last executing test programs: 5.357583359s ago: executing program 2 (id=1475): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000580)={[{@none}, {@name={'name', 0x3d, 'blkio.bfq.io_service_bytes_recursive\x00'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'batadv_slave_0\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x1, 0xa5e0, 0xfffff03c, 0x8, 0x87, 0x7fffffff, 0x0, 0x0, 0x8, 0x2000000, 0x3d0, 0x3, 0x200, 0x2, 0x7fff, 0x6, 0x7ff, 0x0, 0x494d065, 0x5, 0x6, 0x1ff, 0x80000001, 0x6, 0x169d, 0x0, 0x6, 0x800, 0x5, 0x6, 0x7fff, 0x7, 0x7, 0x3, 0x1, 0x1, 0x8, 0xffff, 0xfffffff8, 0x959, 0xa, 0x5, 0x1ff, 0x1, 0x3, 0x514c, 0x1, 0x8, 0x1, 0x798, 0x7, 0x0, 0x2, 0x8, 0x1ba5, 0x6, 0x7, 0x4, 0x8000, 0x9570, 0x101, 0x101, 0x1a, 0xfffff001, 0xd, 0xf9, 0x7fff, 0x5, 0x8, 0x1, 0xd, 0x20ee, 0xfffffffd, 0x400, 0x636, 0x1, 0x9, 0x3, 0x4, 0x1, 0x5, 0xffffff81, 0x100, 0x7, 0xb, 0x4, 0x4, 0x78d9b214, 0x11d, 0x9, 0x6, 0x4, 0x0, 0x7, 0xf, 0x7, 0x9, 0x1, 0x8000, 0x1, 0x9, 0xab1, 0x0, 0x9, 0x1, 0x5, 0x2, 0x8, 0x2, 0xb, 0x4, 0x3, 0x3b7a, 0x8, 0x5, 0x3, 0x4, 0x63b, 0x5, 0x9, 0x7, 0x200, 0x1, 0xfffffff8, 0xfffff001, 0x5, 0x80], "b8665dda469f88ce058fa981039c8476a1b95dab4e42d123720e7690f9b774850a708b72ed6b7ad1301c56e0fc"}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x6, 0x7, 0xfffffff3}]}, 0x10) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}, 0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x0, 0x0) syz_io_uring_modify_offsets$flags(0x0, r9, 0x38, 0x1) 5.266521961s ago: executing program 2 (id=1476): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2, 0x4, 0xfffffffe) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010181}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x40816) mmap(&(0x7f0000336000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x66451000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) 5.266297251s ago: executing program 2 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200091, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 5.264455751s ago: executing program 2 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0xfc, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfe}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000004c00)=@vmx={0x109, 0x0, 0x2080, {0x4000, 0x1, {0x2}, 0x1}, {"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", "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"}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd700000dcdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40080c4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x802, 0x0) ioctl$TCSBRK(r9, 0x5409, 0x7f) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000002dc0)={0x1, [{0x3, 0x0, 0x5, 0x0}, {0x0, 0x8, 0x3, &(0x7f0000000080)="ca"}, {0x0, 0x0, 0xf, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x65, 0x0}, {0x5, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x7, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x48e27445, 0x0}, {0x2, 0x0, 0xf048, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x2, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x20080, 0x2, 0x3, 0x7f, 0x6, 0x4004d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x2dec, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x3, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x3, 0xd, 0x3e, 0x8f, 0x6, 0x10000002, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x4], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x11, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x1, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x8000, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x9, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0xb, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0xf641, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xe, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0x2, 0x5, 0x938, 0x6, 0x6, 0xfffffffe, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x10000, 0xfffff000, 0xffff, 0x8, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xb5, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x4, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x804) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5.181287633s ago: executing program 2 (id=1479): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000004c0)={0x6080, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x12) 4.94134379s ago: executing program 2 (id=1488): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 4.94112373s ago: executing program 32 (id=1488): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 2.254644871s ago: executing program 3 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000100001070000000000400000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.240433731s ago: executing program 3 (id=1537): flock(0xffffffffffffffff, 0x8) 2.214752561s ago: executing program 3 (id=1538): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2, 0x4, 0xfffffffe) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010181}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x40816) mmap(&(0x7f0000336000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x66451000) r4 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000340), 0x9) 2.161379143s ago: executing program 3 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x6, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r2, 0x2, r0, 0x8, 0x80000}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x6, 0xc5, 0x0, 0x4, 0x4, 0x4, 0x7b, 0x4, 0x2, 0xfc, 0x4, 0x0, 0x3, 0x439, 0x6, 0x9, 0x24, 0x8, '\x00', 0x7, 0x4}) 1.405395313s ago: executing program 0 (id=1549): socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x4, 0xfffffffe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010181}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x40816) r3 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) 1.405140773s ago: executing program 0 (id=1550): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r0, 0x101000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 1.404998913s ago: executing program 4 (id=1551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000004c0)="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", 0x831}], 0x2, &(0x7f0000001500)=[{0x40, 0x104, 0x3, "99b8a49e4455a57e8ce7d1689e7b81bd7cbfa37a6373c4de03f1ccc1fd2fb55c3b31e2ff7db4b78f8308be8ecb8af0"}], 0x40}}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000001540)="a8e869abe7975441651d1b9a97a30a670efcb4a8f264264612605d79f9ccdb38937540ef2adfcd1fb3f577e4c83c2a911db4afa3f4f6c4fc32f2af4dc2b6c39ff9c845c98b9c56ea09e2af647622fa49452ccf4ac8f5c89a07c993bc5493e023c7ba55", 0x63}, {&(0x7f00000015c0)="8d1353e90a2679e8eeb8c37e06560cc6cf7bfefc258c662e970709d7e9084cd58de852139cd9d7f8d8225849481665e4255eeec75cd72466965179d6d11f61e879c9d3cf8104d966ef416ea03a41bfc8591a02c02fd9db55f70793b92da60803a0b4d152aac553298d3c61cd586e808a89c68cf41142649b3f0f04ee475150c5e48eeafb5c09c54d0d5a4db6d17bd36153352cd5c40946faa069918a9ecc48f36f6aa8fe782baa0d741cd26a3e51b2c637299761b873fefdeec8b1451b874fa4d84cf2eed9fe5a401f0fd6510e1b1b9da35ae4de52c72210c01e2b6cc574d8c97ede50665e8592c3b6ac780576723447f7", 0xf1}, {&(0x7f00000016c0)="734aa58319b5a82070", 0x9}], 0x3}}], 0x2, 0x2) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.329193695s ago: executing program 3 (id=1552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) 1.297478626s ago: executing program 3 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000780)={[{@uuid_auto}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000300)=0x2a0) setxattr$trusted_overlay_origin(&(0x7f0000000240)='\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x2, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000540)={0x7, 0x0, 0xd64, 0x3, 0x4, 0x1, 0x3}, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_fuse_handle_req(r1, &(0x7f00000007c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3081caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fcd4d426233f537562a4a98b07f4b2060b4f496c67f0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f7687b00891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731bec68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8b9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c11b7ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x50906000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x100, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 1.263462647s ago: executing program 1 (id=1554): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000004c0)={0x6080, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x12) 1.246453597s ago: executing program 1 (id=1555): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r0, 0x101000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 1.245954797s ago: executing program 4 (id=1556): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200091, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 1.224437578s ago: executing program 4 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000100001070000000000400000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.214945448s ago: executing program 4 (id=1558): flock(0xffffffffffffffff, 0x8) 1.193280269s ago: executing program 4 (id=1559): socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x4, 0xfffffffe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010181}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x40816) r3 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) 1.192848949s ago: executing program 4 (id=1560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r0, 0x101000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 896.929346ms ago: executing program 0 (id=1561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x6, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r2, 0x2, r0, 0x8, 0x80000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000180)="e85648a160f39fcf778c7af2658b4b0c392218828147acad0319b9dcbe82b095953d3bb02f421ef077ce06bba28ad4f9028fbe5c0a4131bd87b282525d5998d0419f2d318f3c7d4dee3b8d805382bfbf574743060d7f6cf04895c4476c614b4709346b0f5ef2c419382be758160b3f5d14799885", 0x74, 0x80, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x6, 0xc5, 0x0, 0x4, 0x4, 0x4, 0x7b, 0x4, 0x2, 0xfc, 0x4, 0x0, 0x3, 0x439, 0x6, 0x9, 0x24, 0x8, '\x00', 0x7, 0x4}) 727.911701ms ago: executing program 1 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) 673.352842ms ago: executing program 1 (id=1563): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 91.406188ms ago: executing program 1 (id=1564): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000004c0)={0x6080, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x12) 78.465168ms ago: executing program 1 (id=1565): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="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", 0x831}], 0x2, &(0x7f0000001500)=[{0x40, 0x104, 0x3, "99b8a49e4455a57e8ce7d1689e7b81bd7cbfa37a6373c4de03f1ccc1fd2fb55c3b31e2ff7db4b78f8308be8ecb8af0"}], 0x40}}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000001540)="a8e869abe7975441651d1b9a97a30a670efcb4a8f264264612605d79f9ccdb38937540ef2adfcd1fb3f577e4c83c2a911db4afa3f4f6c4fc32f2af4dc2b6c39ff9c845c98b9c56ea09e2af647622fa49452ccf4ac8f5c89a07c993bc5493e023c7ba55", 0x63}, {&(0x7f00000015c0)="8d1353e90a2679e8eeb8c37e06560cc6cf7bfefc258c662e970709d7e9084cd58de852139cd9d7f8d8225849481665e4255eeec75cd72466965179d6d11f61e879c9d3cf8104d966ef416ea03a41bfc8591a02c02fd9db55f70793b92da60803a0b4d152aac553298d3c61cd586e808a89c68cf41142649b3f0f04ee475150c5e48eeafb5c09c54d0d5a4db6d17bd36153352cd5c40946faa069918a9ecc48f36f6aa8fe782baa0d741cd26a3e51b2c637299761b873fefdeec8b1451b874fa4d84cf2eed9fe5a401f0fd6510e1b1b9da35ae4de52c72210c01e2b6cc574d8c97ede50665e8592c3b6ac780576723447f7", 0xf1}, {&(0x7f00000016c0)="734aa58319b5a82070", 0x9}], 0x3}}], 0x2, 0x2) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 35.163519ms ago: executing program 0 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200091, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 34.877539ms ago: executing program 0 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a00000006000100"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 0s ago: executing program 0 (id=1568): socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x4, 0xfffffffe) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010181}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x40816) r3 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000340), 0x9) kernel console output (not intermixed with test programs): 64_sys_io_uring_setup+0x80/0x80 [ 89.448222][ T1974] ? __kasan_check_read+0x15/0x20 [ 89.448241][ T1974] __x64_sys_io_uring_setup+0x5f/0x80 [ 89.448263][ T1974] x64_sys_call+0x22c0/0x2ee0 [ 89.448276][ T1974] do_syscall_64+0x57/0xf0 [ 89.448288][ T1974] ? clear_bhb_loop+0x50/0xa0 [ 89.448303][ T1974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.448316][ T1974] RIP: 0033:0x7efcb739e0d9 [ 89.448326][ T1974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.448335][ T1974] RSP: 002b:00007efcb8204ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 89.448348][ T1974] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007efcb739e0d9 [ 89.448356][ T1974] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000a97 [ 89.448363][ T1974] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 89.448369][ T1974] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 89.448376][ T1974] R13: 0000200000000b10 R14: 00007efcb8204fd8 R15: 0000000000000000 [ 89.448385][ T1974] [ 89.890187][ T317] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 90.020153][ T317] usb 4-1: device descriptor read/64, error -71 [ 90.072918][ T36] audit: type=1400 audit(1786029963.509:341): avc: denied { lock } for pid=2009 comm="syz.1.623" path="socket:[21787]" dev="sockfs" ino=21787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 90.080659][ T543] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 90.250197][ T543] usb 1-1: device descriptor read/64, error -71 [ 90.270181][ T317] usb 4-1: device descriptor read/64, error -71 [ 90.490174][ T543] usb 1-1: device descriptor read/64, error -71 [ 90.520154][ T317] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 90.650184][ T317] usb 4-1: device descriptor read/64, error -71 [ 90.740201][ T543] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 90.870173][ T543] usb 1-1: device descriptor read/64, error -71 [ 90.890162][ T317] usb 4-1: device descriptor read/64, error -71 [ 91.000280][ T317] usb usb4-port1: attempt power cycle [ 91.109760][ T468] logitech-hidpp-device 0005:046D:B012.