last executing test programs: 3m52.742117159s ago: executing program 0 (id=3577): r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0xfffffffc, 0x7]) 3m52.730423589s ago: executing program 0 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f00000001c0)='./file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 3m52.66975964s ago: executing program 0 (id=3579): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4c780, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xad679000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m52.626472841s ago: executing program 0 (id=3580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 3m52.617095452s ago: executing program 0 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3m52.515491874s ago: executing program 0 (id=3582): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) 3m52.498751475s ago: executing program 32 (id=3582): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) 2.591511478s ago: executing program 4 (id=9428): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x10182) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.788449317s ago: executing program 4 (id=9453): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) close(0xffffffffffffffff) 1.67939337s ago: executing program 4 (id=9454): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000180)={'fscrypt:', @auto=[0x61, 0x62, 0x35, 0x39, 0x30, 0x64, 0x37, 0x66, 0x32, 0x61, 0x30, 0x37, 0x30, 0x64, 0x0, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x26}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x39, 0x64, 0x30, 0x30, 0x62, 0x30, 0x38, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x51, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x6, 0x63, 0x66, 0x30, 0x30, 0x63, 0x31, 0x33, 0x0, 0x30, 0x38, 0x35, 0x35, 0x35, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x66, 0x37, 0x30, 0x39, 0x36, 0x38, 0x37, 0x65, 0x39, 0x37, 0x33, 0x65, 0x63, 0x38, 0x32, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x30, 0x30, 0x61, 0x38, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1.67914829s ago: executing program 4 (id=9455): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1.492193155s ago: executing program 2 (id=9456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, 0x0, 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.434406556s ago: executing program 2 (id=9457): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0x10, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0xf62, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x3, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x2, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0xa, 0x3, 0x8000103, 0x5, 0x4, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x80000001, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xffffdffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0x3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x5, 0xffffffff, 0x7, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0xffffffff, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x0, 0x89, 0x6, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xfffff000, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x1, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x0, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0xca68, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4009, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0xfe000000, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xcd, 0x2, 0xfffffffe, 0xb24, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0xf, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0x4000ff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x0, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x5, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0xfffffff9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xd, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x40000002, 0x2, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x5) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) (async) close(0x3) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000902000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000040)={0x4, 0x1}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) (async) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x101022, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000180)=""/155, &(0x7f0000000240)=0x9b) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.159415082s ago: executing program 4 (id=9458): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 918.648578ms ago: executing program 2 (id=9462): mmap$IORING_OFF_SQ_RING(0x0, 0x200, 0x1000008, 0x110, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c091033", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 