676788][ T36] audit: type=1400 audit(1787616112.626:33374): avc: denied { map } for pid=27815 comm="syz.6.11067" path="/959/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 596.885133][T27847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11081'. [ 597.916621][T27930] overlayfs: missing 'lowerdir' [ 598.145640][T27950] overlayfs: missing 'lowerdir' [ 598.634584][T27968] overlayfs: missing 'lowerdir' [ 598.775630][T27978] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=27978 comm=syz.1.11142 [ 599.525017][T28024] futex_wake_op: syz.4.11163 tries to shift op by 144; fix this program [ 600.222696][ T36] audit: type=1400 audit(1787616116.176:33375): avc: denied { create } for pid=28091 comm="syz.3.11192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 600.631615][ T36] audit: type=1400 audit(1787616116.586:33376): avc: denied { create } for pid=28135 comm="syz.4.11207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 600.920638][ T36] audit: type=1107 audit(1787616116.866:33377): pid=28159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='פø<ú˜ÖVîtét‹|›S:€Ã<ÐWV(³¸ó"îýK4¨<®(.+Bè>k2ßEVéÆð©Zm©˜Í¹Åm«–ZO Nk]&\¬«Dt÷íBùvg³åä&û´ò㱚ÜË`¥0Áørñ2r¯yÈÈ'‹Ø”L„&ûgã ¶ýÎÚÌh/©äý¹¸ˆº"YñQõßG(‚~þÕD‡žkGÚ¥¯,“±çZr~Cgõð^À‘ŸívúGä&‡ fÁÚ¸Ó‘sÃûG!ÿ§˜)®¨Xð€d§/_Nôÿ¤!X)ùÂrÊ˨elú¨i¾”ö' [ 600.956387][ T36] audit: type=1400 audit(1787616116.866:33378): avc: denied { accept } for pid=28159 comm="syz.4.11217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 601.286040][T28196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11230'. [ 601.295537][T28196] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11230'. [ 601.455245][T28207] overlayfs: missing 'lowerdir' [ 601.901105][T28218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11239'. [ 601.931274][T28218] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11239'. [ 601.981598][T28228] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 601.990625][T28228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 602.555484][T28251] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.564372][T28251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 602.868671][T28273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.877527][T28273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.573212][ T36] audit: type=1400 audit(1787616119.526:33379): avc: denied { accept } for pid=28289 comm="syz.1.11268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 603.638019][ T36] audit: type=1400 audit(1787616119.586:33380): avc: denied { getopt } for pid=28295 comm="syz.1.11271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.116183][T28334] FAULT_INJECTION: forcing a failure. [ 604.116183][T28334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.129330][T28334] CPU: 0 UID: 0 PID: 28334 Comm: syz.6.11288 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 604.129367][T28334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.129382][T28334] Call Trace: [ 604.129389][T28334] [ 604.129399][T28334] __dump_stack+0x21/0x30 [ 604.129438][T28334] dump_stack_lvl+0x140/0x1c0 [ 604.129472][T28334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 604.129505][T28334] ? vfs_write+0xbcf/0xfd0 [ 604.129532][T28334] dump_stack+0x19/0x20 [ 604.129562][T28334] should_fail_ex+0x3c2/0x510 [ 604.129591][T28334] should_fail+0xf/0x20 [ 604.129616][T28334] should_fail_usercopy+0x1e/0x30 [ 604.129644][T28334] _copy_from_user+0x20/0xa0 [ 604.129677][T28334] __se_sys_io_uring_setup+0x170/0x2b0 [ 604.129714][T28334] ? __kasan_check_write+0x18/0x20 [ 604.129739][T28334] ? __x64_sys_io_uring_setup+0x80/0x80 [ 604.129775][T28334] ? __kasan_check_read+0x15/0x20 [ 604.129799][T28334] __x64_sys_io_uring_setup+0x5f/0x80 [ 604.129832][T28334] x64_sys_call+0x22c0/0x2ee0 [ 604.129855][T28334] do_syscall_64+0x57/0xf0 [ 604.129886][T28334] ? clear_bhb_loop+0x50/0xa0 [ 604.129911][T28334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 604.129947][T28334] RIP: 0033:0x7fc8aef9e0d9 [ 604.129968][T28334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.129988][T28334] RSP: 002b:00007fc8ad9e2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 604.130014][T28334] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fc8aef9e0d9 [ 604.130033][T28334] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 604.130050][T28334] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 604.130067][T28334] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 604.130102][T28334] R13: 0000200000000b10 R14: 00007fc8ad9e2fd8 R15: 0000000000000000 [ 604.130122][T28334] [ 604.599922][T28369] overlayfs: failed to clone upperpath [ 604.751493][T28396] overlayfs: failed to clone upperpath [ 605.731345][T28435] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28435 comm=syz.3.11333 [ 605.757046][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11333'. [ 605.918718][T28460] overlayfs: failed to clone upperpath [ 605.942352][T28462] overlayfs: missing 'lowerdir' [ 606.573362][T28489] overlayfs: missing 'lowerdir' [ 606.878873][T28509] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 606.894253][T28509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.052079][T28529] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28529 comm=syz.3.11372 [ 607.081311][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11372'. [ 607.119423][T28533] tmpfs: Unknown parameter 'n¸hÕ|' [ 607.125709][T28533] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 607.135905][ T36] audit: type=1400 audit(1787616123.086:33381): avc: denied { relabelto } for pid=28532 comm="syz.3.11374" name="file0" dev="tmpfs" ino=15870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 607.163678][ T36] audit: type=1400 audit(1787616123.086:33382): avc: denied { associate } for pid=28532 comm="syz.3.11374" name="file0" dev="tmpfs" ino=15870 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 607.205498][ T36] audit: type=1400 audit(1787616123.116:33383): avc: denied { write } for pid=28532 comm="syz.3.11374" name="file0" dev="tmpfs" ino=15870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 607.234243][ T36] audit: type=1400 audit(1787616123.116:33384): avc: denied { write open } for pid=28532 comm="syz.3.11374" path=2F323939362F66696C65302F233135383731202864656C6574656429 dev="tmpfs" ino=15871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 607.262523][ T36] audit: type=1400 audit(1787616123.146:33385): avc: denied { rmdir } for pid=677 comm="syz-executor" name="file0" dev="tmpfs" ino=15870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 607.289852][ T36] audit: type=1400 audit(1787616123.156:33386): avc: denied { setcurrent } for pid=28534 comm="syz.3.11375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 607.364935][T28551] netlink: 'syz.3.11383': attribute type 6 has an invalid length. [ 607.373082][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11383'. [ 607.414117][T28555] overlayfs: failed to clone upperpath [ 607.483018][T28565] overlayfs: failed to clone upperpath [ 607.829201][ T36] audit: type=1400 audit(1787616123.776:33387): avc: denied { create } for pid=28574 comm="syz.1.11394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 608.113479][T28599] overlayfs: failed to clone upperpath [ 608.338049][T28626] overlayfs: failed to clone upperpath [ 608.444193][ T36] audit: type=1400 audit(1787616124.396:33388): avc: denied { execmod } for pid=28634 comm="syz.1.11418" path="/3278/cpuacct.usage_sys" dev="tmpfs" ino=17441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 608.557364][T28648] overlayfs: failed to clone upperpath [ 608.581650][T28650] overlayfs: failed to clone upperpath [ 608.911237][T28660] x_tables: unsorted underflow at hook 1 [ 609.004250][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11430'. [ 609.013528][T28665] erspan0: entered promiscuous mode [ 609.019567][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11430'. [ 609.163168][T28673] overlayfs: failed to clone upperpath [ 609.242748][T28683] overlayfs: failed to clone upperpath [ 609.832156][T28696] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 610.262975][T28723] overlayfs: failed to clone upperpath [ 610.482282][T28739] FAULT_INJECTION: forcing a failure. [ 610.482282][T28739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.501092][T28739] CPU: 1 UID: 0 PID: 28739 Comm: syz.6.11459 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 610.501135][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.501152][T28739] Call Trace: [ 610.501160][T28739] [ 610.501170][T28739] __dump_stack+0x21/0x30 [ 610.501209][T28739] dump_stack_lvl+0x140/0x1c0 [ 610.501242][T28739] ? __cfi_dump_stack_lvl+0x10/0x10 [ 610.501275][T28739] ? vfs_write+0xbcf/0xfd0 [ 610.501301][T28739] dump_stack+0x19/0x20 [ 610.501333][T28739] should_fail_ex+0x3c2/0x510 [ 610.501361][T28739] should_fail+0xf/0x20 [ 610.501387][T28739] should_fail_usercopy+0x1e/0x30 [ 610.501416][T28739] _copy_from_user+0x20/0xa0 [ 610.501449][T28739] __se_sys_io_uring_setup+0x170/0x2b0 [ 610.501483][T28739] ? __kasan_check_write+0x18/0x20 [ 610.501508][T28739] ? __x64_sys_io_uring_setup+0x80/0x80 [ 610.501545][T28739] ? __kasan_check_read+0x15/0x20 [ 610.501569][T28739] __x64_sys_io_uring_setup+0x5f/0x80 [ 610.501602][T28739] x64_sys_call+0x22c0/0x2ee0 [ 610.501625][T28739] do_syscall_64+0x57/0xf0 [ 610.501662][T28739] ? clear_bhb_loop+0x50/0xa0 [ 610.501692][T28739] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 610.501734][T28739] RIP: 0033:0x7fc8aef9e0d9 [ 610.501755][T28739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.501775][T28739] RSP: 002b:00007fc8ad9e2ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 610.501801][T28739] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fc8aef9e0d9 [ 610.501819][T28739] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 610.501837][T28739] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 610.501852][T28739] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 610.501869][T28739] R13: 0000200000000b10 R14: 00007fc8ad9e2fd8 R15: 0000000000000000 [ 610.501889][T28739] [ 610.957584][ T36] audit: type=1400 audit(1787616126.906:33389): avc: denied { listen } for pid=28760 comm="syz.6.11469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 611.006700][T28761] kvm: kvm [28760]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 611.021349][T28761] kvm: kvm [28760]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 611.335413][T28783] netlink: 200 bytes leftover after parsing attributes in process `syz.1.11478'. [ 611.373421][T28789] overlayfs: failed to clone upperpath [ 611.421640][T28794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11483'. [ 611.445947][T28794] netlink: 'syz.3.11483': attribute type 4 has an invalid length. [ 612.130591][T28836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11498'. [ 612.140140][T28836] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11498'. [ 612.172575][T28838] futex_wake_op: syz.1.11499 tries to shift op by 144; fix this program [ 612.192092][T28842] FAULT_INJECTION: forcing a failure. [ 612.192092][T28842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.209910][T28842] CPU: 0 UID: 0 PID: 28842 Comm: syz.6.11500 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 612.209950][T28842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.209965][T28842] Call Trace: [ 612.209973][T28842] [ 612.209982][T28842] __dump_stack+0x21/0x30 [ 612.210022][T28842] dump_stack_lvl+0x140/0x1c0 [ 612.210056][T28842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 612.210102][T28842] dump_stack+0x19/0x20 [ 612.210131][T28842] should_fail_ex+0x3c2/0x510 [ 612.210158][T28842] should_fail+0xf/0x20 [ 612.210182][T28842] should_fail_usercopy+0x1e/0x30 [ 612.210210][T28842] _copy_from_iter+0x1a6/0x1520 [ 612.210243][T28842] ? __cfi__copy_from_iter+0x10/0x10 [ 612.210277][T28842] tun_get_user+0x50f/0x3720 [ 612.210431][T28842] ? arch_stack_walk+0x10a/0x170 [ 612.210509][T28842] ? ptr_ring_consume+0x430/0x430 [ 612.210533][T28842] ? _parse_integer+0x2e/0x40 [ 612.210558][T28842] ? kstrtoull+0x13b/0x1e0 [ 612.210584][T28842] ? __kasan_check_write+0x18/0x20 [ 612.210608][T28842] ? ref_tracker_alloc+0x32b/0x5b0 [ 612.210670][T28842] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 612.210699][T28842] ? selinux_file_permission+0x318/0xb60 [ 612.210727][T28842] ? __kasan_check_write+0x18/0x20 [ 612.210751][T28842] ? proc_fail_nth_write+0x184/0x220 [ 612.210788][T28842] tun_chr_write_iter+0x1fa/0x310 [ 612.210813][T28842] vfs_write+0x75f/0xfd0 [ 612.210840][T28842] ? __cfi_vfs_write+0x10/0x10 [ 612.210868][T28842] ksys_write+0x145/0x260 [ 612.210894][T28842] ? __cfi_ksys_write+0x10/0x10 [ 612.210920][T28842] ? __kasan_check_read+0x15/0x20 [ 612.210944][T28842] __x64_sys_write+0x7f/0x90 [ 612.210972][T28842] x64_sys_call+0x271c/0x2ee0 [ 612.210993][T28842] do_syscall_64+0x57/0xf0 [ 612.211026][T28842] ? clear_bhb_loop+0x50/0xa0 [ 612.211051][T28842] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 612.211098][T28842] RIP: 0033:0x7fc8aef9e0d9 [ 612.211119][T28842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.211140][T28842] RSP: 002b:00007fc8ad9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.211167][T28842] RAX: ffffffffffffffda RBX: 00007fc8af225fa0 RCX: 00007fc8aef9e0d9 [ 612.211186][T28842] RDX: 000000000000005a RSI: 0000200000000240 RDI: 0000000000000005 [ 612.211202][T28842] RBP: 00007fc8ad9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 612.211218][T28842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.211234][T28842] R13: 00007fc8af226038 R14: 00007fc8af225fa0 R15: 00007fffeed8d6b8 [ 612.211255][T28842] [ 612.812613][T28870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11509'. [ 612.822362][T28870] netlink: 240 bytes leftover after parsing attributes in process `syz.6.11509'. [ 613.198295][T28894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11518'. [ 613.212628][T28894] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11518'. [ 613.276754][T28900] overlayfs: failed to clone upperpath [ 613.874793][T28922] overlayfs: failed to clone upperpath [ 614.151071][ T312] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 614.281038][ T312] usb 7-1: device descriptor read/64, error -71 [ 614.521018][ T312] usb 7-1: device descriptor read/64, error -71 [ 614.781059][ T312] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 614.911042][ T312] usb 7-1: device descriptor read/64, error -71 [ 615.028744][T29023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=29023 comm=syz.1.11578 [ 615.151041][ T312] usb 7-1: device descriptor read/64, error -71 [ 615.281123][ T312] usb usb7-port1: attempt power cycle [ 615.621116][ T312] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 615.642297][ T312] usb 7-1: device descriptor read/8, error -71 [ 615.772268][ T312] usb 7-1: device descriptor read/8, error -71 [ 615.952870][T29060] overlayfs: failed to clone upperpath [ 616.011023][ T312] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 616.042016][ T312] usb 7-1: device descriptor read/8, error -71 [ 616.142443][T29083] overlayfs: failed to clone upperpath [ 616.172148][ T312] usb 7-1: device descriptor read/8, error -71 [ 616.282914][ T312] usb usb7-port1: unable to enumerate USB device [ 