last executing test programs: 37.641049295s ago: executing program 2 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x5}}, 0x24, 0x2) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xd0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xf, 0x4}}}}}]}}]}}, 0x0) epoll_create1(0x80000) 37.130077772s ago: executing program 2 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x11}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @broadcast}, 0x10, {0x2, 0x4e24, @multicast1}, 'wg0\x00'}) 37.079191411s ago: executing program 2 (id=906): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x82) write(r1, &(0x7f0000000000)='3', 0x4e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000001c0)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 37.021407692s ago: executing program 2 (id=907): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) ptrace(0x10, r3) tkill(r3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) gettid() ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) close(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xffdfffffffffffff, 0x2, 0x4000000000000, 0x0, 0x4002004c4, 0x800000000001006, 0x8000000000000000, 0x20c595, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1], 0xdddd1000, 0x2032d2}) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.210779914s ago: executing program 2 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tgkill(r2, r2, 0x5) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) ptrace$cont(0x20, r2, 0xff, 0x8000000000000001) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x3fb) 36.17875331s ago: executing program 2 (id=912): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xd, 0x35, {0x35, 0xf, "8c41ee1b4a1fa41e91880fed5274507a19e08b3a44a661f47179b21b55ac473f498a274fa3f16e417467c965f7c29210fb1d49"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000100)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x8, "64ce1a19"}, @main=@item_4={0x3, 0x0, 0xc4cc0a73052fd186, "ba9a8ec2"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x9, "07ac63bc"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x909}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0xf, 0xb5, "2780dbcd2f66396abef6943fb32873f6585308507eb48befb61c31b444c9772a3ab25bb3be8bceba66767734039301cfeb512267df105f28de0944779a008622daf3f21dbc4b0596ecce53e7ce0a605eaf5915a536d46547d2dc41caf2396289f4d028fa78dad8dcc1c911dbfd27a66d1472a2809721f95641dcdf6c6874488c153a89314b6c5d351e6587d052edebe2dcf16793e9e5c08a0a4c5aeb47f4d731c20560594b9c57a1864d9ea77346ca22a4fbee6e2c"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0xae, "dfcce4fede9b12045f4ee42d4c140d584113cf611a0e365057f53c0b78552591011118f4091198c4e524627c7186a01f110d1ddce2a79501b735e417894969b161f16a5587ed164deb8377efe5eab94ca2f85d5c302471a5f3db4a4666b4963247ba3922d091f11247533a31a7ec651ea029192d3127d233f2e67d1ab697f6fe89e309e7533243fec5ec658b2e762b50280b6e7d31a7969bcf1873e358c76daccd59a02d82a9be2194d33dc392e8"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x3000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0x4, 0x9, 0x5, 0x7f, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x4, 0x81, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x10, 0x7, 0xb1, 0x9, 0x21, 0x81, 0x80, 0xff, 0x1, 0xfc}, {0xdddd0000, 0x8000000, 0x4, 0x9, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xdddd0000, 0x2}, {0x2000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21.17794681s ago: executing program 32 (id=912): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xd, 0x35, {0x35, 0xf, "8c41ee1b4a1fa41e91880fed5274507a19e08b3a44a661f47179b21b55ac473f498a274fa3f16e417467c965f7c29210fb1d49"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000100)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x8, "64ce1a19"}, @main=@item_4={0x3, 0x0, 0xc4cc0a73052fd186, "ba9a8ec2"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x9, "07ac63bc"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x909}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0xf, 0xb5, "2780dbcd2f66396abef6943fb32873f6585308507eb48befb61c31b444c9772a3ab25bb3be8bceba66767734039301cfeb512267df105f28de0944779a008622daf3f21dbc4b0596ecce53e7ce0a605eaf5915a536d46547d2dc41caf2396289f4d028fa78dad8dcc1c911dbfd27a66d1472a2809721f95641dcdf6c6874488c153a89314b6c5d351e6587d052edebe2dcf16793e9e5c08a0a4c5aeb47f4d731c20560594b9c57a1864d9ea77346ca22a4fbee6e2c"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0xae, "dfcce4fede9b12045f4ee42d4c140d584113cf611a0e365057f53c0b78552591011118f4091198c4e524627c7186a01f110d1ddce2a79501b735e417894969b161f16a5587ed164deb8377efe5eab94ca2f85d5c302471a5f3db4a4666b4963247ba3922d091f11247533a31a7ec651ea029192d3127d233f2e67d1ab697f6fe89e309e7533243fec5ec658b2e762b50280b6e7d31a7969bcf1873e358c76daccd59a02d82a9be2194d33dc392e8"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x3000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0x4, 0x9, 0x5, 0x7f, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x4, 0x81, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x10, 0x7, 0xb1, 0x9, 0x21, 0x81, 0x80, 0xff, 0x1, 0xfc}, {0xdddd0000, 0x8000000, 0x4, 0x9, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xdddd0000, 0x2}, {0x2000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.115203105s ago: executing program 1 (id=1242): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100)=0x38, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x10, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3fc}}, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write$tun(r5, 0x0, 0xba) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.061442945s ago: executing program 1 (id=1245): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) futex(0x0, 0x80, 0xfffefffe, 0x0, 0x0, 0x1) (async) r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3", 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, 0x4, "7f12ddc1517600000000000000000000000002"}) (async) fcntl$dupfd(r1, 0x406, r1) 3.054919696s ago: executing program 1 (id=1247): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) ptrace(0x10, r2) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) gettid() ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) close(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xffdfffffffffffff, 0x2, 0x4000000000000, 0x0, 0x4002004c4, 0x800000000001006, 0x8000000000000000, 0x20c595, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1], 0xdddd1000, 0x2032d2}) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.374124082s ago: executing program 3 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 1.325706721s ago: executing program 3 (id=1260): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) creat(0x0, 0xecf86c37d53049cc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) (async) r4 = dup(r2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="700088caffffffffffffaaaaaaaaaaaa0806000186dd06100001aaaaaaaaaa40fc020000000000080000000000000001000000000000fc020000000000000000000000000001"], 0x46) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000600)={0x0, 0x1, 0x7, 0x1a, 0xd0, &(0x7f0000000200)="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"}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) 1.235219678s ago: executing program 4 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x84ff}, 0x0) 1.218359211s ago: executing program 4 (id=1265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x4202, 0x141) 1.216693441s ago: executing program 4 (id=1266): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100)=0x38, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x10, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3fc}}, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xba) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.157258322s ago: executing program 4 (id=1267): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x35, 0x30, 0x64, 0x30, 0x30, 0x37, 0x62, 0x30, 0x30, 0x30, 0x30, 0x3c, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x52, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566a945d7e924cc9136ff00112233445575778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r2) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e6f70872bf6415cbab6bef190f28cd1247b1237e9c4fc61a870f57b7ba1b0cd55b4af4ba4d2ab6180361997903942adea8572d7e036f6c0d595ebde74c4424b1a65ce9547e1b4af2cbbffeb95d31ebf1a6b3b58f4419816af117c849a"], 0x18, r2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x301a81, 0x10c) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 1.156883223s ago: executing program 4 (id=1268): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) 1.156628512s ago: executing program 4 (id=1269): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xd, 0x35, {0x35, 0xf, "8c41ee1b4a1fa41e91880fed5274507a19e08b3a44a661f47179b21b55ac473f498a274fa3f16e417467c965f7c29210fb1d49"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000100)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x8, "64ce1a19"}, @main=@item_4={0x3, 0x0, 0xc4cc0a73052fd186, "ba9a8ec2"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x9, "07ac63bc"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x909}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0xf, 0xb5, "2780dbcd2f66396abef6943fb32873f6585308507eb48befb61c31b444c9772a3ab25bb3be8bceba66767734039301cfeb512267df105f28de0944779a008622daf3f21dbc4b0596ecce53e7ce0a605eaf5915a536d46547d2dc41caf2396289f4d028fa78dad8dcc1c911dbfd27a66d1472a2809721f95641dcdf6c6874488c153a89314b6c5d351e6587d052edebe2dcf16793e9e5c08a0a4c5aeb47f4d731c20560594b9c57a1864d9ea77346ca22a4fbee6e2c"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x1, 0xae, "dfcce4fede9b12045f4ee42d4c140d584113cf611a0e365057f53c0b78552591011118f4091198c4e524627c7186a01f110d1ddce2a79501b735e417894969b161f16a5587ed164deb8377efe5eab94ca2f85d5c302471a5f3db4a4666b4963247ba3922d091f11247533a31a7ec651ea029192d3127d233f2e67d1ab697f6fe89e309e7533243fec5ec658b2e762b50280b6e7d31a7969bcf1873e358c76daccd59a02d82a9be2194d33dc392e8"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0x4, 0x9, 0x5, 0x7f, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x4, 0x81, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0x10, 0x7, 0xb1, 0x9, 0x21, 0x81, 0x80, 0xff, 0x1, 0xfc}, {0xdddd0000, 0x8000000, 0x4, 0x9, 0x2, 0x5, 0x7, 0x3, 0x5, 0x7f, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x27, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xdddd0000, 0x2}, {0x2000, 0x7ff}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x8, 0xd, 0x83, '\x00', 0x80000000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 805.019859ms ago: executing program 0 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a1", 0x28}, {&(0x7f0000000280)="8bcceb216f624c06f5ff", 0xa}, {&(0x7f00000005c0)="c0b9a0089e7eec0b24e15ac3", 0xc}], 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x5, 0x47, 0xec, 0x20, 0x4b4, 0x6831, 0x6b27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0xa0, 0x23, "", [{{0x9, 0x4, 0x20, 0x6, 0x0, 0x7c, 0xf3, 0x15, 0xe5}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x5, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "ded4ff"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x6, 0x3, 0x66}, [@mbim={0xc, 0x24, 0x1b, 0x8000, 0x1, 0x8f, 0x8, 0x8, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x4, [0xabda, 0xa, 0x2, 0xfff7]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xb1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x7f, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xc0, 0x6, 0x7f}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x5, 0x3, 0xff, 0x3}, 0x165, &(0x7f0000000680)={0x5, 0xf, 0x165, 0x5, [@generic={0xdf, 0x10, 0x3, "fe3db2db7d1c8f9e0a582c7c33012a7922780206570313382dbd47033a76916478b2c9745b7e7c58f57d6734ade79083052f9c003c517bf854c86a2e0edd88bc91a0818cb99021f402880ecd986735959c6c8e45f44e0e7c0dd06f4b9ce21829428e2caa00478d5a2261d9182f1b2459a4677238f727ec2f6a5c87d4b165de73168d499a7552a79b6cabc9764a2782bcc48ee10c3addeb0eb88eefac7670010fb52ec9d6dfb75ef21f4fa07ca80c48702548b82703e38ef8ac64eea9d59f323b76372ca9562052cd365c62c4313c82f964ba23053ed1a25b993e4f91"}, @ss_container_id={0x14, 0x10, 0x4, 0x3c, "758300da36183adb3b6722bceb258846"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x20, 0x7, 0xcf, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5b, "0faeab3f877c48c05a36ae596ce91e77"}, @generic={0x4e, 0x10, 0xa, "c11e1ef3ba452250db6556891390ae737819cc70de4fb1994a4828122bc7d531a687bf2f99f25a08233707a2ae68a198b0fc01c414e582de1adf96442f652a2f8910491b8830f22cac185c"}]}, 0x5, [{0xc1, &(0x7f0000000100)=@string={0xc1, 0x3, "f3e9478b6b151103a43837e6fc5b4773bce0fb4a8f6bfe2e48cd7e492cdc6264d42fd6ef9f32a1de380681a287c48982bdadab606c080043f120954c4a36d961427882341938c5e4c65c36ba00ec083be4bb047328e25bd78caa1fcb1b23eec25fc6cab1193bd2075171afb0767d4860f03955ec3d388d49a529068d391122fd67ac6b607c74fabb7babc35d20e63cbb0cdf22714fa3f207ee4fd5cd3fba66b88d716b556cdf20e9d242ec58a2b046ce832ff77d49338cbe08ec42deddb9dc"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0xe6, &(0x7f0000000340)=@string={0xe6, 0x3, "17147352a8c5e89204f5e25725cae8d082193214b38ba69d82e0e2970bb25f29a7be260a0dc41481bda05123a2df623bcd52c2f686f1ddbd2c32089ce0debf015b40c7cea446fb54a703b4e357dc5596b99d9c981580dead6098379026a6c7a66dfd44343e5094a982a1a2e88c811260f00fd2d3ca78adbe03817961e1bbbe7b96e7aa783896d11a6fb46f4f81028d4686723423e2ddf2106cc58cb18d48a2402a1f15fc28f7a6b1dc50988b16faea5e9c0fb93fb8e311c3f8ab612e14489227af075cff66c590c31b13367059884c807e863bd7c72db22782907e1a61cfe91d89b2acc5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1007}}]}) 489.098018ms ago: executing program 3 (id=1274): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x121200, 0x10b) finit_module(r0, 0x0, 0x1) 480.69638ms ago: executing program 3 (id=1275): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100)=0x38, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x10, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3fc}}, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xba) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 425.36345ms ago: executing program 3 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x88ff}, 0x0) 424.92409ms ago: executing program 3 (id=1277): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123502, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206b1c987bee95af686eb9158231a9857271543eb3fe71ee17205eb8f969a6449b48be830c62e5481456abfeee568ee149555652699e982be8e87caa46c433efe25a49650292c059d98dd037685522a9311cb8823a25231276dcba8931f23cd99c90b9988efbb7ff4ce5b62c945800c", @ANYRES8, @ANYBLOB='\a'], 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd(0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) truncate(0x0, 0x20000000d4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x1ff8, 0x20, &(0x7f0000000000)=""/32}, {0x8080000, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 254.039922ms ago: executing program 0 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a1070000000000000000000000000000000000000000000000000000010000", 0x60) 215.25211ms ago: executing program 0 (id=1279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="010000006000"}) 113.479489ms ago: executing program 0 (id=1280): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = socket(0x10, 0x3, 0x0) mlock2(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7400000002090101"], 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 101.191571ms ago: executing program 1 (id=1281): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="64000000100001060000000000070000000000003f0000000000000000000000100003007665746830000000000000002400120008000100766574681800020014000100000000000000000000000000000000100003007665746831000000000000006de0", 0x65}], 0x1}, 0x40040) 56.556539ms ago: executing program 0 (id=1282): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x9, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffffff}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00) 1.38475ms ago: executing program 0 (id=1283): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r2}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 364.95µs ago: executing program 1 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4202, 