918.541168ms ago: executing program 2 (id=9463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b003000140406006301000000482fff00000000000000000000ffffac1e0101ff020000000000000000000000000001042088a80000000301000800000700030c0086dd86dd88be000000041807e80701073707020000000000080000089f1d0800655800000002"], 0x7a) 867.56325ms ago: executing program 2 (id=9464): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x10182) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 637.939425ms ago: executing program 3 (id=9469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) setresuid(r2, r2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x102d062, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x2}}, {@directio}, {@aname={'aname', 0x3d, '/dev/kvm\x00'}}, {@noxattr}], [{@appraise_type}, {@dont_appraise}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 543.758888ms ago: executing program 4 (id=9470): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r2, &(0x7f0000002400)={0x28, 0xfffffffffffffffe, r3, {{0x4, 0x3, 0x2, r0}}}, 0x28) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f0000004b00)={0x2020}, 0x2020) syz_clone3(&(0x7f0000000340)={0x20000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x8c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 543.547428ms ago: executing program 3 (id=9471): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000110001"], 0x30}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000002c0)={0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'sed\x00', 0x4, 0x4, 0xf}, 0x2c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000500)="280320000a00140000007ef506be00000000000000040000000000143baa111f1f858ce632f47042195e05781bc3f80d1e2904102c3708f8ce2afd5fdc5a7a2c16f94806e7b48f962e199cf5b22629bc203049ca", 0x54, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe1, 0x6, @random="76caa646ae4c"}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a20c00", "9e8ecc7cb535247672a2eff75b30ff2bb17b550800", "0002d900", "a1014200000102a0"}, 0x38) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0) write$tun(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r13, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0x56, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYRES16=r14, @ANYBLOB="000828bd7000fcdbdf254c0000000c00a6000700000000000000", @ANYBLOB="20000000ecfa6548c4c4558cdb7801476bee4a7f8bc713a0bad817170b7e376cf4d4d55f4b18c41030446b1767d6f3adfbd5fb7cd2087fd467e930af3a5b0186a8fe10ccbfd60faede5295b88da1c9b8c645421d26ba9ae39052dba5abd6595d1da1d293d497ebdd2b0b6944b2e71f3cbc8567963229be752f8aa6c4fc365cf4ed52e45f2aec1e01edd7ab379c65b4899546d63ac53b2f6765d53353d297ef8aecda9d01c11ee18d0bab76f774977520df2e99da", @ANYRES32=r12, @ANYRES16=r2, @ANYRES8, @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x2c004840}, 0x20000014) 543.340168ms ago: executing program 3 (id=9472): mmap$IORING_OFF_SQ_RING(0x0, 0x200, 0x1000008, 0x110, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c091033", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 543.096457ms ago: executing program 3 (id=9473): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b04082501000040f5ff08040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908004006030825018203f30600"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0xc, 0x83, 0x2, 0xe0f, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb609, 0x6, 0x5, 0x7, 0x4, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x5, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x1, 0x8, 0x8000, 0x1, 0x7], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x29, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x89, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0xf, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000002, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x8, 0x0, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x66, 0x0, 0x8, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@empty, 0xd84}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}]}]}}}}}) recvfrom(r3, &(0x7f00000003c0)=""/214, 0xd6, 0x20, &(0x7f0000000600)=@ll={0x11, 0xd, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x80) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r7 = syz_usb_connect(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 542.987708ms ago: executing program 1 (id=9474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000780)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 491.447019ms ago: executing program 1 (id=9475): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000001c0)=0x8, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 469.560679ms ago: executing program 1 (id=9476): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 