last executing test programs: 3.124851443s ago: executing program 0 (id=4238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4c804) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x400c800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x404c0c5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) 3.101921205s ago: executing program 0 (id=4241): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.071305396s ago: executing program 0 (id=4244): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffeab) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) unshare(0x400) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r1, 0xffffffffffffffff, 0x0) 1.614139344s ago: executing program 2 (id=4250): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x1, @empty}}, 0x1e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) setsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e, 0x80800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) 1.572344886s ago: executing program 2 (id=4251): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x34) 1.49794051s ago: executing program 2 (id=4252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800010000, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x800}], 0x2, 0xbff, 0x1e, 0x0, 0x48, 0x6e}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) close(r2) 1.489026641s ago: executing program 2 (id=4253): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.424445044s ago: executing program 0 (id=4254): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0f08f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20002) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1.337940179s ago: executing program 0 (id=4255): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(0x0, 0x3) write$binfmt_misc(r1, &(0x7f0000000180)="cf", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0x101, 0x3) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x6, 0xfff, 0x1, 0xffff0001, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000a40)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:\x14\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@iC\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\xb5\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96') close_range(r2, 0xffffffffffffffff, 0x600000000000000) 1.272435282s ago: executing program 1 (id=4256): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @dev}, &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xd9a77000) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r3, 0x2f, 0x40, 0x4, 0x0, 0x1, @remote, @empty, 0x20, 0x8060, 0x39b7, 0x3ff}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$FUSE(r4, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5061, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r1, &(0x7f0000000180), 0x0, 0x1, 0x6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"}) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x8000, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x2}]) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r9, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000240000002b0000000000000718"], 0x30}, 0x4000010) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5], 0x15) 917.864021ms ago: executing program 3 (id=4258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 917.258701ms ago: executing program 3 (id=4259): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x1, @empty}}, 0x1e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) setsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e, 0x80800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) 879.980263ms ago: executing program 3 (id=4260): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000340)="fc00000018000704ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400604033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177332e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd5339ec2a0f0d1bcae5fa0f5fcbbc7bc190bd06a76a715498fe9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd64338034a084f2013cd1890058a10000c880ac8d011b59", 0xfc) 820.244616ms ago: executing program 3 (id=4261): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000040)='./cgroup/../file0\x00', 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000080)='erspan0\x00') 745.81433ms ago: executing program 3 (id=4262): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "63f9cf6ce634be51", "9385fe69dcb3008c8b1e7e9606b7a78b", "fc6700", "6708d1c4410daf2a"}, 0x28) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/116, 0x74, 0x1, &(0x7f0000000940)=""/144, 0x90}, &(0x7f0000000a40)=0x40) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99dfe25366db886525ab80ef54836d05b03d0b4bfe7a6a614713e8c4de", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000007c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320ea34f07", 0xd1}], 0x5}, 0xc0d0) (rerun: 32) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x3d) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r4 = getpgrp(0x0) (rerun: 64) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x40000000) 658.124375ms ago: executing program 1 (id=4263): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffff, 0x108062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x12, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0ae9cd680f985881a7beda9d69098c8b534464c5163dd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) syz_usb_connect(0x3, 0x43, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0], 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000580)={0x7, 0x1b, 0x2}, 0x7) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000000440)={0x18f, 0x2}) setsockopt(r2, 0x1, 0x9, &(0x7f0000000040), 0x29) r4 = memfd_secret(0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "d268033623e8cfdf467e59d06f91c33bbbf5348219b2235baac5"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "4f59df82a1486651fd878e4669531cb6f8d89ae099312de75447cfd3bfa9a72dc926"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7eb974080c1f0f30e9bfe2d1990ed2c638fd3a7d2ddda13dd2c7"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff77}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf71}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 541.787241ms ago: executing program 2 (id=4264): setgroups(0xd329779ad33ee0b6, 0x0) setresgid(0x0, 0xee01, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xbc, 0x67, 0x21, 0x10, 0x2a39, 0x3fa0, 0x8ef4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa, 0x7, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0xff, 0x64, 0x18, 0x9, [], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x40, 0x80, 0x9}}]}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xecc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) 524.286072ms ago: executing program 0 (id=4265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4c804) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x400c800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x404c0c5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) 210.024149ms ago: executing program 3 (id=4266): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7800, 0x20, 0xfff, 0x2, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @multicast1}}}}) (async) r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d0201400001020301090212000101056001090400000001072002"], 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x1edb0000000, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x3, 0x0, 0x1f, 0x203}, {0x2, 0xfffffffc}, 0x70bd27, 0x3504, 0xa, 0x2, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) syz_usb_control_io$uac1(r1, &(0x7f0000001e00)={0x14, 0x0, &(0x7f0000001d80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 107.965434ms ago: executing program 1 (id=4267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) r1 = syz_io_uring_setup(0x5a27, &(0x7f0000000100)={0x0, 0xe6c3, 0x40, 0x1, 0x1}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x7f2, &(0x7f0000000280)={0x0, 0x82a6, 0x4, 0x3, 0x1fa, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'caif0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/141, 0x8d}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000002c40)=""/130, 0x82}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/265, 0x109}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2e8b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000000)='\n\x00Y`}f\"', 0x7}], 0x4e) 89.973725ms ago: executing program 1 (id=4268): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x3ff, &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x1000000, &(0x7f0000000180)="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", 0xfd, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="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") sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240009000000010000000000000000000a00009c00"], 0x24}], 0x1}, 0x0) 22.065159ms ago: executing program 1 (id=4269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 17.710929ms ago: executing program 1 (id=4270): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x7, 0x0, "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"}) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bdc754145ff51afa0e16aee306e74e325abf0358c3dde17641dc643ef3cf49dbeed8d6015ed0fe6412cd42a22f731ae564876e88d737191692a7d017735cb8ffb0deecaff87f1f84f20eddb65c3af2301a76d60c18150b791ea23278ba55e3a9ed03b8238317a621d268b741f565a9a3bdf45f9e92e0b05d3c265f4665a7cf35b0e899395cbe809e58962f0b19aab2bdcde283ab26cbaadc5ffd5b790e661a0624360f415506512a2dd79281550418462d6c686d62b2093c62564558e75619363b9a78157a7185002148456a9f69e43208559c3c25", 0xd5, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1e000900", @ANYRES16=r6, @ANYBLOB="19072cbd7000fddbdf25010000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 0s ago: executing program 2 (id=4271): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x8cff) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): 3:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 49.083764][ T980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.391266][ T36] kauditd_printk_skb: 431 callbacks suppressed [ 49.391287][ T36] audit: type=1400 audit(1777033510.640:668): avc: denied { name_bind } for pid=990 comm="syz.0.247" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.488934][ T36] audit: type=1400 audit(1777033510.740:669): avc: denied { setopt } for pid=1001 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.590009][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 49.777796][ T1019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 49.791712][ T1019] kvm: pic: level sensitive irq not supported [ 49.791815][ T1019] kvm: pic: non byte read [ 49.804255][ T1019] kvm: pic: level sensitive irq not supported [ 49.804459][ T1019] kvm: pic: non byte read [ 49.816419][ T1019] kvm: pic: level sensitive irq not supported [ 49.816619][ T1019] kvm: pic: non byte read [ 50.004778][ T36] audit: type=1400 audit(1777033511.260:670): avc: denied { mount } for pid=1023 comm="syz.0.257" name="/" dev="ramfs" ino=7375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.123563][ T1028] rust_binder: Error while translating object. [ 50.123605][ T1028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.135432][ T1028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 50.178031][ T36] audit: type=1400 audit(1777033511.430:671): avc: denied { getopt } for pid=1031 comm="syz.1.261" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.360198][ T9] usb 2-1: USB disconnect, device number 2 [ 50.751315][ T36] audit: type=1400 audit(1777033512.010:672): avc: denied { watch } for pid=1053 comm="syz.1.269" path="/56/control" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.794450][ T36] audit: type=1400 audit(1777033512.050:673): avc: denied { getopt } for pid=1057 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.995501][ T36] audit: type=1400 audit(1777033512.250:674): avc: denied { read } for pid=1068 comm="syz.1.273" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.019236][ T36] audit: type=1400 audit(1777033512.250:675): avc: denied { open } for pid=1068 comm="syz.1.273" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.047249][ T36] audit: type=1400 audit(1777033512.310:676): avc: denied { write } for pid=1068 comm="syz.1.273" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.279783][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 51.329883][ T1083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.342695][ T1083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.439771][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 51.446759][ T1069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.455507][ T1069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.464659][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.472525][ T31] usb 2-1: no configurations [ 51.477406][ T31] usb 2-1: can't read configurations, error -22 [ 51.495518][ T36] audit: type=1400 audit(1777033512.750:677): avc: denied { remount } for pid=1084 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.787529][ T1106] ======================================================= [ 51.787529][ T1106] WARNING: The mand mount option has been deprecated and [ 51.787529][ T1106] and is ignored by this kernel. Remove the mand [ 51.787529][ T1106] option from the mount to silence this warning. [ 51.787529][ T1106] ======================================================= [ 51.896900][ T1115] macsec0: entered promiscuous mode [ 51.904387][ T1115] macsec0: left promiscuous mode [ 52.442988][ T1135] VFS: Mount too revealing [ 52.529748][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 52.690080][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 52.698027][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.711928][ T31] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 52.723011][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.736286][ T31] usb 2-1: Product: syz [ 52.742432][ T31] usb 2-1: Manufacturer: syz [ 52.748040][ T31] usb 2-1: SerialNumber: syz [ 52.760087][ T31] usb 2-1: Invalid firmware size=110. [ 52.771107][ T31] usb 2-1: Invalid firmware size=110. [ 52.778200][ T31] usb 2-1: Invalid firmware size=110. [ 52.822587][ T1149] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 54.700536][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 54.751212][ T1220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 55.174020][ T308] usb 2-1: USB disconnect, device number 4 [ 55.555580][ T1254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.158723][ T1273] Zero length message leads to an empty skb [ 