0x141) 0s ago: executing program 1 (id=1285): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100)=0x38, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x10, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3fc}}, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xba) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat2(r4, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) kernel console output (not intermixed with test programs): syscall_64+0x57/0xf0 [ 137.582597][ T2927] ? do_filp_open+0x440/0x440 [ 137.582627][ T2927] do_filp_open+0x1f2/0x440 [ 137.582652][ T2927] ? __cfi_do_filp_open+0x10/0x10 [ 137.582681][ T2927] ? alloc_fd+0x4c1/0x570 [ 137.582705][ T2927] do_sys_openat2+0x134/0x1d0 [ 137.582740][ T2927] ? do_sys_open+0x100/0x100 [ 137.582769][ T2927] __x64_sys_openat+0x13a/0x170 [ 137.582798][ T2927] x64_sys_call+0xe69/0x2ee0 [ 137.582820][ T2927] do_syscall_64+0x57/0xf0 [ 137.582841][ T2927] ? clear_bhb_loop+0x50/0xa0 [ 137.582867][ T2927] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.582893][ T2927] RIP: 0033:0x7f4b9ed9e159 [ 137.582914][ T2927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.582933][ T2927] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.582958][ T2927] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 137.582976][ T2927] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 137.582992][ T2927] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 137.583008][ T2927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.583023][ T2927] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 137.583042][ T2927] [ 137.926908][ T2933] netlink: 'syz.0.938': attribute type 27 has an invalid length. [ 137.947099][ T2937] syz.0.938 (2937): attempted to duplicate a private mapping with mremap. This is not supported. [ 137.967438][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.994136][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.034299][ T36] audit: type=1326 audit(1790273431.448:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2930 comm="syz.3.937" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b9ed9e159 code=0x0 [ 138.260273][ T358] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 138.420262][ T358] usb 1-1: Using ep0 maxpacket: 8 [ 138.426869][ T358] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.437084][ T358] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.446480][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.454729][ T358] usb 1-1: Product:  [ 138.459050][ T358] usb 1-1: Manufacturer: Ї [ 138.464295][ T358] usb 1-1: SerialNumber:   [ 138.876001][ T358] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.882996][ T358] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 138.890616][ T358] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 138.905581][ T358] usb 1-1: USB disconnect, device number 47 [ 139.630273][ T64] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 139.801262][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.811100][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.822566][ T64] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.831823][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.839923][ T64] usb 1-1: Product: syz [ 139.844413][ T64] usb 1-1: Manufacturer: syz [ 139.849563][ T64] usb 1-1: SerialNumber: syz [ 139.855148][ T64] usb 1-1: config 0 descriptor?? [ 139.860923][ T2947] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 139.868202][ T2947] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 140.077735][ T2947] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 140.085304][ T2947] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 140.493611][ T64] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 140.725254][ T2947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=8192 (16384 ns) > initial count (88 ns). Using initial count to start timer. [ 140.790193][ T2968] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 140.820286][ T64] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 140.830110][ T2968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.839802][ T64] usb 1-1: USB disconnect, device number 48 [ 140.846022][ T2968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.861766][ T2970] fuse: Unknown parameter '000000000000000000000030x0000000000000004' [ 140.863155][ T2968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.879290][ T2971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 140.917252][ T2978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 141.043224][ T2986] capability: warning: `syz.1.957' uses 32-bit capabilities (legacy support in use) [ 141.075570][ T36] audit: type=1400 audit(1790273434.488:365): avc: denied { ioctl } for pid=2982 comm="syz.3.955" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 141.344312][ T2996] FAULT_INJECTION: forcing a failure. [ 141.344312][ T2996] name failslab, interval 1, probability 0, space 0, times 0 [ 141.357266][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: syz.0.960 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 141.357309][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.357323][ T2996] Call Trace: [ 141.357329][ T2996] [ 141.357337][ T2996] __dump_stack+0x21/0x30 [ 141.357369][ T2996] dump_stack_lvl+0x140/0x1c0 [ 141.357405][ T2996] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.357432][ T2996] ? stack_trace_save+0xaa/0x100 [ 141.357455][ T2996] dump_stack+0x19/0x20 [ 141.357479][ T2996] should_fail_ex+0x3c2/0x510 [ 141.357502][ T2996] should_failslab+0xac/0x100 [ 141.357527][ T2996] __kmalloc_cache_node_noprof+0x46/0x430 [ 141.357553][ T2996] ? __get_vm_area_node+0x150/0x390 [ 141.357582][ T2996] ? __asan_memset+0x39/0x50 [ 141.357602][ T2996] __get_vm_area_node+0x150/0x390 [ 141.357629][ T2996] __vmalloc_node_range_noprof+0x340/0x1300 [ 141.357659][ T2996] ? n_tty_open+0x38/0x1d0 [ 141.357683][ T2996] ? __kasan_check_write+0x18/0x20 [ 141.357703][ T2996] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 141.357723][ T2996] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 141.357740][ T2996] ? klist_iter_init_node+0x1cd/0x270 [ 141.357768][ T2996] ? __kasan_check_write+0x18/0x20 [ 141.357788][ T2996] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 141.357815][ T2996] ? class_find_device+0x318/0x390 [ 141.357837][ T2996] ? __cfi_device_match_devt+0x10/0x10 [ 141.357857][ T2996] ? __cfi_class_find_device+0x10/0x10 [ 141.357878][ T2996] ? n_tty_open+0x38/0x1d0 [ 141.357901][ T2996] vzalloc_noprof+0x103/0x1d0 [ 141.357918][ T2996] ? n_tty_open+0x38/0x1d0 [ 141.357941][ T2996] ? __cfi_ldsem_down_write+0x10/0x10 [ 141.357959][ T2996] ? __cfi_vzalloc_noprof+0x10/0x10 [ 141.357977][ T2996] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 141.357997][ T2996] n_tty_open+0x38/0x1d0 [ 141.358020][ T2996] tty_ldisc_setup+0xda/0x370 [ 141.358040][ T2996] tty_init_dev+0x28b/0x4f0 [ 141.358061][ T2996] ptmx_open+0xe1/0x2f0 [ 141.358084][ T2996] ? selinux_file_open+0x46c/0x630 [ 141.358106][ T2996] chrdev_open+0x4eb/0x610 [ 141.358126][ T2996] ? __cfi_chrdev_open+0x10/0x10 [ 141.358148][ T2996] ? bpf_lsm_file_open+0xd/0x20 [ 141.358172][ T2996] ? __cfi_chrdev_open+0x10/0x10 [ 141.358192][ T2996] do_dentry_open+0x97c/0x1510 [ 141.358222][ T2996] vfs_open+0x86/0x240 [ 141.358246][ T2996] ? __cfi_vfs_open+0x10/0x10 [ 141.358270][ T2996] ? may_open+0x352/0x430 [ 141.358294][ T2996] path_openat+0x2c49/0x35a0 [ 141.358319][ T2996] ? kasan_save_alloc_info+0x3a/0x50 [ 141.358337][ T2996] ? getname+0x1b/0x30 [ 141.358357][ T2996] ? x64_sys_call+0xe69/0x2ee0 [ 141.358383][ T2996] ? do_syscall_64+0x57/0xf0 [ 141.358405][ T2996] ? do_filp_open+0x440/0x440 [ 141.358431][ T2996] do_filp_open+0x1f2/0x440 [ 141.358458][ T2996] ? __cfi_do_filp_open+0x10/0x10 [ 141.358497][ T2996] ? alloc_fd+0x4c1/0x570 [ 141.358522][ T2996] do_sys_openat2+0x134/0x1d0 [ 141.358550][ T2996] ? do_sys_open+0x100/0x100 [ 141.358577][ T2996] __x64_sys_openat+0x13a/0x170 [ 141.358598][ T2996] x64_sys_call+0xe69/0x2ee0 [ 141.358612][ T2996] do_syscall_64+0x57/0xf0 [ 141.358628][ T2996] ? clear_bhb_loop+0x50/0xa0 [ 141.358648][ T2996] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.358668][ T2996] RIP: 0033:0x7f85c379e159 [ 141.358683][ T2996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.358698][ T2996] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.358718][ T2996] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 141.358732][ T2996] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 141.358745][ T2996] RBP: 00007f85c383506b R08: 0000000000000000 R09: 0000000000000000 [ 141.358758][ T2996] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000000 [ 141.358769][ T2996] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 141.358784][ T2996] [ 141.358847][ T2996] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 141.731830][ T36] audit: type=1326 audit(1790273435.138:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.1.963" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528bd9e159 code=0x0 [ 141.833608][ T3008] fuse: Unknown parameter 'root000000000000100000' [ 141.928466][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.937519][ T3011] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 141.938527][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.481592][ T3017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.490580][ T3017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.980272][ T64] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 143.013741][ T3021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.022445][ T3021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.151346][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 143.161314][ T64] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 143.181249][ T64] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 143.190426][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.198427][ T64] usb 1-1: Product: syz [ 143.202708][ T64] usb 1-1: Manufacturer: syz [ 143.207314][ T64] usb 1-1: SerialNumber: syz [ 143.215874][ T64] usb 1-1: config 0 descriptor?? [ 143.221187][ T3019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.228453][ T3019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.437018][ T3019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.444459][ T3019] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.844839][ T3034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 143.854154][ T64] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 143.973915][ T3038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.982738][ T3038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.091737][ T3019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=8192 (16384 ns) > initial count (88 ns). Using initial count to start timer. [ 144.142854][ T64] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 144.163616][ T64] usb 1-1: USB disconnect, device number 49 [ 144.676558][ T3047] FAULT_INJECTION: forcing a failure. [ 144.676558][ T3047] name failslab, interval 1, probability 0, space 0, times 0 [ 144.693465][ T3047] CPU: 1 UID: 0 PID: 3047 Comm: syz.0.983 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 144.693500][ T3047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.693513][ T3047] Call Trace: [ 144.693521][ T3047] [ 144.693528][ T3047] __dump_stack+0x21/0x30 [ 144.693561][ T3047] dump_stack_lvl+0x140/0x1c0 [ 144.693586][ T3047] ? __cfi_dump_stack_lvl+0x10/0x10 [ 144.693612][ T3047] ? stack_trace_save+0xaa/0x100 [ 144.693635][ T3047] dump_stack+0x19/0x20 [ 144.693658][ T3047] should_fail_ex+0x3c2/0x510 [ 144.693691][ T3047] should_failslab+0xac/0x100 [ 144.693717][ T3047] __kmalloc_cache_node_noprof+0x46/0x430 [ 144.693741][ T3047] ? __get_vm_area_node+0x150/0x390 [ 144.693768][ T3047] ? __asan_memset+0x39/0x50 [ 144.693788][ T3047] __get_vm_area_node+0x150/0x390 [ 144.693814][ T3047] __vmalloc_node_range_noprof+0x340/0x1300 [ 144.693842][ T3047] ? n_tty_open+0x38/0x1d0 [ 144.693865][ T3047] ? __kasan_check_write+0x18/0x20 [ 144.693884][ T3047] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 144.693903][ T3047] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 144.693921][ T3047] ? klist_iter_init_node+0x1cd/0x270 [ 144.693949][ T3047] ? __kasan_check_write+0x18/0x20 [ 144.693968][ T3047] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 144.693994][ T3047] ? class_find_device+0x318/0x390 [ 144.694017][ T3047] ? __cfi_device_match_devt+0x10/0x10 [ 144.694036][ T3047] ? __cfi_class_find_device+0x10/0x10 [ 144.694058][ T3047] ? n_tty_open+0x38/0x1d0 [ 144.694081][ T3047] vzalloc_noprof+0x103/0x1d0 [ 144.694099][ T3047] ? n_tty_open+0x38/0x1d0 [ 144.694121][ T3047] ? __cfi_ldsem_down_write+0x10/0x10 [ 144.694137][ T3047] ? __cfi_vzalloc_noprof+0x10/0x10 [ 144.694155][ T3047] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 144.694174][ T3047] n_tty_open+0x38/0x1d0 [ 144.694197][ T3047] tty_ldisc_setup+0xda/0x370 [ 144.694217][ T3047] tty_init_dev+0x28b/0x4f0 [ 144.694237][ T3047] ptmx_open+0xe1/0x2f0 [ 144.694260][ T3047] ? selinux_file_open+0x46c/0x630 [ 144.694281][ T3047] chrdev_open+0x4eb/0x610 [ 144.694302][ T3047] ? __cfi_chrdev_open+0x10/0x10 [ 144.694323][ T3047] ? bpf_lsm_file_open+0xd/0x20 [ 144.694347][ T3047] ? __cfi_chrdev_open+0x10/0x10 [ 144.694368][ T3047] do_dentry_open+0x97c/0x1510 [ 144.694394][ T3047] vfs_open+0x86/0x240 [ 144.694422][ T3047] ? __cfi_vfs_open+0x10/0x10 [ 144.694446][ T3047] ? may_open+0x352/0x430 [ 144.694469][ T3047] path_openat+0x2c49/0x35a0 [ 144.694495][ T3047] ? kasan_save_alloc_info+0x3a/0x50 [ 144.694515][ T3047] ? getname+0x1b/0x30 [ 144.694535][ T3047] ? x64_sys_call+0xe69/0x2ee0 [ 144.694553][ T3047] ? do_syscall_64+0x57/0xf0 [ 144.694573][ T3047] ? do_filp_open+0x440/0x440 [ 144.694599][ T3047] do_filp_open+0x1f2/0x440 [ 144.694622][ T3047] ? __cfi_do_filp_open+0x10/0x10 [ 144.694649][ T3047] ? alloc_fd+0x4c1/0x570 [ 144.694678][ T3047] do_sys_openat2+0x134/0x1d0 [ 144.694706][ T3047] ? do_sys_open+0x100/0x100 [ 144.694735][ T3047] __x64_sys_openat+0x13a/0x170 [ 144.694763][ T3047] x64_sys_call+0xe69/0x2ee0 [ 144.694781][ T3047] do_syscall_64+0x57/0xf0 [ 144.694800][ T3047] ? clear_bhb_loop+0x50/0xa0 [ 144.694823][ T3047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.694846][ T3047] RIP: 0033:0x7f85c379e159 [ 144.694864][ T3047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.694880][ T3047] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.694903][ T3047] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 144.694918][ T3047] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 144.694933][ T3047] RBP: 00007f85c383506b R08: 0000000000000000 R09: 0000000000000000 [ 144.694946][ T3047] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 144.694959][ T3047] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 144.694974][ T3047] [ 144.695026][ T3047] warn_alloc: 1 callbacks suppressed [ 144.695038][ T3047] syz.0.983: vmalloc error: size 8936, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 144.741151][ T3049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.745920][ T3047] ,cpuset= [ 144.752102][ T3049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.755775][ T3047] syz0 [ 145.118610][ T3049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.129820][ T3049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.138578][ T3047] ,mems_allowed=0 [ 145.142897][ T3047] CPU: 1 UID: 0 PID: 3047 Comm: syz.0.983 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 145.142926][ T3047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.142939][ T3047] Call Trace: [ 145.142946][ T3047] [ 145.142953][ T3047] __dump_stack+0x21/0x30 [ 145.142986][ T3047] dump_stack_lvl+0x140/0x1c0 [ 145.143009][ T3047] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.143037][ T3047] dump_stack+0x19/0x20 [ 145.143060][ T3047] warn_alloc+0x1e7/0x2c0 [ 145.143087][ T3047] ? __kasan_kmalloc+0x28/0xb0 [ 145.143111][ T3047] ? __cfi_warn_alloc+0x10/0x10 [ 145.143134][ T3047] ? __get_vm_area_node+0x150/0x390 [ 145.143162][ T3047] ? __get_vm_area_node+0x382/0x390 [ 145.143189][ T3047] __vmalloc_node_range_noprof+0x365/0x1300 [ 145.143217][ T3047] ? __kasan_check_write+0x18/0x20 [ 145.143257][ T3047] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 145.143277][ T3047] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 145.143296][ T3047] ? klist_iter_init_node+0x1cd/0x270 [ 145.143325][ T3047] ? __kasan_check_write+0x18/0x20 [ 145.143346][ T3047] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 145.143374][ T3047] ? class_find_device+0x318/0x390 [ 145.143397][ T3047] ? __cfi_device_match_devt+0x10/0x10 [ 145.143418][ T3047] ? __cfi_class_find_device+0x10/0x10 [ 145.143441][ T3047] ? n_tty_open+0x38/0x1d0 [ 145.143466][ T3047] vzalloc_noprof+0x103/0x1d0 [ 145.143483][ T3047] ? n_tty_open+0x38/0x1d0 [ 145.143548][ T3047] ? __cfi_ldsem_down_write+0x10/0x10 [ 145.143567][ T3047] ? __cfi_vzalloc_noprof+0x10/0x10 [ 145.143586][ T3047] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 145.143606][ T3047] n_tty_open+0x38/0x1d0 [ 145.143630][ T3047] tty_ldisc_setup+0xda/0x370 [ 145.143650][ T3047] tty_init_dev+0x28b/0x4f0 [ 145.143671][ T3047] ptmx_open+0xe1/0x2f0 [ 145.143696][ T3047] ? selinux_file_open+0x46c/0x630 [ 145.143719][ T3047] chrdev_open+0x4eb/0x610 [ 145.143741][ T3047] ? __cfi_chrdev_open+0x10/0x10 [ 145.143763][ T3047] ? bpf_lsm_file_open+0xd/0x20 [ 145.143788][ T3047] ? __cfi_chrdev_open+0x10/0x10 [ 145.143809][ T3047] do_dentry_open+0x97c/0x1510 [ 145.143838][ T3047] vfs_open+0x86/0x240 [ 145.143861][ T3047] ? __cfi_vfs_open+0x10/0x10 [ 145.143887][ T3047] ? may_open+0x352/0x430 [ 145.143912][ T3047] path_openat+0x2c49/0x35a0 [ 145.143944][ T3047] ? kasan_save_alloc_info+0x3a/0x50 [ 145.143962][ T3047] ? getname+0x1b/0x30 [ 145.143982][ T3047] ? x64_sys_call+0xe69/0x2ee0 [ 145.143999][ T3047] ? do_syscall_64+0x57/0xf0 [ 145.144018][ T3047] ? do_filp_open+0x440/0x440 [ 145.144045][ T3047] do_filp_open+0x1f2/0x440 [ 145.144069][ T3047] ? __cfi_do_filp_open+0x10/0x10 [ 145.144095][ T3047] ? alloc_fd+0x4c1/0x570 [ 145.144119][ T3047] do_sys_openat2+0x134/0x1d0 [ 145.144144][ T3047] ? do_sys_open+0x100/0x100 [ 145.144171][ T3047] __x64_sys_openat+0x13a/0x170 [ 145.144199][ T3047] x64_sys_call+0xe69/0x2ee0 [ 145.144216][ T3047] do_syscall_64+0x57/0xf0 [ 145.144235][ T3047] ? clear_bhb_loop+0x50/0xa0 [ 145.144258][ T3047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.144281][ T3047] RIP: 0033:0x7f85c379e159 [ 145.144298][ T3047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.144314][ T3047] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.144335][ T3047] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 145.144351][ T3047] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 145.144365][ T3047] RBP: 00007f85c383506b R08: 0000000000000000 R09: 0000000000000000 [ 145.144378][ T3047] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 145.144390][ T3047] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 145.144408][ T3047] [ 145.144456][ T3047] Mem-Info: [ 145.515127][ T3047] active_anon:27136 inactive_anon:654 isolated_anon:0 [ 145.515127][ T3047] active_file:16008 inactive_file:2624 isolated_file:0 [ 145.515127][ T3047] unevictable:0 dirty:199 writeback:0 [ 145.515127][ T3047] slab_reclaimable:4239 slab_unreclaimable:80306 [ 145.515127][ T3047] mapped:29088 shmem:19450 pagetables:1403 [ 145.515127][ T3047] sec_pagetables:0 bounce:0 [ 145.515127][ T3047] kernel_misc_reclaimable:0 [ 145.515127][ T3047] free:1495461 free_pcp:1619 free_cma:0 [ 145.560367][ T3047] Node 0 active_anon:108544kB inactive_anon:2616kB active_file:64032kB inactive_file:10496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116352kB dirty:796kB writeback:0kB shmem:77800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6904kB pagetables:5612kB sec_pagetables:0kB all_unreclaimable? no [ 145.592640][ T3047] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:0kB free_cma:0kB [ 145.623117][ T3047] lowmem_reserve[]: 0 3921 3921 [ 145.628025][ T3047] Normal free:3022560kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108544kB inactive_anon:2616kB active_file:64032kB inactive_file:10496kB unevictable:0kB writepending:796kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1108kB local_pcp:772kB free_cma:0kB [ 145.660000][ T3047] lowmem_reserve[]: 0 0 0 [ 145.664406][ T3047] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 145.679889][ T3047] Normal: 129*4kB (UME) 227*8kB (UME) 379*16kB (UE) 299*32kB (UME) 340*64kB (UME) 50*128kB (UME) 31*256kB (UME) 13*512kB (UME) 4*1024kB (ME) 4*2048kB (ME) 720*4096kB (M) = 3022124kB [ 145.697997][ T3047] 38507 total pagecache pages [ 145.702689][ T3047] 429 pages in swap cache [ 145.707016][ T3047] Free swap = 122592kB [ 145.711208][ T3047] Total swap = 124996kB [ 145.715362][ T3047] 2097051 pages RAM [ 145.719169][ T3047] 0 pages HighMem/MovableOnly [ 145.723895][ T3047] 352241 pages reserved [ 145.728044][ T3047] 0 pages cma reserved [ 145.734058][ T3047] Memory allocations: [ 145.738054][ T3047] 0 B 0 init/main.c:1477 func:do_initcalls [ 145.750422][ T3047] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 145.760307][ T3047] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 145.768909][ T3047] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 145.776865][ T3047] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 145.784852][ T3047] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 145.793555][ T3047] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 145.801545][ T3047] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 145.801969][ T3056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.809441][ T3047] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 145.809462][ T3047] 0 B 0 init/initramfs.c:101 func:find_link [ 145.842091][ T3056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.870273][ T3047] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 145.870773][ T3056] new mount options do not match the existing superblock, will be ignored [ 145.975376][ T36] audit: type=1326 audit(1790273439.388:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.1.993" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528bd9e159 code=0x0 [ 146.150268][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 146.300261][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 146.306858][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.316976][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.326267][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.334415][ T45] usb 1-1: Product:  [ 146.338706][ T45] usb 1-1: Manufacturer: Ї [ 146.343380][ T45] usb 1-1: SerialNumber:   [ 146.755218][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.762197][ T45] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 146.769592][ T45] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 146.778531][ T45] usb 1-1: USB disconnect, device number 50 [ 147.307592][ T3078] FAULT_INJECTION: forcing a failure. [ 147.307592][ T3078] name failslab, interval 1, probability 0, space 0, times 0 [ 147.323355][ T3078] CPU: 1 UID: 0 PID: 3078 Comm: syz.0.996 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 147.323391][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.323404][ T3078] Call Trace: [ 147.323411][ T3078] [ 147.323419][ T3078] __dump_stack+0x21/0x30 [ 147.323452][ T3078] dump_stack_lvl+0x140/0x1c0 [ 147.323477][ T3078] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.323508][ T3078] dump_stack+0x19/0x20 [ 147.323531][ T3078] should_fail_ex+0x3c2/0x510 [ 147.323554][ T3078] should_failslab+0xac/0x100 [ 147.323579][ T3078] __kmalloc_cache_noprof+0x41/0x470 [ 147.323600][ T3078] ? kobject_uevent_env+0x2a3/0x7e0 [ 147.323620][ T3078] ? __kasan_check_write+0x18/0x20 [ 147.323638][ T3078] ? _raw_spin_lock+0x92/0x120 [ 147.323656][ T3078] kobject_uevent_env+0x2a3/0x7e0 [ 147.323677][ T3078] kobject_uevent+0x21/0x40 [ 147.323697][ T3078] driver_bound+0x449/0x480 [ 147.323716][ T3078] really_probe+0x7ef/0x8b0 [ 147.323734][ T3078] __driver_probe_device+0x193/0x280 [ 147.323753][ T3078] driver_probe_device+0x54/0x3f0 [ 147.323778][ T3078] __driver_attach+0x422/0x5e0 [ 147.323797][ T3078] bus_for_each_dev+0x249/0x2d0 [ 147.323820][ T3078] ? __cfi___driver_attach+0x10/0x10 [ 147.323838][ T3078] ? __cfi_bus_for_each_dev+0x10/0x10 [ 147.323861][ T3078] ? __kasan_kmalloc+0x96/0xb0 [ 147.323882][ T3078] ? _raw_spin_unlock+0x45/0x60 [ 147.323899][ T3078] ? klist_add_tail+0x1dd/0x220 [ 147.323925][ T3078] driver_attach+0x46/0x50 [ 147.323941][ T3078] bus_add_driver+0x393/0x730 [ 147.323964][ T3078] driver_register+0x2b7/0x3c0 [ 147.323983][ T3078] usb_gadget_register_driver_owner+0xfc/0x270 [ 147.324007][ T3078] raw_ioctl+0x144c/0x37a0 [ 147.324026][ T3078] ? __cfi_raw_ioctl+0x10/0x10 [ 147.324043][ T3078] ? selinux_file_ioctl+0x732/0x1480 [ 147.324062][ T3078] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 147.324084][ T3078] ? __fget_files+0x2bc/0x330 [ 147.324107][ T3078] ? bpf_lsm_file_ioctl+0xd/0x20 [ 147.324130][ T3078] ? security_file_ioctl+0x3e/0x110 [ 147.324148][ T3078] ? __cfi_raw_ioctl+0x10/0x10 [ 147.324164][ T3078] __se_sys_ioctl+0x126/0x1b0 [ 147.324187][ T3078] __x64_sys_ioctl+0x7f/0xa0 [ 147.324209][ T3078] x64_sys_call+0x1878/0x2ee0 [ 147.324227][ T3078] do_syscall_64+0x57/0xf0 [ 147.324244][ T3078] ? clear_bhb_loop+0x50/0xa0 [ 147.324267][ T3078] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.324288][ T3078] RIP: 0033:0x7f85c379ddeb [ 147.324305][ T3078] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 147.324322][ T3078] RSP: 002b:00007f85c4592f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.324343][ T3078] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f85c379ddeb [ 147.324357][ T3078] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 147.324373][ T3078] RBP: 00007f85c4593fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 147.324385][ T3078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.324397][ T3078] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 147.324413][ T3078] [ 147.760291][ T45] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 147.910300][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 147.916676][ T45] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 147.924253][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.935382][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.948436][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.955276][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 147.964588][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.974961][ T45] usb 1-1: config 0 descriptor?? [ 147.984482][ T45] usbhid 1-1:0.0: can't add hid device: -22 [ 147.990721][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 148.197439][ T45] usb 1-1: USB disconnect, device number 51 [ 148.719974][ T3088] FAULT_INJECTION: forcing a failure. [ 148.719974][ T3088] name failslab, interval 1, probability 0, space 0, times 0 [ 148.732892][ T3088] CPU: 1 UID: 0 PID: 3088 Comm: syz.0.999 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 148.732924][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.732937][ T3088] Call Trace: [ 148.732944][ T3088] [ 148.732952][ T3088] __dump_stack+0x21/0x30 [ 148.732984][ T3088] dump_stack_lvl+0x140/0x1c0 [ 148.733011][ T3088] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.733038][ T3088] dump_stack+0x19/0x20 [ 148.733061][ T3088] should_fail_ex+0x3c2/0x510 [ 148.733084][ T3088] should_failslab+0xac/0x100 [ 148.733107][ T3088] __kmalloc_cache_noprof+0x41/0x470 [ 148.733127][ T3088] ? pty_unix98_install+0xfb/0x6b0 [ 148.733151][ T3088] ? __cfi_alloc_tty_struct+0x10/0x10 [ 148.733172][ T3088] pty_unix98_install+0xfb/0x6b0 [ 148.733196][ T3088] tty_init_dev+0xe3/0x4f0 [ 148.733216][ T3088] ptmx_open+0xe1/0x2f0 [ 148.733239][ T3088] ? selinux_file_open+0x46c/0x630 [ 148.733259][ T3088] chrdev_open+0x4eb/0x610 [ 148.733280][ T3088] ? __cfi_chrdev_open+0x10/0x10 [ 148.733301][ T3088] ? bpf_lsm_file_open+0xd/0x20 [ 148.733326][ T3088] ? __cfi_chrdev_open+0x10/0x10 [ 148.733346][ T3088] do_dentry_open+0x97c/0x1510 [ 148.733372][ T3088] vfs_open+0x86/0x240 [ 148.733394][ T3088] ? __cfi_vfs_open+0x10/0x10 [ 148.733418][ T3088] ? may_open+0x352/0x430 [ 148.733440][ T3088] path_openat+0x2c49/0x35a0 [ 148.733465][ T3088] ? schedule+0xc5/0x240 [ 148.733485][ T3088] ? kasan_save_alloc_info+0x3a/0x50 [ 148.733510][ T3088] ? getname+0x1b/0x30 [ 148.733531][ T3088] ? x64_sys_call+0xe69/0x2ee0 [ 148.733549][ T3088] ? do_syscall_64+0x57/0xf0 [ 148.733569][ T3088] ? do_filp_open+0x440/0x440 [ 148.733596][ T3088] do_filp_open+0x1f2/0x440 [ 148.733627][ T3088] ? __cfi_do_filp_open+0x10/0x10 [ 148.733656][ T3088] ? alloc_fd+0x4c1/0x570 [ 148.733680][ T3088] do_sys_openat2+0x134/0x1d0 [ 148.733706][ T3088] ? do_sys_open+0x100/0x100 [ 148.733733][ T3088] __x64_sys_openat+0x13a/0x170 [ 148.733758][ T3088] x64_sys_call+0xe69/0x2ee0 [ 148.733780][ T3088] do_syscall_64+0x57/0xf0 [ 148.733797][ T3088] ? clear_bhb_loop+0x50/0xa0 [ 148.733819][ T3088] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.733841][ T3088] RIP: 0033:0x7f85c379e159 [ 148.733858][ T3088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.733874][ T3088] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.733896][ T3088] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 148.733917][ T3088] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 148.733932][ T3088] RBP: 00007f85c383506b R08: 0000000000000000 R09: 0000000000000000 [ 148.733945][ T3088] R10: 0000000000001e00 R11: 0000000000000246 R12: 0000000000000000 [ 148.733959][ T3088] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 148.733977][ T3088] [ 149.740740][ T1221] bridge0: port 3(syz_tun) entered disabled state [ 149.759601][ T1221] syz_tun (unregistering): left allmulticast mode [ 149.766116][ T36] audit: type=1400 audit(1790273443.168:368): avc: denied { mounton } for pid=3108 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 149.787792][ T1221] syz_tun (unregistering): left promiscuous mode [ 149.794172][ T1221] bridge0: port 3(syz_tun) entered disabled state [ 149.824430][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.831508][ T3108] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.838594][ T3108] bridge_slave_0: entered allmulticast mode [ 149.845000][ T3108] bridge_slave_0: entered promiscuous mode [ 149.851321][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.858357][ T3108] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.865520][ T3108] bridge_slave_1: entered allmulticast mode [ 149.871963][ T3108] bridge_slave_1: entered promiscuous mode [ 149.874526][ T45] usb 3-1: USB disconnect, device number 9 [ 149.884771][ T1143] bridge_slave_1: left allmulticast mode [ 149.890516][ T1143] bridge_slave_1: left promiscuous mode [ 149.896186][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.904371][ T1143] bridge_slave_0: left allmulticast mode [ 149.910007][ T1143] bridge_slave_0: left promiscuous mode [ 149.915739][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.987399][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.994467][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.001761][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.008795][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.023227][ T1143] tipc: Disabling bearer [ 150.028641][ T1143] tipc: Left network mode [ 150.034545][ T1143] veth1_macvtap: left promiscuous mode [ 150.040115][ T1143] veth0_vlan: left promiscuous mode [ 150.073499][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.080950][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.090093][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.097173][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.111419][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.118468][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.137805][ T3108] veth0_vlan: entered promiscuous mode [ 150.148134][ T3108] veth1_macvtap: entered promiscuous mode [ 150.165778][ T36] audit: type=1400 audit(1790273443.578:369): avc: denied { mounton } for pid=3108 comm="syz-executor" path="/root/syzkaller.l3Cobj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 150.210635][ T36] audit: type=1326 audit(1790273443.628:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.1.1009" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528bd9e159 