391.474511ms ago: executing program 1 (id=9477): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000841}, 0xc810) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c90000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 302.357523ms ago: executing program 1 (id=9478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x60ff, 0x0, 0x128}, 0x0) 290.769544ms ago: executing program 1 (id=9479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_usb_connect$uac1(0x3, 0x8b, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902790003010023000201020924060302010900ff0724080208000909240304030404037f0904010000010200000904010101010200000905010940000488030725010c4d000009040200000102000009040201010102000009058209f7030840090725010c090700dd420d5def64f8bbbf9bd1258a66eaf7c5569d394f72aadc250efcbd1cab4562fe1655e84392e71efd3c3b92f1470d7544d81b626ca73c4c4b997aba87bcb3fe"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x3, 0x3, 0x2000, 0x0, 0xfffffffd, 0x4, {0x2, 0x8, 0x8, 0x1, 0x10000, 0x4, 0x5, 0x0, 0x819, 0x1000, 0x0, r9, r10, 0x0, 0xa1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) mremap(&(0x7f0000173000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000041d000/0x4000)=nil) syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x7, {0x2, 0x8000000000000, 0x3, 0x4000000000000, 0x9, 0xfffffffe, {0x0, 0x4, 0x9, 0x200, 0x2, 0xffffffff80000001, 0x2, 0x0, 0x4, 0xc000, 0x0, r9, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x9001000, &(0x7f00000000c0)="165057058044017cac74c50a7b67e50784266886dc", 0x15, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) syz_fuse_handle_req(r7, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x6, 0x21, 0x200, 0xfffffffd, 0x0, 0x0, 0xa000, 0x1, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="f001000000000000", @ANYRES64=r3, @ANYBLOB="060000000000000002000000000000007b000000000000008208000000000000d60000000800000001000000000000000600000000000000030000000000000011cb000000000000ff0f000000000000b8da000000000000feffffff530b0000030000000040000004000000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05000000010000000000000005000000000000000600000000000000020000000e0000002e7b000000000000060000000000000003000000000000000001000000000000440e000000000000020000000900000003000000000000000700000000000000a40400000000000001010000000000000900000000000000df260000000000001000000000000000080000000010000008000000", @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="02000000050000000000000005000000000000000000008000000000080000003f0400007472616365667300040000000000020000000000000038000000000000000300000000000000070000001b1e00000100800000000000040000000000000001000000000000008611cf3600000000020000000000000002000000000000000800000000000000010000000010000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000005000000000000000200000000000000c06500000000000008000000040000007472616365667300"], 0x1f0) 67.903539ms ago: executing program 2 (id=9480): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 13.78547ms ago: executing program 3 (id=9481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) setresuid(r2, r2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x102d062, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x2}}, {@directio}, {@aname={'aname', 0x3d, '/dev/kvm\x00'}}, {@noxattr}], [{@appraise_type}, {@dont_appraise}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r4}}, {@hash}]}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 0s ago: executing program 3 (id=9482): mmap$IORING_OFF_SQ_RING(0x0, 0x200, 0x1000008, 0x110, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0x12, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): 25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41140kB inactive_anon:44532kB active_file:67412kB inactive_file:71292kB unevictable:0kB writepending:364kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:5604kB local_pcp:4264kB free_cma:0kB [ 198.776078][ T9779] lowmem_reserve[]: 0 0 0 [ 198.780619][ T9779] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 198.796163][ T9779] Normal: 2*4kB (UM) 1*8kB (M) 665*16kB (M) 653*32kB (UME) 532*64kB (UME) 210*128kB (UME) 132*256kB (UME) 95*512kB (UME) 51*1024kB (UME) 35*2048kB (UME) 661*4096kB (UME) = 3006272kB [ 198.817305][ T9779] 48938 total pagecache pages [ 198.822324][ T9779] 20 pages in swap cache [ 198.827724][ T9779] Free swap = 100768kB [ 198.831983][ T9779] Total swap = 124996kB [ 198.836184][ T9779] 2097051 pages RAM [ 198.840010][ T9779] 0 pages HighMem/MovableOnly [ 198.845770][ T9779] 352243 pages reserved [ 198.850198][ T9779] 0 pages cma reserved [ 198.855527][ T9779] Memory allocations: [ 198.859558][ T9779] 0 B 0 init/main.c:1477 func:do_initcalls [ 198.866755][ T9779] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 