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 91.120514][ T543] usb 1-1: device descriptor read/64, error -71 [ 91.230264][ T543] usb usb1-port1: attempt power cycle [ 91.276747][ T2077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 91.340172][ T317] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 91.361268][ T317] usb 4-1: device descriptor read/8, error -71 [ 91.492067][ T317] usb 4-1: device descriptor read/8, error -71 [ 91.580182][ T543] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 91.601189][ T543] usb 1-1: device descriptor read/8, error -71 [ 91.655757][ T2085] overlayfs: failed to resolve './cgroup': -2 [ 91.731187][ T543] usb 1-1: device descriptor read/8, error -71 [ 91.740409][ T317] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 91.756235][ T2102] overlayfs: failed to resolve './cgroup': -2 [ 91.763424][ T317] usb 4-1: device descriptor read/8, error -71 [ 91.891182][ T317] usb 4-1: device descriptor read/8, error -71 [ 91.991544][ T543] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 92.001654][ T317] usb usb4-port1: unable to enumerate USB device [ 92.021132][ T543] usb 1-1: device descriptor read/8, error -71 [ 92.151593][ T543] usb 1-1: device descriptor read/8, error -71 [ 92.270312][ T543] usb usb1-port1: unable to enumerate USB device [ 92.633897][ T2175] fuse: Bad value for 'fd' [ 92.934740][ T36] audit: type=1400 audit(1786029966.369:342): avc: denied { read } for pid=2199 comm="syz.3.695" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.179437][ T36] audit: type=1326 audit(1786029966.609:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2216 comm="syz.3.702" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb739e0d9 code=0x0 [ 93.270166][ T468] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 93.400186][ T468] usb 1-1: device descriptor read/64, error -71 [ 93.640368][ T468] usb 1-1: device descriptor read/64, error -71 [ 93.880161][ T468] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 94.010161][ T468] usb 1-1: device descriptor read/64, error -71 [ 94.188962][ T2262] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 94.260154][ T468] usb 1-1: device descriptor read/64, error -71 [ 94.370248][ T468] usb usb1-port1: attempt power cycle [ 94.710154][ T468] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 94.731142][ T468] usb 1-1: device descriptor read/8, error -71 [ 94.867412][ T468] usb 1-1: device descriptor read/8, error -71 [ 94.880304][ T2285] overlayfs: failed to resolve './file0': -2 [ 94.926735][ T2295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.935328][ T2295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.110194][ T468] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 95.131208][ T468] usb 1-1: device descriptor read/8, error -71 [ 95.261131][ T468] usb 1-1: device descriptor read/8, error -71 [ 95.370282][ T468] usb usb1-port1: unable to enumerate USB device [ 95.644907][ T36] audit: type=1400 audit(1786029969.079:344): avc: denied { create } for pid=2296 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.907019][ T2307] overlayfs: failed to resolve './file0': -2 [ 95.933837][ T36] audit: type=1400 audit(1786029969.369:345): avc: denied { search } for pid=2310 comm="syz.0.734" name="/" dev="configfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.941008][ T2311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.734'. [ 95.955921][ T36] audit: type=1400 audit(1786029969.369:346): avc: denied { read } for pid=2310 comm="syz.0.734" name="/" dev="configfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.964832][ T2311] netlink: 19 bytes leftover after parsing attributes in process `syz.0.734'. [ 95.986795][ T36] audit: type=1400 audit(1786029969.369:347): avc: denied { open } for pid=2310 comm="syz.0.734" path="/" dev="configfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.995739][ T2311] netlink: 'syz.0.734': attribute type 6 has an invalid length. [ 96.017340][ T36] audit: type=1400 audit(1786029969.369:348): avc: denied { cmd } for pid=2310 comm="syz.0.734" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 96.025165][ T2311] netlink: 'syz.0.734': attribute type 5 has an invalid length. [ 96.048276][ T36] audit: type=1400 audit(1786029969.369:349): avc: denied { map } for pid=2310 comm="syz.0.734" path="/dev/ublkc0" dev="devtmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.055784][ T2311] netlink: 19 bytes leftover after parsing attributes in process `syz.0.734'. [ 96.103462][ T36] audit: type=1400 audit(1786029969.539:350): avc: denied { create } for pid=2313 comm="syz.0.735" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 96.147355][ T36] audit: type=1400 audit(1786029969.539:351): avc: denied { link } for pid=2313 comm="syz.0.735" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=23046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 96.316526][ T2323] netlink: 288 bytes leftover after parsing attributes in process `syz.3.739'. [ 96.350801][ T2331] overlayfs: failed to resolve './file0': -2 [ 96.500219][ T531] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 96.630147][ T531] usb 1-1: device descriptor read/64, error -71 [ 96.880158][ T531] usb 1-1: device descriptor read/64, error -71 [ 97.092360][ T36] audit: type=1400 audit(1786029970.529:352): avc: denied { nosuid_transition } for pid=2342 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 97.113180][ T36] audit: type=1400 audit(1786029970.529:353): avc: denied { transition } for pid=2342 comm="syz.2.747" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 97.143395][ T531] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 97.149935][ T2346] FAULT_INJECTION: forcing a failure. [ 97.149935][ T2346] name failslab, interval 1, probability 0, space 0, times 0 [ 97.163747][ T2346] CPU: 1 UID: 0 PID: 2346 Comm: syz.3.748 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 97.163779][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.163792][ T2346] Call Trace: [ 97.163798][ T2346] [ 97.163806][ T2346] __dump_stack+0x21/0x30 [ 97.163836][ T2346] dump_stack_lvl+0x140/0x1c0 [ 97.163856][ T2346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.163871][ T2346] dump_stack+0x19/0x20 [ 97.163883][ T2346] should_fail_ex+0x3c2/0x510 [ 97.163895][ T2346] should_failslab+0xac/0x100 [ 97.163908][ T2346] kmem_cache_alloc_noprof+0x42/0x410 [ 97.163919][ T2346] ? alloc_empty_file+0xbf/0x270 [ 97.163932][ T2346] ? _raw_spin_unlock+0x45/0x60 [ 97.163944][ T2346] alloc_empty_file+0xbf/0x270 [ 97.163956][ T2346] ? _raw_spin_unlock+0x45/0x60 [ 97.163967][ T2346] alloc_file_pseudo+0x142/0x1f0 [ 97.163980][ T2346] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 97.163993][ T2346] ? inode_init_always_gfp+0x76e/0x9e0 [ 97.164006][ T2346] ? __cfi_sock_alloc_inode+0x10/0x10 [ 97.164019][ T2346] sock_alloc_file+0xbe/0x2b0 [ 97.164032][ T2346] do_accept+0x3b5/0x6e0 [ 97.164046][ T2346] ? __cfi_do_accept+0x10/0x10 [ 97.164061][ T2346] __sys_accept4+0x130/0x1f0 [ 97.164075][ T2346] ? __cfi___sys_accept4+0x10/0x10 [ 97.164089][ T2346] __x64_sys_accept4+0x9e/0xb0 [ 97.164103][ T2346] x64_sys_call+0x2527/0x2ee0 [ 97.164112][ T2346] do_syscall_64+0x57/0xf0 [ 97.164124][ T2346] ? clear_bhb_loop+0x50/0xa0 [ 97.164138][ T2346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.164157][ T2346] RIP: 0033:0x7efcb739e0d9 [ 97.164168][ T2346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.164177][ T2346] RSP: 002b:00007efcb8205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 97.164189][ T2346] RAX: ffffffffffffffda RBX: 00007efcb7625fa0 RCX: 00007efcb739e0d9 [ 97.164197][ T2346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 97.164204][ T2346] RBP: 00007efcb8205090 R08: 0000000000000000 R09: 0000000000000000 [ 97.164210][ T2346] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 97.164217][ T2346] R13: 00007efcb7626038 R14: 00007efcb7625fa0 R15: 00007fff50425438 [ 97.164225][ T2346] [ 97.164373][ T2350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.349942][ T2355] netlink: 228 bytes leftover after parsing attributes in process `syz.1.750'. [ 97.407301][ T2344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.416208][ T531] usb 1-1: device descriptor read/64, error -71 [ 97.436382][ T2358] overlayfs: failed to resolve './cgroup': -2 [ 97.521030][ T2370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2370 comm=syz.1.757 [ 97.660924][ T531] usb 1-1: device descriptor read/64, error -71 [ 97.770249][ T531] usb usb1-port1: attempt power cycle [ 98.110201][ T531] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 98.131338][ T531] usb 1-1: device descriptor read/8, error -71 [ 98.212428][ T2376] overlayfs: failed to resolve './file0': -2 [ 98.261182][ T468] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 98.270540][ T531] usb 1-1: device descriptor read/8, error -71 [ 98.274315][ T2386] netlink: 'syz.2.765': attribute type 49 has an invalid length. [ 98.312129][ T2386] team_slave_1: entered promiscuous mode [ 98.317858][ T2386] team_slave_1: entered allmulticast mode [ 98.327281][ T2386] fuse: Bad value for 'rootmode' [ 98.420184][ T468] usb 4-1: Using ep0 maxpacket: 16 [ 98.426470][ T468] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.446784][ T468] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.461604][ T468] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.480127][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.488214][ T468] usb 4-1: Product: syz [ 98.498317][ T468] usb 4-1: Manufacturer: syz [ 98.503568][ T468] usb 4-1: SerialNumber: syz [ 98.510412][ T531] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 98.551136][ T531] usb 1-1: device descriptor read/8, error -71 [ 98.691165][ T531] usb 1-1: device descriptor read/8, error -71 [ 98.719325][ T468] usb 4-1: 0:2 : does not exist [ 98.732114][ T468] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 98.753543][ T468] usb 4-1: USB disconnect, device number 41 [ 98.800563][ T531] usb usb1-port1: unable to enumerate USB device [ 99.246366][ T2416] overlayfs: failed to resolve './file0': -2 [ 99.328838][ T2428] netlink: 'syz.1.776': attribute type 49 has an invalid length. [ 99.347920][ T2428] fuse: Bad value for 'rootmode' [ 99.933563][ T2455] fuse: Bad value for 'fd' [ 99.946646][ T2457] netlink: 'syz.1.787': attribute type 12 has an invalid length. [ 100.090681][ T2463] netlink: 'syz.3.790': attribute type 12 has an invalid length. [ 100.220935][ T2475] fuse: Bad value for 'fd' [ 100.237488][ T2477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 100.284012][ T2477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.292589][ T2477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.350253][ T468] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 100.482594][ T468] usb 4-1: device descriptor read/64, error -71 [ 100.491617][ T2481] netlink: 165 bytes leftover after parsing attributes in process `syz.1.799'. [ 100.501849][ T2481] x_tables: unsorted underflow at hook 4 [ 100.720201][ T468] usb 4-1: device descriptor read/64, error -71 [ 100.973411][ T468] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 101.084698][ T2495] fuse: Bad value for 'fd' [ 101.110138][ T468] usb 4-1: device descriptor read/64, error -71 [ 101.116901][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 101.116917][ T36] audit: type=1400 audit(1786029974.549:378): avc: denied { associate } for pid=2498 comm="syz.1.807" name="#19" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 101.144266][ T2499] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.151497][ T2499] overlayfs: failed to set xattr on upper [ 101.157418][ T2499] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.164623][ T2499] overlayfs: ...falling back to uuid=null. [ 101.362843][ T468] usb 4-1: device descriptor read/64, error -71 [ 101.480238][ T468] usb usb4-port1: attempt power cycle [ 101.524517][ T36] audit: type=1400 audit(1786029974.959:379): avc: denied { sqpoll } for pid=2501 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.821027][ T468] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 101.861134][ T468] usb 4-1: device descriptor read/8, error -71 [ 101.991580][ T468] usb 4-1: device descriptor read/8, error -71 [ 102.175054][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.193676][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.240148][ T468] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 102.271226][ T468] usb 4-1: device descriptor read/8, error -71 [ 102.406844][ T468] usb 4-1: device descriptor read/8, error -71 [ 102.421982][ T36] audit: type=1400 audit(1786029975.859:380): avc: denied { cmd } for pid=2528 comm="iou-wrk-2529" path="socket:[44087]" dev="sockfs" ino=44087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.531315][ T468] usb usb4-port1: unable to enumerate USB device [ 102.761014][ T36] audit: type=1400 audit(1786029976.199:381): avc: denied { create } for pid=2555 comm="syz.2.826" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.110161][ T468] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 103.175133][ T2570] can0: slcan on ptm0. [ 103.189108][ T36] audit: type=1326 audit(1786029976.619:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2569 comm="syz.3.831" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb739e0d9 code=0x0 [ 103.280169][ T468] usb 1-1: Using ep0 maxpacket: 8 [ 103.286668][ T468] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.293784][ T2578] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.296607][ T468] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 103.317734][ T468] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 103.335053][ T468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.352452][ T468] usb 1-1: Product: syz [ 103.356665][ T468] usb 1-1: Manufacturer: syz [ 103.363962][ T468] usb 1-1: SerialNumber: syz [ 103.651363][ T2609] netlink: 228 bytes leftover after parsing attributes in process `syz.2.832'. [ 104.004087][ T2621] capability: warning: `syz.2.840' uses deprecated v2 capabilities in a way that may be insecure [ 104.031135][ T2569] can0 (unregistered): slcan off ptm0. [ 104.156338][ T2640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.174685][ T2640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.230873][ T36] audit: type=1400 audit(1786029977.659:383): avc: denied { append } for pid=2657 comm="syz.3.848" name="001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.254325][ T2658] random: crng reseeded on system resumption [ 104.275725][ T36] audit: type=1400 audit(1786029977.689:384): avc: denied { write } for pid=2657 comm="syz.3.848" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.299257][ T36] audit: type=1400 audit(1786029977.689:385): avc: denied { open } for pid=2657 comm="syz.3.848" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.590172][ T65] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 104.713307][ T36] audit: type=1400 audit(1786029978.149:386): avc: denied { write } for pid=2669 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.732744][ T65] usb 4-1: device descriptor read/64, error -71 [ 104.743957][ T36] audit: type=1400 audit(1786029978.179:387): avc: denied { read } for pid=2669 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.809983][ T2676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.818912][ T2676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.970147][ T65] usb 4-1: device descriptor read/64, error -71 [ 105.210140][ T65] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 105.318111][ T2685] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 105.327204][ T2685] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 105.341955][ T65] usb 4-1: device descriptor read/64, error -71 [ 105.420387][ T2706] FAULT_INJECTION: forcing a failure. [ 105.420387][ T2706] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 105.438196][ T2706] CPU: 1 UID: 0 PID: 2706 Comm: syz.0.858 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 105.438231][ T2706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.438244][ T2706] Call Trace: [ 105.438250][ T2706] [ 105.438259][ T2706] __dump_stack+0x21/0x30 [ 105.438290][ T2706] dump_stack_lvl+0x140/0x1c0 [ 105.438314][ T2706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.438339][ T2706] ? stack_trace_save+0xaa/0x100 [ 105.438362][ T2706] ? stack_depot_save_flags+0x38/0x800 [ 105.438385][ T2706] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 105.438408][ T2706] dump_stack+0x19/0x20 [ 105.438431][ T2706] should_fail_ex+0x3c2/0x510 [ 105.438453][ T2706] should_fail_alloc_page+0xec/0x110 [ 105.438477][ T2706] __alloc_pages_noprof+0x1c0/0x7e0 [ 105.438504][ T2706] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 105.438536][ T2706] ? io_alloc_hash_table+0x52/0x160 [ 105.438563][ T2706] ___kmalloc_large_node+0x81/0x220 [ 105.438584][ T2706] ? io_alloc_hash_table+0x52/0x160 [ 105.438610][ T2706] __kmalloc_large_node_noprof+0x1e/0xd0 [ 105.438631][ T2706] ? io_alloc_hash_table+0x52/0x160 [ 105.438657][ T2706] __kmalloc_noprof+0x326/0x510 [ 105.438676][ T2706] ? __kasan_kmalloc+0x96/0xb0 [ 105.438705][ T2706] io_alloc_hash_table+0x52/0x160 [ 105.438732][ T2706] io_ring_ctx_alloc+0xd1/0x1dc0 [ 105.438753][ T2706] ? __cfi_vfs_write+0x10/0x10 [ 105.438773][ T2706] io_uring_create+0x2e0/0x13f0 [ 105.438792][ T2706] ? __kasan_check_write+0x18/0x20 [ 105.438811][ T2706] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 105.438837][ T2706] ? __kasan_check_write+0x18/0x20 [ 105.438856][ T2706] ? __x64_sys_io_uring_setup+0x80/0x80 [ 105.438883][ T2706] ? __kasan_check_read+0x15/0x20 [ 105.438902][ T2706] __x64_sys_io_uring_setup+0x5f/0x80 [ 105.438927][ T2706] x64_sys_call+0x22c0/0x2ee0 [ 105.438944][ T2706] do_syscall_64+0x57/0xf0 [ 105.438963][ T2706] ? clear_bhb_loop+0x50/0xa0 [ 105.438988][ T2706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.439011][ T2706] RIP: 0033:0x7fd76799e0d9 [ 105.439027][ T2706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.439043][ T2706] RSP: 002b:00007fd7687b1ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 105.439064][ T2706] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fd76799e0d9 [ 105.439079][ T2706] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000a97 [ 105.439093][ T2706] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 105.439106][ T2706] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 105.439119][ T2706] R13: 0000200000000b10 R14: 00007fd7687b1fd8 R15: 0000000000000000 [ 105.439135][ T2706] [ 105.650143][ T65] usb 4-1: device descriptor read/64, error -71 [ 105.700602][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.721148][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.820937][ T65] usb usb4-port1: attempt power cycle [ 106.160165][ T65] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 106.181024][ T65] usb 4-1: device descriptor read/8, error -71 [ 106.312058][ T65] usb 4-1: device descriptor read/8, error -71 [ 106.321816][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 106.321834][ T36] audit: type=1326 audit(1786029979.749:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2724 comm="syz.1.867" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x0 [ 106.373281][ T2736] netlink: 228 bytes leftover after parsing attributes in process `syz.0.868'. [ 106.461887][ T36] audit: type=1400 audit(1786029979.899:390): avc: denied { setattr } for pid=2742 