code=0x0 [ 150.260648][ T3119] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 150.268751][ T3119] SELinux: failed to load policy [ 150.273422][ T3118] FAULT_INJECTION: forcing a failure. [ 150.273422][ T3118] name failslab, interval 1, probability 0, space 0, times 0 [ 150.286389][ T3118] CPU: 0 UID: 0 PID: 3118 Comm: syz.3.1010 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 150.286423][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.286436][ T3118] Call Trace: [ 150.286443][ T3118] [ 150.286452][ T3118] __dump_stack+0x21/0x30 [ 150.286483][ T3118] dump_stack_lvl+0x140/0x1c0 [ 150.286510][ T3118] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.286537][ T3118] dump_stack+0x19/0x20 [ 150.286571][ T3118] should_fail_ex+0x3c2/0x510 [ 150.286594][ T3118] should_failslab+0xac/0x100 [ 150.286618][ T3118] __kmalloc_cache_noprof+0x41/0x470 [ 150.286640][ T3118] ? pty_unix98_install+0xfb/0x6b0 [ 150.286679][ T3118] pty_unix98_install+0xfb/0x6b0 [ 150.286703][ T3118] tty_init_dev+0xe3/0x4f0 [ 150.286722][ T3118] ptmx_open+0xe1/0x2f0 [ 150.286736][ T3118] ? selinux_file_open+0x46c/0x630 [ 150.286747][ T3118] chrdev_open+0x4eb/0x610 [ 150.286759][ T3118] ? __cfi_chrdev_open+0x10/0x10 [ 150.286770][ T3118] ? bpf_lsm_file_open+0xd/0x20 [ 150.286784][ T3118] ? __cfi_chrdev_open+0x10/0x10 [ 150.286795][ T3118] do_dentry_open+0x97c/0x1510 [ 150.286811][ T3118] vfs_open+0x86/0x240 [ 150.286823][ T3118] ? __cfi_vfs_open+0x10/0x10 [ 150.286836][ T3118] ? may_open+0x352/0x430 [ 150.286849][ T3118] path_openat+0x2c49/0x35a0 [ 150.286863][ T3118] ? schedule+0xc5/0x240 [ 150.286874][ T3118] ? kasan_save_alloc_info+0x3a/0x50 [ 150.286884][ T3118] ? getname+0x1b/0x30 [ 150.286894][ T3118] ? x64_sys_call+0xe69/0x2ee0 [ 150.286903][ T3118] ? do_syscall_64+0x57/0xf0 [ 150.286913][ T3118] ? do_filp_open+0x440/0x440 [ 150.286926][ T3118] do_filp_open+0x1f2/0x440 [ 150.286939][ T3118] ? __cfi_do_filp_open+0x10/0x10 [ 150.286953][ T3118] ? alloc_fd+0x4c1/0x570 [ 150.286966][ T3118] do_sys_openat2+0x134/0x1d0 [ 150.286980][ T3118] ? do_sys_open+0x100/0x100 [ 150.286995][ T3118] __x64_sys_openat+0x13a/0x170 [ 150.287010][ T3118] x64_sys_call+0xe69/0x2ee0 [ 150.287019][ T3118] do_syscall_64+0x57/0xf0 [ 150.287028][ T3118] ? clear_bhb_loop+0x50/0xa0 [ 150.287040][ T3118] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.287052][ T3118] RIP: 0033:0x7f4b9ed9e159 [ 150.287066][ T3118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.287075][ T3118] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.287088][ T3118] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 150.287096][ T3118] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 150.287103][ T3118] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 150.287110][ T3118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.287116][ T3118] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 150.287125][ T3118] [ 150.287307][ T3114] FAULT_INJECTION: forcing a failure. [ 150.287307][ T3114] name failslab, interval 1, probability 0, space 0, times 0 [ 150.576873][ T3114] CPU: 1 UID: 0 PID: 3114 Comm: syz.4.1008 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 150.576904][ T3114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.576916][ T3114] Call Trace: [ 150.576923][ T3114] [ 150.576929][ T3114] __dump_stack+0x21/0x30 [ 150.576956][ T3114] dump_stack_lvl+0x140/0x1c0 [ 150.576974][ T3114] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.577001][ T3114] dump_stack+0x19/0x20 [ 150.577022][ T3114] should_fail_ex+0x3c2/0x510 [ 150.577041][ T3114] should_failslab+0xac/0x100 [ 150.577062][ T3114] kmem_cache_alloc_node_noprof+0x45/0x420 [ 150.577083][ T3114] ? __alloc_skb+0x10c/0x360 [ 150.577104][ T3114] ? add_uevent_var+0x288/0x470 [ 150.577123][ T3114] __alloc_skb+0x10c/0x360 [ 150.577150][ T3114] alloc_uevent_skb+0x85/0x240 [ 150.577168][ T3114] kobject_uevent_net_broadcast+0x1b1/0x5e0 [ 150.577188][ T3114] kobject_uevent_env+0x551/0x7e0 [ 150.577206][ T3114] kobject_uevent+0x21/0x40 [ 150.577224][ T3114] __kobject_del+0xd3/0x2c0 [ 150.577240][ T3114] kobject_put+0x1ff/0x2a0 [ 150.577255][ T3114] netdev_queue_update_kobjects+0x4b0/0x550 [ 150.577274][ T3114] netdev_unregister_kobject+0x104/0x260 [ 150.577290][ T3114] unregister_netdevice_many_notify+0x1678/0x1be0 [ 150.577304][ T3114] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 150.577317][ T3114] ? __call_rcu_common+0x53c/0x710 [ 150.577330][ T3114] ? __kasan_check_read+0x15/0x20 [ 150.577341][ T3114] unregister_netdevice_queue+0x302/0x350 [ 150.577352][ T3114] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 150.577363][ T3114] br_dev_delete+0x100/0x130 [ 150.577380][ T3114] ? br_del_bridge+0xac/0xf0 [ 150.577389][ T3114] br_del_bridge+0xb6/0xf0 [ 150.577398][ T3114] br_ioctl_stub+0x75e/0xcd0 [ 150.577409][ T3114] ? __cfi_br_ioctl_stub+0x10/0x10 [ 150.577419][ T3114] ? selinux_file_ioctl+0x732/0x1480 [ 150.577430][ T3114] ? mmap_write_unlock+0x8e/0xe0 [ 150.577444][ T3114] ? __kasan_check_write+0x18/0x20 [ 150.577454][ T3114] ? mutex_lock+0x97/0x1d0 [ 150.577466][ T3114] ? __cfi_do_futex+0x10/0x10 [ 150.577479][ T3114] ? __cfi_br_ioctl_stub+0x10/0x10 [ 150.577489][ T3114] sock_ioctl+0x4e0/0x7e0 [ 150.577499][ T3114] ? __cfi_sock_ioctl+0x10/0x10 [ 150.577509][ T3114] ? __fget_files+0x2bc/0x330 [ 150.577521][ T3114] ? bpf_lsm_file_ioctl+0xd/0x20 [ 150.577534][ T3114] ? security_file_ioctl+0x3e/0x110 [ 150.577544][ T3114] ? __cfi_sock_ioctl+0x10/0x10 [ 150.577553][ T3114] __se_sys_ioctl+0x126/0x1b0 [ 150.577566][ T3114] __x64_sys_ioctl+0x7f/0xa0 [ 150.577577][ T3114] x64_sys_call+0x1878/0x2ee0 [ 150.577587][ T3114] do_syscall_64+0x57/0xf0 [ 150.577596][ T3114] ? clear_bhb_loop+0x50/0xa0 [ 150.577609][ T3114] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.577621][ T3114] RIP: 0033:0x7f73bdd9e159 [ 150.577632][ T3114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.577645][ T3114] RSP: 002b:00007f73becc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.577658][ T3114] RAX: ffffffffffffffda RBX: 00007f73be025fa0 RCX: 00007f73bdd9e159 [ 150.577666][ T3114] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 150.577674][ T3114] RBP: 00007f73bde3506b R08: 0000000000000000 R09: 0000000000000000 [ 150.577681][ T3114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.577688][ T3114] R13: 00007f73be026038 R14: 00007f73be025fa0 R15: 00007ffc7560bbd8 [ 150.577698][ T3114] [ 150.922250][ T3122] FAULT_INJECTION: forcing a failure. [ 150.922250][ T3122] name failslab, interval 1, probability 0, space 0, times 0 [ 150.935199][ T3122] CPU: 1 UID: 0 PID: 3122 Comm: syz.3.1011 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 150.935228][ T3122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.935240][ T3122] Call Trace: [ 150.935247][ T3122] [ 150.935255][ T3122] __dump_stack+0x21/0x30 [ 150.935283][ T3122] dump_stack_lvl+0x140/0x1c0 [ 150.935307][ T3122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.935329][ T3122] ? class_find_device+0x318/0x390 [ 150.935346][ T3122] ? __cfi_device_match_devt+0x10/0x10 [ 150.935361][ T3122] dump_stack+0x19/0x20 [ 150.935378][ T3122] should_fail_ex+0x3c2/0x510 [ 150.935396][ T3122] should_failslab+0xac/0x100 [ 150.935416][ T3122] __kmalloc_cache_noprof+0x41/0x470 [ 150.935432][ T3122] ? pty_unix98_install+0xba/0x6b0 [ 150.935452][ T3122] ? __cfi_alloc_tty_struct+0x10/0x10 [ 150.935470][ T3122] pty_unix98_install+0xba/0x6b0 [ 150.935491][ T3122] tty_init_dev+0xe3/0x4f0 [ 150.935507][ T3122] ptmx_open+0xe1/0x2f0 [ 150.935526][ T3122] ? selinux_file_open+0x46c/0x630 [ 150.935542][ T3122] chrdev_open+0x4eb/0x610 [ 150.935557][ T3122] ? __cfi_chrdev_open+0x10/0x10 [ 150.935573][ T3122] ? bpf_lsm_file_open+0xd/0x20 [ 150.935604][ T3122] ? __cfi_chrdev_open+0x10/0x10 [ 150.935620][ T3122] do_dentry_open+0x97c/0x1510 [ 150.935642][ T3122] vfs_open+0x86/0x240 [ 150.935661][ T3122] ? __cfi_vfs_open+0x10/0x10 [ 150.935681][ T3122] ? may_open+0x352/0x430 [ 150.935700][ T3122] path_openat+0x2c49/0x35a0 [ 150.935720][ T3122] ? schedule+0xc5/0x240 [ 150.935736][ T3122] ? kasan_save_alloc_info+0x3a/0x50 [ 150.935750][ T3122] ? getname+0x1b/0x30 [ 150.935764][ T3122] ? x64_sys_call+0xe69/0x2ee0 [ 150.935777][ T3122] ? do_syscall_64+0x57/0xf0 [ 150.935792][ T3122] ? do_filp_open+0x440/0x440 [ 150.935810][ T3122] do_filp_open+0x1f2/0x440 [ 150.935828][ T3122] ? __cfi_do_filp_open+0x10/0x10 [ 150.935848][ T3122] ? alloc_fd+0x4c1/0x570 [ 150.935865][ T3122] do_sys_openat2+0x134/0x1d0 [ 150.935884][ T3122] ? do_sys_open+0x100/0x100 [ 150.935904][ T3122] __x64_sys_openat+0x13a/0x170 [ 150.935923][ T3122] x64_sys_call+0xe69/0x2ee0 [ 150.935939][ T3122] do_syscall_64+0x57/0xf0 [ 150.935952][ T3122] ? clear_bhb_loop+0x50/0xa0 [ 150.935968][ T3122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.935985][ T3122] RIP: 0033:0x7f4b9ed9e159 [ 150.935998][ T3122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.936010][ T3122] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.936027][ T3122] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 150.936038][ T3122] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 150.936049][ T3122] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 150.936058][ T3122] R10: 0000000000003f00 R11: 0000000000000246 R12: 0000000000000000 [ 150.936068][ T3122] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 150.936082][ T3122] [ 151.324451][ T3134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 151.365687][ T3138] FAULT_INJECTION: forcing a failure. [ 151.365687][ T3138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.379006][ T3138] CPU: 0 UID: 0 PID: 3138 Comm: syz.3.1020 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 151.379026][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.379033][ T3138] Call Trace: [ 151.379037][ T3138] [ 151.379042][ T3138] __dump_stack+0x21/0x30 [ 151.379074][ T3138] dump_stack_lvl+0x140/0x1c0 [ 151.379088][ T3138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.379102][ T3138] ? vsnprintf+0x7b4/0x1ad0 [ 151.379116][ T3138] ? check_stack_object+0x10f/0x150 [ 151.379129][ T3138] dump_stack+0x19/0x20 [ 151.379142][ T3138] should_fail_ex+0x3c2/0x510 [ 151.379155][ T3138] should_fail+0xf/0x20 [ 151.379166][ T3138] should_fail_usercopy+0x1e/0x30 [ 151.379179][ T3138] _copy_from_user+0x20/0xa0 [ 151.379193][ T3138] kstrtouint_from_user+0xde/0x170 [ 151.379206][ T3138] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 151.379217][ T3138] ? selinux_file_permission+0x318/0xb60 [ 151.379229][ T3138] ? __cfi_selinux_file_permission+0x10/0x10 [ 151.379240][ T3138] proc_fail_nth_write+0x8f/0x220 [ 151.379256][ T3138] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 151.379269][ T3138] ? l2cap_sock_setsockopt+0x144e/0x1d00 [ 151.379281][ T3138] ? bpf_lsm_file_permission+0xd/0x20 [ 151.379295][ T3138] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 151.379309][ T3138] vfs_write+0x3c4/0xfd0 [ 151.379319][ T3138] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 151.379330][ T3138] ? __cfi_vfs_write+0x10/0x10 [ 151.379340][ T3138] ? __kasan_check_write+0x18/0x20 [ 151.379351][ T3138] ? mutex_lock+0x97/0x1d0 [ 151.379362][ T3138] ? __cfi_mutex_lock+0x10/0x10 [ 151.379375][ T3138] ksys_write+0x145/0x260 [ 151.379386][ T3138] ? __fget_files+0x2bc/0x330 [ 151.379398][ T3138] ? __cfi_ksys_write+0x10/0x10 [ 151.379408][ T3138] ? __kasan_check_write+0x18/0x20 [ 151.379418][ T3138] ? __kasan_check_read+0x15/0x20 [ 151.379429][ T3138] __x64_sys_write+0x7f/0x90 [ 151.379439][ T3138] x64_sys_call+0x271c/0x2ee0 [ 151.379449][ T3138] do_syscall_64+0x57/0xf0 [ 151.379458][ T3138] ? clear_bhb_loop+0x50/0xa0 [ 151.379472][ T3138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.379483][ T3138] RIP: 0033:0x7f4b9ed5e98e [ 151.379493][ T3138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.379503][ T3138] RSP: 002b:00007f4b9fcc4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.379515][ T3138] RAX: ffffffffffffffda RBX: 00007f4b9fcc56c0 RCX: 00007f4b9ed5e98e [ 151.379523][ T3138] RDX: 0000000000000001 RSI: 00007f4b9fcc50a0 RDI: 0000000000000003 [ 151.379530][ T3138] RBP: 00007f4b9fcc5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.379537][ T3138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.379544][ T3138] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 151.379552][ T3138] [ 151.710304][ T459] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.799085][ T3152] FAULT_INJECTION: forcing a failure. [ 151.799085][ T3152] name failslab, interval 1, probability 0, space 0, times 0 [ 151.811790][ T3152] CPU: 1 UID: 0 PID: 3152 Comm: syz.3.1025 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 151.811820][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.811833][ T3152] Call Trace: [ 151.811841][ T3152] [ 151.811847][ T3152] __dump_stack+0x21/0x30 [ 151.811868][ T3152] dump_stack_lvl+0x140/0x1c0 [ 151.811882][ T3152] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.811897][ T3152] dump_stack+0x19/0x20 [ 151.811910][ T3152] should_fail_ex+0x3c2/0x510 [ 151.811923][ T3152] should_failslab+0xac/0x100 [ 151.811936][ T3152] kmem_cache_alloc_node_noprof+0x45/0x420 [ 151.811948][ T3152] ? __alloc_skb+0x10c/0x360 [ 151.811959][ T3152] ? add_uevent_var+0x288/0x470 [ 151.811970][ T3152] __alloc_skb+0x10c/0x360 [ 151.811982][ T3152] ? __kasan_check_write+0x18/0x20 [ 151.811994][ T3152] alloc_uevent_skb+0x85/0x240 [ 151.812006][ T3152] kobject_uevent_net_broadcast+0x356/0x5e0 [ 151.812020][ T3152] kobject_uevent_env+0x551/0x7e0 [ 151.812031][ T3152] kobject_uevent+0x21/0x40 [ 151.812042][ T3152] driver_register+0x373/0x3c0 [ 151.812053][ T3152] usb_gadget_register_driver_owner+0xfc/0x270 [ 151.812065][ T3152] raw_ioctl+0x144c/0x37a0 [ 151.812076][ T3152] ? __cfi_raw_ioctl+0x10/0x10 [ 151.812085][ T3152] ? selinux_file_ioctl+0x732/0x1480 [ 151.812096][ T3152] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 151.812109][ T3152] ? __fget_files+0x2bc/0x330 [ 151.812121][ T3152] ? bpf_lsm_file_ioctl+0xd/0x20 [ 151.812133][ T3152] ? security_file_ioctl+0x3e/0x110 [ 151.812143][ T3152] ? __cfi_raw_ioctl+0x10/0x10 [ 151.812152][ T3152] __se_sys_ioctl+0x126/0x1b0 [ 151.812165][ T3152] __x64_sys_ioctl+0x7f/0xa0 [ 151.812176][ T3152] x64_sys_call+0x1878/0x2ee0 [ 151.812186][ T3152] do_syscall_64+0x57/0xf0 [ 151.812195][ T3152] ? clear_bhb_loop+0x50/0xa0 [ 151.812208][ T3152] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.812219][ T3152] RIP: 0033:0x7f4b9ed9ddeb [ 151.812229][ T3152] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 151.812238][ T3152] RSP: 002b:00007f4b9fcc2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.812251][ T3152] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4b9ed9ddeb [ 151.812258][ T3152] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 151.812265][ T3152] RBP: 00007f4b9fcc3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 151.812272][ T3152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.812279][ T3152] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 151.812287][ T3152] [ 151.812317][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.860259][ T459] usb 5-1: Using ep0 maxpacket: 8 [ 151.864381][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.869306][ T459] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.098761][ T459] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.107858][ T459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.116204][ T459] usb 5-1: Product:  [ 152.120422][ T459] usb 5-1: Manufacturer: Ї [ 152.125009][ T459] usb 5-1: SerialNumber:   [ 152.227896][ T3158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 152.397440][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.406072][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.534437][ T459] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.541448][ T1274] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 152.549301][ T459] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 152.556887][ T459] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 152.566272][ T459] usb 5-1: USB disconnect, device number 2 [ 152.574280][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.701326][ T1274] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.712306][ T1274] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.726155][ T1274] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.733070][ T1274] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 152.742158][ T1274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.750699][ T1274] usb 1-1: config 0 descriptor?? [ 153.017084][ T3168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.025682][ T3168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.051630][ T3171] netlink: 'syz.4.1034': attribute type 5 has an invalid length. [ 153.359842][ T1274] sony 0003:054C:0268.0006: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 153.381214][ T1274] sony 0003:054C:0268.0006: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 153.394143][ T1274] sony 0003:054C:0268.0006: failed to claim input [ 153.408240][ T1274] usb 1-1: USB disconnect, device number 52 [ 153.518746][ T36] audit: type=1326 audit(1790273446.925:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.1044" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528bd9e159 code=0x0 [ 153.551787][ T3199] FAULT_INJECTION: forcing a failure. [ 153.551787][ T3199] name failslab, interval 1, probability 0, space 0, times 0 [ 153.564525][ T3199] CPU: 1 UID: 0 PID: 3199 Comm: syz.3.1045 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 153.564556][ T3199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.564569][ T3199] Call Trace: [ 153.564576][ T3199] [ 153.564585][ T3199] __dump_stack+0x21/0x30 [ 153.564607][ T3199] dump_stack_lvl+0x140/0x1c0 [ 153.564621][ T3199] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.564637][ T3199] dump_stack+0x19/0x20 [ 153.564649][ T3199] should_fail_ex+0x3c2/0x510 [ 153.564662][ T3199] should_failslab+0xac/0x100 [ 153.564674][ T3199] __kmalloc_cache_noprof+0x41/0x470 [ 153.564686][ T3199] ? tty_alloc_file+0x5f/0x140 [ 153.564697][ T3199] tty_alloc_file+0x5f/0x140 [ 153.564707][ T3199] ptmx_open+0x59/0x2f0 [ 153.564719][ T3199] ? selinux_file_open+0x46c/0x630 [ 153.564730][ T3199] chrdev_open+0x4eb/0x610 [ 153.564741][ T3199] ? __cfi_chrdev_open+0x10/0x10 [ 153.564754][ T3199] ? bpf_lsm_file_open+0xd/0x20 [ 153.564768][ T3199] ? __cfi_chrdev_open+0x10/0x10 [ 153.564778][ T3199] do_dentry_open+0x97c/0x1510 [ 153.564793][ T3199] vfs_open+0x86/0x240 [ 153.564805][ T3199] ? __cfi_vfs_open+0x10/0x10 [ 153.564818][ T3199] ? may_open+0x352/0x430 [ 153.564831][ T3199] path_openat+0x2c49/0x35a0 [ 153.564852][ T3199] ? schedule+0xc5/0x240 [ 153.564864][ T3199] ? kasan_save_alloc_info+0x3a/0x50 [ 153.564874][ T3199] ? getname+0x1b/0x30 [ 153.564885][ T3199] ? x64_sys_call+0xe69/0x2ee0 [ 153.564895][ T3199] ? do_syscall_64+0x57/0xf0 [ 153.564907][ T3199] ? do_filp_open+0x440/0x440 [ 153.564921][ T3199] do_filp_open+0x1f2/0x440 [ 153.564935][ T3199] ? __cfi_do_filp_open+0x10/0x10 [ 153.564950][ T3199] ? alloc_fd+0x4c1/0x570 [ 153.564963][ T3199] do_sys_openat2+0x134/0x1d0 [ 153.564977][ T3199] ? do_sys_open+0x100/0x100 [ 153.564991][ T3199] ? __kasan_check_write+0x18/0x20 [ 153.565001][ T3199] __x64_sys_openat+0x13a/0x170 [ 153.565016][ T3199] x64_sys_call+0xe69/0x2ee0 [ 153.565025][ T3199] do_syscall_64+0x57/0xf0 [ 153.565034][ T3199] ? clear_bhb_loop+0x50/0xa0 [ 153.565046][ T3199] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.565058][ T3199] RIP: 0033:0x7f4b9ed9e159 [ 153.565068][ T3199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.565077][ T3199] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.565089][ T3199] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 153.565097][ T3199] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 153.565104][ T3199] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.565111][ T3199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.565117][ T3199] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 153.565126][ T3199] [ 153.855603][ T3205] ./dev/sda1: Can't lookup blockdev [ 153.882986][ T3210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 153.927068][ T36] audit: type=1400 audit(1790273447.335:372): avc: denied { remount } for pid=3214 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.990862][ T3222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.001420][ T3222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.089529][ T36] audit: type=1400 audit(1790273447.495:373): avc: denied { mount } for pid=3224 comm="syz.0.1055" name="/" dev="configfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 154.113815][ T36] audit: type=1400 audit(1790273447.495:374): avc: denied { search } for pid=3224 comm="syz.0.1055" name="/" dev="configfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.136072][ T36] audit: type=1400 audit(1790273447.495:375): avc: denied { write } for pid=3224 comm="syz.0.1055" name="usb_gadget" dev="configfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.159871][ T36] audit: type=1400 audit(1790273447.495:376): avc: denied { add_name } for pid=3224 comm="syz.0.1055" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.180570][ T36] audit: type=1400 audit(1790273447.495:377): avc: denied { create } for pid=3224 comm="syz.0.1055" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 154.328293][ T3238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 154.610348][ T45] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 154.710846][ T3246] FAULT_INJECTION: forcing a failure. [ 154.710846][ T3246] name failslab, interval 1, probability 0, space 0, times 0 [ 154.723556][ T3246] CPU: 0 UID: 0 PID: 3246 Comm: syz.3.1064 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 154.723588][ T3246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.723602][ T3246] Call Trace: [ 154.723609][ T3246] [ 154.723618][ T3246] __dump_stack+0x21/0x30 [ 154.723639][ T3246] dump_stack_lvl+0x140/0x1c0 [ 154.723653][ T3246] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.723668][ T3246] dump_stack+0x19/0x20 [ 154.723681][ T3246] should_fail_ex+0x3c2/0x510 [ 154.723694][ T3246] ? kobject_get_path+0xc3/0x2d0 [ 154.723710][ T3246] should_failslab+0xac/0x100 [ 154.723731][ T3246] __kmalloc_noprof+0x69/0x510 [ 154.723743][ T3246] ? kasan_save_alloc_info+0x3a/0x50 [ 154.723754][ T3246] ? kobject_get_path+0xc3/0x2d0 [ 154.723768][ T3246] ? __kasan_kmalloc+0x96/0xb0 [ 154.723783][ T3246] kobject_get_path+0xc3/0x2d0 [ 154.723797][ T3246] kobject_uevent_env+0x2bc/0x7e0 [ 154.723810][ T3246] kobject_uevent+0x21/0x40 [ 154.723821][ T3246] __kobject_del+0xd3/0x2c0 [ 154.723831][ T3246] kobject_put+0x1ff/0x2a0 [ 154.723841][ T3246] netdev_queue_update_kobjects+0x4b0/0x550 [ 154.723858][ T3246] netdev_unregister_kobject+0x104/0x260 [ 154.723872][ T3246] unregister_netdevice_many_notify+0x1678/0x1be0 [ 154.723885][ T3246] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 154.723897][ T3246] ? __call_rcu_common+0x53c/0x710 [ 154.723910][ T3246] ? __kasan_check_read+0x15/0x20 [ 154.723921][ T3246] unregister_netdevice_queue+0x302/0x350 [ 154.723932][ T3246] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 154.723943][ T3246] br_dev_delete+0x100/0x130 [ 154.723957][ T3246] ? br_del_bridge+0xac/0xf0 [ 154.723966][ T3246] br_del_bridge+0xb6/0xf0 [ 154.723975][ T3246] br_ioctl_stub+0x75e/0xcd0 [ 154.723986][ T3246] ? __cfi_br_ioctl_stub+0x10/0x10 [ 154.723996][ T3246] ? selinux_file_ioctl+0x732/0x1480 [ 154.724008][ T3246] ? mmap_write_unlock+0x8e/0xe0 [ 154.724022][ T3246] ? __kasan_check_write+0x18/0x20 [ 154.724032][ T3246] ? mutex_lock+0x97/0x1d0 [ 154.724043][ T3246] ? __cfi_do_futex+0x10/0x10 [ 154.724056][ T3246] ? __cfi_br_ioctl_stub+0x10/0x10 [ 154.724066][ T3246] sock_ioctl+0x4e0/0x7e0 [ 154.724076][ T3246] ? __cfi_sock_ioctl+0x10/0x10 [ 154.724086][ T3246] ? __fget_files+0x2bc/0x330 [ 154.724098][ T3246] ? bpf_lsm_file_ioctl+0xd/0x20 [ 154.724111][ T3246] ? security_file_ioctl+0x3e/0x110 [ 154.724122][ T3246] ? __cfi_sock_ioctl+0x10/0x10 [ 154.724131][ T3246] __se_sys_ioctl+0x126/0x1b0 [ 154.724144][ T3246] __x64_sys_ioctl+0x7f/0xa0 [ 154.724156][ T3246] x64_sys_call+0x1878/0x2ee0 [ 154.724165][ T3246] do_syscall_64+0x57/0xf0 [ 154.724175][ T3246] ? clear_bhb_loop+0x50/0xa0 [ 154.724187][ T3246] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.724199][ T3246] RIP: 0033:0x7f4b9ed9e159 [ 154.724209][ T3246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.724218][ T3246] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.724235][ T3246] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 154.724244][ T3246] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 154.724252][ T3246] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 154.724259][ T3246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.724266][ T3246] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 154.724274][ T3246] [ 154.861471][ T45] usb 1-1: config 3 has an invalid interface number: 193 but max is 0 [ 155.074670][ T45] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 155.084815][ T45] usb 1-1: config 3 has no interface number 0 [ 155.090986][ T45] usb 1-1: config 3 interface 193 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.104398][ T45] usb 1-1: config 3 interface 193 has no altsetting 0 [ 155.112768][ T45] usb 1-1: New USB device found, idVendor=045b, idProduct=0247, bcdDevice=6b.2b [ 155.122078][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.130290][ T45] usb 1-1: Product: syz [ 155.134566][ T45] usb 1-1: Manufacturer: syz [ 155.139273][ T45] usb 1-1: SerialNumber: syz [ 155.169043][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 155.169059][ T36] audit: type=1400 audit(1790273448.575:382): avc: denied { create } for pid=3254 comm="syz.3.1067" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.177608][ T3255] kvm: kvm [3254]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc0010006) = 0x10001000001 [ 155.197073][ T36] audit: type=1400 audit(1790273448.575:383): avc: denied { write } for pid=3254 comm="syz.3.1067" name="file0" dev="tmpfs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.212803][ T3255] FAULT_INJECTION: forcing a failure. [ 155.212803][ T3255] name failslab, interval 1, probability 0, space 0, times 0 [ 155.228467][ T36] audit: type=1400 audit(1790273448.575:384): avc: denied { open } for pid=3254 comm="syz.3.1067" path="/333/file0" dev="tmpfs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.241195][ T3255] CPU: 0 UID: 0 PID: 3255 Comm: syz.3.1067 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 155.241225][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.241237][ T3255] Call Trace: [ 155.241244][ T3255] [ 155.241252][ T3255] __dump_stack+0x21/0x30 [ 155.241282][ T3255] dump_stack_lvl+0x140/0x1c0 [ 155.241307][ T3255] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.241332][ T3255] ? stack_trace_save+0xaa/0x100 [ 155.241355][ T3255] dump_stack+0x19/0x20 [ 155.241387][ T3255] should_fail_ex+0x3c2/0x510 [ 155.241410][ T3255] should_failslab+0xac/0x100 [ 155.241435][ T3255] __kmalloc_cache_node_noprof+0x46/0x430 [ 155.241458][ T3255] ? __get_vm_area_node+0x150/0x390 [ 155.241483][ T3255] ? __asan_memset+0x39/0x50 [ 155.241502][ T3255] __get_vm_area_node+0x150/0x390 [ 155.241529][ T3255] __vmalloc_node_range_noprof+0x340/0x1300 [ 155.241556][ T3255] ? n_tty_open+0x38/0x1d0 [ 155.241579][ T3255] ? __kasan_check_write+0x18/0x20 [ 155.241598][ T3255] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 155.241618][ T3255] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 155.241636][ T3255] ? klist_iter_init_node+0x1cd/0x270 [ 155.241664][ T3255] ? __kasan_check_write+0x18/0x20 [ 155.241684][ T3255] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 155.241711][ T3255] ? class_find_device+0x318/0x390 [ 155.241733][ T3255] ? __cfi_device_match_devt+0x10/0x10 [ 155.241754][ T3255] ? __cfi_class_find_device+0x10/0x10 [ 155.241775][ T3255] ? n_tty_open+0x38/0x1d0 [ 155.241798][ T3255] vzalloc_noprof+0x103/0x1d0 [ 155.241816][ T3255] ? n_tty_open+0x38/0x1d0 [ 155.241839][ T3255] ? __cfi_ldsem_down_write+0x10/0x10 [ 155.241857][ T3255] ? __cfi_vzalloc_noprof+0x10/0x10 [ 155.241874][ T3255] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 155.241893][ T3255] n_tty_open+0x38/0x1d0 [ 155.241916][ T3255] tty_ldisc_setup+0xda/0x370 [ 155.241935][ T3255] tty_init_dev+0x28b/0x4f0 [ 155.241955][ T3255] ptmx_open+0xe1/0x2f0 [ 155.241978][ T3255] ? selinux_file_open+0x46c/0x630 [ 155.241999][ T3255] chrdev_open+0x4eb/0x610 [ 155.242020][ T3255] ? __cfi_chrdev_open+0x10/0x10 [ 155.242041][ T3255] ? bpf_lsm_file_open+0xd/0x20 [ 155.242073][ T3255] ? __cfi_chrdev_open+0x10/0x10 [ 155.242092][ T3255] do_dentry_open+0x97c/0x1510 [ 155.242119][ T3255] vfs_open+0x86/0x240 [ 155.242143][ T3255] ? __cfi_vfs_open+0x10/0x10 [ 155.242168][ T3255] ? may_open+0x352/0x430 [ 155.242204][ T3255] path_openat+0x2c49/0x35a0 [ 155.242244][ T3255] ? kasan_save_alloc_info+0x3a/0x50 [ 155.242262][ T3255] ? getname+0x1b/0x30 [ 155.242281][ T3255] ? x64_sys_call+0xe69/0x2ee0 [ 155.242298][ T3255] ? do_syscall_64+0x57/0xf0 [ 155.242317][ T3255] ? do_filp_open+0x440/0x440 [ 155.242342][ T3255] do_filp_open+0x1f2/0x440 [ 155.242365][ T3255] ? __cfi_do_filp_open+0x10/0x10 [ 155.242392][ T3255] ? alloc_fd+0x4c1/0x570 [ 155.242414][ T3255] do_sys_openat2+0x134/0x1d0 [ 155.242439][ T3255] ? do_sys_open+0x100/0x100 [ 155.242465][ T3255] __x64_sys_openat+0x13a/0x170 [ 155.242491][ T3255] x64_sys_call+0xe69/0x2ee0 [ 155.242509][ T3255] do_syscall_64+0x57/0xf0 [ 155.242527][ T3255] ? clear_bhb_loop+0x50/0xa0 [ 155.242551][ T3255] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.242573][ T3255] RIP: 0033:0x7f4b9ed9e159 [ 155.242591][ T3255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.242606][ T3255] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.242626][ T3255] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 155.242642][ T3255] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 155.242656][ T3255] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 155.242668][ T3255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.242682][ T3255] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 155.242699][ T3255] [ 155.242709][ T3255] syz.3.1067: vmalloc error: size 8936, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 155.263447][ T36] audit: type=1400 audit(1790273448.575:385): avc: denied { ioctl } for pid=3254 comm="syz.3.1067" path="/333/file0" dev="tmpfs" ino=1825 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.282584][ T3255] ,cpuset= [ 155.369749][ T45] cdc_acm 1-1:3.193: Zero length descriptor references [ 155.371748][ T3255] syz3 [ 155.378715][ T45] cdc_acm 1-1:3.193: probe with driver cdc_acm failed with error -22 [ 155.382024][ T3255] ,mems_allowed=0 [ 155.391669][ T45] usb 1-1: USB disconnect, device number 53 [ 155.393670][ T3255] [ 155.717286][ T3255] CPU: 1 UID: 0 PID: 3255 Comm: syz.3.1067 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 155.717312][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.717308][ T1274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.717325][ T3255] Call Trace: [ 155.717333][ T3255] [ 155.717343][ T3255] __dump_stack+0x21/0x30 [ 155.717374][ T3255] dump_stack_lvl+0x140/0x1c0 [ 155.717402][ T3255] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.717429][ T3255] dump_stack+0x19/0x20 [ 155.717453][ T3255] warn_alloc+0x1e7/0x2c0 [ 155.717478][ T3255] ? __kasan_kmalloc+0x28/0xb0 [ 155.717501][ T3255] ? __cfi_warn_alloc+0x10/0x10 [ 155.717525][ T3255] ? __get_vm_area_node+0x150/0x390 [ 155.717551][ T3255] ? __get_vm_area_node+0x382/0x390 [ 155.717577][ T3255] __vmalloc_node_range_noprof+0x365/0x1300 [ 155.717604][ T3255] ? __kasan_check_write+0x18/0x20 [ 155.717623][ T3255] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 155.717642][ T3255] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 155.717660][ T3255] ? klist_iter_init_node+0x1cd/0x270 [ 155.717688][ T3255] ? __kasan_check_write+0x18/0x20 [ 155.717708][ T3255] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 155.717734][ T3255] ? class_find_device+0x318/0x390 [ 155.717754][ T3255] ? __cfi_device_match_devt+0x10/0x10 [ 155.717772][ T3255] ? __cfi_class_find_device+0x10/0x10 [ 155.717794][ T3255] ? n_tty_open+0x38/0x1d0 [ 155.717817][ T3255] vzalloc_noprof+0x103/0x1d0 [ 155.717834][ T3255] ? n_tty_open+0x38/0x1d0 [ 155.717857][ T3255] ? __cfi_ldsem_down_write+0x10/0x10 [ 155.717875][ T3255] ? __cfi_vzalloc_noprof+0x10/0x10 [ 155.717892][ T3255] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 155.717911][ T3255] n_tty_open+0x38/0x1d0 [ 155.717935][ T3255] tty_ldisc_setup+0xda/0x370 [ 155.717954][ T3255] tty_init_dev+0x28b/0x4f0 [ 155.717975][ T3255] ptmx_open+0xe1/0x2f0 [ 155.717998][ T3255] ? selinux_file_open+0x46c/0x630 [ 155.718019][ T3255] chrdev_open+0x4eb/0x610 [ 155.718048][ T3255] ? __cfi_chrdev_open+0x10/0x10 [ 155.718069][ T3255] ? bpf_lsm_file_open+0xd/0x20 [ 155.718095][ T3255] ? __cfi_chrdev_open+0x10/0x10 [ 155.718115][ T3255] do_dentry_open+0x97c/0x1510 [ 155.718142][ T3255] vfs_open+0x86/0x240 [ 155.718166][ T3255] ? __cfi_vfs_open+0x10/0x10 [ 155.718190][ T3255] ? may_open+0x352/0x430 [ 155.718214][ T3255] path_openat+0x2c49/0x35a0 [ 155.718240][ T3255] ? kasan_save_alloc_info+0x3a/0x50 [ 155.718258][ T3255] ? getname+0x1b/0x30 [ 155.718277][ T3255] ? x64_sys_call+0xe69/0x2ee0 [ 155.718294][ T3255] ? do_syscall_64+0x57/0xf0 [ 155.718314][ T3255] ? do_filp_open+0x440/0x440 [ 155.718338][ T3255] do_filp_open+0x1f2/0x440 [ 155.718362][ T3255] ? __cfi_do_filp_open+0x10/0x10 [ 155.718389][ T3255] ? alloc_fd+0x4c1/0x570 [ 155.718412][ T3255] do_sys_openat2+0x134/0x1d0 [ 155.718436][ T3255] ? do_sys_open+0x100/0x100 [ 155.718462][ T3255] __x64_sys_openat+0x13a/0x170 [ 155.718489][ T3255] x64_sys_call+0xe69/0x2ee0 [ 155.718507][ T3255] do_syscall_64+0x57/0xf0 [ 155.718524][ T3255] ? clear_bhb_loop+0x50/0xa0 [ 155.718546][ T3255] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.718568][ T3255] RIP: 0033:0x7f4b9ed9e159 [ 155.718584][ T3255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.718600][ T3255] RSP: 002b:00007f4b9fcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.718621][ T3255] RAX: ffffffffffffffda RBX: 00007f4b9f025fa0 RCX: 00007f4b9ed9e159 [ 155.718636][ T3255] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 155.718649][ T3255] RBP: 00007f4b9ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 155.718661][ T3255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.718674][ T3255] R13: 00007f4b9f026038 R14: 00007f4b9f025fa0 R15: 00007ffcbf03abb8 [ 155.718691][ T3255] [ 155.718756][ T3255] Mem-Info: [ 155.860308][ T1274] usb 5-1: device descriptor read/64, error -71 [ 155.860736][ T3255] active_anon:40693 inactive_anon:654 isolated_anon:0 [ 155.860736][ T3255] active_file:18035 inactive_file:2630 isolated_file:0 [ 155.860736][ T3255] unevictable:0 dirty:256 writeback:0 [ 155.860736][ T3255] slab_reclaimable:4291 slab_unreclaimable:74500 [ 155.860736][ T3255] mapped:26326 shmem:33044 pagetables:1245 [ 155.860736][ T3255] sec_pagetables:0 bounce:0 [ 155.860736][ T3255] kernel_misc_reclaimable:0 [ 155.860736][ T3255] free:1484961 free_pcp:1691 free_cma:0 [ 156.148481][ T3255] Node 0 active_anon:162564kB inactive_anon:2616kB active_file:72164kB inactive_file:10520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105192kB dirty:460kB writeback:32kB shmem:132180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6876kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no [ 156.181049][ T1274] usb 5-1: device descriptor read/64, error -71 [ 156.182488][ T3255] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:0kB free_cma:0kB [ 156.217042][ T3255] lowmem_reserve[]: 0 3921 3921 [ 156.221968][ T3255] Normal free:2979484kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:162604kB inactive_anon:2616kB active_file:72248kB inactive_file:10520kB unevictable:0kB writepending:460kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3728kB local_pcp:2144kB free_cma:0kB [ 156.253730][ T3255] lowmem_reserve[]: 0 0 0 [ 156.258078][ T3255] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 156.273722][ T3255] Normal: 137*4kB (UME) 83*8kB (UME) 112*16kB (E) 351*32kB (UME) 150*64kB (UE) 47*128kB (UME) 14*256kB (UE) 18*512kB (UE) 16*1024kB (UME) 6*2048kB (UME) 710*4096kB (UM) = 2979484kB [ 156.291749][ T3255] 54163 total pagecache pages [ 156.296471][ T3255] 430 pages in swap cache [ 156.301086][ T3255] Free swap = 122600kB [ 156.305260][ T3255] Total swap = 124996kB [ 156.309395][ T3255] 2097051 pages RAM [ 156.313220][ T3255] 0 pages HighMem/MovableOnly [ 156.317915][ T3255] 352241 pages reserved [ 156.322084][ T3255] 0 pages cma reserved [ 156.327170][ T3255] Memory allocations: [ 156.331179][ T3255] 0 B 0 init/main.c:1477 func:do_initcalls [ 156.338379][ T3255] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 156.346610][ T3255] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 156.354353][ T3255] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 156.362289][ T3255] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 156.370191][ T3255] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 156.378832][ T3255] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 156.386767][ T3255] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 156.394685][ T3255] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 156.402668][ T45] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 156.402875][ T3255] 0 B 0 init/initramfs.c:101 func:find_link [ 156.417568][ T3255] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 156.424328][ T1274] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.435213][ T36] audit: type=1400 audit(1790273449.845:386): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.532268][ T3270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 156.560278][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 156.570276][ T1274] usb 5-1: device descriptor read/64, error -71 [ 156.625030][ T3257] kvm: pic: non byte write [ 156.723573][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.739783][ T45] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 156.752206][ T45] usb 1-1: can't read configurations, error -71 [ 156.810274][ T1274] usb 5-1: device descriptor read/64, error -71 [ 156.930280][ T1274] usb usb5-port1: attempt power cycle [ 157.256845][ T3283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 157.270253][ T1274] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.278076][ T3283] : renamed from xfrm0 (while UP) [ 157.301758][ T1274] usb 5-1: device descriptor read/8, error -71 [ 157.341615][ T3291] tipc: MTU too low for tipc bearer [ 157.359002][ T3293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.368184][ T3293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.387101][ T36] audit: type=1326 audit(1790273450.795:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.3.1079" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b9ed9e159 code=0x0 [ 157.401419][ T3298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 157.431263][ T1274] usb 5-1: device descriptor read/8, error -71 [ 157.441706][ T36] audit: type=1400 audit(1790273450.855:388): avc: denied { shutdown } for pid=3299 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.619393][ T36] audit: type=1400 audit(1790273451.025:389): avc: denied { setopt } for pid=3307 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.690369][ T1274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.711369][ T1274] usb 5-1: device descriptor read/8, error -71 [ 157.841294][ T1274] usb 5-1: device descriptor read/8, error -71 [ 157.960343][ T1274] usb usb5-port1: unable to enumerate USB device [ 158.016665][ T3315] syzkaller0: refused to change device tx_queue_len [ 158.084976][ T36] audit: type=1400 audit(1790273451.495:390): avc: denied { connect } for pid=3318 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.233370][ T3327] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 158.234222][ T3327] @0: renamed from bond_slave_1 [ 158.390270][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 158.422454][ T36] audit: type=1400 audit(1790273451.835:391): avc: denied { execmod } for pid=3333 comm="syz.4.1096" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.540274][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 158.546491][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.557461][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.568202][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.577353][ T45] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 158.585868][ T45] usb 1-1: Product: syz [ 158.590012][ T45] usb 1-1: Manufacturer: syz [ 158.596532][ T45] hub 1-1:4.0: USB hub found [ 158.710263][ T587] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 158.796672][ T45] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 158.830642][ T45] usb 1-1: USB disconnect, device number 56 [ 158.861308][ T587] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 158.872276][ T587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.883280][ T587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.893039][ T587] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 158.906684][ T587] usb 5-1: New USB device found, idVendor=056a, idProduct=4400, bcdDevice=e9.87 [ 158.915817][ T587] usb 5-1: New USB device strings: Mfr=193, Product=0, SerialNumber=0 [ 158.924018][ T587] usb 5-1: Manufacturer: syz [ 158.929075][ T587] usb 5-1: config 0 descriptor?? [ 159.290255][ T45] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 159.337412][ T587] usbhid 5-1:0.0: can't add hid device: -71 [ 159.343501][ T587] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 159.352185][ T587] usb 5-1: USB disconnect, device number 7 [ 159.441385][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.452411][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.463160][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.472445][ T45] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 159.480920][ T45] usb 1-1: Product: syz [ 159.485121][ T45] usb 1-1: Manufacturer: syz [ 159.491017][ T45] hub 1-1:4.0: USB hub found [ 159.691151][ T45] hub 1-1:4.0: 1 port detected [ 160.090263][ T459] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.240254][ T459] usb 5-1: Using ep0 maxpacket: 16 [ 160.246515][ T459] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 160.259096][ T459] usb 5-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice= 0.40 [ 160.268260][ T459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.276288][ T459] usb 5-1: Product: syz [ 160.280464][ T459] usb 5-1: Manufacturer: syz [ 160.285049][ T459] usb 5-1: SerialNumber: syz [ 160.403893][ T45] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 160.416436][ T45] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 160.430180][ T3348] input: syz0 as /devices/virtual/input/input11 [ 160.437464][ T36] audit: type=1400 audit(1790273453.845:392): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=725 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.465451][ T45] usb 1-1: USB disconnect, device number 57 [ 160.466452][ T36] audit: type=1400 audit(1790273453.845:393): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=725 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.500524][ T459] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.507537][ T459] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 160.520572][ T36] audit: type=1400 audit(1790273453.935:394): avc: denied { map } for pid=3351 comm="syz.0.1103" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 160.544022][ T36] audit: type=1400 audit(1790273453.935:395): avc: denied { read } for pid=3351 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.548025][ T459] usb 5-1: USB disconnect, device number 8 [ 160.576644][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.599174][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.616893][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.627574][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.693412][ T36] audit: type=1400 audit(1790273454.105:396): avc: denied { module_load } for pid=3366 comm="syz.0.1108" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 160.741116][ T3371] overlayfs: failed to resolve 'lower1': -2 [ 160.747870][ T3371] overlayfs: failed to resolve 'lower1': -2 [ 160.778692][ T36] audit: type=1400 audit(1790273454.185:397): avc: denied { mounton } for pid=3378 comm="syz.1.1113" path="/267/file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.811300][ T3381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.888183][ T3386] netlink: 'syz.1.1116': attribute type 25 has an invalid length. [ 161.039735][ T36] audit: type=1400 audit(1790273454.445:398): avc: denied { create } for pid=3399 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.088510][ T3403] 9pnet_fd: Insufficient options for proto=fd [ 161.247072][ T3427] rust_binder: Write failure EFAULT in pid:890 [ 161.250744][ T3427] syzkaller1: entered promiscuous mode [ 161.262405][ T3427] syzkaller1: entered allmulticast mode [ 161.281468][ T3429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.290205][ T3429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.635070][ T3443] overlayfs: missing 'lowerdir' [ 161.668827][ T3447] syzkaller0: refused to change device tx_queue_len [ 161.822705][ T36] audit: type=1400 audit(1790273455.237:399): avc: denied { read write } for pid=3457 comm="syz.4.1147" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.823010][ T3458] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 161.846673][ T36] audit: type=1400 audit(1790273455.237:400): avc: denied { open } for pid=3457 comm="syz.4.1147" path="/34/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.879652][ T36] audit: type=1400 audit(1790273455.237:401): avc: denied { ioctl } for pid=3457 comm="syz.4.1147" path="/34/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.945992][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.954902][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.388986][ T3468] syzkaller0: refused to change device tx_queue_len [ 162.432309][ T3470] ./file0: Can't open blockdev [ 162.442528][ T3470] cgroup: Unknown subsys name 'pcr' [ 162.467787][ T3478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 162.481564][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.490071][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.522801][ T3481] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 162.530563][ T3481] netlink: 'syz.3.1158': attribute type 6 has an invalid length. [ 162.538425][ T3481] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1158'. [ 162.692394][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 162.711598][ T459] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 162.840532][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 162.846845][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.858238][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.867367][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.875395][ T10] usb 1-1: Product: syz [ 162.879559][ T10] usb 1-1: SerialNumber: syz [ 162.884876][ T459] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 162.895694][ T459] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 162.908470][ T459] usb 5-1: string descriptor 0 read error: -22 [ 162.914695][ T459] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 162.923743][ T459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.936863][ T459] usb 5-1: low speed audio streaming not supported [ 162.943448][ T459] usb 5-1: low speed audio streaming not supported [ 163.133899][ T3489] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 163.134887][ T45] usb 5-1: USB disconnect, device number 9 [ 163.142680][ T3489] SELinux: failed to load policy [ 163.154358][ T3488] FAULT_INJECTION: forcing a failure. [ 163.154358][ T3488] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.167184][ T3488] CPU: 0 UID: 0 PID: 3488 Comm: syz.3.1160 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 163.167211][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.167225][ T3488] Call Trace: [ 163.167232][ T3488] [ 163.167239][ T3488] __dump_stack+0x21/0x30 [ 163.167258][ T3488] dump_stack_lvl+0x140/0x1c0 [ 163.167272][ T3488] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.167285][ T3488] ? kernel_text_address+0xa9/0xe0 [ 163.167299][ T3488] ? unwind_get_return_address+0x51/0x90 [ 163.167312][ T3488] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 163.167325][ T3488] dump_stack+0x19/0x20 [ 163.167345][ T3488] should_fail_ex+0x3c2/0x510 [ 163.167358][ T3488] should_fail+0xf/0x20 [ 163.167369][ T3488] get_futex_key+0x22c/0x940 [ 163.167382][ T3488] ? __cfi_get_futex_key+0x10/0x10 [ 163.167395][ T3488] futex_wake+0x150/0x950 [ 163.167403][ T3488] ? arch_do_signal_or_restart+0xbc/0x700 [ 163.167414][ T3488] ? syscall_exit_to_user_mode+0x57/0xb0 [ 163.167428][ T3488] ? do_syscall_64+0x63/0xf0 [ 163.167437][ T3488] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.167451][ T3488] ? __cfi_futex_wake+0x10/0x10 [ 163.167461][ T3488] ? perf_lock_task_context+0x398/0x450 [ 163.167473][ T3488] ? __perf_event_period+0x490/0x490 [ 163.167484][ T3488] ? mutex_unlock+0x90/0x240 [ 163.167496][ T3488] do_futex+0x37d/0x510 [ 163.167509][ T3488] ? __kasan_check_read+0x15/0x20 [ 163.167520][ T3488] ? __cfi_do_futex+0x10/0x10 [ 163.167533][ T3488] ? __kasan_check_write+0x18/0x20 [ 163.167544][ T3488] mm_release+0x15f/0x300 [ 163.167556][ T3488] ? exit_mm_release+0x50/0x50 [ 163.167568][ T3488] ? futex_exit_release+0x11d/0x1f0 [ 163.167581][ T3488] exit_mm_release+0x29/0x50 [ 163.167592][ T3488] do_exit+0x832/0x2850 [ 163.167605][ T3488] ? __kasan_check_read+0x15/0x20 [ 163.167615][ T3488] ? futex_wake+0x627/0x950 [ 163.167624][ T3488] ? __cfi_do_exit+0x10/0x10 [ 163.167636][ T3488] ? futex_wait+0x2b8/0x7c0 [ 163.167645][ T3488] ? __cfi_futex_wait+0x10/0x10 [ 163.167655][ T3488] ? __kasan_check_write+0x18/0x20 [ 163.167665][ T3488] ? _raw_spin_lock_irq+0x93/0x120 [ 163.167675][ T3488] do_group_exit+0x21f/0x2f0 [ 163.167687][ T3488] ? __kasan_check_write+0x18/0x20 [ 163.167697][ T3488] ? recalc_sigpending+0x16c/0x1d0 [ 163.167709][ T3488] get_signal+0x134c/0x1490 [ 163.167723][ T3488] arch_do_signal_or_restart+0xbc/0x700 [ 163.167733][ T3488] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 163.167744][ T3488] syscall_exit_to_user_mode+0x57/0xb0 [ 163.167757][ T3488] do_syscall_64+0x63/0xf0 [ 163.167766][ T3488] ? clear_bhb_loop+0x50/0xa0 [ 163.167778][ T3488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.167790][ T3488] RIP: 0033:0x7f4b9ed9e159 [ 163.167800][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.167809][ T3488] RSP: 002b:00007f4b9fcc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.167821][ T3488] RAX: fffffffffffffe00 RBX: 00007f4b9f025fa8 RCX: 00007f4b9ed9e159 [ 163.167829][ T3488] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b9f025fa8 [ 163.167838][ T3488] RBP: 00007f4b9f025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 163.167845][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.167852][ T3488] R13: 00007f4b9f026038 R14: 00007ffcbf03aad0 R15: 00007ffcbf03abb8 [ 163.167861][ T3488] [ 163.498606][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.505963][ T10] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 163.513423][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 163.528082][ T10] usb 1-1: USB disconnect, device number 58 [ 163.601191][ T3493] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 163.651931][ T3497] FAULT_INJECTION: forcing a failure. [ 163.651931][ T3497] name failslab, interval 1, probability 0, space 0, times 0 [ 163.755858][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: syz.4.1164 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 163.755892][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.755906][ T3497] Call Trace: [ 163.755913][ T3497] [ 163.755921][ T3497] __dump_stack+0x21/0x30 [ 163.755955][ T3497] dump_stack_lvl+0x140/0x1c0 [ 163.755980][ T3497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.756004][ T3497] dump_stack+0x19/0x20 [ 163.756027][ T3497] should_fail_ex+0x3c2/0x510 [ 163.756048][ T3497] should_failslab+0xac/0x100 [ 163.756072][ T3497] __kmalloc_cache_noprof+0x41/0x470 [ 163.756092][ T3497] ? alloc_tty_struct+0xb4/0x7e0 [ 163.756113][ T3497] alloc_tty_struct+0xb4/0x7e0 [ 163.756134][ T3497] ? __cfi_ida_alloc_range+0x10/0x10 [ 163.756163][ T3497] ? __cfi_alloc_tty_struct+0x10/0x10 [ 163.756183][ T3497] ? __kasan_check_write+0x18/0x20 [ 163.756201][ T3497] ? mutex_lock+0x97/0x1d0 [ 163.756222][ T3497] ? __cfi_mutex_lock+0x10/0x10 [ 163.756242][ T3497] tty_init_dev+0x5d/0x4f0 [ 163.756261][ T3497] ? devpts_new_index+0xea/0x160 [ 163.756278][ T3497] ptmx_open+0xe1/0x2f0 [ 163.756302][ T3497] ? selinux_file_open+0x46c/0x630 [ 163.756321][ T3497] chrdev_open+0x4eb/0x610 [ 163.756376][ T3497] ? __cfi_chrdev_open+0x10/0x10 [ 163.756409][ T3497] ? bpf_lsm_file_open+0xd/0x20 [ 163.756433][ T3497] ? __cfi_chrdev_open+0x10/0x10 [ 163.756453][ T3497] do_dentry_open+0x97c/0x1510 [ 163.756479][ T3497] vfs_open+0x86/0x240 [ 163.756500][ T3497] ? __cfi_vfs_open+0x10/0x10 [ 163.756523][ T3497] ? may_open+0x352/0x430 [ 163.756546][ T3497] path_openat+0x2c49/0x35a0 [ 163.756566][ T3497] ? schedule+0xc5/0x240 [ 163.756581][ T3497] ? kasan_save_alloc_info+0x3a/0x50 [ 163.756597][ T3497] ? getname+0x1b/0x30 [ 163.756615][ T3497] ? x64_sys_call+0xe69/0x2ee0 [ 163.756633][ T3497] ? do_syscall_64+0x57/0xf0 [ 163.756651][ T3497] ? do_filp_open+0x440/0x440 [ 163.756675][ T3497] do_filp_open+0x1f2/0x440 [ 163.756698][ T3497] ? __cfi_do_filp_open+0x10/0x10 [ 163.756723][ T3497] ? alloc_fd+0x4c1/0x570 [ 163.756744][ T3497] do_sys_openat2+0x134/0x1d0 [ 163.756768][ T3497] ? do_sys_open+0x100/0x100 [ 163.756793][ T3497] __x64_sys_openat+0x13a/0x170 [ 163.756817][ T3497] x64_sys_call+0xe69/0x2ee0 [ 163.756833][ T3497] do_syscall_64+0x57/0xf0 [ 163.756849][ T3497] ? clear_bhb_loop+0x50/0xa0 [ 163.756871][ T3497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.756891][ T3497] RIP: 0033:0x7f73bdd9e159 [ 163.756907][ T3497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.756922][ T3497] RSP: 002b:00007f73becc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.756942][ T3497] RAX: ffffffffffffffda RBX: 00007f73be025fa0 RCX: 00007f73bdd9e159 [ 163.756956][ T3497] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 163.756969][ T3497] RBP: 00007f73bde3506b R08: 0000000000000000 R09: 0000000000000000 [ 163.756981][ T3497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.756993][ T3497] R13: 00007f73be026038 R14: 00007f73be025fa0 R15: 00007ffc7560bbd8 [ 163.757010][ T3497] [ 164.197936][ T3519] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 164.207532][ T3519] SELinux: failed to load policy [ 164.254117][ T3517] FAULT_INJECTION: forcing a failure. [ 164.254117][ T3517] name failslab, interval 1, probability 0, space 0, times 0 [ 164.266823][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: syz.0.1173 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 164.266854][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.266869][ T3517] Call Trace: [ 164.266876][ T3517] [ 164.266884][ T3517] __dump_stack+0x21/0x30 [ 164.266918][ T3517] dump_stack_lvl+0x140/0x1c0 [ 164.266942][ T3517] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.266971][ T3517] ? __kasan_check_write+0x18/0x20 [ 164.266993][ T3517] ? __cfi_try_to_wake_up+0x10/0x10 [ 164.267016][ T3517] dump_stack+0x19/0x20 [ 164.267041][ T3517] should_fail_ex+0x3c2/0x510 [ 164.267065][ T3517] ? io_alloc_async_data+0x93/0x1b0 [ 164.267100][ T3517] should_failslab+0xac/0x100 [ 164.267124][ T3517] __kmalloc_noprof+0x69/0x510 [ 164.267144][ T3517] ? io_alloc_async_data+0x93/0x1b0 [ 164.267169][ T3517] ? __cfi_io_wq_work_match_item+0x10/0x10 [ 164.267193][ T3517] io_alloc_async_data+0x93/0x1b0 [ 164.267218][ T3517] ? io_uring_cmd_prep+0x3fe/0x6f0 [ 164.267239][ T3517] io_uring_cmd_prep+0x417/0x6f0 [ 164.267261][ T3517] io_submit_sqes+0x9d7/0x1b70 [ 164.267292][ T3517] __se_sys_io_uring_enter+0x302/0x25c0 [ 164.267320][ T3517] ? lru_add_drain_cpu+0x338/0x450 [ 164.267346][ T3517] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 164.267371][ T3517] ? down_read+0x7f/0xe0 [ 164.267396][ T3517] ? __kasan_check_write+0x18/0x20 [ 164.267415][ T3517] ? __x64_sys_io_uring_enter+0x110/0x110 [ 164.267443][ T3517] ? __mm_populate+0x3ea/0x440 [ 164.267470][ T3517] ? vm_mmap_pgoff+0x152/0x4b0 [ 164.267491][ T3517] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 164.267510][ T3517] ? __fget_files+0x2bc/0x330 [ 164.267535][ T3517] ? __kasan_check_write+0x18/0x20 [ 164.267554][ T3517] ? fput+0x1a4/0x230 [ 164.267580][ T3517] __x64_sys_io_uring_enter+0xe9/0x110 [ 164.267606][ T3517] x64_sys_call+0x2d28/0x2ee0 [ 164.267624][ T3517] do_syscall_64+0x57/0xf0 [ 164.267642][ T3517] ? clear_bhb_loop+0x50/0xa0 [ 164.267666][ T3517] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.267688][ T3517] RIP: 0033:0x7f85c379e159 [ 164.267706][ T3517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.267723][ T3517] RSP: 002b:00007f85c4594f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 164.267745][ T3517] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f85c379e159 [ 164.267761][ T3517] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 164.267775][ T3517] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000008 [ 164.267788][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000008a0 [ 164.267801][ T3517] R13: 00002000000008a8 R14: 0000000000000fbb R15: 0000000000000001 [ 164.267818][ T3517] [ 164.544094][ T3537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.552642][ T3537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.699880][ T3543] 9pnet_fd: p9_fd_create_tcp (3543): problem connecting socket to 127.0.0.1 [ 164.875219][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 165.034742][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.053806][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.069969][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.090247][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.093247][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1187'. [ 165.123377][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 165.142791][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.229126][ T3576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.238735][ T3576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.520275][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.552919][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.560011][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.566970][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.574033][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.581023][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.588006][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.595008][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.601988][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.608923][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.615904][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.622864][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.629997][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.637337][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.644856][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.651902][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.658854][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.665843][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.672813][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.679083][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 165.679779][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.686360][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.691895][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.703073][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.709768][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.719757][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 165.726754][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.735664][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.742596][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.771352][ T31] usb 5-1: config 0 descriptor?? [ 165.771914][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.785799][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.789398][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 165.789414][ T36] audit: type=1326 audit(1790273459.237:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.1.1198" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f528bd9e159 code=0x0 [ 165.792986][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.830924][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.838177][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.843940][ T36] audit: type=1400 audit(1790273459.287:426): avc: denied { listen } for pid=3588 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.845412][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.874443][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.889479][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.896468][ T10] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 165.907196][ T10] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 165.948562][ T10] usb 1-1: USB disconnect, device number 59 [ 166.086605][ T3606] fuse: Bad value for 'fd' [ 166.117536][ T3608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.126235][ T3608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.215305][ T31] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 166.483865][ T10] usb 5-1: USB disconnect, device number 10 [ 166.518978][ T3613] netlink: 4392 bytes leftover after parsing attributes in process `syz.0.1208'. [ 166.529251][ T3613] netlink: 'syz.0.1208': attribute type 13 has an invalid length. [ 166.644385][ T3627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 166.693835][ T3627] team_slave_1: entered promiscuous mode [ 166.699951][ T3627] team_slave_1: entered allmulticast mode [ 166.766368][ T3634] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 166.784092][ T3634] SELinux: failed to load policy [ 166.849585][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.861549][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.879931][ T3669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.882561][ T36] audit: type=1326 audit(1790273460.345:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.1.1226" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f528bd9e159 code=0x0 [ 166.902284][ T3669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.931300][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.941671][ T36] audit: type=1400 audit(1790273460.345:428): avc: denied { mounton } for pid=3661 comm="syz.3.1225" path="/372/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 166.950046][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.029869][ T3684] syzkaller0: refused to change device tx_queue_len [ 167.152579][ T36] audit: type=1400 audit(1790273460.607:429): avc: denied { create } for pid=3689 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.168377][ T31] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 167.192030][ T36] audit: type=1400 audit(1790273460.627:430): avc: denied { write } for pid=3689 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.212604][ T36] audit: type=1400 audit(1790273460.627:431): avc: denied { nlmsg_write } for pid=3689 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.286783][ T3693] SELinux: policydb table sizes (8,2) do not match mine (8,7) [ 167.294499][ T3693] SELinux: failed to load policy [ 167.338153][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.348441][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 167.358298][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.372576][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.381683][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.389729][ T31] usb 1-1: Product: syz [ 167.393893][ T31] usb 1-1: Manufacturer: syz [ 167.398493][ T31] usb 1-1: SerialNumber: syz [ 167.403590][ T31] usb 1-1: config 0 descriptor?? [ 167.575312][ T459] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.614309][ T31] usb 1-1: USB disconnect, device number 60 [ 167.623810][ T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.641280][ T3711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'. [ 