last executing test programs: 29.303684053s ago: executing program 3 (id=495): creat(&(0x7f0000000080)='./file0\x00', 0x47) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x10000, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7f6f, &(0x7f00000003c0)={0x0, 0x441b, 0x8000, 0x0, 0x374}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_ublk_add_dev(0xffffffffffffffff, r3, r1, r2, &(0x7f00000002c0)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdad, 0x0, 0x0, 0x1000, 0x1cca, 0x0, 0x0, 0xa}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa028, 0x20, 0x80002, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 29.104747247s ago: executing program 3 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) connect$pppl2tp(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15) mkdir(0x0, 0x1ff) renameat(r2, 0x0, r2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000045c0)=0x40) 29.085859478s ago: executing program 3 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x200080c1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x2) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b00)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000001440), 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 29.027268979s ago: executing program 3 (id=499): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x808) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x13) close(r0) creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) 28.220484508s ago: executing program 3 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0xffffffff, 0x4) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0xfffffe23) write(r1, &(0x7f0000000000)="01", 0x1) ioctl(r0, 0x40104d09, &(0x7f0000000140)="804dd85682bd50e2365c5484aa8e2c2d1dbbe3cd7ce837152bf5f563b1c0c2e305ea3482ec2fd3abbc") 28.074417462s ago: executing program 3 (id=508): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6f9, 0x0, 0x0, 0x1000, 0xb}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 21.846931908s ago: executing program 2 (id=582): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 21.809891208s ago: executing program 2 (id=583): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 21.75472122s ago: executing program 2 (id=584): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r1], 0x0) 20.080947789s ago: executing program 2 (id=600): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 19.971011981s ago: executing program 2 (id=602): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x171, 0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x100fb, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x8001af84, 0x0) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) 18.894795077s ago: executing program 2 (id=611): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 12.995060716s ago: executing program 32 (id=508): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6f9, 0x0, 0x0, 0x1000, 0xb}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.559498367s ago: executing program 33 (id=611): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.865848786s ago: executing program 1 (id=732): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aafbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "0011ccddeeff00112233445566778899aabbccddceff00112233445566778899aabbccddeeff00112233445566926a99aabbccddeeff00000000008000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x65, 0x58425c31ab49816a, 0x30, 0x30, 0x62, 0x31, 0x30, 0x30, 0x67, 0x31, 0x30, 0x30, 0x30, 0x30, 0x66, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1.858134966s ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.70759964s ago: executing program 1 (id=734): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 1.70147295s ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1.538461484s ago: executing program 0 (id=735): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1.538244894s ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.385684428s ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1.238704191s ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.084380885s ago: executing program 1 (id=736): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)="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", 0xb44}], 0x1) 1.084156195s ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 939.192168ms ago: executing program 0 (id=737): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20050001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 938.815178ms ago: executing program 1 (id=738): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 938.549488ms ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 778.501002ms ago: executing program 0 (id=739): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 778.104952ms ago: executing program 1 (id=740): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 777.921902ms ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 600.409636ms ago: executing program 0 (id=741): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) getdents64(r0, 0x0, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 597.648176ms ago: executing program 1 (id=742): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 597.552676ms ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 341.985052ms ago: executing program 0 (id=743): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r2, r3, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r6}}], 0x1, 0x0, 0x0) 338.423312ms ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 153.009297ms ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.14814ms ago: executing program 0 (id=744): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x2094203512440ad, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 0s ago: executing program 4 (id=666): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): s permissive=1 [ 15.499391][ T36] audit: type=1400 audit(1789038004.720:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 23.704316][ T36] audit: type=1400 audit(1789038012.930:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.707793][ T286] cgroup: Unknown subsys name 'net' [ 23.727030][ T36] audit: type=1400 audit(1789038012.940:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.754385][ T36] audit: type=1400 audit(1789038012.960:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.754968][ T286] cgroup: Unknown subsys name 'devices' [ 23.857081][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.862704][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.959245][ T36] audit: type=1400 audit(1789038013.190:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.982445][ T36] audit: type=1400 audit(1789038013.190:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.007203][ T36] audit: type=1400 audit(1789038013.190:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.037362][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.046281][ T36] audit: type=1400 audit(1789038013.280:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.070418][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.071824][ T36] audit: type=1400 audit(1789038013.280:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.106003][ T36] audit: type=1400 audit(1789038013.280:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.131541][ T36] audit: type=1400 audit(1789038013.280:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.968110][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.975341][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.982425][ T293] bridge_slave_0: entered allmulticast mode [ 24.988832][ T293] bridge_slave_0: entered promiscuous mode [ 24.998260][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.005326][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.012384][ T293] bridge_slave_1: entered allmulticast mode [ 25.018726][ T293] bridge_slave_1: entered promiscuous mode [ 25.045179][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.052247][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.059469][ T294] bridge_slave_0: entered allmulticast mode [ 25.065810][ T294] bridge_slave_0: entered promiscuous mode [ 25.078374][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.085482][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.092569][ T296] bridge_slave_0: entered allmulticast mode [ 25.098915][ T296] bridge_slave_0: entered promiscuous mode [ 25.106363][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.113413][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.120516][ T296] bridge_slave_1: entered allmulticast mode [ 25.126767][ T296] bridge_slave_1: entered promiscuous mode [ 25.132852][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.139966][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.147091][ T294] bridge_slave_1: entered allmulticast mode [ 25.153329][ T294] bridge_slave_1: entered promiscuous mode [ 25.235098][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.242196][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.249482][ T295] bridge_slave_0: entered allmulticast mode [ 25.256012][ T295] bridge_slave_0: entered promiscuous mode [ 25.262538][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.269649][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.276766][ T295] bridge_slave_1: entered allmulticast mode [ 25.282988][ T295] bridge_slave_1: entered promiscuous mode [ 25.399631][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.406738][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.414037][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.421102][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.430744][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.437822][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.445127][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.452166][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.467190][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.474258][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.481578][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.488668][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.508594][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.515678][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.522947][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.530036][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.568298][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.576172][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.583993][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.591396][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.599184][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.606427][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.613992][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.621500][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.638652][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.645740][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.666281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.673355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.681727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.688819][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.700314][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.707440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.719899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.727151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.752522][ T295] veth0_vlan: entered promiscuous mode [ 25.761205][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.768274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.802678][ T294] veth0_vlan: entered promiscuous mode [ 25.810362][ T295] veth1_macvtap: entered promiscuous mode [ 25.820699][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.827793][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.842974][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.850045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.859715][ T294] veth1_macvtap: entered promiscuous mode [ 25.883881][ T293] veth0_vlan: entered promiscuous mode [ 25.915409][ T293] veth1_macvtap: entered promiscuous mode [ 25.923310][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.953170][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.979908][ T296] veth0_vlan: entered promiscuous mode [ 26.031852][ T296] veth1_macvtap: entered promiscuous mode [ 26.864765][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.024715][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 27.037406][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.051081][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.061222][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.075272][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 27.087347][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.101161][ T45] usb 1-1: config 0 descriptor?? [ 27.274710][ T360] futex_wake_op: syz.3.15 tries to shift op by 144; fix this program [ 27.512217][ T45] hid (null): unknown global tag 0xc [ 27.520181][ T45] hid (null): unknown global tag 0xc [ 27.530953][ T45] hid (null): unknown global tag 0xc [ 27.544335][ T45] hid (null): unknown global tag 0xc [ 27.599884][ T45] hid (null): unknown global tag 0xc [ 27.606055][ T45] hid (null): unknown global tag 0xc [ 27.611979][ T45] hid (null): unknown global tag 0xc [ 27.618562][ T45] hid (null): unknown global tag 0xc [ 27.624403][ T45] hid (null): unknown global tag 0xc [ 27.638444][ T45] hid (null): unknown global tag 0xc [ 27.644125][ T45] hid (null): unknown global tag 0xc [ 27.650874][ T45] hid (null): unknown