56.448765][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 56.448784][ T36] audit: type=1400 audit(1777033517.700:687): avc: denied { connect } for pid=1281 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.449112][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 56.500428][ T1283] binder: Unknown parameter 'defcontext01777777777777777777777' [ 56.501082][ T36] audit: type=1400 audit(1777033517.760:688): avc: denied { remount } for pid=1281 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.799823][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.950987][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 56.960943][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 56.971087][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 56.991081][ T31] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 57.000435][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.008611][ T31] usb 4-1: Product: syz [ 57.013326][ T31] usb 4-1: Manufacturer: syz [ 57.018144][ T31] usb 4-1: SerialNumber: syz [ 57.050519][ T31] usb 4-1: config 0 descriptor?? [ 57.057823][ T1285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.066848][ T31] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 57.887227][ T1328] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 57.902428][ T1328] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 57.912290][ T36] audit: type=1400 audit(1777033519.170:689): avc: denied { create } for pid=1339 comm="syz.1.355" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.937781][ T1328] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 57.948335][ T1328] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.956250][ T36] audit: type=1400 audit(1777033519.210:690): avc: denied { mounton } for pid=1339 comm="syz.1.355" path="/81/file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.979961][ T1328] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 57.995494][ T36] audit: type=1400 audit(1777033519.240:691): avc: denied { read write } for pid=1339 comm="syz.1.355" name="file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.012755][ T1343] tipc: Enabling of bearer rejected, failed to enable media [ 58.018939][ T36] audit: type=1400 audit(1777033519.240:692): avc: denied { open } for pid=1339 comm="syz.1.355" path="/81/file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.051852][ T1328] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 58.061145][ T1328] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 58.240955][ T1351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.250731][ T1351] kvm: pic: level sensitive irq not supported [ 58.250888][ T1351] kvm: pic: single mode not supported [ 58.257295][ T1351] kvm: pic: single mode not supported [ 58.262924][ T1351] kvm: pic: level sensitive irq not supported [ 58.268762][ T1351] kvm: pic: single mode not supported [ 58.645819][ T36] audit: type=1400 audit(1777033519.900:693): avc: denied { execute } for pid=1360 comm="syz.2.362" path="/82/cpuacct.usage_percpu" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.557047][ T308] usb 4-1: USB disconnect, device number 5 [ 59.572988][ T36] audit: type=1326 audit(1777033520.830:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x7ffc0000 [ 59.596528][ T36] audit: type=1326 audit(1777033520.830:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x7ffc0000 [ 59.620716][ T36] audit: type=1326 audit(1777033520.830:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1387 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1ec419cdd9 code=0x7ffc0000 [ 59.642799][ T1392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.653745][ T1392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.185361][ T1399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.196696][ T1399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.039761][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 61.189744][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 61.196264][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.207255][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.217081][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.223790][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.233128][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.242084][ T9] usb 4-1: config 0 descriptor?? [ 61.369747][ T379] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 61.519739][ T379] usb 1-1: Using ep0 maxpacket: 16 [ 61.525957][ T379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.536350][ T379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.547676][ T379] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.557223][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.565490][ T379] usb 1-1: Product: syz [ 61.569753][ T379] usb 1-1: Manufacturer: syz [ 61.574411][ T379] usb 1-1: SerialNumber: syz [ 61.582725][ T36] kauditd_printk_skb: 7891 callbacks suppressed [ 61.582743][ T36] audit: type=1400 audit(1777033522.840:8588): avc: denied { shutdown } for pid=1444 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.653199][ T9] hid (null): unknown global tag 0xd [ 61.658633][ T9] hid (null): global environment stack underflow [ 61.666659][ T9] hid (null): report_id 0 is invalid [ 61.672132][ T9] hid (null): global environment stack underflow [ 61.678526][ T9] hid (null): global environment stack underflow [ 61.684927][ T9] hid (null): report_id 43559 is invalid [ 61.783509][ T379] usb 1-1: 0:2 : does not exist [ 61.790467][ T379] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 61.802037][ T379] usb 1-1: USB disconnect, device number 6 [ 61.810107][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.850692][ T9] usb 4-1: USB disconnect, device number 6 [ 62.136703][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.145289][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.374966][ T1459] rust_binder: Error in use_page_slow: ESRCH [ 62.374994][ T1459] rust_binder: use_range failure ESRCH [ 62.381750][ T1459] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 62.387361][ T1459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 62.395600][ T1459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:286 [ 62.790430][ T1478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 62.945284][ T1482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.558606][ T36] audit: type=1400 audit(1777033524.810:8589): avc: denied { watch_reads } for pid=1493 comm="syz.2.413" path="pipe:[10947]" dev="pipefs" ino=10947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 65.062466][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.071427][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.409849][ T831] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 65.569797][ T831] usb 1-1: Using ep0 maxpacket: 32 [ 65.587085][ T831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.656969][ T831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.677086][ T831] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.686527][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.695880][ T831] usb 1-1: config 0 descriptor?? [ 65.702330][ T831] hub 1-1:0.0: USB hub found [ 65.732701][ T1543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.902279][ T831] hub 1-1:0.0: 1 port detected [ 66.107732][ T831] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 66.114249][ T831] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 66.123293][ T831] usbhid 1-1:0.0: can't add hid device: -71 [ 66.132854][ T831] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.151027][ T36] audit: type=1400 audit(1777033527.410:8590): avc: denied { bind } for pid=1545 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.171726][ T36] audit: type=1400 audit(1777033527.410:8591): avc: denied { setopt } for pid=1545 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.193676][ T831] usb 1-1: USB disconnect, device number 7 [ 66.200374][ T1546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 66.840064][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 66.905251][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 66.914186][ T1565] bridge_slave_1: left allmulticast mode [ 66.919890][ T1565] bridge_slave_1: left promiscuous mode [ 66.925516][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.933339][ T1565] bridge_slave_0: left allmulticast mode [ 66.939080][ T1565] bridge_slave_0: left promiscuous mode [ 66.944925][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.480671][ T36] audit: type=1400 audit(1777033528.740:8592): avc: denied { ioctl } for pid=1574 comm="syz.0.444" path="/120/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.834018][ T1586] GUP no longer grows the stack in syz.0.449 (1586): 200000005000-200000008000 (200000004000) [ 67.844445][ T1586] CPU: 1 UID: 0 PID: 1586 Comm: syz.0.449 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 67.844483][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.844495][ T1586] Call Trace: [ 67.844504][ T1586] [ 67.844511][ T1586] __dump_stack+0x21/0x30 [ 67.844535][ T1586] dump_stack_lvl+0x140/0x1c0 [ 67.844550][ T1586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.844568][ T1586] ? find_vma+0xd3/0x120 [ 67.844587][ T1586] dump_stack+0x19/0x20 [ 67.844602][ T1586] __get_user_pages+0x1e18/0x22b0 [ 67.844615][ T1586] ? detach_entity_load_avg+0x7b0/0x7b0 [ 67.844633][ T1586] ? __kasan_check_write+0x18/0x20 [ 67.844654][ T1586] ? dequeue_entity+0x809/0x1380 [ 67.844669][ T1586] ? down_read_killable+0x7f/0x100 [ 67.844685][ T1586] ? populate_vma_page_range+0x220/0x220 [ 67.844698][ T1586] ? __x64_sys_write+0x7f/0x90 [ 67.844714][ T1586] __gup_longterm_locked+0xc5a/0x1600 [ 67.844728][ T1586] ? __cfi_update_misfit_status+0x10/0x10 [ 67.844742][ T1586] ? __pte_offset_map+0x1b0/0x230 [ 67.844757][ T1586] gup_fast_fallback+0x12e9/0x14e0 [ 67.844771][ T1586] ? sched_clock_noinstr+0xd/0x30 [ 67.844788][ T1586] ? get_user_pages_fast_only+0xc0/0xc0 [ 67.844801][ T1586] ? __switch_to_asm+0x3d/0x70 [ 67.844817][ T1586] ? __schedule+0x13a1/0x1fa0 [ 67.844830][ T1586] get_user_pages_fast+0x73/0xb0 [ 67.844843][ T1586] get_futex_key+0x25f/0x940 [ 67.844856][ T1586] ? __sched_text_start+0x10/0x10 [ 67.844869][ T1586] ? __cfi_get_futex_key+0x10/0x10 [ 67.844882][ T1586] futex_wait_setup+0xae/0x260 [ 67.844903][ T1586] ? __cfi___futex_queue+0x10/0x10 [ 67.844916][ T1586] ? __cfi_futex_wait_setup+0x10/0x10 [ 67.844932][ T1586] ? __asan_memcpy+0x5a/0x80 [ 67.844948][ T1586] __futex_wait+0x134/0x3e0 [ 67.844964][ T1586] ? __cfi___futex_wait+0x10/0x10 [ 67.844979][ T1586] ? __cfi_futex_wake_mark+0x10/0x10 [ 67.844995][ T1586] ? futex_wake+0x666/0x950 [ 67.845010][ T1586] ? futex_setup_timer+0xb4/0xd0 [ 67.845023][ T1586] futex_wait+0x129/0x7b0 [ 67.845039][ T1586] ? __cfi_futex_wait+0x10/0x10 [ 67.845055][ T1586] ? vfs_write+0x9a4/0xf90 [ 67.845071][ T1586] do_futex+0x32a/0x510 [ 67.845085][ T1586] ? __cfi_do_futex+0x10/0x10 [ 67.845098][ T1586] ? mutex_unlock+0x90/0x240 [ 67.845113][ T1586] __se_sys_futex+0x13c/0x320 [ 67.845126][ T1586] ? fput+0x1a4/0x240 [ 67.845160][ T1586] ? __x64_sys_futex+0x110/0x110 [ 67.845175][ T1586] ? __cfi_ksys_write+0x10/0x10 [ 67.845192][ T1586] ? __kasan_check_write+0x18/0x20 [ 67.845207][ T1586] __x64_sys_futex+0xe9/0x110 [ 67.845223][ T1586] x64_sys_call+0x227f/0x2ee0 [ 67.845239][ T1586] do_syscall_64+0x57/0xf0 [ 67.845252][ T1586] ? clear_bhb_loop+0x50/0xa0 [ 67.845267][ T1586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.845281][ T1586] RIP: 0033:0x7f2b6eb9cdd9 [ 67.845294][ T1586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.845304][ T1586] RSP: 002b:00007f2b6f989028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 67.845320][ T1586] RAX: ffffffffffffffda RBX: 00007f2b6ee15fa0 RCX: 00007f2b6eb9cdd9 [ 67.845330][ T1586] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000004000 [ 67.845338][ T1586] RBP: 00007f2b6ec32d69 R08: 0000000000000000 R09: 0000000000000001 [ 67.845346][ T1586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.845354][ T1586] R13: 00007f2b6ee16038 R14: 00007f2b6ee15fa0 R15: 00007ffff0aee948 [ 67.845365][ T1586] [ 69.031028][ T36] audit: type=1326 audit(1777033531.294:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1598 comm="syz.2.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 69.272915][ T36] audit: type=1400 audit(1777033531.534:8594): avc: denied { bind } for pid=1620 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.273709][ T1621] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 69.381869][ T36] audit: type=1400 audit(1777033531.644:8595): avc: denied { mount } for pid=1622 comm="syz.0.462" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.413730][ T36] audit: type=1400 audit(1777033531.664:8596): avc: denied { watch watch_reads } for pid=1622 comm="syz.0.462" path="/129/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.452125][ T1627] overlayfs: failed to clone upperpath [ 69.709772][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 69.859736][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 69.871373][ T45] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 69.879779][ T45] usb 4-1: config 0 has no interface number 0 [ 69.885902][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 69.916066][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 69.938303][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 69.947749][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.961304][ T45] usb 4-1: Product: syz [ 69.968849][ T45] usb 4-1: Manufacturer: syz [ 69.986119][ T45] usb 4-1: SerialNumber: syz [ 69.999275][ T45] usb 4-1: config 0 descriptor?? [ 70.008083][ T1629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.016834][ T1629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.218298][ T36] audit: type=1400 audit(1777033532.474:8597): avc: denied { write } for pid=1671 comm="syz.2.482" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.220133][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.255274][ T1629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.260342][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.280654][ T1629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.984080][ T1699] usb usb9: usbfs: process 1699 (syz.2.495) did not claim interface 22 before use [ 71.052646][ T1703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.062087][ T1703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.379454][ T36] audit: type=1400 audit(1777033533.634:8598): avc: denied { associate } for pid=1707 comm="syz.0.497" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 71.412478][ T36] audit: type=1400 audit(1777033533.664:8599): avc: denied { mounton } for pid=1705 comm="syz.0.497" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.686307][ T1713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.695035][ T1713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.261450][ T1733] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.354636][ T1740] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 72.366534][ T1740] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 72.377518][ T1740] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 72.523336][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 72.533734][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 72.544786][ T45] asix 4-1:0.34: probe with driver asix failed with error -71 [ 72.553493][ T45] usb 4-1: USB disconnect, device number 7 [ 73.768266][ T1779] fuse: Bad value for 'fd' [ 75.093763][ T1831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.109942][ T1831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.193015][ T36] audit: type=1400 audit(1777033537.454:8600): avc: denied { bind } for pid=1839 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.683376][ T36] audit: type=1400 audit(1777033537.944:8601): avc: denied { getopt } for pid=1881 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.704300][ T36] audit: type=1400 audit(1777033537.944:8602): avc: denied { ioctl } for pid=1881 comm="syz.2.566" path="socket:[14100]" dev="sockfs" ino=14100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.560911][ T36] audit: type=1400 audit(1777033538.824:8603): avc: denied { append } for pid=1912 comm="syz.2.578" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.587440][ T36] audit: type=1400 audit(1777033538.844:8604): avc: denied { create } for pid=1912 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.622778][ T36] audit: type=1400 audit(1777033538.884:8605): avc: denied { ioctl } for pid=1912 comm="syz.2.578" path="socket:[14296]" dev="sockfs" ino=14296 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.650712][ T36] audit: type=1400 audit(1777033538.884:8606): avc: denied { write } for pid=1912 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.684294][ T1919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.693025][ T1919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.879741][ T379] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 77.031197][ T379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.039338][ T379] usb 4-1: not running at top speed; connect to a high speed hub [ 77.047909][ T379] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.058494][ T379] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.073271][ T379] usb 4-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 77.082457][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.090496][ T379] usb 4-1: Product: syz [ 77.094762][ T379] usb 4-1: Manufacturer: syz [ 77.099386][ T379] usb 4-1: SerialNumber: syz [ 77.216268][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.225333][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.309300][ T379] usb 4-1: MIDIStreaming interface descriptor not found [ 77.318959][ T379] usb 4-1: USB disconnect, device number 8 [ 77.329462][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.688677][ T36] audit: type=1400 audit(1777033539.944:8607): avc: denied { remount } for pid=1934 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.724997][ T1939] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 77.745477][ T1941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 77.762720][ T1943] rust_binder: Read failure Err(EAGAIN) in pid:357 [ 77.772331][ T1945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 77.819258][ T1951] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 77.831332][ T1951] rust_binder: 363: no such ref 1 [ 77.836472][ T1951] rust_binder: Write failure EFAULT in pid:363 [ 77.876892][ T1956] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 77.893338][ T1956] rust_binder: Write failure EINVAL in pid:365 [ 77.943462][ T1965] netlink: 'syz.3.603': attribute type 4 has an invalid length. [ 77.946248][ T1964] rust_binder: Write failure EFAULT in pid:367 [ 78.121791][ T36] audit: type=1400 audit(1777033540.384:8608): avc: denied { ioctl } for pid=1995 comm="syz.2.618" path="socket:[15504]" dev="sockfs" ino=15504 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.290861][ T36] audit: type=1400 audit(1777033540.554:8609): avc: denied { listen } for pid=2030 comm="syz.2.635" path=2F3134372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.345195][ T2038] capability: warning: `syz.2.638' uses 32-bit capabilities (legacy support in use) [ 78.505241][ T2071] tipc: Started in network mode [ 78.514729][ T2071] tipc: Node identity 3a000000000000000000000000000001, cluster identity 4711 [ 78.529382][ T2071] tipc: Enabling of bearer rejected, failed to enable media [ 78.630016][ T2094] tipc: Started in network mode [ 78.635095][ T2094] tipc: Node identity 9, cluster identity 5 [ 78.641185][ T2094] tipc: Node number set to 9 [ 78.645878][ T2094] tipc: Cannot configure node identity twice [ 79.154761][ T2142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.685'. [ 79.227272][ T2147] netlink: 216 bytes leftover after parsing attributes in process `syz.1.679'. [ 79.236465][ T2147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 80.655363][ T2180] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 80.718317][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 80.718337][ T36] audit: type=1400 audit(1777033542.974:8616): avc: denied { create } for pid=2183 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 80.731224][ T2185] VFS: Mount too revealing [ 80.916740][ T2195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 82.578104][ T2257] netlink: 277 bytes leftover after parsing attributes in process `syz.0.730'. [ 82.766852][ T2264] fuse: Bad value for 'fd' [ 83.490403][ T2292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.498879][ T2292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.903909][ T2361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.760'. [ 85.951404][ T2369] tipc: Started in network mode [ 85.957434][ T2369] tipc: Node identity -, cluster identity 4711 [ 87.372832][ T2390] tipc: Started in network mode [ 87.384288][ T2390] tipc: Node identity -, cluster identity 4711 [ 87.579639][ T36] audit: type=1400 audit(1777033549.834:8617): avc: denied { map } for pid=2418 comm="syz.2.784" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.696345][ T2437] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 87.760797][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 87.823203][ T2453] rust_binder: Write failure EFAULT in pid:486 [ 87.847976][ T2459] process 'syz.0.803' launched './file0' with NULL argv: empty string added [ 87.869758][ T36] audit: type=1400 audit(1777033550.124:8618): avc: denied { execute_no_trans } for pid=2456 comm="syz.0.803" path="/227/file0" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.889377][ T2463] fuse: Bad value for 'fd' [ 87.894168][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 87.922780][ T2465] rust_binder: Error while translating object. [ 87.922815][ T2465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.929170][ T2465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 88.016508][ T2477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.036133][ T2477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.566761][ T2496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 88.577144][ T2496] bridge_slave_1: left allmulticast mode [ 88.582967][ T2496] bridge_slave_1: left promiscuous mode [ 88.588838][ T2496] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.599089][ T2496] bridge_slave_0: left allmulticast mode [ 88.608366][ T2496] bridge_slave_0: left promiscuous mode [ 88.616113][ T2496] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672405][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 88.738720][ T2504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.749093][ T2504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.353881][ T36] audit: type=1400 audit(1777033551.614:8619): avc: denied { getopt } for pid=2525 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.540832][ T36] audit: type=1400 audit(1777033551.804:8620): avc: denied { ioctl } for pid=2540 comm="syz.2.848" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.669188][ T2546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 89.692997][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.707283][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.720338][ T36] audit: type=1400 audit(1777033551.984:8621): avc: denied { write } for pid=2549 comm="syz.3.844" path="socket:[17110]" dev="sockfs" ino=17110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.912346][ T36] audit: type=1400 audit(1777033552.174:8622): avc: denied { map } for pid=2565 comm="syz.1.853" path="socket:[17139]" dev="sockfs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.326908][ T36] audit: type=1400 audit(1777033553.586:8623): avc: denied { connect } for pid=2595 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.839431][ T36] audit: type=1400 audit(1777033554.096:8624): avc: denied { connect } for pid=2613 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.868690][ T36] audit: type=1400 audit(1777033554.126:8625): avc: denied { setopt } for pid=2617 comm="syz.2.877" laddr=fe80::14 lport=2 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.909711][ T36] audit: type=1400 audit(1777033554.126:8626): avc: denied { write } for pid=2617 comm="syz.2.877" laddr=fe80::14 lport=2 faddr=fe80::aa fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.980857][ T2630] netlink: 72 bytes leftover after parsing attributes in process `syz.1.882'. [ 91.491555][ T2665] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.167636][ T2707] netlink: 'syz.3.917': attribute type 4 has an invalid length. [ 92.176953][ T2707] netlink: 'syz.3.917': attribute type 4 has an invalid length. [ 92.193597][ T2707] netlink: 'syz.3.917': attribute type 4 has an invalid length. [ 92.243782][ T2717] tmpfs: Bad value for 'nr_blocks' [ 93.287075][ T2748] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 93.305526][ T2748] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 93.318080][ T2748] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 95.651894][ T2804] netlink: 72 bytes leftover after parsing attributes in process `syz.3.959'. [ 96.189024][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 96.189043][ T36] audit: type=1400 audit(1777033559.446:8628): avc: denied { mount } for pid=2830 comm="syz.3.972" name="/" dev="pstore" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 97.395710][ T36] audit: type=1400 audit(1777033560.656:8629): avc: denied { getopt } for pid=2914 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.496549][ T3007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1054'. [ 98.601311][ T36] audit: type=1400 audit(1777033561.866:8630): avc: denied { setopt } for pid=3024 comm="syz.2.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.037875][ T3071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1086'. [ 99.309072][ T36] audit: type=1400 audit(1777033562.566:8631): avc: denied { write } for pid=3115 comm="syz.2.1108" name="file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.331809][ T36] audit: type=1400 audit(1777033562.566:8632): avc: denied { open } for pid=3115 comm="syz.2.1108" path="/230/file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.337504][ T12] tipc: Subscription rejected, illegal request [ 99.375787][ T36] audit: type=1400 audit(1777033562.596:8633): avc: denied { ioctl } for pid=3115 comm="syz.2.1108" path="/230/file0" dev="tmpfs" ino=1251 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.462289][ T3134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 99.487843][ T3137] 9p: Unknown access argument ffffffffffffffff: -22 [ 99.523141][ T3143] overlayfs: failed to clone lowerpath [ 99.525123][ T3141] fuse: Bad value for 'fd' [ 99.533548][ T36] audit: type=1400 audit(1777033562.786:8634): avc: denied { mount } for pid=3142 comm="syz.3.1120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.691976][ T3167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 99.786539][ T3181] netlink: 'syz.2.1147': attribute type 4 has an invalid length. [ 100.442364][ T3229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 101.808364][ T3296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 101.868584][ T3307] overlayfs: failed to clone lowerpath [ 102.040184][ T3343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 102.148718][ T3367] overlayfs: failed to clone lowerpath [ 102.813453][ T3416] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 103.023154][ T3448] netlink: 'syz.2.1262': attribute type 3 has an invalid length. [ 103.562724][ T3493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.571454][ T3493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.337142][ T3593] overlayfs: missing 'workdir' [ 104.381436][ T3599] 9pnet_fd: Insufficient options for proto=fd [ 104.535177][ T3620] overlayfs: missing 'workdir' [ 105.488951][ T3698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.499516][ T3698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.447161][ T36] audit: type=1400 audit(1777033569.706:8635): avc: denied { mounton } for pid=3766 comm="syz.2.1417" path="/277/file0" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 106.813574][ T3780] batadv_slave_1: entered promiscuous mode [ 106.820480][ T3780] batadv_slave_1: left promiscuous mode [ 106.931313][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.940042][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.581216][ T3817] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1440'. [ 107.591266][ T36] audit: type=1400 audit(1777033570.856:8636): avc: denied { mounton } for pid=3812 comm="syz.2.1438" path="/proc/726/task/727/ns" dev="proc" ino=22737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 107.747886][ T3832] tipc: Started in network mode [ 107.752972][ T3832] tipc: Node identity ac14140f, cluster identity 4711 [ 107.760221][ T3832] tipc: Enabling of bearer rejected, failed to enable media [ 107.778068][ T36] audit: type=1400 audit(1777033571.036:8637): avc: denied { read } for pid=3833 comm="syz.0.1448" name="file2" dev="tmpfs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.847015][ T36] audit: type=1400 audit(1777033571.106:8638): avc: denied { append } for pid=3843 comm="syz.0.1453" name="file0" dev="tmpfs" ino=2422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.179394][ T3864] netlink: 'syz.3.1462': attribute type 11 has an invalid length. [ 108.187750][ T3864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1462'. [ 108.197723][ T3866] overlayfs: failed to clone lowerpath [ 108.391174][ T36] audit: type=1400 audit(1777033571.646:8639): avc: denied { map } for pid=3890 comm="syz.2.1477" path="socket:[22833]" dev="sockfs" ino=22833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.414628][ T36] audit: type=1400 audit(1777033571.646:8640): avc: denied { read accept } for pid=3890 comm="syz.2.1477" path="socket:[22833]" dev="sockfs" ino=22833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.487568][ T3903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.554103][ T3913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1487'. [ 108.685707][ T46] tipc: Left network mode [ 109.693567][ T36] audit: type=1400 audit(1777033572.956:8641): avc: denied { getopt } for pid=3962 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.846133][ T3981] tmpfs: Invalid uid '0x00000000ffffffff' [ 110.068399][ T36] audit: type=1400 audit(1777033573.326:8642): avc: denied { search } for pid=4021 comm="syz.3.1537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 110.090504][ T36] audit: type=1400 audit(1777033573.326:8643): avc: denied { write } for pid=4021 comm="syz.3.1537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 110.736171][ T36] audit: type=1400 audit(1777033573.996:8644): avc: denied { bind } for pid=4055 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.894312][ T4086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1567'. [ 110.904736][ T4087] overlayfs: lower data-only dirs require metacopy support. [ 110.906992][ T4086] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1567'. [ 110.921382][ T4086] netlink: 'syz.2.1567': attribute type 5 has an invalid length. [ 110.929602][ T4086] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1567'. [ 110.960786][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.970046][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.036347][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [ 111.157216][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'. [ 111.237686][ T4162] overlayfs: lower data-only dirs require metacopy support. [ 111.596593][ T4206] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1624'. [ 111.605771][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 112.044114][ T4235] /dev/loop0: Can't lookup blockdev [ 112.703689][ T4295] overlayfs: failed to clone lowerpath [ 112.818596][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 112.818613][ T36] audit: type=1400 audit(1777033576.076:8646): avc: denied { setopt } for pid=4311 comm="syz.3.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.110902][ T36] audit: type=1400 audit(1777033576.376:8647): avc: denied { read } for pid=4355 comm="syz.1.1696" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.239290][ T36] audit: type=1400 audit(1777033576.496:8648): avc: denied { write } for pid=4362 comm="syz.2.1699" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.262792][ T36] audit: type=1400 audit(1777033576.496:8649): avc: denied { open } for pid=4362 comm="syz.2.1699" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.880418][ T4433] __nla_validate_parse: 1 callbacks suppressed [ 113.880441][ T4433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1730'. [ 114.179709][ T36] audit: type=1400 audit(1777033577.436:8650): avc: denied { mount } for pid=4488 comm="syz.3.1758" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 115.064483][ T36] audit: type=1400 audit(1777033578.326:8651): avc: denied { ioctl } for pid=4549 comm="syz.2.1787" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 115.186418][ T4567] overlay: ./file0 is not a directory [ 115.507861][ T4596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.649923][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.674245][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.860942][ T4637] raw_sendmsg: syz.0.1830 forgot to set AF_INET. Fix it! [ 116.535443][ T36] audit: type=1400 audit(1777033579.796:8652): avc: denied { getopt } for pid=4667 comm="syz.2.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.663660][ T36] audit: type=1400 audit(1777033579.926:8653): avc: denied { read write } for pid=4680 comm="syz.2.1848" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.687331][ T36] audit: type=1400 audit(1777033579.926:8654): avc: denied { open } for pid=4680 comm="syz.2.1848" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.426755][ T36] audit: type=1400 audit(1777033580.686:8655): avc: denied { setopt } for pid=4748 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.009560][ T36] audit: type=1400 audit(1777033581.266:8656): avc: denied { mount } for pid=4775 comm="syz.1.1900" name="/" dev="configfs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 118.033267][ T36] audit: type=1400 audit(1777033581.266:8657): avc: denied { write } for pid=4775 comm="syz.1.1900" name="/" dev="configfs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.613954][ T4820] page size migration: [4820 (syz.1.1911)] madvise_vma_pad_pages:304: Invalid attempt to madvise padding on MAP_SHARED vma [ 119.598090][ T36] audit: type=1400 audit(1777033582.856:8658): avc: denied { mounton } for pid=4870 comm="syz.3.1937" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 119.598125][ T4871] overlay: filesystem on ./bus is read-only [ 119.747741][ T4877] page size migration: [4877 (syz.0.1940)] madvise_vma_pad_pages:304: Invalid attempt to madvise padding on MAP_SHARED vma [ 120.885085][ T4950] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1973'. [ 120.886998][ T36] audit: type=1400 audit(1777033584.146:8659): avc: denied { nlmsg_read } for pid=4949 comm="syz.1.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.903954][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.936800][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.003593][ T4966] 9pnet_fd: Insufficient options for proto=fd [ 121.481601][ T4982] loop6: detected capacity change from 0 to 8 [ 121.594607][ T4982] loop6: detected capacity change from 8 to 0 [ 121.645943][ T4994] 9pnet_fd: Insufficient options for proto=fd [ 121.837907][ T5018] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2004'. [ 121.983318][ T5028] overlayfs: failed to resolve './cgroup': -2 [ 122.049434][ T5040] overlayfs: failed to clone upperpath [ 122.386085][ T5072] overlayfs: failed to clone upperpath [ 122.960996][ T5098] overlayfs: failed to clone upperpath [ 123.166250][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.174823][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.337153][ T5114] overlayfs: failed to resolve './cgroup': -2 [ 123.774562][ T36] audit: type=1400 audit(1777033587.026:8660): avc: denied { read } for pid=5135 comm="syz.0.2061" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.187368][ T5186] tipc: Enabling of bearer rejected, failed to enable media [ 124.908406][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.917975][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.059413][ T5220] veth0: entered promiscuous mode [ 125.065328][ T5219] veth0: left promiscuous mode [ 125.214928][ T36] audit: type=1400 audit(1777033588.476:8661): avc: denied { create } for pid=5230 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.541009][ T5240] fuse: Bad value for 'group_id' [ 125.546099][ T5240] fuse: Bad value for 'group_id' [ 126.402747][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.425275][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.215774][ T5319] veth0_virt_wifi: entered allmulticast mode [ 127.226949][ T5319] veth0_virt_wifi: left allmulticast mode [ 127.726286][ T5353] overlayfs: failed to clone upperpath [ 127.776586][ T5356] overlayfs: failed to clone lowerpath [ 127.965817][ T5369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.982797][ T5369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.596096][ T5398] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2185'. [ 129.703267][ T5451] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2202'. [ 130.725581][ T36] audit: type=1326 audit(1777033593.986:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.2218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 130.729338][ T5491] batadv_slave_1: entered promiscuous mode [ 130.784464][ T5488] batadv_slave_1: left promiscuous mode [ 130.791949][ T5495] tmpfs: Unknown parameter 'set_refault_anon 1440 [ 130.791949][ T5495] workingset_refault_file 0 [ 130.791949][ T5495] workingset_activate_anon 1440 [ 130.791949][ T5495] workingset_activate_file 0 [ 130.791949][ T5495] workingset_restore_anon 0 [ 130.791949][ T5495] workingset_restore_file 0 [ 130.791949][ T5495] workingset_nodereclaim 0 [ 130.791949][ T5495] nr_anon_pages 17051 [ 130.791949][ T5495] nr_mapped 24932 [ 130.791949][ T5495] nr_file_pages 100750 [ 130.791949][ T5495] nr_dirty 140 [ 130.791949][ T5495] nr_writeback 0 [ 130.791949][ T5495] nr_writeback_temp 0 [ 130.791949][ T5495] nr_shmem 60213 [ 130.791949][ T5495] nr_shmem_hugepages 0 [ 130.791949][ T5495] nr_shmem_pmdmapped 0 [ 130.791949][ T5495] nr_file_hugepages 0 [ 130.791949][ T5495] nr_file_pmdmapped 0 [ 130.791949][ T5495] nr_anon_transparent_hugepages 0 [ 130.791949][ T5495] nr_vmscan_write 8217 [ 130.791949][ T5495] nr_vmscan_immediate_reclaim 0 [ 130.791949][ T5495] nr_dirtied 2351 [ 130.791949][ T5495] nr_written 3268 [ 130.791949][ T5495] nr_throttled_written 0 [ 130.791949][ T5495] nr_kernel_misc_reclaimable 0 [ 130.791949][ T5495] nr_foll_pin_acquired 54210 [ 130.791949][ T5495] nr_foll_pin_released 54210 [ 130.791949][ T5495] nr_kernel_stack 4976 [ 130.791949][ T5495] nr_page_table_pages 1322 [ 130.791949][ T5495] nr_sec_page_table_pages 0 [ 130.791949][ T5495] nr_iommu_pages 0 [ 130.791949][ T5495] nr_swapcached 3 [ 130.791949][ T5495] pgdemote_kswapd 0 [ 130.791949][ T5495] pgdemote_direct 0 [ 130.791949][ T5495] pgdemote_khugepaged 0 [ 130.791949][ T5495] nr_dirty_threshold 287896 [ 130.791949][ T5495] nr_dirty_background_threshold 143772 [ 130.791949][ T5495] nr_memmap_pages 36864 [ 130.791949][ T5495] nr_memmap_boot_pages 32768 [ 130.791949][ T5495] pgpgin 26739 [ 130.791949][ T5495] pgpgout 13780 [ 130.791949][ T5495] pswpin 406 [ 130.791949][ T5495] pswpout 1057 [ 130.791949][ T5495] pgalloc_dma32 0 [ 130.791949][ T5495] pgalloc_normal 1899250 [ 130.792381][ T5495] futex_wake_op: syz.2.2220 tries to shift op by -1; fix this program [ 130.844561][ T36] audit: type=1400 audit(1777033594.106:8663): avc: denied { bind } for pid=5504 comm="syz.1.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.001369][ T36] audit: type=1400 audit(1777033594.106:8664): avc: denied { name_bind } for pid=5504 comm="syz.1.2226" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 131.036174][ T36] audit: type=1400 audit(1777033594.106:8665): avc: denied { node_bind } for pid=5504 comm="syz.1.2226" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 131.662859][ T5543] netlink: 'syz.0.2243': attribute type 27 has an invalid length. [ 131.673372][ T5543] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.952037][ T5565] 9pnet: p9_errstr2errno: server reported unknown error [ 132.136805][ T5587] futex_wake_op: syz.1.2263 tries to shift op by -1; fix this program [ 132.199066][ T36] audit: type=1400 audit(1777033595.456:8666): avc: denied { getopt } for pid=5597 comm="syz.2.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.279691][ T36] audit: type=1400 audit(1777033595.536:8667): avc: denied { read append } for pid=5610 comm="syz.2.2280" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.314480][ T36] audit: type=1400 audit(1777033595.536:8668): avc: denied { ioctl } for pid=5610 comm="syz.2.2280" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.328108][ T5617] batadv_slave_1: entered promiscuous mode [ 132.350769][ T5617] veth0_macvtap: entered promiscuous mode [ 132.350803][ T5615] futex_wake_op: syz.0.2273 tries to shift op by -1; fix this program [ 132.356826][ T5616] veth0_macvtap: left promiscuous mode [ 132.376568][ T5616] batadv_slave_1: left promiscuous mode [ 132.526506][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.579700][ T5322] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.579759][ T5650] Bluetooth: hci0: command 0x1003 tx timeout [ 134.632110][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.641047][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.742725][ T5754] overlayfs: failed to clone upperpath [ 134.778754][ T5756] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2342'. [ 134.831359][ T5760] overlayfs: failed to clone upperpath [ 135.729191][ T36] audit: type=1400 audit(1777033598.986:8669): avc: denied { read } for pid=5801 comm="syz.3.2361" name="/" dev="configfs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.751627][ T36] audit: type=1400 audit(1777033598.986:8670): avc: denied { open } for pid=5801 comm="syz.3.2361" path="/" dev="configfs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.060571][ T36] audit: type=1400 audit(1777033599.316:8671): avc: denied { read write } for pid=5821 comm="syz.2.2371" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.079723][ T5823] overlayfs: failed to clone upperpath [ 136.109692][ T36] audit: type=1400 audit(1777033599.316:8672): avc: denied { open } for pid=5821 comm="syz.2.2371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.151450][ T36] audit: type=1400 audit(1777033599.346:8673): avc: denied { map } for pid=5821 comm="syz.2.2371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.174872][ T36] audit: type=1400 audit(1777033599.346:8674): avc: denied { execute } for pid=5821 comm="syz.2.2371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.235502][ T5827] overlayfs: failed to clone upperpath [ 136.379811][ T36] audit: type=1400 audit(1777033599.626:8675): avc: denied { remount } for pid=5839 comm="syz.3.2379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 137.455052][ T5881] overlayfs: failed to clone upperpath [ 138.147822][ T5944] overlayfs: failed to clone upperpath [ 138.170648][ T36] audit: type=1400 audit(1777033601.436:8676): avc: denied { watch watch_reads } for pid=5945 comm="syz.3.2429" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 138.221723][ T36] audit: type=1400 audit(1777033601.486:8677): avc: denied { accept } for pid=5949 comm="syz.3.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.838825][ T5966] 9pnet_fd: p9_fd_create_tcp (5966): problem connecting socket to 127.0.0.1 [ 139.731493][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.759874][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.811308][ T6019] overlayfs: failed to clone lowerpath [ 139.827305][ T36] audit: type=1400 audit(1777033603.086:8678): avc: denied { bind } for pid=6021 comm="syz.3.