167.700190][ T36] audit: type=1400 audit(1790273461.161:432): avc: denied { execmem } for pid=3714 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.743788][ T36] audit: type=1326 audit(1790273461.201:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.1.1247" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528bd9e159 code=0x0 [ 167.769487][ T459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 167.780871][ T459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 167.792487][ T459] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 167.801704][ T459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.809955][ T459] usb 5-1: Product: syz [ 167.814666][ T459] usb 5-1: Manufacturer: syz [ 167.819361][ T459] usb 5-1: SerialNumber: syz [ 167.825417][ T459] usb 5-1: config 0 descriptor?? [ 167.832863][ T3699] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 167.840170][ T3699] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 167.870813][ T36] audit: type=1400 audit(1790273461.332:434): avc: denied { execute } for pid=3729 comm="syz.3.1248" path="/382/cpuacct.usage_percpu" dev="tmpfs" ino=2109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.030908][ T3736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 168.047385][ T3699] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 168.054640][ T3699] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 168.127744][ T3744] FAULT_INJECTION: forcing a failure. [ 168.127744][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 168.128320][ T3742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.141000][ T3744] CPU: 0 UID: 0 PID: 3744 Comm: syz.0.1255 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 168.141028][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.141041][ T3744] Call Trace: [ 168.141047][ T3744] [ 168.141055][ T3744] __dump_stack+0x21/0x30 [ 168.141084][ T3744] dump_stack_lvl+0x140/0x1c0 [ 168.141109][ T3744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.141133][ T3744] dump_stack+0x19/0x20 [ 168.141154][ T3744] should_fail_ex+0x3c2/0x510 [ 168.141176][ T3744] should_failslab+0xac/0x100 [ 168.141197][ T3744] __kmalloc_cache_node_noprof+0x46/0x430 [ 168.141217][ T3744] ? __get_vm_area_node+0x150/0x390 [ 168.141241][ T3744] __get_vm_area_node+0x150/0x390 [ 168.141264][ T3744] __vmalloc_node_range_noprof+0x340/0x1300 [ 168.141289][ T3744] ? kernel_read_file+0x41d/0x760 [ 168.141306][ T3744] ? avc_has_perm_noaudit+0x26b/0x360 [ 168.141328][ T3744] ? avc_has_perm_noaudit+0x289/0x360 [ 168.141349][ T3744] ? avc_has_perm+0x155/0x240 [ 168.141369][ T3744] ? __cfi_avc_has_perm+0x10/0x10 [ 168.141389][ T3744] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 168.141423][ T3744] ? selinux_kernel_module_from_file+0x2ed/0x3f0 [ 168.141444][ T3744] ? kernel_read_file+0x41d/0x760 [ 168.141459][ T3744] vmalloc_noprof+0x103/0x1d0 [ 168.141476][ T3744] ? kernel_read_file+0x41d/0x760 [ 168.141492][ T3744] ? __cfi_vmalloc_noprof+0x10/0x10 [ 168.141509][ T3744] ? selinux_kernel_read_file+0x41/0x60 [ 168.141528][ T3744] ? bpf_lsm_kernel_read_file+0xd/0x20 [ 168.141552][ T3744] ? security_kernel_read_file+0x3d/0x110 [ 168.141571][ T3744] kernel_read_file+0x41d/0x760 [ 168.141588][ T3744] ? __kasan_check_write+0x18/0x20 [ 168.141607][ T3744] ? __cfi_kernel_read_file+0x10/0x10 [ 168.141624][ T3744] __se_sys_finit_module+0x3ea/0x690 [ 168.141647][ T3744] ? __x64_sys_finit_module+0xa0/0xa0 [ 168.141669][ T3744] ? __kasan_check_write+0x18/0x20 [ 168.141686][ T3744] ? fput+0x1a4/0x230 [ 168.141708][ T3744] ? __cfi_ksys_write+0x10/0x10 [ 168.141727][ T3744] ? __kasan_check_read+0x15/0x20 [ 168.141745][ T3744] __x64_sys_finit_module+0x7a/0xa0 [ 168.141766][ T3744] x64_sys_call+0x2462/0x2ee0 [ 168.141782][ T3744] do_syscall_64+0x57/0xf0 [ 168.141799][ T3744] ? clear_bhb_loop+0x50/0xa0 [ 168.141820][ T3744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.141840][ T3744] RIP: 0033:0x7f85c379e159 [ 168.141855][ T3744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.141870][ T3744] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 168.141891][ T3744] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 168.141904][ T3744] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.141915][ T3744] RBP: 00007f85c4595090 R08: 0000000000000000 R09: 0000000000000000 [ 168.141927][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.141939][ T3744] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 168.141954][ T3744] [ 168.142079][ T3744] syz.0.1255: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 168.151356][ T3742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.160789][ T3744] ,cpuset= [ 168.187016][ T3742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.191427][ T3744] syz0 [ 168.195591][ T3742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.200064][ T3744] ,mems_allowed=0 [ 168.491254][ T3744] CPU: 0 UID: 0 PID: 3744 Comm: syz.0.1255 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 168.491280][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.491292][ T3744] Call Trace: [ 168.491298][ T3744] [ 168.491306][ T3744] __dump_stack+0x21/0x30 [ 168.491335][ T3744] dump_stack_lvl+0x140/0x1c0 [ 168.491358][ T3744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.491392][ T3744] dump_stack+0x19/0x20 [ 168.491414][ T3744] warn_alloc+0x1e7/0x2c0 [ 168.491438][ T3744] ? __kasan_kmalloc+0x28/0xb0 [ 168.491459][ T3744] ? __cfi_warn_alloc+0x10/0x10 [ 168.491481][ T3744] ? __get_vm_area_node+0x150/0x390 [ 168.491507][ T3744] ? __get_vm_area_node+0x382/0x390 [ 168.491529][ T3744] __vmalloc_node_range_noprof+0x365/0x1300 [ 168.491551][ T3744] ? avc_has_perm_noaudit+0x26b/0x360 [ 168.491572][ T3744] ? avc_has_perm_noaudit+0x289/0x360 [ 168.491591][ T3744] ? avc_has_perm+0x155/0x240 [ 168.491608][ T3744] ? __cfi_avc_has_perm+0x10/0x10 [ 168.491626][ T3744] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 168.491649][ T3744] ? selinux_kernel_module_from_file+0x2ed/0x3f0 [ 168.491668][ T3744] ? kernel_read_file+0x41d/0x760 [ 168.491684][ T3744] vmalloc_noprof+0x103/0x1d0 [ 168.491698][ T3744] ? kernel_read_file+0x41d/0x760 [ 168.491715][ T3744] ? __cfi_vmalloc_noprof+0x10/0x10 [ 168.491731][ T3744] ? selinux_kernel_read_file+0x41/0x60 [ 168.491752][ T3744] ? bpf_lsm_kernel_read_file+0xd/0x20 [ 168.491776][ T3744] ? security_kernel_read_file+0x3d/0x110 [ 168.491797][ T3744] kernel_read_file+0x41d/0x760 [ 168.491816][ T3744] ? __kasan_check_write+0x18/0x20 [ 168.491835][ T3744] ? __cfi_kernel_read_file+0x10/0x10 [ 168.491849][ T3744] __se_sys_finit_module+0x3ea/0x690 [ 168.491869][ T3744] ? __x64_sys_finit_module+0xa0/0xa0 [ 168.491888][ T3744] ? __kasan_check_write+0x18/0x20 [ 168.491903][ T3744] ? fput+0x1a4/0x230 [ 168.491923][ T3744] ? __cfi_ksys_write+0x10/0x10 [ 168.491940][ T3744] ? __kasan_check_read+0x15/0x20 [ 168.491957][ T3744] __x64_sys_finit_module+0x7a/0xa0 [ 168.491978][ T3744] x64_sys_call+0x2462/0x2ee0 [ 168.491994][ T3744] do_syscall_64+0x57/0xf0 [ 168.492012][ T3744] ? clear_bhb_loop+0x50/0xa0 [ 168.492033][ T3744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.492052][ T3744] RIP: 0033:0x7f85c379e159 [ 168.492069][ T3744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.492084][ T3744] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 168.492104][ T3744] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 168.492118][ T3744] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.492130][ T3744] RBP: 00007f85c4595090 R08: 0000000000000000 R09: 0000000000000000 [ 168.492142][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.492154][ T3744] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 168.492169][ T3744] [ 168.492191][ T3744] Mem-Info: [ 168.787075][ T3744] active_anon:44485 inactive_anon:661 isolated_anon:0 [ 168.787075][ T3744] active_file:10950 inactive_file:12618 isolated_file:0 [ 168.787075][ T3744] unevictable:16471 dirty:135 writeback:0 [ 168.787075][ T3744] slab_reclaimable:5566 slab_unreclaimable:73336 [ 168.787075][ T3744] mapped:28374 shmem:35914 pagetables:1499 [ 168.787075][ T3744] sec_pagetables:0 bounce:0 [ 168.787075][ T3744] kernel_misc_reclaimable:0 [ 168.787075][ T3744] free:1455706 free_pcp:6516 free_cma:0 [ 168.833792][ T3744] Node 0 active_anon:177940kB inactive_anon:2644kB active_file:43800kB inactive_file:50472kB unevictable:65884kB isolated(anon):0kB isolated(file):0kB mapped:113496kB dirty:540kB writeback:0kB shmem:143656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:7216kB pagetables:5896kB sec_pagetables:0kB all_unreclaimable? no [ 168.867547][ T3744] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5212kB free_cma:0kB [ 168.897761][ T3744] lowmem_reserve[]: 0 3921 3921 [ 168.902704][ T3744] Normal free:2872500kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:177940kB inactive_anon:2644kB active_file:43800kB inactive_file:50472kB unevictable:65884kB writepending:540kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:7364kB free_cma:0kB [ 168.935226][ T3744] lowmem_reserve[]: 0 0 0 [ 168.939798][ T3744] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 168.955361][ T3744] Normal: 87*4kB (UM) 101*8kB (UM) 33*16kB (UM) 3*32kB (ME) 2*64kB (UM) 2*128kB (M) 16*256kB (ME) 4*512kB (UME) 1*1024kB (E) 4*2048kB (M) 697*4096kB (M) = 2872436kB [ 168.972101][ T3744] 73519 total pagecache pages [ 168.976810][ T3744] 438 pages in swap cache [ 168.981134][ T3744] Free swap = 122516kB [ 168.985408][ T3744] Total swap = 124996kB [ 168.989587][ T3744] 2097051 pages RAM [ 168.993408][ T3744] 0 pages HighMem/MovableOnly [ 168.998168][ T3744] 352241 pages reserved [ 169.002349][ T3744] 0 pages cma reserved [ 169.007680][ T3744] Memory allocations: [ 169.011670][ T3744] 0 B 0 init/main.c:1477 func:do_initcalls [ 169.018905][ T3744] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 169.027022][ T3744] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 169.034743][ T3744] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 169.042720][ T459] Error reading MAC address [ 169.044945][ T3744] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 169.048381][ T459] usb 5-1: USB disconnect, device number 11 [ 169.057495][ T3744] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 169.069745][ T3744] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 169.077807][ T3744] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 169.085779][ T3744] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 169.093742][ T3744] 0 B 0 init/initramfs.c:101 func:find_link [ 169.113606][ T3751] netlink: 'syz.0.1256': attribute type 9 has an invalid length. [ 169.509743][ T3760] syzkaller1: left promiscuous mode [ 169.515039][ T3760] syzkaller1: left allmulticast mode [ 169.551193][ T3766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1262'. [ 169.639147][ T3777] x_tables: duplicate entry at hook 2 [ 169.898995][ T459] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.989274][ T3788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1272'. [ 170.049223][ T459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 170.059027][ T459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 170.070458][ T459] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 170.079549][ T459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.087532][ T459] usb 5-1: Product: syz [ 170.091713][ T459] usb 5-1: Manufacturer: syz [ 170.096339][ T459] usb 5-1: SerialNumber: syz [ 170.101472][ T459] usb 5-1: config 0 descriptor?? [ 170.106667][ T3782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.113830][ T3782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.321021][ T3782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.328285][ T3782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 170.378881][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.387417][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.585308][ T3782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=8192 (16384 ns) > initial count (88 ns). Using initial count to start timer. [ 170.701263][ T459] Error reading MAC address [ 170.708180][ T459] usb 5-1: USB disconnect, device number 12 [ 170.737056][ T3813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1281'. [ 170.800573][ T3819] ------------[ cut here ]------------ [ 170.806117][ T3819] WARNING: CPU: 0 PID: 3819 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 170.815664][ T3819] Modules linked in: [ 170.819563][ T3819] CPU: 0 UID: 0 PID: 3819 Comm: syz.0.1283 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 170.831218][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.841328][ T3819] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 170.846930][ T3819] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 57 26 03 cc e8 2a 20 06 ff 0f 0b b8 ea ff ff ff eb de e8 1c 20 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 170.866601][ T3819] RSP: 0018:ffffc9000b86f728 EFLAGS: 00010287 [ 170.872736][ T3819] RAX: ffffffff82815a74 RBX: ffff88813c3d6000 RCX: 0000000000080000 [ 170.880727][ T3819] RDX: ffffc90001a92000 RSI: 0000000000000ce6 RDI: 0000000000000ce7 [ 170.888733][ T3819] RBP: ffffc9000b86f770 R08: ffffc9000b86f82f R09: 0000000000000000 [ 170.896734][ T3819] R10: 0000000000000000 R11: ffffffff82815590 R12: ffff888108727f88 [ 170.904746][ T3819] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88813c3d6038 [ 170.912754][ T3819] FS: 00007f85c45956c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 170.921687][ T3819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.928292][ T3819] CR2: 000055556adef4e8 CR3: 0000000105b14000 CR4: 00000000003526b0 [ 170.936914][ T3819] Call Trace: [ 170.940192][ T3819] [ 170.943148][ T3819] ? __asan_memcpy+0x5a/0x80 [ 170.947753][ T3819] crypto_sig_verify+0x1cd/0x260 [ 170.952741][ T3819] ? __cfi_crypto_sig_verify+0x10/0x10 [ 170.958221][ T3819] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 170.963547][ T3819] public_key_verify_signature+0x654/0xa40 [ 170.969399][ T3819] ? __cfi_public_key_verify_signature+0x10/0x10 [ 170.975757][ T3819] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 170.981314][ T3819] ? activate_task+0x43b/0x480 [ 170.986099][ T3819] ? try_to_wake_up+0x119e/0x1fd0 [ 170.991132][ T3819] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 170.997672][ T3819] public_key_verify_signature_2+0x47/0x60 [ 171.003513][ T3819] verify_signature+0xf0/0x120 [ 171.008274][ T3819] asymmetric_key_verify_signature+0x160/0x200 [ 171.014445][ T3819] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 171.021151][ T3819] ? should_fail+0xf/0x20 [ 171.025504][ T3819] ? __kasan_check_write+0x18/0x20 [ 171.030647][ T3819] ? _copy_from_user+0x87/0xa0 [ 171.035452][ T3819] ? memdup_user+0xb1/0x170 [ 171.039960][ T3819] keyctl_pkey_verify+0x200/0x290 [ 171.045026][ T3819] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 171.050578][ T3819] __se_sys_keyctl+0x743/0xe40 [ 171.055380][ T3819] ? __x64_sys_keyctl+0xf0/0xf0 [ 171.060240][ T3819] ? __cfi_do_futex+0x10/0x10 [ 171.064940][ T3819] ? kvfree_sensitive+0x51/0x70 [ 171.069818][ T3819] ? __se_sys_futex+0x13c/0x320 [ 171.074694][ T3819] ? xfd_validate_state+0x68/0x140 [ 171.079815][ T3819] ? __kasan_check_write+0x18/0x20 [ 171.084942][ T3819] ? fpregs_restore_userregs+0x11c/0x260 [ 171.090584][ T3819] __x64_sys_keyctl+0xc3/0xf0 [ 171.095285][ T3819] x64_sys_call+0x996/0x2ee0 [ 171.099909][ T3819] do_syscall_64+0x57/0xf0 [ 171.104342][ T3819] ? clear_bhb_loop+0x50/0xa0 [ 171.109053][ T3819] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 171.115020][ T3819] RIP: 0033:0x7f85c379e159 [ 171.119446][ T3819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.139101][ T3819] RSP: 002b:00007f85c4595028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 171.147554][ T3819] RAX: ffffffffffffffda RBX: 00007f85c3a25fa0 RCX: 00007f85c379e159 [ 171.155595][ T3819] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 171.163599][ T3819] RBP: 00007f85c383506b R08: 0000000000000000 R09: 0000000000000000 [ 171.171632][ T3819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.179604][ T3819] R13: 00007f85c3a26038 R14: 00007f85c3a25fa0 R15: 00007ffef7291e78 [ 171.187595][ T3819] [ 171.190639][ T3819] ---[ end trace 0000000000000000 ]---