comm="syz.0.871" name="uprobe_events" dev="tracefs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.570153][ T65] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 106.591099][ T65] usb 4-1: device descriptor read/8, error -71 [ 106.721198][ T65] usb 4-1: device descriptor read/8, error -71 [ 106.830255][ T65] usb usb4-port1: unable to enumerate USB device [ 107.169956][ T2750] FAULT_INJECTION: forcing a failure. [ 107.169956][ T2750] name failslab, interval 1, probability 0, space 0, times 0 [ 107.183007][ T2750] CPU: 0 UID: 0 PID: 2750 Comm: syz.2.874 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 107.183032][ T2750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.183046][ T2750] Call Trace: [ 107.183051][ T2750] [ 107.183056][ T2750] __dump_stack+0x21/0x30 [ 107.183075][ T2750] dump_stack_lvl+0x140/0x1c0 [ 107.183092][ T2750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.183111][ T2750] dump_stack+0x19/0x20 [ 107.183124][ T2750] should_fail_ex+0x3c2/0x510 [ 107.183136][ T2750] should_failslab+0xac/0x100 [ 107.183150][ T2750] __kmalloc_node_noprof+0x69/0x500 [ 107.183161][ T2750] ? __kvmalloc_node_noprof+0x128/0x300 [ 107.183177][ T2750] __kvmalloc_node_noprof+0x128/0x300 [ 107.183193][ T2750] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 107.183208][ T2750] ? percpu_ref_init+0x230/0x4d0 [ 107.183219][ T2750] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 107.183230][ T2750] io_ring_ctx_alloc+0x428/0x1dc0 [ 107.183241][ T2750] io_uring_create+0x2e0/0x13f0 [ 107.183251][ T2750] ? __kasan_check_write+0x18/0x20 [ 107.183261][ T2750] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 107.183275][ T2750] ? __kasan_check_write+0x18/0x20 [ 107.183285][ T2750] ? __x64_sys_io_uring_setup+0x80/0x80 [ 107.183299][ T2750] ? __kasan_check_read+0x15/0x20 [ 107.183308][ T2750] __x64_sys_io_uring_setup+0x5f/0x80 [ 107.183322][ T2750] x64_sys_call+0x22c0/0x2ee0 [ 107.183331][ T2750] do_syscall_64+0x57/0xf0 [ 107.183343][ T2750] ? clear_bhb_loop+0x50/0xa0 [ 107.183357][ T2750] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.183370][ T2750] RIP: 0033:0x7f24df99e0d9 [ 107.183380][ T2750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.183389][ T2750] RSP: 002b:00007f24e0839ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 107.183402][ T2750] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f24df99e0d9 [ 107.183410][ T2750] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000a97 [ 107.183417][ T2750] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 107.183424][ T2750] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 107.183431][ T2750] R13: 0000200000000b10 R14: 00007f24e0839fd8 R15: 0000000000000000 [ 107.183439][ T2750] [ 107.361066][ T2766] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 107.422975][ T798] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.286138][ T2797] mmap: syz.1.888 (2797) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.381385][ T468] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 108.391157][ T468] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -32 [ 108.400886][ T468] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -32 [ 108.933456][ T36] audit: type=1400 audit(1786029982.369:391): avc: denied { create } for pid=2829 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 109.193978][ T36] audit: type=1400 audit(1786029982.629:392): avc: denied { map } for pid=2839 comm="syz.3.900" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 109.420130][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.575213][ T2863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.585847][ T2863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.999690][ T2881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.158951][ T2903] syz.3.921 uses obsolete (PF_INET,SOCK_PACKET) [ 110.289274][ T36] audit: type=1400 audit(1786029983.719:393): avc: denied { read } for pid=2927 comm="syz.2.933" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.361252][ T2932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.369759][ T2932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.829395][ T36] audit: type=1400 audit(1786029984.259:394): avc: denied { ioctl } for pid=2936 comm="syz.1.936" path="socket:[46251]" dev="sockfs" ino=46251 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.944760][ T2944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.963826][ T2944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.261195][ T510] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 111.314588][ T2958] netlink: 228 bytes leftover after parsing attributes in process `syz.0.946'. [ 111.348215][ T2960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.357882][ T2960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.371619][ T2960] IPv6: Can't replace route, no match found [ 111.431282][ T510] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.441590][ T510] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 111.452862][ T510] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.464181][ T510] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 111.473517][ T510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.481693][ T510] usb 4-1: Product: syz [ 111.486047][ T510] usb 4-1: Manufacturer: syz [ 111.490886][ T510] usb 4-1: SerialNumber: syz [ 111.501520][ T36] audit: type=1400 audit(1786029984.939:395): avc: denied { unmount } for pid=539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.623565][ T2967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.632836][ T2967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.704229][ T510] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 111.714556][ T510] usb 4-1: USB disconnect, device number 50 [ 112.278403][ T3025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 112.569722][ T36] audit: type=1400 audit(1786029985.999:396): avc: denied { accept } for pid=3062 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.922401][ T3078] netlink: 228 bytes leftover after parsing attributes in process `syz.0.990'. [ 112.934645][ T36] audit: type=1400 audit(1786029986.359:397): avc: denied { create } for pid=3079 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.960163][ T3084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.982781][ T3084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.002813][ T3084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.012491][ T3084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.035756][ T36] audit: type=1400 audit(1786029986.469:398): avc: denied { write } for pid=3092 comm="syz.3.995" name="psched" dev="proc" ino=4026532478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 113.129671][ T3096] netlink: 228 bytes leftover after parsing attributes in process `syz.3.996'. [ 113.380181][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 113.510168][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.542285][ T3125] bridge: RTM_NEWNEIGH with invalid ether address [ 113.750136][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.758186][ T3145] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1008'. [ 113.778163][ T3147] netlink: 'syz.1.1009': attribute type 12 has an invalid length. [ 114.000158][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 114.150157][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.390159][ T10] usb 4-1: device descriptor read/64, error -71 [ 114.500309][ T10] usb usb4-port1: attempt power cycle [ 114.840151][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 114.861147][ T10] usb 4-1: device descriptor read/8, error -71 [ 114.991153][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.230164][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 115.251303][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.381129][ T10] usb 4-1: device descriptor read/8, error -71 [ 115.467215][ T36] audit: type=1400 audit(1786029988.899:399): avc: denied { mount } for pid=3182 comm="syz.0.1024" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.489205][ T36] audit: type=1400 audit(1786029988.909:400): avc: denied { remount } for pid=3182 comm="syz.0.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.495898][ T10] usb usb4-port1: unable to enumerate USB device [ 115.527684][ T36] audit: type=1400 audit(1786029988.959:401): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.683888][ T36] audit: type=1326 audit(1786029989.119:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3200 comm="syz.1.1032" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x0 [ 115.836285][ T36] audit: type=1400 audit(1786029989.269:403): avc: denied { remount } for pid=3200 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 116.136502][ T3212] overlay: ./file0 is not a directory [ 116.202094][ T3217] FAULT_INJECTION: forcing a failure. [ 116.202094][ T3217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.216879][ T3217] CPU: 1 UID: 0 PID: 3217 Comm: syz.0.1036 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 116.216900][ T3217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.216907][ T3217] Call Trace: [ 116.216911][ T3217] [ 116.216915][ T3217] __dump_stack+0x21/0x30 [ 116.216934][ T3217] dump_stack_lvl+0x140/0x1c0 [ 116.216948][ T3217] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.216962][ T3217] ? check_stack_object+0x81/0x150 [ 116.216973][ T3217] ? __virt_addr_valid+0x2a1/0x370 [ 116.216985][ T3217] dump_stack+0x19/0x20 [ 116.216998][ T3217] should_fail_ex+0x3c2/0x510 [ 116.217010][ T3217] should_fail+0xf/0x20 [ 116.217020][ T3217] should_fail_usercopy+0x1e/0x30 [ 116.217032][ T3217] _copy_from_user+0x20/0xa0 [ 116.217045][ T3217] memdup_user+0x81/0x170 [ 116.217054][ T3217] ? kvm_arch_vcpu_ioctl+0x2e02/0x3120 [ 116.217065][ T3217] kvm_arch_vcpu_ioctl+0xd85/0x3120 [ 116.217075][ T3217] ? avc_has_perm+0x155/0x240 [ 116.217087][ T3217] ? __cfi_avc_has_perm+0x10/0x10 [ 116.217102][ T3217] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 116.217113][ T3217] ? selinux_file_open+0x46c/0x630 [ 116.217123][ T3217] ? __cfi_selinux_file_open+0x10/0x10 [ 116.217135][ T3217] ? is_bpf_text_address+0x17b/0x1a0 [ 116.217151][ T3217] ? kernel_text_address+0xa9/0xe0 [ 116.217164][ T3217] ? __kernel_text_address+0x11/0x40 [ 116.217178][ T3217] ? __asan_set_shadow_00+0x12/0x20 [ 116.217193][ T3217] ? do_vfs_ioctl+0x182d/0x2010 [ 116.217205][ T3217] ? arch_stack_walk+0x10a/0x170 [ 116.217215][ T3217] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 116.217228][ T3217] ? _parse_integer_limit+0x195/0x1e0 [ 116.217239][ T3217] ? _parse_integer+0x2e/0x40 [ 116.217250][ T3217] ? kstrtoull+0x13b/0x1e0 [ 116.217259][ T3217] ? kstrtouint+0x78/0xf0 [ 116.217270][ T3217] ? ioctl_has_perm+0x1bc/0x500 [ 116.217280][ T3217] ? __asan_memcpy+0x5a/0x80 [ 116.217291][ T3217] ? ioctl_has_perm+0x408/0x500 [ 116.217301][ T3217] ? has_cap_mac_admin+0xd0/0xd0 [ 116.217310][ T3217] ? __kasan_check_write+0x18/0x20 [ 116.217322][ T3217] ? mutex_lock_killable+0x97/0x1d0 [ 116.217337][ T3217] ? __cfi_mutex_lock_killable+0x10/0x10 [ 116.217351][ T3217] ? proc_fail_nth_write+0x184/0x220 [ 116.217365][ T3217] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 116.217379][ T3217] kvm_vcpu_ioctl+0x7da/0x1000 [ 116.217390][ T3217] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 116.217399][ T3217] ? __cfi_vfs_write+0x10/0x10 [ 116.217409][ T3217] ? __kasan_check_write+0x18/0x20 [ 116.217420][ T3217] ? mutex_unlock+0x90/0x240 [ 116.217433][ T3217] ? __cfi_mutex_unlock+0x10/0x10 [ 116.217447][ T3217] ? bpf_lsm_file_ioctl+0xd/0x20 [ 116.217460][ T3217] ? security_file_ioctl+0x3e/0x110 [ 116.217475][ T3217] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 116.217484][ T3217] __se_sys_ioctl+0x135/0x1b0 [ 116.217496][ T3217] __x64_sys_ioctl+0x7f/0xa0 [ 116.217508][ T3217] x64_sys_call+0x1878/0x2ee0 [ 116.217517][ T3217] do_syscall_64+0x57/0xf0 [ 116.217530][ T3217] ? clear_bhb_loop+0x50/0xa0 [ 116.217544][ T3217] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.217557][ T3217] RIP: 0033:0x7fd76799e0d9 [ 116.217567][ T3217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.217575][ T3217] RSP: 002b:00007fd76882e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.217595][ T3217] RAX: ffffffffffffffda RBX: 00007fd767c25fa0 RCX: 00007fd76799e0d9 [ 116.217603][ T3217] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 116.217610][ T3217] RBP: 00007fd76882e090 R08: 0000000000000000 R09: 0000000000000000 [ 116.217616][ T3217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.217623][ T3217] R13: 00007fd767c26038 R14: 00007fd767c25fa0 R15: 00007fff2a84c808 [ 116.217632][ T3217] [ 116.596115][ T3221] syzkaller1: entered promiscuous mode [ 116.601674][ T3221] syzkaller1: entered allmulticast mode [ 116.757326][ T3240] FAULT_INJECTION: forcing a failure. [ 116.757326][ T3240] name failslab, interval 1, probability 0, space 0, times 0 [ 116.770295][ T3240] CPU: 0 UID: 0 PID: 3240 Comm: syz.3.1043 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 116.770325][ T3240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.770336][ T3240] Call Trace: [ 116.770342][ T3240] [ 116.770350][ T3240] __dump_stack+0x21/0x30 [ 116.770380][ T3240] dump_stack_lvl+0x140/0x1c0 [ 116.770404][ T3240] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.770429][ T3240] ? is_bpf_text_address+0x17b/0x1a0 [ 116.770453][ T3240] ? kernel_text_address+0xa9/0xe0 [ 116.770467][ T3240] dump_stack+0x19/0x20 [ 116.770480][ T3240] should_fail_ex+0x3c2/0x510 [ 116.770491][ T3240] should_failslab+0xac/0x100 [ 116.770504][ T3240] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 116.770515][ T3240] ? __d_alloc+0x42/0x8c0 [ 116.770525][ T3240] __d_alloc+0x42/0x8c0 [ 116.770534][ T3240] d_alloc_parallel+0xe4/0x1370 [ 116.770545][ T3240] ? avc_has_perm_noaudit+0x26b/0x360 [ 116.770557][ T3240] ? __asan_memcpy+0x5a/0x80 [ 116.770567][ T3240] ? selinux_inode_permission+0x3f2/0x5d0 [ 116.770582][ T3240] ? __cfi_d_alloc_parallel+0x10/0x10 [ 116.770595][ T3240] ? __kasan_check_write+0x18/0x20 [ 116.770604][ T3240] ? rwsem_read_trylock+0x275/0x5a0 [ 116.770620][ T3240] ? make_vfsuid+0x4d/0xa0 [ 116.770630][ T3240] ? downgrade_write+0x470/0x470 [ 116.770644][ T3240] ? generic_permission+0x1ec/0x590 [ 116.770655][ T3240] __lookup_slow+0x150/0x420 [ 116.770667][ T3240] ? __d_lookup+0x4e8/0x550 [ 116.770678][ T3240] ? lookup_one_len+0x300/0x300 [ 116.770689][ T3240] ? down_read+0x7f/0xe0 [ 116.770704][ T3240] ? lookup_one_common+0x320/0x470 [ 116.770716][ T3240] lookup_one_unlocked+0x188/0x2d0 [ 116.770728][ T3240] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 116.770741][ T3240] ovl_lookup_single+0x1de/0xb20 [ 116.770756][ T3240] ? ovl_lookup_data_layers+0x440/0x440 [ 116.770769][ T3240] ? kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 116.770779][ T3240] ? lookup_one_qstr_excl+0xcf/0x280 [ 116.770790][ T3240] ? do_renameat2+0x3e0/0xc30 [ 116.770799][ T3240] ? x64_sys_call+0x2e18/0x2ee0 [ 116.770809][ T3240] ? do_syscall_64+0x57/0xf0 [ 116.770820][ T3240] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.770837][ T3240] ovl_lookup_layer+0x355/0x420 [ 116.770861][ T3240] ovl_lookup+0x3fa/0x1d20 [ 116.770886][ T3240] ? __cfi_ovl_lookup+0x10/0x10 [ 116.770908][ T3240] ? __kasan_check_write+0x18/0x20 [ 116.770926][ T3240] ? _raw_spin_lock+0x92/0x120 [ 116.770940][ T3240] ? __cfi__raw_spin_lock+0x10/0x10 [ 116.770951][ T3240] ? d_alloc+0x174/0x1c0 [ 116.770961][ T3240] lookup_one_qstr_excl+0x12c/0x280 [ 116.770972][ T3240] do_renameat2+0x3e0/0xc30 [ 116.770981][ T3240] ? __virt_addr_valid+0x2a1/0x370 [ 116.770994][ T3240] ? __cfi_do_renameat2+0x10/0x10 [ 116.771004][ T3240] ? __kasan_check_write+0x18/0x20 [ 116.771013][ T3240] ? getname_flags+0x203/0x6b0 [ 116.771024][ T3240] __x64_sys_renameat2+0xdc/0x100 [ 116.771034][ T3240] x64_sys_call+0x2e18/0x2ee0 [ 116.771043][ T3240] do_syscall_64+0x57/0xf0 [ 116.771053][ T3240] ? clear_bhb_loop+0x50/0xa0 [ 116.771066][ T3240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.771079][ T3240] RIP: 0033:0x7efcb739e0d9 [ 116.771095][ T3240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.771104][ T3240] RSP: 002b:00007efcb8205028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 116.771117][ T3240] RAX: ffffffffffffffda RBX: 00007efcb7625fa0 RCX: 00007efcb739e0d9 [ 116.771125][ T3240] RDX: ffffffffffffff9c RSI: 0000200000000200 RDI: ffffffffffffff9c [ 116.771132][ T3240] RBP: 00007efcb8205090 R08: 0000000000000002 R09: 0000000000000000 [ 116.771139][ T3240] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 116.771146][ T3240] R13: 00007efcb7626038 R14: 00007efcb7625fa0 R15: 00007fff50425438 [ 116.771155][ T3240] [ 117.257891][ T36] audit: type=1400 audit(1786029990.689:404): avc: denied { append } for pid=3252 comm="syz.0.1049" name="uprobe_events" dev="tracefs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.430161][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 117.492630][ T3269] fuse: Bad value for 'group_id' [ 117.497759][ T3269] fuse: Bad value for 'group_id' [ 117.511387][ T3271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.519981][ T3271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.537905][ T3275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.546905][ T3275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.581294][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 117.591466][ T10] usb 4-1: config 0 has no interface number 0 [ 117.598972][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 117.608098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.616140][ T10] usb 4-1: Product: syz [ 117.621335][ T10] usb 4-1: Manufacturer: syz [ 117.625926][ T10] usb 4-1: SerialNumber: syz [ 117.631781][ T10] usb 4-1: config 0 descriptor?? [ 118.090625][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.101254][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 118.110995][ T10] asix 4-1:0.251: probe with driver asix failed with error -5 [ 118.119447][ T10] usb 4-1: USB disconnect, device number 55 [ 118.138226][ T36] audit: type=1400 audit(1786029991.569:405): avc: denied { ioctl } for pid=3279 comm="syz.2.1059" path="socket:[48677]" dev="sockfs" ino=48677 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.163101][ T36] audit: type=1326 audit(1786029991.569:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.2.1059" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24df99e0d9 code=0x0 [ 118.836353][ T3313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=3313 comm=syz.1.1068 [ 118.849162][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 118.989535][ T3322] FAULT_INJECTION: forcing a failure. [ 118.989535][ T3322] name failslab, interval 1, probability 0, space 0, times 0 [ 119.004844][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz.2.1071 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 119.004878][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.004891][ T3322] Call Trace: [ 119.004897][ T3322] [ 119.004904][ T3322] __dump_stack+0x21/0x30 [ 119.004936][ T3322] dump_stack_lvl+0x140/0x1c0 [ 119.004958][ T3322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.004984][ T3322] ? kasan_save_alloc_info+0x3a/0x50 [ 119.005012][ T3322] dump_stack+0x19/0x20 [ 119.005035][ T3322] should_fail_ex+0x3c2/0x510 [ 119.005057][ T3322] should_failslab+0xac/0x100 [ 119.005079][ T3322] __kmalloc_node_noprof+0x69/0x500 [ 119.005098][ T3322] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 119.005124][ T3322] __vmalloc_node_range_noprof+0x529/0x1300 [ 119.005153][ T3322] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 119.005179][ T3322] ? kasan_save_alloc_info+0x3a/0x50 [ 119.005205][ T3322] ? __kasan_slab_alloc+0x73/0x90 [ 119.005227][ T3322] ? arch_dup_task_struct+0x5b/0xe0 [ 119.005253][ T3322] ? __asan_memcpy+0x5a/0x80 [ 119.005273][ T3322] dup_task_struct+0x5d6/0xd80 [ 119.005295][ T3322] ? copy_process+0x57c/0x3350 [ 119.005316][ T3322] ? _raw_spin_lock_irq+0x93/0x120 [ 119.005337][ T3322] ? copy_process+0x3350/0x3350 [ 119.005359][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.005377][ T3322] copy_process+0x57c/0x3350 [ 119.005402][ T3322] ? kasan_save_alloc_info+0x3a/0x50 [ 119.005428][ T3322] ? __cfi_copy_process+0x10/0x10 [ 119.005448][ T3322] ? __kmalloc_cache_noprof+0x23c/0x470 [ 119.005465][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.005480][ T3322] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 119.005510][ T3322] vhost_task_create+0x1f7/0x3f0 [ 119.005526][ T3322] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 119.005545][ T3322] ? __cfi_vhost_task_create+0x10/0x10 [ 119.005563][ T3322] ? __cfi_vhost_task_fn+0x10/0x10 [ 119.005581][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.005598][ T3322] ? mutex_lock+0x97/0x1d0 [ 119.005629][ T3322] ? __cfi_mutex_lock+0x10/0x10 [ 119.005650][ T3322] ? kernel_text_address+0xa9/0xe0 [ 119.005673][ T3322] kvm_mmu_post_init_vm+0x161/0x300 [ 119.005697][ T3322] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 119.005720][ T3322] ? _parse_integer_limit+0x195/0x1e0 [ 119.005740][ T3322] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 119.005764][ T3322] ? kstrtoull+0x13b/0x1e0 [ 119.005781][ T3322] ? kstrtouint+0x78/0xf0 [ 119.005798][ T3322] ? ioctl_has_perm+0x1bc/0x500 [ 119.005815][ T3322] ? __asan_memcpy+0x5a/0x80 [ 119.005830][ T3322] ? ioctl_has_perm+0x408/0x500 [ 119.005846][ T3322] ? has_cap_mac_admin+0xd0/0xd0 [ 119.005862][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.005877][ T3322] ? mutex_lock_killable+0x97/0x1d0 [ 119.005900][ T3322] ? __cfi_mutex_lock_killable+0x10/0x10 [ 119.005923][ T3322] ? proc_fail_nth_write+0x184/0x220 [ 119.005949][ T3322] kvm_vcpu_ioctl+0xa43/0x1000 [ 119.005967][ T3322] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.005982][ T3322] ? __cfi_vfs_write+0x10/0x10 [ 119.006000][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.006015][ T3322] ? mutex_unlock+0x90/0x240 [ 119.006037][ T3322] ? __cfi_mutex_unlock+0x10/0x10 [ 119.006062][ T3322] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.006084][ T3322] ? security_file_ioctl+0x3e/0x110 [ 119.006109][ T3322] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.006127][ T3322] __se_sys_ioctl+0x135/0x1b0 [ 119.006149][ T3322] __x64_sys_ioctl+0x7f/0xa0 [ 119.006168][ T3322] x64_sys_call+0x1878/0x2ee0 [ 119.006186][ T3322] do_syscall_64+0x57/0xf0 [ 119.006206][ T3322] ? clear_bhb_loop+0x50/0xa0 [ 119.006229][ T3322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.006251][ T3322] RIP: 0033:0x7f24df99e0d9 [ 119.006268][ T3322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.006284][ T3322] RSP: 002b:00007f24e083a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.006305][ T3322] RAX: ffffffffffffffda RBX: 00007f24dfc25fa0 RCX: 00007f24df99e0d9 [ 119.006319][ T3322] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 119.006331][ T3322] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.006342][ T3322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.006354][ T3322] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 119.006370][ T3322] [ 119.006455][ T3322] syz.2.1071: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 119.430536][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 119.448011][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz.2.1071 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 119.448040][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.448051][ T3322] Call Trace: [ 119.448058][ T3322] [ 119.448065][ T3322] __dump_stack+0x21/0x30 [ 119.448093][ T3322] dump_stack_lvl+0x140/0x1c0 [ 119.448116][ T3322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.448138][ T3322] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 119.448156][ T3322] dump_stack+0x19/0x20 [ 119.448176][ T3322] warn_alloc+0x1e7/0x2c0 [ 119.448199][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.448218][ T3322] ? __cfi_warn_alloc+0x10/0x10 [ 119.448241][ T3322] ? __kasan_kmalloc+0x28/0xb0 [ 119.448262][ T3322] ? __kmalloc_node_noprof+0x252/0x500 [ 119.448280][ T3322] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 119.448308][ T3322] __vmalloc_node_range_noprof+0x65f/0x1300 [ 119.448345][ T3322] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 119.448370][ T3322] ? kasan_save_alloc_info+0x3a/0x50 [ 119.448395][ T3322] ? __kasan_slab_alloc+0x73/0x90 [ 119.448415][ T3322] ? arch_dup_task_struct+0x5b/0xe0 [ 119.448441][ T3322] ? __asan_memcpy+0x5a/0x80 [ 119.448459][ T3322] dup_task_struct+0x5d6/0xd80 [ 119.448480][ T3322] ? copy_process+0x57c/0x3350 [ 119.448501][ T3322] ? _raw_spin_lock_irq+0x93/0x120 [ 119.448521][ T3322] ? copy_process+0x3350/0x3350 [ 119.448542][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.448559][ T3322] copy_process+0x57c/0x3350 [ 119.448582][ T3322] ? kasan_save_alloc_info+0x3a/0x50 [ 119.448607][ T3322] ? __cfi_copy_process+0x10/0x10 [ 119.448628][ T3322] ? __kmalloc_cache_noprof+0x23c/0x470 [ 119.448647][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.448664][ T3322] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 119.448685][ T3322] vhost_task_create+0x1f7/0x3f0 [ 119.448704][ T3322] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 119.448726][ T3322] ? __cfi_vhost_task_create+0x10/0x10 [ 119.448745][ T3322] ? __cfi_vhost_task_fn+0x10/0x10 [ 119.448766][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.448783][ T3322] ? mutex_lock+0x97/0x1d0 [ 119.448806][ T3322] ? __cfi_mutex_lock+0x10/0x10 [ 119.448828][ T3322] ? kernel_text_address+0xa9/0xe0 [ 119.448852][ T3322] kvm_mmu_post_init_vm+0x161/0x300 [ 119.448876][ T3322] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 119.448899][ T3322] ? _parse_integer_limit+0x195/0x1e0 [ 119.448919][ T3322] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 119.448942][ T3322] ? kstrtoull+0x13b/0x1e0 [ 119.448959][ T3322] ? kstrtouint+0x78/0xf0 [ 119.448977][ T3322] ? ioctl_has_perm+0x1bc/0x500 [ 119.448994][ T3322] ? __asan_memcpy+0x5a/0x80 [ 119.449011][ T3322] ? ioctl_has_perm+0x408/0x500 [ 119.449028][ T3322] ? has_cap_mac_admin+0xd0/0xd0 [ 119.449045][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.449062][ T3322] ? mutex_lock_killable+0x97/0x1d0 [ 119.449086][ T3322] ? __cfi_mutex_lock_killable+0x10/0x10 [ 119.449110][ T3322] ? proc_fail_nth_write+0x184/0x220 [ 119.449137][ T3322] kvm_vcpu_ioctl+0xa43/0x1000 [ 119.449156][ T3322] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.449172][ T3322] ? __cfi_vfs_write+0x10/0x10 [ 119.449191][ T3322] ? __kasan_check_write+0x18/0x20 [ 119.449208][ T3322] ? mutex_unlock+0x90/0x240 [ 119.449231][ T3322] ? __cfi_mutex_unlock+0x10/0x10 [ 119.449255][ T3322] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.449277][ T3322] ? security_file_ioctl+0x3e/0x110 [ 119.449303][ T3322] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 119.449325][ T3322] __se_sys_ioctl+0x135/0x1b0 [ 119.449347][ T3322] __x64_sys_ioctl+0x7f/0xa0 [ 119.449367][ T3322] x64_sys_call+0x1878/0x2ee0 [ 119.449383][ T3322] do_syscall_64+0x57/0xf0 [ 119.449403][ T3322] ? clear_bhb_loop+0x50/0xa0 [ 119.449426][ T3322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.449449][ T3322] RIP: 0033:0x7f24df99e0d9 [ 119.449465][ T3322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.449481][ T3322] RSP: 002b:00007f24e083a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.449501][ T3322] RAX: ffffffffffffffda RBX: 00007f24dfc25fa0 RCX: 00007f24df99e0d9 [ 119.449514][ T3322] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 119.449526][ T3322] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.449538][ T3322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.449550][ T3322] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 119.449565][ T3322] [ 119.449637][ T3322] Mem-Info: [ 119.454103][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.468416][ T3322] active_anon:23709 inactive_anon:0 isolated_anon:0 [ 119.468416][ T3322] active_file:19851 inactive_file:2622 isolated_file:0 [ 119.468416][ T3322] unevictable:2 dirty:221 writeback:0 [ 119.468416][ T3322] slab_reclaimable:4945 slab_unreclaimable:74685 [ 119.468416][ T3322] mapped:25801 shmem:16640 pagetables:1087 [ 119.468416][ T3322] sec_pagetables:0 bounce:0 [ 119.468416][ T3322] kernel_misc_reclaimable:0 [ 119.468416][ T3322] free:1497316 free_pcp:5502 free_cma:0 [ 119.475263][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 119.478260][ T3322] Node 0 active_anon:94836kB inactive_anon:0kB active_file:79404kB inactive_file:10488kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:103204kB dirty:884kB writeback:0kB shmem:66560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6848kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no [ 119.482237][ T10] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 119.485321][ T3322] DMA32 free:2950100kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:13308kB local_pcp:9428kB free_cma:0kB [ 119.489721][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.489742][ T10] usb 4-1: Product: syz [ 119.489757][ T10] usb 4-1: Manufacturer: syz [ 119.495278][ T3322] lowmem_reserve[]: [ 119.500856][ T10] usb 4-1: SerialNumber: syz [ 119.505144][ T3322] 0 [ 119.595125][ T36] audit: type=1326 audit(1786029993.029:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897779e0d9 code=0x0 [ 119.597046][ T3322] 3921 [ 119.653545][ T36] audit: type=1326 audit(1786029993.089:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.656971][ T3322] 3921 [ 119.656986][ T3322] Normal free:3043180kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94888kB inactive_anon:0kB active_file:79404kB inactive_file:10488kB unevictable:8kB writepending:884kB present:5242880kB managed:4015864kB mlocked:8kB bounce:0kB free_pcp:4732kB local_pcp:3064kB free_cma:0kB [ 119.664398][ T36] audit: type=1326 audit(1786029993.089:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.668040][ T3322] lowmem_reserve[]: [ 119.672286][ T36] audit: type=1326 audit(1786029993.099:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.678108][ T3322] 0 [ 119.683328][ T36] audit: type=1326 audit(1786029993.099:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.689420][ T3322] 0 [ 119.693722][ T36] audit: type=1326 audit(1786029993.099:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.698132][ T3322] 0 [ 119.702831][ T36] audit: type=1326 audit(1786029993.099:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1074" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f897779e0d9 code=0x7ffc0000 [ 119.707559][ T3322] [ 119.735051][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 119.739242][ T3322] DMA32: [ 119.751281][ T10] usb 4-1: USB disconnect, device number 56 [ 119.753465][ T3322] 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (M) 717*4096kB (M) = 2950100kB [ 120.311374][ T3322] Normal: 961*4kB (UME) 640*8kB (UME) 823*16kB (UME) 296*32kB (UME) 208*64kB (UME) 104*128kB (UME) 72*256kB (UME) 60*512kB (UME) 36*1024kB (UME) 25*2048kB (UME) 695*4096kB (UM) = 3042164kB [ 120.330261][ T3322] 39110 total pagecache pages [ 120.334953][ T3322] 0 pages in swap cache [ 120.339119][ T3322] Free swap = 124108kB [ 120.343569][ T3322] Total swap = 124996kB [ 120.347733][ T3322] 2097051 pages RAM [ 120.353393][ T3322] 0 pages HighMem/MovableOnly [ 120.358279][ T3322] 352233 pages reserved [ 120.362776][ T3322] 0 pages cma reserved [ 120.368117][ T3322] Memory allocations: [ 120.372197][ T3322] 0 B 0 init/main.c:1477 func:do_initcalls [ 120.379410][ T3322] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 120.387524][ T3322] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 120.395213][ T3322] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 120.403451][ T3322] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 120.411521][ T3322] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 120.423530][ T3322] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 120.432044][ T3322] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 120.440260][ T3322] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 120.448522][ T3322] 0 B 0 init/initramfs.c:101 func:find_link [ 120.540480][ T3362] sit0: entered promiscuous mode [ 120.546772][ T3362] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 120.555006][ T3362] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1088'. [ 120.590043][ T3370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.598580][ T3370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.608053][ T3370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.616724][ T3370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.658856][ T3376] input: syz0 as /devices/virtual/input/input18 [ 121.166979][ T3390] overlayfs: failed to clone upperpath [ 121.172862][ T3390] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 121.351633][ T3389] FAULT_INJECTION: forcing a failure. [ 121.351633][ T3389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.364811][ T3389] CPU: 1 UID: 0 PID: 3389 Comm: syz.2.1100 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 121.364842][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.364854][ T3389] Call Trace: [ 121.364861][ T3389] [ 121.364869][ T3389] __dump_stack+0x21/0x30 [ 121.364899][ T3389] dump_stack_lvl+0x140/0x1c0 [ 121.364923][ T3389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.364945][ T3389] ? check_stack_object+0x138/0x150 [ 121.364964][ T3389] dump_stack+0x19/0x20 [ 121.364987][ T3389] should_fail_ex+0x3c2/0x510 [ 121.365008][ T3389] should_fail+0xf/0x20 [ 121.365026][ T3389] should_fail_usercopy+0x1e/0x30 [ 121.365048][ T3389] _copy_to_user+0x24/0xa0 [ 121.365071][ T3389] simple_read_from_buffer+0xed/0x160 [ 121.365097][ T3389] proc_fail_nth_read+0x1aa/0x220 [ 121.365122][ T3389] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 121.365148][ T3389] ? __cfi_raw_ioctl+0x10/0x10 [ 121.365172][ T3389] ? bpf_lsm_file_permission+0xd/0x20 [ 121.365197][ T3389] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 121.365229][ T3389] vfs_read+0x288/0xc70 [ 121.365246][ T3389] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 121.365266][ T3389] ? __cfi_vfs_read+0x10/0x10 [ 121.365283][ T3389] ? __kasan_check_write+0x18/0x20 [ 121.365302][ T3389] ? mutex_lock+0x97/0x1d0 [ 121.365327][ T3389] ? __cfi_mutex_lock+0x10/0x10 [ 121.365353][ T3389] ksys_read+0x145/0x260 [ 121.365372][ T3389] ? __cfi_ksys_read+0x10/0x10 [ 121.365392][ T3389] ? __kasan_check_read+0x15/0x20 [ 121.365410][ T3389] __x64_sys_read+0x7f/0x90 [ 121.365429][ T3389] x64_sys_call+0x2638/0x2ee0 [ 121.365446][ T3389] do_syscall_64+0x57/0xf0 [ 121.365465][ T3389] ? clear_bhb_loop+0x50/0xa0 [ 121.365490][ T3389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.365513][ T3389] RIP: 0033:0x7f24df95e90e [ 121.365529][ T3389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.365545][ T3389] RSP: 002b:00007f24e0839fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.365565][ T3389] RAX: ffffffffffffffda RBX: 00007f24e083a6c0 RCX: 00007f24df95e90e [ 121.365580][ T3389] RDX: 000000000000000f RSI: 00007f24e083a0a0 RDI: 0000000000000004 [ 121.365592][ T3389] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 121.365605][ T3389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.365617][ T3389] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 121.365634][ T3389] [ 121.843052][ T3418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.855142][ T3418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.556012][ T376] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.576963][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 122.576980][ T36] audit: type=1400 audit(1786029996.009:959): avc: denied { getopt } for pid=3444 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.646434][ T3450] FAULT_INJECTION: forcing a failure. [ 122.646434][ T3450] name failslab, interval 1, probability 0, space 0, times 0 [ 122.659469][ T3450] CPU: 0 UID: 0 PID: 3450 Comm: syz.2.1123 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 122.659502][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.659514][ T3450] Call Trace: [ 122.659532][ T3450] [ 122.659539][ T3450] __dump_stack+0x21/0x30 [ 122.659570][ T3450] dump_stack_lvl+0x140/0x1c0 [ 122.659594][ T3450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.659619][ T3450] ? avc_has_perm+0x155/0x240 [ 122.659640][ T3450] ? __cfi_avc_has_perm+0x10/0x10 [ 122.659661][ T3450] dump_stack+0x19/0x20 [ 122.659684][ T3450] should_fail_ex+0x3c2/0x510 [ 122.659705][ T3450] should_failslab+0xac/0x100 [ 122.659728][ T3450] __kmalloc_cache_noprof+0x41/0x470 [ 122.659749][ T3450] ? vhost_task_create+0x12c/0x3f0 [ 122.659770][ T3450] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 122.659792][ T3450] vhost_task_create+0x12c/0x3f0 [ 122.659810][ T3450] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 122.659833][ T3450] ? __cfi_vhost_task_create+0x10/0x10 [ 122.659853][ T3450] ? __cfi_vhost_task_fn+0x10/0x10 [ 122.659872][ T3450] ? __kasan_check_write+0x18/0x20 [ 122.659891][ T3450] ? mutex_lock+0x97/0x1d0 [ 122.659914][ T3450] ? __cfi_mutex_lock+0x10/0x10 [ 122.659937][ T3450] ? kernel_text_address+0xa9/0xe0 [ 122.659963][ T3450] kvm_mmu_post_init_vm+0x161/0x300 [ 122.659989][ T3450] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 122.660013][ T3450] ? _parse_integer_limit+0x195/0x1e0 [ 122.660033][ T3450] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 122.660057][ T3450] ? kstrtoull+0x13b/0x1e0 [ 122.660076][ T3450] ? kstrtouint+0x78/0xf0 [ 122.660095][ T3450] ? ioctl_has_perm+0x1bc/0x500 [ 122.660111][ T3450] ? __asan_memcpy+0x5a/0x80 [ 122.660127][ T3450] ? ioctl_has_perm+0x408/0x500 [ 122.660145][ T3450] ? has_cap_mac_admin+0xd0/0xd0 [ 122.660163][ T3450] ? __kasan_check_write+0x18/0x20 [ 122.660181][ T3450] ? mutex_lock_killable+0x97/0x1d0 [ 122.660206][ T3450] ? __cfi_mutex_lock_killable+0x10/0x10 [ 122.660231][ T3450] ? proc_fail_nth_write+0x184/0x220 [ 122.660258][ T3450] kvm_vcpu_ioctl+0xa43/0x1000 [ 122.660277][ T3450] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 122.660296][ T3450] ? __cfi_vfs_write+0x10/0x10 [ 122.660315][ T3450] ? __kasan_check_write+0x18/0x20 [ 122.660334][ T3450] ? mutex_unlock+0x90/0x240 [ 122.660358][ T3450] ? __cfi_mutex_unlock+0x10/0x10 [ 122.660384][ T3450] ? bpf_lsm_file_ioctl+0xd/0x20 [ 122.660405][ T3450] ? security_file_ioctl+0x3e/0x110 [ 122.660431][ T3450] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 122.660449][ T3450] __se_sys_ioctl+0x135/0x1b0 [ 122.660471][ T3450] __x64_sys_ioctl+0x7f/0xa0 [ 122.660492][ T3450] x64_sys_call+0x1878/0x2ee0 [ 122.660510][ T3450] do_syscall_64+0x57/0xf0 [ 122.660538][ T3450] ? clear_bhb_loop+0x50/0xa0 [ 122.660563][ T3450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.660586][ T3450] RIP: 0033:0x7f24df99e0d9 [ 122.660604][ T3450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.660620][ T3450] RSP: 002b:00007f24e083a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.660641][ T3450] RAX: ffffffffffffffda RBX: 00007f24dfc25fa0 RCX: 00007f24df99e0d9 [ 122.660656][ T3450] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 122.660668][ T3450] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 122.660681][ T3450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.660693][ T3450] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 122.660709][ T3450] [ 123.143673][ T510] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 123.170255][ T510] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.561199][ T3493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1138'. [ 123.623086][ T3500] FAULT_INJECTION: forcing a failure. [ 123.623086][ T3500] name failslab, interval 1, probability 0, space 0, times 0 [ 123.635744][ T3500] CPU: 1 UID: 0 PID: 3500 Comm: syz.2.1141 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 123.635776][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.635788][ T3500] Call Trace: [ 123.635794][ T3500] [ 123.635801][ T3500] __dump_stack+0x21/0x30 [ 123.635821][ T3500] dump_stack_lvl+0x140/0x1c0 [ 123.635835][ T3500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.635849][ T3500] ? __kasan_check_write+0x18/0x20 [ 123.635860][ T3500] ? copy_mm+0x307/0x1da0 [ 123.635873][ T3500] dump_stack+0x19/0x20 [ 123.635886][ T3500] should_fail_ex+0x3c2/0x510 [ 123.635898][ T3500] should_failslab+0xac/0x100 [ 123.635910][ T3500] kmem_cache_alloc_noprof+0x42/0x410 [ 123.635921][ T3500] ? alloc_pid+0xa5/0xb80 [ 123.635932][ T3500] ? __asan_memcpy+0x5a/0x80 [ 123.635942][ T3500] alloc_pid+0xa5/0xb80 [ 123.635954][ T3500] copy_process+0x1467/0x3350 [ 123.635969][ T3500] ? __cfi_copy_process+0x10/0x10 [ 123.635981][ T3500] ? __kmalloc_cache_noprof+0x23c/0x470 [ 123.635992][ T3500] ? __kasan_check_write+0x18/0x20 [ 123.636008][ T3500] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.636028][ T3500] vhost_task_create+0x1f7/0x3f0 [ 123.636045][ T3500] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.636067][ T3500] ? __cfi_vhost_task_create+0x10/0x10 [ 123.636083][ T3500] ? __cfi_vhost_task_fn+0x10/0x10 [ 123.636094][ T3500] ? __kasan_check_write+0x18/0x20 [ 123.636103][ T3500] ? mutex_lock+0x97/0x1d0 [ 123.636118][ T3500] ? __cfi_mutex_lock+0x10/0x10 [ 123.636131][ T3500] ? kernel_text_address+0xa9/0xe0 [ 123.636144][ T3500] kvm_mmu_post_init_vm+0x161/0x300 [ 123.636159][ T3500] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 123.636173][ T3500] ? _parse_integer_limit+0x195/0x1e0 [ 123.636185][ T3500] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 123.636199][ T3500] ? kstrtoull+0x13b/0x1e0 [ 123.636216][ T3500] ? kstrtouint+0x78/0xf0 [ 123.636232][ T3500] ? ioctl_has_perm+0x1bc/0x500 [ 123.636249][ T3500] ? __asan_memcpy+0x5a/0x80 [ 123.636266][ T3500] ? ioctl_has_perm+0x408/0x500 [ 123.636276][ T3500] ? has_cap_mac_admin+0xd0/0xd0 [ 123.636285][ T3500] ? __kasan_check_write+0x18/0x20 [ 123.636295][ T3500] ? mutex_lock_killable+0x97/0x1d0 [ 123.636309][ T3500] ? __cfi_mutex_lock_killable+0x10/0x10 [ 123.636323][ T3500] ? proc_fail_nth_write+0x184/0x220 [ 123.636338][ T3500] kvm_vcpu_ioctl+0xa43/0x1000 [ 123.636348][ T3500] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.636358][ T3500] ? __cfi_vfs_write+0x10/0x10 [ 123.636369][ T3500] ? __kasan_check_write+0x18/0x20 [ 123.636378][ T3500] ? mutex_unlock+0x90/0x240 [ 123.636391][ T3500] ? __cfi_mutex_unlock+0x10/0x10 [ 123.636405][ T3500] ? bpf_lsm_file_ioctl+0xd/0x20 [ 123.636418][ T3500] ? security_file_ioctl+0x3e/0x110 [ 123.636433][ T3500] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 123.636442][ T3500] __se_sys_ioctl+0x135/0x1b0 [ 123.636461][ T3500] __x64_sys_ioctl+0x7f/0xa0 [ 123.636472][ T3500] x64_sys_call+0x1878/0x2ee0 [ 123.636482][ T3500] do_syscall_64+0x57/0xf0 [ 123.636493][ T3500] ? clear_bhb_loop+0x50/0xa0 [ 123.636507][ T3500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.636520][ T3500] RIP: 0033:0x7f24df99e0d9 [ 123.636530][ T3500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.636539][ T3500] RSP: 002b:00007f24e083a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.636552][ T3500] RAX: ffffffffffffffda RBX: 00007f24dfc25fa0 RCX: 00007f24df99e0d9 [ 123.636560][ T3500] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.636567][ T3500] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 123.636573][ T3500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.636580][ T3500] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 123.636588][ T3500] [ 124.091448][ T3509] overlayfs: missing 'workdir' [ 124.202122][ T3523] FAULT_INJECTION: forcing a failure. [ 124.202122][ T3523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.217423][ T3523] CPU: 0 UID: 0 PID: 3523 Comm: syz.0.1150 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 124.217457][ T3523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.217478][ T3523] Call Trace: [ 124.217485][ T3523] [ 124.217492][ T3523] __dump_stack+0x21/0x30 [ 124.217522][ T3523] dump_stack_lvl+0x140/0x1c0 [ 124.217546][ T3523] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.217572][ T3523] ? check_stack_object+0x81/0x150 [ 124.217592][ T3523] ? __virt_addr_valid+0x2a1/0x370 [ 124.217614][ T3523] dump_stack+0x19/0x20 [ 124.217638][ T3523] should_fail_ex+0x3c2/0x510 [ 124.217659][ T3523] should_fail+0xf/0x20 [ 124.217678][ T3523] should_fail_usercopy+0x1e/0x30 [ 124.217700][ T3523] _copy_from_user+0x20/0xa0 [ 124.217724][ T3523] xfrm_user_policy+0x237/0x6e0 [ 124.217746][ T3523] ? bpf_lsm_capable+0xd/0x20 [ 124.217771][ T3523] ? __cfi_xfrm_user_policy+0x10/0x10 [ 124.217792][ T3523] ? ns_capable+0x90/0xf0 [ 124.217820][ T3523] do_ipv6_setsockopt+0x175c/0x3350 [ 124.217839][ T3523] ? _parse_integer_limit+0x195/0x1e0 [ 124.217859][ T3523] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 124.217886][ T3523] ? _parse_integer+0x2e/0x40 [ 124.217904][ T3523] ? avc_has_perm_noaudit+0x26b/0x360 [ 124.217925][ T3523] ? __asan_memcpy+0x5a/0x80 [ 124.217945][ T3523] ? avc_has_perm_noaudit+0x289/0x360 [ 124.217966][ T3523] ? avc_has_perm+0x155/0x240 [ 124.217986][ T3523] ? __cfi_avc_has_perm+0x10/0x10 [ 124.218007][ T3523] ? selinux_socket_setsockopt+0x324/0x3d0 [ 124.218032][ T3523] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 124.218055][ T3523] ? bpf_lsm_file_permission+0xd/0x20 [ 124.218080][ T3523] ipv6_setsockopt+0x5d/0x170 [ 124.218098][ T3523] tcp_setsockopt+0xf2/0x110 [ 124.218119][ T3523] sock_common_setsockopt+0xb8/0xd0 [ 124.218142][ T3523] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 124.218165][ T3523] do_sock_setsockopt+0x27f/0x410 [ 124.218184][ T3523] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 124.218201][ T3523] ? __fget_files+0x2bc/0x330 [ 124.218225][ T3523] __x64_sys_setsockopt+0x1b7/0x250 [ 124.218243][ T3523] x64_sys_call+0x2adc/0x2ee0 [ 124.218260][ T3523] do_syscall_64+0x57/0xf0 [ 124.218281][ T3523] ? clear_bhb_loop+0x50/0xa0 [ 124.218305][ T3523] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.218328][ T3523] RIP: 0033:0x7fd76799e0d9 [ 124.218345][ T3523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.218362][ T3523] RSP: 002b:00007fd76882e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.218384][ T3523] RAX: ffffffffffffffda RBX: 00007fd767c25fa0 RCX: 00007fd76799e0d9 [ 124.218403][ T3523] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 124.218416][ T3523] RBP: 00007fd76882e090 R08: 00000000000000e8 R09: 0000000000000000 [ 124.218429][ T3523] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 124.218442][ T3523] R13: 00007fd767c26038 R14: 00007fd767c25fa0 R15: 00007fff2a84c808 [ 124.218459][ T3523] [ 124.522719][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 124.546577][ T3530] overlayfs: missing 'workdir' [ 124.564341][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.567881][ T36] audit: type=1400 audit(1786029997.999:960): avc: denied { map } for pid=3531 comm="syz.0.1153" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 124.572942][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.620149][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.620827][ T2767] Bluetooth: hci0: command 0x1003 tx timeout [ 124.720737][ T3540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.727967][ T3540] IPv6: NLM_F_CREATE should be set when creating new route [ 124.735194][ T3540] IPv6: NLM_F_CREATE should be set when creating new route [ 124.825234][ T3547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1160'. [ 124.862227][ T3554] overlayfs: missing 'workdir' [ 124.988702][ T3567] netlink: 'syz.1.1169': attribute type 5 has an invalid length. [ 125.009363][ T36] audit: type=1326 audit(1786029998.439:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.3.1170" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb739e0d9 code=0x0 [ 125.075296][ T3584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'. [ 125.085739][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 125.110484][ T3587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1170'. [ 125.119680][ T3587] tipc: Invalid UDP bearer configuration [ 125.119705][ T3587] tipc: Enabling of bearer rejected, failed to enable media [ 125.461402][ T36] audit: type=1400 audit(1786029998.889:962): avc: denied { setattr } for pid=3608 comm="syz.0.1187" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 125.899014][ T3633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.919304][ T3633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.021107][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.029614][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.340209][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 126.502429][ T45] usb 4-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40 [ 126.511590][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.519561][ T45] usb 4-1: Product: syz [ 126.523766][ T45] usb 4-1: Manufacturer: syz [ 126.528352][ T45] usb 4-1: SerialNumber: syz [ 126.581589][ T3675] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 126.653110][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.662740][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.708537][ T3686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.717635][ T3686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.740728][ T45] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 126.746696][ T45] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 126.756243][ T45] usb 4-1: USB disconnect, device number 57 [ 126.767221][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.256182][ T3697] rust_binder: 3696:3697 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 127.267017][ T3697] rust_binder: Write failure EINVAL in pid:743 [ 127.322723][ T3708] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.358394][ T36] audit: type=1400 audit(1786030000.789:963): avc: denied { remount } for pid=3711 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.393352][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.401998][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.416401][ T3719] support for the xor transformation has been removed. [ 127.475273][ T36] audit: type=1400 audit(1786030000.909:964): avc: denied { rename } for pid=3718 comm="syz.0.1229" name="file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.150433][ T45] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 128.300157][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 128.307506][ T45] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 128.316662][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.324678][ T45] usb 4-1: Product: syz [ 128.328895][ T45] usb 4-1: Manufacturer: syz [ 128.333502][ T45] usb 4-1: SerialNumber: syz [ 128.548100][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.559459][ T45] usb 4-1: unit 2 not found! [ 128.568733][ T45] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 128.593422][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 128.604641][ T45] usb 4-1: USB disconnect, device number 58 [ 128.612186][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.660956][ T36] audit: type=1400 audit(1786030002.099:965): avc: denied { getopt } for pid=3776 