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.883592][ T6022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2461'. [ 139.900291][ T6026] overlayfs: failed to clone upperpath [ 140.134781][ T6041] process '/newroot/671/file0' started with executable stack [ 140.471090][ T6051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 140.581553][ T6061] overlayfs: failed to clone upperpath [ 141.333324][ T6111] tipc: Enabling of bearer rejected, failed to enable media [ 141.680001][ T6117] overlayfs: failed to clone upperpath [ 142.693722][ T36] audit: type=1400 audit(1777033605.956:8679): avc: denied { ioctl } for pid=6163 comm="syz.3.2522" path="/694/file0" dev="tmpfs" ino=3703 ioctlcmd=0x4814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.537597][ T6241] overlayfs: failed to clone upperpath [ 144.571214][ T6303] overlayfs: failed to clone upperpath [ 146.014209][ T36] audit: type=1400 audit(1777033609.276:8680): avc: denied { unmount } for pid=6361 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 146.497725][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.507457][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.149148][ T6424] netlink: 'syz.3.2640': attribute type 4 has an invalid length. [ 147.584522][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.593207][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.736560][ T6455] overlayfs: failed to clone upperpath [ 147.753312][ T6457] overlayfs: failed to clone upperpath [ 148.269001][ T36] audit: type=1400 audit(1777033611.526:8681): avc: denied { rename } for pid=6496 comm="syz.2.2675" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 148.761493][ T6523] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 149.027139][ T6531] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 149.098545][ T6545] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.357945][ T6563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6563 comm=syz.0.2701 [ 149.415032][ T6573] overlayfs: failed to clone upperpath [ 149.495021][ T6576] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 149.649390][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.659606][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.764087][ T6619] overlayfs: failed to clone upperpath [ 149.874761][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 150.902532][ T6683] netlink: 'syz.1.2747': attribute type 27 has an invalid length. [ 151.145417][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.154413][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.165802][ T36] audit: type=1400 audit(1777033614.426:8682): avc: denied { write } for pid=6703 comm="syz.2.2756" path="socket:[33190]" dev="sockfs" ino=33190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.190261][ T36] audit: type=1400 audit(1777033614.436:8683): avc: denied { read } for pid=6703 comm="syz.2.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.848797][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.857401][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.777979][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.786606][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.795419][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.803983][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.351911][ T6858] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 154.359181][ T6858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1244 [ 154.387124][ T6865] loop5: detected capacity change from 0 to 7 [ 154.403300][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.412554][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.420721][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.429920][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.437872][ T6566] loop5: unable to read partition table [ 154.445376][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.454582][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.470726][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.480265][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.489438][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.498012][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.507216][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.515693][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.524974][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.532999][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.534002][ T6889] tipc: Enabling of bearer rejected, failed to enable media [ 154.542356][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.542711][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.567505][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.577975][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.587175][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.599678][ T6865] loop5: unable to read partition table [ 154.608033][ T6865] loop_reread_partitions: partition scan of loop5 (W) failed (rc=-5) [ 154.622608][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.631310][ T110] loop5: unable to read partition table [ 154.656602][ T36] audit: type=1400 audit(1777033617.916:8684): avc: denied { map } for pid=6902 comm="syz.2.2847" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.681071][ T36] audit: type=1400 audit(1777033617.916:8685): avc: denied { execute } for pid=6902 comm="syz.2.2847" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.823283][ T6909] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2850'. [ 154.910610][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.919169][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.268933][ T36] audit: type=1326 audit(1777033618.526:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.3.2855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 156.337109][ T110] loop5: unable to read partition table [ 156.349485][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.358348][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.878390][ T7002] loop7: detected capacity change from 0 to 7 [ 156.885379][ T7002] loop7: unable to read partition table [ 156.891479][ T7002] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 157.264387][ T7049] overlayfs: failed to clone lowerpath [ 157.450807][ T7067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.459346][ T7067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.988597][ T36] audit: type=1326 audit(1777033621.246:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.2.2942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 158.174877][ T7119] overlayfs: failed to clone upperpath [ 158.852555][ T7170] overlayfs: failed to clone upperpath [ 158.918109][ T306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.936445][ T306] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.374853][ T36] audit: type=1326 audit(1777033622.636:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.2.2983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 159.425198][ T36] audit: type=1400 audit(1777033622.686:8689): avc: denied { execute } for pid=7188 comm="syz.2.2983" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.911089][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.920262][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.451730][ C0] blk_print_req_error: 108 callbacks suppressed [ 160.451751][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.496782][ T7279] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 160.506483][ T7279] overlayfs: failed to get uuid (555/file1, err=-13); falling back to uuid=null. [ 160.532908][ T7285] rust_binder: Write failure EFAULT in pid:1354 [ 161.022755][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.037822][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.075016][ T7308] overlayfs: failed to clone upperpath [ 161.101220][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 161.669905][ T36] audit: type=1400 audit(1777033624.936:8690): avc: denied { listen } for pid=7350 comm="syz.2.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.161881][ T7384] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 162.267438][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.282815][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.604129][ T36] audit: type=1400 audit(1777033625.866:8691): avc: denied { lock } for pid=7416 comm="syz.0.3091" path="socket:[37206]" dev="sockfs" ino=37206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 162.872683][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.881978][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.403578][ T36] audit: type=1400 audit(1777033626.666:8692): avc: denied { ioctl } for pid=7440 comm="syz.2.3102" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.710285][ T36] audit: type=1400 audit(1777033627.966:8693): avc: denied { create } for pid=7519 comm="syz.0.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 165.003405][ T7529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3141'. [ 165.297277][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.319893][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.358695][ T7479] 9pnet_fd: p9_fd_create_tcp (7479): problem connecting socket to 127.0.0.1 [ 165.442597][ T7554] tipc: Enabling of bearer rejected, failed to enable media [ 165.699443][ T7570] tipc: Enabling of bearer rejected, failed to enable media [ 166.028070][ T7605] overlayfs: failed to clone upperpath [ 166.078237][ T7615] overlayfs: failed to clone upperpath [ 167.147658][ T36] audit: type=1400 audit(1777033630.406:8694): avc: denied { mount } for pid=7670 comm="syz.3.3207" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.829261][ T7736] overlayfs: failed to clone upperpath [ 168.242853][ T7791] netlink: 'syz.3.3263': attribute type 4 has an invalid length. [ 168.424051][ T7802] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 168.787918][ T7828] overlayfs: failed to clone upperpath [ 168.823115][ T7834] overlayfs: failed to clone upperpath [ 168.880565][ T7836] overlayfs: failed to clone upperpath [ 169.021312][ T7846] overlayfs: failed to clone upperpath [ 169.971473][ T36] audit: type=1400 audit(1777033633.236:8695): avc: denied { create } for pid=7874 comm="syz.0.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.998031][ T7877] tipc: Enabling of bearer rejected, failed to enable media [ 171.667473][ T7930] overlayfs: failed to resolve './file1/file0': -2 [ 171.763353][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3337'. [ 172.135335][ T7997] tipc: Enabling of bearer rejected, failed to enable media [ 172.185987][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3364'. [ 172.729949][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.738593][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.061802][ T8085] overlayfs: failed to clone lowerpath [ 173.321581][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.331023][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.980946][ T36] audit: type=1400 audit(1777033637.246:8696): avc: denied { load_policy } for pid=8122 comm="syz.2.3422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 173.980961][ T8123] SELinux: policydb version 516537429 does not match my version range 15-33 [ 173.980994][ T8123] SELinux: failed to load policy [ 174.842366][ T36] audit: type=1326 audit(1777033638.106:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.3.3438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 174.917490][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.927504][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.586114][ T36] audit: type=1326 audit(1777033638.846:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.0.3454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 175.647225][ T308] kernel read not supported for file [fscontext] (pid: 308 comm: kworker/1:3) [ 175.657117][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.678477][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.327203][ T8246] overlayfs: failed to resolve './cgroup': -2 [ 176.363495][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.373847][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.897555][ T36] audit: type=1326 audit(1777033640.156:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8269 comm="syz.1.3491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 176.999012][ T8296] tipc: Enabling of bearer rejected, failed to enable media [ 177.140645][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.149156][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.467536][ T8317] overlayfs: failed to clone lowerpath [ 177.482497][ T8319] tipc: Enabling of bearer rejected, failed to enable media [ 177.673576][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.682204][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.244336][ T8356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3531'. [ 178.394147][ T8365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.402475][ T8365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 178.410643][ T8365] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 178.711548][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.720266][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.105948][ T8412] netlink: 'syz.0.3557': attribute type 4 has an invalid length. [ 179.160504][ T8422] overlayfs: failed to clone lowerpath [ 179.166699][ T8422] overlayfs: failed to clone lowerpath [ 179.193600][ T8430] netlink: 'syz.3.3566': attribute type 4 has an invalid length. [ 179.371863][ T36] audit: type=1326 audit(1777033642.636:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.3.