last executing test programs: 33.749688219s ago: executing program 1 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x24, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x8050) 33.658562682s ago: executing program 1 (id=1048): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000001300)={0x1, 0x1}) 33.641034862s ago: executing program 1 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000108010011000000400a00000200000005000100010000"], 0x1c}}, 0x0) 33.623617022s ago: executing program 1 (id=1050): llistxattr(&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0, 0x0) 33.584499633s ago: executing program 1 (id=1051): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x107, 0x3ff}], 0x10}}], 0x1, 0x4004) 33.547948614s ago: executing program 1 (id=1053): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x20880, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x0, r2}) 32.144798827s ago: executing program 3 (id=1089): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) 32.049052279s ago: executing program 3 (id=1084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0xf0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x1f, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 31.926280262s ago: executing program 3 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000006dc6a712e83e8d14e47cf0973a091b9ff4c954c1300e66da27d55e216f118987e6e02cc1776952b93fa9dd2f0e73890542edbf22b44a7cb76fa04e8cdbc9389a41ec3c6edc6c24e310880edcda65b28376383d98a5f9a7ee6b4fd5b0d9d6070aca5fe1428fdac86236b2b1af2c0f342921015946687b77d01e5b3e91ebc9b00c1e4f258dc1b8781380a8b798c904d0dcbcf989952dfde9090ac4856cffd963b72c36d29d231dfb0e2336c60094"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044054) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,hard\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x22000080}, 0x20004000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 31.920604792s ago: executing program 3 (id=1090): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xc5b4, @local}, 0x1c) 31.885789813s ago: executing program 3 (id=1091): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) finit_module(r0, 0x0, 0x2) 31.838402304s ago: executing program 3 (id=1093): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x102, 0xffffffffe8110f4c, 0x7, 0xfffc, 0xf, 0x2, 0x0, 0x0, 0x40, 0x6}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.519638062s ago: executing program 0 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=virtio,vers000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x78) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 31.390373585s ago: executing program 0 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 31.390250854s ago: executing program 2 (id=1104): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xe8}}, 0x0) 31.369347445s ago: executing program 2 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffc00}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 31.351452755s ago: executing program 0 (id=1106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 31.282574077s ago: executing program 2 (id=1107): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x8, 0x2, 0x4}}, 0xc) 31.282488417s ago: executing program 0 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002f00090027bd70000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 31.274075347s ago: executing program 2 (id=1109): socket$packet(0x11, 0x3, 0x300) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 31.244172858s ago: executing program 0 (id=1110): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'mem'}, 0xc) 31.16543569s ago: executing program 2 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 31.16499408s ago: executing program 2 (id=1112): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 31.118294791s ago: executing program 0 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') 11.253100186s ago: executing program 32 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') 11.233810817s ago: executing program 33 (id=1053): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x20880, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x0, r2}) 11.220166287s ago: executing program 34 (id=1112): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11.150091019s ago: executing program 35 (id=1093): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x102, 0xffffffffe8110f4c, 0x7, 0xfffc, 0xf, 0x2, 0x0, 0x0, 0x40, 0x6}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.509639097s ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 5.888418692s ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 5.341456835s ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 4.785422228s ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 4.206206132s ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3.639322045s ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 3.257654884s ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 3.070063428s ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.865232393s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) 2.679331807s ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 2.499845051s ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 2.300738946s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) 2.112598091s ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 1.921132785s ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.728551289s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) 1.536870534s ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 1.345991309s ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1.137340873s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) 938.413338ms ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 748.067832ms ago: executing program 7 (id=1117): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665620000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 553.851937ms ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) 365.270981ms ago: executing program 5 (id=1115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 189.145485ms ago: executing program 6 (id=1116): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 0s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x10) kernel console output (not intermixed with test programs): BIOS Google 07/24/2026 [ 37.239525][ T999] Call Trace: [ 37.239530][ T999] [ 37.239537][ T999] __dump_stack+0x21/0x30 [ 37.239565][ T999] dump_stack_lvl+0x140/0x1c0 [ 37.239590][ T999] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.239615][ T999] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 37.239643][ T999] dump_stack+0x19/0x20 [ 37.239665][ T999] should_fail_ex+0x3c2/0x510 [ 37.239686][ T999] should_fail+0xf/0x20 [ 37.239704][ T999] get_futex_key+0x178/0x940 [ 37.239726][ T999] ? sock_ioctl+0x609/0x7e0 [ 37.239740][ T999] ? __x64_sys_ioctl+0x7f/0xa0 [ 37.239761][ T999] ? __cfi_get_futex_key+0x10/0x10 [ 37.239784][ T999] futex_wait_setup+0xae/0x260 [ 37.239800][ T999] ? __cfi_futex_wait_setup+0x10/0x10 [ 37.239816][ T999] ? __asan_memcpy+0x5a/0x80 [ 37.239833][ T999] __futex_wait+0x12c/0x3d0 [ 37.239849][ T999] ? __cfi___futex_wait+0x10/0x10 [ 37.239865][ T999] ? __cfi_futex_wake_mark+0x10/0x10 [ 37.239880][ T999] ? __kasan_check_read+0x15/0x20 [ 37.239897][ T999] ? futex_wake+0x627/0x950 [ 37.239912][ T999] futex_wait+0x128/0x7c0 [ 37.239927][ T999] ? __cfi_futex_wait+0x10/0x10 [ 37.239943][ T999] ? rtnl_unlock+0x12/0x20 [ 37.239963][ T999] ? vlan_ioctl_handler+0x5c1/0x670 [ 37.239985][ T999] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 37.240002][ T999] do_futex+0x32a/0x510 [ 37.240025][ T999] ? file_init_path+0x434/0x590 [ 37.240048][ T999] ? __cfi_do_futex+0x10/0x10 [ 37.240072][ T999] __se_sys_futex+0x13c/0x320 [ 37.240096][ T999] ? __x64_sys_futex+0x110/0x110 [ 37.240119][ T999] ? __kasan_check_write+0x18/0x20 [ 37.240137][ T999] __x64_sys_futex+0xe9/0x110 [ 37.240160][ T999] x64_sys_call+0x227f/0x2ee0 [ 37.240175][ T999] do_syscall_64+0x57/0xf0 [ 37.240200][ T999] ? clear_bhb_loop+0x50/0xa0 [ 37.240220][ T999] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.240239][ T999] RIP: 0033:0x7f4f01f9e159 [ 37.240252][ T999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.240266][ T999] RSP: 002b:00007f4f02dc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.240284][ T999] RAX: ffffffffffffffda RBX: 00007f4f02225fa8 RCX: 00007f4f01f9e159 [ 37.240296][ T999] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4f02225fa8 [ 37.240307][ T999] RBP: 00007f4f02225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 37.240326][ T999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.240336][ T999] R13: 00007f4f02226038 R14: 00007ffc337925b0 R15: 00007ffc33792698 [ 37.240350][ T999] [ 37.687823][ T1024] FAULT_INJECTION: forcing a failure. [ 37.687823][ T1024] name failslab, interval 1, probability 0, space 0, times 0 [ 37.700667][ T1024] CPU: 0 UID: 0 PID: 1024 Comm: syz.3.305 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 37.700693][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.700704][ T1024] Call Trace: [ 37.700709][ T1024] [ 37.700716][ T1024] __dump_stack+0x21/0x30 [ 37.700745][ T1024] dump_stack_lvl+0x140/0x1c0 [ 37.700770][ T1024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.700795][ T1024] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 37.700820][ T1024] dump_stack+0x19/0x20 [ 37.700843][ T1024] should_fail_ex+0x3c2/0x510 [ 37.700863][ T1024] should_failslab+0xac/0x100 [ 37.700884][ T1024] __kmalloc_cache_noprof+0x41/0x470 [ 37.700903][ T1024] ? ipv6_flowlabel_opt+0xce3/0x25e0 [ 37.700928][ T1024] ipv6_flowlabel_opt+0xce3/0x25e0 [ 37.700953][ T1024] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 37.700978][ T1024] ? __kasan_check_write+0x18/0x20 [ 37.700994][ T1024] ? _raw_spin_lock_bh+0x96/0x130 [ 37.701020][ T1024] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 37.701045][ T1024] ? __schedule+0x149e/0x20b0 [ 37.701062][ T1024] ? _raw_spin_unlock_bh+0x54/0x60 [ 37.701087][ T1024] ? lock_sock_nested+0x216/0x2a0 [ 37.701103][ T1024] ? __cfi_lock_sock_nested+0x10/0x10 [ 37.701118][ T1024] ? __sched_text_start+0x10/0x10 [ 37.701133][ T1024] ? plist_add+0x4d4/0x570 [ 37.701160][ T1024] do_ipv6_setsockopt+0xea0/0x3350 [ 37.701183][ T1024] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 37.701205][ T1024] ? avc_has_perm_noaudit+0x26b/0x360 [ 37.701231][ T1024] ? __asan_memcpy+0x5a/0x80 [ 37.701248][ T1024] ? avc_has_perm_noaudit+0x289/0x360 [ 37.701269][ T1024] ? avc_has_perm+0x155/0x240 [ 37.701289][ T1024] ? __cfi_avc_has_perm+0x10/0x10 [ 37.701309][ T1024] ? futex_wake+0x666/0x950 [ 37.701325][ T1024] ? selinux_socket_setsockopt+0x324/0x3d0 [ 37.701350][ T1024] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 37.701375][ T1024] ipv6_setsockopt+0x5d/0x170 [ 37.701409][ T1024] udpv6_setsockopt+0xa3/0xc0 [ 37.701425][ T1024] sock_common_setsockopt+0xb5/0xd0 [ 37.701440][ T1024] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 37.701455][ T1024] do_sock_setsockopt+0x27c/0x410 [ 37.701477][ T1024] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 37.701499][ T1024] ? __fget_files+0x2bc/0x330 [ 37.701520][ T1024] __x64_sys_setsockopt+0x18c/0x220 [ 37.701542][ T1024] x64_sys_call+0x2adc/0x2ee0 [ 37.701556][ T1024] do_syscall_64+0x57/0xf0 [ 37.701580][ T1024] ? clear_bhb_loop+0x50/0xa0 [ 37.701599][ T1024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.701617][ T1024] RIP: 0033:0x7f4f01f9e159 [ 37.701631][ T1024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.701644][ T1024] RSP: 002b:00007f4f02dc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.701661][ T1024] RAX: ffffffffffffffda RBX: 00007f4f02225fa0 RCX: 00007f4f01f9e159 [ 37.701673][ T1024] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 37.701683][ T1024] RBP: 00007f4f02035024 R08: 0000000000000020 R09: 0000000000000000 [ 37.701712][ T1024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.701722][ T1024] R13: 00007f4f02226038 R14: 00007f4f02225fa0 R15: 00007ffc33792698 [ 37.701736][ T1024] [ 38.136759][ T1044] FAULT_INJECTION: forcing a failure. [ 38.136759][ T1044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.149889][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: syz.2.321 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 38.149923][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.149934][ T1044] Call Trace: [ 38.149939][ T1044] [ 38.149946][ T1044] __dump_stack+0x21/0x30 [ 38.149975][ T1044] dump_stack_lvl+0x140/0x1c0 [ 38.149999][ T1044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.150024][ T1044] ? vfs_write+0xbcf/0xfd0 [ 38.150042][ T1044] dump_stack+0x19/0x20 [ 38.150065][ T1044] should_fail_ex+0x3c2/0x510 [ 38.150085][ T1044] should_fail+0xf/0x20 [ 38.150103][ T1044] should_fail_usercopy+0x1e/0x30 [ 38.150125][ T1044] _copy_from_user+0x20/0xa0 [ 38.150148][ T1044] __se_sys_prlimit64+0x131/0x870 [ 38.150165][ T1044] ? __se_sys_futex+0x13c/0x320 [ 38.150196][ T1044] ? __x64_sys_prlimit64+0xc0/0xc0 [ 38.150214][ T1044] ? __kasan_check_write+0x18/0x20 [ 38.150231][ T1044] ? fpregs_restore_userregs+0x11c/0x260 [ 38.150253][ T1044] __x64_sys_prlimit64+0x9f/0xc0 [ 38.150269][ T1044] x64_sys_call+0x1f31/0x2ee0 [ 38.150285][ T1044] do_syscall_64+0x57/0xf0 [ 38.150310][ T1044] ? clear_bhb_loop+0x50/0xa0 [ 38.150330][ T1044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.150348][ T1044] RIP: 0033:0x7f6372d9e159 [ 38.150362][ T1044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.150376][ T1044] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 38.150393][ T1044] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 38.150406][ T1044] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 38.150417][ T1044] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 38.150427][ T1044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.150437][ T1044] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 38.150451][ T1044] [ 38.574969][ T1082] FAULT_INJECTION: forcing a failure. [ 38.574969][ T1082] name failslab, interval 1, probability 0, space 0, times 0 [ 38.592779][ T1082] CPU: 0 UID: 0 PID: 1082 Comm: syz.3.338 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 38.592805][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.592818][ T1082] Call Trace: [ 38.592823][ T1082] [ 38.592829][ T1082] __dump_stack+0x21/0x30 [ 38.592858][ T1082] dump_stack_lvl+0x140/0x1c0 [ 38.592882][ T1082] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.592906][ T1082] ? do_futex+0x32a/0x510 [ 38.592931][ T1082] dump_stack+0x19/0x20 [ 38.592954][ T1082] should_fail_ex+0x3c2/0x510 [ 38.592974][ T1082] should_failslab+0xac/0x100 [ 38.592996][ T1082] kmem_cache_alloc_noprof+0x42/0x410 [ 38.593013][ T1082] ? getname_flags+0xcc/0x6b0 [ 38.593033][ T1082] getname_flags+0xcc/0x6b0 [ 38.593051][ T1082] ? __kasan_check_write+0x18/0x20 [ 38.593069][ T1082] __x64_sys_mkdirat+0x7e/0xa0 [ 38.593094][ T1082] x64_sys_call+0x2ba8/0x2ee0 [ 38.593109][ T1082] do_syscall_64+0x57/0xf0 [ 38.593134][ T1082] ? clear_bhb_loop+0x50/0xa0 [ 38.593154][ T1082] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.593172][ T1082] RIP: 0033:0x7f4f01f9e159 [ 38.593186][ T1082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.593200][ T1082] RSP: 002b:00007f4f02dc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 38.593218][ T1082] RAX: ffffffffffffffda RBX: 00007f4f02225fa0 RCX: 00007f4f01f9e159 [ 38.593231][ T1082] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 38.593242][ T1082] RBP: 00007f4f02035024 R08: 0000000000000000 R09: 0000000000000000 [ 38.593252][ T1082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.593262][ T1082] R13: 00007f4f02226038 R14: 00007f4f02225fa0 R15: 00007ffc33792698 [ 38.593277][ T1082] [ 38.792840][ T1086] FAULT_INJECTION: forcing a failure. [ 38.792840][ T1086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 38.805973][ T1086] CPU: 0 UID: 0 PID: 1086 Comm: syz.2.340 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 38.806010][ T1086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.806025][ T1086] Call Trace: [ 38.806033][ T1086] [ 38.806043][ T1086] __dump_stack+0x21/0x30 [ 38.806084][ T1086] dump_stack_lvl+0x140/0x1c0 [ 38.806123][ T1086] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.806154][ T1086] ? update_curr+0xf1/0x9c0 [ 38.806171][ T1086] dump_stack+0x19/0x20 [ 38.806194][ T1086] should_fail_ex+0x3c2/0x510 [ 38.806215][ T1086] should_fail+0xf/0x20 [ 38.806232][ T1086] get_futex_key+0x178/0x940 [ 38.806255][ T1086] ? __cfi_get_futex_key+0x10/0x10 [ 38.806277][ T1086] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 38.806304][ T1086] ? ttwu_do_activate+0x620/0x620 [ 38.806324][ T1086] futex_wait_setup+0xae/0x260 [ 38.806340][ T1086] ? __cfi_futex_wait_setup+0x10/0x10 [ 38.806356][ T1086] ? __asan_memcpy+0x5a/0x80 [ 38.806374][ T1086] __futex_wait+0x12c/0x3d0 [ 38.806389][ T1086] ? __cfi___futex_wait+0x10/0x10 [ 38.806405][ T1086] ? __cfi_futex_wake_mark+0x10/0x10 [ 38.806421][ T1086] ? futex_wake+0x666/0x950 [ 38.806436][ T1086] futex_wait+0x128/0x7c0 [ 38.806451][ T1086] ? __cfi_futex_wait+0x10/0x10 [ 38.806468][ T1086] do_futex+0x32a/0x510 [ 38.806491][ T1086] ? __cfi_do_futex+0x10/0x10 [ 38.806515][ T1086] __se_sys_futex+0x13c/0x320 [ 38.806538][ T1086] ? __x64_sys_futex+0x110/0x110 [ 38.806563][ T1086] __x64_sys_futex+0xe9/0x110 [ 38.806586][ T1086] x64_sys_call+0x227f/0x2ee0 [ 38.806601][ T1086] do_syscall_64+0x57/0xf0 [ 38.806628][ T1086] ? clear_bhb_loop+0x50/0xa0 [ 38.806649][ T1086] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.806668][ T1086] RIP: 0033:0x7f6372d9e159 [ 38.806683][ T1086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.806697][ T1086] RSP: 002b:00007f6373c8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 38.806714][ T1086] RAX: ffffffffffffffda RBX: 00007f6373025fa8 RCX: 00007f6372d9e159 [ 38.806727][ T1086] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6373025fa8 [ 38.806738][ T1086] RBP: 00007f6373025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 38.806748][ T1086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.806758][ T1086] R13: 00007f6373026038 R14: 00007ffe0f3c9350 R15: 00007ffe0f3c9438 [ 38.806773][ T1086] [ 39.107359][ T1094] FAULT_INJECTION: forcing a failure. [ 39.107359][ T1094] name failslab, interval 1, probability 0, space 0, times 0 [ 39.120178][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: syz.2.345 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 39.120204][ T1094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.120214][ T1094] Call Trace: [ 39.120219][ T1094] [ 39.120225][ T1094] __dump_stack+0x21/0x30 [ 39.120254][ T1094] dump_stack_lvl+0x140/0x1c0 [ 39.120279][ T1094] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.120305][ T1094] dump_stack+0x19/0x20 [ 39.120328][ T1094] should_fail_ex+0x3c2/0x510 [ 39.120349][ T1094] should_failslab+0xac/0x100 [ 39.120370][ T1094] kmem_cache_alloc_noprof+0x42/0x410 [ 39.120388][ T1094] ? security_inode_alloc+0x51/0x230 [ 39.120409][ T1094] ? __cfi_make_kgid+0x10/0x10 [ 39.120430][ T1094] security_inode_alloc+0x51/0x230 [ 39.120452][ T1094] inode_init_always_gfp+0x756/0x9e0 [ 39.120474][ T1094] alloc_inode+0xc5/0x270 [ 39.120496][ T1094] new_inode_pseudo+0x19/0x40 [ 39.120518][ T1094] alloc_anon_inode+0x21/0x340 [ 39.120544][ T1094] aio_setup_ring+0xfa/0xc60 [ 39.120566][ T1094] ? pcpu_alloc_noprof+0xd93/0x1440 [ 39.120587][ T1094] ? free_ioctx_reqs+0x170/0x170 [ 39.120611][ T1094] ioctx_alloc+0x337/0x840 [ 39.120632][ T1094] __se_sys_io_setup+0x6f/0x230 [ 39.120652][ T1094] __x64_sys_io_setup+0x5f/0x80 [ 39.120671][ T1094] x64_sys_call+0x26a4/0x2ee0 [ 39.120687][ T1094] do_syscall_64+0x57/0xf0 [ 39.120712][ T1094] ? clear_bhb_loop+0x50/0xa0 [ 39.120732][ T1094] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.120751][ T1094] RIP: 0033:0x7f6372d9e159 [ 39.120764][ T1094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.120778][ T1094] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 39.120796][ T1094] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 39.120808][ T1094] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 39.120819][ T1094] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 39.120830][ T1094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.120839][ T1094] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 39.120854][ T1094] [ 39.423450][ T1104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1104 comm=syz.1.350 [ 39.468546][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 39.468572][ T36] audit: type=1400 audit(1788864193.730:232): avc: denied { create } for pid=1107 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 39.532761][ T1113] FAULT_INJECTION: forcing a failure. [ 39.532761][ T1113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.545929][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: syz.1.354 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 39.545964][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.545984][ T1113] Call Trace: [ 39.545989][ T1113] [ 39.545996][ T1113] __dump_stack+0x21/0x30 [ 39.546026][ T1113] dump_stack_lvl+0x140/0x1c0 [ 39.546049][ T1113] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.546080][ T1113] ? check_stack_object+0x10f/0x150 [ 39.546098][ T1113] dump_stack+0x19/0x20 [ 39.546121][ T1113] should_fail_ex+0x3c2/0x510 [ 39.546142][ T1113] should_fail+0xf/0x20 [ 39.546160][ T1113] should_fail_usercopy+0x1e/0x30 [ 39.546181][ T1113] _copy_from_user+0x20/0xa0 [ 39.546205][ T1113] __se_sys_landlock_create_ruleset+0x308/0x4b0 [ 39.546227][ T1113] ? __x64_sys_landlock_create_ruleset+0xa0/0xa0 [ 39.546249][ T1113] ? __kasan_check_write+0x18/0x20 [ 39.546267][ T1113] ? fpregs_restore_userregs+0x11c/0x260 [ 39.546289][ T1113] __x64_sys_landlock_create_ruleset+0x7f/0xa0 [ 39.546310][ T1113] x64_sys_call+0x2848/0x2ee0 [ 39.546325][ T1113] do_syscall_64+0x57/0xf0 [ 39.546350][ T1113] ? clear_bhb_loop+0x50/0xa0 [ 39.546370][ T1113] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.546389][ T1113] RIP: 0033:0x7f42f2f9e159 [ 39.546403][ T1113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.546416][ T1113] RSP: 002b:00007f42f3e79028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 39.546435][ T1113] RAX: ffffffffffffffda RBX: 00007f42f3225fa0 RCX: 00007f42f2f9e159 [ 39.546447][ T1113] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000180 [ 39.546458][ T1113] RBP: 00007f42f3035024 R08: 0000000000000000 R09: 0000000000000000 [ 39.546469][ T1113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.546479][ T1113] R13: 00007f42f3226038 R14: 00007f42f3225fa0 R15: 00007ffc798ef698 [ 39.546493][ T1113] [ 39.799115][ T1120] FAULT_INJECTION: forcing a failure. [ 39.799115][ T1120] name failslab, interval 1, probability 0, space 0, times 0 [ 39.811952][ T1120] CPU: 0 UID: 0 PID: 1120 Comm: syz.0.358 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 39.811987][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.812001][ T1120] Call Trace: [ 39.812009][ T1120] [ 39.812018][ T1120] __dump_stack+0x21/0x30 [ 39.812068][ T1120] dump_stack_lvl+0x140/0x1c0 [ 39.812092][ T1120] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.812116][ T1120] ? __d_add+0x636/0xac0 [ 39.812134][ T1120] dump_stack+0x19/0x20 [ 39.812156][ T1120] should_fail_ex+0x3c2/0x510 [ 39.812176][ T1120] should_failslab+0xac/0x100 [ 39.812197][ T1120] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 39.812215][ T1120] ? __d_alloc+0x42/0x8c0 [ 39.812231][ T1120] __d_alloc+0x42/0x8c0 [ 39.812246][ T1120] d_alloc_parallel+0xe4/0x1370 [ 39.812262][ T1120] ? make_vfsuid+0x4d/0xa0 [ 39.812277][ T1120] ? __kasan_check_write+0x18/0x20 [ 39.812294][ T1120] ? security_inode_permission+0x77/0x150 [ 39.812318][ T1120] ? downgrade_write+0x470/0x470 [ 39.812343][ T1120] ? __d_lookup+0x4e8/0x550 [ 39.812360][ T1120] ? __cfi_d_alloc_parallel+0x10/0x10 [ 39.812377][ T1120] ? down_read+0x7f/0xe0 [ 39.812396][ T1120] ? __cfi_down_read+0x10/0x10 [ 39.812416][ T1120] path_openat+0xa09/0x35a0 [ 39.812441][ T1120] ? x64_sys_call+0xe69/0x2ee0 [ 39.812457][ T1120] ? do_filp_open+0x440/0x440 [ 39.812480][ T1120] do_filp_open+0x1f2/0x440 [ 39.812503][ T1120] ? __cfi_do_filp_open+0x10/0x10 [ 39.812526][ T1120] ? __cfi_kfree_link+0x10/0x10 [ 39.812552][ T1120] ? alloc_fd+0x4c1/0x570 [ 39.812571][ T1120] do_sys_openat2+0x134/0x1d0 [ 39.812595][ T1120] ? do_sys_open+0x100/0x100 [ 39.812621][ T1120] __x64_sys_openat+0x13a/0x170 [ 39.812646][ T1120] x64_sys_call+0xe69/0x2ee0 [ 39.812661][ T1120] do_syscall_64+0x57/0xf0 [ 39.812685][ T1120] ? clear_bhb_loop+0x50/0xa0 [ 39.812704][ T1120] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.812722][ T1120] RIP: 0033:0x7ff8f655e98e [ 39.812736][ T1120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.812750][ T1120] RSP: 002b:00007ff8f73d1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.812768][ T1120] RAX: ffffffffffffffda RBX: 00007ff8f73d26c0 RCX: 00007ff8f655e98e [ 39.812781][ T1120] RDX: 0000000000000002 RSI: 00007ff8f73d1f90 RDI: ffffffffffffff9c [ 39.812792][ T1120] RBP: 00007ff8f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 39.812803][ T1120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.812812][ T1120] R13: 00007ff8f6826038 R14: 00007ff8f6825fa0 R15: 00007ffd6a3d2cd8 [ 39.812827][ T1120] [ 39.814142][ T36] audit: type=1400 audit(1788864194.080:233): avc: denied { read } for pid=1119 comm="syz.0.358" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.096055][ T36] audit: type=1400 audit(1788864194.080:234): avc: denied { open } for pid=1119 comm="syz.0.358" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.129178][ T1132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 40.156397][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 40.185504][ T36] audit: type=1400 audit(1788864194.440:235): avc: denied { read write } for pid=1137 comm="syz.0.365" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.215663][ T36] audit: type=1400 audit(1788864194.440:236): avc: denied { read write open } for pid=1137 comm="syz.0.365" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.274347][ T36] audit: type=1400 audit(1788864194.530:237): avc: denied { create } for pid=1143 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.340347][ T1152] FAULT_INJECTION: forcing a failure. [ 40.340347][ T1152] name failslab, interval 1, probability 0, space 0, times 0 [ 40.384587][ T1152] CPU: 0 UID: 0 PID: 1152 Comm: syz.2.372 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 40.384626][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.384643][ T1152] Call Trace: [ 40.384650][ T1152] [ 40.384661][ T1152] __dump_stack+0x21/0x30 [ 40.384702][ T1152] dump_stack_lvl+0x140/0x1c0 [ 40.384743][ T1152] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.384780][ T1152] ? avc_has_perm+0x155/0x240 [ 40.384812][ T1152] dump_stack+0x19/0x20 [ 40.384844][ T1152] should_fail_ex+0x3c2/0x510 [ 40.384874][ T1152] should_failslab+0xac/0x100 [ 40.384907][ T1152] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 40.384935][ T1152] ? selinux_socket_create+0x188/0x290 [ 40.384966][ T1152] ? sock_alloc_inode+0x48/0x150 [ 40.384991][ T1152] sock_alloc_inode+0x48/0x150 [ 40.385014][ T1152] ? __cfi_sock_alloc_inode+0x10/0x10 [ 40.385038][ T1152] alloc_inode+0x7d/0x270 [ 40.385069][ T1152] ? bpf_lsm_socket_create+0xd/0x20 [ 40.385096][ T1152] new_inode_pseudo+0x19/0x40 [ 40.385127][ T1152] __sock_create+0x130/0x810 [ 40.385154][ T1152] __sys_socketpair+0x221/0x5c0 [ 40.385180][ T1152] __x64_sys_socketpair+0x9f/0xc0 [ 40.385207][ T1152] x64_sys_call+0x2081/0x2ee0 [ 40.385230][ T1152] do_syscall_64+0x57/0xf0 [ 40.385266][ T1152] ? clear_bhb_loop+0x50/0xa0 [ 40.385293][ T1152] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.385320][ T1152] RIP: 0033:0x7f6372d9e159 [ 40.385341][ T1152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.385363][ T1152] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 40.385390][ T1152] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 40.385409][ T1152] RDX: 0000000000000000 RSI: 0000000100000005 RDI: 0000000000000001 [ 40.385425][ T1152] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 40.385442][ T1152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.385458][ T1152] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 40.385479][ T1152] [ 40.385525][ T1152] socket: no more sockets [ 40.614294][ T1159] FAULT_INJECTION: forcing a failure. [ 40.614294][ T1159] name failslab, interval 1, probability 0, space 0, times 0 [ 40.642001][ T1159] CPU: 0 UID: 0 PID: 1159 Comm: syz.3.375 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 40.642045][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.642057][ T1159] Call Trace: [ 40.642062][ T1159] [ 40.642069][ T1159] __dump_stack+0x21/0x30 [ 40.642098][ T1159] dump_stack_lvl+0x140/0x1c0 [ 40.642123][ T1159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.642148][ T1159] ? __kasan_check_write+0x18/0x20 [ 40.642166][ T1159] ? _raw_spin_lock_irq+0x93/0x120 [ 40.642192][ T1159] dump_stack+0x19/0x20 [ 40.642215][ T1159] should_fail_ex+0x3c2/0x510 [ 40.642235][ T1159] should_failslab+0xac/0x100 [ 40.642257][ T1159] __kmalloc_cache_noprof+0x41/0x470 [ 40.642276][ T1159] ? __kasan_check_write+0x18/0x20 [ 40.642292][ T1159] ? alloc_mnt_ns+0xd3/0x4c0 [ 40.642310][ T1159] ? inc_ucount+0x1c3/0x2c0 [ 40.642325][ T1159] alloc_mnt_ns+0xd3/0x4c0 [ 40.642343][ T1159] __se_sys_open_tree+0x32a/0x900 [ 40.642361][ T1159] ? xfd_validate_state+0x68/0x140 [ 40.642385][ T1159] ? __x64_sys_open_tree+0xa0/0xa0 [ 40.642403][ T1159] ? __kasan_check_write+0x18/0x20 [ 40.642419][ T1159] ? fpregs_restore_userregs+0x11c/0x260 [ 40.642441][ T1159] __x64_sys_open_tree+0x7f/0xa0 [ 40.642458][ T1159] x64_sys_call+0x2d58/0x2ee0 [ 40.642474][ T1159] do_syscall_64+0x57/0xf0 [ 40.642499][ T1159] ? clear_bhb_loop+0x50/0xa0 [ 40.642519][ T1159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.642537][ T1159] RIP: 0033:0x7f4f01f9e159 [ 40.642551][ T1159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.642566][ T1159] RSP: 002b:00007f4f02dc0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 40.642584][ T1159] RAX: ffffffffffffffda RBX: 00007f4f02225fa0 RCX: 00007f4f01f9e159 [ 40.642597][ T1159] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 40.642610][ T1159] RBP: 00007f4f02035024 R08: 0000000000000000 R09: 0000000000000000 [ 40.642621][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.642631][ T1159] R13: 00007f4f02226038 R14: 00007f4f02225fa0 R15: 00007ffc33792698 [ 40.642646][ T1159] [ 40.898838][ T1168] FAULT_INJECTION: forcing a failure. [ 40.898838][ T1168] name failslab, interval 1, probability 0, space 0, times 0 [ 40.911647][ T1168] CPU: 0 UID: 0 PID: 1168 Comm: syz.2.379 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 40.911673][ T1168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.911684][ T1168] Call Trace: [ 40.911690][ T1168] [ 40.911696][ T1168] __dump_stack+0x21/0x30 [ 40.911743][ T1168] dump_stack_lvl+0x140/0x1c0 [ 40.911767][ T1168] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.911793][ T1168] ? __filename_parentat+0x458/0x660 [ 40.911816][ T1168] dump_stack+0x19/0x20 [ 40.911839][ T1168] should_fail_ex+0x3c2/0x510 [ 40.911859][ T1168] should_failslab+0xac/0x100 [ 40.911881][ T1168] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 40.911900][ T1168] ? __d_alloc+0x42/0x8c0 [ 40.911916][ T1168] ? __d_lookup+0x4e8/0x550 [ 40.911934][ T1168] __d_alloc+0x42/0x8c0 [ 40.911950][ T1168] d_alloc+0x4c/0x1c0 [ 40.911965][ T1168] ? lookup_one_qstr_excl+0xba/0x280 [ 40.911986][ T1168] lookup_one_qstr_excl+0xcf/0x280 [ 40.912007][ T1168] filename_create+0x241/0x450 [ 40.912032][ T1168] ? kern_path_create+0x70/0x70 [ 40.912056][ T1168] ? __cfi___check_object_size+0x10/0x10 [ 40.912075][ T1168] do_mkdirat+0xa9/0x530 [ 40.912100][ T1168] ? __cfi_do_mkdirat+0x10/0x10 [ 40.912124][ T1168] ? __kasan_check_write+0x18/0x20 [ 40.912140][ T1168] ? getname_flags+0x203/0x6b0 [ 40.912159][ T1168] ? __kasan_check_write+0x18/0x20 [ 40.912176][ T1168] __x64_sys_mkdirat+0x8b/0xa0 [ 40.912200][ T1168] x64_sys_call+0x2ba8/0x2ee0 [ 40.912216][ T1168] do_syscall_64+0x57/0xf0 [ 40.912254][ T1168] ? clear_bhb_loop+0x50/0xa0 [ 40.912273][ T1168] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.912291][ T1168] RIP: 0033:0x7f6372d9e159 [ 40.912304][ T1168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.912317][ T1168] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 40.912335][ T1168] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 40.912347][ T1168] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 40.912359][ T1168] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 40.912369][ T1168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.912379][ T1168] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 40.912394][ T1168] [ 41.149533][ T1164] fuse: root generation should be zero [ 41.187266][ T1173] FAULT_INJECTION: forcing a failure. [ 41.187266][ T1173] name failslab, interval 1, probability 0, space 0, times 0 [ 41.199986][ T1173] CPU: 0 UID: 0 PID: 1173 Comm: syz.0.382 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 41.200011][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.200022][ T1173] Call Trace: [ 41.200027][ T1173] [ 41.200033][ T1173] __dump_stack+0x21/0x30 [ 41.200062][ T1173] dump_stack_lvl+0x140/0x1c0 [ 41.200085][ T1173] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.200109][ T1173] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 41.200127][ T1173] dump_stack+0x19/0x20 [ 41.200149][ T1173] should_fail_ex+0x3c2/0x510 [ 41.200169][ T1173] should_failslab+0xac/0x100 [ 41.200190][ T1173] kmem_cache_alloc_noprof+0x42/0x410 [ 41.200208][ T1173] ? __kernfs_new_node+0xf1/0x740 [ 41.200230][ T1173] __kernfs_new_node+0xf1/0x740 [ 41.200251][ T1173] ? kernfs_new_node+0x280/0x280 [ 41.200272][ T1173] ? down_write+0xee/0x2b0 [ 41.200292][ T1173] ? __cfi_down_write+0x10/0x10 [ 41.200312][ T1173] ? __kasan_check_write+0x18/0x20 [ 41.200329][ T1173] ? __kasan_check_write+0x18/0x20 [ 41.200346][ T1173] kernfs_new_node+0x154/0x280 [ 41.200368][ T1173] kernfs_create_link+0xa8/0x200 [ 41.200383][ T1173] sysfs_do_create_link_sd+0x8a/0x120 [ 41.200402][ T1173] sysfs_create_link+0x6c/0x90 [ 41.200419][ T1173] device_add_class_symlinks+0x1dd/0x260 [ 41.200445][ T1173] device_add+0x4b8/0xbf0 [ 41.200469][ T1173] wakeup_source_sysfs_add+0x1e0/0x380 [ 41.200489][ T1173] ? wakeup_source_create+0xca/0x1e0 [ 41.200505][ T1173] ? wakeup_source_register+0x1c/0x2b0 [ 41.200523][ T1173] wakeup_source_register+0x9b/0x2b0 [ 41.200540][ T1173] ep_create_wakeup_source+0x161/0x5b0 [ 41.200570][ T1173] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 41.200597][ T1173] ep_insert+0xbe2/0x1600 [ 41.200620][ T1173] ? ep_loop_check+0xa0/0xa0 [ 41.200640][ T1173] ? mutex_lock+0x97/0x1d0 [ 41.200658][ T1173] ? ep_loop_check_proc+0x2a4/0x310 [ 41.200682][ T1173] do_epoll_ctl+0x955/0xcf0 [ 41.200703][ T1173] __x64_sys_epoll_ctl+0x166/0x1b0 [ 41.200725][ T1173] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 41.200747][ T1173] ? switch_fpu_return+0x12/0x20 [ 41.200768][ T1173] x64_sys_call+0x2c44/0x2ee0 [ 41.200783][ T1173] do_syscall_64+0x57/0xf0 [ 41.200808][ T1173] ? clear_bhb_loop+0x50/0xa0 [ 41.200826][ T1173] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.200845][ T1173] RIP: 0033:0x7ff8f659e159 [ 41.200858][ T1173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.200873][ T1173] RSP: 002b:00007ff8f73d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 41.200890][ T1173] RAX: ffffffffffffffda RBX: 00007ff8f6825fa0 RCX: 00007ff8f659e159 [ 41.200902][ T1173] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 41.200912][ T1173] RBP: 00007ff8f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 41.200923][ T1173] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.200933][ T1173] R13: 00007ff8f6826038 R14: 00007ff8f6825fa0 R15: 00007ffd6a3d2cd8 [ 41.200947][ T1173] [ 41.551407][ T36] audit: type=1400 audit(1788864195.810:238): avc: denied { read } for pid=1180 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.781602][ T1205] FAULT_INJECTION: forcing a failure. [ 41.781602][ T1205] name failslab, interval 1, probability 0, space 0, times 0 [ 41.794337][ T1205] CPU: 0 UID: 0 PID: 1205 Comm: syz.0.397 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 41.794362][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.794373][ T1205] Call Trace: [ 41.794378][ T1205] [ 41.794384][ T1205] __dump_stack+0x21/0x30 [ 41.794412][ T1205] dump_stack_lvl+0x140/0x1c0 [ 41.794437][ T1205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.794462][ T1205] dump_stack+0x19/0x20 [ 41.794485][ T1205] should_fail_ex+0x3c2/0x510 [ 41.794505][ T1205] ? sk_prot_alloc+0x104/0x3a0 [ 41.794525][ T1205] should_failslab+0xac/0x100 [ 41.794546][ T1205] __kmalloc_noprof+0x69/0x510 [ 41.794566][ T1205] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 41.794592][ T1205] ? sk_prot_alloc+0x104/0x3a0 [ 41.794612][ T1205] sk_prot_alloc+0x104/0x3a0 [ 41.794631][ T1205] sk_alloc+0x40/0x590 [ 41.794650][ T1205] netlink_create+0x3d0/0x630 [ 41.794673][ T1205] ? __cfi_nfnetlink_bind+0x10/0x10 [ 41.794690][ T1205] ? __cfi_nfnetlink_unbind+0x10/0x10 [ 41.794708][ T1205] __sock_create+0x3a5/0x810 [ 41.794726][ T1205] __sys_socket+0xe1/0x1c0 [ 41.794743][ T1205] __x64_sys_socket+0x7e/0x90 [ 41.794760][ T1205] x64_sys_call+0x2608/0x2ee0 [ 41.794775][ T1205] do_syscall_64+0x57/0xf0 [ 41.794799][ T1205] ? clear_bhb_loop+0x50/0xa0 [ 41.794819][ T1205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.794837][ T1205] RIP: 0033:0x7ff8f659e159 [ 41.794850][ T1205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.794864][ T1205] RSP: 002b:00007ff8f73d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 41.794882][ T1205] RAX: ffffffffffffffda RBX: 00007ff8f6825fa0 RCX: 00007ff8f659e159 [ 41.794894][ T1205] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 41.794905][ T1205] RBP: 00007ff8f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 41.794915][ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.794933][ T1205] R13: 00007ff8f6826038 R14: 00007ff8f6825fa0 R15: 00007ffd6a3d2cd8 [ 41.794948][ T1205] [ 42.016732][ T36] audit: type=1400 audit(1788864196.280:239): avc: denied { write } for pid=1206 comm="syz.3.398" name="instances" dev="tracefs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.039047][ T36] audit: type=1400 audit(1788864196.280:240): avc: denied { add_name } for pid=1206 comm="syz.3.398" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.059431][ T36] audit: type=1400 audit(1788864196.280:241): avc: denied { create } for pid=1206 comm="syz.3.398" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 42.188744][ T1223] FAULT_INJECTION: forcing a failure. [ 42.188744][ T1223] name failslab, interval 1, probability 0, space 0, times 0 [ 42.201478][ T1223] CPU: 0 UID: 0 PID: 1223 Comm: syz.0.406 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 42.201505][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.201516][ T1223] Call Trace: [ 42.201522][ T1223] [ 42.201528][ T1223] __dump_stack+0x21/0x30 [ 42.201557][ T1223] dump_stack_lvl+0x140/0x1c0 [ 42.201581][ T1223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.201608][ T1223] dump_stack+0x19/0x20 [ 42.201630][ T1223] should_fail_ex+0x3c2/0x510 [ 42.201651][ T1223] should_failslab+0xac/0x100 [ 42.201673][ T1223] kmem_cache_alloc_node_noprof+0x45/0x420 [ 42.201692][ T1223] ? dup_task_struct+0xc1/0xd80 [ 42.201713][ T1223] ? __cfi___futex_queue+0x10/0x10 [ 42.201736][ T1223] dup_task_struct+0xc1/0xd80 [ 42.201758][ T1223] ? __kasan_check_write+0x18/0x20 [ 42.201775][ T1223] ? _raw_spin_lock_irq+0x93/0x120 [ 42.201800][ T1223] ? copy_process+0x3350/0x3350 [ 42.201822][ T1223] ? __kasan_check_write+0x18/0x20 [ 42.201839][ T1223] copy_process+0x57c/0x3350 [ 42.201861][ T1223] ? __cfi_futex_wake_mark+0x10/0x10 [ 42.201877][ T1223] ? futex_wake+0x666/0x950 [ 42.201893][ T1223] ? __cfi_copy_process+0x10/0x10 [ 42.201923][ T1223] kernel_clone+0x233/0x810 [ 42.201945][ T1223] ? __cfi_kernel_clone+0x10/0x10 [ 42.201967][ T1223] ? do_futex+0x32a/0x510 [ 42.201992][ T1223] __x64_sys_clone+0x1b7/0x230 [ 42.202015][ T1223] ? __cfi___x64_sys_clone+0x10/0x10 [ 42.202041][ T1223] ? __kasan_check_write+0x18/0x20 [ 42.202058][ T1223] ? fpregs_restore_userregs+0x11c/0x260 [ 42.202080][ T1223] ? switch_fpu_return+0x12/0x20 [ 42.202101][ T1223] x64_sys_call+0x2b3c/0x2ee0 [ 42.202117][ T1223] do_syscall_64+0x57/0xf0 [ 42.202141][ T1223] ? clear_bhb_loop+0x50/0xa0 [ 42.202161][ T1223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.202180][ T1223] RIP: 0033:0x7ff8f659e159 [ 42.202194][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.202208][ T1223] RSP: 002b:00007ff8f73d1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.202226][ T1223] RAX: ffffffffffffffda RBX: 00007ff8f6825fa0 RCX: 00007ff8f659e159 [ 42.202239][ T1223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.202249][ T1223] RBP: 00007ff8f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 42.202260][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.202270][ T1223] R13: 00007ff8f6826038 R14: 00007ff8f6825fa0 R15: 00007ffd6a3d2cd8 [ 42.202285][ T1223] [ 43.005254][ T1232] input: syz1 as /devices/virtual/input/input4 [ 43.115970][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 43.269306][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.301204][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 43.328157][ T1262] tmpfs: Unsupported parameter 'mpol' [ 43.333673][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.354248][ T9] usb 2-1: config 0 descriptor?? [ 43.695925][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 43.847070][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.858334][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.868184][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.881237][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.890468][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.899358][ T9] usb 3-1: config 0 descriptor?? [ 44.165906][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 44.307046][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.315334][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.322888][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 44.335965][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.344454][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.356197][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.364719][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.383902][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.391435][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.404815][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.415829][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.432735][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.443554][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.454505][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.464088][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.471669][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.484979][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.492598][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.501796][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.509384][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.517042][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.525070][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.533013][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.541036][ T10] usb 1-1: config 0 descriptor?? [ 44.546271][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 44.554643][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 44.564903][ T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 44.715986][ T579] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 44.755498][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.768006][ T10] usb 1-1: USB disconnect, device number 3 [ 44.774993][ T10] usblp0: removed [ 44.875934][ T579] usb 4-1: Using ep0 maxpacket: 32 [ 44.882328][ T579] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.890850][ T579] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.899689][ T579] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.908828][ T579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.920604][ T579] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.930743][ T579] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.944205][ T579] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.953342][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.962226][ T579] usb 4-1: config 0 descriptor?? [ 45.172429][ T579] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.192771][ T579] usb 2-1: USB disconnect, device number 2 [ 45.208011][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.366096][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 45.373893][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 45.373911][ T36] audit: type=1400 audit(1788864199.630:270): avc: denied { read write } for pid=1285 comm="syz.3.433" name="lp0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.383718][ T579] usb 4-1: USB disconnect, device number 2 [ 45.409761][ T36] audit: type=1400 audit(1788864199.630:271): avc: denied { open } for pid=1285 comm="syz.3.433" path="/dev/usb/lp0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.419761][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.461285][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.470303][ T579] usblp0: removed [ 45.484648][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.503384][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.524069][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.544483][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.572676][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.591592][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.609827][ T10] usb 1-1: config 0 descriptor?? [ 45.823077][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.848924][ T10] usb 1-1: USB disconnect, device number 4 [ 45.862709][ T10] usblp0: removed [ 45.900591][ T36] audit: type=1400 audit(1788864200.160:272): avc: denied { getopt } for pid=1294 comm="syz.3.436" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.956326][ T1288] usb 3-1: string descriptor 0 read error: -71 [ 45.969197][ T36] audit: type=1400 audit(1788864200.230:273): avc: denied { create } for pid=1299 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.988823][ T36] audit: type=1400 audit(1788864200.230:274): avc: denied { connect } for pid=1299 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.186019][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 46.255978][ T1301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.337041][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 46.406557][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 46.415729][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.423864][ T9] usb 4-1: Product: syz [ 46.429413][ T9] usb 4-1: Manufacturer: syz [ 46.434113][ T9] usb 4-1: SerialNumber: syz [ 46.439125][ T1301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.449923][ T1301] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 46.493801][ T9] usb 4-1: config 0 descriptor?? [ 46.498957][ T1301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.507135][ T1297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.519128][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 46.530084][ T1301] usb 2-1: config 0 descriptor?? [ 46.537262][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 46.652922][ T36] audit: type=1400 audit(1788864200.910:275): avc: denied { create } for pid=1321 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.726298][ T1282] usb 3-1: USB disconnect, device number 2 [ 46.749439][ T9] usb 2-1: USB disconnect, device number 3 [ 46.873299][ T36] audit: type=1400 audit(1788864201.130:276): avc: denied { write } for pid=1321 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.874338][ T579] usb 4-1: USB disconnect, device number 3 [ 47.221653][ T36] audit: type=1400 audit(1788864201.480:277): avc: denied { connect } for pid=1324 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.241099][ T36] audit: type=1400 audit(1788864201.480:278): avc: denied { write } for pid=1324 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.260384][ T36] audit: type=1400 audit(1788864201.480:279): avc: denied { read } for pid=1324 comm="syz.0.448" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.285961][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.437524][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.458051][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 47.473241][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.521618][ T9] usb 2-1: config 0 descriptor?? [ 47.815976][ T579] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.026991][ T579] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 48.035122][ T579] usb 3-1: config 0 has no interface number 0 [ 48.041384][ T579] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.052451][ T579] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.065377][ T579] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 48.083592][ T579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.094575][ T579] usb 3-1: config 0 descriptor?? [ 48.952074][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 48.971109][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 48.995951][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 49.021465][ T1301] usb 2-1: USB disconnect, device number 4 [ 49.044486][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 49.064570][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 49.146175][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 49.224815][ T579] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 49.256928][ T579] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 49.303592][ T579] hid_prodikeys: hid-prodikeys: failed to find output report [ 49.303592][ T579] [ 49.348623][ T579] usb 3-1: USB disconnect, device number 3 [ 50.227529][ T1404] FAULT_INJECTION: forcing a failure. [ 50.227529][ T1404] name failslab, interval 1, probability 0, space 0, times 0 [ 50.280709][ T1404] CPU: 0 UID: 0 PID: 1404 Comm: syz.3.475 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 50.280736][ T1404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.280747][ T1404] Call Trace: [ 50.280752][ T1404] [ 50.280758][ T1404] __dump_stack+0x21/0x30 [ 50.280786][ T1404] dump_stack_lvl+0x140/0x1c0 [ 50.280811][ T1404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.280836][ T1404] dump_stack+0x19/0x20 [ 50.280858][ T1404] should_fail_ex+0x3c2/0x510 [ 50.280879][ T1404] should_failslab+0xac/0x100 [ 50.280900][ T1404] kmem_cache_alloc_noprof+0x42/0x410 [ 50.280917][ T1404] ? __kasan_check_write+0x18/0x20 [ 50.280934][ T1404] ? taskstats_exit+0x161/0xb50 [ 50.280957][ T1404] ? acct_update_integrals+0x2e5/0x330 [ 50.280982][ T1404] taskstats_exit+0x161/0xb50 [ 50.281004][ T1404] ? _raw_spin_unlock_irq+0x45/0x70 [ 50.281031][ T1404] do_exit+0x7f7/0x2850 [ 50.281052][ T1404] ? __kasan_check_read+0x15/0x20 [ 50.281068][ T1404] ? futex_wake+0x627/0x950 [ 50.281083][ T1404] ? __cfi_do_exit+0x10/0x10 [ 50.281104][ T1404] ? futex_wait+0x2b8/0x7c0 [ 50.281119][ T1404] ? __cfi_futex_wait+0x10/0x10 [ 50.281133][ T1404] ? __kasan_check_write+0x18/0x20 [ 50.281149][ T1404] ? _raw_spin_lock_irq+0x93/0x120 [ 50.281174][ T1404] do_group_exit+0x21f/0x2f0 [ 50.281195][ T1404] ? __kasan_check_write+0x18/0x20 [ 50.281211][ T1404] ? recalc_sigpending+0x16c/0x1d0 [ 50.281230][ T1404] get_signal+0x134c/0x1490 [ 50.281255][ T1404] arch_do_signal_or_restart+0xbc/0x700 [ 50.281272][ T1404] ? fput+0x1a4/0x230 [ 50.281299][ T1404] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 50.281318][ T1404] syscall_exit_to_user_mode+0x57/0xb0 [ 50.281342][ T1404] do_syscall_64+0x63/0xf0 [ 50.281366][ T1404] ? clear_bhb_loop+0x50/0xa0 [ 50.281394][ T1404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.281412][ T1404] RIP: 0033:0x7f4f01f9e159 [ 50.281426][ T1404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.281440][ T1404] RSP: 002b:00007f4f02dc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.281457][ T1404] RAX: fffffffffffffe00 RBX: 00007f4f02225fa8 RCX: 00007f4f01f9e159 [ 50.281470][ T1404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4f02225fa8 [ 50.281481][ T1404] RBP: 00007f4f02225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 50.281491][ T1404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.281501][ T1404] R13: 00007f4f02226038 R14: 00007ffc337925b0 R15: 00007ffc33792698 [ 50.281515][ T1404] [ 50.757046][ T1424] process 'syz.1.484' launched './file0' with NULL argv: empty string added [ 50.805949][ T1301] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 51.256907][ T1301] usb 3-1: not running at top speed; connect to a high speed hub [ 51.265384][ T1301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 51.275290][ T1301] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 51.287663][ T1301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.511022][ T1301] usb 3-1: USB disconnect, device number 4 [ 51.594454][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 51.594475][ T36] audit: type=1400 audit(1788864205.850:290): avc: denied { read } for pid=1442 comm="syz.0.491" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.623353][ T36] audit: type=1400 audit(1788864205.850:291): avc: denied { open } for pid=1442 comm="syz.0.491" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.681920][ T36] audit: type=1400 audit(1788864205.940:292): avc: denied { setopt } for pid=1444 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.966032][ T1301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.137334][ T1301] usb 1-1: Using ep0 maxpacket: 32 [ 52.209531][ T1301] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.230704][ T1301] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.256525][ T1301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 52.286607][ T1301] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 52.308496][ T1301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.333860][ T1301] usb 1-1: config 0 descriptor?? [ 52.353072][ T1301] usbhid 1-1:0.0: can't add hid device: -22 [ 52.368594][ T1301] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 52.559197][ T1301] usb 1-1: USB disconnect, device number 5 [ 53.178279][ T36] audit: type=1400 audit(1788864207.440:293): avc: denied { read } for pid=1469 comm="syz.3.502" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.200985][ T36] audit: type=1400 audit(1788864207.440:294): avc: denied { open } for pid=1469 comm="syz.3.502" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.238371][ T36] audit: type=1400 audit(1788864207.500:295): avc: denied { ioctl } for pid=1469 comm="syz.3.502" path="socket:[9263]" dev="sockfs" ino=9263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.732293][ T36] audit: type=1326 audit(1788864207.990:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.3.507" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f01f9e159 code=0x7ffc0000 [ 53.765591][ T36] audit: type=1326 audit(1788864207.990:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.3.507" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f01f9e159 code=0x7ffc0000 [ 53.791016][ T36] audit: type=1326 audit(1788864208.000:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.3.507" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f01f9e159 code=0x7ffc0000 [ 53.823967][ T36] audit: type=1326 audit(1788864208.000:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1483 comm="syz.3.507" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4f01f9e159 code=0x7ffc0000 [ 54.593998][ T1517] FAULT_INJECTION: forcing a failure. [ 54.593998][ T1517] name failslab, interval 1, probability 0, space 0, times 0 [ 54.606959][ T1517] CPU: 0 UID: 0 PID: 1517 Comm: syz.1.521 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 54.606986][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.606997][ T1517] Call Trace: [ 54.607003][ T1517] [ 54.607009][ T1517] __dump_stack+0x21/0x30 [ 54.607039][ T1517] dump_stack_lvl+0x140/0x1c0 [ 54.607063][ T1517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.607089][ T1517] dump_stack+0x19/0x20 [ 54.607112][ T1517] should_fail_ex+0x3c2/0x510 [ 54.607133][ T1517] should_failslab+0xac/0x100 [ 54.607154][ T1517] kmem_cache_alloc_noprof+0x42/0x410 [ 54.607172][ T1517] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 54.607201][ T1517] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 54.607229][ T1517] kvm_mmu_topup_memory_cache+0x24/0x30 [ 54.607255][ T1517] kvm_mmu_load+0xa1/0x2900 [ 54.607278][ T1517] ? __kasan_check_write+0x18/0x20 [ 54.607295][ T1517] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 54.607311][ T1517] ? __asan_memcpy+0x5a/0x80 [ 54.607328][ T1517] ? ioctl_has_perm+0x408/0x500 [ 54.607344][ T1517] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 54.607361][ T1517] kvm_arch_vcpu_pre_fault_memory+0x3e2/0x480 [ 54.607384][ T1517] kvm_vcpu_pre_fault_memory+0x241/0x450 [ 54.607475][ T1517] kvm_vcpu_ioctl+0x89e/0x1000 [ 54.607493][ T1517] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.607510][ T1517] ? do_futex+0x37d/0x510 [ 54.607533][ T1517] ? __cfi_do_futex+0x10/0x10 [ 54.607554][ T1517] ? mutex_unlock+0x90/0x240 [ 54.607576][ T1517] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.607597][ T1517] ? security_file_ioctl+0x3e/0x110 [ 54.607613][ T1517] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.607628][ T1517] __se_sys_ioctl+0x126/0x1b0 [ 54.607649][ T1517] __x64_sys_ioctl+0x7f/0xa0 [ 54.607669][ T1517] x64_sys_call+0x1878/0x2ee0 [ 54.607685][ T1517] do_syscall_64+0x57/0xf0 [ 54.607710][ T1517] ? clear_bhb_loop+0x50/0xa0 [ 54.607729][ T1517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.607751][ T1517] RIP: 0033:0x7f42f2f9e159 [ 54.607766][ T1517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.607780][ T1517] RSP: 002b:00007f42f3e79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.607797][ T1517] RAX: ffffffffffffffda RBX: 00007f42f3225fa0 RCX: 00007f42f2f9e159 [ 54.607810][ T1517] RDX: 0000200000000200 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 54.607821][ T1517] RBP: 00007f42f3035024 R08: 0000000000000000 R09: 0000000000000000 [ 54.607831][ T1517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.607841][ T1517] R13: 00007f42f3226038 R14: 00007f42f3225fa0 R15: 00007ffc798ef698 [ 54.607856][ T1517] [ 55.198438][ T1301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.306308][ T1527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 55.409152][ T1301] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 55.435913][ T1301] usb 3-1: config 0 has no interface number 0 [ 55.448392][ T1301] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 55.461458][ T1537] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.497200][ T1301] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 55.525942][ T1301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.555950][ T1301] usb 3-1: Product: syz [ 55.560138][ T1301] usb 3-1: Manufacturer: syz [ 55.585941][ T1301] usb 3-1: SerialNumber: syz [ 55.613281][ T1301] usb 3-1: config 0 descriptor?? [ 55.730178][ T1546] input: syz0 as /devices/virtual/input/input5 [ 55.773344][ T1548] Bluetooth: ISO socket layer initialized [ 55.824536][ T1301] usb 3-1: USB disconnect, device number 5 [ 55.855943][ T1282] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.015901][ T1282] usb 4-1: Using ep0 maxpacket: 32 [ 56.026130][ T1282] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 56.040853][ T1282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.062020][ T1282] usb 4-1: config 0 has no interface number 0 [ 56.074813][ T1282] usb 4-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.102440][ T1282] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 56.111736][ T1282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.128494][ T1282] usb 4-1: Product: syz [ 56.137127][ T1282] usb 4-1: Manufacturer: syz [ 56.141737][ T1282] usb 4-1: SerialNumber: syz [ 56.156792][ T1282] usb 4-1: config 0 descriptor?? [ 56.162623][ T1282] hub 4-1:0.89: bad descriptor, ignoring hub [ 56.173107][ T1282] hub 4-1:0.89: probe with driver hub failed with error -5 [ 56.497646][ T1301] usb 4-1: USB disconnect, device number 4 [ 57.066002][ T1282] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.087877][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 57.087898][ T36] audit: type=1400 audit(1788864211.350:315): avc: denied { read } for pid=1621 comm="syz.1.539" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 57.088748][ T1622] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 57.094118][ T36] audit: type=1400 audit(1788864211.350:316): avc: denied { open } for pid=1621 comm="syz.1.539" path="/122/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 57.151174][ T36] audit: type=1400 audit(1788864211.350:317): avc: denied { ioctl } for pid=1621 comm="syz.1.539" path="/122/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 57.215934][ T1282] usb 3-1: Using ep0 maxpacket: 8 [ 57.222169][ T1282] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 57.235578][ T1282] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.255515][ T1282] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.311897][ T1282] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.352478][ T1282] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.452850][ T1282] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.479371][ T1282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.429821][ T1301] usb 3-1: USB disconnect, device number 6 [ 59.470138][ T1646] capability: warning: `syz.1.549' uses 32-bit capabilities (legacy support in use) [ 60.396106][ T36] audit: type=1326 audit(1788864214.660:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.2.563" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6372d9e159 code=0x7ffc0000 [ 60.421302][ T36] audit: type=1326 audit(1788864214.660:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.2.563" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6372d9e159 code=0x7ffc0000 [ 60.446612][ T36] audit: type=1326 audit(1788864214.660:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.2.563" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f6372d9e159 code=0x7ffc0000 [ 60.472024][ T36] audit: type=1326 audit(1788864214.660:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.2.563" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6372d9e159 code=0x7ffc0000 [ 61.145129][ T1688] kvm: kvm [1687]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 61.164400][ T1688] kvm: kvm [1687]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 61.242494][ T1700] mmap: syz.1.571 (1700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.297206][ T1605] syzkaller0: tun_net_xmit 76 [ 61.302076][ T1605] syzkaller0: tun_net_xmit 48 [ 61.307976][ T1704] syzkaller0: create flow: hash 182837002 index 0 [ 61.333066][ T1705] tipc: Started in network mode [ 61.338156][ T1705] tipc: Node identity 4, cluster identity 4711 [ 61.345503][ T1705] tipc: Node number set to 4 [ 61.368411][ T1704] syzkaller0 (unregistered): delete flow: hash 182837002 index 0 [ 61.425941][ T579] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 61.575931][ T579] usb 3-1: Using ep0 maxpacket: 8 [ 61.582178][ T579] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 61.590797][ T579] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.600696][ T579] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.610684][ T579] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.620784][ T579] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.634020][ T579] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.643262][ T579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.907129][ T36] audit: type=1400 audit(1788864216.170:322): avc: denied { ioctl } for pid=1711 comm="syz.0.576" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.913260][ T579] rust_binder: 1711: undelivered TRANSACTION_COMPLETE [ 61.932335][ T36] audit: type=1400 audit(1788864216.170:323): avc: denied { set_context_mgr } for pid=1711 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 61.959319][ T36] audit: type=1400 audit(1788864216.170:324): avc: denied { map } for pid=1711 comm="syz.0.576" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.249807][ T579] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 62.266397][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 62.266415][ T36] audit: type=1326 audit(1788864216.530:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.297855][ T36] audit: type=1326 audit(1788864216.530:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.323497][ T36] audit: type=1326 audit(1788864216.530:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.348989][ T36] audit: type=1326 audit(1788864216.530:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.374401][ T36] audit: type=1326 audit(1788864216.560:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.399917][ T36] audit: type=1326 audit(1788864216.560:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.419868][ T579] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.425800][ T36] audit: type=1326 audit(1788864216.560:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.445738][ T579] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.460853][ T36] audit: type=1326 audit(1788864216.560:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.495361][ T36] audit: type=1326 audit(1788864216.560:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.520707][ T36] audit: type=1326 audit(1788864216.560:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1731 comm="syz.1.583" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42f2f9e159 code=0x7ffc0000 [ 62.598403][ T579] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.618396][ T579] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.750490][ T579] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 62.759787][ T579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.772622][ T579] usb 1-1: Product: syz [ 62.781173][ T579] usb 1-1: Manufacturer: syz [ 62.790919][ T579] usb 1-1: SerialNumber: syz [ 62.969000][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.977723][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.155933][ T579] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 63.316038][ T1744] kvm: user requested TSC rate below hardware speed [ 63.326969][ T579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.338774][ T579] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 63.347938][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.356978][ T579] usb 4-1: config 0 descriptor?? [ 63.566170][ T579] usb 4-1: USB disconnect, device number 5 [ 64.005928][ T579] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 64.157092][ T579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.167397][ T579] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.176591][ T579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.185472][ T579] usb 4-1: config 0 descriptor?? [ 64.195120][ T579] usb 3-1: USB disconnect, device number 7 [ 64.271555][ T1755] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 64.281625][ T1755] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 64.536126][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 64.565962][ T579] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 64.685948][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 64.692445][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.704033][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.713316][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.721697][ T9] usb 2-1: Product: syz [ 64.726270][ T9] usb 2-1: Manufacturer: syz [ 64.730991][ T9] usb 2-1: SerialNumber: syz [ 64.736016][ T579] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.746918][ T9] usb 2-1: config 0 descriptor?? [ 64.752476][ T1757] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 64.760449][ T579] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.770121][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 64.770224][ T579] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 64.785400][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 64.793656][ T579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.801898][ T579] usb 3-1: SerialNumber: syz [ 65.009704][ T579] usb 3-1: 0:2 : does not exist [ 65.020534][ T1301] usb 1-1: USB disconnect, device number 6 [ 65.032846][ T579] usb 3-1: USB disconnect, device number 8 [ 65.055583][ T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.096033][ T9] usb 2-1: USB disconnect, device number 5 [ 65.915929][ T1301] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 65.930953][ T579] usb 4-1: USB disconnect, device number 6 [ 66.088679][ T1301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 66.689843][ T1301] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 66.712944][ T1301] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 66.738714][ T1301] usb 2-1: Product: syz [ 66.750505][ T1301] usb 2-1: Manufacturer: syz [ 66.813790][ T1301] usb 2-1: SerialNumber: syz [ 66.823888][ T1301] usb 2-1: config 0 descriptor?? [ 66.834526][ T1757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.844297][ T1301] hub 2-1:0.0: bad descriptor, ignoring hub [ 66.857499][ T1301] hub 2-1:0.0: probe with driver hub failed with error -5 [ 67.856219][ T1301] usb 2-1: USB disconnect, device number 6 [ 69.103288][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 69.123289][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 69.123317][ T36] audit: type=1400 audit(1788864223.380:352): avc: denied { getopt } for pid=1848 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.266037][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 69.272242][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 69.280587][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.290479][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.300388][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.310506][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.323617][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.332961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.455937][ T1301] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 69.605910][ T1301] usb 1-1: Using ep0 maxpacket: 8 [ 69.612101][ T1301] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 69.620488][ T1301] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.630334][ T1301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.640369][ T1301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.650445][ T1301] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.663545][ T1301] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.672680][ T1301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.778991][ T1866] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 70.446943][ T1888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.455600][ T1888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.996529][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.005261][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.013251][ T1301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 71.227021][ T1301] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 71.236345][ T1301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.245191][ T1301] usb 2-1: config 0 descriptor?? [ 71.843199][ T1301] usb 3-1: USB disconnect, device number 9 [ 72.008392][ T36] audit: type=1400 audit(1788864226.270:353): avc: denied { create } for pid=1918 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.195922][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 72.223997][ T1301] usb 1-1: USB disconnect, device number 7 [ 72.319853][ T1926] kvm: user requested TSC rate below hardware speed [ 72.347571][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.356407][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.367505][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.385963][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.399125][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.408376][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.418196][ T9] usb 4-1: Product: syz [ 72.422475][ T9] usb 4-1: Manufacturer: syz [ 72.429077][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 72.434438][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 72.440558][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 72.457846][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 72.932453][ T9] usb 4-1: USB disconnect, device number 7 [ 73.365936][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 73.516976][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.525723][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.536023][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.545170][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.557230][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.566485][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.574585][ T9] usb 4-1: Product: syz [ 73.578946][ T9] usb 4-1: Manufacturer: syz [ 73.585146][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 73.590602][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 73.596478][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 73.602599][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 73.719370][ T9] usb 2-1: USB disconnect, device number 7 [ 74.057010][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 74.207043][ T9] usb 2-1: config 0 has no interfaces? [ 74.213956][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 74.223219][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.231335][ T9] usb 2-1: Product: syz [ 74.235612][ T9] usb 2-1: Manufacturer: syz [ 74.240309][ T9] usb 2-1: SerialNumber: syz [ 74.245768][ T9] usb 2-1: config 0 descriptor?? [ 74.453537][ T9] usb 2-1: USB disconnect, device number 8 [ 74.784606][ T36] audit: type=1400 audit(1788864229.040:354): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.036051][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 75.220346][ T1301] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 75.229435][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.239736][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 75.248895][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.446995][ T1301] usb 2-1: config 2 has an invalid interface number: 49 but max is 1 [ 75.455145][ T1301] usb 2-1: config 2 has an invalid interface number: 116 but max is 1 [ 75.464430][ T1301] usb 2-1: config 2 has no interface number 0 [ 75.471679][ T9] usb 1-1: USB disconnect, device number 8 [ 75.477626][ T1301] usb 2-1: config 2 has no interface number 1 [ 75.485092][ T1301] usb 2-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 75.496349][ T1301] usb 2-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 75.507771][ T1301] usb 2-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.521241][ T1301] usb 2-1: config 2 interface 49 has no altsetting 0 [ 75.528020][ T1301] usb 2-1: config 2 interface 116 has no altsetting 0 [ 75.536318][ T1301] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 75.547605][ T1282] usb 4-1: USB disconnect, device number 8 [ 75.556935][ T1301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.575404][ T1301] usb 2-1: Product: syz [ 75.583783][ T1301] usb 2-1: Manufacturer: syz [ 75.593195][ T1301] usb 2-1: SerialNumber: syz [ 76.040331][ T1301] usbhid 2-1:2.49: couldn't find an input interrupt endpoint [ 76.064632][ T1985] FAULT_INJECTION: forcing a failure. [ 76.064632][ T1985] name failslab, interval 1, probability 0, space 0, times 0 [ 76.092304][ T1985] CPU: 0 UID: 0 PID: 1985 Comm: syz.2.674 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 76.092332][ T1985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.092343][ T1985] Call Trace: [ 76.092348][ T1985] [ 76.092356][ T1985] __dump_stack+0x21/0x30 [ 76.092385][ T1985] dump_stack_lvl+0x140/0x1c0 [ 76.092410][ T1985] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.092440][ T1985] dump_stack+0x19/0x20 [ 76.092463][ T1985] should_fail_ex+0x3c2/0x510 [ 76.092484][ T1985] should_failslab+0xac/0x100 [ 76.092506][ T1985] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 76.092525][ T1985] ? proc_alloc_inode+0x48/0x150 [ 76.092542][ T1985] proc_alloc_inode+0x48/0x150 [ 76.092558][ T1985] ? __cfi_proc_alloc_inode+0x10/0x10 [ 76.092574][ T1985] alloc_inode+0x7d/0x270 [ 76.092596][ T1985] ? __cfi_d_alloc_name+0x10/0x10 [ 76.092613][ T1985] new_inode+0x25/0x1e0 [ 76.092634][ T1985] ? __kasan_check_write+0x18/0x20 [ 76.092651][ T1985] proc_setup_thread_self+0xe0/0x280 [ 76.092677][ T1985] proc_fill_super+0x564/0x850 [ 76.092696][ T1985] get_tree_nodev+0xcb/0x170 [ 76.092710][ T1985] ? __cfi_proc_fill_super+0x10/0x10 [ 76.092730][ T1985] proc_get_tree+0x20/0x30 [ 76.092747][ T1985] vfs_get_tree+0x9e/0x290 [ 76.092764][ T1985] vfs_cmd_create+0xb0/0x220 [ 76.092778][ T1985] ? vfs_fsconfig_locked+0x6c/0x350 [ 76.092793][ T1985] vfs_fsconfig_locked+0x76/0x350 [ 76.092809][ T1985] __se_sys_fsconfig+0x72d/0x870 [ 76.092824][ T1985] ? __x64_sys_fsconfig+0xf0/0xf0 [ 76.092840][ T1985] ? __kasan_check_write+0x18/0x20 [ 76.092857][ T1985] ? fpregs_restore_userregs+0x11c/0x260 [ 76.092878][ T1985] __x64_sys_fsconfig+0xc3/0xf0 [ 76.092893][ T1985] x64_sys_call+0x11bb/0x2ee0 [ 76.092909][ T1985] do_syscall_64+0x57/0xf0 [ 76.092934][ T1985] ? clear_bhb_loop+0x50/0xa0 [ 76.092953][ T1985] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.092972][ T1985] RIP: 0033:0x7f6372d9e159 [ 76.092986][ T1985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.093000][ T1985] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 76.093019][ T1985] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 76.093032][ T1985] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 76.093042][ T1985] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.093053][ T1985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.093063][ T1985] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 76.093078][ T1985] [ 76.093102][ T1985] proc_fill_super: can't allocate /proc/thread-self [ 76.372316][ T1989] overlayfs: missing 'workdir' [ 76.392320][ T36] audit: type=1400 audit(1788864230.650:355): avc: denied { execute_no_trans } for pid=1990 comm="syz.3.677" path="/175/file2" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.467132][ T1301] usb 2-1: USB disconnect, device number 9 [ 76.972756][ T36] audit: type=1400 audit(1788864231.230:356): avc: denied { read write } for pid=2020 comm="syz.1.691" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 76.995998][ T36] audit: type=1400 audit(1788864231.230:357): avc: denied { open } for pid=2020 comm="syz.1.691" path="/154/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 77.065907][ T36] audit: type=1400 audit(1788864231.320:358): avc: denied { setopt } for pid=2028 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.111248][ T2035] FAULT_INJECTION: forcing a failure. [ 77.111248][ T2035] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.124387][ T2035] CPU: 0 UID: 0 PID: 2035 Comm: syz.1.698 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 77.124412][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.124423][ T2035] Call Trace: [ 77.124428][ T2035] [ 77.124435][ T2035] __dump_stack+0x21/0x30 [ 77.124463][ T2035] dump_stack_lvl+0x140/0x1c0 [ 77.124488][ T2035] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.124513][ T2035] dump_stack+0x19/0x20 [ 77.124536][ T2035] should_fail_ex+0x3c2/0x510 [ 77.124557][ T2035] should_fail+0xf/0x20 [ 77.124579][ T2035] get_futex_key+0x178/0x940 [ 77.124602][ T2035] ? __cfi_get_futex_key+0x10/0x10 [ 77.124623][ T2035] ? preempt_schedule_common+0x2d/0x60 [ 77.124642][ T2035] ? preempt_schedule+0xc5/0xe0 [ 77.124658][ T2035] ? __cfi_preempt_schedule+0x10/0x10 [ 77.124675][ T2035] futex_wait_setup+0xae/0x260 [ 77.124691][ T2035] ? preempt_schedule_thunk+0x1a/0x40 [ 77.124709][ T2035] ? __cfi_futex_wait_setup+0x10/0x10 [ 77.124725][ T2035] ? __asan_memcpy+0x5a/0x80 [ 77.124744][ T2035] __futex_wait+0x12c/0x3d0 [ 77.124760][ T2035] ? __cfi___futex_wait+0x10/0x10 [ 77.124778][ T2035] ? __cfi_futex_wake_mark+0x10/0x10 [ 77.124794][ T2035] ? futex_wake+0x666/0x950 [ 77.124809][ T2035] futex_wait+0x128/0x7c0 [ 77.124824][ T2035] ? __cfi_futex_wait+0x10/0x10 [ 77.124842][ T2035] do_futex+0x32a/0x510 [ 77.124865][ T2035] ? __cfi_do_futex+0x10/0x10 [ 77.124888][ T2035] __se_sys_futex+0x13c/0x320 [ 77.124912][ T2035] ? __x64_sys_futex+0x110/0x110 [ 77.124936][ T2035] ? __kasan_check_write+0x18/0x20 [ 77.124953][ T2035] __x64_sys_futex+0xe9/0x110 [ 77.124977][ T2035] x64_sys_call+0x227f/0x2ee0 [ 77.124992][ T2035] do_syscall_64+0x57/0xf0 [ 77.125016][ T2035] ? clear_bhb_loop+0x50/0xa0 [ 77.125036][ T2035] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.125054][ T2035] RIP: 0033:0x7f42f2f9e159 [ 77.125068][ T2035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.125082][ T2035] RSP: 002b:00007f42f3e790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.125100][ T2035] RAX: ffffffffffffffda RBX: 00007f42f3225fa8 RCX: 00007f42f2f9e159 [ 77.125113][ T2035] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42f3225fa8 [ 77.125124][ T2035] RBP: 00007f42f3225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.125134][ T2035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.125144][ T2035] R13: 00007f42f3226038 R14: 00007ffc798ef5b0 R15: 00007ffc798ef698 [ 77.125159][ T2035] [ 77.400045][ T36] audit: type=1400 audit(1788864231.660:359): avc: denied { connect } for pid=2037 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.425899][ T36] audit: type=1400 audit(1788864231.660:360): avc: denied { write } for pid=2037 comm="syz.3.699" path="socket:[12065]" dev="sockfs" ino=12065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.517713][ T2050] batadv_slave_1: entered promiscuous mode [ 77.523706][ T2049] batadv_slave_1: left promiscuous mode [ 77.549477][ T36] audit: type=1400 audit(1788864231.810:361): avc: denied { write } for pid=2053 comm="syz.0.708" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.549737][ T2054] random: crng reseeded on system resumption [ 77.573010][ T36] audit: type=1400 audit(1788864231.810:362): avc: denied { open } for pid=2053 comm="syz.0.708" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.615118][ T36] audit: type=1400 audit(1788864231.870:363): avc: denied { ioctl } for pid=2053 comm="syz.0.708" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 ý[ 78.283959][ T2136] 9pnet_virtio: no channels available for device syz [ 78.746178][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 78.905981][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 78.912287][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 