last executing test programs: 3m2.792948398s ago: executing program 32 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write(0xffffffffffffffff, &(0x7f0000000500)='1,0x400000,0x4', 0xe) 2m50.045344946s ago: executing program 4 (id=269): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000ecffffffffffffff0000"]) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x3e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0xffffdffe}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201100100000020ac0504030000000000010902240001000080db09040006ff0300000009218f0d030122180009288103200000fc003ad4fd818c0728b6930a169e5e8cdf9ac5f6c6"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109328102c0c0"], 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, 0x0}, 0x40000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x11}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x66, 0x63, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x3c}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x66, 0x56, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff001122334455667788990000ccddeeff0011223344556677a899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) 2m46.924947711s ago: executing program 4 (id=284): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write(0xffffffffffffffff, &(0x7f0000000500)='1,0x400000,0x4', 0xe) 2m45.301856821s ago: executing program 4 (id=285): mount$fuse(0x0, 0x0, 0x0, 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4020000000000e52, 0x800000000002, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x3c, 0x800040068], 0x22271fff, 0x54755}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.899391111s ago: executing program 4 (id=288): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$key(0xf, 0x3, 0x2) unshare(0x4000480) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b0030000", @ANYRES16=r6, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="6714fce86c18f2569a4c5aeb31c2ed164b876da9ac1458e5f556180c5e78acb4c8d30083aa1cd5815018ab568d11c228d526f8d4787cf69448faa36a5718c48b700984b08ab608c453636a514736dafd759fd52aae1ccd9328be9cff3092e4f812e295a9392ab286bcbdfb62c81e33d0fa68e5a1fcf702bc0c86fc834a5c7468916e255ff74859"], 0xffffff6a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4a, &(0x7f00000000c0)=0xffff1884, 0x4) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000200), 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3ea, 0x400, 0x70bd2b, 0x25dfdbff, {0x34, 0x0, 0xeb3b626fc9c0e4d9, 0x0, 0x4, 0x7, 0x7, 0x2, 0x0, 0xffffc7eb, 0x8}}, 0x3c}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) lseek(r8, 0x7, 0x3) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 2m43.012256477s ago: executing program 4 (id=295): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) (fail_nth: 7) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 2m43.012093066s ago: executing program 4 (id=296): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7ffeffff}]}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev/sda\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.357127009s ago: executing program 0 (id=361): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$key(0xf, 0x3, 0x2) unshare(0x4000480) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b0030000", @ANYRES16=r6, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="6714fce86c18f2569a4c5aeb31c2ed164b876da9ac1458e5f556180c5e78acb4c8d30083aa1cd5815018ab568d11c228d526f8d4787cf69448faa36a5718c48b700984b08ab608c453636a514736dafd759fd52aae1ccd9328be9cff3092e4f812e295a9392ab286bcbdfb62c81e33d0fa68e5a1fcf702bc0c86fc834a5c7468916e255ff74859"], 0xffffff6a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4a, &(0x7f00000000c0)=0xffff1884, 0x4) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @window={0x3, 0x7, 0x6}, @mss={0x2, 0x5}, @timestamp, @window={0x3, 0x5e0, 0xe297}], 0x5) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3ea, 0x400, 0x70bd2b, 0x25dfdbff, {0x34, 0x0, 0xeb3b626fc9c0e4d9, 0x0, 0x4, 0x7, 0x7, 0x2, 0x0, 0xffffc7eb, 0x8}}, 0x3c}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) lseek(r8, 0x7, 0x3) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 2m30.44646163s ago: executing program 0 (id=371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x13, 0x2}}}}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 2m29.23159441s ago: executing program 0 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000008c007251100000000000109022400010000b0013dcfdb000303000100092100000201222600090581030004071302"], 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4000801) 2m27.910471422s ago: executing program 0 (id=382): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100013070000000000000000d4a33e00000000000000000000000000000000fc020000000000000000000000000000000000000000ffff0a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d43c000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000200040050000000000000004800010078636263286165732900"/240], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(0x0, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x807, r0, 0x0, 0x10, 0x0, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x1, 0xc28, 0x3, 0xffff5844}, 0xd3a}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221c00000096231306e53f070c000000b0a48300"/34], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x207) statx(r1, &(0x7f0000000200)='./proc\x00', 0x1000, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={[], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x38, 0x65, 0x61, 0x30, 0x64, 0x36, 0x66], 0x2d, [0x35, 0x39, 0x38, 0x61], 0x2d, [0x37, 0x30, 0x64, 0x34], 0x2d, [0x65, 0x33, 0x5, 0x30], 0x2d, [0x66, 0x62, 0x36, 0x62, 0x62, 0x64, 0x34, 0x39]}}}, {@fowner_gt={'fowner>', r3}}], 0x2c}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x800, 0x1, 0x323, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_clone(0x14c041000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) 2m27.910244362s ago: executing program 33 (id=296): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7ffeffff}]}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev/sda\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.713280317s ago: executing program 3 (id=384): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x3, 0x0, [{0xeeee0000, 0xed, &(0x7f0000000140)=""/237}, {0x5000, 0x5f, &(0x7f0000000240)=""/95}, {0x54000, 0xf, &(0x7f00000002c0)=""/15}]}) 2m27.681418067s ago: executing program 3 (id=385): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r0, r0, 0x0) (async) setresuid(r0, r0, 0x0) syz_usb_connect$uac2(0x3, 0xff, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x414d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x0, 0x6cd68702898bd200, 0x35, {0x8, 0xb, 0x2, 0x0, 0x1, 0xfa, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x8, 0x12}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, [0x5, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5b}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x7ff, 0xd5, "05e6ce78dabe"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x3, 0x8, 0x7}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x8, "", "3cdf75"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x10, 0x2, "c74036742c6d96"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x800, 0x7ff, 0x4, "555e4543a68bf88255"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x6, 0x14, {0x8, 0x25, 0x1, 0x1, 0x0, 0x4, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0xfd, 0x6}, @as_header={0x10, 0x24, 0x1, 0x6, 0xcb, 0x1, 0x1003, 0x5, 0x4, 0xb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf19, 0x400, 0x9, 0x9}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x4, 0x4, 0x2, ':%8', '0/'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x99, 0x0, 0x9, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x8000}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0xe5, 0x20, 0x2, 0x20, 0x8f}, 0x140, &(0x7f0000000480)={0x5, 0xf, 0x140, 0x4, [@generic={0xcd, 0x10, 0xa, "2dfdf0014d94423015d8bcdcd08fac911e5df41da2014b67b91750c5c52c57a7505f74764e24d358629592479d92c67966403f342a27c935f38f9813b1b2b310d8bbe8287f33f4e0e8dcd51baaab3ed200080cb7ff779d9fb97582ddadbd22b2034e8611a43531deddf3aa62d8a077a277191d2d5f65b9f08300a45e48ebb454feef0cd74849f7b7ac2457eab512bc631fbe7a7928439ec54a10528504b80349f1faf57c95797483f24fdf93bc030fb7648584defc4c8f1b4faf50c8697c7a7e0c4af8a166ca5ad0cbef"}, @generic={0x2e, 0x10, 0x3, "8a7ca4a3d533e7838fce20c001326547c0b16f8330ec4b834a269dba2f4e66bb92d7a79165b123e9f62943"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x4, 0xf, 0x9, [0xff3f00, 0xff3f00, 0xff00, 0xe080, 0xff00c0, 0xffc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0xa, 0x4, 0x9a9, 0x880f, 0x6, [0x3f00, 0xc000, 0x0, 0x0]}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x7c, &(0x7f0000000600)=@string={0x7c, 0x3, "c04e7dc0c6bdb65ca9d24d789b3cc60a51b557337b166fb16375271312ba2ee8584fd9a5ac02de06f69a2fd0f11b06ee5acf162687fd29ae81dbc59d6f5825a4f6e50f0398c5d07f0f0da196548bf2627835cbea13240ed2ef0b2cd7ee16e98e8af6aa5368c75c995cb29e93d5757edcec41e969749fc589e6d8"}}, {0xd3, &(0x7f0000000680)=@string={0xd3, 0x3, "3d5a7f96209a985122b4214d78d5c1542f26faad26f5e6fb14bea35f44eecfbc8dfd906e5ee773218bd41c3449636496fc44bd4408e11178c4e966829e7576ff8b1743472791f391f8987ecb60e0e29a9b9c964fffe93f515edbaff2ef58954702509012d73150001a01ce16d3d40d0f131d58c4e3783315a5f83aa660dc2c2be39686622ca71b4be854a71bc9ebe4592dd0745e557caee6358f9eb33655705871b68f88583c87ce6e280014e1899598dca57a01dcf43213823c27780dc49c7ddf8fd1718d40a52a89143bcb489d14b76e"}}, {0x6d, &(0x7f0000000780)=@string={0x6d, 0x3, "a59d19c906c44dbaac75a8753599eaa88e9e36158ed077e7409cee468e409c4e5d44f112d13691e3b5083be0fbf94eeff87dc1d576f310da2cb515bad4fda26b9339b7ec0ef21868fc0566b95e7924ea7f629fb894d646c87d9edd4effc2d4a6a825900e05087fccad8b33"}}, {0x9c, &(0x7f0000000800)=@string={0x9c, 0x3, "73e91f554f18a6886ca043350a8c990f312e4d5b303325f9241a49121b61bd8e20e038614263d585e0b16933a70ce0d503e294d443ec3b9a8ffd3cf852e1ac4cca3a28bb5d4472efe055c63fdcca7ae7b0d786af743e0b5bc0145438a260ada58df553f8691e8ca188323bf26e63e43bb487501e42bdd12cd88699f93993c17b4b067ad0396f12f10ba03dc855384ea4fed2086fea97178e1932"}}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0xa90000, &(0x7f0000000100)={[{@uuid_auto}], [{@uid_eq={'uid', 0x3d, r0}}, {@pcr={'pcr', 0x3d, 0x800030}}], 0x2f}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 2m26.216837993s ago: executing program 3 (id=391): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x782810a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x40000, 0x6000, 0x4, 0x9, 0x8, 0x0, 0xa, 0xe, 0xa, 0x6, 0x7f, 0x4b}, {0xf000, 0x41000, 0xc, 0x40, 0x10, 0x1, 0x0, 0x1, 0x80, 0xec, 0x2, 0xf4}, {0x1, 0x4, 0x10, 0x4, 0xaa, 0xda, 0x4, 0x5, 0x58, 0x8, 0x4, 0x3}, {0x40000, 0x80da000, 0x0, 0x0, 0x4, 0x9, 0x4, 0x9, 0x8, 0x8, 0x9, 0x1}, {0xd000, 0x8000000, 0xc, 0x3f, 0x3, 0x8, 0xb, 0x5, 0x2, 0x20, 0x5, 0x2}, {0x0, 0xeeef0000, 0x3, 0x1, 0x2, 0x3, 0xa9, 0x8, 0x7, 0x0, 0x0, 0x1}, {0x2000, 0x6002, 0x4, 0x7, 0x0, 0x9, 0x40, 0x1, 0x7, 0x5, 0x4}, {0xfec00000, 0xb000, 0xb, 0x3, 0xa8, 0x6, 0x7f, 0x1, 0x3, 0xf8, 0x3, 0x95}, {0xeeef0000, 0x800}, {0xeeee8000, 0x8000}, 0xa0000000, 0x0, 0x0, 0x1, 0x1, 0x400, 0xdddd1000, [0x0, 0x8000000000000000, 0x4, 0x8]}) 2m26.138767645s ago: executing program 3 (id=392): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r6}}], 0x1, 0x0, 0x0) 2m25.745069224s ago: executing program 0 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x1000000) 2m25.5169847s ago: executing program 0 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m25.50740212s ago: executing program 34 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x4a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m23.769159042s ago: executing program 3 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="e2984f49412c", @ANYRESDEC], 0xd) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f6e0f000) write(r0, &(0x7f0000000000)='7', 0x1) pipe2(0x0, 0x84800) 2m23.506358079s ago: executing program 3 (id=407): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 2m8.686053897s ago: executing program 35 (id=407): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 2m8.409832654s ago: executing program 6 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX=r5], 0x27) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0x28, 0x2, 0x2, 0x0, 0xff, 0x7, 0x0, 0x3, 0xfd}, {0xe000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0xff, 0x3, 0x3, 0x4, 0xfc}, {0x1, 0xdddd1000, 0x9, 0x4, 0x81, 0x0, 0x9, 0x4, 0x3, 0x0, 0x9, 0x2}, {0xc000, 0x8000000, 0x1, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x80, 0x2, 0x7f, 0xa3, 0xff, 0x9}, {0x10000, 0xdddd1000, 0x9, 0x7, 0x9, 0x0, 0x7, 0x20, 0x0, 0x3, 0xe9}, {0x0, 0x4000, 0xa, 0xfe, 0xa4, 0x7, 0xa, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000000, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.232732558s ago: executing program 6 (id=494): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2m7.428742747s ago: executing program 2 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m7.428005138s ago: executing program 6 (id=504): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2m7.32824775s ago: executing program 6 (id=499): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100013070000000000000000d4a33e00000000000000000000000000000000fc020000000000000000000000000000000000000000ffff0a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d43c000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000200040050000000000000004800010078636263286165732900"/240], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(0x0, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x807, r0, 0x0, 0x10, 0x0, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x1, 0xc28, 0x3, 0xffff5844}, 0xd3a}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221c00000096231306e53f070c000000b0a48300"/34], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x207) statx(r1, &(0x7f0000000200)='./proc\x00', 0x1000, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={[], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x38, 0x65, 0x61, 0x30, 0x64, 0x36, 0x66], 0x2d, [0x35, 0x39, 0x38, 0x61], 0x2d, [0x37, 0x30, 0x64, 0x34], 0x2d, [0x65, 0x33, 0x5, 0x30], 0x2d, [0x66, 0x62, 0x36, 0x62, 0x62, 0x64, 0x34, 0x39]}}}, {@fowner_gt={'fowner>', r3}}], 0x2c}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x800, 0x1, 0x323, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_clone(0x14c041000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) 2m6.544724669s ago: executing program 2 (id=505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) setreuid(0xee00, 0x0) ioprio_get$uid(0x3, 0xee00) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.49495514s ago: executing program 2 (id=507): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000080)=0x8011) 2m6.417015472s ago: executing program 2 (id=508): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2m6.383602513s ago: executing program 2 (id=510): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x470280) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000e36000/0x4000)=nil, &(0x7f000044d000/0x3000)=nil, 0x4000, 0x3}) close_range(r2, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usb-storage/remove_id\x00', 0x143042, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$dupfd(r3, 0x406, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, r4, 0x3000) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) getsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdir(&(0x7f0000000100)='./sys\x00', 0x2c) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2m6.184977258s ago: executing program 2 (id=513): mount$fuse(0x0, 0x0, 0x0, 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4020000000000e52, 0x800000000002, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x3c, 0x800040068], 0x22271fff, 0x54755}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m5.2664968s ago: executing program 6 (id=517): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r0], 0x28}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$msr(r1, &(0x7f0000000b40)=""/175, 0xaf) vmsplice(r0, &(0x7f0000002e00)=[{&(0x7f00000004c0)="6b5c444b2a22483af9d23e45a5ff46e0b50bf585838d84a1b42b80fd5c092ee785670f0cb9ee689cd78c4e16043aef95f973698d98245e80ce4fddbf66173d873451d8b4eb0c2d983fd3966a0850819d2ec9f5d42d252323a4a408c2984259b85d1e68d576dce5631d7931a31a7081a7605180140b04045e4855a141f2da3cefbe8d434ff18eecb3cbd4fbf9b294d0c32ac5625465a1fadc439a77466ba6a33928eca7ec56cb560a0348410f9b97a3edc6590c33b2357cc5", 0xb8}, {&(0x7f0000000800)="ce07bb26cdf3ba12db9c78890ca1503d6b73502a2b54fb5a012c3bc9b5aaeda3a9a25433ccace4252d017d11ed678841dff8f075c1df2052a5d3a6ae97b623321217797617d4cd45bc73b3ce7bd5bc28196d9a8640014dc8d793eb6acab98c6516aa91c80aa019fa975f0fc3f91232987e0747fdf105f4de18614a2123b5af2cc26346c6a9140829ac33a315fc49bcfafdc843929a3a", 0x96}, {&(0x7f00000008c0)="216bfd4ab57bf907b09007348b114cfe6b21d6d0c1060787ad2c95f74127034323e4111843f9128a1f3bb124d53badc87a22aa3f82a3f6560b72ce090cda0fb2a72b67cc5c6d365aae358ef6", 0x4c}, {&(0x7f0000000940)="b33cb840291694f26e731d20ff6f1b54ac4f84c5e7ee003e6a6ad9ba8ecad625347122d55f05e0b8dbad1b172a7eb175e1d510ec437eeee7a5ff116577f9d72dac5f901795142c206389f4a220dcdedbdd73cc3024ba8ed9a0ace6f8d406bcd6245ee3eabbb7064ae88ed6f9aa18f6adc79510398861d979170a9913a1652b0c22a720d564573e37b847c8773294c439405565baf8c98f638512029e4c482e7ced3e65e3041bd26692da405d11f5b506ec6098af23b09ac7f46c20fcfef77f0bb06f6aa6f71df3c09e06f771bd3f8197d08b", 0xd2}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="75515ef28684555e3ec602033f4543745d8a9e009a4fe281ae8cbc813703c48070473d", 0x23}], 0x6, 0xb) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000440), &(0x7f0000000480)) keyctl$chown(0x4, r3, r5, r4) keyctl$setperm(0x5, r3, 