198.874882][ T9779] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 198.882576][ T9779] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 198.891133][ T9779] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 198.899297][ T9779] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 198.908097][ T9779] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 198.917276][ T9779] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 198.925462][ T9779] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 198.934531][ T9779] 0 B 0 init/initramfs.c:101 func:find_link [ 199.039151][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 199.049248][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 199.058530][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 199.074426][ T9824] kvm: kvm [9823]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 199.083273][ T9824] kvm: kvm [9823]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 199.311134][ T9840] netlink: 'syz.1.4091': attribute type 27 has an invalid length. [ 199.421062][ T9846] overlayfs: statfs failed on './file0' [ 199.439426][ T36] audit: type=1400 audit(1788983138.097:33772): avc: denied { write } for pid=9848 comm="syz.4.4095" name="tcp6" dev="proc" ino=4026532840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 200.154906][ T36] audit: type=1400 audit(1788983138.807:33773): avc: denied { read write } for pid=9873 comm="syz.4.4106" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.178664][ T36] audit: type=1400 audit(1788983138.807:33774): avc: denied { open } for pid=9873 comm="syz.4.4106" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.203668][ T36] audit: type=1400 audit(1788983138.807:33775): avc: denied { ioctl } for pid=9873 comm="syz.4.4106" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.269796][ T9894] overlayfs: failed to clone lowerpath [ 200.277851][ T36] audit: type=1400 audit(1788983138.937:33776): avc: denied { read } for pid=9895 comm="syz.2.4117" name="/" dev="configfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.301051][ T36] audit: type=1400 audit(1788983138.937:33777): avc: denied { open } for pid=9895 comm="syz.2.4117" path="/" dev="configfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.387280][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.557303][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 200.563377][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.573607][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.584241][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 200.593322][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.601351][ T9] usb 5-1: Product: syz [ 200.605521][ T9] usb 5-1: Manufacturer: syz [ 200.610151][ T9] usb 5-1: SerialNumber: syz [ 200.615227][ T9] usb 5-1: config 0 descriptor?? [ 200.826039][ T789] usb 5-1: USB disconnect, device number 11 [ 201.550231][ T9961] fuse: Unknown parameter '0xffffffffffffffff' [ 201.557526][ T9961] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 201.582837][ T36] audit: type=1400 audit(1788983140.237:33778): avc: denied { write } for pid=9964 comm="syz.4.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.691961][ T9982] kvm: kvm [9981]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 201.881371][T10001] FAULT_INJECTION: forcing a failure. [ 201.881371][T10001] name fail_futex, interval 1, probability 0, space 0, times 1 [ 201.894206][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.4.4164 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 201.894237][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.894245][T10001] Call Trace: [ 201.894250][T10001] [ 201.894255][T10001] __dump_stack+0x21/0x30 [ 201.894275][T10001] dump_stack_lvl+0x140/0x1c0 [ 201.894290][T10001] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.894307][T10001] dump_stack+0x19/0x20 [ 201.894320][T10001] should_fail_ex+0x3c2/0x510 [ 201.894334][T10001] should_fail+0xf/0x20 [ 201.894345][T10001] get_futex_key+0x22c/0x940 [ 201.894358][T10001] ? __cfi_get_futex_key+0x10/0x10 [ 201.894374][T10001] futex_requeue+0x2a5/0x1490 [ 201.894403][T10001] ? __cfi_futex_wake_mark+0x10/0x10 [ 201.894420][T10001] ? __cfi_futex_requeue+0x10/0x10 [ 201.894440][T10001] ? futex_wait+0x2b8/0x7c0 [ 201.894451][T10001] ? vfs_write+0xbcf/0xfd0 [ 201.894462][T10001] do_futex+0x354/0x510 [ 201.894476][T10001] ? __cfi_do_futex+0x10/0x10 [ 201.894489][T10001] ? mutex_unlock+0x90/0x240 [ 201.894502][T10001] __se_sys_futex+0x13c/0x320 [ 201.894514][T10001] ? fput+0x1a4/0x230 [ 201.894528][T10001] ? __x64_sys_futex+0x110/0x110 [ 201.894541][T10001] ? __cfi_ksys_write+0x10/0x10 [ 201.894552][T10001] ? __kasan_check_write+0x18/0x20 [ 201.894564][T10001] __x64_sys_futex+0xe9/0x110 [ 201.894588][T10001] x64_sys_call+0x227f/0x2ee0 [ 201.894605][T10001] do_syscall_64+0x57/0xf0 [ 201.894630][T10001] ? clear_bhb_loop+0x50/0xa0 [ 201.894646][T10001] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.894659][T10001] RIP: 0033:0x7feefef9e159 [ 201.894670][T10001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.894680][T10001] RSP: 002b:00007feeffebe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.894699][T10001] RAX: ffffffffffffffda RBX: 00007feeff225fa0 RCX: 00007feefef9e159 [ 201.894708][T10001] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000200000000380 [ 201.894716][T10001] RBP: 00007feeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 201.894724][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.894732][T10001] R13: 00007feeff226038 R14: 00007feeff225fa0 R15: 00007ffc046afba8 [ 201.894741][T10001] [ 202.148727][T10005] ./dev/sda1: Can't lookup blockdev [ 202.558000][T10023] overlayfs: failed to clone upperpath [ 202.680155][T10035] FAULT_INJECTION: forcing a failure. [ 202.680155][T10035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.693418][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.4.4180 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 202.693449][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.693460][T10035] Call Trace: [ 202.693466][T10035] [ 202.693473][T10035] __dump_stack+0x21/0x30 [ 202.693505][T10035] dump_stack_lvl+0x140/0x1c0 [ 202.693529][T10035] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.693553][T10035] ? futex_wait+0x2b8/0x7c0 [ 202.693571][T10035] dump_stack+0x19/0x20 [ 202.693594][T10035] should_fail_ex+0x3c2/0x510 [ 202.693616][T10035] should_fail_alloc_page+0xec/0x110 [ 202.693638][T10035] __alloc_pages_noprof+0x1c0/0x7e0 [ 202.693662][T10035] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 202.693686][T10035] ? do_futex+0x32a/0x510 [ 202.693710][T10035] ___kmalloc_large_node+0x81/0x220 [ 202.693728][T10035] ? security_capable+0x44/0x130 [ 202.693749][T10035] __kmalloc_large_noprof+0x1e/0xe0 [ 202.693767][T10035] ksys_ioperm+0x174/0x7d0 [ 202.693785][T10035] __x64_sys_ioperm+0x7e/0x90 [ 202.693802][T10035] x64_sys_call+0x2129/0x2ee0 [ 202.693818][T10035] do_syscall_64+0x57/0xf0 [ 202.693834][T10035] ? clear_bhb_loop+0x50/0xa0 [ 202.693854][T10035] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.693874][T10035] RIP: 0033:0x7feefef9e159 [ 202.693889][T10035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.693905][T10035] RSP: 002b:00007feeffebe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 202.693924][T10035] RAX: ffffffffffffffda RBX: 00007feeff225fa0 RCX: 00007feefef9e159 [ 202.693938][T10035] RDX: 0000000000000005 RSI: 0000000000000008 RDI: 0000000000000004 [ 202.693950][T10035] RBP: 00007feeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 202.693961][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.693972][T10035] R13: 00007feeff226038 R14: 00007feeff225fa0 R15: 00007ffc046afba8 [ 202.693987][T10035] [ 203.209033][T10047] netlink: 'syz.4.4186': attribute type 4 has an invalid length. [ 203.230165][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 203.230182][ T36] audit: type=1400 audit(1788983141.887:33781): avc: denied { setopt } for pid=10048 comm="syz.4.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.949489][ T36] audit: type=1400 audit(1788983142.607:33782): avc: denied { bind } for pid=10078 comm="syz.3.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.825133][T10136] ./dev/sda1: Can't lookup blockdev [ 205.801648][ T36] audit: type=1400 audit(1788983144.457:33783): avc: denied { associate } for pid=10177 comm="syz.1.4242" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 205.858383][T10182] ./dev/sda1: Can't lookup blockdev [ 206.276393][ T36] audit: type=1400 audit(1788983144.927:33784): avc: denied { setattr } for pid=10193 comm="syz.1.4249" name="/" dev="configfs" ino=2626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.306808][T10196] fuse: Bad value for 'fd' [ 206.410526][T10209] overlayfs: failed to resolve './file0/file1': -2 [ 207.917305][ T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 208.042882][ T36] audit: type=1400 audit(1788983146.697:33785): avc: denied { remount } for pid=10301 comm="syz.3.4297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 208.090114][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 208.112862][ T31] usb 5-1: config 0 has no interface number 0 [ 208.121146][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 208.129665][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 208.143747][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.152279][ T31] usb 5-1: Product: syz [ 208.156866][ T31] usb 5-1: Manufacturer: syz [ 