global tag 0xc [ 27.657982][ T45] hid (null): unknown global tag 0xc [ 27.663873][ T45] hid (null): unknown global tag 0xc [ 27.670229][ T45] hid (null): unknown global tag 0xc [ 27.676782][ T45] hid (null): unknown global tag 0xc [ 27.682463][ T45] hid (null): unknown global tag 0xc [ 27.689593][ T45] hid (null): unknown global tag 0xc [ 27.696151][ T45] hid (null): unknown global tag 0xc [ 27.702021][ T45] hid (null): unknown global tag 0xc [ 27.713837][ T45] hid (null): unknown global tag 0xc [ 27.720331][ T45] hid (null): unknown global tag 0xc [ 27.727242][ T45] hid (null): unknown global tag 0xc [ 27.732882][ T45] hid (null): unknown global tag 0xc [ 27.746044][ T45] hid (null): unknown global tag 0xc [ 27.758662][ T45] hid (null): unknown global tag 0xc [ 27.771491][ T45] hid (null): unknown global tag 0xc [ 27.789196][ T45] hid (null): unknown global tag 0xc [ 27.803151][ T45] hid (null): unknown global tag 0xc [ 27.817532][ T45] hid (null): unknown global tag 0xc [ 27.830195][ T45] hid (null): unknown global tag 0xc [ 27.842356][ T45] hid (null): unknown global tag 0xc [ 27.854859][ T45] hid (null): unknown global tag 0xc [ 27.861374][ T45] hid (null): unknown global tag 0xc [ 27.878642][ T45] hid (null): unknown global tag 0xc [ 27.891436][ T45] hid (null): unknown global tag 0xc [ 27.897716][ T45] hid (null): unknown global tag 0xc [ 27.903405][ T45] hid (null): unknown global tag 0xc [ 27.910416][ T45] hid (null): unknown global tag 0xc [ 27.918649][ T45] hid (null): unknown global tag 0xc [ 27.924482][ T45] hid (null): unknown global tag 0xc [ 27.931263][ T45] hid (null): unknown global tag 0xc [ 27.974177][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input4 [ 28.041437][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5 [ 28.131893][ T45] kye 0003:0458:5011.0001: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 28.516189][ T376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 28.546308][ T376] kvm: pic: non byte read [ 28.551129][ T376] kvm: pic: non byte read [ 28.556104][ T376] kvm: pic: non byte read [ 28.560689][ T376] kvm: pic: non byte read [ 28.565576][ T376] kvm: pic: non byte read [ 28.570329][ T376] kvm: pic: non byte read [ 28.575015][ T376] kvm: pic: non byte read [ 28.579638][ T376] kvm: pic: level sensitive irq not supported [ 28.579722][ T376] kvm: pic: non byte read [ 28.633578][ T380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20'. [ 28.642688][ T380] FAULT_INJECTION: forcing a failure. [ 28.642688][ T380] name failslab, interval 1, probability 0, space 0, times 1 [ 28.657195][ T380] CPU: 0 UID: 0 PID: 380 Comm: syz.2.20 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 28.657232][ T380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.657259][ T380] Call Trace: [ 28.657267][ T380] [ 28.657276][ T380] __dump_stack+0x21/0x30 [ 28.657319][ T380] dump_stack_lvl+0x140/0x1c0 [ 28.657355][ T380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.657392][ T380] dump_stack+0x19/0x20 [ 28.657427][ T380] should_fail_ex+0x3c2/0x510 [ 28.657458][ T380] should_failslab+0xac/0x100 [ 28.657490][ T380] kmem_cache_alloc_noprof+0x42/0x410 [ 28.657516][ T380] ? leaf_walk_rcu+0x560/0x5a0 [ 28.657542][ T380] ? fib_trie_unmerge+0x233/0x1410 [ 28.657570][ T380] fib_trie_unmerge+0x233/0x1410 [ 28.657598][ T380] fib_unmerge+0xce/0x360 [ 28.657632][ T380] fib4_rule_configure+0x287/0xbb0 [ 28.657667][ T380] fib_nl_newrule+0x136a/0x1e50 [ 28.657695][ T380] ? __asan_memcpy+0x5a/0x80 [ 28.657721][ T380] ? avc_has_perm_noaudit+0x289/0x360 [ 28.657755][ T380] ? cred_has_capability+0x296/0x3a0 [ 28.657782][ T380] ? __cfi_fib_nl_newrule+0x10/0x10 [ 28.657813][ T380] ? mutex_lock+0x97/0x1d0 [ 28.657841][ T380] ? __cfi_mutex_lock+0x10/0x10 [ 28.657868][ T380] ? ns_capable+0x90/0xf0 [ 28.657891][ T380] ? netlink_net_capable+0x129/0x160 [ 28.657922][ T380] ? __cfi_fib_nl_newrule+0x10/0x10 [ 28.657947][ T380] rtnetlink_rcv_msg+0x8be/0xa40 [ 28.657974][ T380] ? __asan_memcpy+0x5a/0x80 [ 28.657999][ T380] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 28.658027][ T380] ? avc_has_perm+0x155/0x240 [ 28.658067][ T380] netlink_rcv_skb+0x24d/0x4e0 [ 28.658102][ T380] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 28.658130][ T380] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 28.658163][ T380] ? selinux_netlink_send+0x7df/0x8b0 [ 28.658203][ T380] ? netlink_autobind+0x1c0/0x1c0 [ 28.658240][ T380] ? is_vmalloc_addr+0x11/0x40 [ 28.658274][ T380] rtnetlink_rcv+0x20/0x30 [ 28.658298][ T380] netlink_unicast+0x8bf/0xa70 [ 28.658331][ T380] netlink_sendmsg+0x7d1/0xad0 [ 28.658367][ T380] ? __cfi_netlink_sendmsg+0x10/0x10 [ 28.658401][ T380] ? __futex_queue+0x19f/0x350 [ 28.658435][ T380] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 28.658463][ T380] ? security_socket_sendmsg+0x3d/0x100 [ 28.658500][ T380] ____sys_sendmsg+0x99e/0xa00 [ 28.658536][ T380] ? __import_iovec+0x5b9/0x7d0 [ 28.658558][ T380] ? __sys_sendmsg_sock+0x50/0x50 [ 28.658593][ T380] ? import_iovec+0x80/0xb0 [ 28.658616][ T380] ___sys_sendmsg+0x2a6/0x370 [ 28.658651][ T380] ? __sys_sendmsg+0x260/0x260 [ 28.658685][ T380] ? __cfi_futex_wait+0x10/0x10 [ 28.658714][ T380] ? __fget_files+0x2bc/0x330 [ 28.658746][ T380] __x64_sys_sendmsg+0x1be/0x2a0 [ 28.658781][ T380] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 28.658818][ T380] ? __kasan_check_write+0x18/0x20 [ 28.658843][ T380] ? fpregs_restore_userregs+0x11c/0x260 [ 28.658875][ T380] ? switch_fpu_return+0x12/0x20 [ 28.658905][ T380] x64_sys_call+0x2a4c/0x2ee0 [ 28.658928][ T380] do_syscall_64+0x57/0xf0 [ 28.658950][ T380] ? clear_bhb_loop+0x50/0xa0 [ 28.658980][ T380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.659009][ T380] RIP: 0033:0x7f246ed9e159 [ 28.659030][ T380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.659057][ T380] RSP: 002b:00007f246fc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.659085][ T380] RAX: ffffffffffffffda RBX: 00007f246f025fa0 RCX: 00007f246ed9e159 [ 28.659104][ T380] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 28.659120][ T380] RBP: 00007f246ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 28.659136][ T380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.659151][ T380] R13: 00007f246f026038 R14: 00007f246f025fa0 R15: 00007ffe4ba7cc08 [ 28.659173][ T380] [ 29.043909][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 29.407617][ T395] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 29.419194][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 29.419211][ T36] audit: type=1400 audit(1789038018.650:140): avc: denied { mount } for pid=394 comm="syz.3.26" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.456674][ T36] audit: type=1400 audit(1789038018.680:141): avc: denied { mount } for pid=394 comm="syz.3.26" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.478329][ T36] audit: type=1400 audit(1789038018.690:142): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.515406][ T36] audit: type=1400 audit(1789038018.750:143): avc: denied { map } for pid=396 comm="syz.3.27" path="pipe:[703]" dev="pipefs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 29.643772][ T36] audit: type=1400 audit(1789038018.870:144): avc: denied { create } for pid=401 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.664330][ T36] audit: type=1400 audit(1789038018.870:145): avc: denied { connect } for pid=401 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.692695][ T36] audit: type=1400 audit(1789038018.920:146): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 29.722416][ T36] audit: type=1400 audit(1789038018.950:147): avc: denied { create } for pid=405 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.745149][ T36] audit: type=1400 audit(1789038018.980:148): avc: denied { setopt } for pid=405 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.764378][ T36] audit: type=1400 audit(1789038018.980:149): avc: denied { bind } for pid=405 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.815208][ T310] usb 1-1: USB disconnect, device number 2 [ 30.375239][ T422] ======================================================= [ 30.375239][ T422] WARNING: The mand mount option has been deprecated and [ 30.375239][ T422] and is ignored by this kernel. Remove the mand [ 30.375239][ T422] option from the mount to silence this warning. [ 30.375239][ T422] ======================================================= [ 31.065350][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.234719][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 31.249248][ T310] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 31.258573][ T310] usb 1-1: config 0 has no interface number 0 [ 31.265692][ T310] usb 1-1: config 0 interface 184 has no altsetting 0 [ 31.275440][ T310] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.346262][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.354445][ T310] usb 1-1: Product: syz [ 31.364942][ T310] usb 1-1: Manufacturer: syz [ 31.374936][ T310] usb 1-1: SerialNumber: syz [ 31.385709][ T310] usb 1-1: config 0 descriptor?? [ 31.401841][ T310] smsc75xx v1.0.0 [ 32.013180][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 32.033083][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.184054][ T314] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 32.221031][ T459] fido_id[459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.115789][ T519] FAULT_INJECTION: forcing a failure. [ 33.115789][ T519] name failslab, interval 1, probability 0, space 0, times 0 [ 33.144875][ T519] CPU: 0 UID: 0 PID: 519 Comm: syz.2.73 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 33.144918][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.144935][ T519] Call Trace: [ 33.144943][ T519] [ 33.144952][ T519] __dump_stack+0x21/0x30 [ 33.144993][ T519] dump_stack_lvl+0x140/0x1c0 [ 33.145028][ T519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.145064][ T519] dump_stack+0x19/0x20 [ 33.145097][ T519] should_fail_ex+0x3c2/0x510 [ 33.145129][ T519] should_failslab+0xac/0x100 [ 33.145161][ T519] __kmalloc_node_noprof+0x69/0x500 [ 33.145190][ T519] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.145215][ T519] __kvmalloc_node_noprof+0x128/0x300 [ 33.145238][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 33.145278][ T519] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 33.145302][ T519] ? bpf_int_jit_compile+0x1ed/0x1450 [ 33.145329][ T519] bpf_int_jit_compile+0x377/0x1450 [ 33.145353][ T519] ? sk_filter_release_rcu+0x130/0x130 [ 33.145383][ T519] ? __cfi_bpf_int_jit_compile+0x10/0x10 [ 33.145409][ T519] ? bpf_prog_alloc_jited_linfo+0xbc/0x310 [ 33.145442][ T519] bpf_prog_select_runtime+0x373/0x690 [ 33.145472][ T519] ? kmemdup_array+0x79/0x160 [ 33.145493][ T519] bpf_prepare_filter+0xf42/0x1350 [ 33.145526][ T519] ? __cfi_seccomp_check_filter+0x10/0x10 [ 33.145559][ T519] ? bpf_prog_create+0x210/0x210 [ 33.145589][ T519] ? bpf_prog_store_orig_filter+0x14b/0x320 [ 33.145623][ T519] bpf_prog_create_from_user+0x1fc/0x2b0 [ 33.145656][ T519] ? __cfi_seccomp_check_filter+0x10/0x10 [ 33.145689][ T519] do_seccomp+0x79e/0xf20 [ 33.145719][ T519] ? __se_sys_futex+0x13c/0x320 [ 33.145753][ T519] ? prctl_set_seccomp+0x80/0x80 [ 33.145784][ T519] ? xfd_validate_state+0x68/0x140 [ 33.145821][ T519] ? __kasan_check_write+0x18/0x20 [ 33.145846][ T519] ? fpregs_restore_userregs+0x11c/0x260 [ 33.145877][ T519] __x64_sys_seccomp+0x7f/0x90 [ 33.145907][ T519] x64_sys_call+0x249b/0x2ee0 [ 33.145930][ T519] do_syscall_64+0x57/0xf0 [ 33.145952][ T519] ? clear_bhb_loop+0x50/0xa0 [ 33.145982][ T519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.146010][ T519] RIP: 0033:0x7f246ed9e159 [ 33.146030][ T519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.146051][ T519] RSP: 002b:00007f246fc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 33.146077][ T519] RAX: ffffffffffffffda RBX: 00007f246f025fa0 RCX: 00007f246ed9e159 [ 33.146096][ T519] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 33.146111][ T519] RBP: 00007f246ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 33.146125][ T519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.146140][ T519] R13: 00007f246f026038 R14: 00007f246f025fa0 R15: 00007ffe4ba7cc08 [ 33.146162][ T519] [ 33.637954][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 33.648995][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 33.658883][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 33.668389][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 33.677899][ T310] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 33.687368][ T310] usb 1-1: USB disconnect, device number 3 [ 33.696353][ T385] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.751860][ T533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 33.854743][ T385] usb 3-1: Using ep0 maxpacket: 32 [ 33.861781][ T385] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 33.870023][ T385] usb 3-1: config 0 has no interface number 0 [ 33.876349][ T385] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 33.887912][ T385] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 33.897047][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.905082][ T385] usb 3-1: Product: syz [ 33.909256][ T385] usb 3-1: Manufacturer: syz [ 33.913888][ T385] usb 3-1: SerialNumber: syz [ 33.919165][ T385] usb 3-1: config 0 descriptor?? [ 33.924442][ T528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.084751][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.134140][ T528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 