0x172831) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001900150000000000ff7f000000000000000000181209c00800c70c4900000000000054361a29b30f3c5c92fad52fd546ebd8a61be4cd02e40f7662e330a2506b7c49d435adbf0dd3c0a909c99085cbe7a952e97b6758542c880e76c74c345e910f06aeceb3199e462448c518b0d7836c4faa08d163de3db9fac6a3b713f82f1639bf4b35bf0dc2100415fcfccbb42d3e5a27c80f7f2c76c8fe9907a48e061c30ca110f0d43b71804e83999ca155a4e93aca97780c990fac13de064803715d097f4f1f4642b0922ee696b4a6217a0c06adde8ce0c426b629b439693315f648d170f2049030e019dca3387ef8da46b2c5c21a038c79fab2f7dcf911b7f382d5a298d0fa0faa7c729e8f3cf1cf76f62d66ed746626cc8c332b06cfcd913b69097184f3794d621a25e7ce7c355831277d132c0825d1465701f1b9f04b490a7cd8aab0514558ac332970cb57f20c0985e0b50f21c029a82cd938270e4e67e8638e59b24be3529267f24ad229b6d3a1600546237e14079f1721306dee356f4bc7a353c25e0450f3cffbdd1f0073af25744d84f69cf7c266c83c8ff31e5d35825181240832c6180beb96293fc091172423f2b7cae1d1f40331e8e7514c7f1e93ba8"], 0x34}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0xfffffffffffffeaf, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 2m4.86631488s ago: executing program 6 (id=521): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) 2m4.716164213s ago: executing program 36 (id=521): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) 2m3.972689331s ago: executing program 8 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x20, 0x0}) socket(0x1a, 0x5, 0xb45) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) (async) rmdir(&(0x7f00000001c0)='./file0\x00') (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x20, 0x0}) (async) socket(0x1a, 0x5, 0xb45) (async) 2m3.880877334s ago: executing program 8 (id=526): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100013070000000000000000d4a33e00000000000000000000000000000000fc020000000000000000000000000000000000000000ffff0a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d43c000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000200040050000000000000004800010078636263286165732900"/240], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(0x0, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x807, r0, 0x0, 0x10, 0x0, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000380)={{0xffffffffffffffff, 0x1, 0xc28, 0x3, 0xffff5844}, 0xd3a}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221c00000096231306e53f070c000000b0a48300"/34], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x207) statx(r1, &(0x7f0000000200)='./proc\x00', 0x1000, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={[], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x58, 0x38, 0x65, 0x61, 0x30, 0x64, 0x36, 0x66], 0x2d, [0x35, 0x39, 0x38, 0x61], 0x2d, [0x37, 0x30, 0x64, 0x34], 0x2d, [0x65, 0x33, 0x5, 0x30], 0x2d, [0x66, 0x62, 0x36, 0x62, 0x62, 0x64, 0x34, 0x39]}}}, {@fowner_gt={'fowner>', r3}}], 0x2c}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x800, 0x1, 0x323, 0x0, r4}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_clone(0x14c041000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) 2m1.781823735s ago: executing program 8 (id=546): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2m1.591701449s ago: executing program 8 (id=551): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000058b000/0x400000)=nil) 2m1.456764892s ago: executing program 37 (id=551): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000058b000/0x400000)=nil) 1m50.890436729s ago: executing program 38 (id=513): mount$fuse(0x0, 0x0, 0x0, 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4020000000000e52, 0x800000000002, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x3c, 0x800040068], 0x22271fff, 0x54755}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.80090317s ago: executing program 9 (id=1425): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000100)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xe8a0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001200)='ns/mnt\x00') ioctl$NS_GET_USERNS(r3, 0x8004b706, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x100}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.669536112s ago: executing program 9 (id=1442): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x942, 0xc203) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000040)={0xf7, 0x10}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x810, r0, 0x0) syz_usb_connect(0x2, 0xfffffffffffffdbe, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0xe2, 0xe7, 0xc4, 0x8, 0x408, 0x4033, 0x9691, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xf, 0x10, 0x2, "", [{{0x9, 0x4, 0x6a, 0x59, 0x0, 0xe, 0x1, 0x1, 0xb2}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="0003765aaf7458da8ddcfdb8aec655a8f063a767eea771c808fc29e6c57f81018816147a7a15f529fb8a6abc49bcce5a47b8cf897aadcdc3a2d98a4bd002ef7c370746a099a70f06c4c1e0907d8882a368c0cb26661c97c040e12b9bcfff343feac152e4387c6679257a5174a9e47c6adfc1344353b5d31825f3e61acc2bdce9adedefb7ddceaedd9afeb57d4189f7cd64c11127fababb4d9f109e861a86600eafd2268bdf131aa269a19204c0e3569ee1c05cc2c9a70c5c43d2f143e8e7106d235d991ae1cc"]}, {0x4, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x40f}}, {0xc5, &(0x7f0000000640)=@string={0x0, 0x3, "a84649c52e8758645c09c3352583fe11aa36cb117ed8773fd347e508f41c93ba3b518517996cf22b4fa5d2312e815e9b878c14ccb6979eee58355f695e40a467440da9a5d145dc415dfc70c709e676045c202e63dd714dd6b3140d7b29ea1f011b0f7670a81ad1bfcf62059307517cefda4afd3ee79a862dcf1d5ed39544e8d7897af16c6869b86e82b199139dd9fa5e86238e82cbe4dcfbec7666c4e65c50b3cfa8010773abb9069e031c9a2fde2ab341779165db2567dfd0fc1767ceafe586dd35bd71d4d7b92cb5af685f925ea685ad09af253c724a061b9d648fe2c4e2da3b487652aa4ecd673bb3a6a67ade9954200125cbed0da2cf47"}}, {0xe3, &(0x7f00000001c0)=ANY=[@ANYBLOB="e3030e67ccdcd7dab6389e07b73a0a82b42836389e7ff36a90e0bd1f6ddd37dcffc01ea7431f9982f21e5201136d00f99dbfc2989ff61901adbb51cd041b04712328e20b32f37de7947bed7e342c6db0d78427a6ebac1088e54b08cfda9b7d9b38d24268ddd9ac1b9435c9167d8f85e211b5757b2f6fd7ae05946c02b0c147e4cc6f6b8f19eadef758337083e3a30a70abb0c2833f47821b0ca26de6215f6391579067495334f4118ed8619bd3b3eb887376a1ab2ad6540b027dae7aaa4f9579b021610f9054ded930f3172fbb7b7a16099f872ec0ce1b7f905f3dd48711d97231fc85"]}, {0xffffffffffffff66, &(0x7f00000002c0)=@lang_id={0x0, 0x3, 0x403}}, {0x1b, &(0x7f0000000340)=@string={0x1b, 0x3, "6c805d3cb4b22129332cf223be2ce55a1047da0767d442cd3f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1404}}]}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r1 = dup(0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000580)={&(0x7f0000000300)='/dev/loop#\x00', &(0x7f0000000500)='fscrypt:', 0x10000}) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2501000000000000000c41000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r3) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 18.655351125s ago: executing program 9 (id=1454): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000000)=[0x3, 0x5, 0x9, 0x6, 0x2, 0x6, 0x4, 0x5]) setresuid(0x0, 0xffffffffffffffff, 0xee01) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x200]}}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39e, 0x8) close(0x3) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r6, &(0x7f0000000640)="41434d33740881", 0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000040)) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xa70d6000) mlock(&(0x7f0000424000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8, 0x1, 0x4, 0x40}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 18.45417564s ago: executing program 9 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat(r3, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="66baf80cb874bf1183ef66bafc0c66b8000066ef470f2245c7442400b2e30000c744240206000000c7442406550000000f011c2448b800000000000000000f23d00f21f835000000000f23f86466470f72f5b4460fc7b802000000470f001b450f01cb470f144556c421c96b2a"}], 0x1, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) signalfd4(r4, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.520901663s ago: executing program 9 (id=1472): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) mmap$IORING_OFF_SQ_RING(0x100000, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 17.401721476s ago: executing program 9 (id=1474): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0x10003) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x4000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000000)=0x2) 16.84342621s ago: executing program 1 (id=1475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x9, 0x4, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010100}}}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x9, 0x2}, &(0x7f0000000300)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10010, 0xffffffffffffffff, 0x42797000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x218401, 0x78e22799f4a46fa8) r4 = open(&(0x7f0000000000)='./file1\x00', 0x46000, 0x39d) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304854) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x78) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = dup(r5) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ptrace(0x8, r8) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/80) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)={[{@metacopy_on}, {@verity_require}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}, {@uuid_on}], [{@subj_role={'subj_role', 0x3d, 'syzkaller1\x00'}}, {@hash}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16.708921742s ago: executing program 1 (id=1476): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0xfbd, 0x0) 16.698539043s ago: executing program 1 (id=1477): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setuid(0xee01) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x5}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffeffff}, {0x6, 0x16, 0x80}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c880}, 0x1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 16.641273675s ago: executing program 1 (id=1478): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee01) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x200]}}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39e, 0x8) close(0x3) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r6, &(0x7f0000000640)="41434d33740881", 0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000040)) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xa70d6000) mlock(&(0x7f0000424000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8, 0x1, 0x4, 0x40}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.265551423s ago: executing program 1 (id=1479): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) (fail_nth: 8) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 16.164862486s ago: executing program 1 (id=1481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f0000000040)={0xf7, 0x10}) 4.147363849s ago: executing program 7 (id=1526): r0 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) (async) tkill(r0, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x0, @remote, 0x5}}, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}}}, 0x108) (async) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000080)=0x7fff, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) write(r1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) 1.934058992s ago: executing program 39 (id=1474): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0x10003) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x4000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000000)=0x2) 1.107343463s ago: executing program 40 (id=1481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f0000000040)={0xf7, 0x10}) 1.096958633s ago: executing program 7 (id=1541): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0xfbd, 0x0) 953.227556ms ago: executing program 7 (id=1542): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(0x0, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (fail_nth: 2) 784.942801ms ago: executing program 5 (id=1543): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "e591028fa71bbcaf", "e5e3f105d92aba0e0691b41155f06a50f4ff24f299b3f87c4f6f10c88e783976", "cab66a64", "54141eae19a6ec69"}, 0x38) shutdown(r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x2ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) 778.184721ms ago: executing program 7 (id=1544): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0403d11, &(0x7f00000002c0)={0x1, 0x9}) 734.866112ms ago: executing program 7 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x88c) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)=0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@access_client}]}}) 448.911399ms ago: executing program 5 (id=1546): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000000)=[0x3, 0x5, 0x9, 0x6, 0x2, 0x6, 0x4, 0x5]) setresuid(0x0, 0xffffffffffffffff, 0xee01) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x200]}}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39e, 0x8) close(0x3) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r6, &(0x7f0000000640)="41434d33740881", 0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000040)) prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xa70d6000) mlock(&(0x7f0000424000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8, 0x1, 0x4, 0x40}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 448.762789ms ago: executing program 7 (id=1547): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x5, 0x2, "77f3"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) listen(r3, 0x89) 267.548193ms ago: executing program 5 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0xfbd, 0x0) 224.147344ms ago: executing program 5 (id=1549): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "e591028fa71bbcaf", "e5e3f105d92aba0e0691b41155f06a50f4ff24f299b3f87c4f6f10c88e783976", "cab66a64", "54141eae19a6ec69"}, 0x38) shutdown(r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x2ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 40.809549ms ago: executing program 5 (id=1550): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffa, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000380)={r5, &(0x7f00000000c0)='$\x00', 0x1c0, &(0x7f00000002c0)={@align=0x200, {0x5, 0x9, 0x7fff, 0x3}}, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x1}) ioctl$FIGETBSZ(r7, 0x2, &(0x7f00000003c0)) setreuid(r0, r6) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x200005, 0x6, 0x0, 0x2, {0x1, 0x17a, 0x40000000103, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0xa000, 0x4, 0xee00, 0x0, 0x403, 0x3}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f02) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) read$FUSE(r9, &(0x7f0000003240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r10, r10) 0s ago: executing program 5 (id=1551): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0403d11, &(0x7f00000002c0)={0x1, 0x9}) kernel console output (not intermixed with test programs): b0 [ 179.099794][ T3488] do_futex+0x354/0x510 [ 179.099818][ T3488] ? __cfi_do_futex+0x10/0x10 [ 179.099845][ T3488] __se_sys_futex+0x13c/0x320 [ 179.099872][ T3488] ? __x64_sys_futex+0x110/0x110 [ 179.100002][ T3488] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 179.100045][ T3488] __x64_sys_futex+0xe9/0x110 [ 179.100076][ T3488] x64_sys_call+0x227f/0x2ee0 [ 179.100097][ T3488] do_syscall_64+0x57/0xf0 [ 179.100130][ T3488] ? clear_bhb_loop+0x50/0xa0 [ 179.100158][ T3488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.100182][ T3488] RIP: 0033:0x7f0a73b9e159 [ 179.100203][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.100226][ T3488] RSP: 002b:00007f0a749ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.100254][ T3488] RAX: ffffffffffffffda RBX: 00007f0a73e25fa0 RCX: 00007f0a73b9e159 [ 179.100271][ T3488] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 179.100286][ T3488] RBP: 00007f0a73c35024 R08: 0000200000000300 R09: 0000000000000002 [ 179.100300][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.100322][ T3488] R13: 00007f0a73e26038 R14: 00007f0a73e25fa0 R15: 00007fff3c28bfb8 [ 179.100341][ T3488] [ 179.547984][ T3499] FAULT_INJECTION: forcing a failure. [ 179.547984][ T3499] name failslab, interval 1, probability 0, space 0, times 0 [ 179.560847][ T3499] CPU: 1 UID: 0 PID: 3499 Comm: syz.1.1190 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 179.560871][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.560880][ T3499] Call Trace: [ 179.560886][ T3499] [ 179.560894][ T3499] __dump_stack+0x21/0x30 [ 179.560920][ T3499] dump_stack_lvl+0x140/0x1c0 [ 179.560937][ T3499] ? __cfi_dump_stack_lvl+0x10/0x10 [ 179.560968][ T3499] dump_stack+0x19/0x20 [ 179.560996][ T3499] should_fail_ex+0x3c2/0x510 [ 179.561022][ T3499] should_failslab+0xac/0x100 [ 179.561050][ T3499] __kmalloc_cache_noprof+0x41/0x470 [ 179.561073][ T3499] ? tty_alloc_file+0x5f/0x140 [ 179.561096][ T3499] tty_alloc_file+0x5f/0x140 [ 179.561116][ T3499] ptmx_open+0x59/0x2f0 [ 179.561141][ T3499] ? selinux_file_open+0x46c/0x630 [ 179.561156][ T3499] chrdev_open+0x4e8/0x610 [ 179.561171][ T3499] ? __cfi_chrdev_open+0x10/0x10 [ 179.561186][ T3499] ? bpf_lsm_file_open+0xd/0x20 [ 179.561201][ T3499] ? __cfi_chrdev_open+0x10/0x10 [ 179.561214][ T3499] do_dentry_open+0x97f/0x1510 [ 179.561230][ T3499] vfs_open+0x86/0x240 [ 179.561244][ T3499] ? __cfi_vfs_open+0x10/0x10 [ 179.561258][ T3499] ? inode_owner_or_capable+0xf0/0x1b0 [ 179.561271][ T3499] ? may_open+0x398/0x430 [ 179.561289][ T3499] path_openat+0x2c49/0x35a0 [ 179.561306][ T3499] ? rb_commit+0x753/0x7b0 [ 179.561319][ T3499] ? do_filp_open+0x440/0x440 [ 179.561334][ T3499] do_filp_open+0x1f2/0x440 [ 179.561349][ T3499] ? __cfi_do_filp_open+0x10/0x10 [ 179.561365][ T3499] ? alloc_fd+0x4c1/0x570 [ 179.561378][ T3499] do_sys_openat2+0x134/0x1d0 [ 179.561394][ T3499] ? do_sys_open+0x100/0x100 [ 179.561419][ T3499] __x64_sys_openat+0x13a/0x170 [ 179.561436][ T3499] x64_sys_call+0xe69/0x2ee0 [ 179.561447][ T3499] do_syscall_64+0x57/0xf0 [ 179.561465][ T3499] ? clear_bhb_loop+0x50/0xa0 [ 179.561478][ T3499] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.561491][ T3499] RIP: 0033:0x7fa48c19e159 [ 179.561504][ T3499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.561515][ T3499] RSP: 002b:00007fa48d04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.561530][ T3499] RAX: ffffffffffffffda RBX: 00007fa48c425fa0 RCX: 00007fa48c19e159 [ 179.561540][ T3499] RDX: 