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.796445][ T36] audit: type=1400 audit(1786030002.229:966): avc: denied { mounton } for pid=3798 comm="syz.2.1258" path="/283/proc/sys/net/ipv4/ping_group_range" dev="proc" ino=52373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 128.796485][ T3799] fuse: Unknown parameter 'fowner<00000000000000000000' [ 128.883409][ T3806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=591197932 (1182395864 ns) > initial count (4398 ns). Using initial count to start timer. [ 128.945384][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.953921][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.519432][ T3824] 9pnet_fd: Insufficient options for proto=fd [ 129.575889][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.584462][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.741880][ T3836] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 129.751641][ T3836] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 129.767075][ T3836] overlayfs: failed to clone lowerpath [ 129.788549][ T3840] syzkaller1: entered promiscuous mode [ 129.794258][ T3840] syzkaller1: entered allmulticast mode [ 129.812702][ T36] audit: type=1400 audit(1786030003.249:967): avc: denied { remount } for pid=3837 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.852543][ T3847] rust_binder: 3846:3847 no such ref 0 [ 129.892240][ T3855] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1281'. [ 129.909525][ T3856] rust_binder: 3846:3856 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.918010][ T3856] rust_binder: 3846:3856 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 130.062806][ T3862] FAULT_INJECTION: forcing a failure. [ 130.062806][ T3862] name failslab, interval 1, probability 0, space 0, times 0 [ 130.075519][ T3862] CPU: 1 UID: 0 PID: 3862 Comm: syz.3.1285 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 130.075550][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.075562][ T3862] Call Trace: [ 130.075568][ T3862] [ 130.075572][ T3862] __dump_stack+0x21/0x30 [ 130.075592][ T3862] dump_stack_lvl+0x140/0x1c0 [ 130.075606][ T3862] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.075620][ T3862] dump_stack+0x19/0x20 [ 130.075633][ T3862] should_fail_ex+0x3c2/0x510 [ 130.075645][ T3862] should_failslab+0xac/0x100 [ 130.075658][ T3862] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 130.075670][ T3862] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 130.075688][ T3862] krealloc_noprof+0x8d/0x130 [ 130.075698][ T3862] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 130.075714][ T3862] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x57d/0x1a60 [ 130.075735][ T3862] ? __cfi_selinux_file_open+0x10/0x10 [ 130.075747][ T3862] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 130.075763][ T3862] ? avc_has_extended_perms+0x7fb/0xe60 [ 130.075775][ T3862] ? __asan_memcpy+0x5a/0x80 [ 130.075784][ T3862] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 130.075799][ T3862] ? __asan_set_shadow_00+0x12/0x20 [ 130.075813][ T3862] ? do_vfs_ioctl+0x182d/0x2010 [ 130.075825][ T3862] ? arch_stack_walk+0x10a/0x170 [ 130.075836][ T3862] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 130.075848][ T3862] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 130.075862][ T3862] ? _parse_integer+0x2e/0x40 [ 130.075874][ T3862] ? ioctl_has_perm+0x39a/0x500 [ 130.075884][ T3862] ? has_cap_mac_admin+0xd0/0xd0 [ 130.075893][ T3862] ? proc_fail_nth_write+0x184/0x220 [ 130.075908][ T3862] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 130.075922][ T3862] ? selinux_file_ioctl+0x732/0x1480 [ 130.075935][ T3862] ? vfs_write+0xbcf/0xfd0 [ 130.075945][ T3862] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 130.075954][ T3862] ? __cfi_vfs_write+0x10/0x10 [ 130.075964][ T3862] ? __kasan_check_write+0x18/0x20 [ 130.075974][ T3862] ? mutex_unlock+0x90/0x240 [ 130.075988][ T3862] ? __cfi_mutex_unlock+0x10/0x10 [ 130.076003][ T3862] ? bpf_lsm_file_ioctl+0xd/0x20 [ 130.076016][ T3862] ? security_file_ioctl+0x3e/0x110 [ 130.076031][ T3862] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 130.076045][ T3862] __se_sys_ioctl+0x135/0x1b0 [ 130.076056][ T3862] __x64_sys_ioctl+0x7f/0xa0 [ 130.076068][ T3862] x64_sys_call+0x1878/0x2ee0 [ 130.076077][ T3862] do_syscall_64+0x57/0xf0 [ 130.076088][ T3862] ? clear_bhb_loop+0x50/0xa0 [ 130.076103][ T3862] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.076115][ T3862] RIP: 0033:0x7efcb739e0d9 [ 130.076125][ T3862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.076134][ T3862] RSP: 002b:00007efcb8205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.076147][ T3862] RAX: ffffffffffffffda RBX: 00007efcb7625fa0 RCX: 00007efcb739e0d9 [ 130.076155][ T3862] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003 [ 130.076162][ T3862] RBP: 00007efcb8205090 R08: 0000000000000000 R09: 0000000000000000 [ 130.076168][ T3862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.076175][ T3862] R13: 00007efcb7626038 R14: 00007efcb7625fa0 R15: 00007fff50425438 [ 130.076183][ T3862] [ 130.776145][ T3883] fuse: Unknown parameter 'grou00000000000000000000' [ 130.898431][ T3892] FAULT_INJECTION: forcing a failure. [ 130.898431][ T3892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.913853][ T3892] CPU: 0 UID: 0 PID: 3892 Comm: syz.2.1298 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 130.913885][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.913897][ T3892] Call Trace: [ 130.913904][ T3892] [ 130.913911][ T3892] __dump_stack+0x21/0x30 [ 130.913942][ T3892] dump_stack_lvl+0x140/0x1c0 [ 130.913967][ T3892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.913992][ T3892] ? check_stack_object+0x138/0x150 [ 130.914012][ T3892] dump_stack+0x19/0x20 [ 130.914035][ T3892] should_fail_ex+0x3c2/0x510 [ 130.914057][ T3892] should_fail+0xf/0x20 [ 130.914075][ T3892] should_fail_usercopy+0x1e/0x30 [ 130.914096][ T3892] _copy_to_user+0x24/0xa0 [ 130.914121][ T3892] simple_read_from_buffer+0xed/0x160 [ 130.914147][ T3892] proc_fail_nth_read+0x1aa/0x220 [ 130.914173][ T3892] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 130.914199][ T3892] ? bpf_lsm_file_permission+0xd/0x20 [ 130.914221][ T3892] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 130.914246][ T3892] vfs_read+0x288/0xc70 [ 130.914263][ T3892] ? __kasan_check_write+0x18/0x20 [ 130.914282][ T3892] ? mutex_unlock+0x90/0x240 [ 130.914306][ T3892] ? __cfi_vfs_read+0x10/0x10 [ 130.914323][ T3892] ? __kasan_check_write+0x18/0x20 [ 130.914340][ T3892] ? mutex_lock+0x97/0x1d0 [ 130.914363][ T3892] ? __cfi_mutex_lock+0x10/0x10 [ 130.914388][ T3892] ksys_read+0x145/0x260 [ 130.914406][ T3892] ? __cfi_ksys_read+0x10/0x10 [ 130.914423][ T3892] ? __kasan_check_read+0x15/0x20 [ 130.914440][ T3892] __x64_sys_read+0x7f/0x90 [ 130.914458][ T3892] x64_sys_call+0x2638/0x2ee0 [ 130.914475][ T3892] do_syscall_64+0x57/0xf0 [ 130.914493][ T3892] ? clear_bhb_loop+0x50/0xa0 [ 130.914516][ T3892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.914539][ T3892] RIP: 0033:0x7f24df95e90e [ 130.914556][ T3892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.914569][ T3892] RSP: 002b:00007f24e0839fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.914597][ T3892] RAX: ffffffffffffffda RBX: 00007f24e083a6c0 RCX: 00007f24df95e90e [ 130.914611][ T3892] RDX: 000000000000000f RSI: 00007f24e083a0a0 RDI: 0000000000000004 [ 130.914625][ T3892] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.914638][ T3892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.914649][ T3892] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 130.914665][ T3892] [ 131.171124][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.179640][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.280017][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.289719][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.298442][ T3905] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.331989][ T3909] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1300'. [ 131.369260][ T10] smpboot: CPU 1 is now offline [ 131.376695][ T3911] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 131.496780][ T3920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1310'. [ 131.509369][ T3922] Invalid ELF section header size [ 131.509377][ T36] audit: type=1400 audit(1786030004.939:968): avc: denied { module_load } for pid=3921 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 131.551164][ T3927] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.820166][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 131.886074][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 131.920396][ T3941] can: request_module (can-proto-0) failed. [ 131.942651][ T3945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.951363][ T3945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.960172][ T3945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.968777][ T3945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.979258][ T3945] netlink: 'syz.2.1321': attribute type 49 has an invalid length. [ 131.993400][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is -1 [ 132.003531][ T3947] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.011982][ T36] audit: type=1400 audit(1786030005.449:969): avc: denied { create } for pid=3944 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.012046][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 132.070475][ T10] usb 4-1: config 0 has no interface number 0 [ 132.076666][ T10] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 132.095049][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.103701][ T10] usb 4-1: config 0 descriptor?? [ 132.160429][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.169068][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.309584][ T10] usb 4-1: USB disconnect, device number 59 [ 132.594376][ T3961] FAULT_INJECTION: forcing a failure. [ 132.594376][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.607587][ T3961] CPU: 0 UID: 0 PID: 3961 Comm: syz.2.1328 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 132.607607][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.607614][ T3961] Call Trace: [ 132.607619][ T3961] [ 132.607624][ T3961] __dump_stack+0x21/0x30 [ 132.607643][ T3961] dump_stack_lvl+0x140/0x1c0 [ 132.607657][ T3961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.607671][ T3961] ? check_stack_object+0x138/0x150 [ 132.607682][ T3961] dump_stack+0x19/0x20 [ 132.607695][ T3961] should_fail_ex+0x3c2/0x510 [ 132.607707][ T3961] should_fail+0xf/0x20 [ 132.607717][ T3961] should_fail_usercopy+0x1e/0x30 [ 132.607729][ T3961] _copy_to_user+0x24/0xa0 [ 132.607743][ T3961] simple_read_from_buffer+0xed/0x160 [ 132.607757][ T3961] proc_fail_nth_read+0x1aa/0x220 [ 132.607771][ T3961] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 132.607786][ T3961] ? bpf_lsm_file_permission+0xd/0x20 [ 132.607799][ T3961] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 132.607812][ T3961] vfs_read+0x288/0xc70 [ 132.607823][ T3961] ? __cfi_nfc_get_device+0x10/0x10 [ 132.607833][ T3961] ? release_sock+0x171/0x1f0 [ 132.607847][ T3961] ? __cfi_vfs_read+0x10/0x10 [ 132.607856][ T3961] ? __kasan_check_write+0x18/0x20 [ 132.607866][ T3961] ? mutex_lock+0x97/0x1d0 [ 132.607880][ T3961] ? __cfi_mutex_lock+0x10/0x10 [ 132.607894][ T3961] ksys_read+0x145/0x260 [ 132.607904][ T3961] ? __cfi_ksys_read+0x10/0x10 [ 132.607914][ T3961] ? __kasan_check_read+0x15/0x20 [ 132.607924][ T3961] __x64_sys_read+0x7f/0x90 [ 132.607933][ T3961] x64_sys_call+0x2638/0x2ee0 [ 132.607943][ T3961] do_syscall_64+0x57/0xf0 [ 132.607954][ T3961] ? clear_bhb_loop+0x50/0xa0 [ 132.607969][ T3961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.607982][ T3961] RIP: 0033:0x7f24df95e90e [ 132.607992][ T3961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.608001][ T3961] RSP: 002b:00007f24e0839fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.608013][ T3961] RAX: ffffffffffffffda RBX: 00007f24e083a6c0 RCX: 00007f24df95e90e [ 132.608021][ T3961] RDX: 000000000000000f RSI: 00007f24e083a0a0 RDI: 0000000000000004 [ 132.608028][ T3961] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 132.608034][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.608041][ T3961] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 132.608049][ T3961] [ 132.924117][ T3969] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.949877][ T3972] veth0_to_bond: mtu less than device minimum [ 132.994640][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.003245][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.113574][ T3985] rust_binder: 3984:3985 no such ref 0 [ 133.158005][ T3989] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.170444][ T3990] rust_binder: 3984:3990 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 133.187402][ T3990] rust_binder: 3984:3990 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 133.500188][ T468] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 133.529713][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.539174][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.556654][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.565290][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.630139][ T468] usb 4-1: device descriptor read/64, error -71 [ 133.870148][ T468] usb 4-1: device descriptor read/64, error -71 [ 133.965957][ T4014] fuse: Unknown parameter 'group_id00000000000000000000' [ 133.985711][ T36] audit: type=1400 audit(1786030007.419:970): avc: denied { read } for pid=4015 comm="syz.0.1350" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.008379][ T36] audit: type=1400 audit(1786030007.419:971): avc: denied { open } for pid=4015 comm="syz.0.1350" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.091472][ T36] audit: type=1400 audit(1786030007.529:972): avc: denied { create } for pid=4021 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.112188][ T36] audit: type=1400 audit(1786030007.529:973): avc: denied { bind } for pid=4021 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.123457][ T4019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.143441][ T468] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 134.164503][ T4019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.248228][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.256868][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.300155][ T468] usb 4-1: device descriptor read/64, error -71 [ 134.540189][ T468] usb 4-1: device descriptor read/64, error -71 [ 134.650249][ T468] usb usb4-port1: attempt power cycle [ 134.781957][ T4034] rust_binder: 4032:4034 no such ref 0 [ 134.800433][ T4038] fuse: Bad value for 'user_id' [ 134.805385][ T4038] fuse: Bad value for 'user_id' [ 134.825989][ T4040] netlink: 'syz.0.1360': attribute type 4 has an invalid length. [ 134.846031][ T4041] rust_binder: 4032:4041 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 134.856849][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.865475][ T4041] rust_binder: 4032:4041 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 134.873644][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.990157][ T468] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 135.011163][ T468] usb 4-1: device descriptor read/8, error -71 [ 135.141121][ T468] usb 4-1: device descriptor read/8, error -71 [ 135.380154][ T468] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 135.401134][ T468] usb 4-1: device descriptor read/8, error -71 [ 135.425943][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.434568][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.531120][ T468] usb 4-1: device descriptor read/8, error -71 [ 135.622453][ T36] audit: type=1400 audit(1786030009.059:974): avc: denied { create } for pid=4049 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.640257][ T468] usb usb4-port1: unable to enumerate USB device [ 135.793916][ T4055] FAULT_INJECTION: forcing a failure. [ 135.793916][ T4055] name failslab, interval 1, probability 0, space 0, times 0 [ 135.806832][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.2.1365 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 135.806866][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.806878][ T4055] Call Trace: [ 135.806884][ T4055] [ 135.806893][ T4055] __dump_stack+0x21/0x30 [ 135.806923][ T4055] dump_stack_lvl+0x140/0x1c0 [ 135.806948][ T4055] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.806974][ T4055] dump_stack+0x19/0x20 [ 135.806996][ T4055] should_fail_ex+0x3c2/0x510 [ 135.807016][ T4055] should_failslab+0xac/0x100 [ 135.807039][ T4055] __kmalloc_node_noprof+0x69/0x500 [ 135.807059][ T4055] ? __kvmalloc_node_noprof+0x128/0x300 [ 135.807085][ T4055] ? xas_find+0xea/0x820 [ 135.807109][ T4055] __kvmalloc_node_noprof+0x128/0x300 [ 135.807144][ T4055] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 135.807171][ T4055] ? xa_find+0x11b/0x170 [ 135.807196][ T4055] kvm_recalculate_apic_map+0x435/0x15e0 [ 135.807219][ T4055] ? __cfi_kvm_recalculate_apic_map+0x10/0x10 [ 135.807239][ T4055] ? check_stack_object+0x81/0x150 [ 135.807258][ T4055] ? __virt_addr_valid+0x2a1/0x370 [ 135.807280][ T4055] ? kvm_apic_set_state+0x4f3/0x1940 [ 135.807304][ T4055] kvm_apic_set_state+0x586/0x1940 [ 135.807328][ T4055] kvm_vcpu_ioctl_set_lapic+0x23/0x180 [ 135.807349][ T4055] kvm_arch_vcpu_ioctl+0x11ac/0x3120 [ 135.807368][ T4055] ? avc_has_perm+0x155/0x240 [ 135.807390][ T4055] ? __cfi_avc_has_perm+0x10/0x10 [ 135.807410][ T4055] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 135.807431][ T4055] ? selinux_file_open+0x46c/0x630 [ 135.807450][ T4055] ? __cfi_selinux_file_open+0x10/0x10 [ 135.807472][ T4055] ? is_bpf_text_address+0x17b/0x1a0 [ 135.807499][ T4055] ? kernel_text_address+0xa9/0xe0 [ 135.807523][ T4055] ? __kernel_text_address+0x11/0x40 [ 135.807547][ T4055] ? __asan_set_shadow_00+0x12/0x20 [ 135.807572][ T4055] ? do_vfs_ioctl+0x182d/0x2010 [ 135.807595][ T4055] ? arch_stack_walk+0x10a/0x170 [ 135.807614][ T4055] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 135.807634][ T4055] ? _parse_integer_limit+0x195/0x1e0 [ 135.807655][ T4055] ? _parse_integer+0x2e/0x40 [ 135.807674][ T4055] ? kstrtoull+0x13b/0x1e0 [ 135.807693][ T4055] ? kstrtouint+0x78/0xf0 [ 135.807712][ T4055] ? ioctl_has_perm+0x1bc/0x500 [ 135.807730][ T4055] ? __asan_memcpy+0x5a/0x80 [ 135.807749][ T4055] ? ioctl_has_perm+0x408/0x500 [ 135.807766][ T4055] ? has_cap_mac_admin+0xd0/0xd0 [ 135.807787][ T4055] ? __kasan_check_write+0x18/0x20 [ 135.807805][ T4055] ? mutex_lock_killable+0x97/0x1d0 [ 135.807831][ T4055] ? __cfi_mutex_lock_killable+0x10/0x10 [ 135.807853][ T4055] ? proc_fail_nth_write+0x184/0x220 [ 135.807875][ T4055] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 135.807891][ T4055] kvm_vcpu_ioctl+0x7da/0x1000 [ 135.807902][ T4055] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.807912][ T4055] ? __cfi_vfs_write+0x10/0x10 [ 135.807922][ T4055] ? __kasan_check_write+0x18/0x20 [ 135.807931][ T4055] ? mutex_unlock+0x90/0x240 [ 135.807944][ T4055] ? __cfi_mutex_unlock+0x10/0x10 [ 135.807959][ T4055] ? bpf_lsm_file_ioctl+0xd/0x20 [ 135.807972][ T4055] ? security_file_ioctl+0x3e/0x110 [ 135.807987][ T4055] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 135.807996][ T4055] __se_sys_ioctl+0x135/0x1b0 [ 135.808009][ T4055] __x64_sys_ioctl+0x7f/0xa0 [ 135.808020][ T4055] x64_sys_call+0x1878/0x2ee0 [ 135.808029][ T4055] do_syscall_64+0x57/0xf0 [ 135.808040][ T4055] ? clear_bhb_loop+0x50/0xa0 [ 135.808055][ T4055] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.808069][ T4055] RIP: 0033:0x7f24df99e0d9 [ 135.808079][ T4055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.808088][ T4055] RSP: 002b:00007f24e083a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.808101][ T4055] RAX: ffffffffffffffda RBX: 00007f24dfc25fa0 RCX: 00007f24df99e0d9 [ 135.808109][ T4055] RDX: 0000200000000080 RSI: 000000004400ae8f RDI: 0000000000000005 [ 135.808116][ T4055] RBP: 00007f24e083a090 R08: 0000000000000000 R09: 0000000000000000 [ 135.808129][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.808136][ T4055] R13: 00007f24dfc26038 R14: 00007f24dfc25fa0 R15: 00007ffee10a0708 [ 135.808145][ T4055] [ 136.267689][ T36] audit: type=1400 audit(1786030009.699:975): avc: denied { bind } for pid=4056 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.365046][ T4062] fuse: Bad value for 'user_id' [ 136.369964][ T4062] fuse: Bad value for 'user_id' [ 136.407655][ T4068] rust_binder: 4067:4068 no such ref 0 [ 136.413360][ T4068] rust_binder: 4067:4068 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 136.421465][ T4068] rust_binder: 4067:4068 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.456352][ T4070] kvm: kvm [4069]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 136.464985][ T4070] kvm: kvm [4069]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 136.503307][ T36] audit: type=1400 audit(1786030009.939:976): avc: denied { attach_queue } for pid=4074 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 136.504803][ T4075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.656451][ T4087] fuse: Bad value for 'user_id' [ 136.661473][ T4087] fuse: Bad value for 'user_id' [ 136.890139][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 137.041122][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.052286][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.062094][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.080138][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.098405][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.113928][ T4098] overlayfs: missing 'lowerdir' [ 137.119680][ T10] usb 4-1: config 0 descriptor?? [ 137.529254][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.536848][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.544327][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.551848][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.559284][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.566800][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.574265][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.581833][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.589286][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.596826][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.604298][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.611852][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.619276][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.626807][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 137.634402][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 137.643656][ T10] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 137.838232][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.846988][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.141742][ T10] usb 4-1: USB disconnect, device number 64 [ 138.390870][ T4121] fuse: Bad value for 'fd' [ 138.409711][ T4125] rust_binder: 4124:4125 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.417991][ T4125] rust_binder: 4124:4125 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 138.444001][ T4129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.462605][ T4129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.910212][ T468] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 139.057081][ T4140] fuse: Bad value for 'fd' [ 139.067349][ T468] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.101890][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.111088][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.118374][ T468] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.136993][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.144427][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.152223][ T468] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.162155][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.170890][ T468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.185632][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.194611][ T468] usb 4-1: config 0 descriptor?? [ 139.201189][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.209493][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.217091][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.224957][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.232960][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.240492][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.247955][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.255482][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.263049][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.270574][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.278042][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.285597][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.293008][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.300535][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.308006][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.315563][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.323029][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.330545][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.338015][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.345654][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.353189][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.360653][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.368081][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.375614][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.383032][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.390694][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.398189][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.405757][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.422602][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.445793][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.459711][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.477432][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.484899][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.492629][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.500341][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.507814][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.515285][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.522787][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.530217][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.537688][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.545147][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.552625][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.560016][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.567588][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.575024][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.582556][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.589924][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.597449][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.604896][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.612400][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.620518][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.627980][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.635463][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.642989][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.650420][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.664758][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.680256][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.696030][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.712900][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.727153][ T4150] overlay: filesystem on ./file0 not supported as upperdir [ 139.743926][ T4163] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1409'. [ 139.776563][ T4165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.786945][ T4167] fuse: Bad value for 'fd' [ 139.796495][ T4165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.845624][ T4176] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1416'. [ 139.855410][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.864370][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.872944][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.881460][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.092174][ T4184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.100841][ T4184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.237462][ T4187] fuse: Bad value for 'fd' [ 140.353102][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.371395][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.397916][ T4210] fuse: Bad value for 'fd' [ 140.477426][ T4224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.494493][ T4224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.514004][ T4231] fuse: Bad value for 'fd' [ 140.599031][ T36] audit: type=1400 audit(1786030014.029:977): avc: denied { map } for pid=4238 comm="syz.1.1444" path="socket:[56298]" dev="sockfs" ino=56298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 140.742266][ T4252] fuse: Invalid rootmode [ 141.022670][ T4268] 8021q: VLANs not supported on ip6gre0 [ 141.049607][ T4272] fuse: Invalid rootmode [ 141.201659][ T4274] overlayfs: failed to resolve './cgroup': -2 [ 141.689544][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.699230][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.978977][ T36] audit: type=1400 audit(1786030015.409:978): avc: denied { mount } for pid=4292 comm="syz.1.1465" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 142.016493][ T4297] fuse: Invalid rootmode [ 142.652249][ T4328] fuse: Bad value for 'rootmode' [ 142.712775][ T36] audit: type=1400 audit(1786030016.149:979): avc: denied { unlink } for pid=539 comm="syz-executor" name="ublkc1" dev="devtmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.778687][ T543] usb 3-1: USB disconnect, device number 37 [ 143.046347][ T36] audit: type=1400 audit(1786030016.479:980): avc: denied { mounton } for pid=4343 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.084283][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.091443][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.098686][ T4343] bridge_slave_0: entered allmulticast mode [ 143.105328][ T4343] bridge_slave_0: entered promiscuous mode [ 143.112079][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.120919][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.128069][ T4343] bridge_slave_1: entered allmulticast mode [ 143.134461][ T4343] bridge_slave_1: entered promiscuous mode [ 143.169754][ T4348] fuse: Bad value for 'rootmode' [ 143.201260][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.208337][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.215656][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.221140][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.222721][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.231591][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.267155][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.274591][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.283869][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.290961][ T797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.300621][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.307682][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.333656][ T4343] veth0_vlan: entered promiscuous mode [ 143.345059][ T4343] veth1_macvtap: entered promiscuous mode [ 143.364255][ T36] audit: type=1400 audit(1786030016.799:981): avc: denied { mounton } for pid=4343 comm="syz-executor" path="/root/syzkaller.GKMHXb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.405156][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 143.415742][ T36] audit: type=1400 audit(1786030016.849:982): avc: denied { setopt } for pid=4355 comm="syz.4.