616.351905][T29097] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29097 comm=syz.4.11611 [ 616.415467][T29103] overlayfs: failed to clone upperpath [ 616.758680][T29124] overlayfs: failed to clone upperpath [ 617.043974][T29143] overlayfs: failed to clone upperpath [ 617.153083][T29154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11638'. [ 617.208382][T29163] overlayfs: failed to clone upperpath [ 618.134472][T29214] x_tables: duplicate entry at hook 2 [ 618.161032][T24167] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 618.311070][T24167] usb 7-1: Using ep0 maxpacket: 16 [ 618.317632][T24167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.328581][T24167] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.341450][T24167] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.350500][T24167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.359262][T24167] usb 7-1: config 0 descriptor?? [ 618.553766][ T36] audit: type=1400 audit(1787616134.506:33390): avc: denied { create } for pid=29228 comm="syz.1.11669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 619.087403][T29269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11685'. [ 619.545001][T29290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.553648][T29290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.583571][T29355] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29355 comm=syz.1.11719 [ 620.921587][T24167] usbhid 7-1:0.0: can't add hid device: -71 [ 620.927770][T24167] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 620.940811][T24167] usb 7-1: USB disconnect, device number 78 [ 621.109074][T29378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11729'. [ 621.109082][T29379] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11729'. [ 621.210731][T29394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=29394 comm=syz.1.11736 [ 621.381545][T29409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=29409 comm=syz.3.11742 [ 621.394496][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11742'. [ 621.451147][T24167] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 621.601035][T24167] usb 7-1: Using ep0 maxpacket: 8 [ 621.607759][T24167] usb 7-1: unable to get BOS descriptor or descriptor too short [ 621.616415][T24167] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 621.624742][T24167] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 621.633749][T24167] usb 7-1: config 4 has no interface number 0 [ 621.641765][T24167] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 621.651361][T24167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.659730][T24167] usb 7-1: Product: syz [ 621.664018][T24167] usb 7-1: Manufacturer: syz [ 621.668667][T24167] usb 7-1: SerialNumber: syz [ 621.750115][ T36] audit: type=1326 audit(1787616397.747:33391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29417 comm="syz.1.11746" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc82159e0d9 code=0x0 [ 621.878954][T24167] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 621.885765][T24167] uvcvideo 7-1:4.147: Entity type for entity Output 251 was not initialized! [ 621.894734][T24167] usb 7-1: Failed to create links for entity 251 [ 621.901156][T24167] usb 7-1: Failed to register entities (-22). [ 621.909020][T24167] usb 7-1: USB disconnect, device number 79 [ 621.930662][T29421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=29421 comm=syz.3.11747 [ 622.517309][T29439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11756'. [ 622.526500][T29439] netlink: 19 bytes leftover after parsing attributes in process `syz.3.11756'. [ 622.535830][T29439] netlink: 'syz.3.11756': attribute type 6 has an invalid length. [ 622.544221][T29439] netlink: 'syz.3.11756': attribute type 5 has an invalid length. [ 622.552524][T29439] netlink: 19 bytes leftover after parsing attributes in process `syz.3.11756'. [ 622.641034][T24167] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 622.791027][T24167] usb 7-1: Using ep0 maxpacket: 16 [ 622.797431][T24167] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.810740][T24167] usb 7-1: config 0 interface 0 has no altsetting 0 [ 622.817536][T24167] usb 7-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 622.826676][T24167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.835325][T24167] usb 7-1: config 0 descriptor?? [ 623.246652][T24167] usbhid 7-1:0.0: can't add hid device: -71 [ 623.260002][T24167] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 623.276239][T24167] usb 7-1: USB disconnect, device number 80 [ 624.271070][T24166] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 624.293674][T29545] overlayfs: failed to clone upperpath [ 624.310921][T29545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11799'. [ 624.333421][T29547] netlink: 200 bytes leftover after parsing attributes in process `syz.4.11800'. [ 624.342669][T29547] tc_dump_action: action bad kind [ 624.421072][T24166] usb 7-1: Using ep0 maxpacket: 16 [ 624.427683][T24166] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.440679][T24166] usb 7-1: config 0 interface 0 has no altsetting 0 [ 624.447337][T24166] usb 7-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 624.456502][T24166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.465508][T24166] usb 7-1: config 0 descriptor?? [ 624.767278][T29571] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11812'. [ 624.777361][T29571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=29571 comm=syz.1.11812 [ 624.873900][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 624.881585][T24166] usbhid 7-1:0.0: can't add hid device: -71 [ 624.887590][T24166] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 624.896961][T24166] usb 7-1: USB disconnect, device number 81 [ 625.307245][ T36] audit: type=1400 audit(2000000001.340:33392): avc: denied { nlmsg_read } for pid=29585 comm="syz.1.11819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 625.309003][T29586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11819'. [ 625.337588][T29586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11819'. [ 625.359591][T29586] 9pnet_fd: Insufficient options for proto=fd [ 625.480994][ T36] audit: type=1400 audit(2000000001.510:33393): avc: denied { ioctl } for pid=29604 comm="syz.6.11828" path="socket:[475853]" dev="sockfs" ino=475853 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.587369][T29623] SELinux: ebitmap: truncated map [ 625.593337][T29623] SELinux: failed to load policy [ 626.127178][T29639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29639 comm=syz.6.11842 [ 626.597738][T29668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11854'. [ 626.668408][ T36] audit: type=1326 audit(2000000002.700:33394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29676 comm="syz.4.11858" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff6639e0d9 code=0x0 [ 627.223012][T29747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29747 comm=syz.1.11887 [ 627.338238][T29750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11888'. [ 627.349092][T29750] netlink: 'syz.1.11888': attribute type 11 has an invalid length. [ 627.659784][T29780] __nla_validate_parse: 1 callbacks suppressed [ 627.659807][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11903'. [ 627.677253][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11903'. [ 627.841276][T29797] overlayfs: failed to clone upperpath [ 627.898385][T29800] netlink: 'syz.1.11909': attribute type 2 has an invalid length. [ 627.951021][T29800] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11909'. [ 628.542884][T29837] overlayfs: failed to resolve './bus': -2 [ 