34.236678][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.247753][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.257178][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.266390][ T9] usb 2-1: config 0 descriptor?? [ 34.475627][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 34.482477][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.491450][ T9] usb 2-1: USB disconnect, device number 2 [ 34.574746][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.724753][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 34.731148][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.741308][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.751774][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.760884][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.768967][ T31] usb 1-1: Product: syz [ 34.773158][ T31] usb 1-1: Manufacturer: syz [ 34.777942][ T31] usb 1-1: SerialNumber: syz [ 34.924754][ T314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.988978][ T31] usb 1-1: 0:2 : does not exist [ 34.996388][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 35.007815][ T31] usb 1-1: USB disconnect, device number 4 [ 35.020412][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.076076][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.087047][ T314] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 35.096214][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.105155][ T314] usb 2-1: config 0 descriptor?? [ 35.311940][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.320580][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.714432][ T36] kauditd_printk_skb: 455 callbacks suppressed [ 35.714453][ T36] audit: type=1400 audit(1789038024.940:605): avc: denied { bind } for pid=564 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.935155][ T314] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 35.942978][ T314] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 35.954768][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.959779][ T36] audit: type=1400 audit(1789038025.190:606): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.985611][ T36] audit: type=1400 audit(1789038025.190:607): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.008911][ T36] audit: type=1400 audit(1789038025.190:608): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.114727][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 36.121597][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.132560][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.142344][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.149426][ T385] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.155296][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.167794][ T385] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 36.174826][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.185998][ T385] asix 3-1:0.188: probe with driver asix failed with error -71 [ 36.201336][ T31] usb 1-1: config 0 descriptor?? [ 36.204192][ T385] usb 3-1: USB disconnect, device number 2 [ 36.313003][ T393] usb 2-1: USB disconnect, device number 3 [ 36.318910][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 36.615027][ T31] microsoft 0003:045E:07DA.0003: item fetching failed at offset 3/34 [ 36.623594][ T31] microsoft 0003:045E:07DA.0003: parse failed [ 36.629960][ T31] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 36.769388][ T569] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 36.780575][ T36] audit: type=1400 audit(1789038026.010:609): avc: denied { getopt } for pid=568 comm="syz.2.92" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.784527][ T569] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 36.800942][ T36] audit: type=1400 audit(1789038026.010:610): avc: denied { ioctl } for pid=568 comm="syz.2.92" path="socket:[6292]" dev="sockfs" ino=6292 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.854444][ T36] audit: type=1400 audit(1789038026.080:611): avc: denied { bind } for pid=570 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.864903][ T393] usb 1-1: USB disconnect, device number 5 [ 36.874570][ T571] FAULT_INJECTION: forcing a failure. [ 36.874570][ T571] name fail_futex, interval 1, probability 0, space 0, times 1 [ 36.894911][ T36] audit: type=1400 audit(1789038026.110:612): avc: denied { listen } for pid=570 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.914421][ T571] CPU: 1 UID: 0 PID: 571 Comm: syz.1.93 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 36.914453][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.914466][ T571] Call Trace: [ 36.914474][ T571] [ 36.914482][ T571] __dump_stack+0x21/0x30 [ 36.914519][ T571] dump_stack_lvl+0x140/0x1c0 [ 36.914549][ T571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.914581][ T571] dump_stack+0x19/0x20 [ 36.914611][ T571] should_fail_ex+0x3c2/0x510 [ 36.914640][ T571] should_fail+0xf/0x20 [ 36.914666][ T571] get_futex_key+0x178/0x940 [ 36.914702][ T571] ? __cfi_get_futex_key+0x10/0x10 [ 36.914733][ T571] ? __kasan_slab_free+0x6a/0x80 [ 36.914761][ T571] ? kmem_cache_free+0x1bd/0x4f0 [ 36.914786][ T571] ? __wake_up+0x169/0x190 [ 36.914809][ T571] futex_wait_setup+0xae/0x260 [ 36.914830][ T571] ? audit_log_end+0x1f1/0x240 [ 36.914853][ T571] ? __cfi_futex_wait_setup+0x10/0x10 [ 36.914873][ T571] ? common_lsm_audit+0x14c8/0x18b0 [ 36.914920][ T571] ? __asan_memcpy+0x5a/0x80 [ 36.914954][ T571] __futex_wait+0x12c/0x3d0 [ 36.914977][ T571] ? __cfi___futex_wait+0x10/0x10 [ 36.915001][ T571] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.915024][ T571] ? __kasan_check_read+0x15/0x20 [ 36.915049][ T571] ? futex_wake+0x627/0x950 [ 36.915071][ T571] futex_wait+0x128/0x7c0 [ 36.915093][ T571] ? __cfi_futex_wait+0x10/0x10 [ 36.915116][ T571] ? avc_has_perm+0x1ec/0x240 [ 36.915144][ T571] ? avc_has_perm+0x211/0x240 [ 36.915174][ T571] ? __cfi_avc_has_perm+0x10/0x10 [ 36.915204][ T571] do_futex+0x32a/0x510 [ 36.915237][ T571] ? __cfi_do_futex+0x10/0x10 [ 36.915269][ T571] ? selinux_socket_listen+0x281/0x380 [ 36.915303][ T571] __se_sys_futex+0x13c/0x320 [ 36.915336][ T571] ? __x64_sys_futex+0x110/0x110 [ 36.915368][ T571] ? _raw_spin_unlock_bh+0x54/0x60 [ 36.915394][ T571] __x64_sys_futex+0xe9/0x110 [ 36.915427][ T571] x64_sys_call+0x227f/0x2ee0 [ 36.915450][ T571] do_syscall_64+0x57/0xf0 [ 36.915471][ T571] ? clear_bhb_loop+0x50/0xa0 [ 36.915502][ T571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.915530][ T571] RIP: 0033:0x7fe3c979e159 [ 36.915550][ T571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.915570][ T571] RSP: 002b:00007fe3ca5a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.915595][ T571] RAX: ffffffffffffffda RBX: 00007fe3c9a25fa8 RCX: 00007fe3c979e159 [ 36.915614][ T571] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3c9a25fa8 [ 36.915630][ T571] RBP: 00007fe3c9a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.915646][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.915660][ T571] R13: 00007fe3c9a26038 R14: 00007ffd76549690 R15: 00007ffd76549778 [ 36.915682][ T571] [ 37.220991][ T36] audit: type=1400 audit(1789038026.450:613): avc: denied { mount } for pid=576 comm="syz.1.95" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.243339][ T36] audit: type=1400 audit(1789038026.450:614): avc: denied { search } for pid=576 comm="syz.1.95" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.321206][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.331217][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.341129][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.350422][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.359765][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.369213][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.378501][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.393630][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.407338][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.416701][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.426285][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.435529][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.444592][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.453839][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.463086][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.472326][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.481538][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.491279][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.500491][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.509959][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.519217][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.528803][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.538157][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.547626][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.556985][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.566320][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.581897][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.591315][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.600489][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.615221][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.624876][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.633982][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.649745][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.659281][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.668841][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.682759][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.695431][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.704344][ T592] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 37.719781][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.739356][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.756119][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.765560][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.775116][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.784422][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.795877][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.808063][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.817428][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.828624][ T596] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 37.829277][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.846432][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.856559][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.869998][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.879435][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.889906][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.899335][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.912844][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.922334][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.931713][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.941101][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.950475][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.959841][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.969234][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.981573][ T599] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 37.989941][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 37.998781][ T599] netlink: 136 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.008490][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.023331][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.036996][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.046874][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.063790][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.075427][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.104452][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.114358][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.145366][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.162774][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.172135][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.183882][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.193550][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.204388][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.214191][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.225021][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.234365][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.255213][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.296048][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.365269][ T581] 9pnet_fd: p9_fd_create_tcp (581): problem connecting socket to 127.0.0.1 [ 38.374084][ T613] FAULT_INJECTION: forcing a failure. [ 38.374084][ T613] name failslab, interval 1, probability 0, space 0, times 0 [ 38.394598][ T613] CPU: 0 UID: 0 PID: 613 Comm: syz.1.106 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 38.394635][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.394650][ T613] Call Trace: [ 38.394657][ T613] [ 38.394669][ T613] __dump_stack+0x21/0x30 [ 38.394708][ T613] dump_stack_lvl+0x140/0x1c0 [ 38.394743][ T613] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.394778][ T613] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 38.394830][ T613] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.394871][ T613] dump_stack+0x19/0x20 [ 38.394905][ T613] should_fail_ex+0x3c2/0x510 [ 38.394937][ T613] should_failslab+0xac/0x100 [ 38.394970][ T613] __kmalloc_cache_node_noprof+0x46/0x430 [ 38.394999][ T613] ? blk_mq_init_tags+0x8c/0x370 [ 38.395034][ T613] ? blk_mq_hw_queue_to_node+0x13c/0x160 [ 38.395060][ T613] blk_mq_init_tags+0x8c/0x370 [ 38.395095][ T613] blk_mq_alloc_map_and_rqs+0xca/0xae0 [ 38.395125][ T613] ? xa_find+0x11b/0x170 [ 38.395155][ T613] blk_mq_init_sched+0x30b/0x840 [ 38.395181][ T613] ? __cfi_blk_mq_init_sched+0x10/0x10 [ 38.395206][ T613] ? __kasan_check_write+0x18/0x20 [ 38.395231][ T613] ? blk_mq_quiesce_queue+0x10b/0x190 [ 38.395269][ T613] elevator_switch+0x127/0x250 [ 38.395299][ T613] elv_iosched_store+0x534/0x610 [ 38.395329][ T613] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 38.395353][ T613] ? __cfi_elv_iosched_store+0x10/0x10 [ 38.395383][ T613] ? blk_freeze_queue+0xc7/0x100 [ 38.395419][ T613] queue_attr_store+0x30b/0x3d0 [ 38.395453][ T613] ? __cfi_queue_attr_store+0x10/0x10 [ 38.395488][ T613] ? __kasan_check_write+0x18/0x20 [ 38.395512][ T613] ? _copy_from_iter+0x215/0x1520 [ 38.395549][ T613] ? __virt_addr_valid+0x2a1/0x370 [ 38.395580][ T613] ? __kasan_check_write+0x18/0x20 [ 38.395604][ T613] ? mutex_lock+0x97/0x1d0 [ 38.395632][ T613] ? __cfi_mutex_lock+0x10/0x10 [ 38.395660][ T613] ? __kmalloc_noprof+0x261/0x510 [ 38.395686][ T613] ? __cfi_queue_attr_store+0x10/0x10 [ 38.395719][ T613] sysfs_kf_write+0x13e/0x160 [ 38.395745][ T613] ? __cfi_sysfs_kf_write+0x10/0x10 [ 38.395770][ T613] kernfs_fop_write_iter+0x316/0x510 [ 38.395816][ T613] vfs_write+0x762/0xfd0 [ 38.395843][ T613] ? __cfi_vfs_write+0x10/0x10 [ 38.395870][ T613] ? __cfi_mutex_lock+0x10/0x10 [ 38.395902][ T613] ksys_write+0x145/0x260 [ 38.395928][ T613] ? xfd_validate_state+0x68/0x140 [ 38.395964][ T613] ? __cfi_ksys_write+0x10/0x10 [ 38.395990][ T613] ? __kasan_check_write+0x18/0x20 [ 38.396012][ T613] ? fpregs_restore_userregs+0x11c/0x260 [ 38.396044][ T613] __x64_sys_write+0x7f/0x90 [ 38.396071][ T613] x64_sys_call+0x271c/0x2ee0 [ 38.396094][ T613] do_syscall_64+0x57/0xf0 [ 38.396115][ T613] ? clear_bhb_loop+0x50/0xa0 [ 38.396146][ T613] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.396174][ T613] RIP: 0033:0x7fe3c979e159 [ 38.396196][ T613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.396217][ T613] RSP: 002b:00007fe3ca5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.396244][ T613] RAX: ffffffffffffffda RBX: 00007fe3c9a25fa0 RCX: 00007fe3c979e159 [ 38.396264][ T613] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 38.396280][ T613] RBP: 00007fe3c983503b R08: 0000000000000000 R09: 0000000000000000 [ 38.396296][ T613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.396311][ T613] R13: 00007fe3c9a26038 R14: 00007fe3c9a25fa0 R15: 00007ffd76549778 [ 38.396333][ T613] [ 38.664061][ T615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.702910][ T613] elv: switch to "bfq" failed, falling back to "none" [ 38.852670][ T636] EXT4-fs warning (device sda1): ext4_resize_fs:2019: can't read last block, resize aborted [ 38.954827][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.106006][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 39.114886][ T31] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 39.134705][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.142843][ T31] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 39.152131][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.160203][ T31] usb 1-1: Product: syz [ 39.164497][ T31] usb 1-1: Manufacturer: syz [ 39.169145][ T31] usb 1-1: SerialNumber: syz [ 39.175123][ T31] usb 1-1: config 0 descriptor?? [ 39.224960][ T650] netlink: 144 bytes leftover after parsing attributes in process `syz.2.117'. [ 39.235817][ T650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 39.386298][ T31] usb 1-1: USB disconnect, device number 6 [ 39.488905][ T663] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 39.497061][ T663] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 39.505365][ T663] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 39.513514][ T663] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 39.521552][ T663] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 39.529677][ T663] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 39.538041][ T663] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 39.546191][ T663] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 39.554245][ T663] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 39.562763][ T663] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 39.653646][ T704] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.653664][ T704] rust_binder: Read failure Err(EFAULT) in pid:82 [ 39.665603][ T704] rust_binder: 703: undelivered death notification, 0000000000000000 [ 39.718399][ T372] udevd[372]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 39.767876][ T372] udevd[372]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 39.824750][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.005817][ T31] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 40.022935][ T31] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 40.037847][ T31] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 40.048512][ T31] usb 1-1: config 220 has no interface number 2 [ 40.074719][ T31] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 40.094723][ T31] usb 1-1: config 220 interface 0 has no altsetting 0 [ 40.101673][ T31] usb 1-1: config 220 interface 76 has no altsetting 0 [ 40.108629][ T31] usb 1-1: config 220 interface 1 has no altsetting 0 [ 40.117209][ T31] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 40.126439][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.134505][ T31] usb 1-1: Product: syz [ 40.138815][ T31] usb 1-1: Manufacturer: syz [ 40.143478][ T31] usb 1-1: SerialNumber: syz [ 40.353642][ T31] usb 1-1: selecting invalid altsetting 0 [ 40.360892][ T31] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 40.367527][ T31] usb 1-1: No valid video chain found. [ 40.379352][ T31] usb 1-1: USB disconnect, device number 7 [ 40.629122][ T756] FAULT_INJECTION: forcing a failure. [ 40.629122][ T756] name failslab, interval 1, probability 0, space 0, times 0 [ 40.641850][ T756] CPU: 1 UID: 0 PID: 756 Comm: syz.2.133 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 40.641888][ T756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.641903][ T756] Call Trace: [ 40.641911][ T756] [ 40.641921][ T756] __dump_stack+0x21/0x30 [ 40.641963][ T756] dump_stack_lvl+0x140/0x1c0 [ 40.641997][ T756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.642034][ T756] dump_stack+0x19/0x20 [ 40.642065][ T756] should_fail_ex+0x3c2/0x510 [ 40.642095][ T756] should_failslab+0xac/0x100 [ 40.642126][ T756] kmem_cache_alloc_noprof+0x42/0x410 [ 40.642153][ T756] ? ip6_route_output_flags+0x313/0x470 [ 40.642185][ T756] ? __inet_hash_connect+0x7b9/0x17f0 [ 40.642221][ T756] ? inet_sk_get_local_port_range+0xa2/0x1d0 [ 40.642252][ T756] __inet_hash_connect+0x7b9/0x17f0 [ 40.642279][ T756] ? __cfi___inet6_check_established+0x10/0x10 [ 40.642316][ T756] ? __cfi___inet_hash_connect+0x10/0x10 [ 40.642342][ T756] ? dst_release+0xe3/0x240 [ 40.642378][ T756] ? sk_setup_caps+0x68b/0x8f0 [ 40.642412][ T756] inet6_hash_connect+0x95/0xe0 [ 40.642445][ T756] tcp_v6_connect+0xe06/0x17f0 [ 40.642474][ T756] ? tcp_sendmsg_locked+0x4361/0x4ac0 [ 40.642509][ T756] ? __cfi_tcp_v6_connect+0x10/0x10 [ 40.642547][ T756] ? do_syscall_64+0x57/0xf0 [ 40.642574][ T756] __inet_stream_connect+0x26f/0xf10 [ 40.642600][ T756] ? __cfi___inet_stream_connect+0x10/0x10 [ 40.642623][ T756] ? kasan_save_alloc_info+0x3a/0x50 [ 40.642645][ T756] ? __kasan_kmalloc+0x96/0xb0 [ 40.642675][ T756] ? __kmalloc_cache_noprof+0x23c/0x470 [ 40.642703][ T756] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 40.642737][ T756] tcp_sendmsg_locked+0x4431/0x4ac0 [ 40.642770][ T756] ? avc_has_perm_noaudit+0x26b/0x360 [ 40.642802][ T756] ? avc_has_perm_noaudit+0x289/0x360 [ 40.642834][ T756] ? __kasan_check_write+0x18/0x20 [ 40.642857][ T756] ? _raw_spin_lock_bh+0x96/0x130 [ 40.642879][ T756] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 40.642900][ T756] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.642922][ T756] ? _raw_spin_unlock_bh+0x54/0x60 [ 40.642943][ T756] ? lock_sock_nested+0x216/0x2a0 [ 40.642966][ T756] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 40.643000][ T756] ? check_stack_object+0x10f/0x150 [ 40.643028][ T756] ? __check_object_size+0xdc/0x870 [ 40.643053][ T756] ? __cfi_tcp_sendmsg+0x10/0x10 [ 40.643085][ T756] tcp_sendmsg+0x3e/0xd0 [ 40.643115][ T756] ? __cfi_tcp_sendmsg+0x10/0x10 [ 40.643147][ T756] inet6_sendmsg+0xb7/0x120 [ 40.643182][ T756] ? __cfi_inet6_sendmsg+0x10/0x10 [ 40.643224][ T756] __sys_sendto+0x4aa/0x6e0 [ 40.643254][ T756] ? __cfi___sys_sendto+0x10/0x10 [ 40.643286][ T756] ? __se_sys_futex+0x13c/0x320 [ 40.643322][ T756] ? __kasan_check_write+0x18/0x20 [ 40.643347][ T756] __x64_sys_sendto+0xe9/0x100 [ 40.643377][ T756] x64_sys_call+0x2c2c/0x2ee0 [ 40.643399][ T756] do_syscall_64+0x57/0xf0 [ 40.643420][ T756] ? clear_bhb_loop+0x50/0xa0 [ 40.643475][ T756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.643518][ T756] RIP: 0033:0x7f246ed9e159 [ 40.643538][ T756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.643558][ T756] RSP: 002b:00007f246fc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 40.643584][ T756] RAX: ffffffffffffffda RBX: 00007f246f025fa0 RCX: 00007f246ed9e159 [ 40.643603][ T756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 40.643617][ T756] RBP: 00007f246ee3503b R08: 00002000000001c0 R09: 000000000000001c [ 40.643633][ T756] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 40.643649][ T756] R13: 00007f246f026038 R14: 00007f246f025fa0 R15: 00007ffe4ba7cc08 [ 40.643670][ T756] [ 41.282450][ T372] udevd[372]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 41.328492][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 41.328511][ T36] audit: type=1400 audit(1789038030.560:628): avc: denied { mounton } for pid=791 comm="syz.3.143" path="/41/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 41.404714][ T36] audit: type=1400 audit(1789038030.630:629): avc: denied { getopt } for pid=795 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.481077][ T36] audit: type=1400 audit(1789038030.710:630): avc: denied { mounton } for pid=791 comm="syz.3.143" path="/41/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 41.834471][ T813] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 41.848405][ T813] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 41.874571][ T36] audit: type=1400 audit(1789038031.100:631): avc: denied { mounton } for pid=814 comm="syz.0.151" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.874584][ T815] tmpfs: Unsupported parameter 'mpol' [ 41.910584][ T817] futex_wake_op: syz.0.152 tries to shift op by 144; fix this program [ 42.035915][ T821] netlink: 'syz.0.154': attribute type 11 has an invalid length. [ 42.238290][ T840] kvm: pic: non byte write [ 42.243125][ T840] kvm: pic: single mode not supported [ 42.243138][ T840] kvm: pic: level sensitive irq not supported [ 42.248862][ T840] kvm: pic: non byte write [ 42.260053][ T840] kvm: pic: non byte write [ 42.341948][ T36] audit: type=1400 audit(1789038031.570:632): avc: denied { getopt } for pid=845 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.445461][ T36] audit: type=1400 audit(1789038031.660:633): avc: denied { create } for pid=849 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.634725][ T36] audit: type=1400 audit(1789038031.820:634): avc: denied { create } for pid=847 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 42.717868][ T36] audit: type=1400 audit(1789038031.920:635): avc: denied { sqpoll } for pid=860 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.750494][ T372] udevd[372]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 43.030968][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.052375][ T36] audit: type=1400 audit(1789038032.280:636): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.243687][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.254653][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.266441][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 43.275627][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.288980][ T31] usb 3-1: config 0 descriptor?? [ 43.323790][ T881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 43.825114][ T36] audit: type=1400 audit(1789038033.060:637): avc: denied { bind } for pid=882 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.845548][ T883] tipc: Failed to remove unknown binding: 66,0,0/0:2278480271/2278480272 [ 43.855775][ T883] tipc: Failed to remove unknown binding: 66,0,0/0:2278480271/2278480272 [ 44.046104][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.053857][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.060801][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.067648][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.074612][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.081465][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.088337][ T31] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 44.096259][ T31] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 44.115383][ T894] udevd[894]: open /dev/null failed: No such file or directory [ 44.544724][ T385] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 44.616333][ T31] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 44.634749][ T31] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 44.648875][ T31] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 44.669372][ T31] usb 3-1: USB disconnect, device number 3 [ 44.705845][ T385] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 44.714062][ T385] usb 4-1: config 0 has no interface number 0 [ 44.734714][ T385] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 44.754715][ T385] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 44.778067][ T385] usb 4-1: config 0 interface 49 has no altsetting 0 [ 44.796189][ T385] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 44.805630][ T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.813672][ T385] usb 4-1: Product: syz [ 44.823968][ T385] usb 4-1: Manufacturer: syz [ 44.838892][ T385] usb 4-1: SerialNumber: syz [ 44.849295][ T385] usb 4-1: config 0 descriptor?? [ 44.924135][ T921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 45.060826][ T385] ftdi_sio 4-1:0.49: FTDI USB Serial Device converter detected [ 45.074891][ T385] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 45.089223][ T385] usb 4-1: USB disconnect, device number 2 [ 45.118521][ T385] ftdi_sio 4-1:0.49: device disconnected [ 45.811264][ T950] Need at least one configuration in g1. [ 45.818001][ T950] udc dummy_udc.0: failed to start g1: -22 [ 45.823860][ T950] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 45.834515][ T950] UDC core: g1: couldn't find an available UDC or it's busy [ 46.609370][ T982] kernel profiling enabled (shift: 9) [ 46.750162][ T986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 46.831508][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 46.831529][ T36] audit: type=1400 audit(1789038036.060:658): avc: denied { create } for pid=990 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.868356][ T36] audit: type=1400 audit(1789038036.090:659): avc: denied { read } for pid=990 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.986310][ T1001] FAULT_INJECTION: forcing a failure. [ 46.986310][ T1001] name failslab, interval 1, probability 0, space 0, times 0 [ 47.024738][ T1001] CPU: 1 UID: 0 PID: 1001 Comm: syz.1.219 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 47.024780][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.024801][ T1001] Call Trace: [ 47.024810][ T1001] [ 47.024820][ T1001] __dump_stack+0x21/0x30 [ 47.024867][ T1001] dump_stack_lvl+0x140/0x1c0 [ 47.024904][ T1001] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.024946][ T1001] dump_stack+0x19/0x20 [ 47.024982][ T1001] should_fail_ex+0x3c2/0x510 [ 47.025015][ T1001] should_failslab+0xac/0x100 [ 47.025050][ T1001] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 47.025082][ T1001] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 47.025136][ T1001] krealloc_noprof+0x8d/0x130 [ 47.025167][ T1001] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4f/0x470 [ 47.025220][ T1001] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x63c/0x1a60 [ 47.025263][ T1001] ? __schedule+0x149e/0x20b0 [ 47.025292][ T1001] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 47.025332][ T1001] ? avc_has_extended_perms+0x7fb/0xe60 [ 47.025371][ T1001] ? __asan_memcpy+0x5a/0x80 [ 47.025400][ T1001] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x379/0x3fe0 [ 47.025437][ T1001] ? __asan_set_shadow_00+0x12/0x20 [ 47.025478][ T1001] ? do_vfs_ioctl+0x1824/0x2010 [ 47.025515][ T1001] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 47.025564][ T1001] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 47.025597][ T1001] ? schedule+0xc5/0x240 [ 47.025624][ T1001] ? futex_unqueue+0x136/0x160 [ 47.025675][ T1001] ? ioctl_has_perm+0x39a/0x500 [ 47.025704][ T1001] ? has_cap_mac_admin+0xd0/0xd0 [ 47.025751][ T1001] ? futex_wait+0x2b8/0x7c0 [ 47.025776][ T1001] ? __cfi_futex_wait+0x10/0x10 [ 47.025801][ T1001] ? selinux_file_ioctl+0x732/0x1480 [ 47.025830][ T1001] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 47.025859][ T1001] ? do_futex+0x32a/0x510 [ 47.025894][ T1001] ? __cfi_do_futex+0x10/0x10 [ 47.025928][ T1001] ? __fget_files+0x2bc/0x330 [ 47.025957][ T1001] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.025988][ T1001] ? security_file_ioctl+0x3e/0x110 [ 47.026011][ T1001] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 47.026039][ T1001] __se_sys_ioctl+0x126/0x1b0 [ 47.026069][ T1001] __x64_sys_ioctl+0x7f/0xa0 [ 47.026098][ T1001] x64_sys_call+0x1878/0x2ee0 [ 47.026120][ T1001] do_syscall_64+0x57/0xf0 [ 47.026141][ T1001] ? clear_bhb_loop+0x50/0xa0 [ 47.026171][ T1001] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.026199][ T1001] RIP: 0033:0x7fe3c979e159 [ 47.026221][ T1001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.026244][ T1001] RSP: 002b:00007fe3ca5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.026271][ T1001] RAX: ffffffffffffffda RBX: 00007fe3c9a25fa0 RCX: 00007fe3c979e159 [ 47.026292][ T1001] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000005 [ 47.026310][ T1001] RBP: 00007fe3c983503b R08: 0000000000000000 R09: 0000000000000000 [ 47.026328][ T1001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.026344][ T1001] R13: 00007fe3c9a26038 R14: 00007fe3c9a25fa0 R15: 00007ffd76549778 [ 47.026367][ T1001] [ 47.102900][ T1006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.384685][ T1001] rust_binder: 1000:1001 no such ref 0 [ 47.418719][ T36] audit: type=1400 audit(1789038036.650:660): avc: denied { bind } for pid=1009 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.460511][ T36] audit: type=1400 audit(1789038036.670:661): avc: denied { setopt } for pid=1009 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.491165][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 47.514818][ T36] audit: type=1400 audit(1789038036.690:662): avc: denied { read } for pid=1012 comm="syz.3.224" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.558333][ T36] audit: type=1400 audit(1789038036.690:663): avc: denied { open } for pid=1012 comm="syz.3.224" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.614730][ T36] audit: type=1400 audit(1789038036.720:664): avc: denied { map } for pid=1012 comm="syz.3.224" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.747552][ T36] audit: type=1400 audit(1789038036.980:665): avc: denied { relabelfrom } for pid=1020 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.799042][ T36] audit: type=1400 audit(1789038036.980:666): avc: denied { relabelto } for pid=1020 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.932889][ T36] audit: type=1400 audit(1789038037.160:667): avc: denied { bind } for pid=1025 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.979412][ T1028] tipc: Started in network mode [ 47.984412][ T1028] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 47.991754][ T1028] tipc: Enabled bearer , priority 10 [ 48.004723][ T393] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.174767][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 48.185765][ T393] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.193951][ T393] usb 2-1: config 0 has no interface number 0 [ 48.201793][ T393] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.211141][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.224990][ T393] usb 2-1: Product: syz [ 48.229191][ T393] usb 2-1: Manufacturer: syz [ 48.244144][ T393] usb 2-1: SerialNumber: syz [ 48.255075][ T393] usb 2-1: config 0 descriptor?? [ 48.265531][ T393] smsc95xx v2.0.0 [ 48.386906][ T1041] kvm: emulating exchange as write [ 48.671864][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 48.696764][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.755389][ T1062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 49.042548][ T1078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.104860][ T314] tipc: Node number set to 9349802 [ 49.224813][ T1084] FAULT_INJECTION: forcing a failure. [ 49.224813][ T1084] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 49.253295][ T1084] CPU: 0 UID: 0 PID: 1084 Comm: syz.3.251 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 49.253331][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.253345][ T1084] Call Trace: [ 49.253353][ T1084] [ 49.253361][ T1084] __dump_stack+0x21/0x30 [ 49.253401][ T1084] dump_stack_lvl+0x140/0x1c0 [ 49.253434][ T1084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.253465][ T1084] ? handle_mm_fault+0x16fe/0x1ba0 [ 49.253496][ T1084] dump_stack+0x19/0x20 [ 49.253533][ T1084] should_fail_ex+0x3c2/0x510 [ 49.253561][ T1084] should_fail+0xf/0x20 [ 49.253586][ T1084] should_fail_usercopy+0x1e/0x30 [ 49.253615][ T1084] _copy_from_user+0x20/0xa0 [ 49.253647][ T1084] get_timespec64+0x97/0x1b0 [ 49.253679][ T1084] ? __cfi_get_timespec64+0x10/0x10 [ 49.253712][ T1084] __se_sys_futex+0x1a3/0x320 [ 49.253743][ T1084] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.253767][ T1084] ? __x64_sys_futex+0x110/0x110 [ 49.253798][ T1084] ? __kasan_check_write+0x18/0x20 [ 49.253821][ T1084] __x64_sys_futex+0xe9/0x110 [ 49.253851][ T1084] x64_sys_call+0x227f/0x2ee0 [ 49.253871][ T1084] do_syscall_64+0x57/0xf0 [ 49.253891][ T1084] ? clear_bhb_loop+0x50/0xa0 [ 49.253920][ T1084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.253946][ T1084] RIP: 0033:0x7f3cc999e159 [ 49.253965][ T1084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.253984][ T1084] RSP: 002b:00007ffd049f04f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.254008][ T1084] RAX: ffffffffffffffda RBX: 000000000000c030 RCX: 00007f3cc999e159 [ 49.254025][ T1084] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cc9c25fac [ 49.254041][ T1084] RBP: 0000000000000032 R08: 4000000000000000 R09: 0000000000000000 [ 49.254056][ T1084] R10: 00007ffd049f0600 R11: 0000000000000246 R12: 00007ffd049f0620 [ 49.254071][ T1084] R13: 00007f3cc9c25fac R14: 000000000000c062 R15: 00007ffd049f0600 [ 49.254089][ T1084] [ 49.305121][ T1084] FAULT_INJECTION: forcing a failure. [ 49.305121][ T1084] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 49.468663][ T1084] CPU: 1 UID: 0 PID: 1084 Comm: syz.3.251 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 49.468695][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.468708][ T1084] Call Trace: [ 49.468714][ T1084] [ 49.468721][ T1084] __dump_stack+0x21/0x30 [ 49.468756][ T1084] dump_stack_lvl+0x140/0x1c0 [ 49.468784][ T1084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.468811][ T1084] ? handle_mm_fault+0x16fe/0x1ba0 [ 49.468835][ T1084] dump_stack+0x19/0x20 [ 49.468860][ T1084] should_fail_ex+0x3c2/0x510 [ 49.468883][ T1084] should_fail+0xf/0x20 [ 49.468904][ T1084] should_fail_usercopy+0x1e/0x30 [ 49.468931][ T1084] _copy_from_user+0x20/0xa0 [ 49.468958][ T1084] get_timespec64+0x97/0x1b0 [ 49.468984][ T1084] ? __cfi_get_timespec64+0x10/0x10 [ 49.469020][ T1084] __se_sys_futex+0x1a3/0x320 [ 49.469046][ T1084] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.469067][ T1084] ? __x64_sys_futex+0x110/0x110 [ 49.469094][ T1084] __x64_sys_futex+0xe9/0x110 [ 49.469119][ T1084] x64_sys_call+0x227f/0x2ee0 [ 49.469136][ T1084] do_syscall_64+0x57/0xf0 [ 49.469153][ T1084] ? clear_bhb_loop+0x50/0xa0 [ 49.469175][ T1084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.469199][ T1084] RIP: 0033:0x7f3cc999e159 [ 49.469216][ T1084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.469232][ T1084] RSP: 002b:00007ffd049f04f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.469253][ T1084] RAX: ffffffffffffffda RBX: 000000000000c080 RCX: 00007f3cc999e159 [ 49.469268][ T1084] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cc9c25fac [ 49.469281][ T1084] RBP: 0000000000000032 R08: 4000000000000000 R09: 0000000000000000 [ 49.469294][ T1084] R10: 00007ffd049f0600 R11: 0000000000000246 R12: 00007ffd049f0620 [ 49.469308][ T1084] R13: 00007f3cc9c25fac R14: 000000000000c0b2 R15: 00007ffd049f0600 [ 49.469326][ T1084] [ 50.664763][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.721243][ T393] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 50.732563][ T393] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 50.742075][ T393] usb 2-1: USB disconnect, device number 4 [ 50.754798][ T351] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.814743][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 50.820888][ T9] usb 4-1: config 0 has no interfaces? [ 50.828167][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 50.837347][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.845576][ T9] usb 4-1: Product: syz [ 50.849785][ T9] usb 4-1: Manufacturer: syz [ 50.854426][ T9] usb 4-1: SerialNumber: syz [ 50.859840][ T9] usb 4-1: config 0 descriptor?? [ 50.914731][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 50.921120][ T351] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 50.929741][ T351] usb 1-1: config 0 has no interface number 0 [ 50.936570][ T351] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 50.948094][ T351] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 50.957220][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.965257][ T351] usb 1-1: Product: syz [ 50.969436][ T351] usb 1-1: Manufacturer: syz [ 50.974119][ T351] usb 1-1: SerialNumber: syz [ 50.979454][ T351] usb 1-1: config 0 descriptor?? [ 50.984850][ T1130] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 51.070040][ T1124] futex_wake_op: syz.3.264 tries to shift op by 144; fix this program [ 51.195060][ T1130] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 51.204575][ T393] usb 4-1: USB disconnect, device number 3 [ 51.990876][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 51.990896][ T36] audit: type=1400 audit(1789038041.220:678): avc: denied { getopt } for pid=1160 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.036061][ T36] audit: type=1400 audit(1789038041.270:679): avc: denied { lock } for pid=1163 comm="syz.2.280" path="socket:[10472]" dev="sockfs" ino=10472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 52.380009][ T1180] udevd[1180]: open /dev/null failed: No