208.171766][ T31] usb 5-1: SerialNumber: syz [ 208.187593][ T31] usb 5-1: config 0 descriptor?? [ 208.403573][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 208.417505][ T31] usb 5-1: USB disconnect, device number 12 [ 208.847290][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.007268][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 209.016747][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 209.025444][ T9] usb 5-1: config 0 has no interface number 0 [ 209.032440][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 209.042433][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.052649][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 209.071284][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 209.081645][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.090709][ T9] usb 5-1: Product: syz [ 209.095109][ T9] usb 5-1: Manufacturer: syz [ 209.100092][ T9] usb 5-1: SerialNumber: syz [ 209.107624][ T9] usb 5-1: config 0 descriptor?? [ 209.112896][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.126045][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.233412][T10377] overlayfs: failed to resolve './cgroup': -2 [ 209.337228][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.342256][T10393] overlayfs: failed to clone upperpath [ 209.350296][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.962038][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 209.974810][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 209.986227][ T9] usb 5-1: USB disconnect, device number 13 [ 210.039837][T10453] overlayfs: failed to clone upperpath [ 211.073714][T10515] bridge0: entered allmulticast mode [ 211.094549][T10517] ./dev/sda1: Can't lookup blockdev [ 211.119459][T10524] netlink: 'syz.1.4383': attribute type 27 has an invalid length. [ 211.139660][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.146791][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.238369][T10528] netlink: 'syz.1.4385': attribute type 4 has an invalid length. [ 211.312231][T10537] tipc: Bearer : already 2 bearers with priority 10 [ 211.320308][T10537] tipc: Bearer : trying with adjusted priority [ 211.328539][T10537] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 211.355453][T10541] tipc: Enabling of bearer rejected, already enabled [ 211.915617][T10571] overlayfs: failed to clone upperpath [ 213.494095][T10639] 9pnet_fd: p9_fd_create_tcp (10639): problem connecting socket to 127.0.0.1 [ 213.524423][T10648] ./dev/sda1: Can't lookup blockdev [ 213.528702][T10650] ./dev/sda1: Can't lookup blockdev [ 213.574431][T10658] ./dev/sda1: Can't lookup blockdev [ 213.684808][T10678] batadv_slave_1: entered promiscuous mode [ 213.727938][T10677] batadv_slave_1: left promiscuous mode [ 213.749623][T10686] ./dev/sda1: Can't lookup blockdev [ 213.884306][T10705] netlink: 'syz.3.4466': attribute type 12 has an invalid length. [ 213.892751][ T36] audit: type=1400 audit(1788983152.557:33786): avc: denied { ioctl } for pid=10704 comm="syz.3.4466" path="socket:[192898]" dev="sockfs" ino=192898 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.946839][T10714] ./dev/sda1: Can't lookup blockdev [ 214.534108][T10758] FAULT_INJECTION: forcing a failure. [ 214.534108][T10758] name failslab, interval 1, probability 0, space 0, times 0 [ 214.547803][T10758] CPU: 1 UID: 0 PID: 10758 Comm: syz.4.4489 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 214.547837][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.547849][T10758] Call Trace: [ 214.547857][T10758] [ 214.547863][T10758] __dump_stack+0x21/0x30 [ 214.547894][T10758] dump_stack_lvl+0x140/0x1c0 [ 214.547919][T10758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.547942][T10758] ? skb_put+0x10e/0x200 [ 214.547963][T10758] dump_stack+0x19/0x20 [ 214.547988][T10758] should_fail_ex+0x3c2/0x510 [ 214.548014][T10758] should_failslab+0xac/0x100 [ 214.548038][T10758] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 214.548062][T10758] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 214.548083][T10758] ? sidtab_sid2str_get+0x135/0x360 [ 214.548102][T10758] ? sidtab_sid2str_put+0x72e/0x750 [ 214.548121][T10758] kmemdup_noprof+0x31/0x80 [ 214.548139][T10758] sidtab_sid2str_get+0x135/0x360 [ 214.548158][T10758] security_sid_to_context_core+0x30d/0x5d0 [ 214.548185][T10758] security_sid_to_context+0x2e/0x50 [ 214.548212][T10758] avc_audit_post_callback+0x1a8/0x790 [ 214.548236][T10758] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 214.548260][T10758] ? __cfi_audit_log_format+0x10/0x10 [ 214.548280][T10758] ? audit_log_untrustedstring+0xea/0x100 [ 214.548300][T10758] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 214.548324][T10758] common_lsm_audit+0x14b6/0x18b0 [ 