628.561321][T24167] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 628.731020][T24167] usb 7-1: Using ep0 maxpacket: 16 [ 628.742143][T24167] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.756725][T24167] usb 7-1: config 0 interface 0 has no altsetting 0 [ 628.763726][T24167] usb 7-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 628.773535][T24167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.784302][T24167] usb 7-1: config 0 descriptor?? [ 628.895767][T29858] overlayfs: failed to resolve './bus': -2 [ 628.932932][T29862] overlayfs: failed to clone upperpath [ 629.014174][T29876] overlayfs: failed to resolve './bus': -2 [ 629.101255][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11947'. [ 629.393804][T24167] usbhid 7-1:0.0: can't add hid device: -71 [ 629.399960][T24167] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 629.414631][T24167] usb 7-1: USB disconnect, device number 82 [ 629.503313][T29908] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11955'. [ 630.521762][T29964] overlayfs: failed to clone upperpath [ 631.502384][T30004] FAULT_INJECTION: forcing a failure. [ 631.502384][T30004] name failslab, interval 1, probability 0, space 0, times 0 [ 631.515136][T30004] CPU: 0 UID: 0 PID: 30004 Comm: syz.6.11997 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 631.515173][T30004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.515185][T30004] Call Trace: [ 631.515191][T30004] [ 631.515199][T30004] __dump_stack+0x21/0x30 [ 631.515228][T30004] dump_stack_lvl+0x140/0x1c0 [ 631.515251][T30004] ? __cfi_dump_stack_lvl+0x10/0x10 [ 631.515274][T30004] ? avc_has_perm+0x155/0x240 [ 631.515352][T30004] ? __cfi_avc_has_perm+0x10/0x10 [ 631.515372][T30004] dump_stack+0x19/0x20 [ 631.515393][T30004] should_fail_ex+0x3c2/0x510 [ 631.515413][T30004] should_failslab+0xac/0x100 [ 631.515434][T30004] __kmalloc_cache_noprof+0x41/0x470 [ 631.515453][T30004] ? vhost_task_create+0x12c/0x3f0 [ 631.515542][T30004] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 631.515576][T30004] vhost_task_create+0x12c/0x3f0 [ 631.515592][T30004] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 631.515613][T30004] ? __cfi_vhost_task_create+0x10/0x10 [ 631.515631][T30004] ? __cfi_vhost_task_fn+0x10/0x10 [ 631.515648][T30004] ? __kasan_check_write+0x18/0x20 [ 631.515664][T30004] ? mutex_lock+0x97/0x1d0 [ 631.515701][T30004] ? __cfi_mutex_lock+0x10/0x10 [ 631.515716][T30004] ? kernel_text_address+0xa9/0xe0 [ 631.515756][T30004] kvm_mmu_post_init_vm+0x161/0x300 [ 631.515780][T30004] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 631.515808][T30004] ? _parse_integer_limit+0x195/0x1e0 [ 631.515827][T30004] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 631.515849][T30004] ? kstrtoull+0x13b/0x1e0 [ 631.515866][T30004] ? kstrtouint+0x78/0xf0 [ 631.515886][T30004] ? ioctl_has_perm+0x1bc/0x500 [ 631.515924][T30004] ? __asan_memcpy+0x5a/0x80 [ 631.515940][T30004] ? ioctl_has_perm+0x408/0x500 [ 631.515956][T30004] ? has_cap_mac_admin+0xd0/0xd0 [ 631.515974][T30004] ? __kasan_check_write+0x18/0x20 [ 631.515990][T30004] ? mutex_lock_killable+0x97/0x1d0 [ 631.516007][T30004] ? __cfi_mutex_lock_killable+0x10/0x10 [ 631.516024][T30004] ? proc_fail_nth_write+0x184/0x220 [ 631.516049][T30004] kvm_vcpu_ioctl+0xa43/0x1000 [ 631.516066][T30004] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 631.516097][T30004] ? __cfi_vfs_write+0x10/0x10 [ 631.516123][T30004] ? __kasan_check_write+0x18/0x20 [ 631.516147][T30004] ? mutex_unlock+0x90/0x240 [ 631.516162][T30004] ? __cfi_mutex_unlock+0x10/0x10 [ 631.516181][T30004] ? bpf_lsm_file_ioctl+0xd/0x20 [ 631.516235][T30004] ? security_file_ioctl+0x3e/0x110 [ 631.516266][T30004] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 631.516281][T30004] __se_sys_ioctl+0x135/0x1b0 [ 631.516337][T30004] __x64_sys_ioctl+0x7f/0xa0 [ 631.516357][T30004] x64_sys_call+0x1878/0x2ee0 [ 631.516372][T30004] do_syscall_64+0x57/0xf0 [ 631.516394][T30004] ? clear_bhb_loop+0x50/0xa0 [ 631.516411][T30004] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 631.516437][T30004] RIP: 0033:0x7fc8aef9e0d9 [ 631.516452][T30004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.516472][T30004] RSP: 002b:00007fc8ad9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.516490][T30004] RAX: ffffffffffffffda RBX: 00007fc8af225fa0 RCX: 00007fc8aef9e0d9 [ 631.516502][T30004] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 631.516513][T30004] RBP: 00007fc8ad9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 631.516523][T30004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.516534][T30004] R13: 00007fc8af226038 R14: 00007fc8af225fa0 R15: 00007fffeed8d6b8 [ 631.516548][T30004] [ 631.985497][T30022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12005'. [ 631.996958][T30022] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12005'. [ 632.146507][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12014'. [ 632.156294][T30041] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12014'. [ 632.321038][T24167] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 632.471066][T24167] usb 7-1: Using ep0 maxpacket: 32 [ 632.477416][T24167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.488393][T24167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.498187][T24167] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 632.511023][T24167] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 632.520087][T24167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.529013][T24167] usb 7-1: config 0 descriptor?? [ 633.209399][T24167] usbhid 7-1:0.0: can't add hid device: -71 [ 633.216084][T24167] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 633.231636][T24167] usb 7-1: USB disconnect, device number 83 [ 633.753966][ T36] audit: type=1400 audit(2000000009.790:33395): avc: denied { map } for pid=30109 comm="syz.6.12044" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 634.047630][T30128] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30128 comm=syz.4.12051 [ 634.060682][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12051'. [ 634.291173][T24172] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 634.402635][ T36] audit: type=1400 audit(2000000010.440:33396): avc: denied { mount } for pid=30141 comm="syz.3.12056" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 634.441072][T24172] usb 7-1: Using ep0 maxpacket: 16 [ 634.447370][T24172] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.461816][T24172] usb 7-1: config 0 interface 0 has no altsetting 0 [ 634.468480][T24172] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 634.478963][T24172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.490867][T24172] usb 7-1: config 0 descriptor?? [ 634.633507][T30160] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30160 comm=syz.4.12063 [ 634.646584][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12063'. [ 634.701630][T24172] holtek 0003:1241:5015.001C: unknown main item tag 0x2 [ 634.708849][T24172] holtek 0003:1241:5015.001C: unknown main item tag 0x1 [ 634.716055][T24172] holtek 0003:1241:5015.001C: unknown global tag 0xd [ 634.723197][T24172] holtek 0003:1241:5015.001C: item 0 2 1 13 parsing failed [ 634.730686][T24172] holtek 0003:1241:5015.001C: parse failed [ 634.737047][T24172] holtek 0003:1241:5015.001C: probe with driver holtek failed with error -22 [ 634.909500][T24172] usb 7-1: USB disconnect, device number 84 [ 635.071851][T30185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12073'. [ 635.081864][T30185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.713657][T30272] netlink: 200 bytes leftover after parsing attributes