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.534777][ T4367] fuse: Bad value for 'rootmode' [ 143.556918][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 143.750331][ T543] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 143.839561][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.848260][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.921576][ T543] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.929264][ T543] usb 5-1: can't read configurations, error -61 [ 144.070164][ T543] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 144.231512][ T543] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.242991][ T36] audit: type=1400 audit(1786030017.679:983): avc: denied { accept } for pid=4392 comm="syz.0.1509" laddr=172.20.20.46 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 144.248851][ T543] usb 5-1: can't read configurations, error -61 [ 144.294886][ T543] usb usb5-port1: attempt power cycle [ 144.406737][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.424032][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.443990][ T4408] fuse: Unknown parameter 'use00000000000000000000' [ 144.462606][ T468] usb 4-1: string descriptor 0 read error: -32 [ 144.650183][ T543] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 144.681896][ T543] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.689588][ T543] usb 5-1: can't read configurations, error -61 [ 144.820170][ T543] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 144.841857][ T543] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.849548][ T543] usb 5-1: can't read configurations, error -61 [ 144.855985][ T543] usb usb5-port1: unable to enumerate USB device [ 145.057077][ T4432] fuse: Unknown parameter 'use00000000000000000000' [ 145.087010][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.095595][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.662009][ T4458] fuse: Unknown parameter 'use00000000000000000000' [ 145.882470][ T310] bridge_slave_1: left allmulticast mode [ 145.888164][ T310] bridge_slave_1: left promiscuous mode [ 145.894061][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.902058][ T310] bridge_slave_0: left allmulticast mode [ 145.907804][ T310] bridge_slave_0: left promiscuous mode [ 145.913729][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.001667][ T310] veth1_macvtap: left promiscuous mode [ 146.443285][ T4533] fuse: Unknown parameter 'user_i00000000000000000000' [ 146.615485][ T4551] rust_binder: 4550:4551 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 146.700133][ T4560] fuse: Unknown parameter 'user_i00000000000000000000' [ 146.980183][ T317] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 147.131505][ T317] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 147.139083][ T317] usb 5-1: can't read configurations, error -61 [ 147.270191][ T317] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 147.421649][ T317] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 147.429263][ T317] usb 5-1: can't read configurations, error -61 [ 147.436075][ T317] usb usb5-port1: attempt power cycle [ 147.472145][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.479267][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.486588][ T4580] bridge_slave_0: entered allmulticast mode [ 147.493294][ T4580] bridge_slave_0: entered promiscuous mode [ 147.500009][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.507464][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.514971][ T4580] bridge_slave_1: entered allmulticast mode [ 147.521579][ T4580] bridge_slave_1: entered promiscuous mode [ 147.528040][ T310] bridge_slave_1: left allmulticast mode [ 147.536967][ T310] bridge_slave_1: left promiscuous mode [ 147.542805][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.550755][ T310] bridge_slave_0: left allmulticast mode [ 147.556418][ T310] bridge_slave_0: left promiscuous mode [ 147.562304][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.644075][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.651167][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.658407][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.665445][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.675160][ T310] tipc: Disabling bearer [ 147.680663][ T310] tipc: Left network mode [ 147.686309][ T310] veth1_macvtap: left promiscuous mode [ 147.691901][ T310] veth0_vlan: left promiscuous mode [ 147.733333][ T797] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.740659][ T797] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.749716][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.756828][ T839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.766972][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.774058][ T839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.790549][ T317] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 147.801969][ T4580] veth0_vlan: entered promiscuous mode [ 147.812302][ T4580] veth1_macvtap: entered promiscuous mode [ 147.823291][ T317] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 147.831162][ T317] usb 5-1: can't read configurations, error -61 [ 147.890381][ T4591] fuse: Unknown parameter 'user_i00000000000000000000' [ 147.901872][ T310] ------------[ cut here ]------------ [ 147.907411][ T310] WARNING: CPU: 1 PID: 310 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 147.908012][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 147.917457][ T310] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.917478][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Not tainted syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 147.917505][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.917519][ T310] Workqueue: netns cleanup_net [ 147.956810][ T310] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 147.962871][ T310] Code: e8 c1 62 d6 fc 4b 83 3c 3e 00 75 19 e8 45 9e 7d fc 49 81 ff f8 07 00 00 74 1b e8 37 9e 7d fc 49 83 c7 08 eb c9 e8 2c 9e 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 147.982547][ T310] RSP: 0018:ffffc9000b76fb90 EFLAGS: 00010293 [ 147.988632][ T310] RAX: ffffffff8509d394 RBX: ffff88812f1a91c0 RCX: ffff88810cfb0000 [ 147.996786][ T310] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881047807e0 [ 148.001757][ T543] usb 4-1: USB disconnect, device number 65 [ 148.004853][ T310] RBP: ffffc9000b76fbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 148.011074][ T36] audit: type=1400 audit(1786030021.379:984): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3074]" dev="pipefs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 148.018647][ T310] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 148.018664][ T310] R13: dffffc0000000000 R14: ffff888104780000 R15: 00000000000007e0 [ 148.018678][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 148.066615][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.067900][ T10] usb 1-1: USB disconnect, device number 61 [ 148.073259][ T310] CR2: 00007f107d0c1bd0 CR3: 000000010cf54000 CR4: 00000000003526b0 [ 148.087134][ T310] Call Trace: [ 148.090457][ T310] [ 148.093399][ T310] cleanup_net+0x6ba/0xc90 [ 148.097838][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 148.102839][ T310] ? kick_pool+0x3b7/0x540 [ 148.107276][ T310] process_scheduled_works+0x7f7/0x1060 [ 148.112885][ T310] worker_thread+0xc99/0x13f0 [ 148.117584][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 148.123365][ T310] ? __kasan_check_read+0x15/0x20 [ 148.128420][ T310] kthread+0x2c7/0x360 [ 148.132552][ T310] ? __cfi_worker_thread+0x10/0x10 [ 148.137687][ T310] ? __cfi_kthread+0x10/0x10 [ 148.142434][ T310] ret_from_fork+0x67/0xa0 [ 148.146881][ T310] ? __cfi_kthread+0x10/0x10 [ 148.151582][ T310] ret_from_fork_asm+0x1a/0x30 [ 148.156371][ T310] [ 148.159389][ T310] ---[ end trace 0000000000000000 ]--- [ 148.257282][ T317] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 148.295671][ T310] ------------[ cut here ]------------ [ 148.301206][ T310] WARNING: CPU: 1 PID: 310 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 148.311374][ T310] Modules linked in: [ 148.315299][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 148.328455][ T310] Tainted: [W]=WARN [ 148.332300][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.342393][ T310] Workqueue: netns cleanup_net [ 148.347190][ T310] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 148.353291][ T310] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 9d 7d fc 49 81 ff f8 07 00 00 74 1b e8 e2 9d 7d fc 49 83 c7 08 eb c5 e8 d7 9d 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 9d 7d fc 5b 41 5c 41 5e 41 [ 148.372965][ T310] RSP: 0018:ffffc9000b76fb90 EFLAGS: 00010293 [ 148.379055][ T310] RAX: ffffffff8509d3e9 RBX: ffff888104780800 RCX: ffff88810cfb0000 [ 148.387198][ T310] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104780808 [ 148.395289][ T310] RBP: ffffc9000b76fbb0 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 148.403310][ T310] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: dffffc0000000000 [ 148.411320][ T310] R13: dffffc0000000000 R14: ffff888104780000 R15: 0000000000000008 [ 148.419307][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 148.428283][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.434940][ T310] CR2: 00007f107d0c1bd0 CR3: 000000010cb2e000 CR4: 00000000003526b0 [ 148.442978][ T310] Call Trace: [ 148.446270][ T310] [ 148.449205][ T310] cleanup_net+0x6ba/0xc90 [ 148.453684][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 148.458639][ T310] ? kick_pool+0x3b7/0x540 [ 148.463152][ T310] process_scheduled_works+0x7f7/0x1060 [ 148.468728][ T310] worker_thread+0xc99/0x13f0 [ 148.473444][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 148.479174][ T310] ? __kasan_check_read+0x15/0x20 [ 148.484212][ T310] kthread+0x2c7/0x360 [ 148.488284][ T310] ? __cfi_worker_thread+0x10/0x10 [ 148.493448][ T310] ? __cfi_kthread+0x10/0x10 [ 148.498041][ T310] ret_from_fork+0x67/0xa0 [ 148.502508][ T310] ? __cfi_kthread+0x10/0x10 [ 148.507107][ T310] ret_from_fork_asm+0x1a/0x30 [ 148.511884][ T310] [ 148.514900][ T310] ---[ end trace 0000000000000000 ]--- [ 148.528909][ T310] ------------[ cut here ]------------ [ 148.534442][ T310] WARNING: CPU: 0 PID: 310 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 148.544075][ T310] Modules linked in: [ 148.547986][ T310] CPU: 0 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 148.561258][ T310] Tainted: [W]=WARN [ 148.565061][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.575135][ T310] Workqueue: netns cleanup_net [ 148.579923][ T310] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 148.585491][ T310] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 148.605132][ T310] RSP: 0018:ffffc9000b76fb70 EFLAGS: 00010293 [ 148.611246][ T310] RAX: ffffffff84ef154e RBX: ffff88812f1a91c0 RCX: ffff88810cfb0000 [ 148.619231][ T310] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810cfb0000 [ 148.627390][ T310] RBP: ffffc9000b76fb98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 148.635414][ T310] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 148.643425][ T310] R13: dffffc0000000000 R14: ffff88812f1a9dc0 R15: dffffc0000000000 [ 148.651437][ T310] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 148.660406][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.666997][ T310] CR2: 000055b401329af8 CR3: 000000010cb2e000 CR4: 00000000003526b0 [ 148.674990][ T310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.682998][ T310] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 148.691000][ T310] Call Trace: [ 148.694285][ T310] [ 148.697222][ T310] xfrm_net_exit+0x31/0x80 [ 148.701840][ T310] cleanup_net+0x6ba/0xc90 [ 148.706277][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 148.711265][ T310] ? kick_pool+0x3b7/0x540 [ 148.715708][ T310] process_scheduled_works+0x7f7/0x1060 [ 148.721291][ T310] worker_thread+0xc99/0x13f0 [ 148.725983][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 148.731730][ T310] ? __kasan_check_read+0x15/0x20 [ 148.736783][ T310] kthread+0x2c7/0x360 [ 148.740907][ T310] ? __cfi_worker_thread+0x10/0x10 [ 148.746027][ T310] ? __cfi_kthread+0x10/0x10 [ 148.750636][ T310] ret_from_fork+0x67/0xa0 [ 148.755062][ T310] ? __cfi_kthread+0x10/0x10 [ 148.759667][ T310] ret_from_fork_asm+0x1a/0x30 [ 148.764466][ T310] [ 148.767491][ T310] ---[ end trace 0000000000000000 ]--- [ 148.773349][ T310] ------------[ cut here ]------------ [ 148.778833][ T310] WARNING: CPU: 1 PID: 310 at net/xfrm/xfrm_state.c:3222 xfrm_state_fini+0x2d6/0x310 [ 148.788451][ T310] Modules linked in: [ 148.792408][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 148.805567][ T310] Tainted: [W]=WARN [ 148.809405][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.819489][ T310] Workqueue: netns cleanup_net [ 148.824288][ T310] RIP: 0010:xfrm_state_fini+0x2d6/0x310 [ 148.829836][ T310] Code: 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc 0f 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c 98 fc <0f> 0b e9 8c fe ff ff e8 4e 5c 98 fc 0f 0b e9 f9 fe ff ff e8 42 5c [ 148.849476][ T310] RSP: 0018:ffffc9000b76fb70 EFLAGS: 00010293 [ 148.855581][ T310] RAX: ffffffff84ef1566 RBX: ffff88812f1a91c0 RCX: ffff88810cfb0000 [ 148.863759][ T310] RDX: 0000000000000000 RSI: ffff8881072f4080 RDI: ffff8881000418c0 [ 148.871901][ T310] RBP: ffffc9000b76fb98 R08: 000000002e4a15bc R09: 00000000870d4476 [ 148.879888][ T310] R10: 000000000000000d R11: ffffffff81759ed0 R12: ffff8881072f4100 [ 148.887896][ T310] R13: 1ffff11025e353bc R14: 0000000000000040 R15: ffff88812f1a9de0 [ 148.895898][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 148.904845][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.911456][ T310] CR2: 00007f107d0c1bd0 CR3: 000000010cb2e000 CR4: 00000000003526b0 [ 148.919439][ T310] Call Trace: [ 148.922738][ T310] [ 148.925680][ T310] xfrm_net_exit+0x31/0x80 [ 148.930126][ T310] cleanup_net+0x6ba/0xc90 [ 148.934562][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 148.939507][ T310] ? kick_pool+0x3b7/0x540 [ 148.944044][ T310] process_scheduled_works+0x7f7/0x1060 [ 148.949663][ T310] worker_thread+0xc99/0x13f0 [ 148.954400][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 148.960169][ T310] ? __kasan_check_read+0x15/0x20 [ 148.965200][ T310] kthread+0x2c7/0x360 [ 148.969260][ T310] ? __cfi_worker_thread+0x10/0x10 [ 148.974392][ T310] ? __cfi_kthread+0x10/0x10 [ 148.979030][ T310] ret_from_fork+0x67/0xa0 [ 148.983498][ T310] ? __cfi_kthread+0x10/0x10 [ 148.988112][ T310] ret_from_fork_asm+0x1a/0x30 [ 148.992899][ T310] [ 148.995928][ T310] ---[ end trace 0000000000000000 ]--- [ 149.101526][ T317] usb 5-1: device descriptor read/8, error -71 [ 149.111274][ T310] bridge_slave_1: left allmulticast mode [ 149.116956][ T310] bridge_slave_1: left promiscuous mode [ 149.122850][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.130414][ T310] bridge_slave_0: left allmulticast mode [ 149.136048][ T310] bridge_slave_0: left promiscuous mode [ 149.141707][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.149319][ T310] bridge_slave_1: left allmulticast mode [ 149.155018][ T310] bridge_slave_1: left promiscuous mode [ 149.160781][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.168142][ T310] bridge_slave_0: left allmulticast mode [ 149.173904][ T310] bridge_slave_0: left promiscuous mode [ 149.180485][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.188270][ T310] bridge_slave_1: left allmulticast mode [ 149.193984][ T310] bridge_slave_1: left promiscuous mode [ 149.199577][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.207183][ T310] bridge_slave_0: left allmulticast mode [ 149.212852][ T310] bridge_slave_0: left promiscuous mode [ 149.218454][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.226099][ T310] bridge_slave_1: left allmulticast mode [ 149.231809][ T310] bridge_slave_1: left promiscuous mode [ 149.237403][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.240702][ T317] usb 5-1: device descriptor read/8, error -71 [ 149.250739][ T310] bridge_slave_0: left allmulticast mode [ 149.256364][ T310] bridge_slave_0: left promiscuous mode [ 149.262031][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.360779][ T317] usb usb5-port1: unable to enumerate USB device [ 149.546305][ T310] veth1_macvtap: left promiscuous mode [ 149.551882][ T310] veth0_vlan: left promiscuous mode [ 149.557337][ T310] veth1_macvtap: left promiscuous mode [ 149.562905][ T310] veth0_vlan: left promiscuous mode [ 149.568477][ T310] veth1_macvtap: left promiscuous mode [ 149.574110][ T310] veth0_vlan: left promiscuous mode [ 149.579535][ T310] veth1_macvtap: left promiscuous mode [ 149.585142][ T310] veth0_vlan: left promiscuous mode [ 150.117939][ T310] ------------[ cut here ]------------ [ 150.123451][ T310] WARNING: CPU: 1 PID: 310 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 150.132951][ T310] Modules linked in: [ 150.136849][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Tainted: G W syzkaller #0 67f5df147bfe8fe71cdb2f404f013e40b3f12e05 [ 150.150019][ T310] Tainted: [W]=WARN [ 150.153837][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.163962][ T310] Workqueue: netns cleanup_net [ 150.168726][ T310] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 150.174286][ T310] Code: 3c 20 00 74 08 48 89 df e8 ff 20 f1 fc 48 8b 3b e8 27 13 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 89 b7 00 cc e8 72 5c 98 fc <0f> 0b e9 b0 fd ff ff e8 66 5c 98 fc 0f 0b e9 18 fe ff ff e8 5a 5c [ 150.193934][ T310] RSP: 0018:ffffc9000b76fb70 EFLAGS: 00010293 [ 150.200028][ T310] RAX: ffffffff84ef154e RBX: ffff88812f1dd8c0 RCX: ffff88810cfb0000 [ 150.208037][ T310] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810cfb0000 [ 150.216035][ T310] RBP: ffffc9000b76fb98 R08: ffffffff87d427e7 R09: 1ffffffff0fa84fc [ 150.224024][ T310] R10: dffffc0000000000 R11: fffffbfff0fa84fd R12: 1ffffffff0fa8250 [ 150.232446][ T310] R13: dffffc0000000000 R14: ffff88812f1de4c0 R15: dffffc0000000000 [ 150.240426][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 150.249353][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.255950][ T310] CR2: 00007f107d0c1bd0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 150.263946][ T310] Call Trace: [ 150.267212][ T310] [ 150.270182][ T310] xfrm_net_exit+0x31/0x80 [ 150.274610][ T310] cleanup_net+0x6ba/0xc90 [ 150.279037][ T310] ? __cfi_cleanup_net+0x10/0x10 [ 150.283996][ T310] ? kick_pool+0xb9/0x540 [ 150.288327][ T310] process_scheduled_works+0x7f7/0x1060 [ 150.293893][ T310] worker_thread+0xc99/0x13f0 [ 150.298571][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 150.304315][ T310] ? __kasan_check_read+0x15/0x20 [ 150.309338][ T310] kthread+0x2c7/0x360 [ 150.313420][ T310] ? __cfi_worker_thread+0x10/0x10 [ 150.318533][ T310] ? __cfi_kthread+0x10/0x10 [ 150.323143][ T310] ret_from_fork+0x67/0xa0 [ 150.327569][ T310] ? __cfi_kthread+0x10/0x10 [ 150.332181][ T310] ret_from_fork_asm+0x1a/0x30 [ 150.336944][ T310] [ 150.339945][ T310] ---[ end trace 0000000000000000 ]---