214.548358][T10758] ? swake_up_one_online_ipi+0x30/0x30 [ 214.548389][T10758] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 214.548415][T10758] ? __cfi_common_lsm_audit+0x10/0x10 [ 214.548440][T10758] ? __call_rcu_common+0x53c/0x710 [ 214.548462][T10758] slow_avc_audit+0x19f/0x220 [ 214.548486][T10758] ? __cfi_slow_avc_audit+0x10/0x10 [ 214.548509][T10758] ? path_openat+0xf4/0x35a0 [ 214.548536][T10758] ? avc_update_node+0x2fc/0x8a0 [ 214.548560][T10758] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 214.548580][T10758] ? avc_update_node+0x273/0x8a0 [ 214.548603][T10758] audit_inode_permission+0x1a0/0x280 [ 214.548625][T10758] ? may_create+0x820/0x820 [ 214.548644][T10758] ? avc_has_perm_noaudit+0x2bc/0x360 [ 214.548669][T10758] selinux_inode_permission+0x4e5/0x5d0 [ 214.548688][T10758] ? __cfi_selinux_inode_permission+0x10/0x10 [ 214.548708][T10758] ? make_vfsuid+0x4d/0xa0 [ 214.548727][T10758] ? generic_permission+0x1ec/0x590 [ 214.548750][T10758] security_inode_permission+0xb0/0x150 [ 214.548777][T10758] inode_permission+0xf3/0x4c0 [ 214.548800][T10758] may_open+0x197/0x430 [ 214.548824][T10758] path_openat+0x2ae5/0x35a0 [ 214.548849][T10758] ? schedule+0xc5/0x240 [ 214.548869][T10758] ? kasan_save_alloc_info+0x3a/0x50 [ 214.548887][T10758] ? getname+0x1b/0x30 [ 214.548907][T10758] ? x64_sys_call+0xe69/0x2ee0 [ 214.548925][T10758] ? do_syscall_64+0x57/0xf0 [ 214.548944][T10758] ? do_filp_open+0x440/0x440 [ 214.548970][T10758] do_filp_open+0x1f2/0x440 [ 214.548996][T10758] ? __cfi_do_filp_open+0x10/0x10 [ 214.549023][T10758] ? alloc_fd+0x4c1/0x570 [ 214.549046][T10758] do_sys_openat2+0x134/0x1d0 [ 214.549072][T10758] ? do_sys_open+0x100/0x100 [ 214.549100][T10758] __x64_sys_openat+0x13a/0x170 [ 214.549127][T10758] x64_sys_call+0xe69/0x2ee0 [ 214.549145][T10758] do_syscall_64+0x57/0xf0 [ 214.549162][T10758] ? clear_bhb_loop+0x50/0xa0 [ 214.549185][T10758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.549208][T10758] RIP: 0033:0x7feefef9e159 [ 214.549225][T10758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.549242][T10758] RSP: 002b:00007feeffebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.549264][T10758] RAX: ffffffffffffffda RBX: 00007feeff225fa0 RCX: 00007feefef9e159 [ 214.549280][T10758] RDX: 0000000000082001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 214.549294][T10758] RBP: 00007feeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 214.549307][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.549319][T10758] R13: 00007feeff226038 R14: 00007feeff225fa0 R15: 00007ffc046afba8 [ 214.549337][T10758] [ 214.549675][ T36] audit: type=1400 audit(1788983153.187:33787): avc: denied { write } for pid=10756 comm="syz.4.4489" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tsid=85 tclass=chr_file permissive=1 [ 215.221360][T10784] ./dev/sda1: Can't lookup blockdev [ 215.362718][T10786] ./dev/sda1: Can't lookup blockdev [ 215.429281][T10794] overlayfs: failed to clone lowerpath [ 215.579064][ T36] audit: type=1400 audit(1788983154.237:33788): avc: denied { watch } for pid=10800 comm="syz.2.4510" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 215.657531][T10807] ./dev/sda1: Can't lookup blockdev [ 215.756677][T10823] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 215.948788][ T36] audit: type=1400 audit(1788983154.607:33789): avc: denied { watch watch_reads } for pid=10846 comm="syz.2.4531" path="/" dev="ramfs" ino=193821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 215.987179][ T36] audit: type=1400 audit(1788983154.637:33790): avc: denied { setopt } for pid=10851 comm="syz.2.4533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.198735][T10884] ./dev/sda1: Can't lookup blockdev [ 216.317831][T10899] veth1: entered allmulticast mode [ 216.323691][T10898] veth1: left allmulticast mode [ 216.866884][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4568'. [ 216.876811][T10947] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4568'. [ 216.967555][T10955] overlayfs: failed to clone upperpath [ 216.990234][T10959] ./dev/sda1: Can't lookup blockdev [ 217.749851][T11007] ./dev/sda1: Can't lookup blockdev [ 218.490073][T11071] overlayfs: failed to clone upperpath [ 219.352957][T11121] ./dev/sda1: Can't lookup blockdev [ 219.815459][T11131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4649'. [ 219.966747][T11153] VFS: Mount too revealing [ 220.117446][ T36] audit: type=1400 audit(1788983158.777:33791): avc: denied { map } for pid=11161 comm="syz.4.4663" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 220.603106][T11192] ./dev/sda1: Can't lookup blockdev [ 220.697933][ T36] audit: type=1400 audit(1788983159.357:33792): avc: denied { execute } for pid=11205 