in process `syz.6.12112'. [ 636.832778][T30280] overlayfs: failed to clone upperpath [ 636.906327][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12118'. [ 637.007932][T30289] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.224621][T30299] 9pnet_fd: p9_fd_create_tcp (30299): problem connecting socket to 127.0.0.1 [ 637.478610][T30314] overlayfs: failed to resolve './bus': -2 [ 637.679634][T30328] netlink: 'syz.3.12138': attribute type 29 has an invalid length. [ 637.704235][ T36] audit: type=1400 audit(2000000013.740:33397): avc: denied { write } for pid=30329 comm="syz.6.12139" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 637.730825][T30332] overlayfs: failed to resolve './bus': -2 [ 637.808702][T30336] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 638.109423][ T36] audit: type=1400 audit(2000000014.140:33398): avc: denied { watch_reads } for pid=30341 comm="syz.4.12144" path="/3482/file0" dev="tmpfs" ino=18545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 638.219576][T30355] overlayfs: failed to clone upperpath [ 638.672393][T30376] overlayfs: failed to clone upperpath [ 638.695658][T30378] netlink: 200 bytes leftover after parsing attributes in process `syz.1.12159'. [ 638.706936][T30380] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12160'. [ 638.971023][T24172] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 639.101063][T24172] usb 7-1: device descriptor read/64, error -71 [ 639.341055][T24172] usb 7-1: device descriptor read/64, error -71 [ 639.591117][T24172] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 639.721037][T24172] usb 7-1: device descriptor read/64, error -71 [ 639.786180][T30402] overlayfs: failed to clone upperpath [ 639.961161][T24172] usb 7-1: device descriptor read/64, error -71 [ 639.990983][T30412] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12171'. [ 640.071624][T24172] usb usb7-port1: attempt power cycle [ 640.411088][T24172] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 640.432549][T24172] usb 7-1: device descriptor read/8, error -71 [ 640.572499][T24172] usb 7-1: device descriptor read/8, error -71 [ 640.861012][T24172] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 640.902275][T24172] usb 7-1: device descriptor read/8, error -71 [ 640.975078][T30430] netlink: 'syz.3.12180': attribute type 11 has an invalid length. [ 641.032326][T30432] overlayfs: failed to clone upperpath [ 641.033995][T24172] usb 7-1: device descriptor read/8, error -71 [ 641.086312][T30437] overlayfs: failed to clone upperpath [ 641.151111][T24172] usb usb7-port1: unable to enumerate USB device [ 641.272159][T30443] bridge: RTM_NEWNEIGH with invalid ether address [ 642.030607][T30484] netlink: 'syz.6.12199': attribute type 19 has an invalid length. [ 642.046393][T30484] netlink: 'syz.6.12199': attribute type 28 has an invalid length. [ 642.230835][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.239740][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.248135][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.257228][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.265482][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.274124][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.282368][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.290868][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.299110][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.307636][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.461030][T24167] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 642.601046][T24167] usb 7-1: device descriptor read/64, error -71 [ 642.841049][T24167] usb 7-1: device descriptor read/64, error -71 [ 643.081031][T24167] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 643.212481][T24167] usb 7-1: device descriptor read/64, error -71 [ 643.451048][T24167] usb 7-1: device descriptor read/64, error -71 [ 643.561151][T24167] usb usb7-port1: attempt power cycle [ 643.842572][ T36] audit: type=1400 audit(2000000019.880:33399): avc: denied { module_load } for pid=30548 comm="syz.1.12226" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=496578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 643.911010][T24167] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 643.933021][T24167] usb 7-1: device descriptor read/8, error -71 [ 644.082232][T24167] usb 7-1: device descriptor read/8, error -71 [ 644.321087][T24167] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 644.342162][T24167] usb 7-1: device descriptor read/8, error -71 [ 644.472346][T24167] usb 7-1: device descriptor read/8, error -71 [ 644.581205][T24167] usb usb7-port1: unable to enumerate USB device [ 644.639348][T30582] fuse: Bad value for 'rootmode' [ 644.831572][T30597] futex_wake_op: syz.3.12243 tries to shift op by 144; fix this program [ 645.388048][T30621] overlay: ./file0 is not a directory [ 645.393854][T30621] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30621 comm=syz.6.12251 [ 645.407396][T30621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=30621 comm=syz.6.12251 [ 645.420627][T30621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12251'. [ 645.713885][T30645] tun0: tun_chr_ioctl cmd 1074025676 [ 645.719384][T30645] tun0: owner set to 0 [ 645.782460][T30648] netlink: 'syz.3.12261': attribute type 9 has an invalid length. [ 645.800995][T30648] netlink: 'syz.3.12261': attribute type 2 has an invalid length. [ 646.371046][T24167] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 646.521008][T24167] usb 7-1: Using ep0 maxpacket: 32 [ 646.527711][T24167] usb 7-1: unable to get BOS descriptor or descriptor too short [ 646.536202][T24167] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 646.544698][T24167] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 646.555055][T24167] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 646.564151][T24167] usb 7-1: config 128 has no interface number 0 [ 646.570424][T24167] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 646.581782][T24167] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.591929][T24167] usb 7-1: config 128 interface 127 has no altsetting 0 [ 646.600369][T24167] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 646.609495][T24167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.617536][T24167] usb 7-1: Product: syz [ 646.621745][T24167] usb 7-1: Manufacturer: syz [ 646.626386][T24167] usb 7-1: SerialNumber: syz [ 647.327522][T30706] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 647.336318][T30706] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 647.361597][T24167] usb 7-1: USB disconnect, device number 93 [ 647.383630][T21712] udevd[21712]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 647.695680][T30716] fuse: Bad value for 'fd' [ 647.701160][T24167] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 647.851022][T24167] usb 7-1: Using ep0 maxpacket: 8 [ 647.857318][T24167] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 647.866006][T24167] usb 7-1: config 179 has no interface number 0 [ 647.872352][T24167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 647.883435][T24167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 647.894723][T24167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 647.905918][T24167] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 647.917389][T24167] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 647.930677][T24167] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 647.939941][T24167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.948914][T30711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 648.161894][T24167] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input26 [ 648.317876][T30746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12298'. [ 648.372241][T30750] 9pnet_fd: Insufficient options for proto=fd [ 648.385866][T30753] fuse: Unknown parameter ' žõè(;ÑÝÀ­0X ðMóÑ•)cæ!