0000000000044e00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 179.561549][ T3499] RBP: 00007fa48c235024 R08: 0000000000000000 R09: 0000000000000000 [ 179.561557][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.561565][ T3499] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 179.561575][ T3499] [ 180.071118][ T10] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 180.221085][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 180.228238][ T10] usb 10-1: config 255 has an invalid interface number: 209 but max is 0 [ 180.240818][ T3515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.241045][ T10] usb 10-1: config 255 has no interface number 0 [ 180.258811][ T10] usb 10-1: config 255 interface 209 has no altsetting 0 [ 180.269508][ T10] usb 10-1: New USB device found, idVendor=0b57, idProduct=dfc7, bcdDevice=1a.f7 [ 180.279040][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.288290][ T10] usb 10-1: Product: syz [ 180.293472][ T10] usb 10-1: Manufacturer: syz [ 180.298179][ T10] usb 10-1: SerialNumber: syz [ 180.318690][ T36] audit: type=1326 audit(1788196297.317:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.1198" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa48c19e159 code=0x0 [ 180.373489][ T36] audit: type=1326 audit(1788196297.377:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.1198" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa48c19e159 code=0x0 [ 180.661133][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 180.812409][ T31] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.820784][ T31] usb 2-1: config 0 has no interface number 0 [ 180.827006][ T31] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 180.837899][ T31] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 180.848922][ T31] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 180.860835][ T31] usb 2-1: config 0 interface 2 has no altsetting 0 [ 180.869515][ T31] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 180.878808][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.886878][ T31] usb 2-1: Product: syz [ 180.891447][ T31] usb 2-1: Manufacturer: syz [ 180.896104][ T31] usb 2-1: SerialNumber: syz [ 180.902317][ T31] usb 2-1: config 0 descriptor?? [ 180.907761][ T3525] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 180.915636][ T3525] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.181103][ T524] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 182.332942][ T524] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.343955][ T524] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.355688][ T524] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.366258][ T524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.375808][ T524] usb 6-1: SerialNumber: syz [ 182.504282][ T10] usbhid 10-1:255.209: couldn't find an input interrupt endpoint [ 182.525549][ T10] usb 10-1: USB disconnect, device number 34 [ 182.575518][ T36] audit: type=1400 audit(1788196299.577:1124): avc: denied { bind } for pid=3543 comm="syz.9.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.597092][ T36] audit: type=1400 audit(1788196299.577:1125): avc: denied { listen } for pid=3543 comm="syz.9.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.618239][ T36] audit: type=1400 audit(1788196299.577:1126): avc: denied { connect } for pid=3543 comm="syz.9.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.639061][ T36] audit: type=1400 audit(1788196299.577:1127): avc: denied { write } for pid=3543 comm="syz.9.1208" path="socket:[43003]" dev="sockfs" ino=43003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.663013][ T36] audit: type=1400 audit(1788196299.577:1128): avc: denied { accept } for pid=3543 comm="syz.9.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.316400][ T524] usb 6-1: 0:2 : does not exist [ 183.323952][ T31] usb 2-1: USB disconnect, device number 6 [ 183.330644][ T524] usb 6-1: unit 5: unexpected type 0x09 [ 183.340072][ T714] udevd[714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.345519][ T524] usb 6-1: USB disconnect, device number 33 [ 183.377364][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 183.380771][ T36] audit: type=1400 audit(1788196300.377:1129): avc: denied { mounton } for pid=3560 comm="syz.1.1216" path="/169/trace/events/kmem/kmalloc/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 183.671234][ T524] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 183.823190][ T524] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.849575][ T524] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.873064][ T524] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 183.882419][ T524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.901066][ T524] usb 6-1: Product: syz [ 183.905279][ T524] usb 6-1: Manufacturer: syz [ 183.909895][ T524] usb 6-1: SerialNumber: syz [ 183.925253][ T524] usb-storage 6-1:1.0: USB Mass Storage device detected [ 183.943009][ T524] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 183.962116][ T524] scsi host1: usb-storage 6-1:1.0 [ 184.027216][ T36] audit: type=1400 audit(1788196301.027:1130): avc: denied { getattr } for pid=3579 comm="syz.9.1222" path="/181/mnt_trace/trace_pipe" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 184.052302][ T3580] syz.9.1222 (3580): /proc/3579/oom_adj is deprecated, please use /proc/3579/oom_score_adj instead. [ 184.151688][ T3559] FAULT_INJECTION: forcing a failure. [ 184.151688][ T3559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.165154][ T3559] CPU: 1 UID: 0 PID: 3559 Comm: syz.5.1215 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 184.165199][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.165215][ T3559] Call Trace: [ 184.165225][ T3559] [ 184.165236][ T3559] __dump_stack+0x21/0x30 [ 184.165277][ T3559] dump_stack_lvl+0x140/0x1c0 [ 184.165306][ T3559] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.165344][ T3559] ? check_stack_object+0x138/0x150 [ 184.165370][ T3559] dump_stack+0x19/0x20 [ 184.165399][ T3559] should_fail_ex+0x3c2/0x510 [ 184.165426][ T3559] should_fail+0xf/0x20 [ 184.165449][ T3559] should_fail_usercopy+0x1e/0x30 [ 184.165477][ T3559] _copy_to_user+0x24/0xa0 [ 184.165507][ T3559] simple_read_from_buffer+0xed/0x160 [ 184.165540][ T3559] proc_fail_nth_read+0x1aa/0x220 [ 184.165570][ T3559] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 184.165602][ T3559] ? bpf_lsm_file_permission+0xd/0x20 [ 184.165628][ T3559] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 184.165656][ T3559] vfs_read+0x288/0xc70 [ 184.165678][ T3559] ? rb_commit+0x753/0x7b0 [ 184.165704][ T3559] ? __cfi_vfs_read+0x10/0x10 [ 184.165729][ T3559] ? __kasan_check_write+0x18/0x20 [ 184.165750][ T3559] ? mutex_lock+0x97/0x1d0 [ 184.165774][ T3559] ? __cfi_mutex_lock+0x10/0x10 [ 184.165796][ T3559] ksys_read+0x145/0x260 [ 184.165818][ T3559] ? __cfi_ksys_read+0x10/0x10 [ 184.165838][ T3559] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 184.165867][ T3559] __x64_sys_read+0x7f/0x90 [ 184.165888][ T3559] x64_sys_call+0x2638/0x2ee0 [ 184.165906][ T3559] do_syscall_64+0x57/0xf0 [ 184.165929][ T3559] ? clear_bhb_loop+0x50/0xa0 [ 184.165952][ T3559] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.165972][ T3559] RIP: 0033:0x7f4ae4b5e98e [ 184.165992][ T3559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.166009][ T3559] RSP: 002b:00007f4ae5a7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.166034][ T3559] RAX: ffffffffffffffda RBX: 00007f4ae5a7b6c0 RCX: 00007f4ae4b5e98e [ 184.166052][ T3559] RDX: 000000000000000f RSI: 00007f4ae5a7b0a0 RDI: 0000000000000005 [ 184.166067][ T3559] RBP: 00007f4ae5a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.166080][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.166092][ T3559] R13: 00007f4ae4e26038 R14: 00007f4ae4e25fa0 R15: 00007ffdcf0b38a8 [ 184.166110][ T3559] [ 184.416413][ T524] usb 6-1: USB disconnect, device number 34 [ 184.507623][ T3590] netlink: 'syz.1.1226': attribute type 13 has an invalid length. [ 184.518975][ T3590] erspan0: refused to change device tx_queue_len [ 184.542055][ T3593] FAULT_INJECTION: forcing a failure. [ 184.542055][ T3593] name failslab, interval 1, probability 0, space 0, times 0 [ 184.554900][ T3593] CPU: 0 UID: 0 PID: 3593 Comm: syz.9.1227 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 184.554944][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.554961][ T3593] Call Trace: [ 184.554971][ T3593] [ 184.554983][ T3593] __dump_stack+0x21/0x30 [ 184.555025][ T3593] dump_stack_lvl+0x140/0x1c0 [ 184.555057][ T3593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.555087][ T3593] dump_stack+0x19/0x20 [ 184.555115][ T3593] should_fail_ex+0x3c2/0x510 [ 184.555142][ T3593] should_failslab+0xac/0x100 [ 184.555170][ T3593] kmem_cache_alloc_noprof+0x42/0x410 [ 184.555195][ T3593] ? security_inode_alloc+0x51/0x230 [ 184.555222][ T3593] ? __cfi_make_kgid+0x10/0x10 [ 184.555249][ T3593] security_inode_alloc+0x51/0x230 [ 184.555276][ T3593] inode_init_always_gfp+0x756/0x9e0 [ 184.555303][ T3593] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 184.555331][ T3593] alloc_inode+0xc5/0x270 [ 184.555356][ T3593] ? __cfi__raw_spin_lock+0x10/0x10 [ 184.555388][ T3593] new_inode+0x25/0x1e0 [ 184.555415][ T3593] shmem_get_inode+0x352/0xc10 [ 184.555444][ T3593] shmem_mknod+0x63/0x200 [ 184.555474][ T3593] shmem_mkdir+0x3b/0x80 [ 184.555501][ T3593] vfs_mkdir+0x591/0x810 [ 184.555531][ T3593] do_mkdirat+0x240/0x530 [ 184.555560][ T3593] ? __cfi_do_mkdirat+0x10/0x10 [ 184.555588][ T3593] ? __kasan_check_write+0x18/0x20 [ 184.555611][ T3593] ? getname_flags+0x203/0x6b0 [ 184.555634][ T3593] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 184.555668][ T3593] __x64_sys_mkdirat+0x8b/0xa0 [ 184.555697][ T3593] x64_sys_call+0x2ba8/0x2ee0 [ 184.555717][ T3593] do_syscall_64+0x57/0xf0 [ 184.555746][ T3593] ? clear_bhb_loop+0x50/0xa0 [ 184.555771][ T3593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.555795][ T3593] RIP: 0033:0x7f0a73b9e159 [ 184.555816][ T3593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.555845][ T3593] RSP: 002b:00007f0a749ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 184.555876][ T3593] RAX: ffffffffffffffda RBX: 00007f0a73e25fa0 RCX: 00007f0a73b9e159 [ 184.555895][ T3593] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 184.555914][ T3593] RBP: 00007f0a73c35024 R08: 0000000000000000 R09: 0000000000000000 [ 184.555931][ T3593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.555948][ T3593] R13: 00007f0a73e26038 R14: 00007f0a73e25fa0 R15: 00007fff3c28bfb8 [ 184.555971][ T3593] [ 185.134237][ T36] audit: type=1400 audit(1788196302.137:1131): avc: denied { read } for pid=3596 comm="syz.9.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.155925][ T36] audit: type=1400 audit(1788196302.137:1132): avc: denied { ioctl } for pid=3596 comm="syz.9.1230" path="socket:[45474]" dev="sockfs" ino=45474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.371115][ T45] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 185.522542][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.532940][ T45] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 185.543960][ T45] usb 10-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 185.553202][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.561340][ T45] usb 10-1: Product: syz [ 185.565610][ T45] usb 10-1: Manufacturer: syz [ 185.570277][ T45] usb 10-1: SerialNumber: syz [ 185.780602][ T45] usb 10-1: USB disconnect, device number 35 [ 186.071083][ T524] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.242375][ T524] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.261065][ T524] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 186.283164][ T524] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 186.305345][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.321046][ T524] usb 2-1: Product: syz [ 186.325265][ T524] usb 2-1: Manufacturer: syz [ 186.329889][ T524] usb 2-1: SerialNumber: syz [ 186.353536][ T524] usb-storage 2-1:1.0: USB Mass Storage device detected [ 186.372180][ T524] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 186.382937][ T524] scsi host1: usb-storage 2-1:1.0 [ 186.653574][ T3627] ./dev/sda1: Can't lookup blockdev [ 186.740495][ T45] usb 2-1: USB disconnect, device number 7 [ 187.039076][ T3642] tipc: Started in network mode [ 187.044178][ T3642] tipc: Node identity ac14140f, cluster identity 4711 [ 187.051899][ T3642] tipc: New replicast peer: 255.255.255.255 [ 187.058214][ T3642] tipc: Enabled bearer , priority 10 [ 187.191455][ T524] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 187.342381][ T524] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.361336][ T524] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.373080][ T524] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 187.382760][ T524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.390778][ T524] usb 6-1: Product: syz [ 187.395287][ T524] usb 6-1: Manufacturer: syz [ 187.399901][ T524] usb 6-1: SerialNumber: syz [ 187.498346][ T3652] FAULT_INJECTION: forcing a failure. [ 187.498346][ T3652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.511923][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: syz.1.1251 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 187.511960][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.511975][ T3652] Call Trace: [ 187.511983][ T3652] [ 187.511995][ T3652] __dump_stack+0x21/0x30 [ 187.512030][ T3652] dump_stack_lvl+0x140/0x1c0 [ 187.512057][ T3652] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.512081][ T3652] ? __kasan_check_read+0x15/0x20 [ 187.512105][ T3652] dump_stack+0x19/0x20 [ 187.512128][ T3652] should_fail_ex+0x3c2/0x510 [ 187.512155][ T3652] should_fail_alloc_page+0xec/0x110 [ 187.512181][ T3652] __alloc_pages_noprof+0x1c0/0x7e0 [ 187.512211][ T3652] ? __kasan_check_read+0x15/0x20 [ 187.512233][ T3652] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 187.512265][ T3652] __folio_alloc_noprof+0x14/0x80 [ 187.512288][ T3652] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 187.512303][ T3652] ? trace_event_buffer_commit+0x256/0x8f0 [ 187.512318][ T3652] ? shmem_replace_folio+0x9b0/0x9b0 [ 187.512336][ T3652] ? shmem_huge_global_enabled+0x2da/0x360 [ 187.512360][ T3652] ? shmem_allowable_huge_orders+0x405/0x430 [ 187.512386][ T3652] shmem_get_folio_gfp+0x5cd/0x12e0 [ 187.512412][ T3652] ? shmem_get_folio+0xc0/0xc0 [ 187.512434][ T3652] ? __cfi_filemap_map_pages+0x10/0x10 [ 187.512453][ T3652] ? folio_unlock+0x137/0x1b0 [ 187.512466][ T3652] shmem_fault+0x17d/0x350 [ 187.512480][ T3652] do_pte_missing+0x3649/0x4440 [ 187.512503][ T3652] ? pte_marker_clear+0x1b0/0x1b0 [ 187.512529][ T3652] ? cgroup_rstat_updated+0x144/0x800 [ 187.512555][ T3652] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 187.512579][ T3652] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 187.512601][ T3652] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 187.512613][ T3652] handle_mm_fault+0x1189/0x1ba0 [ 187.512627][ T3652] ? __kasan_check_write+0x18/0x20 [ 187.512640][ T3652] ? __cfi_handle_mm_fault+0x10/0x10 [ 187.512661][ T3652] ? follow_page_pte+0x4b2/0xba0 [ 187.512701][ T3652] ? gup_must_unshare+0x1e0/0x1e0 [ 187.512730][ T3652] ? vma_is_secretmem+0x11/0x50 [ 187.512754][ T3652] ? check_vma_flags+0x337/0x3a0 [ 187.512769][ T3652] __get_user_pages+0x114b/0x22d0 [ 187.512786][ T3652] ? populate_vma_page_range+0x220/0x220 [ 187.512802][ T3652] ? down_read+0x7f/0xe0 [ 187.512828][ T3652] ? __cfi_down_read+0x10/0x10 [ 187.512853][ T3652] __mm_populate+0x300/0x440 [ 187.512880][ T3652] vm_mmap_pgoff+0x426/0x4b0 [ 187.512902][ T3652] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 187.512914][ T3652] ? trace_event_buffer_commit+0x256/0x8f0 [ 187.512927][ T3652] ksys_mmap_pgoff+0xfa/0x1e0 [ 187.512939][ T3652] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 187.512961][ T3652] __x64_sys_mmap+0x121/0x140 [ 187.512983][ T3652] x64_sys_call+0x13bf/0x2ee0 [ 187.513004][ T3652] do_syscall_64+0x57/0xf0 [ 187.513032][ T3652] ? clear_bhb_loop+0x50/0xa0 [ 187.513056][ T3652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.513070][ T3652] RIP: 0033:0x7fa48c19e159 [ 187.513082][ T3652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.513093][ T3652] RSP: 002b:00007fa48d04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 187.513110][ T3652] RAX: ffffffffffffffda RBX: 00007fa48c425fa0 RCX: 00007fa48c19e159 [ 187.513128][ T3652] RDX: b635773f07ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 187.513145][ T3652] RBP: 00007fa48d04c090 R08: ffffffffffffffff R09: 000000001b5cb000 [ 187.513163][ T3652] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 187.513178][ T3652] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 187.513198][ T3652] [ 187.610718][ T524] usb 6-1: 0:1 : does not exist [ 187.883837][ T524] usb 6-1: unit 6 not found! [ 187.888487][ T524] usb 6-1: unit 2 not found! [ 187.898059][ T524] usb 6-1: USB disconnect, device number 35 [ 187.910075][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.949094][ T3661] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 187.957780][ T3661] overlayfs: overlapping lowerdir path [ 187.996227][ T3666] FAULT_INJECTION: forcing a failure. [ 187.996227][ T3666] name failslab, interval 1, probability 0, space 0, times 0 [ 188.009240][ T3666] CPU: 1 UID: 0 PID: 3666 Comm: syz.1.1256 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 188.009300][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.009315][ T3666] Call Trace: [ 188.009324][ T3666] [ 188.009335][ T3666] __dump_stack+0x21/0x30 [ 188.009371][ T3666] dump_stack_lvl+0x140/0x1c0 [ 188.009396][ T3666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 188.009425][ T3666] dump_stack+0x19/0x20 [ 188.009450][ T3666] should_fail_ex+0x3c2/0x510 [ 188.009475][ T3666] should_failslab+0xac/0x100 [ 188.009502][ T3666] kmem_cache_alloc_noprof+0x42/0x410 [ 188.009525][ T3666] ? kvm_sched_clock_read+0x15/0x30 [ 188.009551][ T3666] ? alloc_empty_file+0xbf/0x270 [ 188.009579][ T3666] alloc_empty_file+0xbf/0x270 [ 188.009606][ T3666] path_openat+0xf4/0x35a0 [ 188.009637][ T3666] ? rb_commit+0x753/0x7b0 [ 188.009662][ T3666] ? __kasan_check_read+0x15/0x20 [ 188.009683][ T3666] ? do_filp_open+0x440/0x440 [ 188.009707][ T3666] do_filp_open+0x1f2/0x440 [ 188.009740][ T3666] ? __cfi_do_filp_open+0x10/0x10 [ 188.009770][ T3666] ? alloc_fd+0x4c1/0x570 [ 188.009796][ T3666] do_sys_openat2+0x134/0x1d0 [ 188.009824][ T3666] ? do_sys_open+0x100/0x100 [ 188.009853][ T3666] __x64_sys_openat+0x13a/0x170 [ 188.009882][ T3666] x64_sys_call+0xe69/0x2ee0 [ 188.009902][ T3666] do_syscall_64+0x57/0xf0 [ 188.009930][ T3666] ? clear_bhb_loop+0x50/0xa0 [ 188.009954][ T3666] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.009977][ T3666] RIP: 0033:0x7fa48c19e159 [ 188.009997][ T3666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.010016][ T3666] RSP: 002b:00007fa48d04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.010043][ T3666] RAX: ffffffffffffffda RBX: 00007fa48c425fa0 RCX: 00007fa48c19e159 [ 188.010060][ T3666] RDX: 0000000000383900 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 188.010076][ T3666] RBP: 00007fa48d04c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.010092][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.010107][ T3666] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 188.010127][ T3666] [ 188.229399][ T45] tipc: Node number set to 2886997007 [ 188.315732][ T3668] : renamed from lo [ 188.465707][ T3674] syz.1.1260 (3674) used obsolete PPPIOCDETACH ioctl [ 188.721069][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 188.892346][ T10] usb 10-1: config index 0 descriptor too short (expected 4257, got 161) [ 188.901023][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.912045][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 188.921230][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.011121][ T2249] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 189.134182][ T10] usb 10-1: string descriptor 0 read error: -71 [ 189.141895][ T10] uvcvideo 10-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 189.151020][ T10] usb 10-1: Found UVC 1.00 device (046d:0825) [ 189.158021][ T10] uvcvideo 10-1:1.1: No supported video formats found. [ 189.165045][ T10] uvcvideo 10-1:1.1: Failed to initialize the device (-22). [ 189.175958][ T2249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 189.187249][ T10] usb 10-1: USB disconnect, device number 36 [ 189.193399][ T2249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.207578][ T2249] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 189.216781][ T2249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.224914][ T2249] usb 6-1: Product: syz [ 189.229110][ T2249] usb 6-1: Manufacturer: syz [ 189.233777][ T2249] usb 6-1: SerialNumber: syz [ 189.239512][ T2249] usb 6-1: config 0 descriptor?? [ 189.246046][ T2249] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 189.254431][ T2249] usb 6-1: Detected SIO [ 189.258633][ T2249] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 189.266413][ T2249] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 189.275296][ T2249] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.429350][ T36] audit: type=1400 audit(1788196306.427:1133): avc: denied { ioctl } for pid=3688 comm="syz.1.1267" path="/186/tracing/synthetic_events" dev="tracefs" ino=23 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 189.429619][ T3689] FAULT_INJECTION: forcing a failure. [ 189.429619][ T3689] name fail_futex, interval 1, probability 0, space 0, times 1 [ 189.462098][ T524] usb 6-1: USB disconnect, device number 36 [ 189.468297][ T3689] CPU: 0 UID: 0 PID: 3689 Comm: syz.1.1267 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 189.468333][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.468349][ T3689] Call Trace: [ 189.468357][ T3689] [ 189.468367][ T3689] __dump_stack+0x21/0x30 [ 189.468402][ T3689] dump_stack_lvl+0x140/0x1c0 [ 189.468428][ T3689] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.468456][ T3689] dump_stack+0x19/0x20 [ 189.468480][ T3689] should_fail_ex+0x3c2/0x510 [ 189.468505][ T3689] should_fail+0xf/0x20 [ 189.468526][ T3689] get_futex_key+0x178/0x940 [ 189.468552][ T3689] ? __cfi_get_futex_key+0x10/0x10 [ 189.468574][ T3689] ? __kasan_record_aux_stack+0xb2/0xd0 [ 189.468594][ T3689] ? __call_rcu_common+0xd5/0x710 [ 189.468617][ T3689] ? call_rcu+0x14/0x20 [ 189.468636][ T3689] ? evict+0x8a0/0xaf0 [ 189.468655][ T3689] ? __sock_create+0x646/0x810 [ 189.468677][ T3689] ? __sys_socket+0xe1/0x1c0 [ 189.468698][ T3689] futex_wait_setup+0xae/0x260 [ 189.468718][ T3689] ? __cfi__raw_spin_trylock+0x10/0x10 [ 189.468746][ T3689] ? __cfi_futex_wait_setup+0x10/0x10 [ 189.468766][ T3689] ? __asan_memcpy+0x5a/0x80 [ 189.468787][ T3689] __futex_wait+0x12c/0x3d0 [ 189.468807][ T3689] ? __cfi___futex_wait+0x10/0x10 [ 189.468826][ T3689] ? __cfi_trace_clock_local+0x10/0x10 [ 189.468845][ T3689] ? __cfi_futex_wake_mark+0x10/0x10 [ 189.468866][ T3689] ? __kasan_check_read+0x15/0x20 [ 189.468887][ T3689] futex_wait+0x128/0x7c0 [ 189.468906][ T3689] ? __cfi_futex_wait+0x10/0x10 [ 189.468926][ T3689] ? __kasan_check_read+0x15/0x20 [ 189.468956][ T3689] ? rb_commit+0x753/0x7b0 [ 189.468978][ T3689] do_futex+0x32a/0x510 [ 189.469004][ T3689] ? __cfi_do_futex+0x10/0x10 [ 189.469029][ T3689] __se_sys_futex+0x13c/0x320 [ 189.469055][ T3689] ? __x64_sys_futex+0x110/0x110 [ 189.469080][ T3689] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 189.469111][ T3689] __x64_sys_futex+0xe9/0x110 [ 189.469137][ T3689] x64_sys_call+0x227f/0x2ee0 [ 189.469176][ T3689] do_syscall_64+0x57/0xf0 [ 189.469203][ T3689] ? clear_bhb_loop+0x50/0xa0 [ 189.469227][ T3689] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.469250][ T3689] RIP: 0033:0x7fa48c19e159 [ 189.469269][ T3689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.469287][ T3689] RSP: 002b:00007fa48d04c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.469312][ T3689] RAX: ffffffffffffffda RBX: 00007fa48c425fa8 RCX: 00007fa48c19e159 [ 189.469329][ T3689] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa48c425fa8 [ 189.469345][ T3689] RBP: 00007fa48c425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 189.469360][ T3689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.469375][ T3689] R13: 00007fa48c426038 R14: 00007ffdf250d810 R15: 00007ffdf250d8f8 [ 189.469393][ T3689] [ 189.761648][ T524] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 189.781432][ T524] ftdi_sio 6-1:0.0: device disconnected [ 190.254048][ T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 190.274978][ T3714] FAULT_INJECTION: forcing a failure. [ 190.274978][ T3714] name failslab, interval 1, probability 0, space 0, times 0 [ 190.294863][ T3714] CPU: 1 UID: 0 PID: 3714 Comm: syz.7.1278 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 190.294918][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.294936][ T3714] Call Trace: [ 190.294947][ T3714] [ 190.294959][ T3714] __dump_stack+0x21/0x30 [ 190.295006][ T3714] dump_stack_lvl+0x140/0x1c0 [ 190.295037][ T3714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.295069][ T3714] dump_stack+0x19/0x20 [ 190.295095][ T3714] should_fail_ex+0x3c2/0x510 [ 190.295119][ T3714] should_failslab+0xac/0x100 [ 190.295143][ T3714] __kmalloc_cache_noprof+0x41/0x470 [ 190.295165][ T3714] ? fuse_file_alloc+0xd0/0x380 [ 190.295187][ T3714] fuse_file_alloc+0xd0/0x380 [ 190.295207][ T3714] ? fuse_permission+0x3424/0x3be0 [ 190.295235][ T3714] fuse_file_open+0x17c/0x940 [ 190.295257][ T3714] ? __cfi_fuse_permission+0x10/0x10 [ 190.295286][ T3714] ? __kasan_check_read+0x15/0x20 [ 190.295310][ T3714] ? __cfi_fuse_file_open+0x10/0x10 [ 190.295334][ T3714] ? is_bpf_text_address+0x17b/0x1a0 [ 190.295366][ T3714] ? __cfi_trace_clock_local+0x10/0x10 [ 190.295390][ T3714] fuse_open+0x549/0x1ce0 [ 190.295416][ T3714] ? __rb_reserve_next+0x7d4/0xdf0 [ 190.295449][ T3714] ? __cfi_fuse_open+0x10/0x10 [ 190.295474][ T3714] ? __cfi_avc_has_perm+0x10/0x10 [ 190.295499][ T3714] ? selinux_file_open+0x46c/0x630 [ 190.295521][ T3714] ? __cfi_selinux_file_open+0x10/0x10 [ 190.295542][ T3714] ? bpf_lsm_file_open+0xd/0x20 [ 190.295570][ T3714] ? __cfi_fuse_open+0x10/0x10 [ 190.295590][ T3714] do_dentry_open+0x97f/0x1510 [ 190.295618][ T3714] vfs_open+0x86/0x240 [ 190.295642][ T3714] ? __cfi_vfs_open+0x10/0x10 [ 190.295668][ T3714] ? inode_owner_or_capable+0xf0/0x1b0 [ 190.295690][ T3714] ? may_open+0x398/0x430 [ 190.295718][ T3714] path_openat+0x2c49/0x35a0 [ 190.295743][ T3714] ? rb_commit+0x753/0x7b0 [ 190.295766][ T3714] ? do_filp_open+0x440/0x440 [ 190.295799][ T3714] do_filp_open+0x1f2/0x440 [ 190.295821][ T3714] ? __cfi_do_filp_open+0x10/0x10 [ 190.295845][ T3714] ? alloc_fd+0x4c1/0x570 [ 190.295866][ T3714] do_sys_openat2+0x134/0x1d0 [ 190.295905][ T3714] ? do_sys_open+0x100/0x100 [ 190.295932][ T3714] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 190.295967][ T3714] __x64_sys_open+0x120/0x150 [ 190.295992][ T3714] x64_sys_call+0x131a/0x2ee0 [ 190.296011][ T3714] do_syscall_64+0x57/0xf0 [ 190.296042][ T3714] ? clear_bhb_loop+0x50/0xa0 [ 190.296069][ T3714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.296092][ T3714] RIP: 0033:0x7fa0a739e159 [ 190.296114][ T3714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.296135][ T3714] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 190.296167][ T3714] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 190.296186][ T3714] RDX: 1800000000000000 RSI: 0000000000048141 RDI: 0000200000000080 [ 190.296203][ T3714] RBP: 00007fa0a7435024 R08: 0000000000000000 R09: 0000000000000000 [ 190.296218][ T3714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.296233][ T3714] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 190.296253][ T3714] [ 190.307894][ T714] udevd[714]: symlink '../../loop6' '/dev/disk/by-diskseq/166.tmp-b7:6' failed: Read-only file system [ 190.637435][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/166.tmp-b7:6' failed: Read-only file system [ 190.665626][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/166.tmp-b7:6' failed: Read-only file system [ 190.675635][ T3731] FAULT_INJECTION: forcing a failure. [ 190.675635][ T3731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.689970][ T10] usb 10-1: device descriptor read/64, error -71 [ 190.696920][ T3731] CPU: 0 UID: 0 PID: 3731 Comm: syz.5.1284 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 190.696954][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.696968][ T3731] Call Trace: [ 190.696975][ T3731] [ 190.696983][ T3731] __dump_stack+0x21/0x30 [ 190.697016][ T3731] dump_stack_lvl+0x140/0x1c0 [ 190.697043][ T3731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.697070][ T3731] dump_stack+0x19/0x20 [ 190.697093][ T3731] should_fail_ex+0x3c2/0x510 [ 190.697118][ T3731] should_fail+0xf/0x20 [ 190.697136][ T3731] should_fail_usercopy+0x1e/0x30 [ 190.697159][ T3731] _copy_from_user+0x20/0xa0 [ 190.697187][ T3731] arp_ioctl+0x147/0x3c0 [ 190.697212][ T3731] ? __cfi_arp_ioctl+0x10/0x10 [ 190.697234][ T3731] inet_ioctl+0x3cb/0x570 [ 190.697252][ T3731] ? __cfi_inet_ioctl+0x10/0x10 [ 190.697274][ T3731] sock_do_ioctl+0x115/0x330 [ 190.697294][ T3731] ? sock_show_fdinfo+0xd0/0xd0 [ 190.697311][ T3731] ? __kasan_check_read+0x15/0x20 [ 190.697332][ T3731] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 190.697356][ T3731] sock_ioctl+0x568/0x7e0 [ 190.697383][ T3731] ? __cfi_sock_ioctl+0x10/0x10 [ 190.697422][ T3731] ? __fget_files+0x2bc/0x330 [ 190.697448][ T3731] ? bpf_lsm_file_ioctl+0xd/0x20 [ 190.697474][ T3731] ? security_file_ioctl+0x3e/0x110 [ 190.697495][ T3731] ? __cfi_sock_ioctl+0x10/0x10 [ 190.697522][ T3731] __se_sys_ioctl+0x123/0x1b0 [ 190.697547][ T3731] __x64_sys_ioctl+0x7f/0xa0 [ 190.697575][ T3731] x64_sys_call+0x1878/0x2ee0 [ 190.697596][ T3731] do_syscall_64+0x57/0xf0 [ 190.697624][ T3731] ? clear_bhb_loop+0x50/0xa0 [ 190.697650][ T3731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.697673][ T3731] RIP: 0033:0x7f4ae4b9e159 [ 190.697693][ T3731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.697711][ T3731] RSP: 002b:00007f4ae5a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.697737][ T3731] RAX: ffffffffffffffda RBX: 00007f4ae4e25fa0 RCX: 00007f4ae4b9e159 [ 190.697755][ T3731] RDX: 0000200000000140 RSI: 0000000000008953 RDI: 0000000000000003 [ 190.697771][ T3731] RBP: 00007f4ae5a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 190.697785][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.697801][ T3731] R13: 00007f4ae4e26038 R14: 00007f4ae4e25fa0 R15: 00007ffdcf0b38a8 [ 190.697819][ T3731] [ 190.741141][ T524] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.773109][ T3735] ./dev/sda1: Can't lookup blockdev [ 190.911144][ T524] usb 2-1: device descriptor read/64, error -71 [ 190.960354][ T36] audit: type=1400 audit(1788196307.957:1134): avc: denied { setopt } for pid=3739 comm="syz.5.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.037821][ T3744] FAULT_INJECTION: forcing a failure. [ 191.037821][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 191.050765][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.7.1289 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 191.050804][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.050830][ T3744] Call Trace: [ 191.050838][ T3744] [ 191.050848][ T3744] __dump_stack+0x21/0x30 [ 191.050880][ T3744] dump_stack_lvl+0x140/0x1c0 [ 191.050903][ T3744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.050929][ T3744] dump_stack+0x19/0x20 [ 191.050956][ T3744] should_fail_ex+0x3c2/0x510 [ 191.050981][ T3744] should_failslab+0xac/0x100 [ 191.051006][ T3744] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 191.051028][ T3744] ? avc_has_perm_noaudit+0x26b/0x360 [ 191.051053][ T3744] ? shmem_alloc_inode+0x3b/0xd0 [ 191.051079][ T3744] ? __asan_memcpy+0x5a/0x80 [ 191.051100][ T3744] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 191.051124][ T10] usb 10-1: device descriptor read/64, error -71 [ 191.051122][ T3744] shmem_alloc_inode+0x3b/0xd0 [ 191.051148][ T3744] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 191.051171][ T3744] alloc_inode+0x7a/0x270 [ 191.051195][ T3744] new_inode+0x25/0x1e0 [ 191.051220][ T3744] shmem_get_inode+0x352/0xc10 [ 191.051246][ T3744] __shmem_file_setup+0x173/0x2c0 [ 191.051270][ T3744] shmem_zero_setup+0x90/0x130 [ 191.051293][ T3744] mmap_region+0x1659/0x1d10 [ 191.051315][ T3744] ? __kasan_check_read+0x15/0x20 [ 191.051337][ T3744] ? __cfi_mmap_region+0x10/0x10 [ 191.051358][ T3744] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 191.051384][ T3744] ? trace_event_raw_event_mmap_lock_acquire_returned+0x203/0x320 [ 191.051427][ T3744] ? __kasan_check_read+0x15/0x20 [ 191.051449][ T3744] ? __get_unmapped_area+0x406/0x470 [ 191.051471][ T3744] do_mmap+0xb61/0x13b0 [ 191.051491][ T3744] ? __cfi_do_mmap+0x10/0x10 [ 191.051511][ T3744] ? __cfi_down_write_killable+0x10/0x10 [ 191.051540][ T3744] vm_mmap_pgoff+0x367/0x4b0 [ 191.051561][ T3744] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 191.051581][ T3744] ? trace_event_buffer_commit+0x256/0x8f0 [ 191.051607][ T3744] vm_mmap+0x8b/0xc0 [ 191.051626][ T3744] __x86_set_memory_region+0x33c/0x590 [ 191.051655][ T3744] ? __alloc_pages_noprof+0x793/0x7e0 [ 191.051685][ T3744] ? __cfi___x86_set_memory_region+0x10/0x10 [ 191.051714][ T3744] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 191.051739][ T3744] ? __kasan_check_write+0x18/0x20 [ 191.051759][ T3744] ? mutex_lock+0x97/0x1d0 [ 191.051780][ T3744] ? __cfi_mutex_lock+0x10/0x10 [ 191.051801][ T3744] ? kvm_msr_allowed+0x313/0x370 [ 191.051828][ T3744] kvm_alloc_apic_access_page+0xb6/0x210 [ 191.051853][ T3744] vmx_vcpu_create+0x7f1/0x1280 [ 191.051880][ T3744] ? kvm_pmu_reset+0x35f/0x3a0 [ 191.051902][ T3744] ? __cfi_vmx_vcpu_create+0x10/0x10 [ 191.051929][ T3744] ? __asan_memset+0x39/0x50 [ 191.051949][ T3744] ? kvm_pmu_refresh+0x327/0x510 [ 191.051971][ T3744] kvm_arch_vcpu_create+0x651/0xb90 [ 191.051999][ T3744] kvm_vm_ioctl_create_vcpu+0x3a7/0xab0 [ 191.052027][ T3744] ? _parse_integer+0x2e/0x40 [ 191.052049][ T3744] kvm_vm_ioctl+0x7bd/0xc40 [ 191.052074][ T3744] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 191.052099][ T3744] ? __cfi_trace_clock_local+0x10/0x10 [ 191.052119][ T3744] ? ioctl_has_perm+0x1bc/0x500 [ 191.052139][ T3744] ? __asan_memcpy+0x5a/0x80 [ 191.052159][ T3744] ? ioctl_has_perm+0x408/0x500 [ 191.052178][ T3744] ? has_cap_mac_admin+0xd0/0xd0 [ 191.052201][ T3744] ? selinux_file_ioctl+0x732/0x1480 [ 191.052221][ T3744] ? __kasan_check_read+0x15/0x20 [ 191.052241][ T3744] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 191.052263][ T3744] ? __kasan_check_read+0x15/0x20 [ 191.052282][ T3744] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 191.052306][ T3744] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 191.052329][ T3744] ? __fget_files+0x2bc/0x330 [ 191.052355][ T3744] ? bpf_lsm_file_ioctl+0xd/0x20 [ 191.052380][ T3744] ? security_file_ioctl+0x3e/0x110 [ 191.052405][ T3744] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 191.052438][ T3744] __se_sys_ioctl+0x123/0x1b0 [ 191.052462][ T3744] __x64_sys_ioctl+0x7f/0xa0 [ 191.052486][ T3744] x64_sys_call+0x1878/0x2ee0 [ 191.052505][ T3744] do_syscall_64+0x57/0xf0 [ 191.052531][ T3744] ? clear_bhb_loop+0x50/0xa0 [ 191.052555][ T3744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 191.052578][ T3744] RIP: 0033:0x7fa0a739e159 [ 191.052597][ T3744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.052617][ T3744] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.052643][ T3744] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 191.052661][ T3744] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 191.052675][ T3744] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.052690][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.052704][ T3744] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 191.052723][ T3744] [ 191.087413][ T36] audit: type=1400 audit(1788196308.067:1135): avc: denied { append } for pid=3741 comm="syz.5.1288" name="sda1" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.164539][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 191.221137][ T524] usb 2-1: device descriptor read/64, error -71 [ 191.308942][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 191.561196][ T524] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.569115][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 191.593613][ T36] audit: type=1400 audit(1788196308.587:1136): avc: denied { create } for pid=3750 comm="syz.5.