78.920628][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.930554][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.940674][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.950759][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.963967][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.973159][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.105927][ T1301] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 79.257001][ T1301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.276293][ T1301] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 79.309192][ T1301] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 79.335086][ T1301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.536680][ T2210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 79.676453][ T2215] rust_binder: 2213:2215 got reply transaction with no transaction stack [ 79.693700][ T2215] rust_binder: 2213:2215 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 80.150683][ T2221] rust_binder: Write failure EINVAL in pid:408 [ 80.161489][ T2223] netlink: 72 bytes leftover after parsing attributes in process `syz.2.783'. [ 80.213655][ T2229] FAULT_INJECTION: forcing a failure. [ 80.213655][ T2229] name failslab, interval 1, probability 0, space 0, times 0 [ 80.226499][ T2229] CPU: 0 UID: 0 PID: 2229 Comm: syz.2.786 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 80.226524][ T2229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.226534][ T2229] Call Trace: [ 80.226540][ T2229] [ 80.226546][ T2229] __dump_stack+0x21/0x30 [ 80.226575][ T2229] dump_stack_lvl+0x140/0x1c0 [ 80.226598][ T2229] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.226622][ T2229] ? avc_has_perm+0x155/0x240 [ 80.226643][ T2229] dump_stack+0x19/0x20 [ 80.226665][ T2229] should_fail_ex+0x3c2/0x510 [ 80.226685][ T2229] should_failslab+0xac/0x100 [ 80.226706][ T2229] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 80.226724][ T2229] ? selinux_socket_create+0x188/0x290 [ 80.226746][ T2229] ? sock_alloc_inode+0x48/0x150 [ 80.226762][ T2229] sock_alloc_inode+0x48/0x150 [ 80.226777][ T2229] ? __cfi_sock_alloc_inode+0x10/0x10 [ 80.226792][ T2229] alloc_inode+0x7d/0x270 [ 80.226813][ T2229] ? bpf_lsm_socket_create+0xd/0x20 [ 80.226832][ T2229] new_inode_pseudo+0x19/0x40 [ 80.226853][ T2229] __sock_create+0x130/0x810 [ 80.226871][ T2229] __sys_socketpair+0x221/0x5c0 [ 80.226889][ T2229] __x64_sys_socketpair+0x9f/0xc0 [ 80.226907][ T2229] x64_sys_call+0x2081/0x2ee0 [ 80.226922][ T2229] do_syscall_64+0x57/0xf0 [ 80.226946][ T2229] ? clear_bhb_loop+0x50/0xa0 [ 80.226966][ T2229] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.226984][ T2229] RIP: 0033:0x7f6372d9e159 [ 80.226997][ T2229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.227011][ T2229] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.227029][ T2229] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 80.227041][ T2229] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 80.227051][ T2229] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 80.227061][ T2229] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 80.227072][ T2229] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 80.227086][ T2229] [ 80.227093][ T2229] socket: no more sockets [ 80.459981][ T1301] rust_binder: 2213: undelivered TRANSACTION_ERROR: 29201 [ 80.525787][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 80.525806][ T36] audit: type=1400 audit(1788864234.780:371): avc: denied { mount } for pid=2240 comm="syz.1.792" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.556081][ T36] audit: type=1400 audit(1788864234.820:372): avc: denied { ioctl } for pid=2242 comm="syz.2.793" path="socket:[13398]" dev="sockfs" ino=13398 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.659648][ T2259] tmpfs: Unsupported parameter 'mpol' [ 80.845974][ T1301] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 80.997026][ T1301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.007047][ T1301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.020374][ T1301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.029574][ T1301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.518691][ T1301] usb 1-1: USB disconnect, device number 9 [ 81.882391][ T1301] usb 4-1: USB disconnect, device number 9 [ 81.930700][ T36] audit: type=1400 audit(1788864236.190:373): avc: denied { getopt } for pid=2285 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.163534][ T36] audit: type=1400 audit(1788864236.420:374): avc: denied { read } for pid=2308 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.284899][ T2320] 9pnet_virtio: no channels available for device syz [ 82.555094][ T36] audit: type=1400 audit(1788864236.810:375): avc: denied { load_policy } for pid=2339 comm="syz.1.836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.555128][ T2340] SELinux: policydb version -692342458 does not match my version range 15-33 [ 82.592132][ T2343] 9pnet_virtio: no channels available for device syz [ 82.645497][ T2340] SELinux: failed to load policy [ 82.665932][ T36] audit: type=1400 audit(1788864236.920:376): avc: denied { append } for pid=2349 comm="syz.3.841" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.671919][ T2352] random: crng reseeded on system resumption [ 82.740819][ T2358] tmpfs: Unsupported parameter 'mpol' [ 82.786562][ T2363] Unsupported ieee802154 address type: 0 [ 82.794818][ T36] audit: type=1400 audit(1788864237.050:377): avc: denied { read write } for pid=2364 comm="syz.3.848" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.818348][ T36] audit: type=1400 audit(1788864237.050:378): avc: denied { open } for pid=2364 comm="syz.3.848" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.867611][ T36] audit: type=1400 audit(1788864237.130:379): avc: denied { write } for pid=2367 comm="syz.3.849" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.911241][ T36] audit: type=1400 audit(1788864237.170:380): avc: denied { setopt } for pid=2372 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.924159][ T2376] rust_binder: Write failure EFAULT in pid:499 [ 83.163592][ T2411] tipc: Started in network mode [ 83.177069][ T2411] tipc: Node identity , cluster identity 4711 [ 83.189722][ T2411] tipc: Failed to set node id, please configure manually [ 83.200830][ T2414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.201210][ T2414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.207831][ T2411] tipc: Enabling of bearer rejected, failed to enable media [ 83.222828][ T2414] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 83.222847][ T2414] rust_binder: Read failure Err(EFAULT) in pid:551 [ 83.231229][ T2414] rust_binder: 2413:2414 got transaction to invalid handle 1 [ 83.245450][ T2414] rust_binder: 2413:2414 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 83.265618][ T1304] rust_binder: 2413: undelivered TRANSACTION_ERROR: 29201 [ 83.486143][ T2437] tmpfs: Unsupported parameter 'mpol' [ 83.493949][ T2427] SELinux: policydb string length 0 does not match expected length 8 [ 83.509204][ T2427] SELinux: failed to load policy [ 83.581567][ T367] udevd[367]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 83.625932][ T1304] usb 3-1: USB disconnect, device number 10 [ 83.694645][ T2455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 83.714590][ T1301] rust_binder: 2367: undelivered freeze notification, 0000000000000000 [ 83.730893][ T367] udevd[367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 83.841196][ T2472] SELinux: policydb string length 1048584 does not match expected length 8 [ 83.877483][ T2472] SELinux: failed to load policy [ 83.951959][ T2481] SELinux: policydb string length 0 does not match expected length 8 [ 83.972869][ T2484] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 83.986020][ T2481] SELinux: failed to load policy [ 84.018196][ T2484] overlayfs: missing 'lowerdir' [ 84.138580][ T2502] 9pnet_virtio: no channels available for device syz [ 84.212853][ T2513] netlink: 'syz.2.918': attribute type 2 has an invalid length. [ 84.295465][ T2522] kvm: emulating exchange as write [ 84.301254][ T1304] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.425965][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 84.467141][ T1304] usb 1-1: Using ep0 maxpacket: 8 [ 84.486704][ T1304] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 84.500187][ T1304] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.510897][ T2526] SELinux: policydb string length 0 does not match expected length 8 [ 84.528963][ T2526] SELinux: failed to load policy [ 84.535953][ T1304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.560232][ T1304] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.592661][ T1304] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.605772][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 84.627670][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 84.650347][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.660268][ T1304] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.681676][ T1304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.691763][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.723026][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.755438][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.800545][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.819908][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.105957][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 85.262819][ T367] udevd[367]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 85.267458][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.297530][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 85.317493][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.345977][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 85.357076][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.365087][ T9] usb 3-1: Product: syz [ 85.386047][ T9] usb 3-1: Manufacturer: syz [ 85.396987][ T2532] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.436252][ T2549] SELinux: policydb string length 0 does not match expected length 8 [ 85.444533][ T2549] SELinux: failed to load policy [ 85.609462][ T9] usb 3-1: USB disconnect, device number 11 [ 86.210744][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 86.210755][ T2564] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 86.210764][ T36] audit: type=1400 audit(1788864240.470:390): avc: denied { remount } for pid=2563 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.349753][ T36] audit: type=1400 audit(1788864240.610:391): avc: denied { mount } for pid=2569 comm="syz.1.941" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.439523][ T2576] kvm: user requested TSC rate below hardware speed [ 86.512923][ T2578] FAULT_INJECTION: forcing a failure. [ 86.512923][ T2578] name failslab, interval 1, probability 0, space 0, times 0 [ 86.533319][ T2578] CPU: 0 UID: 0 PID: 2578 Comm: syz.1.946 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 86.533348][ T2578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.533359][ T2578] Call Trace: [ 86.533365][ T2578] [ 86.533372][ T2578] __dump_stack+0x21/0x30 [ 86.533401][ T2578] dump_stack_lvl+0x140/0x1c0 [ 86.533425][ T2578] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.533451][ T2578] dump_stack+0x19/0x20 [ 86.533474][ T2578] should_fail_ex+0x3c2/0x510 [ 86.533495][ T2578] should_failslab+0xac/0x100 [ 86.533517][ T2578] __kmalloc_cache_noprof+0x41/0x470 [ 86.533535][ T2578] ? __kasan_check_write+0x18/0x20 [ 86.533552][ T2578] ? get_device_parent+0x266/0x470 [ 86.533577][ T2578] ? _raw_spin_unlock+0x45/0x60 [ 86.533610][ T2578] get_device_parent+0x266/0x470 [ 86.533636][ T2578] device_add+0x313/0xbf0 [ 86.533659][ T2578] ? wakeup_source_sysfs_add+0x1c9/0x380 [ 86.533682][ T2578] wakeup_source_sysfs_add+0x1e0/0x380 [ 86.533703][ T2578] ? wakeup_source_create+0xca/0x1e0 [ 86.533720][ T2578] ? wakeup_source_register+0x1c/0x2b0 [ 86.533738][ T2578] wakeup_source_register+0x9b/0x2b0 [ 86.533755][ T2578] ep_create_wakeup_source+0x161/0x5b0 [ 86.533780][ T2578] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 86.533809][ T2578] ep_insert+0xbe2/0x1600 [ 86.533832][ T2578] ? ep_loop_check+0xa0/0xa0 [ 86.533852][ T2578] ? mutex_lock+0x97/0x1d0 [ 86.533870][ T2578] ? ep_loop_check_proc+0x2a4/0x310 [ 86.533894][ T2578] do_epoll_ctl+0x955/0xcf0 [ 86.533916][ T2578] __x64_sys_epoll_ctl+0x166/0x1b0 [ 86.533938][ T2578] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 86.533961][ T2578] ? switch_fpu_return+0x12/0x20 [ 86.533983][ T2578] x64_sys_call+0x2c44/0x2ee0 [ 86.534011][ T2578] do_syscall_64+0x57/0xf0 [ 86.534034][ T2578] ? clear_bhb_loop+0x50/0xa0 [ 86.534054][ T2578] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.534072][ T2578] RIP: 0033:0x7f42f2f9e159 [ 86.534085][ T2578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.534099][ T2578] RSP: 002b:00007f42f3e79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 86.534116][ T2578] RAX: ffffffffffffffda RBX: 00007f42f3225fa0 RCX: 00007f42f2f9e159 [ 86.534128][ T2578] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 86.534138][ T2578] RBP: 00007f42f3035024 R08: 0000000000000000 R09: 0000000000000000 [ 86.534149][ T2578] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.534159][ T2578] R13: 00007f42f3226038 R14: 00007f42f3225fa0 R15: 00007ffc798ef698 [ 86.534173][ T2578] [ 87.182548][ T9] usb 1-1: USB disconnect, device number 10 [ 87.213706][ T2580] FAULT_INJECTION: forcing a failure. [ 87.213706][ T2580] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.241869][ T1282] usb 4-1: USB disconnect, device number 10 [ 87.250112][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: syz.3.947 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 87.250139][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.250150][ T2580] Call Trace: [ 87.250156][ T2580] [ 87.250162][ T2580] __dump_stack+0x21/0x30 [ 87.250192][ T2580] dump_stack_lvl+0x140/0x1c0 [ 87.250217][ T2580] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.250241][ T2580] ? stack_trace_save+0xaa/0x100 [ 87.250262][ T2580] ? kasan_save_track+0x4f/0x80 [ 87.250282][ T2580] ? kasan_save_alloc_info+0x3a/0x50 [ 87.250298][ T2580] dump_stack+0x19/0x20 [ 87.250321][ T2580] should_fail_ex+0x3c2/0x510 [ 87.250342][ T2580] should_fail+0xf/0x20 [ 87.250360][ T2580] get_futex_key+0x178/0x940 [ 87.250383][ T2580] ? __cfi_get_futex_key+0x10/0x10 [ 87.250406][ T2580] futex_wake+0x150/0x950 [ 87.250421][ T2580] ? __cfi_futex_wake+0x10/0x10 [ 87.250436][ T2580] ? __kasan_slab_alloc+0x73/0x90 [ 87.250457][ T2580] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 87.250486][ T2580] ? security_file_alloc+0x49/0x220 [ 87.250503][ T2580] do_futex+0x37d/0x510 [ 87.250525][ T2580] ? errseq_sample+0x48/0x70 [ 87.250551][ T2580] ? __cfi_do_futex+0x10/0x10 [ 87.250575][ T2580] __se_sys_futex+0x13c/0x320 [ 87.250599][ T2580] ? __x64_sys_futex+0x110/0x110 [ 87.250622][ T2580] ? is_dma_buf_file+0x11/0x50 [ 87.250647][ T2580] ? fd_install+0x246/0x400 [ 87.250667][ T2580] __x64_sys_futex+0xe9/0x110 [ 87.250692][ T2580] x64_sys_call+0x227f/0x2ee0 [ 87.250707][ T2580] do_syscall_64+0x57/0xf0 [ 87.250732][ T2580] ? clear_bhb_loop+0x50/0xa0 [ 87.250752][ T2580] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.250771][ T2580] RIP: 0033:0x7f4f01f9e159 [ 87.250785][ T2580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.250800][ T2580] RSP: 002b:00007f4f02dc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.250818][ T2580] RAX: ffffffffffffffda RBX: 00007f4f02225fa8 RCX: 00007f4f01f9e159 [ 87.250831][ T2580] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f02225fac [ 87.250843][ T2580] RBP: 00007f4f02225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 87.250854][ T2580] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 87.250865][ T2580] R13: 00007f4f02226038 R14: 00007ffc337925b0 R15: 00007ffc33792698 [ 87.250880][ T2580] [ 87.535926][ T2591] fuse: Bad value for 'group_id' [ 87.540902][ T2591] fuse: Bad value for 'group_id' [ 87.619859][ T2603] FAULT_INJECTION: forcing a failure. [ 87.619859][ T2603] name failslab, interval 1, probability 0, space 0, times 0 [ 87.633060][ T2603] CPU: 0 UID: 0 PID: 2603 Comm: syz.2.959 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 87.633088][ T2603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.633099][ T2603] Call Trace: [ 87.633104][ T2603] [ 87.633112][ T2603] __dump_stack+0x21/0x30 [ 87.633141][ T2603] dump_stack_lvl+0x140/0x1c0 [ 87.633165][ T2603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.633192][ T2603] dump_stack+0x19/0x20 [ 87.633215][ T2603] should_fail_ex+0x3c2/0x510 [ 87.633236][ T2603] should_failslab+0xac/0x100 [ 87.633258][ T2603] __kmalloc_cache_noprof+0x41/0x470 [ 87.633277][ T2603] ? __kasan_check_write+0x18/0x20 [ 87.633294][ T2603] ? get_device_parent+0x266/0x470 [ 87.633320][ T2603] ? _raw_spin_unlock+0x45/0x60 [ 87.633346][ T2603] get_device_parent+0x266/0x470 [ 87.633371][ T2603] device_add+0x313/0xbf0 [ 87.633395][ T2603] ? wakeup_source_sysfs_add+0x1c9/0x380 [ 87.633417][ T2603] wakeup_source_sysfs_add+0x1e0/0x380 [ 87.633439][ T2603] ? wakeup_source_create+0xca/0x1e0 [ 87.633455][ T2603] ? wakeup_source_register+0x1c/0x2b0 [ 87.633473][ T2603] wakeup_source_register+0x9b/0x2b0 [ 87.633491][ T2603] ep_create_wakeup_source+0x161/0x5b0 [ 87.633526][ T2603] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 87.633554][ T2603] ep_insert+0xbe2/0x1600 [ 87.633578][ T2603] ? ep_loop_check+0xa0/0xa0 [ 87.633599][ T2603] ? mutex_lock+0x97/0x1d0 [ 87.633617][ T2603] ? ep_loop_check_proc+0x2a4/0x310 [ 87.633642][ T2603] do_epoll_ctl+0x955/0xcf0 [ 87.633664][ T2603] __x64_sys_epoll_ctl+0x166/0x1b0 [ 87.633686][ T2603] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 87.633709][ T2603] ? switch_fpu_return+0x12/0x20 [ 87.633731][ T2603] x64_sys_call+0x2c44/0x2ee0 [ 87.633747][ T2603] do_syscall_64+0x57/0xf0 [ 87.633771][ T2603] ? clear_bhb_loop+0x50/0xa0 [ 87.633791][ T2603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.633810][ T2603] RIP: 0033:0x7f6372d9e159 [ 87.633824][ T2603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.633839][ T2603] RSP: 002b:00007f6373c8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 87.633857][ T2603] RAX: ffffffffffffffda RBX: 00007f6373025fa0 RCX: 00007f6372d9e159 [ 87.633870][ T2603] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 87.633880][ T2603] RBP: 00007f6372e35024 R08: 0000000000000000 R09: 0000000000000000 [ 87.633891][ T2603] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.633902][ T2603] R13: 00007f6373026038 R14: 00007f6373025fa0 R15: 00007ffe0f3c9438 [ 87.633917][ T2603] [ 87.936018][ T2610] tmpfs: Unsupported parameter 'mpol' [ 87.986371][ T36] audit: type=1400 audit(1788864242.250:392): avc: denied { getopt } for pid=2615 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 a[ 88.285943][ T1282] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 88.346654][ T2638] overlayfs: failed to resolve './file1': -2 [ 88.376506][ T2640] rust_binder: Write failure EINVAL in pid:515 [ 88.437274][ T1282] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.472804][ T1282] usb 3-1: config 0 has no interface number 0 [ 88.493937][ T1282] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.534944][ T1282] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 88.567918][ T1282] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.608130][ T1282] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 88.635963][ T1301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 88.655839][ T1282] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 88.692423][ T1282] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.737776][ T1282] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 88.768053][ T1282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.797345][ T1301] usb 2-1: Using ep0 maxpacket: 8 [ 88.802800][ T1282] usb 3-1: config 0 descriptor?? [ 88.818163][ T2619] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.825384][ T2619] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.835792][ T1301] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 88.857113][ T1301] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.890955][ T1301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.925881][ T1301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.965911][ T1301] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.005887][ T1301] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.043481][ T1301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.073656][ T1301] usb 3-1: USB disconnect, device number 12 [ 89.422803][ T36] audit: type=1400 audit(1788864243.680:393): avc: denied { setopt } for pid=2656 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.658063][ T36] audit: type=1400 audit(1788864243.920:394): avc: denied { read } for pid=2668 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.716466][ T2675] FAULT_INJECTION: forcing a failure. [ 89.716466][ T2675] name failslab, interval 1, probability 0, space 0, times 0 [ 89.755902][ T2675] CPU: 0 UID: 0 PID: 2675 Comm: syz.0.991 Not tainted syzkaller #0 5b18096d2acadad9f3a622c0de28b00c51d60767 [ 89.755931][ T2675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.755943][ T2675] Call Trace: [ 89.755948][ T2675] [ 89.755955][ T2675] __dump_stack+0x21/0x30 [ 89.755984][ T2675] dump_stack_lvl+0x140/0x1c0 [ 89.756008][ T2675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.756034][ T2675] dump_stack+0x19/0x20 [ 89.756057][ T2675] should_fail_ex+0x3c2/0x510 [ 89.756078][ T2675] should_failslab+0xac/0x100 [ 89.756100][ T2675] kmem_cache_alloc_noprof+0x42/0x410 [ 89.756118][ T2675] ? alloc_empty_file+0xbf/0x270 [ 89.756140][ T2675] ? _raw_spin_unlock+0x45/0x60 [ 89.756167][ T2675] alloc_empty_file+0xbf/0x270 [ 89.756190][ T2675] ? _raw_spin_unlock+0x45/0x60 [ 89.756215][ T2675] alloc_file_pseudo+0x142/0x1f0 [ 89.756246][ T2675] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 89.756270][ T2675] ? __mutex_init+0xa6/0x1a0 [ 89.756295][ T2675] create_pipe_files+0x287/0x6c0 [ 89.756314][ T2675] __do_pipe_flags+0x50/0x2f0 [ 89.756331][ T2675] do_pipe2+0xab/0x190 [ 89.756349][ T2675] ? xfd_validate_state+0x68/0x140 [ 89.756374][ T2675] ? pipe_fcntl+0x520/0x520 [ 89.756393][ T2675] __x64_sys_pipe+0x3e/0x50 [ 89.756410][ T2675] x64_sys_call+0xd3/0x2ee0 [ 89.756425][ T2675] do_syscall_64+0x57/0xf0 [ 89.756452][ T2675] ? clear_bhb_loop+0x50/0xa0 [ 89.756473][ T2675] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.756491][ T2675] RIP: 0033:0x7ff8f659e159 [ 89.756504][ T2675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.756519][ T2675] RSP: 002b:00007ff8f73d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 89.756537][ T2675] RAX: ffffffffffffffda RBX: 00007ff8f6825fa0 RCX: 00007ff8f659e159 [ 89.756550][ T2675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 89.756561][ T2675] RBP: 00007ff8f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 89.756572][ T2675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.756582][ T2675] R13: 00007ff8f6826038 R14: 00007ff8f6825fa0 R15: 00007ffd6a3d2cd8 [ 89.756597][ T2675] [ 90.417195][ T2682] random: crng reseeded on system resumption [ 90.656286][ T2695] 9pnet_virtio: no channels available for device syz [ 90.763235][ T2700] 9pnet_virtio: no channels available for device syz [ 91.452673][ T1282] usb 2-1: USB disconnect, device number 10 [ 91.499608][ T2760] can: request_module (can-proto-6) failed. [ 91.667111][ T55] Bluetooth: hci0: setting up ROME/QCA6390 Hüü[ 91.829652][ T2800] usb usb8: usbfs: process 2800 (syz.1.1048) did not claim interface 0 before use üü[ 92.065927][ T1282] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 92.217210][ T1282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.227098][ T1282] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.238627][ T1282] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 92.247859][ T1282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.256173][ T1282] usb 3-1: Product: syz [ 92.260494][ T1282] usb 3-1: Manufacturer: syz [ 92.265169][ T1282] usb 3-1: SerialNumber: syz [ 92.488029][ T1282] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 92.551637][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 92.570944][ T2832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1062'. ü[ 92.678376][ T1282] usb 3-1: USB disconnect, device number 13 [ 92.688561][ T1282] usblp0: removed [ 93.231739][ T36] audit: type=1400 audit(1788864247.490:395): avc: denied { bind } for pid=2862 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 ü[ 93.474540][ T2880] rust_binder: 2879:2880 got transaction with invalid offset [ 93.492351][ T2880] rust_binder: Failure in copy_transaction_data: EINVAL [ 93.492427][ T2880] rust_binder: 2879:2880 transaction call to 2879:0 failed EINVAL, code 0 size 120-3976 [ 93.525535][ T9] rust_binder: 2879: undelivered TRANSACTION_ERROR: 29201 [ 93.591037][ T2890] fuse: Bad value for 'user_id' [ 93.601534][ T2890] fuse: Bad value for 'user_id' [ 93.677600][ T36] audit: type=1400 audit(1788864247.940:396): avc: denied { create } for pid=2899 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.889938][ T2908] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1096'. [ 93.949784][ T36] audit: type=1400 audit(1788864248.210:397): avc: denied { mounton } for pid=2910 comm="syz.0.1098" path="/298/rpc_pipefs" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.017117][ T2915] 9pnet_virtio: no channels available for device syz [ 94.066830][ T2814] Bluetooth: hci0: command 0xfc00 tx timeout [ 94.072923][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 94.080722][ T55] Bluetooth: hci0: Retry BT power ON:0 Hü[ 94.103089][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 94.288437][ T2933] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem r permissive=1 [ 114.229066][ T36] audit: type=1400 audit(1788864248.630:399): avc: denied { add_name } for pid=2936 comm="syz.0.1113" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.315903][ T36] audit: type=1400 audit(1788864248.630:400): avc: denied { create } for pid=2936 comm="syz.0.1113" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 ü[ 114.418863][ T1596] bridge_slave_1: left allmulticast mode [ 114.424565][ T1596] bridge_slave_1: left promiscuous mode [ 114.455887][ T36] audit: type=1400 audit(1788864248.650:401): avc: denied { create } for pid=2936 comm="syz.0.1113" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 114.476140][ T1596] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.516356][ T1596] bridge_slave_0: left allmulticast mode [ 114.522060][ T1596] bridge_slave_0: left promiscuous mode [ 114.555963][ T1596] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.636870][ T36] audit: type=1400 audit(1788864268.900:402): avc: denied { mounton } for pid=2945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.831023][ T1596] veth1_macvtap: left promiscuous mode [ 114.845929][ T1596] veth0_vlan: left promiscuous mode [ 116.455900][ T2814] Bluetooth: hci0: command 0xfc00 tx timeout [ 116.462031][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 116.469833][ T55] Bluetooth: hci0: Retry BT power ON:1 Hüü[ 118.855938][ T2814] Bluetooth: hci0: command 0xfc00 tx timeout [ 118.862007][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) [ 118.869789][ T55] Bluetooth: hci0: Retry BT power ON:2 Hüü[ 121.255927][ T2814] Bluetooth: hci0: command 0xfc00 tx timeout [ 121.262459][ T55] Bluetooth: hci0: Reading QCA version information failed (-110) SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1114 state=3 status=67 (errno 32: Broken pipe) [ 125.511011][ T36] audit: type=1400 audit(1788864279.770:403): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2597]" dev="pipefs" ino=2597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1