Æ£@' [ 648.405009][ T312] usb 7-1: USB disconnect, device number 94 [ 648.405180][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 648.419408][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 648.427973][ T312] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 648.452276][T30756] veth1_to_hsr: entered allmulticast mode [ 648.863435][T30761] overlayfs: missing 'workdir' [ 648.889677][T30763] cgroup: fork rejected by pids controller in /syz4 [ 649.167368][ T36] audit: type=1400 audit(2000000025.200:33400): avc: denied { setattr } for pid=30893 comm="syz.6.12313" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 649.401034][T24166] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 649.552159][T24166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.563191][T24166] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 649.572313][T24166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.581445][T24166] usb 7-1: config 0 descriptor?? [ 649.643430][T30896] overlayfs: missing 'workdir' [ 649.877331][ T36] audit: type=1400 audit(2000000025.910:33401): avc: denied { write } for pid=30901 comm="syz.3.12316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 649.977895][T30916] overlayfs: missing 'workdir' [ 649.983894][T30918] fuse: Unknown parameter 'ÿÿ0x0000000000000006ÿÿÿÿ00000000000000000000' [ 649.993869][T24166] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 650.011057][T24166] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001D/input/input27 [ 650.092360][T24166] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 650.201031][T30894] input: syz0 as /devices/virtual/input/input28 [ 650.258103][ T36] audit: type=1400 audit(2000000026.290:33402): avc: denied { read } for pid=30927 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 650.526192][ T36] audit: type=1400 audit(2000000026.560:33403): avc: denied { getattr } for pid=30893 comm="syz.6.12313" path="/1116/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 650.555797][T24166] usb 7-1: USB disconnect, device number 95 [ 650.622511][T30939] overlayfs: missing 'lowerdir' [ 650.656640][ T36] audit: type=1400 audit(2000000026.690:33404): avc: denied { create } for pid=30942 comm="syz.4.12335" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 650.680156][ T36] audit: type=1400 audit(2000000026.690:33405): avc: denied { map } for pid=30942 comm="syz.4.12335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=498131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 650.705071][ T36] audit: type=1400 audit(2000000026.690:33406): avc: denied { read write } for pid=30942 comm="syz.4.12335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=498131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 651.065789][ T36] audit: type=1400 audit(2000000027.100:33407): avc: denied { read write } for pid=10370 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 651.121486][ T36] audit: type=1400 audit(2000000027.120:33408): avc: denied { open } for pid=10370 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 651.187717][ T36] audit: type=1400 audit(2000000027.120:33409): avc: denied { ioctl } for pid=10370 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 OK Stopping iptables: OK [ 651.297712][T30990] overlayfs: missing 'lowerdir' Stopping system message bus: [ 651.330290][T30995] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12345'. [ 651.346089][T30995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.420813][T31003] netlink: 'syz.4.12348': attribute type 4 has an invalid length. done [ 651.497717][T31013] overlayfs: missing 'lowerdir' [ 651.505270][T31007] FAULT_INJECTION: forcing a failure. [ 651.505270][T31007] name failslab, interval 1, probability 0, space 0, times 0 [ 651.527014][T31007] CPU: 0 UID: 0 PID: 31007 Comm: syz.6.12350 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 651.527046][T31007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.527060][T31007] Call Trace: [ 651.527067][T31007] [ 651.527074][T31007] __dump_stack+0x21/0x30 [ 651.527109][T31007] dump_stack_lvl+0x140/0x1c0 [ 651.527137][T31007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 651.527164][T31007] ? avc_has_perm+0x155/0x240 [ 651.527189][T31007] ? __cfi_avc_has_perm+0x10/0x10 [ 651.527214][T31007] dump_stack+0x19/0x20 [ 651.527244][T31007] should_fail_ex+0x3c2/0x510 [ 651.527272][T31007] should_failslab+0xac/0x100 [ 651.527303][T31007] __kmalloc_cache_noprof+0x41/0x470 [ 651.527330][T31007] ? vhost_task_create+0x12c/0x3f0 [ 651.527358][T31007] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 651.527387][T31007] vhost_task_create+0x12c/0x3f0 [ 651.527411][T31007] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 651.527442][T31007] ? __cfi_vhost_task_create+0x10/0x10 [ 651.527469][T31007] ? __cfi_vhost_task_fn+0x10/0x10 [ 651.527495][T31007] ? __kasan_check_write+0x18/0x20 [ 651.527520][T31007] ? mutex_lock+0x97/0x1d0 [ 651.527544][T31007] ? __cfi_mutex_lock+0x10/0x10 [ 651.527567][T31007] ? kernel_text_address+0xa9/0xe0 [ 651.527601][T31007] kvm_mmu_post_init_vm+0x161/0x300 [ 651.527636][T31007] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 651.527670][T31007] ? _parse_integer_limit+0x195/0x1e0 [ 651.527698][T31007] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 651.527731][T31007] ? kstrtoull+0x13b/0x1e0 [ 651.527756][T31007] ? kstrtouint+0x78/0xf0 [ 651.527794][T31007] ? ioctl_has_perm+0x1bc/0x500 [ 651.527819][T31007] ? __asan_memcpy+0x5a/0x80 [ 651.527843][T31007] ? ioctl_has_perm+0x408/0x500 [ 651.527867][T31007] ? has_cap_mac_admin+0xd0/0xd0 [ 651.527899][T31007] ? __kasan_check_write+0x18/0x20 [ 651.527922][T31007] ? mutex_lock_killable+0x97/0x1d0 [ 651.527945][T31007] ? __cfi_mutex_lock_killable+0x10/0x10 [ 651.527968][T31007] ? proc_fail_nth_write+0x184/0x220 [ 651.528004][T31007] kvm_vcpu_ioctl+0xa43/0x1000 [ 651.528044][T31007] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 651.528072][T31007] ? __cfi_vfs_write+0x10/0x10 [ 651.528096][T31007] ? __kasan_check_write+0x18/0x20 [ 651.528119][T31007] ? mutex_unlock+0x90/0x240 [ 651.528140][T31007] ? __cfi_mutex_unlock+0x10/0x10 [ 651.528167][T31007] ? bpf_lsm_file_ioctl+0xd/0x20 [ 651.528198][T31007] ? security_file_ioctl+0x3e/0x110 [ 651.528221][T31007] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 651.528242][T31007] __se_sys_ioctl+0x135/0x1b0 [ 651.528278][T31007] __x64_sys_ioctl+0x7f/0xa0 [ 651.528306][T31007] x64_sys_call+0x1878/0x2ee0 [ 651.528329][T31007] do_syscall_64+0x57/0xf0 [ 651.528360][T31007] ? clear_bhb_loop+0x50/0xa0 [ 651.528385][T31007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 651.528423][T31007] RIP: 0033:0x7fc8aef9e0d9 [ 651.528443][T31007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.528464][T31007] RSP: 002b:00007fc8ad9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.528489][T31007] RAX: ffffffffffffffda RBX: 00007fc8af225fa0 RCX: 00007fc8aef9e0d9 [ 651.528509][T31007] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 651.528525][T31007] RBP: 00007fc8ad9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 651.528541][T31007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.528557][T31007] R13: 00007fc8af226038 R14: 00007fc8af225fa0 R15: 00007fffeed8d6b8 [ 651.528578][T31007] killall: can't kill pid 25499: No such process Stopping klogd: OK Stopping acpid: [ 652.120750][T31053] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 