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.625809][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 191.673189][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/169.tmp-b7:6' failed: Read-only file system [ 191.711086][ T524] usb 2-1: device descriptor read/64, error -71 [ 191.731127][ T10] usb 10-1: device descriptor read/64, error -71 [ 191.764767][ T3758] FAULT_INJECTION: forcing a failure. [ 191.764767][ T3758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.778347][ T3758] CPU: 0 UID: 0 PID: 3758 Comm: syz.7.1294 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 191.778424][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.778439][ T3758] Call Trace: [ 191.778448][ T3758] [ 191.778458][ T3758] __dump_stack+0x21/0x30 [ 191.778493][ T3758] dump_stack_lvl+0x140/0x1c0 [ 191.778517][ T3758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.778543][ T3758] ? __cfi_trace_clock_local+0x10/0x10 [ 191.778565][ T3758] dump_stack+0x19/0x20 [ 191.778590][ T3758] should_fail_ex+0x3c2/0x510 [ 191.778613][ T3758] should_fail+0xf/0x20 [ 191.778633][ T3758] should_fail_usercopy+0x1e/0x30 [ 191.778657][ T3758] _copy_to_user+0x24/0xa0 [ 191.778686][ T3758] kvm_arch_dev_ioctl+0x24f/0x990 [ 191.778705][ T3758] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 191.778726][ T3758] ? selinux_file_ioctl+0x732/0x1480 [ 191.778748][ T3758] ? __kasan_check_read+0x15/0x20 [ 191.778771][ T3758] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 191.778793][ T3758] ? __kasan_check_read+0x15/0x20 [ 191.778812][ T3758] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 191.778835][ T3758] kvm_dev_ioctl+0x48e/0x14c0 [ 191.778864][ T3758] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 191.778889][ T3758] ? bpf_lsm_file_ioctl+0xd/0x20 [ 191.778916][ T3758] ? security_file_ioctl+0x3e/0x110 [ 191.778934][ T3758] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 191.778958][ T3758] __se_sys_ioctl+0x123/0x1b0 [ 191.778984][ T3758] __x64_sys_ioctl+0x7f/0xa0 [ 191.779006][ T3758] x64_sys_call+0x1878/0x2ee0 [ 191.779027][ T3758] do_syscall_64+0x57/0xf0 [ 191.779055][ T3758] ? clear_bhb_loop+0x50/0xa0 [ 191.779080][ T3758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 191.779103][ T3758] RIP: 0033:0x7fa0a739e159 [ 191.779124][ T3758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.779144][ T3758] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.779169][ T3758] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 191.779186][ T3758] RDX: 0000200000000080 RSI: 000000008008ae9d RDI: 0000000000000003 [ 191.779202][ T3758] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.779218][ T3758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.779233][ T3758] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 191.779253][ T3758] [ 191.792516][ T3760] ./dev/sda1: Can't lookup blockdev [ 191.845025][ T3762] netlink: 'syz.7.1296': attribute type 12 has an invalid length. [ 191.981135][ T524] usb 2-1: device descriptor read/64, error -71 [ 192.042402][ T10] usb 10-1: device descriptor read/64, error -71 [ 192.042495][ T36] audit: type=1400 audit(1788196309.007:1137): avc: denied { shutdown } for pid=3761 comm="syz.7.1296" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.151392][ T10] usb usb10-port1: attempt power cycle [ 192.151471][ T524] usb usb2-port1: attempt power cycle [ 192.207667][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 192.284450][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/170.tmp-b7:6' failed: Read-only file system [ 192.493279][ T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 192.511236][ T524] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.522450][ T10] usb 10-1: device descriptor read/8, error -71 [ 192.532289][ T524] usb 2-1: device descriptor read/8, error -71 [ 192.652987][ T10] usb 10-1: device descriptor read/8, error -71 [ 192.682346][ T524] usb 2-1: device descriptor read/8, error -71 [ 192.780145][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.799047][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.812670][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.826381][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.839162][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.852342][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.865384][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.878963][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.901206][ T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 192.912664][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.941054][ T524] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.941301][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3797 comm=syz.7.1307 [ 192.962337][ T524] usb 2-1: device descriptor read/8, error -71 [ 193.040018][ T3813] FAULT_INJECTION: forcing a failure. [ 193.040018][ T3813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.053653][ T3813] CPU: 1 UID: 0 PID: 3813 Comm: syz.7.1311 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 193.053691][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.053705][ T3813] Call Trace: [ 193.053715][ T3813] [ 193.053728][ T3813] __dump_stack+0x21/0x30 [ 193.053766][ T3813] dump_stack_lvl+0x140/0x1c0 [ 193.053793][ T3813] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.053818][ T3813] ? do_vfs_ioctl+0x1824/0x2010 [ 193.053846][ T3813] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 193.053873][ T3813] dump_stack+0x19/0x20 [ 193.053899][ T3813] should_fail_ex+0x3c2/0x510 [ 193.053926][ T3813] should_fail+0xf/0x20 [ 193.053948][ T3813] should_fail_usercopy+0x1e/0x30 [ 193.053972][ T3813] _copy_from_user+0x20/0xa0 [ 193.054001][ T3813] kvm_vm_ioctl+0x722/0xc40 [ 193.054032][ T3813] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 193.054059][ T3813] ? __cfi_trace_clock_local+0x10/0x10 [ 193.054083][ T3813] ? ioctl_has_perm+0x408/0x500 [ 193.054106][ T3813] ? has_cap_mac_admin+0xd0/0xd0 [ 193.054130][ T3813] ? selinux_file_ioctl+0x732/0x1480 [ 193.054152][ T3813] ? __kasan_check_read+0x15/0x20 [ 193.054176][ T3813] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 193.054198][ T3813] ? __kasan_check_read+0x15/0x20 [ 193.054219][ T3813] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 193.054243][ T3813] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 193.054269][ T3813] ? __fget_files+0x2bc/0x330 [ 193.054293][ T3813] ? bpf_lsm_file_ioctl+0xd/0x20 [ 193.054319][ T3813] ? security_file_ioctl+0x3e/0x110 [ 193.054340][ T3813] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 193.054366][ T3813] __se_sys_ioctl+0x123/0x1b0 [ 193.054391][ T3813] __x64_sys_ioctl+0x7f/0xa0 [ 193.054416][ T3813] x64_sys_call+0x1878/0x2ee0 [ 193.054436][ T3813] do_syscall_64+0x57/0xf0 [ 193.054465][ T3813] ? clear_bhb_loop+0x50/0xa0 [ 193.054499][ T3813] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 193.054522][ T3813] RIP: 0033:0x7fa0a739e159 [ 193.054542][ T3813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.054561][ T3813] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.054604][ T3813] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 193.054622][ T3813] RDX: 0000200000000080 RSI: 000000004068aea3 RDI: 0000000000000004 [ 193.054637][ T3813] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.054653][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.054667][ T3813] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 193.054685][ T3813] [ 193.327745][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/172.tmp-b7:6' failed: Read-only file system [ 193.346119][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/172.tmp-b7:6' failed: Read-only file system [ 193.363779][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/173.tmp-b7:6' failed: Read-only file system [ 193.393497][ T524] usb 2-1: device descriptor read/8, error -71 [ 193.400623][ T10] usb 10-1: device not accepting address 40, error -71 [ 193.408472][ T10] usb usb10-port1: unable to enumerate USB device [ 193.426617][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/174.tmp-b7:6' failed: Read-only file system [ 193.442255][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/174.tmp-b7:6' failed: Read-only file system [ 193.464179][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/174.tmp-b7:6' failed: Read-only file system [ 193.501287][ T524] usb usb2-port1: unable to enumerate USB device [ 193.683109][ T36] audit: type=1326 audit(1788196310.687:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.5.1316" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae4b9e159 code=0x0 [ 194.104893][ T36] audit: type=1400 audit(1788196311.107:1139): avc: denied { sqpoll } for pid=3831 comm="syz.9.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.106082][ T3832] netlink: 'syz.9.1319': attribute type 1 has an invalid length. [ 194.132040][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1319'. [ 194.196146][ T3835] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1320'. [ 194.223608][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/176.tmp-b7:6' failed: Read-only file system [ 194.301818][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/176.tmp-b7:6' failed: Read-only file system [ 194.319887][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/176.tmp-b7:6' failed: Read-only file system [ 194.344444][ T314] udevd[314]: symlink '../../loop6' '/dev/disk/by-diskseq/177.tmp-b7:6' failed: Read-only file system [ 194.462599][ T3846] FAULT_INJECTION: forcing a failure. [ 194.462599][ T3846] name fail_futex, interval 1, probability 0, space 0, times 0 [ 194.475544][ T3846] CPU: 0 UID: 0 PID: 3846 Comm: syz.1.1325 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 194.475581][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.475600][ T3846] Call Trace: [ 194.475609][ T3846] [ 194.475620][ T3846] __dump_stack+0x21/0x30 [ 194.475651][ T3846] dump_stack_lvl+0x140/0x1c0 [ 194.475677][ T3846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.475707][ T3846] ? gup_fast_fallback+0x664/0x740 [ 194.475735][ T3846] dump_stack+0x19/0x20 [ 194.475759][ T3846] should_fail_ex+0x3c2/0x510 [ 194.475782][ T3846] should_fail+0xf/0x20 [ 194.475802][ T3846] should_fail_futex+0x3c/0x50 [ 194.475828][ T3846] futex_lock_pi_atomic+0x11b/0xcb0 [ 194.475856][ T3846] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 194.475883][ T3846] ? __cfi_futex_setup_timer+0x10/0x10 [ 194.475904][ T3846] ? __cfi_get_futex_key+0x10/0x10 [ 194.475928][ T3846] futex_lock_pi+0x2a7/0xa70 [ 194.475954][ T3846] ? _parse_integer+0x2e/0x40 [ 194.475976][ T3846] ? __cfi_futex_lock_pi+0x10/0x10 [ 194.476004][ T3846] ? kvm_sched_clock_read+0x15/0x30 [ 194.476030][ T3846] ? __cfi_futex_wake_mark+0x10/0x10 [ 194.476057][ T3846] ? __kasan_check_read+0x15/0x20 [ 194.476077][ T3846] ? rb_commit+0x753/0x7b0 [ 194.476099][ T3846] do_futex+0x270/0x510 [ 194.476123][ T3846] ? __cfi_do_futex+0x10/0x10 [ 194.476148][ T3846] __se_sys_futex+0x13c/0x320 [ 194.476174][ T3846] ? __x64_sys_futex+0x110/0x110 [ 194.476199][ T3846] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 194.476229][ T3846] __x64_sys_futex+0xe9/0x110 [ 194.476255][ T3846] x64_sys_call+0x227f/0x2ee0 [ 194.476273][ T3846] do_syscall_64+0x57/0xf0 [ 194.476300][ T3846] ? clear_bhb_loop+0x50/0xa0 [ 194.476323][ T3846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.476345][ T3846] RIP: 0033:0x7fa48c19e159 [ 194.476363][ T3846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.476383][ T3846] RSP: 002b:00007fa48d04c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 194.476407][ T3846] RAX: ffffffffffffffda RBX: 00007fa48c425fa0 RCX: 00007fa48c19e159 [ 194.476423][ T3846] RDX: 000000000000003d RSI: 0000000000000006 RDI: 0000000000000000 [ 194.476437][ T3846] RBP: 00007fa48d04c090 R08: 0000000000000000 R09: 0000000000000002 [ 194.476453][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.476466][ T3846] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 194.476484][ T3846] [ 194.761879][ T36] audit: type=1326 audit(1788196311.767:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.5.1327" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae4b9e159 code=0x0 [ 194.801050][ T524] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 194.856561][ T3856] syz.1.1329: attempt to access beyond end of device [ 194.856561][ T3856] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 194.869808][ T3856] EXT4-fs (loop1): unable to read superblock [ 194.962256][ T524] usb 10-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.975692][ T524] usb 10-1: config 0 interface 0 has no altsetting 0 [ 194.982749][ T524] usb 10-1: New USB device found, idVendor=1e81, idProduct=3232, bcdDevice= 0.00 [ 194.992290][ T524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.001228][ T524] usb 10-1: config 0 descriptor?? [ 195.408991][ T524] hid (null): report_id 3238645963 is invalid [ 195.416455][ T524] hid-generic 0003:1E81:3232.000B: report_id 3238645963 is invalid [ 195.424701][ T524] hid-generic 0003:1E81:3232.000B: item 0 4 1 8 parsing failed [ 195.432821][ T524] hid-generic 0003:1E81:3232.000B: probe with driver hid-generic failed with error -22 [ 195.598095][ T3862] fuse: Unknown parameter '0x0000000000000006' [ 195.612940][ T9] usb 10-1: USB disconnect, device number 41 [ 195.632972][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 195.911117][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 196.071074][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 196.077979][ T10] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 196.086371][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.096816][ T10] usb 6-1: config 0 has no interface number 0 [ 196.104705][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 196.113865][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.122105][ T10] usb 6-1: Product: syz [ 196.126286][ T10] usb 6-1: Manufacturer: syz [ 196.130901][ T10] usb 6-1: SerialNumber: syz [ 196.138671][ T10] usb 6-1: config 0 descriptor?? [ 196.150188][ T10] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 196.156811][ T10] usb 6-1: No valid video chain found. [ 196.286931][ T3880] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1339'. [ 196.353721][ T10] usb 6-1: USB disconnect, device number 37 [ 196.510604][ T36] audit: type=1400 audit(1788196313.507:1141): avc: denied { append } for pid=3883 comm="syz.7.1341" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.865412][ T36] audit: type=1400 audit(1788196313.867:1142): avc: denied { accept } for pid=3902 comm="syz.9.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 196.889771][ T3901] ./dev/sda1: Can't lookup blockdev [ 197.311100][ T31] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 197.446826][ T36] audit: type=1400 audit(1788196314.447:1143): avc: denied { read } for pid=3921 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.504440][ T31] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 197.519937][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.536174][ T31] usb 6-1: Product: syz [ 197.546175][ T31] usb 6-1: Manufacturer: syz [ 197.561964][ T31] usb 6-1: SerialNumber: syz [ 197.583101][ T31] pl2303 6-1:1.0: required interrupt-in endpoint missing [ 197.796231][ T311] usb 6-1: USB disconnect, device number 38 [ 197.861405][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.021036][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 198.033340][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.051086][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.073263][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 198.091043][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.109575][ T31] usb 2-1: Product: syz [ 198.113978][ T31] usb 2-1: Manufacturer: syz [ 198.118652][ T31] usb 2-1: SerialNumber: syz [ 198.176183][ T3934] cgroup: fork rejected by pids controller in /syz9 [ 198.337935][ T3927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.354607][ T3927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.392298][ T31] usb 2-1: unit 4 not found! [ 198.409176][ T31] usb 2-1: USB disconnect, device number 12 [ 198.691558][ T36] audit: type=1400 audit(1788196315.697:1144): avc: denied { getopt } for pid=4003 comm="syz.7.