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 180.105977][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.114964][ T36] audit: type=1326 audit(1777033643.376:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.0.3581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 180.138491][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.677502][ T36] audit: type=1400 audit(1777033643.936:8702): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.916252][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.925306][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.151141][ T305] tipc: Subscription rejected, illegal request [ 181.717540][ T8538] tipc: Cannot configure node identity twice [ 182.040404][ T8545] tipc: Enabling of bearer rejected, failed to enable media [ 185.819789][ T8683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.840060][ T8683] kvm: Disabled LAPIC found during irq injection [ 185.987512][ T8707] overlayfs: failed to clone upperpath [ 186.431225][ T8731] overlayfs: failed to clone upperpath [ 186.699683][ T36] audit: type=1400 audit(1777033649.956:8703): avc: denied { link } for pid=8743 comm="syz.2.3703" name="#2f" dev="tmpfs" ino=3436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 186.733930][ T36] audit: type=1400 audit(1777033649.956:8704): avc: denied { rename } for pid=8743 comm="syz.2.3703" name="#30" dev="tmpfs" ino=3436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 186.981196][ T8753] overlayfs: failed to clone upperpath [ 187.476688][ T8742] 9pnet_fd: p9_fd_create_tcp (8742): problem connecting socket to 127.0.0.1 [ 187.632833][ T8776] VFS: Mount too revealing [ 187.842964][ T8790] overlayfs: failed to clone upperpath [ 188.511724][ T8826] overlayfs: failed to clone upperpath [ 188.589116][ T36] audit: type=1326 audit(1777033651.846:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.0.3740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 189.345724][ T8850] overlayfs: failed to clone upperpath [ 189.453810][ T36] audit: type=1326 audit(1777033652.716:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.1.3758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 189.688703][ T8872] overlayfs: failed to clone upperpath [ 189.893147][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.901768][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.266841][ T36] audit: type=1400 audit(1777033653.526:8707): avc: denied { remount } for pid=8897 comm="syz.0.3774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.799778][ T8911] syzkaller0: entered allmulticast mode [ 190.844933][ T36] audit: type=1326 audit(1777033654.106:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8921 comm="syz.2.3785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 190.912532][ T8931] overlayfs: failed to clone upperpath [ 190.926606][ T8936] overlayfs: failed to resolve './file1/file0': -2 [ 191.207810][ T36] audit: type=1400 audit(1777033654.466:8709): avc: denied { listen } for pid=8960 comm="syz.1.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 191.228542][ T8961] netlink: 'syz.1.3804': attribute type 10 has an invalid length. [ 191.286207][ T36] audit: type=1326 audit(1777033654.546:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8964 comm="syz.1.3806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 191.367591][ T36] audit: type=1400 audit(1777033654.626:8711): avc: denied { map } for pid=8980 comm="syz.3.3814" path="socket:[41962]" dev="sockfs" ino=41962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.718608][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.727255][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.251219][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.259859][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.286244][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3829'. [ 192.295315][ T9018] bridge_slave_1: left allmulticast mode [ 192.301047][ T9018] bridge_slave_1: left promiscuous mode [ 192.306695][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.314324][ T9018] bridge_slave_0: left allmulticast mode [ 192.320380][ T9018] bridge_slave_0: left promiscuous mode [ 192.326419][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.465116][ T9036] overlayfs: failed to clone upperpath [ 192.779240][ T9045] FAULT_INJECTION: forcing a failure. [ 192.779240][ T9045] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 192.792758][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.2.3841 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 192.792792][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.792804][ T9045] Call Trace: [ 192.792811][ T9045] [ 192.792819][ T9045] __dump_stack+0x21/0x30 [ 192.792843][ T9045] dump_stack_lvl+0x140/0x1c0 [ 192.792858][ T9045] ? __cfi_dump_stack_lvl+0x10/0x10 [ 192.792873][ T9045] ? proc_tid_base_lookup+0x2f/0x40 [ 192.792888][ T9045] ? do_filp_open+0x1f5/0x440 [ 192.792901][ T9045] ? do_sys_openat2+0x134/0x1d0 [ 192.792914][ T9045] ? __x64_sys_openat+0x13a/0x170 [ 192.792927][ T9045] ? do_syscall_64+0x57/0xf0 [ 192.792940][ T9045] dump_stack+0x19/0x20 [ 192.792954][ T9045] should_fail_ex+0x3d7/0x530 [ 192.792969][ T9045] should_fail_alloc_page+0xec/0x110 [ 192.792985][ T9045] __alloc_pages_noprof+0x1c0/0x7e0 [ 192.792999][ T9045] ? __asan_memcpy+0x5a/0x80 [ 192.793014][ T9045] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 192.793028][ T9045] ? avc_has_perm_noaudit+0x28a/0x360 [ 192.793046][ T9045] ? __cfi_avc_has_perm+0x10/0x10 [ 192.793061][ T9045] ? kasan_save_alloc_info+0x40/0x50 [ 192.793076][ T9045] __pud_alloc+0xb0/0x8f0 [ 192.793087][ T9045] ? selinux_file_open+0x46c/0x630 [ 192.793102][ T9045] ? __cfi___pud_alloc+0x10/0x10 [ 192.793113][ T9045] ? __cfi_selinux_file_open+0x10/0x10 [ 192.793128][ T9045] handle_mm_fault+0x1906/0x1bf0 [ 192.793141][ T9045] ? __cfi_handle_mm_fault+0x10/0x10 [ 192.793152][ T9045] ? find_vma+0xd3/0x120 [ 192.793168][ T9045] ? lock_mm_and_find_vma+0xb8/0x390 [ 192.793180][ T9045] do_user_addr_fault+0x4c9/0x11e0 [ 192.793197][ T9045] exc_page_fault+0x58/0xc0 [ 192.793212][ T9045] asm_exc_page_fault+0x2b/0x30 [ 192.793233][ T9045] RIP: 0010:__put_user_4+0x11/0x30 [ 192.793248][ T9045] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 93 9a 02 00 90 90 90 90 90 90 90 90 90 90 [ 192.793259][ T9045] RSP: 0018:ffffc9000c257c30 EFLAGS: 00050202 [ 192.793272][ T9045] RAX: 000000000000c670 RBX: 0000000000000000 RCX: 0000200000000140 [ 192.793281][ T9045] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810e7aa97c [ 192.793290][ T9045] RBP: ffffc9000c257c60 R08: ffff88810e7aa97f R09: 1ffff11021cf552f [ 192.793299][ T9045] R10: dffffc0000000000 R11: ffffed1021cf5530 R12: ffff888118b7fc00 [ 192.793308][ T9045] R13: dffffc0000000000 R14: ffff88810e7aa97c R15: 000000000000c670 [ 192.793319][ T9045] ? bt_sock_ioctl+0x1a5/0x280 [ 192.793335][ T9045] rfcomm_sock_ioctl+0x51/0xa0 [ 192.793348][ T9045] sock_do_ioctl+0x118/0x330 [ 192.793363][ T9045] ? sock_show_fdinfo+0xd0/0xd0 [ 192.793376][ T9045] ? __cfi_vfs_write+0x10/0x10 [ 192.793391][ T9045] ? __kasan_check_write+0x18/0x20 [ 192.793406][ T9045] ? mutex_unlock+0x90/0x240 [ 192.793420][ T9045] sock_ioctl+0x5b5/0x7f0 [ 192.793433][ T9045] ? __cfi_sock_ioctl+0x10/0x10 [ 192.793446][ T9045] ? __fget_files+0x2c5/0x340 [ 192.793457][ T9045] ? bpf_lsm_file_ioctl+0xd/0x20 [ 192.793470][ T9045] ? security_file_ioctl+0x3e/0x110 [ 192.793484][ T9045] ? __cfi_sock_ioctl+0x10/0x10 [ 192.793496][ T9045] __se_sys_ioctl+0x135/0x1b0 [ 192.793508][ T9045] __x64_sys_ioctl+0x7f/0xa0 [ 192.793519][ T9045] x64_sys_call+0x1878/0x2ee0 [ 192.793535][ T9045] do_syscall_64+0x57/0xf0 [ 192.793546][ T9045] ? clear_bhb_loop+0x50/0xa0 [ 192.793559][ T9045] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.793572][ T9045] RIP: 0033:0x7fb211d9cdd9 [ 192.793583][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.793592][ T9045] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.793606][ T9045] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 192.793615][ T9045] RDX: 0000200000000140 RSI: 0000000000005411 RDI: 0000000000000004 [ 192.793624][ T9045] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 192.793632][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.793640][ T9045] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 192.793650][ T9045] [ 192.823338][ T9051] FAULT_INJECTION: forcing a failure. [ 192.823338][ T9051] name failslab, interval 1, probability 0, space 0, times 1 [ 193.158414][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3846'. [ 193.161003][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.2.3844 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 193.161033][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.161045][ T9051] Call Trace: [ 193.161052][ T9051] [ 193.161060][ T9051] __dump_stack+0x21/0x30 [ 193.161090][ T9051] dump_stack_lvl+0x140/0x1c0 [ 193.161113][ T9051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.161137][ T9051] ? release_sock+0x171/0x1f0 [ 193.161161][ T9051] dump_stack+0x19/0x20 [ 193.161183][ T9051] should_fail_ex+0x3d7/0x530 [ 193.161207][ T9051] should_failslab+0xac/0x100 [ 193.161225][ T9051] kmem_cache_alloc_node_noprof+0x45/0x420 [ 193.161249][ T9051] ? netlink_data_ready+0x20/0x20 [ 193.161274][ T9051] ? __alloc_skb+0x108/0x370 [ 193.161297][ T9051] __alloc_skb+0x108/0x370 [ 193.161320][ T9051] netlink_alloc_large_skb+0xf7/0x1b0 [ 193.161344][ T9051] netlink_sendmsg+0x594/0xb10 [ 193.161363][ T9051] ? __cfi_netlink_sendmsg+0x10/0x10 [ 193.161381][ T9051] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 193.161408][ T9051] ? security_socket_sendmsg+0x3d/0x100 [ 193.161429][ T9051] sock_write_iter+0x4d9/0x530 [ 193.161449][ T9051] ? __cfi_sock_write_iter+0x10/0x10 [ 193.161470][ T9051] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 193.161493][ T9051] vfs_write+0x764/0xf90 [ 193.161517][ T9051] ? __cfi_vfs_write+0x10/0x10 [ 193.161543][ T9051] ksys_write+0x145/0x260 [ 193.161565][ T9051] ? __cfi_ksys_write+0x10/0x10 [ 193.161590][ T9051] ? __kasan_check_read+0x15/0x20 [ 193.161614][ T9051] __x64_sys_write+0x7f/0x90 [ 193.161638][ T9051] x64_sys_call+0x271c/0x2ee0 [ 193.161662][ T9051] do_syscall_64+0x57/0xf0 [ 193.161682][ T9051] ? clear_bhb_loop+0x50/0xa0 [ 193.161702][ T9051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 193.161722][ T9051] RIP: 0033:0x7fb211d9cdd9 [ 193.161738][ T9051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.161753][ T9051] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.161775][ T9051] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 193.161790][ T9051] RDX: 00000000000000fc RSI: 0000200000000340 RDI: 0000000000000003 [ 193.161802][ T9051] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 193.161815][ T9051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.161827][ T9051] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 193.161843][ T9051] [ 193.492552][ T9063] netlink: 'syz.2.3848': attribute type 27 has an invalid length. [ 193.502337][ T36] audit: type=1400 audit(1777033656.766:8712): avc: denied { accept } for pid=9062 comm="syz.2.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.671498][ T36] audit: type=1400 audit(1777033656.936:8713): avc: denied { setopt } for pid=9090 comm="syz.2.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.691897][ T36] audit: type=1400 audit(1777033656.936:8714): avc: denied { setattr } for pid=9090 comm="syz.2.3861" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 193.719418][ T9097] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3864'. [ 193.731714][ T9095] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.3863'. [ 193.758715][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.768127][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.807485][ T9111] fuse: Unknown parameter 'func' [ 194.078834][ T36] audit: type=1326 audit(1777033657.336:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.3876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 194.288371][ T9124] FAULT_INJECTION: forcing a failure. [ 194.288371][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 194.301144][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz.2.3877 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 194.301180][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.301193][ T9124] Call Trace: [ 194.301200][ T9124] [ 194.301208][ T9124] __dump_stack+0x21/0x30 [ 194.301233][ T9124] dump_stack_lvl+0x140/0x1c0 [ 194.301248][ T9124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.301263][ T9124] dump_stack+0x19/0x20 [ 194.301277][ T9124] should_fail_ex+0x3d7/0x530 [ 194.301292][ T9124] should_failslab+0xac/0x100 [ 194.301304][ T9124] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 194.301321][ T9124] ? __kasan_check_write+0x18/0x20 [ 194.301337][ T9124] ? _raw_spin_lock+0x92/0x120 [ 194.301349][ T9124] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 194.301372][ T9124] ? __cfi__raw_spin_lock+0x10/0x10 [ 194.301384][ T9124] krealloc_noprof+0x8d/0x130 [ 194.301401][ T9124] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 194.301421][ T9124] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 194.301442][ T9124] ? avc_has_perm_noaudit+0x26c/0x360 [ 194.301460][ T9124] ? __asan_memcpy+0x5a/0x80 [ 194.301476][ T9124] ? __kasan_check_write+0x18/0x20 [ 194.301490][ T9124] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 194.301520][ T9124] ? is_bpf_text_address+0x17b/0x1a0 [ 194.301536][ T9124] ? kernel_text_address+0xa9/0xe0 [ 194.301550][ T9124] ? __kernel_text_address+0x11/0x40 [ 194.301563][ T9124] ? unwind_get_return_address+0x51/0x90 [ 194.301577][ T9124] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 194.301590][ T9124] ? arch_stack_walk+0x10a/0x170 [ 194.301607][ T9124] ? stack_trace_save+0xaa/0x100 [ 194.301619][ T9124] ? stack_depot_save_flags+0x38/0x800 [ 194.301635][ T9124] ? kasan_save_stack+0x4d/0x60 [ 194.301651][ T9124] ? kasan_save_stack+0x3e/0x60 [ 194.301667][ T9124] ? __kasan_record_aux_stack+0xb2/0xd0 [ 194.301681][ T9124] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 194.301697][ T9124] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 194.301713][ T9124] ? _raw_spin_trylock+0xb5/0x140 [ 194.301725][ T9124] ? __cfi__raw_spin_trylock+0x10/0x10 [ 194.301737][ T9124] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.301751][ T9124] ? _raw_spin_unlock+0x45/0x60 [ 194.301762][ T9124] ? call_rcu_nocb+0x6d7/0xc80 [ 194.301777][ T9124] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 194.301794][ T9124] ? swake_up_one_online_ipi+0x30/0x30 [ 194.301809][ T9124] ? __cfi_mt_free_rcu+0x10/0x10 [ 194.301822][ T9124] ? is_bpf_text_address+0x17b/0x1a0 [ 194.301837][ T9124] ? kernel_text_address+0xa9/0xe0 [ 194.301851][ T9124] ? __kernel_text_address+0x11/0x40 [ 194.301864][ T9124] ? unwind_get_return_address+0x51/0x90 [ 194.301879][ T9124] ? is_bpf_text_address+0x17b/0x1a0 [ 194.301899][ T9124] ? kernel_text_address+0xa9/0xe0 [ 194.301913][ T9124] ? __kernel_text_address+0x11/0x40 [ 194.301927][ T9124] ? unwind_get_return_address+0x51/0x90 [ 194.301940][ T9124] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 194.301952][ T9124] ? arch_stack_walk+0x10a/0x170 [ 194.301971][ T9124] ? is_bpf_text_address+0x17b/0x1a0 [ 194.301995][ T9124] ? kernel_text_address+0xa9/0xe0 [ 194.302018][ T9124] ? __kernel_text_address+0x11/0x40 [ 194.302039][ T9124] ? unwind_get_return_address+0x51/0x90 [ 194.302062][ T9124] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 194.302079][ T9124] ? arch_stack_walk+0x10a/0x170 [ 194.302097][ T9124] ? stack_depot_save_flags+0x38/0x800 [ 194.302112][ T9124] ? stack_trace_save+0xaa/0x100 [ 194.302124][ T9124] ? kasan_save_track+0x4f/0x80 [ 194.302148][ T9124] ? kasan_save_track+0x3e/0x80 [ 194.302163][ T9124] ? kasan_save_alloc_info+0x40/0x50 [ 194.302178][ T9124] ? __kasan_slab_alloc+0x73/0x90 [ 194.302189][ T9124] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 194.302204][ T9124] ? security_inode_alloc+0x51/0x230 [ 194.302215][ T9124] ? inode_init_always_gfp+0x756/0x9e0 [ 194.302226][ T9124] ? alloc_inode+0xc5/0x270 [ 194.302237][ T9124] ? new_inode+0x25/0x1e0 [ 194.302248][ T9124] ? proc_pid_make_inode+0x25/0x140 [ 194.302266][ T9124] ? proc_pident_instantiate+0x6d/0x2c0 [ 194.302277][ T9124] ? proc_pident_lookup+0x1c7/0x270 [ 194.302287][ T9124] ? proc_tid_base_lookup+0x2f/0x40 [ 194.302301][ T9124] ? path_openat+0x1312/0x34f0 [ 194.302313][ T9124] ? do_filp_open+0x1f5/0x440 [ 194.302325][ T9124] ? do_sys_openat2+0x134/0x1d0 [ 194.302338][ T9124] ? __x64_sys_openat+0x13a/0x170 [ 194.302351][ T9124] ? x64_sys_call+0xe69/0x2ee0 [ 194.302366][ T9124] ? do_syscall_64+0x57/0xf0 [ 194.302378][ T9124] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.302392][ T9124] ? avc_has_perm_noaudit+0x26c/0x360 [ 194.302409][ T9124] ? __asan_memcpy+0x5a/0x80 [ 194.302424][ T9124] ? avc_has_perm_noaudit+0x28a/0x360 [ 194.302441][ T9124] ? avc_has_perm+0x155/0x240 [ 194.302457][ T9124] ? __cfi_avc_has_perm+0x10/0x10 [ 194.302472][ T9124] ? kasan_save_alloc_info+0x40/0x50 [ 194.302488][ T9124] ? selinux_file_open+0x46c/0x630 [ 194.302504][ T9124] ? __cfi_selinux_file_open+0x10/0x10 [ 194.302520][ T9124] ? avc_has_extended_perms+0x80b/0xe70 [ 194.302536][ T9124] ? __asan_memcpy+0x5a/0x80 [ 194.302551][ T9124] ? avc_has_extended_perms+0x969/0xe70 [ 194.302568][ T9124] ? __asan_set_shadow_00+0x12/0x20 [ 194.302581][ T9124] ? do_vfs_ioctl+0x182d/0x2010 [ 194.302593][ T9124] ? arch_stack_walk+0x10a/0x170 [ 194.302609][ T9124] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 194.302622][ T9124] ? _parse_integer+0x2e/0x40 [ 194.302637][ T9124] ? ioctl_has_perm+0x39a/0x500 [ 194.302651][ T9124] ? has_cap_mac_admin+0xd0/0xd0 [ 194.302666][ T9124] ? proc_fail_nth_write+0x184/0x220 [ 194.302680][ T9124] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 194.302695][ T9124] ? selinux_file_ioctl+0x732/0x1480 [ 194.302709][ T9124] ? vfs_write+0x9a4/0xf90 [ 194.302724][ T9124] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 194.302739][ T9124] ? __cfi_vfs_write+0x10/0x10 [ 194.302753][ T9124] ? __kasan_check_write+0x18/0x20 [ 194.302769][ T9124] ? mutex_unlock+0x90/0x240 [ 194.302783][ T9124] ? __cfi_mutex_unlock+0x10/0x10 [ 194.302797][ T9124] ? __fget_files+0x2c5/0x340 [ 194.302809][ T9124] ? __fget_files+0x2c5/0x340 [ 194.302820][ T9124] ? bpf_lsm_file_ioctl+0xd/0x20 [ 194.302832][ T9124] ? security_file_ioctl+0x3e/0x110 [ 194.302846][ T9124] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 194.302862][ T9124] __se_sys_ioctl+0x135/0x1b0 [ 194.302874][ T9124] __x64_sys_ioctl+0x7f/0xa0 [ 194.302888][ T9124] x64_sys_call+0x1878/0x2ee0 [ 194.302904][ T9124] do_syscall_64+0x57/0xf0 [ 194.302916][ T9124] ? clear_bhb_loop+0x50/0xa0 [ 194.302929][ T9124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.302942][ T9124] RIP: 0033:0x7fb211d9cdd9 [ 194.302954][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.302965][ T9124] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.302981][ T9124] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 194.302990][ T9124] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 194.302999][ T9124] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 194.303007][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.303015][ T9124] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 194.303026][ T9124] [ 195.047328][ T9129] netlink: 'syz.3.3880': attribute type 27 has an invalid length. [ 195.098389][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 195.107246][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 195.121378][ T45] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 195.155902][ T36] audit: type=1400 audit(1777033658.416:8716): avc: denied { getopt } for pid=9140 comm="syz.2.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.193116][ T36] audit: type=1326 audit(1777033658.456:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.3888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 195.261509][ T36] audit: type=1400 audit(1777033658.526:8718): avc: denied { sqpoll } for pid=9170 comm="syz.1.3897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.379424][ T36] audit: type=1400 audit(1777033658.636:8719): avc: denied { create } for pid=9187 comm="syz.1.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 195.599975][ T307] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 195.859765][ T9] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 195.949708][ T9202] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3909'. [ 196.054415][ T9222] netlink: 'syz.1.3918': attribute type 7 has an invalid length. [ 196.062524][ T9222] netlink: 'syz.1.3918': attribute type 5 has an invalid length. [ 196.070534][ T9222] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3918'. [ 196.081726][ T9223] netlink: 'syz.1.3918': attribute type 7 has an invalid length. [ 196.089879][ T9223] netlink: 'syz.1.3918': attribute type 5 has an invalid length. [ 196.097674][ T9223] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3918'. [ 196.116325][ T9227] overlayfs: failed to resolve './file1/file0': -2 [ 196.166588][ T36] audit: type=1326 audit(1777033659.426:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.3924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 196.463739][ T9252] overlayfs: failed to resolve './file1/file0': -2 [ 196.490318][ T9258] tipc: Can't bind to reserved service type 2 [ 196.498014][ T36] audit: type=1400 audit(1777033659.756:8721): avc: denied { ioctl } for pid=9257 comm="syz.0.3932" path="socket:[43558]" dev="sockfs" ino=43558 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.537716][ T9262] netlink: 'syz.0.3934': attribute type 19 has an invalid length. [ 196.565153][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 197.252695][ T9352] FAULT_INJECTION: forcing a failure. [ 197.252695][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 197.266036][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.2.3971 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 197.266074][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.266087][ T9352] Call Trace: [ 197.266094][ T9352] [ 197.266102][ T9352] __dump_stack+0x21/0x30 [ 197.266133][ T9352] dump_stack_lvl+0x140/0x1c0 [ 197.266163][ T9352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.266178][ T9352] ? netdev_state_change+0xaa/0x240 [ 197.266191][ T9352] ? __cfi_netdev_state_change+0x10/0x10 [ 197.266203][ T9352] ? ip6_tnl_link_config+0x46b/0xa10 [ 197.266221][ T9352] dump_stack+0x19/0x20 [ 197.266234][ T9352] should_fail_ex+0x3d7/0x530 [ 197.266249][ T9352] should_fail+0xf/0x20 [ 197.266269][ T9352] should_fail_usercopy+0x1e/0x30 [ 197.266285][ T9352] _copy_to_user+0x24/0xa0 [ 197.266297][ T9352] ip6_tnl_siocdevprivate+0x3e8/0xe70 [ 197.266314][ T9352] ? __cfi_ip6_tnl_siocdevprivate+0x10/0x10 [ 197.266332][ T9352] ? proc_fail_nth_write+0x184/0x220 [ 197.266347][ T9352] ? full_name_hash+0xa1/0xf0 [ 197.266358][ T9352] dev_ifsioc+0x951/0xc10 [ 197.266375][ T9352] dev_ioctl+0xa62/0x1000 [ 197.266390][ T9352] sock_ioctl+0x75a/0x7f0 [ 197.266404][ T9352] ? __cfi_sock_ioctl+0x10/0x10 [ 197.266417][ T9352] ? bpf_lsm_file_ioctl+0xd/0x20 [ 197.266430][ T9352] ? security_file_ioctl+0x3e/0x110 [ 197.266445][ T9352] ? __cfi_sock_ioctl+0x10/0x10 [ 197.266457][ T9352] __se_sys_ioctl+0x135/0x1b0 [ 197.266468][ T9352] __x64_sys_ioctl+0x7f/0xa0 [ 197.266479][ T9352] x64_sys_call+0x1878/0x2ee0 [ 197.266495][ T9352] do_syscall_64+0x57/0xf0 [ 197.266508][ T9352] ? clear_bhb_loop+0x50/0xa0 [ 197.266522][ T9352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 197.266535][ T9352] RIP: 0033:0x7fb211d9cdd9 [ 197.266546][ T9352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.266557][ T9352] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.266572][ T9352] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 197.266582][ T9352] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 197.266591][ T9352] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 197.266599][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.266607][ T9352] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 197.266617][ T9352] [ 197.827975][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 197.837677][ T9379] veth1_macvtap: left promiscuous mode [ 198.543037][ T9436] FAULT_INJECTION: forcing a failure. [ 198.543037][ T9436] name failslab, interval 1, probability 0, space 0, times 0 [ 198.555803][ T9436] CPU: 1 UID: 0 PID: 9436 Comm: syz.2.4003 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 198.555855][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.555864][ T9436] Call Trace: [ 198.555868][ T9436] [ 198.555873][ T9436] __dump_stack+0x21/0x30 [ 198.555894][ T9436] dump_stack_lvl+0x140/0x1c0 [ 198.555910][ T9436] ? __cfi_dump_stack_lvl+0x10/0x10 [ 198.555928][ T9436] dump_stack+0x19/0x20 [ 198.555942][ T9436] should_fail_ex+0x3d7/0x530 [ 198.555957][ T9436] should_failslab+0xac/0x100 [ 198.555970][ T9436] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 198.555986][ T9436] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 198.556011][ T9436] ? _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x119/0x7d0 [ 198.556033][ T9436] krealloc_noprof+0x8d/0x130 [ 198.556049][ T9436] _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x119/0x7d0 [ 198.556067][ T9436] ? __cfi__RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x10/0x10 [ 198.556087][ T9436] ? kasan_save_alloc_info+0x40/0x50 [ 198.556102][ T9436] ? __kasan_kmalloc+0x96/0xb0 [ 198.556113][ T9436] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 198.556129][ T9436] ? __kasan_check_write+0x18/0x20 [ 198.556145][ T9436] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 198.556171][ T9436] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x590/0x1d80 [ 198.556192][ T9436] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 198.556212][ T9436] ? avc_has_perm_noaudit+0x26c/0x360 [ 198.556229][ T9436] ? __asan_memcpy+0x5a/0x80 [ 198.556244][ T9436] ? __kasan_check_write+0x18/0x20 [ 198.556259][ T9436] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 198.556288][ T9436] ? is_bpf_text_address+0x17b/0x1a0 [ 198.556303][ T9436] ? kernel_text_address+0xa9/0xe0 [ 198.556317][ T9436] ? __kernel_text_address+0x11/0x40 [ 198.556330][ T9436] ? unwind_get_return_address+0x51/0x90 [ 198.556344][ T9436] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 198.556357][ T9436] ? arch_stack_walk+0x10a/0x170 [ 198.556374][ T9436] ? stack_trace_save+0xaa/0x100 [ 198.556385][ T9436] ? stack_depot_save_flags+0x38/0x800 [ 198.556401][ T9436] ? kasan_save_stack+0x4d/0x60 [ 198.556417][ T9436] ? kasan_save_stack+0x3e/0x60 [ 198.556432][ T9436] ? __kasan_record_aux_stack+0xb2/0xd0 [ 198.556447][ T9436] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 198.556462][ T9436] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 198.556478][ T9436] ? _raw_spin_trylock+0xb5/0x140 [ 198.556490][ T9436] ? __cfi__raw_spin_trylock+0x10/0x10 [ 198.556502][ T9436] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 198.556516][ T9436] ? _raw_spin_unlock+0x45/0x60 [ 198.556528][ T9436] ? call_rcu_nocb+0x6d7/0xc80 [ 198.556542][ T9436] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 198.556558][ T9436] ? swake_up_one_online_ipi+0x30/0x30 [ 198.556574][ T9436] ? __cfi_mt_free_rcu+0x10/0x10 [ 198.556587][ T9436] ? is_bpf_text_address+0x17b/0x1a0 [ 198.556602][ T9436] ? kernel_text_address+0xa9/0xe0 [ 198.556616][ T9436] ? __kernel_text_address+0x11/0x40 [ 198.556629][ T9436] ? unwind_get_return_address+0x51/0x90 [ 198.556644][ T9436] ? is_bpf_text_address+0x17b/0x1a0 [ 198.556659][ T9436] ? kernel_text_address+0xa9/0xe0 [ 198.556672][ T9436] ? __kernel_text_address+0x11/0x40 [ 198.556685][ T9436] ? unwind_get_return_address+0x51/0x90 [ 198.556698][ T9436] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 198.556711][ T9436] ? arch_stack_walk+0x10a/0x170 [ 198.556729][ T9436] ? is_bpf_text_address+0x17b/0x1a0 [ 198.556744][ T9436] ? kernel_text_address+0xa9/0xe0 [ 198.556757][ T9436] ? __kernel_text_address+0x11/0x40 [ 198.556770][ T9436] ? unwind_get_return_address+0x51/0x90 [ 198.556783][ T9436] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 198.556795][ T9436] ? arch_stack_walk+0x10a/0x170 [ 198.556812][ T9436] ? stack_depot_save_flags+0x38/0x800 [ 198.556827][ T9436] ? stack_trace_save+0xaa/0x100 [ 198.556845][ T9436] ? kasan_save_track+0x4f/0x80 [ 198.556871][ T9436] ? kasan_save_track+0x3e/0x80 [ 198.556896][ T9436] ? kasan_save_alloc_info+0x40/0x50 [ 198.556917][ T9436] ? __kasan_slab_alloc+0x73/0x90 [ 198.556928][ T9436] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 198.556943][ T9436] ? security_inode_alloc+0x51/0x230 [ 198.556953][ T9436] ? inode_init_always_gfp+0x756/0x9e0 [ 198.556965][ T9436] ? alloc_inode+0xc5/0x270 [ 198.556976][ T9436] ? new_inode+0x25/0x1e0 [ 198.556987][ T9436] ? proc_pid_make_inode+0x25/0x140 [ 198.557004][ T9436] ? proc_pident_instantiate+0x6d/0x2c0 [ 198.557015][ T9436] ? proc_pident_lookup+0x1c7/0x270 [ 198.557026][ T9436] ? proc_tid_base_lookup+0x2f/0x40 [ 198.557040][ T9436] ? path_openat+0x1312/0x34f0 [ 198.557052][ T9436] ? do_filp_open+0x1f5/0x440 [ 198.557063][ T9436] ? do_sys_openat2+0x134/0x1d0 [ 198.557076][ T9436] ? __x64_sys_openat+0x13a/0x170 [ 198.557090][ T9436] ? x64_sys_call+0xe69/0x2ee0 [ 198.557105][ T9436] ? do_syscall_64+0x57/0xf0 [ 198.557117][ T9436] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 198.557131][ T9436] ? avc_has_perm_noaudit+0x26c/0x360 [ 198.557148][ T9436] ? __asan_memcpy+0x5a/0x80 [ 198.557170][ T9436] ? avc_has_perm_noaudit+0x28a/0x360 [ 198.557187][ T9436] ? avc_has_perm+0x155/0x240 [ 198.557203][ T9436] ? __cfi_avc_has_perm+0x10/0x10 [ 198.557219][ T9436] ? kasan_save_alloc_info+0x40/0x50 [ 198.557234][ T9436] ? selinux_file_open+0x46c/0x630 [ 198.557248][ T9436] ? __cfi_selinux_file_open+0x10/0x10 [ 198.557265][ T9436] ? avc_has_extended_perms+0x80b/0xe70 [ 198.557281][ T9436] ? __asan_memcpy+0x5a/0x80 [ 198.557296][ T9436] ? avc_has_extended_perms+0x969/0xe70 [ 198.557329][ T9436] ? __asan_set_shadow_00+0x12/0x20 [ 198.557343][ T9436] ? do_vfs_ioctl+0x182d/0x2010 [ 198.557354][ T9436] ? arch_stack_walk+0x10a/0x170 [ 198.557370][ T9436] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 198.557383][ T9436] ? _parse_integer+0x2e/0x40 [ 198.557397][ T9436] ? ioctl_has_perm+0x39a/0x500 [ 198.557413][ T9436] ? has_cap_mac_admin+0xd0/0xd0 [ 198.557427][ T9436] ? proc_fail_nth_write+0x184/0x220 [ 198.557441][ T9436] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 198.557454][ T9436] ? selinux_file_ioctl+0x732/0x1480 [ 198.557469][ T9436] ? vfs_write+0x9a4/0xf90 [ 198.557483][ T9436] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 198.557498][ T9436] ? __cfi_vfs_write+0x10/0x10 [ 198.557513][ T9436] ? __kasan_check_write+0x18/0x20 [ 198.557528][ T9436] ? mutex_unlock+0x90/0x240 [ 198.557542][ T9436] ? __cfi_mutex_unlock+0x10/0x10 [ 198.557556][ T9436] ? __fget_files+0x2c5/0x340 [ 198.557568][ T9436] ? __fget_files+0x2c5/0x340 [ 198.557578][ T9436] ? bpf_lsm_file_ioctl+0xd/0x20 [ 198.557591][ T9436] ? security_file_ioctl+0x3e/0x110 [ 198.557605][ T9436] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 198.557621][ T9436] __se_sys_ioctl+0x135/0x1b0 [ 198.557632][ T9436] __x64_sys_ioctl+0x7f/0xa0 [ 198.557643][ T9436] x64_sys_call+0x1878/0x2ee0 [ 198.557659][ T9436] do_syscall_64+0x57/0xf0 [ 198.557670][ T9436] ? clear_bhb_loop+0x50/0xa0 [ 198.557683][ T9436] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 198.557696][ T9436] RIP: 0033:0x7fb211d9cdd9 [ 198.557709][ T9436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.557719][ T9436] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.557733][ T9436] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 198.557743][ T9436] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 198.557751][ T9436] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 198.557759][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.557767][ T9436] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 198.557777][ T9436] [ 199.019721][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 199.210720][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 199.210738][ T36] audit: type=1326 audit(1777033662.476:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.1.4014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 199.395129][ T9468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=9468 comm=syz.3.4018 [ 200.139663][ T36] audit: type=1400 audit(1777033663.396:8727): avc: denied { create } for pid=9489 comm="syz.3.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.160316][ T36] audit: type=1400 audit(1777033663.406:8728): avc: denied { create } for pid=9489 comm="syz.3.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.203681][ T36] audit: type=1400 audit(1777033663.466:8729): avc: denied { create } for pid=9494 comm="syz.3.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 200.272290][ T36] audit: type=1326 audit(1777033663.536:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.3.4033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 200.394160][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.402776][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.074876][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.083497][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.084220][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.099817][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.099953][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.117141][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.126944][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.141603][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.154200][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.165210][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.166454][ T9534] netlink: 'syz.3.4042': attribute type 63 has an invalid length. [ 201.175229][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.182248][ T9534] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4042'. [ 201.190104][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.342758][ T36] audit: type=1326 audit(1777033664.606:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.4048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 201.692917][ T9555] netlink: 'syz.0.4052': attribute type 32 has an invalid length. [ 201.832884][ T9569] netlink: 'syz.0.4058': attribute type 19 has an invalid length. [ 202.440244][ T9588] netlink: 'syz.0.4067': attribute type 19 has an invalid length. [ 202.579977][ T36] audit: type=1326 audit(1777033665.836:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9599 comm="syz.2.4072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 203.537646][ T9645] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.4091'. [ 203.618713][ T9652] FAULT_INJECTION: forcing a failure. [ 203.618713][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.632022][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.2.4095 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 203.632055][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.632063][ T9652] Call Trace: [ 203.632069][ T9652] [ 203.632075][ T9652] __dump_stack+0x21/0x30 [ 203.632098][ T9652] dump_stack_lvl+0x140/0x1c0 [ 203.632113][ T9652] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.632129][ T9652] ? check_stack_object+0x106/0x150 [ 203.632146][ T9652] dump_stack+0x19/0x20 [ 203.632159][ T9652] should_fail_ex+0x3d7/0x530 [ 203.632175][ T9652] should_fail+0xf/0x20 [ 203.632189][ T9652] should_fail_usercopy+0x1e/0x30 [ 203.632203][ T9652] _copy_from_user+0x20/0xa0 [ 203.632214][ T9652] __sys_bind+0x1f4/0x430 [ 203.632229][ T9652] ? __cfi___sys_bind+0x10/0x10 [ 203.632245][ T9652] ? __kasan_check_read+0x15/0x20 [ 203.632261][ T9652] __x64_sys_bind+0x7e/0x90 [ 203.632276][ T9652] x64_sys_call+0x1ffd/0x2ee0 [ 203.632292][ T9652] do_syscall_64+0x57/0xf0 [ 203.632304][ T9652] ? clear_bhb_loop+0x50/0xa0 [ 203.632319][ T9652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.632332][ T9652] RIP: 0033:0x7fb211d9cdd9 [ 203.632344][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.632354][ T9652] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 203.632370][ T9652] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 203.632380][ T9652] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 203.632389][ T9652] RBP: 00007fb212cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 203.632396][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.632404][ T9652] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 203.632415][ T9652] [ 203.827384][ T36] audit: type=1326 audit(1777033667.086:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.2.4096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb211d9cdd9 code=0x0 [ 203.903268][ T9660] netlink: 'syz.0.4099': attribute type 22 has an invalid length. [ 203.999036][ T9677] : renamed from syztnl1 [ 204.521480][ T9701] netlink: 'syz.0.4116': attribute type 19 has an invalid length. [ 204.522134][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.542570][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.607595][ T36] audit: type=1326 audit(1777033667.866:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.4120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 204.655837][ T9717] cgroup: Bad value for 'name' [ 205.142444][ T9735] usb usb9: usbfs: process 9735 (syz.2.4130) did not claim interface 0 before use [ 205.153031][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.162279][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.383906][ T9742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9742 comm=syz.0.4133 [ 205.468629][ T9749] lo: entered promiscuous mode [ 205.474668][ T9749] overlayfs: conflicting options: userxattr,metacopy=on [ 205.521373][ T9748] lo: left promiscuous mode [ 205.572787][ T9767] tipc: Enabling of bearer rejected, failed to enable media [ 205.591472][ T36] audit: type=1326 audit(1777033668.856:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.0.4144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 205.966691][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.975492][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.050743][ T9795] netlink: 'syz.1.4155': attribute type 19 has an invalid length. [ 206.096880][ T9803] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 206.104738][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 206.130392][ T9807] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4161'. [ 206.299061][ T9813] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4164'. [ 206.391658][ T36] audit: type=1400 audit(1777033669.656:8736): avc: denied { ioctl } for pid=9824 comm="syz.3.4169" path="socket:[44962]" dev="sockfs" ino=44962 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.416592][ T36] audit: type=1400 audit(1777033669.656:8737): avc: denied { create } for pid=9824 comm="syz.3.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.500121][ T9833] overlayfs: failed to clone upperpath [ 206.539233][ T9841] overlayfs: failed to clone upperpath [ 206.563308][ T36] audit: type=1326 audit(1777033669.826:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz.0.4179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 206.680722][ T36] audit: type=1326 audit(1777033669.946:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.1.4181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b0679cdd9 code=0x0 [ 206.974551][ T9860] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 207.059740][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 207.503013][ T36] audit: type=1400 audit(1777033670.766:8740): avc: denied { accept } for pid=9870 comm="syz.3.4190" path="socket:[45013]" dev="sockfs" ino=45013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.509314][ T9871] fuse: Unknown parameter '0x0000000000000008' [ 207.582365][ T9876] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4192'. [ 207.617882][ T36] audit: type=1326 audit(1777033670.876:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.3.4195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 207.690058][ T9890] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4199'. [ 208.486235][ T9933] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4219'. [ 208.512270][ T36] audit: type=1326 audit(1777033671.776:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.3.4221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec419cdd9 code=0x0 [ 208.558599][ T9939] netlink: 'syz.0.4222': attribute type 23 has an invalid length. [ 208.566724][ T9939] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.620170][ T36] audit: type=1326 audit(1777033671.886:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.0.4225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 208.964414][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.973031][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.453473][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.480586][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.270282][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 211.270303][ T36] audit: type=1326 audit(1777033674.536:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.0.4255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6eb9cdd9 code=0x0 [ 211.770546][T10034] netlink: 'syz.3.4260': attribute type 1 has an invalid length. [ 212.097187][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.106315][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.651409][T10063] ------------[ cut here ]------------ [ 212.656944][T10063] WARNING: CPU: 1 PID: 10063 at security/landlock/fs.c:1025 collect_domain_accesses+0x327/0x390 [ 212.667466][T10063] Modules linked in: [ 212.671516][T10063] CPU: 1 UID: 0 PID: 10063 Comm: syz.2.4271 Not tainted syzkaller #0 8cfc209e52ea19d19d7bf60324c052393309520c [ 212.683297][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.693452][T10063] RIP: 0010:collect_domain_accesses+0x327/0x390 [ 212.699895][T10063] Code: 5f da 72 ff eb 08 e8 18 91 09 ff 41 b4 01 44 89 e0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f9 90 09 ff <0f> 0b 45 31 e4 eb cb e8 ed 90 09 ff 0f 0b eb d1 89 d9 80 e1 07 80 [ 212.719670][T10063] RSP: 0018:ffffc9000c647af0 EFLAGS: 00010287 [ 212.725779][T10063] RAX: ffffffff827e1e47 RBX: ffff888113a6e110 RCX: 0000000000080000 [ 212.733828][T10063] RDX: ffffc90001e53000 RSI: 0000000000000210 RDI: 0000000000000211 [ 212.741866][T10063] RBP: ffffc9000c647b30 R08: ffff88811dc12600 R09: 0000000000000002 [ 212.750159][T10063] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 212.758183][T10063] R13: 0000000000002004 R14: 1ffffffff0e41096 R15: dffffc0000000000 [ 212.766327][T10063] FS: 00007fb212cb16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 212.775436][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.782148][T10063] CR2: 0000000000008cff CR3: 000000011a944000 CR4: 00000000003526b0 [ 212.790357][T10063] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 212.798387][T10063] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 212.806430][T10063] Call Trace: [ 212.809767][T10063] [ 212.812724][T10063] current_check_refer_path+0x8ee/0xd40 [ 212.818307][T10063] ? hook_file_free_security+0xc0/0xc0 [ 212.823881][T10063] hook_path_rename+0x44/0x60 [ 212.828588][T10063] security_path_rename+0x1d8/0x2a0 [ 212.833859][T10063] do_renameat2+0x634/0xc40 [ 212.838408][T10063] ? __cfi_do_renameat2+0x10/0x10 [ 212.843525][T10063] ? strncpy_from_user+0x14d/0x270 [ 212.848673][T10063] ? __kasan_check_write+0x18/0x20 [ 212.853862][T10063] ? __kasan_check_write+0x18/0x20 [ 212.859045][T10063] __x64_sys_renameat2+0xdc/0x100 [ 212.864197][T10063] x64_sys_call+0x2e18/0x2ee0 [ 212.868917][T10063] do_syscall_64+0x57/0xf0 [ 212.873404][T10063] ? clear_bhb_loop+0x50/0xa0 [ 212.878209][T10063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.884265][T10063] RIP: 0033:0x7fb211d9cdd9 [ 212.888709][T10063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.908483][T10063] RSP: 002b:00007fb212cb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 212.916981][T10063] RAX: ffffffffffffffda RBX: 00007fb212015fa0 RCX: 00007fb211d9cdd9 [ 212.925033][T10063] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 212.933082][T10063] RBP: 00007fb211e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 212.941133][T10063] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 212.949139][T10063] R13: 00007fb212016038 R14: 00007fb212015fa0 R15: 00007ffe51ffbcf8 [ 212.957197][T10063] [ 212.960367][T10063] ---[ end trace 0000000000000000 ]--- [ 221.779745][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!