652.129637][T31053] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 652.689763][T31199] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.697278][T31199] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.704476][T31199] bridge_slave_0: entered allmulticast mode [ 652.711098][T31199] bridge_slave_0: entered promiscuous mode [ 652.717905][T31199] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.725153][T31199] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.732409][T31199] bridge_slave_1: entered allmulticast mode [ 652.738994][T31199] bridge_slave_1: entered promiscuous mode [ 652.811245][T31199] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.818368][T31199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.825982][T31199] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.833066][T31199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.858944][ T2099] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.871572][ T2099] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.882846][ T1971] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.889968][ T1971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.902904][ T1971] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.910016][ T1971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.942162][T31199] veth0_vlan: entered promiscuous mode [ 652.957202][T31199] veth1_macvtap: entered promiscuous mode OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 653.171391][T31217] kvm: emulating exchange as write [ 653.184835][ T1971] tipc: Disabling bearer [ 653.202548][ T1971] tipc: Disabling bearer [ 653.218289][ T1971] tipc: Left network mode [ 653.251201][ T1971] veth1_macvtap: left promiscuous mode [ 653.385293][T31233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=31233 comm=syz.3.12379 [ 653.420107][T31233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12379'. [ 653.508312][T31223] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.521609][T31223] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.528748][T31223] bridge_slave_0: entered allmulticast mode [ 653.535238][T31223] bridge_slave_0: entered promiscuous mode [ 653.542054][T31223] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.549190][T31223] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.556478][T31223] bridge_slave_1: entered allmulticast mode [ 653.563066][T31223] bridge_slave_1: entered promiscuous mode [ 653.676626][ T1971] ------------[ cut here ]------------ [ 653.682217][ T1971] WARNING: CPU: 1 PID: 1971 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 653.692542][ T1971] Modules linked in: [ 653.696528][ T1971] CPU: 1 UID: 0 PID: 1971 Comm: kworker/u8:36 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 653.708781][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.718952][ T1971] Workqueue: netns cleanup_net [ 653.723890][ T1971] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 653.726013][T31223] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.730215][ T1971] Code: e8 61 1b d6 fc 4b 83 3c 3e 00 75 19 e8 15 3f 7d fc 49 81 ff f8 07 00 00 74 1b e8 07 3f 7d fc 49 83 c7 08 eb c9 e8 fc 3e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 653.737038][T31223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.737259][T31223] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.756989][ T1971] RSP: 0018:ffffc9000ede7b90 EFLAGS: 00010293 [ 653.764035][T31223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.784485][ T1971] [ 653.786847][ T1971] RAX: ffffffff850a32c4 RBX: ffff8881315f11c0 RCX: ffff888115b9a600 [ 653.794877][ T1971] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811893c000 [ 653.802911][ T1971] RBP: ffffc9000ede7bb0 R08: ffffffff87d42aa7 R09: 1ffffffff0fa8554 [ 653.811068][ T1971] R10: dffffc0000000000 R11: fffffbfff0fa8555 R12: dffffc0000000000 [ 653.819094][ T1971] R13: dffffc0000000000 R14: ffff88811893c000 R15: 0000000000000000 [ 653.827132][ T1971] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 653.836137][ T1971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.842802][ T1971] CR2: 00002000000001c0 CR3: 000000011c876000 CR4: 00000000003526b0 [ 653.850824][ T1971] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 653.858899][ T1971] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.866941][ T1971] Call Trace: [ 653.870254][ T1971] [ 653.873248][ T1971] cleanup_net+0x6ba/0xc90 [ 653.877725][ T1971] ? __cfi_cleanup_net+0x10/0x10 [ 653.882788][ T1971] ? kick_pool+0xb9/0x540 [ 653.887274][ T1971] process_scheduled_works+0x7f7/0x1060 [ 653.892968][ T1971] worker_thread+0xc99/0x13f0 [ 653.897710][ T1971] kthread+0x2c7/0x360 [ 653.902070][ T1971] ? __cfi_worker_thread+0x10/0x10 [ 653.907458][ T1971] ? __cfi_kthread+0x10/0x10 [ 653.912341][ T1971] ret_from_fork+0x67/0xa0 [ 653.917030][ T1971] ? __cfi_kthread+0x10/0x10 [ 653.921727][ T1971] ret_from_fork_asm+0x1a/0x30 [ 653.926891][ T1971] [ 653.929945][ T1971] ---[ end trace 0000000000000000 ]--- [ 653.935789][ T2099] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.939324][ T1971] ------------[ cut here ]------------ [ 653.948644][ T1971] WARNING: CPU: 1 PID: 1971 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 653.958985][ T1971] Modules linked in: [ 653.963161][ T1971] CPU: 1 UID: 0 PID: 1971 Comm: kworker/u8:36 Tainted: G W syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 653.976574][ T1971] Tainted: [W]=WARN [ 653.980389][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.990727][ T1971] Workqueue: netns cleanup_net [ 653.995602][ T1971] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 654.001991][ T1971] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 3e 7d fc 49 81 ff f8 07 00 00 74 1b e8 b2 3e 7d fc 49 83 c7 08 eb c5 e8 a7 3e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 3e 7d fc 5b 41 5c 41 5e 41 [ 654.021730][ T1971] RSP: 0018:ffffc9000ede7b90 EFLAGS: 00010293 [ 654.027904][ T1971] RAX: ffffffff850a3319 RBX: ffff88811893c800 RCX: ffff888115b9a600 [ 654.036173][ T1971] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811893c808 [ 654.044554][ T1971] RBP: ffffc9000ede7bb0 R08: ffffffff87d42aa7 R09: 1ffffffff0fa8554 [ 654.052712][ T1971] R10: dffffc0000000000 R11: fffffbfff0fa8555 R12: dffffc0000000000 [ 654.060844][ T1971] R13: dffffc0000000000 R14: ffff88811893c000 R15: 0000000000000008 [ 654.069095][ T1971] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 654.078437][ T1971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.085153][ T1971] CR2: 00002000000001c0 CR3: 000000011c876000 CR4: 00000000003526b0 [ 654.093440][ T1971] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 654.101846][ T1971] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 654.110090][ T1971] Call Trace: [ 654.113441][ T1971] [ 654.116509][ T1971] cleanup_net+0x6ba/0xc90 [ 654.121046][ T1971] ? __cfi_cleanup_net+0x10/0x10 [ 654.126039][ T1971] ? kick_pool+0xb9/0x540 [ 654.130628][ T1971] process_scheduled_works+0x7f7/0x1060 [ 654.136293][ T1971] worker_thread+0xc99/0x13f0 [ 654.141299][ T1971] kthread+0x2c7/0x360 [ 654.145649][ T1971] ? __cfi_worker_thread+0x10/0x10 [ 654.151052][ T1971] ? __cfi_kthread+0x10/0x10 [ 654.155934][ T1971] ret_from_fork+0x67/0xa0 [ 654.160642][ T1971] ? __cfi_kthread+0x10/0x10 [ 654.165568][ T1971] ret_from_fork_asm+0x1a/0x30 [ 654.170632][ T1971] [ 654.173923][ T1971] ---[ end trace 0000000000000000 ]--- [ 654.179757][ T2099] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.213778][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.220902][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.232478][ T2099] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.239620][ T2099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.247274][ T1971] ------------[ cut here ]------------ [ 654.252892][ T1971] WARNING: CPU: 1 PID: 1971 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 654.262651][ T1971] Modules linked in: [ 654.266593][ T1971] CPU: 1 UID: 0 PID: 1971 Comm: kworker/u8:36 Tainted: G W syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 654.280053][ T1971] Tainted: [W]=WARN [ 654.283931][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.294118][ T1971] Workqueue: netns cleanup_net [ 654.298960][ T1971] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 654.304639][ T1971] Code: 3c 20 00 74 08 48 89 df e8 9f d9 f0 fc 48 8b 3b e8 c7 ca db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 fd 97 fc <0f> 0b e9 b0 fd ff ff e8 36 fd 97 fc 0f 0b e9 18 fe ff ff e8 2a fd [ 654.322468][T31223] veth0_vlan: entered promiscuous mode [ 654.324449][ T1971] RSP: 0018:ffffc9000ede7b70 EFLAGS: 00010293 [ 654.335995][ T1971] RAX: ffffffff84ef747e RBX: ffff8881315f11c0 RCX: ffff888115b9a600 [ 654.344052][ T1971] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888115b9a600 [ 654.352100][ T1971] RBP: ffffc9000ede7b98 R08: ffffffff87d42aa7 R09: 1ffffffff0fa8554 [ 654.360126][ T1971] R10: dffffc0000000000 R11: fffffbfff0fa8555 R12: 1ffffffff0fa82a8 [ 654.360139][T31223] veth1_macvtap: entered promiscuous mode [ 654.360160][ T1971] R13: dffffc0000000000 R14: ffff8881315f1dc0 R15: dffffc0000000000 [ 654.382054][ T1971] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 654.391060][ T1971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.397696][ T1971] CR2: 000055557d211918 CR3: 0000000122eb8000 CR4: 00000000003526b0 [ 654.405876][ T1971] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 654.414076][ T1971] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 654.422192][ T1971] Call Trace: [ 654.425511][ T1971] [ 654.428453][ T1971] xfrm_net_exit+0x31/0x80 [ 654.433005][ T1971] cleanup_net+0x6ba/0xc90 [ 654.437630][ T1971] ? __cfi_cleanup_net+0x10/0x10 [ 654.442738][ T1971] ? kick_pool+0xb9/0x540 [ 654.447219][ T1971] process_scheduled_works+0x7f7/0x1060 [ 654.452890][ T1971] worker_thread+0xc99/0x13f0 [ 654.457610][ T1971] kthread+0x2c7/0x360 [ 654.461823][ T1971] ? __cfi_worker_thread+0x10/0x10 [ 654.467076][ T1971] ? __cfi_kthread+0x10/0x10 [ 654.471931][ T1971] ret_from_fork+0x67/0xa0 [ 654.476625][ T1971] ? __cfi_kthread+0x10/0x10 [ 654.481324][ T1971] ret_from_fork_asm+0x1a/0x30 [ 654.486107][ T1971] [ 654.489136][ T1971] ---[ end trace 0000000000000000 ]--- umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 654.850989][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 654.851012][ T36] audit: type=1400 audit(2000000030.880:33444): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2777]" dev="pipefs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.0.17 closed by remote host. Sent SIGTERM to all processes [ 655.162787][ T2096] bridge_slave_1: left allmulticast mode [ 655.168544][ T2096] bridge_slave_1: left promiscuous mode [ 655.176941][ T2096] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.191300][ T2096] bridge_slave_0: left allmulticast mode [ 655.197070][ T2096] bridge_slave_0: left promiscuous mode [ 655.202827][ T2096] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.311107][ T2096] veth1_macvtap: left promiscuous mode [ 655.316693][ T2096] veth0_vlan: left promiscuous mode [ 655.582928][ T2096] bridge_slave_1: left allmulticast mode [ 655.588628][ T2096] bridge_slave_1: left promiscuous mode [ 655.594312][ T2096] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.601860][ T2096] bridge_slave_0: left allmulticast mode [ 655.607513][ T2096] bridge_slave_0: left promiscuous mode [ 655.613166][ T2096] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.620801][ T2096] bridge_slave_1: left allmulticast mode [ 655.626634][ T2096] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.634060][ T2096] bridge_slave_0: left allmulticast mode [ 655.639704][ T2096] bridge_slave_0: left promiscuous mode [ 655.645370][ T2096] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.653341][ T2096] bridge_slave_1: left allmulticast mode [ 655.659066][ T2096] bridge_slave_1: left promiscuous mode [ 655.664751][ T2096] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.672221][ T2096] bridge_slave_0: left allmulticast mode [ 655.677862][ T2096] bridge_slave_0: left promiscuous mode [ 655.683550][ T2096] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.886042][ T2096] tipc: Disabling bearer [ 655.891643][ T2096] tipc: Left network mode [ 655.896291][ T2096] tipc: Left network mode [ 655.902816][ T2096] veth1_macvtap: left promiscuous mode [ 655.908360][ T2096] veth0_vlan: left promiscuous mode [ 655.913995][ T2096] veth1_macvtap: left promiscuous mode [ 655.919944][ T2096] veth1_macvtap: left promiscuous mode [ 655.925517][ T2096] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 656.454003][ T2096] ------------[ cut here ]------------ [ 656.459512][ T2096] WARNING: CPU: 1 PID: 2096 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 656.469128][ T2096] Modules linked in: [ 656.473051][ T2096] CPU: 1 UID: 0 PID: 2096 Comm: kworker/u8:59 Tainted: G W syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 656.486364][ T2096] Tainted: [W]=WARN [ 656.490194][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.500276][ T2096] Workqueue: netns cleanup_net [ 656.505079][ T2096] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 656.510645][ T2096] Code: 3c 20 00 74 08 48 89 df e8 9f d9 f0 fc 48 8b 3b e8 c7 ca db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 fd 97 fc <0f> 0b e9 b0 fd ff ff e8 36 fd 97 fc 0f 0b e9 18 fe ff ff e8 2a fd [ 656.530403][ T2096] RSP: 0018:ffffc9000f76fb70 EFLAGS: 00010293 [ 656.536515][ T2096] RAX: ffffffff84ef747e RBX: ffff8881315f3540 RCX: ffff888133ad5f00 [ 656.544518][ T2096] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888133ad5f00 [ 656.552538][ T2096] RBP: ffffc9000f76fb98 R08: ffffffff87d42aa7 R09: 1ffffffff0fa8554 [ 656.560533][ T2096] R10: dffffc0000000000 R11: fffffbfff0fa8555 R12: 1ffffffff0fa82a8 [ 656.568563][ T2096] R13: dffffc0000000000 R14: ffff8881315f4140 R15: dffffc0000000000 [ 656.576598][ T2096] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 656.585604][ T2096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.592239][ T2096] CR2: 00007f5e6b9f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 656.600224][ T2096] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 656.608267][ T2096] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 656.616337][ T2096] Call Trace: [ 656.619657][ T2096] [ 656.622686][ T2096] xfrm_net_exit+0x31/0x80 [ 656.627141][ T2096] cleanup_net+0x6ba/0xc90 [ 656.631633][ T2096] ? __cfi_cleanup_net+0x10/0x10 [ 656.636600][ T2096] ? kick_pool+0xb9/0x540 [ 656.641014][ T2096] process_scheduled_works+0x7f7/0x1060 [ 656.646587][ T2096] worker_thread+0xc99/0x13f0 [ 656.651335][ T2096] kthread+0x2c7/0x360 [ 656.655435][ T2096] ? __cfi_worker_thread+0x10/0x10 [ 656.660550][ T2096] ? __cfi_kthread+0x10/0x10 [ 656.665278][ T2096] ret_from_fork+0x67/0xa0 [ 656.669746][ T2096] ? __cfi_kthread+0x10/0x10 [ 656.674419][ T2096] ret_from_fork_asm+0x1a/0x30 [ 656.679218][ T2096] [ 656.682351][ T2096] ---[ end trace 0000000000000000 ]--- [ 657.072609][T31252] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 657.079540][T31252] ACPI: PM: Preparing to enter system sleep state S5 [ 657.086708][T31252] kvm: exiting hardware virtualization [ 657.092290][T31252] reboot: Power down serialport: VM disconnected.