such file or directory [ 52.411037][ T373] udevd[373]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 52.427132][ T373] udevd[373]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 52.429239][ T36] audit: type=1400 audit(1789038041.660:680): avc: denied { read } for pid=1181 comm="syz.2.286" path="socket:[9692]" dev="sockfs" ino=9692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.496476][ T36] audit: type=1400 audit(1789038041.730:681): avc: denied { create } for pid=1183 comm="syz.1.287" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 52.548124][ T36] audit: type=1400 audit(1789038041.780:682): avc: denied { listen } for pid=1185 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.625046][ T36] audit: type=1400 audit(1789038041.860:683): avc: denied { accept } for pid=1185 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.770489][ T1196] hub 8-0:1.0: USB hub found [ 52.775447][ T1196] hub 8-0:1.0: 1 port detected [ 52.784482][ T36] audit: type=1400 audit(1789038042.000:684): avc: denied { write } for pid=1190 comm="syz.1.290" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.056228][ T36] audit: type=1400 audit(1789038042.290:685): avc: denied { ioctl } for pid=1197 comm="syz.2.292" path="socket:[10728]" dev="sockfs" ino=10728 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.432779][ T351] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 53.458244][ T351] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 53.481607][ T351] asix 1-1:0.188: probe with driver asix failed with error -71 [ 53.642547][ T351] usb 1-1: USB disconnect, device number 8 [ 53.804725][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.824737][ T385] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 53.974760][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 53.987132][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 53.997367][ T385] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.014701][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.022736][ T9] usb 3-1: Product: syz [ 54.027649][ T385] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.044855][ T385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.057596][ T9] usb 3-1: Manufacturer: syz [ 54.062229][ T9] usb 3-1: SerialNumber: syz [ 54.067051][ T385] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 54.077106][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.085480][ T9] usb 3-1: config 0 descriptor?? [ 54.094999][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 54.103410][ T9] usb 3-1: Detected FT-X [ 54.104984][ T1204] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 54.126109][ T1204] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 54.134619][ T385] pl2303 4-1:1.0: pl2303 converter detected [ 54.152020][ T385] usb 4-1: pl2303 converter now attached to ttyUSB1 [ 54.305774][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 54.324723][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 54.331899][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 54.345269][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.355451][ T9] usb 3-1: USB disconnect, device number 4 [ 54.362053][ T36] audit: type=1400 audit(1789038043.590:686): avc: denied { append } for pid=1203 comm="syz.3.294" dev="devtmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.383125][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.385966][ T36] audit: type=1400 audit(1789038043.610:687): avc: denied { wake_alarm } for pid=1203 comm="syz.3.294" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.412040][ T9] ftdi_sio 3-1:0.0: device disconnected [ 54.516189][ T351] usb 4-1: USB disconnect, device number 4 [ 54.523646][ T351] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 54.536394][ T351] pl2303 4-1:1.0: device disconnected [ 56.322138][ T373] udevd[373]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 56.346693][ T373] udevd[373]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 56.364370][ T373] udevd[373]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 56.774743][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 56.829781][ T1301] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.831274][ T1301] @0: renamed from bond_slave_1 [ 56.929463][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 56.944049][ T9] usb 4-1: config 0 has no interface number 0 [ 56.950246][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 56.960873][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 56.973747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.981943][ T9] usb 4-1: Product: syz [ 56.986377][ T9] usb 4-1: Manufacturer: syz [ 56.991011][ T9] usb 4-1: SerialNumber: syz [ 56.996882][ T9] usb 4-1: config 0 descriptor?? [ 57.136146][ T1309] netlink: 182 bytes leftover after parsing attributes in process `syz.1.332'. [ 57.162682][ T1311] tipc: Started in network mode [ 57.167857][ T1311] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 57.177210][ T1311] tipc: Enabled bearer , priority 10 [ 57.186036][ T1311] tipc: Enabled bearer , priority 10 [ 57.193983][ T1311] tipc: Bearer : already 2 bearers with priority 10 [ 57.201578][ T1311] tipc: Bearer : trying with adjusted priority [ 57.209342][ T1311] tipc: New replicast peer: 255.255.255.255 [ 57.215918][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 57.223263][ T1311] tipc: Enabled bearer , priority 9 [ 57.242306][ T9] usb 4-1: USB disconnect, device number 5 [ 57.396251][ T1323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 57.664775][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 57.814742][ T314] usb 4-1: Using ep0 maxpacket: 16 [ 57.821211][ T314] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 57.829725][ T314] usb 4-1: config 0 has no interface number 0 [ 57.837127][ T314] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 57.847274][ T314] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 57.857520][ T314] usb 4-1: config 0 interface 41 has no altsetting 0 [ 57.865979][ T314] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 57.875754][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.883839][ T314] usb 4-1: Product: syz [ 57.888414][ T314] usb 4-1: Manufacturer: syz [ 57.893311][ T314] usb 4-1: SerialNumber: syz [ 57.899304][ T314] usb 4-1: config 0 descriptor?? [ 57.911427][ T1289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.923117][ T1289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.141034][ T1289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.151157][ T1289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.214940][ T351] tipc: Node number set to 4269801491 [ 58.536437][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 58.536458][ T36] audit: type=1400 audit(1789038047.770:693): avc: denied { load_policy } for pid=1332 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.564482][ T1333] SELinux: failed to load policy [ 58.613421][ T36] audit: type=1400 audit(1789038047.840:694): avc: denied { search } for pid=1334 comm="syz.2.342" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.770959][ T314] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 58.886022][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 59.044919][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 59.055063][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.074744][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.090350][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.104133][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 59.113306][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 59.121492][ T9] usb 3-1: Manufacturer: syz [ 59.130268][ T9] usb 3-1: config 0 descriptor?? [ 59.498482][ T351] usb 3-1: USB disconnect, device number 5 [ 59.995989][ T314] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 60.006964][ T314] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 60.016802][ T314] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 60.029603][ T314] usb 4-1: USB disconnect, device number 6 [ 60.203988][ T1352] fuse: Bad value for 'fd' [ 60.256359][ T1354] fuse: Bad value for 'fd' [ 60.316266][ T1356] fuse: Bad value for 'fd' [ 60.347309][ T1360] netlink: 32 bytes leftover after parsing attributes in process `syz.0.353'. [ 60.420620][ T36] audit: type=1400 audit(1789038049.650:695): avc: denied { read } for pid=1363 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.460248][ T36] audit: type=1400 audit(1789038049.690:696): avc: denied { ioctl } for pid=1370 comm="syz.1.358" path="socket:[11324]" dev="sockfs" ino=11324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.485831][ T36] audit: type=1400 audit(1789038049.690:697): avc: denied { bind } for pid=1370 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.506355][ T36] audit: type=1400 audit(1789038049.690:698): avc: denied { setopt } for pid=1370 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.646458][ T1383] ./dev/sda1: Can't lookup blockdev [ 60.834387][ T1393] kvm: pic: single mode not supported [ 60.834743][ T1393] kvm: pic: single mode not supported [ 60.840179][ T1393] kvm: pic: level sensitive irq not supported [ 60.865252][ T1393] kvm: pic: single mode not supported [ 60.875083][ T1393] kvm: pic: non byte read [ 60.901081][ T36] audit: type=1400 audit(1789038050.120:699): avc: denied { execute } for pid=1400 comm="syz.0.370" path="/104/memory.events" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.976018][ T36] audit: type=1400 audit(1789038050.210:700): avc: denied { ioctl } for pid=1404 comm="syz.1.372" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.983258][ T1403] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 61.153597][ T36] audit: type=1400 audit(1789038050.380:701): avc: denied { remount } for pid=1422 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.153602][ T1423] proc: Unknown parameter ';' [ 61.186160][ T1423] FAULT_INJECTION: forcing a failure. [ 61.186160][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 61.198843][ T1423] CPU: 0 UID: 0 PID: 1423 Comm: syz.3.378 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 61.198881][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.198906][ T1423] Call Trace: [ 61.198914][ T1423] [ 61.198923][ T1423] __dump_stack+0x21/0x30 [ 61.198965][ T1423] dump_stack_lvl+0x140/0x1c0 [ 61.199001][ T1423] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.199038][ T1423] dump_stack+0x19/0x20 [ 61.199071][ T1423] should_fail_ex+0x3c2/0x510 [ 61.199101][ T1423] ? __register_sysctl_table+0xb74/0x1440 [ 61.199141][ T1423] should_failslab+0xac/0x100 [ 61.199173][ T1423] __kmalloc_noprof+0x69/0x510 [ 61.199199][ T1423] ? __register_sysctl_table+0xb74/0x1440 [ 61.199236][ T1423] ? find_entry+0x186/0x1e0 [ 61.199257][ T1423] __register_sysctl_table+0xb74/0x1440 [ 61.199296][ T1423] register_net_sysctl_sz+0x245/0x260 [ 61.199338][ T1423] nf_log_net_init+0x5eb/0x750 [ 61.199375][ T1423] ops_init+0x302/0x5d0 [ 61.199397][ T1423] ? __kasan_check_write+0x18/0x20 [ 61.199419][ T1423] ? rwsem_read_trylock+0x275/0x5a0 [ 61.199457][ T1423] setup_net+0x227/0x9b0 [ 61.199478][ T1423] ? copy_net_ns+0xa20/0xa20 [ 61.199499][ T1423] ? down_read_killable+0x7f/0x100 [ 61.199532][ T1423] ? __cfi_down_read_killable+0x10/0x10 [ 61.199566][ T1423] copy_net_ns+0x4fc/0xa20 [ 61.199588][ T1423] create_new_namespaces+0x390/0x6f0 [ 61.199656][ T1423] unshare_nsproxy_namespaces+0x124/0x180 [ 61.199702][ T1423] ksys_unshare+0x4f9/0x920 [ 61.199738][ T1423] ? __cfi_ksys_unshare+0x10/0x10 [ 61.199773][ T1423] ? __kasan_check_write+0x18/0x20 [ 61.199800][ T1423] __x64_sys_unshare+0x3c/0x50 [ 61.199834][ T1423] x64_sys_call+0x2998/0x2ee0 [ 61.199858][ T1423] do_syscall_64+0x57/0xf0 [ 61.199879][ T1423] ? clear_bhb_loop+0x50/0xa0 [ 61.199908][ T1423] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.199936][ T1423] RIP: 0033:0x7f3cc999e159 [ 61.199956][ T1423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.199977][ T1423] RSP: 002b:00007f3cca786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.200004][ T1423] RAX: ffffffffffffffda RBX: 00007f3cc9c25fa0 RCX: 00007f3cc999e159 [ 61.200024][ T1423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 61.200041][ T1423] RBP: 00007f3cc9a3503b R08: 0000000000000000 R09: 0000000000000000 [ 61.200057][ T1423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.200073][ T1423] R13: 00007f3cc9c26038 R14: 00007f3cc9c25fa0 R15: 00007ffd049f0398 [ 61.200095][ T1423] [ 61.200105][ T1423] sysctl could not get directory: /net/netfilter -12 [ 61.476884][ T36] audit: type=1400 audit(1789038050.700:702): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.583567][ T1445] rust_binder: Error in use_page_slow: ESRCH [ 61.583596][ T1445] rust_binder: use_range failure ESRCH [ 61.589905][ T1445] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 61.595554][ T1445] rust_binder: Failure in copy_transaction_data: ESRCH [ 61.603577][ T1445] rust_binder: 1444:1445 transaction async to 1444:0 failed ESRCH, code 0 size 0-0 [ 61.621549][ T9] rust_binder: 1444: undelivered TRANSACTION_ERROR: 29201 [ 61.673399][ T1453] netlink: 104 bytes leftover after parsing attributes in process `syz.2.386'. [ 62.516443][ T1483] ./dev/sda1: Can't lookup blockdev [ 62.872793][ T1504] netlink: 104 bytes leftover after parsing attributes in process `syz.3.402'. [ 63.496426][ T1542] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 63.588021][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 63.588040][ T36] audit: type=1400 audit(1789038052.820:721): avc: denied { cmd } for pid=1546 comm="syz.0.416" path="socket:[11776]" dev="sockfs" ino=11776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.366499][ T36] audit: type=1400 audit(1789038053.600:722): avc: denied { write } for pid=1556 comm="syz.1.419" name="functions" dev="configfs" ino=6369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.389331][ T36] audit: type=1400 audit(1789038053.600:723): avc: denied { add_name } for pid=1556 comm="syz.1.419" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.412626][ T1557] configfs-gadget.g1 gadget.0: HOST MAC 6e:f4:6e:e6:76:a2 [ 64.419835][ T1557] configfs-gadget.g1 gadget.0: MAC de:98:bc:9f:d6:91 [ 64.664845][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 64.836195][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 64.845134][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 64.869233][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.908570][ T10] cdc_ncm 1-1:1.0: MAC-Address: 6e:f4:6e:e6:76:a2 [ 64.938589][ T10] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 6e:f4:6e:e6:76:a2 [ 65.388109][ T1611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 65.505265][ T1618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.428'. [ 65.556741][ T1636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 65.572299][ T1636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 65.850132][ T36] audit: type=1400 audit(1789038055.080:724): avc: denied { accept } for pid=1654 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 66.004719][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.174710][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 66.195431][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.222505][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.234908][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.248565][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 66.264703][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 66.266304][ T1663] ./dev/sda1: Can't lookup blockdev [ 66.272854][ T9] usb 2-1: Manufacturer: syz [ 66.293210][ T9] usb 2-1: config 0 descriptor?? [ 66.334526][ T1669] overlayfs: failed to resolve './file2': -2 [ 67.022015][ T10] usb 2-1: USB disconnect, device number 5 [ 67.563367][ T36] audit: type=1400 audit(1789038056.790:725): avc: denied { bind } for pid=1711 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.595703][ T36] audit: type=1400 audit(1789038056.830:726): avc: denied { setopt } for pid=1711 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.779019][ T1720] FAULT_INJECTION: forcing a failure. [ 67.779019][ T1720] name failslab, interval 1, probability 0, space 0, times 0 [ 67.791913][ T1720] CPU: 0 UID: 0 PID: 1720 Comm: syz.2.462 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 67.791961][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.791978][ T1720] Call Trace: [ 67.791986][ T1720] [ 67.791995][ T1720] __dump_stack+0x21/0x30 [ 67.792039][ T1720] dump_stack_lvl+0x140/0x1c0 [ 67.792078][ T1720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.792116][ T1720] ? __cfi___futex_wait+0x10/0x10 [ 67.792143][ T1720] dump_stack+0x19/0x20 [ 67.792188][ T1720] should_fail_ex+0x3c2/0x510 [ 67.792223][ T1720] ? kernfs_fop_write_iter+0x15e/0x510 [ 67.792264][ T1720] should_failslab+0xac/0x100 [ 67.792298][ T1720] __kmalloc_noprof+0x69/0x510 [ 67.792327][ T1720] ? futex_wait+0x2b8/0x7c0 [ 67.792351][ T1720] ? kernfs_fop_write_iter+0x15e/0x510 [ 67.792392][ T1720] kernfs_fop_write_iter+0x15e/0x510 [ 67.792434][ T1720] vfs_write+0x762/0xfd0 [ 67.792463][ T1720] ? __cfi_vfs_write+0x10/0x10 [ 67.792492][ T1720] ? __cfi_mutex_lock+0x10/0x10 [ 67.792527][ T1720] ksys_write+0x145/0x260 [ 67.792555][ T1720] ? xfd_validate_state+0x68/0x140 [ 67.792593][ T1720] ? __cfi_ksys_write+0x10/0x10 [ 67.792622][ T1720] ? __kasan_check_write+0x18/0x20 [ 67.792650][ T1720] ? fpregs_restore_userregs+0x11c/0x260 [ 67.792684][ T1720] __x64_sys_write+0x7f/0x90 [ 67.792714][ T1720] x64_sys_call+0x271c/0x2ee0 [ 67.792739][ T1720] do_syscall_64+0x57/0xf0 [ 67.792763][ T1720] ? clear_bhb_loop+0x50/0xa0 [ 67.792796][ T1720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.792828][ T1720] RIP: 0033:0x7f246ed9e159 [ 67.792850][ T1720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.792875][ T1720] RSP: 002b:00007f246fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.792904][ T1720] RAX: ffffffffffffffda RBX: 00007f246f025fa0 RCX: 00007f246ed9e159 [ 67.792925][ T1720] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 67.792944][ T1720] RBP: 00007f246ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 67.792962][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.792980][ T1720] R13: 00007f246f026038 R14: 00007f246f025fa0 R15: 00007ffe4ba7cc08 [ 67.793005][ T1720] [ 68.032470][ T36] audit: type=1400 audit(1789038057.260:727): avc: denied { listen } for pid=1724 comm="syz.3.464" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 68.340723][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 68.506308][ T36] audit: type=1400 audit(1789038057.740:728): avc: denied { mount } for pid=1751 comm="syz.2.476" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.531986][ T36] audit: type=1400 audit(1789038057.760:729): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.564722][ T36] audit: type=1400 audit(1789038057.790:730): avc: denied { create } for pid=1755 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.615245][ T36] audit: type=1400 audit(1789038057.790:731): avc: denied { connect } for pid=1755 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.636005][ T36] audit: type=1400 audit(1789038057.820:732): avc: denied { mounton } for pid=1757 comm="syz.2.479" path="" dev="cgroup2" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.840869][ T1774] syzkaller0: entered promiscuous mode [ 68.846500][ T1774] syzkaller0: entered allmulticast mode [ 68.923361][ T1776] syzkaller0: entered promiscuous mode [ 68.929332][ T1776] syzkaller0: entered allmulticast mode [ 68.979848][ T36] audit: type=1400 audit(1789038058.210:733): avc: denied { execute_no_trans } for pid=1778 comm="syz.0.488" path="/133/dev_mnt/zram0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.131221][ T1789] futex_wake_op: syz.2.493 tries to shift op by 144; fix this program [ 69.279285][ T36] audit: type=1400 audit(1789038058.510:734): avc: denied { map } for pid=1796 comm="syz.2.496" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 69.528275][ T1805] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 69.715505][ T1811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'. [ 69.991828][ T1810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.029352][ T36] audit: type=1400 audit(1789038059.260:735): avc: denied { unlink } for pid=1813 comm="syz.2.503" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 70.129216][ T36] audit: type=1400 audit(1789038059.360:736): avc: denied { write } for pid=1822 comm="syz.1.505" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.154207][ T1823] rust_binder: 1822: undelivered TRANSACTION_COMPLETE [ 70.272441][ T36] audit: type=1400 audit(1789038059.500:737): avc: denied { read write } for pid=1827 comm="syz.3.507" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.295782][ T36] audit: type=1400 audit(1789038059.500:738): avc: denied { open } for pid=1827 comm="syz.3.507" path="/136/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.319581][ T36] audit: type=1400 audit(1789038059.500:739): avc: denied { bind } for pid=1827 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.342570][ T36] audit: type=1400 audit(1789038059.570:740): avc: denied { ioctl } for pid=1827 comm="syz.3.507" path="/136/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.494716][ T385] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.525255][ T1835] futex_wake_op: syz.0.511 tries to shift op by 144; fix this program [ 70.654734][ T385] usb 2-1: Using ep0 maxpacket: 32 [ 70.665872][ T385] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.674418][ T385] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 70.682982][ T385] usb 2-1: config 0 has no interface number 0 [ 70.694720][ T385] usb 2-1: config 0 interface 185 has no altsetting 0 [ 70.706528][ T385] usb 2-1: New USB device found, idVendor=0403, idProduct=ea90, bcdDevice=27.a1 [ 70.715731][ T385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.723779][ T385] usb 2-1: Product: syz [ 70.728397][ T385] usb 2-1: Manufacturer: syz [ 70.733062][ T385] usb 2-1: SerialNumber: syz [ 70.754985][ T385] usb 2-1: config 0 descriptor?? [ 71.026161][ T385] ftdi_sio 2-1:0.185: FTDI USB Serial Device converter detected [ 71.036683][ T385] ftdi_sio ttyUSB0: unknown device type: 0x27a1 [ 71.050027][ T385] usb 2-1: USB disconnect, device number 6 [ 71.068877][ T385] ftdi_sio 2-1:0.185: device disconnected [ 71.714727][ T1862] futex_wake_op: syz.0.523 tries to shift op by 144; fix this program [ 71.804701][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.964698][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 71.975768][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.994706][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.005127][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.014285][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.026936][ T45] usb 3-1: Product: syz [ 72.031150][ T45] usb 3-1: Manufacturer: syz [ 72.043604][ T45] usb 3-1: SerialNumber: syz [ 72.257760][ T45] usb 3-1: 0:2 : does not exist [ 72.302686][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 72.318713][ T45] usb 3-1: USB disconnect, device number 6 [ 72.345138][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.674685][ T1888] syz.1.534 (1888): attempted to duplicate a private mapping with mremap. This is not supported. [ 72.689667][ T1888] fuse: Bad value for 'fd' [ 73.024702][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 73.185804][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.210818][ T314] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.234695][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.255104][ T314] usb 3-1: config 0 descriptor?? [ 73.739067][ T314] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 73.764906][ T314] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input7 [ 73.874924][ T314] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 73.899484][ T1920] udevd[1920]: open /dev/null failed: No such file or directory [ 73.938688][ T1892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.967914][ T1892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.203474][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 74.203494][ T36] audit: type=1400 audit(1789038063.430:743): avc: denied { create } for pid=1933 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.358731][ T385] usb 3-1: USB disconnect, device number 7 [ 74.637154][ T36] audit: type=1400 audit(1789038063.870:744): avc: denied { create } for pid=1949 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 75.890606][ T1983] futex_wake_op: syz.2.569 tries to shift op by 144; fix this program [ 76.153993][ T1994] fuse: Bad value for 'fd' [ 76.161155][ T1992] create_pit_timer: 12 callbacks suppressed [ 76.161176][ T1992] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.206306][ T1992] kvm: pic: non byte read [ 76.212065][ T1992] kvm: pic: level sensitive irq not supported [ 76.212153][ T1992] kvm: pic: non byte read [ 76.223476][ T1992] kvm: pic: level sensitive irq not supported [ 76.223555][ T1992] kvm: pic: non byte read [ 76.234776][ T1992] kvm: pic: level sensitive irq not supported [ 76.234875][ T1992] kvm: pic: non byte read [ 76.408610][ T36] audit: type=1400 audit(1789038065.640:745): avc: denied { load_policy } for pid=2001 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.408819][ T2002] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 76.438646][ T2002] SELinux: failed to load policy [ 76.470350][ T2004] tipc: Enabling of bearer rejected, failed to enable media [ 76.569068][ T2010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.974740][ T385] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 77.002155][ T2032] ./dev/sda1: Can't lookup blockdev [ 77.147648][ T36] audit: type=1400 audit(1789038066.380:746): avc: denied { bind } for pid=2038 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.322787][ T2045] futex_wake_op: syz.0.591 tries to shift op by 144; fix this program [ 77.589155][ T385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.614612][ T385] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 77.623802][ T385] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 77.664732][ T385] usb 3-1: Product: syz [ 77.669001][ T385] usb 3-1: Manufacturer: syz [ 77.688004][ T385] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 77.894736][ T385] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 77.914830][ T385] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 77.923720][ T385] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 77.959592][ T385] usb 3-1: USB disconnect, device number 8 [ 78.479415][ T2083] syz.2.602: vmalloc error: size 32768, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 78.498392][ T2083] CPU: 0 UID: 0 PID: 2083 Comm: syz.2.602 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 78.498435][ T2083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.498450][ T2083] Call Trace: [ 78.498458][ T2083] [ 78.498467][ T2083] __dump_stack+0x21/0x30 [ 78.498505][ T2083] dump_stack_lvl+0x140/0x1c0 [ 78.498537][ T2083] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.498568][ T2083] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 78.498593][ T2083] dump_stack+0x19/0x20 [ 78.498625][ T2083] warn_alloc+0x1e7/0x2c0 [ 78.498660][ T2083] ? __cfi_warn_alloc+0x10/0x10 [ 78.498694][ T2083] ? __kmalloc_node_noprof+0x252/0x500 [ 78.498719][ T2083] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 78.498757][ T2083] __vmalloc_node_range_noprof+0x100b/0x1300 [ 78.498799][ T2083] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 78.498839][ T2083] ? vsnprintf+0x19ef/0x1ad0 [ 78.498876][ T2083] ? kvm_dev_ioctl+0x12a/0x14c0 [ 78.498925][ T2083] __vmalloc_noprof+0x104/0x1d0 [ 78.498964][ T2083] ? kvm_dev_ioctl+0x12a/0x14c0 [ 78.499002][ T2083] ? alloc_fd+0x4c1/0x570 [ 78.499031][ T2083] ? __cfi___vmalloc_noprof+0x10/0x10 [ 78.499071][ T2083] kvm_dev_ioctl+0x12a/0x14c0 [ 78.499110][ T2083] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 78.499149][ T2083] ? bpf_lsm_file_ioctl+0xd/0x20 [ 78.499182][ T2083] ? security_file_ioctl+0x3e/0x110 [ 78.499207][ T2083] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 78.499244][ T2083] __se_sys_ioctl+0x126/0x1b0 [ 78.499277][ T2083] __x64_sys_ioctl+0x7f/0xa0 [ 78.499307][ T2083] x64_sys_call+0x1878/0x2ee0 [ 78.499331][ T2083] do_syscall_64+0x57/0xf0 [ 78.499353][ T2083] ? clear_bhb_loop+0x50/0xa0 [ 78.499384][ T2083] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.499414][ T2083] RIP: 0033:0x7f246ed9e159 [ 78.499436][ T2083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.499459][ T2083] RSP: 002b:00007f246fc87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.499485][ T2083] RAX: ffffffffffffffda RBX: 00007f246f025fa0 RCX: 00007f246ed9e159 [ 78.499505][ T2083] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 78.499521][ T2083] RBP: 00007f246ee3503b R08: 0000000000000000 R09: 0000000000000000 [ 78.499538][ T2083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.499554][ T2083] R13: 00007f246f026038 R14: 00007f246f025fa0 R15: 00007ffe4ba7cc08 [ 78.499577][ T2083] [ 78.499717][ T2083] Mem-Info: [ 78.756148][ T2083] active_anon:712 inactive_anon:6673 isolated_anon:0 [ 78.756148][ T2083] active_file:11452 inactive_file:15890 isolated_file:0 [ 78.756148][ T2083] unevictable:0 dirty:1302 writeback:0 [ 78.756148][ T2083] slab_reclaimable:5143 slab_unreclaimable:80781 [ 78.756148][ T2083] mapped:24583 shmem:335 pagetables:1135 [ 78.756148][ T2083] sec_pagetables:0 bounce:0 [ 78.756148][ T2083] kernel_misc_reclaimable:0 [ 78.756148][ T2083] free:1508927 free_pcp:1981 free_cma:0 [ 78.835194][ T2083] Node 0 active_anon:4948kB inactive_anon:26692kB active_file:45808kB inactive_file:63560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100232kB dirty:5208kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6716kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no [ 78.910314][ T2083] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:5204kB free_cma:0kB [ 78.959731][ T2083] lowmem_reserve[]: 0 3921 3921 [ 78.965084][ T2083] Normal free:3067832kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9148kB inactive_anon:26692kB active_file:45808kB inactive_file:63560kB unevictable:0kB writepending:5208kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3032kB local_pcp:2564kB free_cma:0kB [ 79.006064][ T2083] lowmem_reserve[]: 0 0 0 [ 79.046635][ T2083] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 79.114743][ T2083] Normal: 1*4kB (E) 1205*8kB (UME) 1603*16kB (UM) 656*32kB (UME) 540*64kB (UME) 119*128kB (UME) 50*256kB (UME) 40*512kB (UME) 33*1024kB (UME) 14*2048kB (UME) 699*4096kB (UM) = 3064924kB [ 79.154728][ T2083] 30754 total pagecache pages [ 79.169695][ T2083] 17 pages in swap cache [ 79.179775][ T2083] Free swap = 124372kB [ 79.189935][ T2083] Total swap = 124996kB [ 79.200079][ T2083] 2097051 pages RAM [ 79.228601][ T2083] 0 pages HighMem/MovableOnly [ 79.241363][ T2083] 352243 pages reserved [ 79.254205][ T2083] 0 pages cma reserved [ 79.276127][ T2083] Memory allocations: [ 79.287897][ T2083] 0 B 0 init/main.c:1477 func:do_initcalls [ 79.308924][ T2083] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 79.353892][ T2083] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 79.383891][ T2083] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 79.408232][ T2083] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 79.433600][ T2083] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 79.460021][ T2083] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 79.484625][ T2083] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 79.510555][ T2083] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 79.536747][ T2083] 0 B 0 init/initramfs.c:101 func:find_link [ 80.268937][ T2113] io-wq is not configured for unbound workers [ 83.368220][ T2189] overlayfs: failed to clone upperpath [ 83.395955][ T36] audit: type=1400 audit(1789038072.630:747): avc: denied { module_load } for pid=2188 comm="syz.0.649" path="/196/bus/bus" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 83.396447][ T2189] Invalid ELF header magic: != ELF [ 85.582684][ T36] audit: type=1400 audit(1789038074.810:748): avc: denied { mounton } for pid=2232 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.792372][ T13] bridge_slave_1: left allmulticast mode [ 85.804713][ T13] bridge_slave_1: left promiscuous mode [ 85.810462][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.835354][ T13] bridge_slave_0: left allmulticast mode [ 85.841084][ T13] bridge_slave_0: left promiscuous mode [ 85.854756][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.006744][ T13] veth1_macvtap: left promiscuous mode [ 86.025108][ T13] veth0_vlan: left promiscuous mode [ 87.424966][ T2276] ./dev/sda1: Can't lookup blockdev [ 88.115215][ T2283] ./dev/sda1: Can't lookup blockdev [ 88.999187][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.025128][ T2293] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 89.045096][ T2293] netlink: 9 bytes leftover after parsing attributes in process `syz.1.689'. [ 95.321602][ T672] bridge_slave_1: left allmulticast mode [ 95.345520][ T672] bridge_slave_1: left promiscuous mode [ 95.351223][ T672] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.374611][ T672] bridge_slave_0: left allmulticast mode [ 95.380341][ T672] bridge_slave_0: left promiscuous mode [ 95.395016][ T672] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.582893][ T672] veth1_macvtap: left promiscuous mode [ 95.594162][ T672] veth0_vlan: left promiscuous mode SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=666 state=3 status=67 (errno 32: Broken pipe) [ 98.483484][ T36] audit: type=1400 audit(1789038087.710:749): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[670]" dev="pipefs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 98.705678][ T1011] rust_binder: 1822: undelivered transaction 21, process died [ 98.706258][ T688] bridge_slave_1: left allmulticast mode [ 98.720080][ T688] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.728512][ T688] bridge_slave_0: left allmulticast mode [ 98.734192][ T688] bridge_slave_0: left promiscuous mode [ 98.740278][ T688] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.896584][ T688] tipc: Disabling bearer [ 98.902060][ T688] tipc: Disabling bearer [ 98.907579][ T688] tipc: Disabling bearer [ 98.913002][ T688] tipc: Left network mode [ 98.918667][ T688] veth1_macvtap: left promiscuous mode [ 98.924205][ T688] veth0_vlan: left promiscuous mode [ 99.096290][ T688] ------------[ cut here ]------------ [ 99.101814][ T688] WARNING: CPU: 1 PID: 688 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 99.111898][ T688] Modules linked in: [ 99.115844][ T688] CPU: 1 UID: 0 PID: 688 Comm: kworker/u8:53 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 99.127626][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.137744][ T688] Workqueue: netns cleanup_net [ 99.142553][ T688] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 99.148685][ T688] Code: e8 c1 d1 d5 fc 4b 83 3c 3e 00 75 19 e8 45 f7 7c fc 49 81 ff f8 07 00 00 74 1b e8 37 f7 7c fc 49 83 c7 08 eb c9 e8 2c f7 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 99.168365][ T688] RSP: 0018:ffffc9000e787b90 EFLAGS: 00010293 [ 99.174471][ T688] RAX: ffffffff850a8034 RBX: ffff8881202e0000 RCX: ffff888120d5b900 [ 99.182568][ T688] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104f6c7e0 [ 99.190604][ T688] RBP: ffffc9000e787bb0 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 99.198631][ T688] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: dffffc0000000000 [ 99.206656][ T688] R13: dffffc0000000000 R14: ffff888104f6c000 R15: 00000000000007e0 [ 99.214686][ T688] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.223644][ T688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.230274][ T688] CR2: 0000559c43c02af8 CR3: 000000010c7e2000 CR4: 00000000003526b0 [ 99.238401][ T688] Call Trace: [ 99.241699][ T688] [ 99.244670][ T688] cleanup_net+0x6ba/0xc90 [ 99.249142][ T688] ? __cfi_cleanup_net+0x10/0x10 [ 99.254112][ T688] ? kick_pool+0xb9/0x540 [ 99.258516][ T688] process_scheduled_works+0x7f4/0x1060 [ 99.264099][ T688] worker_thread+0xc99/0x13f0 [ 99.268839][ T688] kthread+0x2c4/0x360 [ 99.272950][ T688] ? __cfi_worker_thread+0x10/0x10 [ 99.278370][ T688] ? __cfi_kthread+0x10/0x10 [ 99.282991][ T688] ret_from_fork+0x64/0xa0 [ 99.287483][ T688] ? __cfi_kthread+0x10/0x10 [ 99.292113][ T688] ret_from_fork_asm+0x1a/0x30 [ 99.296938][ T688] [ 99.299987][ T688] ---[ end trace 0000000000000000 ]--- [ 99.305917][ T688] ------------[ cut here ]------------ [ 99.311430][ T688] WARNING: CPU: 0 PID: 688 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 99.321588][ T688] Modules linked in: [ 99.325575][ T688] CPU: 0 UID: 0 PID: 688 Comm: kworker/u8:53 Tainted: G W syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 99.338927][ T688] Tainted: [W]=WARN [ 99.342762][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.352876][ T688] Workqueue: netns cleanup_net [ 99.357720][ T688] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 99.363818][ T688] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 f6 7c fc 49 81 ff f8 07 00 00 74 1b e8 e2 f6 7c fc 49 83 c7 08 eb c5 e8 d7 f6 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 f6 7c fc 5b 41 5c 41 5e 41 [ 99.383521][ T688] RSP: 0018:ffffc9000e787b90 EFLAGS: 00010293 [ 99.389669][ T688] RAX: ffffffff850a8089 RBX: ffff888104f6c800 RCX: ffff888120d5b900 [ 99.397717][ T688] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104f6c808 [ 99.405763][ T688] RBP: ffffc9000e787bb0 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 99.413760][ T688] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: dffffc0000000000 [ 99.421788][ T688] R13: dffffc0000000000 R14: ffff888104f6c000 R15: 0000000000000008 [ 99.429844][ T688] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 99.438856][ T688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.445527][ T688] CR2: 00007fe3ca557e20 CR3: 000000010c78c000 CR4: 00000000003526b0 [ 99.453519][ T688] Call Trace: [ 99.456852][ T688] [ 99.459810][ T688] cleanup_net+0x6ba/0xc90 [ 99.464260][ T688] ? __cfi_cleanup_net+0x10/0x10 [ 99.469243][ T688] ? kick_pool+0xb9/0x540 [ 99.473635][ T688] process_scheduled_works+0x7f4/0x1060 [ 99.479271][ T688] worker_thread+0xc99/0x13f0 [ 99.484008][ T688] kthread+0x2c4/0x360 [ 99.488149][ T688] ? __cfi_worker_thread+0x10/0x10 [ 99.493328][ T688] ? __cfi_kthread+0x10/0x10 [ 99.498013][ T688] ret_from_fork+0x64/0xa0 [ 99.502567][ T688] ? __cfi_kthread+0x10/0x10 [ 99.507237][ T688] ret_from_fork_asm+0x1a/0x30 [ 99.512061][ T688] [ 99.515151][ T688] ---[ end trace 0000000000000000 ]--- [ 99.524416][ T688] ------------[ cut here ]------------ [ 99.529936][ T688] WARNING: CPU: 1 PID: 688 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 99.539494][ T688] Modules linked in: [ 99.543422][ T688] CPU: 1 UID: 0 PID: 688 Comm: kworker/u8:53 Tainted: G W syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 99.556699][ T688] Tainted: [W]=WARN [ 99.560532][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.570642][ T688] Workqueue: netns cleanup_net [ 99.575470][ T688] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 99.581046][ T688] Code: 3c 20 00 74 08 48 89 df e8 df 8f f0 fc 48 8b 3b e8 f7 80 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 8f b7 00 cc e8 52 b5 97 fc <0f> 0b e9 b0 fd ff ff e8 46 b5 97 fc 0f 0b e9 18 fe ff ff e8 3a b5 [ 99.600733][ T688] RSP: 0018:ffffc9000e787b70 EFLAGS: 00010293 [ 99.606885][ T688] RAX: ffffffff84efc20e RBX: ffff8881202e0000 RCX: ffff888120d5b900 [ 99.614911][ T688] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888120d5b900 [ 99.622924][ T688] RBP: ffffc9000e787b98 R08: ffffffff87d43ac7 R09: 1ffffffff0fa8758 [ 99.630946][ T688] R10: dffffc0000000000 R11: fffffbfff0fa8759 R12: 1ffffffff0fa84ac [ 99.639072][ T688] R13: dffffc0000000000 R14: ffff8881202e0c00 R15: dffffc0000000000 [ 99.647102][ T688] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.656089][ T688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.662687][ T688] CR2: 0000559c43c02af8 CR3: 000000010c7e2000 CR4: 00000000003526b0 [ 99.670725][ T688] Call Trace: [ 99.674026][ T688] [ 99.677002][ T688] xfrm_net_exit+0x31/0x80 [ 99.681457][ T688] cleanup_net+0x6ba/0xc90 [ 99.685934][ T688] ? __cfi_cleanup_net+0x10/0x10 [ 99.690903][ T688] ? kick_pool+0xb9/0x540 [ 99.695295][ T688] process_scheduled_works+0x7f4/0x1060 [ 99.700888][ T688] worker_thread+0xc99/0x13f0 [ 99.705643][ T688] kthread+0x2c4/0x360 [ 99.709759][ T688] ? __cfi_worker_thread+0x10/0x10 [ 99.714921][ T688] ? __cfi_kthread+0x10/0x10 [ 99.719547][ T688] ret_from_fork+0x64/0xa0 [ 99.724004][ T688] ? __cfi_kthread+0x10/0x10 [ 99.728664][ T688] ret_from_fork_asm+0x1a/0x30 [ 99.733457][ T688] [ 99.736546][ T688] ---[ end trace 0000000000000000 ]---