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.291075][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.453344][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 199.469369][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.489136][ T9] usb 2-1: config 0 descriptor?? [ 199.501535][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 199.517481][ T9] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 199.647251][ T4037] ./dev/sda1: Can't lookup blockdev [ 199.716304][ T4040] FAULT_INJECTION: forcing a failure. [ 199.716304][ T4040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.730195][ T4040] CPU: 0 UID: 0 PID: 4040 Comm: syz.7.1374 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 199.730243][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.730260][ T4040] Call Trace: [ 199.730269][ T4040] [ 199.730281][ T4040] __dump_stack+0x21/0x30 [ 199.730321][ T4040] dump_stack_lvl+0x140/0x1c0 [ 199.730350][ T4040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 199.730380][ T4040] dump_stack+0x19/0x20 [ 199.730407][ T4040] should_fail_ex+0x3c2/0x510 [ 199.730434][ T4040] should_fail_alloc_page+0xec/0x110 [ 199.730461][ T4040] __alloc_pages_noprof+0x1c0/0x7e0 [ 199.730492][ T4040] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 199.730522][ T4040] ? __kasan_check_write+0x18/0x20 [ 199.730546][ T4040] __pmd_alloc+0xb0/0x9a0 [ 199.730573][ T4040] ? __cfi___pmd_alloc+0x10/0x10 [ 199.730600][ T4040] handle_mm_fault+0xd23/0x1ba0 [ 199.730629][ T4040] ? __cfi_handle_mm_fault+0x10/0x10 [ 199.730654][ T4040] ? find_vma+0xd3/0x120 [ 199.730678][ T4040] ? lock_mm_and_find_vma+0xb8/0x390 [ 199.730704][ T4040] do_user_addr_fault+0x4ee/0x1230 [ 199.730737][ T4040] exc_page_fault+0x58/0xc0 [ 199.730763][ T4040] asm_exc_page_fault+0x2b/0x30 [ 199.730787][ T4040] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 199.730817][ T4040] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 199.730837][ T4040] RSP: 0018:ffffc900011bfd70 EFLAGS: 00050216 [ 199.730862][ T4040] RAX: 00007ffffffff001 RBX: 0000000000000011 RCX: 0000000000000011 [ 199.730879][ T4040] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc900011bfde0 [ 199.730895][ T4040] RBP: ffffc900011bfd90 R08: ffffc900011bfdf0 R09: 1ffff92000237fbe [ 199.730913][ T4040] R10: dffffc0000000000 R11: fffff52000237fbf R12: ffffc900011bfde0 [ 199.730930][ T4040] R13: 0000000000000011 R14: ffffc900011bfde0 R15: 0000200000000000 [ 199.730951][ T4040] ? _copy_from_user+0x6d/0xa0 [ 199.730979][ T4040] __sys_bind+0x1d4/0x410 [ 199.731000][ T4040] ? __cfi___sys_bind+0x10/0x10 [ 199.731024][ T4040] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 199.731058][ T4040] __x64_sys_bind+0x7e/0x90 [ 199.731081][ T4040] x64_sys_call+0x1ffd/0x2ee0 [ 199.731102][ T4040] do_syscall_64+0x57/0xf0 [ 199.731130][ T4040] ? clear_bhb_loop+0x50/0xa0 [ 199.731154][ T4040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 199.731178][ T4040] RIP: 0033:0x7fa0a739e159 [ 199.731196][ T4040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.731228][ T4040] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 199.731252][ T4040] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 199.731269][ T4040] RDX: 0000000000000011 RSI: 0000200000000000 RDI: 0000000000000004 [ 199.731284][ T4040] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.731300][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.731315][ T4040] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 199.731335][ T4040] [ 200.442589][ T2249] usb 2-1: USB disconnect, device number 13 [ 200.449254][ T2249] ftdi_sio 2-1:0.0: device disconnected [ 200.542569][ T36] audit: type=1400 audit(1788196317.547:1145): avc: denied { nlmsg_write } for pid=4052 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 200.574917][ T36] audit: type=1400 audit(1788196317.567:1146): avc: denied { getopt } for pid=4052 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.653959][ T524] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 200.791189][ T524] usb 10-1: device descriptor read/64, error -71 [ 200.831114][ T311] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 200.952019][ T4061] ./dev/sda1: Can't lookup blockdev [ 200.981054][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 200.994434][ T311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.005982][ T311] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 201.015460][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.023774][ T311] usb 6-1: SerialNumber: syz [ 201.030113][ T311] usb 6-1: config 0 descriptor?? [ 201.035421][ T524] usb 10-1: device descriptor read/64, error -71 [ 201.043223][ T311] hub 6-1:0.0: bad descriptor, ignoring hub [ 201.049571][ T311] hub 6-1:0.0: probe with driver hub failed with error -5 [ 201.057687][ T311] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 201.066444][ T311] usb 6-1: Detected SIO [ 201.072030][ T311] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.291101][ T524] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 201.351295][ T311] usb 6-1: USB disconnect, device number 39 [ 201.358159][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.368676][ T311] ftdi_sio 6-1:0.0: device disconnected [ 201.431094][ T524] usb 10-1: device descriptor read/64, error -71 [ 201.671640][ T524] usb 10-1: device descriptor read/64, error -71 [ 201.794036][ T524] usb usb10-port1: attempt power cycle [ 201.954520][ T4131] ./dev/sda1: Can't lookup blockdev [ 202.141112][ T524] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 202.162251][ T524] usb 10-1: device descriptor read/8, error -71 [ 202.292480][ T524] usb 10-1: device descriptor read/8, error -71 [ 202.531209][ T524] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 202.552268][ T524] usb 10-1: device descriptor read/8, error -71 [ 202.614920][ T4139] tipc: Enabling of bearer rejected, media not registered [ 202.682419][ T524] usb 10-1: device descriptor read/8, error -71 [ 202.712930][ T36] audit: type=1400 audit(1788196319.717:1147): avc: denied { name_bind } for pid=4144 comm="syz.1.1399" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 202.734414][ T36] audit: type=1400 audit(1788196319.717:1148): avc: denied { node_bind } for pid=4144 comm="syz.1.1399" saddr=100.1.1.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 202.768152][ T4147] FAULT_INJECTION: forcing a failure. [ 202.768152][ T4147] name failslab, interval 1, probability 0, space 0, times 0 [ 202.781161][ T4147] CPU: 0 UID: 0 PID: 4147 Comm: syz.1.1400 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 202.781194][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.781208][ T4147] Call Trace: [ 202.781217][ T4147] [ 202.781227][ T4147] __dump_stack+0x21/0x30 [ 202.781264][ T4147] dump_stack_lvl+0x140/0x1c0 [ 202.781290][ T4147] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.781318][ T4147] dump_stack+0x19/0x20 [ 202.781344][ T4147] should_fail_ex+0x3c2/0x510 [ 202.781370][ T4147] should_failslab+0xac/0x100 [ 202.781398][ T4147] kmem_cache_alloc_noprof+0x42/0x410 [ 202.781423][ T4147] ? kvm_sched_clock_read+0x15/0x30 [ 202.781451][ T4147] ? alloc_empty_file+0xbf/0x270 [ 202.781479][ T4147] alloc_empty_file+0xbf/0x270 [ 202.781507][ T4147] path_openat+0xf4/0x35a0 [ 202.781537][ T4147] ? rb_commit+0x753/0x7b0 [ 202.781563][ T4147] ? __kasan_check_read+0x15/0x20 [ 202.781584][ T4147] ? do_filp_open+0x440/0x440 [ 202.781609][ T4147] do_filp_open+0x1f2/0x440 [ 202.781632][ T4147] ? __cfi_do_filp_open+0x10/0x10 [ 202.781660][ T4147] ? alloc_fd+0x4c1/0x570 [ 202.781686][ T4147] do_sys_openat2+0x134/0x1d0 [ 202.781716][ T4147] ? do_sys_open+0x100/0x100 [ 202.781745][ T4147] __x64_sys_openat+0x13a/0x170 [ 202.781774][ T4147] x64_sys_call+0xe69/0x2ee0 [ 202.781804][ T4147] do_syscall_64+0x57/0xf0 [ 202.781832][ T4147] ? clear_bhb_loop+0x50/0xa0 [ 202.781858][ T4147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.781882][ T4147] RIP: 0033:0x7fa48c19e159 [ 202.781902][ T4147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.781921][ T4147] RSP: 002b:00007fa48d04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.781946][ T4147] RAX: ffffffffffffffda RBX: 00007fa48c425fa0 RCX: 00007fa48c19e159 [ 202.781964][ T4147] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 202.781981][ T4147] RBP: 00007fa48d04c090 R08: 0000000000000000 R09: 0000000000000000 [ 202.781997][ T4147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.782012][ T4147] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 202.782032][ T4147] [ 202.788526][ T4149] ./dev/sda1: Can't lookup blockdev [ 202.801330][ T524] usb usb10-port1: unable to enumerate USB device [ 202.828680][ T4151] FAULT_INJECTION: forcing a failure. [ 202.828680][ T4151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.033540][ T4151] CPU: 0 UID: 0 PID: 4151 Comm: syz.5.1403 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 203.033572][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.033585][ T4151] Call Trace: [ 203.033593][ T4151] [ 203.033603][ T4151] __dump_stack+0x21/0x30 [ 203.033634][ T4151] dump_stack_lvl+0x140/0x1c0 [ 203.033657][ T4151] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.033683][ T4151] dump_stack+0x19/0x20 [ 203.033706][ T4151] should_fail_ex+0x3c2/0x510 [ 203.033729][ T4151] should_fail_alloc_page+0xec/0x110 [ 203.033752][ T4151] __alloc_pages_noprof+0x1c0/0x7e0 [ 203.033780][ T4151] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 203.033807][ T4151] ? filemap_get_entry+0x41b/0x490 [ 203.033834][ T4151] __folio_alloc_noprof+0x14/0x80 [ 203.033859][ T4151] __filemap_get_folio+0x798/0xe80 [ 203.033884][ T4151] ? __cfi___filemap_get_folio+0x10/0x10 [ 203.033908][ T4151] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 203.033934][ T4151] ext4_da_write_begin+0x515/0x890 [ 203.033959][ T4151] ? __cfi_ext4_da_write_begin+0x10/0x10 [ 203.033984][ T4151] generic_perform_write+0x32c/0x970 [ 203.034012][ T4151] ? __cfi_generic_perform_write+0x10/0x10 [ 203.034039][ T4151] ? mnt_put_write_access_file+0xc2/0x100 [ 203.034068][ T4151] ext4_buffered_write_iter+0x352/0x690 [ 203.034095][ T4151] ext4_file_write_iter+0x19c/0x15c0 [ 203.034118][ T4151] ? kvm_sched_clock_read+0x15/0x30 [ 203.034142][ T4151] ? avc_policy_seqno+0xd/0x30 [ 203.034167][ T4151] ? __cfi_selinux_file_permission+0x10/0x10 [ 203.034189][ T4151] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 203.034215][ T4151] vfs_write+0x75f/0xfd0 [ 203.034237][ T4151] ? __cfi_vfs_write+0x10/0x10 [ 203.034262][ T4151] __x64_sys_pwrite64+0x198/0x230 [ 203.034286][ T4151] ? __cfi___x64_sys_pwrite64+0x10/0x10 [ 203.034308][ T4151] x64_sys_call+0xd50/0x2ee0 [ 203.034328][ T4151] do_syscall_64+0x57/0xf0 [ 203.034355][ T4151] ? clear_bhb_loop+0x50/0xa0 [ 203.034389][ T4151] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.034412][ T4151] RIP: 0033:0x7f4ae4b9e159 [ 203.034429][ T4151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.034449][ T4151] RSP: 002b:00007f4ae5a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 203.034473][ T4151] RAX: ffffffffffffffda RBX: 00007f4ae4e25fa0 RCX: 00007f4ae4b9e159 [ 203.034491][ T4151] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 203.034506][ T4151] RBP: 00007f4ae5a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 203.034521][ T4151] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.034534][ T4151] R13: 00007f4ae4e26038 R14: 00007f4ae4e25fa0 R15: 00007ffdcf0b38a8 [ 203.034552][ T4151] [ 203.347260][ T4165] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.5.1406: bg 5: bad block bitmap checksum [ 203.360783][ T4165] EXT4-fs (sda1): Delayed block allocation failed for inode 2050 at logical offset 4096 with max blocks 16 with error 74 [ 203.371067][ T524] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 203.373501][ T4165] EXT4-fs (sda1): This should not happen!! Data will be lost [ 203.373501][ T4165] [ 203.404830][ T4164] EXT4-fs error (device sda1): ext4_discard_preallocations:5687: comm syz.5.1406: Error -117 reading block bitmap for 5 [ 203.531277][ T524] usb 2-1: Using ep0 maxpacket: 16 [ 203.540037][ T524] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 203.557347][ T524] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 203.566674][ T524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.574861][ T524] usb 2-1: Product: syz [ 203.579009][ T524] usb 2-1: Manufacturer: syz [ 203.583674][ T524] usb 2-1: SerialNumber: syz [ 203.611119][ T4085] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.612100][ T311] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 203.626036][ T311] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.681099][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 203.832549][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.845542][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 203.854738][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.864195][ T9] usb 6-1: config 0 descriptor?? [ 203.880272][ T524] usb 2-1: USB disconnect, device number 14 [ 204.275369][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.282435][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.289487][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.297029][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.304344][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.311274][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.318269][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.325251][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.332435][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.339320][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.346271][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.353203][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.360093][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.367352][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.374475][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.382370][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.389304][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.396508][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.404443][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.414572][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.421683][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.428904][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.436297][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.443400][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.450296][ T9] wacom 0003:056A:009A.000D: unknown main item tag 0x0 [ 204.458535][ T9] wacom 0003:056A:009A.000D: hidraw0: USB HID v1.04 Device [HID 056a:009a] on usb-dummy_hcd.5-1/input0 [ 204.471731][ T36] audit: type=1326 audit(1788196321.467:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.497703][ T36] audit: type=1326 audit(1788196321.467:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.501683][ T9] usb 6-1: USB disconnect, device number 40 [ 204.529937][ T36] audit: type=1326 audit(1788196321.467:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.555575][ T36] audit: type=1326 audit(1788196321.467:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.581654][ T36] audit: type=1326 audit(1788196321.477:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.607626][ T36] audit: type=1326 audit(1788196321.477:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.1.1410" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48c19e159 code=0x7ffc0000 [ 204.734149][ T4184] ./dev/sda1: Can't lookup blockdev [ 205.651079][ T1915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.651084][ T1914] Bluetooth: hci0: command 0x1003 tx timeout [ 205.763274][ T36] kauditd_printk_skb: 546 callbacks suppressed [ 205.763294][ T36] audit: type=1400 audit(1788196322.767:1701): avc: denied { ioctl } for pid=4201 comm="syz.9.1418" path="socket:[54539]" dev="sockfs" ino=54539 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.858026][ T4209] FAULT_INJECTION: forcing a failure. [ 205.858026][ T4209] name failslab, interval 1, probability 0, space 0, times 0 [ 205.871150][ T4209] CPU: 1 UID: 0 PID: 4209 Comm: syz.5.1421 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 205.871208][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.871228][ T4209] Call Trace: [ 205.871239][ T4209] [ 205.871251][ T4209] __dump_stack+0x21/0x30 [ 205.871304][ T4209] dump_stack_lvl+0x140/0x1c0 [ 205.871340][ T4209] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.871375][ T4209] ? trace_event_raw_event_x86_fpu+0x28d/0x350 [ 205.871407][ T4209] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 205.871440][ T4209] ? __cfi_trace_event_raw_event_x86_fpu+0x10/0x10 [ 205.871471][ T4209] dump_stack+0x19/0x20 [ 205.871519][ T4209] should_fail_ex+0x3c2/0x510 [ 205.871554][ T4209] should_failslab+0xac/0x100 [ 205.871587][ T4209] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 205.871617][ T4209] ? __d_alloc+0x42/0x8c0 [ 205.871643][ T4209] ? __perf_event_task_sched_out+0x1d9/0xba0 [ 205.871676][ T4209] __d_alloc+0x42/0x8c0 [ 205.871701][ T4209] ? probe_sched_switch+0x67/0x90 [ 205.871736][ T4209] d_alloc_parallel+0xe4/0x1370 [ 205.871764][ T4209] ? _raw_spin_unlock+0x45/0x60 [ 205.871801][ T4209] ? finish_task_switch+0x139/0x770 [ 205.871836][ T4209] ? avc_has_perm_noaudit+0x26b/0x360 [ 205.871869][ T4209] ? __cfi_d_alloc_parallel+0x10/0x10 [ 205.871896][ T4209] ? __kasan_check_write+0x18/0x20 [ 205.871924][ T4209] ? rwsem_read_trylock+0x275/0x5a0 [ 205.871962][ T4209] ? downgrade_write+0x470/0x470 [ 205.871997][ T4209] __lookup_slow+0x150/0x420 [ 205.872036][ T4209] ? try_to_unlazy+0x62a/0xb50 [ 205.872068][ T4209] ? lookup_one_len+0x300/0x300 [ 205.872100][ T4209] ? down_read+0x7f/0xe0 [ 205.872131][ T4209] lookup_slow+0x57/0x80 [ 205.872162][ T4209] link_path_walk+0x991/0xeb0 [ 205.872191][ T4209] __filename_parentat+0x231/0x660 [ 205.872226][ T4209] ? vfs_path_parent_lookup+0x70/0x70 [ 205.872257][ T4209] ? rb_commit+0x753/0x7b0 [ 205.872289][ T4209] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 205.872321][ T4209] filename_create+0xd9/0x450 [ 205.872356][ T4209] ? kern_path_create+0x70/0x70 [ 205.872390][ T4209] do_symlinkat+0xc5/0x400 [ 205.872426][ T4209] ? strncpy_from_user+0x14f/0x280 [ 205.872458][ T4209] ? __cfi_do_symlinkat+0x10/0x10 [ 205.872503][ T4209] ? getname_flags+0x203/0x6b0 [ 205.872540][ T4209] __x64_sys_symlink+0x7e/0x90 [ 205.872568][ T4209] x64_sys_call+0x28d8/0x2ee0 [ 205.872594][ T4209] do_syscall_64+0x57/0xf0 [ 205.872630][ T4209] ? clear_bhb_loop+0x50/0xa0 [ 205.872662][ T4209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.872691][ T4209] RIP: 0033:0x7f4ae4b9e159 [ 205.872716][ T4209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.872740][ T4209] RSP: 002b:00007f4ae5a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 205.872772][ T4209] RAX: ffffffffffffffda RBX: 00007f4ae4e25fa0 RCX: 00007f4ae4b9e159 [ 205.872794][ T4209] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000040 [ 205.872814][ T4209] RBP: 00007f4ae4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 205.872833][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.872851][ T4209] R13: 00007f4ae4e26038 R14: 00007f4ae4e25fa0 R15: 00007ffdcf0b38a8 [ 205.872874][ T4209] [ 206.220386][ T4213] bridge: RTM_NEWNEIGH with invalid ether address [ 206.260414][ T36] audit: type=1326 audit(1788196323.257:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.1.1423" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa48c19e159 code=0x0 [ 206.732913][ T4073] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.737907][ T311] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 206.739763][ T4073] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.762726][ T311] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.103677][ T4229] FAULT_INJECTION: forcing a failure. [ 207.103677][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 207.116873][ T4229] CPU: 0 UID: 0 PID: 4229 Comm: syz.5.1426 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 207.116910][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.116925][ T4229] Call Trace: [ 207.116934][ T4229] [ 207.116943][ T4229] __dump_stack+0x21/0x30 [ 207.116978][ T4229] dump_stack_lvl+0x140/0x1c0 [ 207.117005][ T4229] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.117032][ T4229] ? __cfi_trace_clock_local+0x10/0x10 [ 207.117054][ T4229] dump_stack+0x19/0x20 [ 207.117080][ T4229] should_fail_ex+0x3c2/0x510 [ 207.117106][ T4229] should_failslab+0xac/0x100 [ 207.117132][ T4229] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 207.117157][ T4229] ? __d_alloc+0x42/0x8c0 [ 207.117177][ T4229] __d_alloc+0x42/0x8c0 [ 207.117196][ T4229] d_alloc_parallel+0xe4/0x1370 [ 207.117225][ T4229] ? rb_commit+0x753/0x7b0 [ 207.117246][ T4229] ? avc_has_perm_noaudit+0x26b/0x360 [ 207.117271][ T4229] ? __cfi_d_alloc_parallel+0x10/0x10 [ 207.117292][ T4229] ? __kasan_check_write+0x18/0x20 [ 207.117314][ T4229] ? rwsem_read_trylock+0x275/0x5a0 [ 207.117344][ T4229] ? downgrade_write+0x470/0x470 [ 207.117372][ T4229] __lookup_slow+0x150/0x420 [ 207.117398][ T4229] ? try_to_unlazy+0x62a/0xb50 [ 207.117417][ T4229] ? lookup_one_len+0x300/0x300 [ 207.117437][ T4229] ? down_read+0x7f/0xe0 [ 207.117463][ T4229] lookup_slow+0x57/0x80 [ 207.117487][ T4229] link_path_walk+0x991/0xeb0 [ 207.117509][ T4229] path_openat+0x298/0x35a0 [ 207.117538][ T4229] ? rb_commit+0x753/0x7b0 [ 207.117562][ T4229] ? do_filp_open+0x440/0x440 [ 207.117590][ T4229] do_filp_open+0x1f2/0x440 [ 207.117614][ T4229] ? __cfi_do_filp_open+0x10/0x10 [ 207.117644][ T4229] ? alloc_fd+0x4c1/0x570 [ 207.117670][ T4229] do_sys_openat2+0x134/0x1d0 [ 207.117699][ T4229] ? do_sys_open+0x100/0x100 [ 207.117731][ T4229] __x64_sys_openat+0x13a/0x170 [ 207.117759][ T4229] x64_sys_call+0xe69/0x2ee0 [ 207.117780][ T4229] do_syscall_64+0x57/0xf0 [ 207.117808][ T4229] ? clear_bhb_loop+0x50/0xa0 [ 207.117833][ T4229] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.117857][ T4229] RIP: 0033:0x7f4ae4b9e159 [ 207.117877][ T4229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.117899][ T4229] RSP: 002b:00007f4ae5a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 207.117926][ T4229] RAX: ffffffffffffffda RBX: 00007f4ae4e25fa0 RCX: 00007f4ae4b9e159 [ 207.117944][ T4229] RDX: 0000000000000101 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 207.117959][ T4229] RBP: 00007f4ae5a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.117975][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.117990][ T4229] R13: 00007f4ae4e26038 R14: 00007f4ae4e25fa0 R15: 00007ffdcf0b38a8 [ 207.118009][ T4229] [ 207.426712][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 207.484496][ T4244] bridge: RTM_NEWNEIGH with invalid ether address [ 207.535337][ T4248] FAULT_INJECTION: forcing a failure. [ 207.535337][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.549322][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.1.1433 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 207.549365][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.549382][ T4248] Call Trace: [ 207.549390][ T4248] [ 207.549402][ T4248] __dump_stack+0x21/0x30 [ 207.549440][ T4248] dump_stack_lvl+0x140/0x1c0 [ 207.549467][ T4248] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.549494][ T4248] ? check_stack_object+0x138/0x150 [ 207.549517][ T4248] dump_stack+0x19/0x20 [ 207.549541][ T4248] should_fail_ex+0x3c2/0x510 [ 207.549567][ T4248] should_fail+0xf/0x20 [ 207.549587][ T4248] should_fail_usercopy+0x1e/0x30 [ 207.549611][ T4248] _copy_to_user+0x24/0xa0 [ 207.549639][ T4248] simple_read_from_buffer+0xed/0x160 [ 207.549668][ T4248] proc_fail_nth_read+0x1aa/0x220 [ 207.549706][ T4248] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 207.549737][ T4248] ? bpf_lsm_file_permission+0xd/0x20 [ 207.549765][ T4248] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 207.549790][ T4248] vfs_read+0x288/0xc70 [ 207.549810][ T4248] ? rb_commit+0x753/0x7b0 [ 207.549832][ T4248] ? __cfi_vfs_read+0x10/0x10 [ 207.549853][ T4248] ? __kasan_check_write+0x18/0x20 [ 207.549875][ T4248] ? mutex_lock+0x97/0x1d0 [ 207.549899][ T4248] ? __cfi_mutex_lock+0x10/0x10 [ 207.549923][ T4248] ksys_read+0x145/0x260 [ 207.549945][ T4248] ? __cfi_ksys_read+0x10/0x10 [ 207.549967][ T4248] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 207.549999][ T4248] __x64_sys_read+0x7f/0x90 [ 207.550022][ T4248] x64_sys_call+0x2638/0x2ee0 [ 207.550041][ T4248] do_syscall_64+0x57/0xf0 [ 207.550069][ T4248] ? clear_bhb_loop+0x50/0xa0 [ 207.550095][ T4248] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.550118][ T4248] RIP: 0033:0x7fa48c15e98e [ 207.550137][ T4248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.550155][ T4248] RSP: 002b:00007fa48d04bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.550180][ T4248] RAX: ffffffffffffffda RBX: 00007fa48d04c6c0 RCX: 00007fa48c15e98e [ 207.550197][ T4248] RDX: 000000000000000f RSI: 00007fa48d04c0a0 RDI: 0000000000000004 [ 207.550212][ T4248] RBP: 00007fa48d04c090 R08: 0000000000000000 R09: 0000000000000000 [ 207.550227][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.550242][ T4248] R13: 00007fa48c426038 R14: 00007fa48c425fa0 R15: 00007ffdf250d8f8 [ 207.550261][ T4248] [ 207.931068][ T2249] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 208.081089][ T2249] usb 6-1: Using ep0 maxpacket: 8 [ 208.091572][ T2249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.101513][ T2249] usb 6-1: config 3 has an invalid interface number: 183 but max is 1 [ 208.109732][ T2249] usb 6-1: config 3 has an invalid interface number: 89 but max is 1 [ 208.118373][ T2249] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 208.128654][ T2249] usb 6-1: config 3 has no interface number 0 [ 208.134800][ T2249] usb 6-1: config 3 has no interface number 1 [ 208.141316][ T2249] usb 6-1: config 3 interface 183 altsetting 1 bulk endpoint 0xD has invalid maxpacket 32 [ 208.151422][ T2249] usb 6-1: config 3 interface 183 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 208.161534][ T2249] usb 6-1: config 3 interface 89 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 208.172197][ T2249] usb 6-1: config 3 interface 89 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 208.183064][ T2249] usb 6-1: config 3 interface 89 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 208.194165][ T2249] usb 6-1: config 3 interface 89 altsetting 3 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 208.205795][ T2249] usb 6-1: config 3 interface 89 altsetting 3 endpoint 0x88 has an invalid bInterval 183, changing to 7 [ 208.216973][ T2249] usb 6-1: config 3 interface 89 altsetting 3 endpoint 0x88 has invalid maxpacket 41517, setting to 1024 [ 208.228267][ T2249] usb 6-1: config 3 interface 89 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 208.239003][ T2249] usb 6-1: config 3 interface 89 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 208.249661][ T2249] usb 6-1: config 3 interface 89 altsetting 3 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 208.260599][ T2249] usb 6-1: config 3 interface 89 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 208.273686][ T2249] usb 6-1: config 3 interface 183 has no altsetting 0 [ 208.280500][ T2249] usb 6-1: config 3 interface 89 has no altsetting 0 [ 208.291257][ T2249] usb 6-1: Dual-Role OTG device on HNP port [ 208.297471][ T2249] usb 6-1: New USB device found, idVendor=2040, idProduct=c080, bcdDevice=eb.e9 [ 208.306769][ T2249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.315279][ T2249] usb 6-1: Product: ᐳ [ 208.319477][ T2249] usb 6-1: Manufacturer: ఄ [ 208.325673][ T4239] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 208.333169][ T4239] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 208.551947][ T2249] usb 6-1: USB disconnect, device number 41 [ 208.771146][ T1915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.771146][ T1914] Bluetooth: hci0: command 0x1003 tx timeout [ 209.081078][ T311] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 209.232506][ T4281] FAULT_INJECTION: forcing a failure. [ 209.232506][ T4281] name failslab, interval 1, probability 0, space 0, times 0 [ 209.245299][ T4281] CPU: 0 UID: 0 PID: 4281 Comm: syz.5.1447 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 209.245337][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.245347][ T4281] Call Trace: [ 209.245353][ T4281] [ 209.245360][ T4281] __dump_stack+0x21/0x30 [ 209.245385][ T4281] dump_stack_lvl+0x140/0x1c0 [ 209.245402][ T4281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 209.245419][ T4281] dump_stack+0x19/0x20 [ 209.245449][ T4281] should_fail_ex+0x3c2/0x510 [ 209.245464][ T4281] should_failslab+0xac/0x100 [ 209.245481][ T4281] __kmalloc_node_noprof+0x69/0x500 [ 209.245496][ T4281] ? __kvmalloc_node_noprof+0x128/0x300 [ 209.245508][ T4281] __kvmalloc_node_noprof+0x128/0x300 [ 209.245519][ T4281] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 209.245531][ T4281] ? __kvmalloc_node_noprof+0x173/0x300 [ 209.245543][ T4281] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 209.245554][ T4281] io_futex_cache_init+0x4e/0x1a0 [ 209.245568][ T4281] io_ring_ctx_alloc+0x762/0x1dc0 [ 209.245582][ T4281] io_uring_create+0x2e0/0x13f0 [ 209.245594][ T4281] ? __kasan_check_write+0x18/0x20 [ 209.245606][ T4281] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 209.245624][ T4281] ? __x64_sys_io_uring_setup+0x80/0x80 [ 209.245639][ T4281] ? trace_event_buffer_commit+0x256/0x8f0 [ 209.245655][ T4281] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 209.245674][ T4281] __x64_sys_io_uring_setup+0x5f/0x80 [ 209.245689][ T4281] x64_sys_call+0x22c0/0x2ee0 [ 209.245699][ T4281] do_syscall_64+0x57/0xf0 [ 209.245718][ T4281] ? clear_bhb_loop+0x50/0xa0 [ 209.245733][ T4281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.245745][ T4281] RIP: 0033:0x7f4ae4b9e159 [ 209.245757][ T4281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.245768][ T4281] RSP: 002b:00007f4ae5a7aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 209.245783][ T4281] RAX: ffffffffffffffda RBX: 0000200000000d48 RCX: 00007f4ae4b9e159 [ 209.245792][ T4281] RDX: 0000200000000dc8 RSI: 0000200000000d48 RDI: 0000000000000dad [ 209.245801][ T4281] RBP: 0000200000000d40 R08: 0000200000001540 R09: 0000000000000000 [ 209.245810][ T4281] R10: 0000200000000dd0 R11: 0000000000000206 R12: 0000200000000dc8 [ 209.245819][ T4281] R13: 0000200000000dd0 R14: 00007f4ae5a7afd8 R15: 0000000000000000 [ 209.245829][ T4281] [ 209.256331][ T311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 209.282082][ T36] audit: type=1326 audit(1788196326.287:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.5.1448" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae4b9e159 code=0x0 [ 209.284887][ T311] usb 10-1: not running at top speed; connect to a high speed hub [ 209.298370][ T4073] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:24: bg 4: bad block bitmap checksum [ 209.304680][ T311] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 209.308222][ T4073] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 5 with max blocks 8 with error 74 [ 209.313728][ T311] usb 10-1: can't read configurations, error -22 [ 209.319328][ T4073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 209.319328][ T4073] [ 209.451638][ T36] audit: type=1326 audit(1788196326.447:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.5.1448" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae4b9e159 code=0x0 [ 209.603895][ T311] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 209.762534][ T311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 209.770764][ T311] usb 10-1: not running at top speed; connect to a high speed hub [ 209.779902][ T311] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 209.788022][ T311] usb 10-1: can't read configurations, error -22 [ 209.794672][ T311] usb usb10-port1: attempt power cycle [ 210.141022][ T311] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 210.171530][ T311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 210.188619][ T311] usb 10-1: not running at top speed; connect to a high speed hub [ 210.198549][ T311] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 210.207875][ T311] usb 10-1: can't read configurations, error -22 [ 210.236689][ T4073] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.248822][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.264587][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.341124][ T311] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 210.362915][ T311] usb 10-1: unable to get BOS descriptor or descriptor too short [ 210.371564][ T311] usb 10-1: not running at top speed; connect to a high speed hub [ 210.380504][ T311] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 210.388613][ T311] usb 10-1: can't read configurations, error -22 [ 210.395242][ T311] usb usb10-port1: unable to enumerate USB device [ 211.173710][ T36] audit: type=1400 audit(1788196328.177:1705): avc: denied { create } for pid=4295 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.222227][ T36] audit: type=1400 audit(1788196328.227:1706): avc: denied { read } for pid=4297 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.930687][ T4306] ./dev/sda1: Can't lookup blockdev [ 212.039130][ T4314] FAULT_INJECTION: forcing a failure. [ 212.039130][ T4314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.055407][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.7.1459 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 212.055445][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.055462][ T4314] Call Trace: [ 212.055471][ T4314] [ 212.055481][ T4314] __dump_stack+0x21/0x30 [ 212.055519][ T4314] dump_stack_lvl+0x140/0x1c0 [ 212.055546][ T4314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.055575][ T4314] dump_stack+0x19/0x20 [ 212.055602][ T4314] should_fail_ex+0x3c2/0x510 [ 212.055627][ T4314] should_fail+0xf/0x20 [ 212.055648][ T4314] should_fail_usercopy+0x1e/0x30 [ 212.055673][ T4314] _copy_from_user+0x20/0xa0 [ 212.055702][ T4314] _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x721/0xb8e0 [ 212.055748][ T4314] ? __cfi__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 212.055790][ T4314] ? is_bpf_text_address+0x17b/0x1a0 [ 212.055822][ T4314] ? kernel_text_address+0xa9/0xe0 [ 212.055851][ T4314] ? __cfi_trace_clock_local+0x10/0x10 [ 212.055872][ T4314] ? kvm_sched_clock_read+0x15/0x30 [ 212.055899][ T4314] ? sched_clock_noinstr+0xd/0x30 [ 212.055922][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.055945][ T4314] ? __rb_reserve_next+0x7d4/0xdf0 [ 212.055976][ T4314] ? is_bpf_text_address+0x17b/0x1a0 [ 212.056003][ T4314] ? kernel_text_address+0xa9/0xe0 [ 212.056029][ T4314] ? __cfi_trace_clock_local+0x10/0x10 [ 212.056050][ T4314] ? kvm_sched_clock_read+0x15/0x30 [ 212.056074][ T4314] ? sched_clock_noinstr+0xd/0x30 [ 212.056097][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056117][ T4314] ? __rb_reserve_next+0x7d4/0xdf0 [ 212.056146][ T4314] ? __cfi_trace_clock_local+0x10/0x10 [ 212.056166][ T4314] ? kvm_sched_clock_read+0x15/0x30 [ 212.056190][ T4314] ? sched_clock_noinstr+0xd/0x30 [ 212.056213][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056234][ T4314] ? __rb_reserve_next+0x7d4/0xdf0 [ 212.056265][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056286][ T4314] ? rb_commit+0x753/0x7b0 [ 212.056310][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056331][ T4314] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 212.056362][ T4314] ? __kasan_check_write+0x18/0x20 [ 212.056384][ T4314] ? _raw_spin_lock+0x92/0x120 [ 212.056413][ T4314] ? __cfi__raw_spin_lock+0x10/0x10 [ 212.056442][ T4314] ? _raw_spin_unlock+0x45/0x60 [ 212.056469][ T4314] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xff4/0x1a60 [ 212.056499][ T4314] ? trace_event_raw_event_binder_ioctl+0x159/0x220 [ 212.056525][ T4314] ? __cfi_trace_event_raw_event_binder_ioctl+0x10/0x10 [ 212.056549][ T4314] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 212.056579][ T4314] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1952/0x3fe0 [ 212.056604][ T4314] ? __asan_memcpy+0x5a/0x80 [ 212.056625][ T4314] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x199a/0x3fe0 [ 212.056650][ T4314] ? __asan_set_shadow_00+0x12/0x20 [ 212.056680][ T4314] ? do_vfs_ioctl+0x1824/0x2010 [ 212.056706][ T4314] ? arch_stack_walk+0x10a/0x170 [ 212.056729][ T4314] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 212.056755][ T4314] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 212.056780][ T4314] ? _parse_integer+0x2e/0x40 [ 212.056803][ T4314] ? __cfi_trace_clock_local+0x10/0x10 [ 212.056824][ T4314] ? ioctl_has_perm+0x39a/0x500 [ 212.056848][ T4314] ? has_cap_mac_admin+0xd0/0xd0 [ 212.056871][ T4314] ? selinux_file_ioctl+0x732/0x1480 [ 212.056893][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056911][ T4314] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 212.056933][ T4314] ? __kasan_check_read+0x15/0x20 [ 212.056954][ T4314] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 212.056979][ T4314] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 212.057004][ T4314] ? __fget_files+0x2bc/0x330 [ 212.057030][ T4314] ? bpf_lsm_file_ioctl+0xd/0x20 [ 212.057058][ T4314] ? security_file_ioctl+0x3e/0x110 [ 212.057079][ T4314] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 212.057103][ T4314] __se_sys_ioctl+0x123/0x1b0 [ 212.057128][ T4314] __x64_sys_ioctl+0x7f/0xa0 [ 212.057153][ T4314] x64_sys_call+0x1878/0x2ee0 [ 212.057174][ T4314] do_syscall_64+0x57/0xf0 [ 212.057202][ T4314] ? clear_bhb_loop+0x50/0xa0 [ 212.057226][ T4314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.057250][ T4314] RIP: 0033:0x7fa0a739e159 [ 212.057270][ T4314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.057290][ T4314] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.057318][ T4314] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 212.057335][ T4314] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 212.057357][ T4314] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.057375][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.057390][ T4314] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 212.057407][ T4314] [ 212.057423][ T4314] rust_binder: Write failure EFAULT in pid:574 [ 212.291219][ T1914] Bluetooth: hci0: command 0x1003 tx timeout [ 212.307476][ T1915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.341520][ T4318] FAULT_INJECTION: forcing a failure. [ 212.341520][ T4318] name failslab, interval 1, probability 0, space 0, times 0 [ 212.492195][ T4326] ./dev/sda1: Can't lookup blockdev [ 212.501816][ T4318] CPU: 1 UID: 0 PID: 4318 Comm: syz.7.1461 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 212.501858][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.501873][ T4318] Call Trace: [ 212.501882][ T4318] [ 212.501892][ T4318] __dump_stack+0x21/0x30 [ 212.501939][ T4318] dump_stack_lvl+0x140/0x1c0 [ 212.501964][ T4318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.501992][ T4318] dump_stack+0x19/0x20 [ 212.502017][ T4318] should_fail_ex+0x3c2/0x510 [ 212.502042][ T4318] should_failslab+0xac/0x100 [ 212.502069][ T4318] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 212.502092][ T4318] ? __d_alloc+0x42/0x8c0 [ 212.502112][ T4318] __d_alloc+0x42/0x8c0 [ 212.502131][ T4318] ? ktime_get_coarse_real_ts64+0x113/0x130 [ 212.502155][ T4318] d_alloc_pseudo+0x23/0xc0 [ 212.502175][ T4318] alloc_file_pseudo+0xde/0x1f0 [ 212.502201][ T4318] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 212.502229][ T4318] dma_buf_export+0x6c6/0xae0 [ 212.502257][ T4318] udmabuf_create+0xe24/0x1250 [ 212.502279][ T4318] ? udmabuf_ioctl+0x310/0x310 [ 212.502299][ T4318] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 212.502321][ T4318] ? __kasan_check_write+0x18/0x20 [ 212.502342][ T4318] udmabuf_ioctl+0x1f4/0x310 [ 212.502360][ T4318] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 212.502378][ T4318] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 212.502404][ T4318] ? bpf_lsm_file_ioctl+0xd/0x20 [ 212.502429][ T4318] ? security_file_ioctl+0x3e/0x110 [ 212.502453][ T4318] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 212.502471][ T4318] __se_sys_ioctl+0x123/0x1b0 [ 212.502495][ T4318] __x64_sys_ioctl+0x7f/0xa0 [ 212.502519][ T4318] x64_sys_call+0x1878/0x2ee0 [ 212.502537][ T4318] do_syscall_64+0x57/0xf0 [ 212.502565][ T4318] ? clear_bhb_loop+0x50/0xa0 [ 212.502588][ T4318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.502610][ T4318] RIP: 0033:0x7fa0a739e159 [ 212.502630][ T4318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.502649][ T4318] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.502675][ T4318] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 212.502692][ T4318] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 212.502707][ T4318] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.502722][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.502736][ T4318] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 212.502754][ T4318] [ 212.624181][ T4332] rust_binder: 4331:4332 transaction async to 0:0 failed EINVAL, code 0 size 0-0 [ 212.863406][ T699] rust_binder: 4331: undelivered TRANSACTION_ERROR: 29201 [ 212.954632][ T4073] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.955955][ T699] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 212.986243][ T699] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.064951][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1473'. [ 213.753612][ T4356] ./dev/sda1: Can't lookup blockdev [ 214.648063][ T4367] rust_binder: 4366:4367 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 214.656575][ T4367] rust_binder: 4366:4367 got reply transaction with no transaction stack [ 214.676804][ T4367] rust_binder: 4366:4367 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 [ 214.697701][ T4367] rust_binder: 4366:4367 got transaction to invalid handle 2 [ 214.711073][ T4367] rust_binder: 4366:4367 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 214.751163][ T36] audit: type=1400 audit(1788196331.737:1707): avc: denied { accept } for pid=4366 comm="syz.7.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.011057][ T1914] Bluetooth: hci0: command 0x1003 tx timeout [ 215.011057][ T1915] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.173814][ T36] audit: type=1400 audit(1788196332.177:1708): avc: denied { remount } for pid=4369 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.201677][ T36] audit: type=1400 audit(1788196332.207:1709): avc: denied { setattr } for pid=4369 comm="syz.5.1483" name="/" dev="incremental-fs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.245146][ T4370] overlay: Bad value for 'uuid' [ 215.259219][ T36] audit: type=1400 audit(1788196332.257:1710): avc: denied { unmount } for pid=1367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.640853][ T4377] ./dev/sda1: Can't lookup blockdev [ 215.921073][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 216.061095][ T10] usb 6-1: device descriptor read/64, error -71 [ 216.311093][ T10] usb 6-1: device descriptor read/64, error -71 [ 216.561128][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 216.711093][ T10] usb 6-1: device descriptor read/64, error -71 [ 216.961156][ T10] usb 6-1: device descriptor read/64, error -71 [ 217.089744][ T10] usb usb6-port1: attempt power cycle [ 217.441046][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 217.472726][ T10] usb 6-1: device descriptor read/8, error -71 [ 217.602312][ T10] usb 6-1: device descriptor read/8, error -71 [ 217.664298][ T311] rust_binder: 4366: undelivered TRANSACTION_ERROR: 29201 [ 217.841052][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 217.882355][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.042065][ T10] usb 6-1: device descriptor read/8, error -71 [ 218.151329][ T10] usb usb6-port1: unable to enumerate USB device [ 218.713536][ T4398] ./dev/sda1: Can't lookup blockdev [ 218.961507][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1495'. [ 220.562496][ T36] audit: type=1400 audit(1788196337.567:1711): avc: denied { connect } for pid=4403 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.592175][ T4404] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 220.641533][ T36] audit: type=1400 audit(1788196337.647:1712): avc: denied { listen } for pid=4403 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.694370][ T36] audit: type=1400 audit(1788196337.697:1713): avc: denied { listen } for pid=4403 comm="syz.5.1496" path=2F3239372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 221.791258][ T36] audit: type=1400 audit(1788196338.787:1714): avc: denied { setopt } for pid=4410 comm="syz.7.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.152485][ T4419] ./dev/sda1: Can't lookup blockdev [ 222.200751][ T4421] FAULT_INJECTION: forcing a failure. [ 222.200751][ T4421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.231034][ T4421] CPU: 1 UID: 0 PID: 4421 Comm: syz.7.1504 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 222.231077][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.231093][ T4421] Call Trace: [ 222.231102][ T4421] [ 222.231113][ T4421] __dump_stack+0x21/0x30 [ 222.231150][ T4421] dump_stack_lvl+0x140/0x1c0 [ 222.231178][ T4421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.231206][ T4421] ? has_cap_mac_admin+0xd0/0xd0 [ 222.231229][ T4421] dump_stack+0x19/0x20 [ 222.231255][ T4421] should_fail_ex+0x3c2/0x510 [ 222.231280][ T4421] should_fail+0xf/0x20 [ 222.231302][ T4421] should_fail_usercopy+0x1e/0x30 [ 222.231328][ T4421] _copy_from_user+0x20/0xa0 [ 222.231357][ T4421] proc_submiturb+0xdc/0x1c0 [ 222.231380][ T4421] ? proc_setconfig+0x5b0/0x5b0 [ 222.231402][ T4421] ? mutex_lock+0x97/0x1d0 [ 222.231426][ T4421] ? __cfi_mutex_lock+0x10/0x10 [ 222.231449][ T4421] ? __kasan_check_read+0x15/0x20 [ 222.231472][ T4421] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 222.231501][ T4421] usbdev_ioctl+0x110b/0x2120 [ 222.231523][ T4421] ? __cfi_usbdev_ioctl+0x10/0x10 [ 222.231543][ T4421] ? __fget_files+0x2bc/0x330 [ 222.231569][ T4421] ? bpf_lsm_file_ioctl+0xd/0x20 [ 222.231597][ T4421] ? security_file_ioctl+0x3e/0x110 [ 222.231619][ T4421] ? __cfi_usbdev_ioctl+0x10/0x10 [ 222.231639][ T4421] __se_sys_ioctl+0x123/0x1b0 [ 222.231665][ T4421] __x64_sys_ioctl+0x7f/0xa0 [ 222.231689][ T4421] x64_sys_call+0x1878/0x2ee0 [ 222.231709][ T4421] do_syscall_64+0x57/0xf0 [ 222.231737][ T4421] ? clear_bhb_loop+0x50/0xa0 [ 222.231770][ T4421] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 222.231794][ T4421] RIP: 0033:0x7fa0a739e159 [ 222.231815][ T4421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.231833][ T4421] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.231859][ T4421] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 222.231876][ T4421] RDX: 0000000000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 222.231892][ T4421] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.231908][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.231923][ T4421] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 222.231943][ T4421] [ 224.461461][ T4438] ./dev/sda1: Can't lookup blockdev [ 225.316146][ T4444] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1515'. [ 225.533582][ T4451] FAULT_INJECTION: forcing a failure. [ 225.533582][ T4451] name failslab, interval 1, probability 0, space 0, times 0 [ 225.561093][ T4451] CPU: 1 UID: 0 PID: 4451 Comm: syz.7.1518 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 225.561148][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.561168][ T4451] Call Trace: [ 225.561182][ T4451] [ 225.561196][ T4451] __dump_stack+0x21/0x30 [ 225.561241][ T4451] dump_stack_lvl+0x140/0x1c0 [ 225.561288][ T4451] ? __cfi_dump_stack_lvl+0x10/0x10 [ 225.561322][ T4451] ? avc_has_perm+0x155/0x240 [ 225.561356][ T4451] dump_stack+0x19/0x20 [ 225.561390][ T4451] should_fail_ex+0x3c2/0x510 [ 225.561423][ T4451] should_failslab+0xac/0x100 [ 225.561458][ T4451] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 225.561490][ T4451] ? selinux_socket_create+0x188/0x290 [ 225.561524][ T4451] ? sock_alloc_inode+0x48/0x150 [ 225.561553][ T4451] sock_alloc_inode+0x48/0x150 [ 225.561579][ T4451] ? __cfi_sock_alloc_inode+0x10/0x10 [ 225.561607][ T4451] alloc_inode+0x7a/0x270 [ 225.561642][ T4451] ? bpf_lsm_socket_create+0xd/0x20 [ 225.561674][ T4451] new_inode_pseudo+0x19/0x40 [ 225.561707][ T4451] __sock_create+0x130/0x810 [ 225.561736][ T4451] __sys_socketpair+0x221/0x5c0 [ 225.561766][ T4451] __x64_sys_socketpair+0x9f/0xc0 [ 225.561796][ T4451] x64_sys_call+0x2081/0x2ee0 [ 225.561822][ T4451] do_syscall_64+0x57/0xf0 [ 225.561859][ T4451] ? clear_bhb_loop+0x50/0xa0 [ 225.561891][ T4451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 225.561921][ T4451] RIP: 0033:0x7fa0a739e159 [ 225.561946][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.561971][ T4451] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 225.562021][ T4451] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 225.562045][ T4451] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 225.562060][ T4451] RBP: 00007fa0a7435024 R08: 0000000000000000 R09: 0000000000000000 [ 225.562076][ T4451] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 225.562094][ T4451] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 225.562116][ T4451] [ 225.562134][ T4451] socket: no more sockets [ 226.051212][ T4461] ./dev/sda1: Can't lookup blockdev [ 226.062575][ T4462] netlink: 'syz.5.1522': attribute type 3 has an invalid length. [ 227.221218][ T4485] ./dev/sda1: Can't lookup blockdev [ 228.597336][ T4495] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 228.641170][ T4495] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 228.709440][ T4499] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 228.747859][ T4499] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 228.821788][ T4500] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 228.846975][ T4500] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 228.902689][ T4501] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 228.920758][ T4501] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 228.946587][ T524] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 228.967896][ T524] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.178564][ T4085] bridge_slave_1: left allmulticast mode [ 229.184729][ T4085] bridge_slave_1: left promiscuous mode [ 229.200466][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.220839][ T4085] bridge_slave_0: left allmulticast mode [ 229.226650][ T4085] bridge_slave_0: left promiscuous mode [ 229.241075][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.386976][ T4506] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.416469][ T4506] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 229.441151][ T4508] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.448618][ T4085] veth1_macvtap: left promiscuous mode [ 229.469579][ T4508] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 229.472347][ T4085] veth0_vlan: left promiscuous mode [ 229.547175][ T4513] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.566354][ T4513] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 229.580889][ T4514] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.597696][ T4514] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 229.611852][ T4516] FAULT_INJECTION: forcing a failure. [ 229.611852][ T4516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.625942][ T4516] CPU: 0 UID: 0 PID: 4516 Comm: syz.7.1542 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 229.625980][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.625995][ T4516] Call Trace: [ 229.626005][ T4516] [ 229.626015][ T4516] __dump_stack+0x21/0x30 [ 229.626053][ T4516] dump_stack_lvl+0x140/0x1c0 [ 229.626081][ T4516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.626110][ T4516] ? getname_flags+0xcc/0x6b0 [ 229.626135][ T4516] dump_stack+0x19/0x20 [ 229.626162][ T4516] should_fail_ex+0x3c2/0x510 [ 229.626188][ T4516] should_fail+0xf/0x20 [ 229.626209][ T4516] should_fail_usercopy+0x1e/0x30 [ 229.626235][ T4516] strncpy_from_user+0x29/0x280 [ 229.626261][ T4516] getname_flags+0x106/0x6b0 [ 229.626285][ T4516] __x64_sys_rename+0x61/0xa0 [ 229.626307][ T4516] x64_sys_call+0x150b/0x2ee0 [ 229.626327][ T4516] do_syscall_64+0x57/0xf0 [ 229.626357][ T4516] ? clear_bhb_loop+0x50/0xa0 [ 229.626400][ T4516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.626425][ T4516] RIP: 0033:0x7fa0a739e159 [ 229.626445][ T4516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.626464][ T4516] RSP: 002b:00007fa0a5df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 229.626491][ T4516] RAX: ffffffffffffffda RBX: 00007fa0a7625fa0 RCX: 00007fa0a739e159 [ 229.626509][ T4516] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 229.626526][ T4516] RBP: 00007fa0a5df7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.626542][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.626557][ T4516] R13: 00007fa0a7626038 R14: 00007fa0a7625fa0 R15: 00007fff3c8f37a8 [ 229.626576][ T4516] [ 229.648266][ T4518] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.769756][ T4526] selinux_netlink_send: 55 callbacks suppressed [ 229.769792][ T4526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=262 sclass=netlink_tcpdiag_socket pid=4526 comm=syz.7.1545 [ 229.773607][ T4518] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 229.796974][ T36] audit: type=1400 audit(1788196346.787:1715): avc: denied { ioctl } for pid=4525 comm="syz.7.1545" path="/265/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 229.801152][ T4519] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 229.899859][ T4519] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 230.133398][ T4085] bridge_slave_1: left allmulticast mode [ 230.144988][ T4085] bridge_slave_1: left promiscuous mode [ 230.150701][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.180132][ T4085] bridge_slave_0: left allmulticast mode [ 230.197069][ T4085] bridge_slave_0: left promiscuous mode [ 230.203284][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.353730][ T4085] veth0_vlan: left promiscuous mode SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: repeatedly failed to execute the program proc=4 req=1536 state=1 status=67 (errno 9: Bad file descriptor) [ 230.506869][ T36] audit: type=1400 audit(1788196347.507:1716): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1621]" dev="pipefs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 230.903183][ T4085] bridge_slave_1: left allmulticast mode [ 230.908888][ T4085] bridge_slave_1: left promiscuous mode [ 230.915120][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.924235][ T4085] bridge_slave_0: left allmulticast mode [ 230.929917][ T4085] bridge_slave_0: left promiscuous mode [ 230.936275][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.053660][ T4085] tipc: Disabling bearer [ 231.059178][ T4085] tipc: Left network mode [ 231.066860][ T4085] veth1_macvtap: left promiscuous mode [ 231.072563][ T4085] veth0_vlan: left promiscuous mode [ 234.696001][ T4085] bridge_slave_1: left allmulticast mode [ 234.701729][ T4085] bridge_slave_1: left promiscuous mode [ 234.707450][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.715348][ T4085] bridge_slave_0: left allmulticast mode [ 234.721544][ T4085] bridge_slave_0: left promiscuous mode [ 234.727216][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.823985][ T4085] tipc: Disabling bearer [ 234.829559][ T4085] tipc: Left network mode [ 234.837002][ T4085] veth1_macvtap: left promiscuous mode [ 234.842677][ T4085] veth0_vlan: left promiscuous mode