comm="syz.2.4681" path="/memory.swap.current" dev="ramfs" ino=194852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 220.791077][T11216] netlink: 'syz.2.4686': attribute type 4 has an invalid length. [ 220.800475][T11216] netlink: 'syz.2.4686': attribute type 4 has an invalid length. [ 221.372033][T11235] ./dev/sda1: Can't lookup blockdev [ 222.022186][T11262] ./dev/sda1: Can't lookup blockdev [ 222.465971][T11269] ./dev/sda1: Can't lookup blockdev [ 222.591555][T11281] ./dev/sda1: Can't lookup blockdev [ 222.592895][T11283] overlayfs: failed to clone upperpath [ 222.628900][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'. [ 222.718008][T11293] ./dev/sda1: Can't lookup blockdev [ 222.928590][ T36] audit: type=1400 audit(1788983161.587:33793): avc: denied { mounton } for pid=11316 comm="syz.3.4733" path="/sys/dev" dev="proc" ino=196325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_dev_t tclass=dir permissive=1 [ 223.636941][T11361] ./dev/sda1: Can't lookup blockdev [ 224.278708][T11394] tipc: Bearer : already 2 bearers with priority 10 [ 224.279706][T11392] kvm: pic: non byte read [ 224.286883][T11394] tipc: Bearer : trying with adjusted priority [ 224.291294][T11392] kvm: pic: non byte read [ 224.299116][T11394] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 224.303301][T11392] kvm: pic: non byte read [ 224.316410][T11392] kvm: pic: non byte read [ 224.320865][T11392] kvm: pic: non byte read [ 224.325235][T11392] kvm: pic: non byte read [ 224.329738][T11392] kvm: pic: non byte read [ 224.334280][T11392] kvm: pic: non byte read [ 224.339502][T11392] kvm: pic: non byte read [ 224.344192][T11392] kvm: pic: non byte read [ 224.480225][T11409] syzkaller0: entered promiscuous mode [ 224.485731][T11409] syzkaller0: entered allmulticast mode [ 224.697949][ T36] audit: type=1400 audit(1788983163.357:33794): avc: denied { unlink } for pid=11410 comm="syz.4.4768" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 224.844778][T11459] ./dev/sda1: Can't lookup blockdev [ 224.867039][T11464] ./dev/sda1: Can't lookup blockdev [ 224.913423][T11473] overlayfs: failed to clone upperpath [ 224.925056][T11475] ./dev/sda1: Can't lookup blockdev [ 225.068203][ T36] audit: type=1400 audit(1788983163.727:33795): avc: denied { create } for pid=11476 comm="syz.1.4796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 225.712087][T11527] overlayfs: failed to clone upperpath [ 225.719279][T11527] overlayfs: failed to clone upperpath [ 225.907819][ T311] kernel read not supported for file [fscontext] (pid: 311 comm: kworker/1:2) [ 225.941699][ T36] audit: type=1400 audit(1788983164.597:33796): avc: denied { create } for pid=11549 comm="syz.2.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.989936][T11557] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 226.047061][T11561] ./dev/sda1: Can't lookup blockdev [ 226.643780][T11581] futex_wake_op: syz.2.4837 tries to shift op by 144; fix this program [ 226.722802][T11591] VFS: Mount too revealing [ 226.741349][ T9] kernel read not supported for file [fscontext] (pid: 9 comm: kworker/0:0) [ 226.813192][T11606] overlayfs: failed to clone lowerpath [ 227.092818][ T9] kernel read not supported for file [fscontext] (pid: 9 comm: kworker/0:0) [ 227.353384][ T36] audit: type=1400 audit(1788983166.007:33797): avc: denied { transfer } for pid=11642 comm="syz.4.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 227.375540][T11644] rust_binder: 11642:11644 failed copying remainder into alloc: EFAULT [ 227.384021][T11644] rust_binder: Failure in copy_transaction_data: EFAULT [ 227.384048][T11644] rust_binder: 11642:11644 transaction async to 11642:0 failed EFAULT, code 0 size 104-24 [ 227.401934][ T9] rust_binder: 11642: undelivered TRANSACTION_ERROR: 29201 [ 227.812685][T11694] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.919428][T11705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.635329][T11761] ./dev/sda1: Can't lookup blockdev [ 228.905749][T11765] syzkaller0: entered promiscuous mode [ 228.921475][T11765] syzkaller0: entered allmulticast mode [ 229.501506][T11781] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 229.905993][T11811] rust_binder: 11810:11811 tried to use weak ref as strong ref [ 229.921146][T11811] rust_binder: 11810:11811 error while translating object: EINVAL [ 229.939882][T11811] rust_binder: Failure in copy_transaction_data: EINVAL [ 229.939916][T11811] rust_binder: 11810:11811 transaction call to 11810:0 failed EINVAL, code 0 size 120-24 [ 229.969597][ T9] rust_binder: 11810: undelivered TRANSACTION_ERROR: 29201 [ 230.924884][ T36] audit: type=1400 audit(1788983169.577:33798): avc: denied { mounton } for pid=11866 comm="syz.4.4947" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.937326][T11867] tmpfs: Unsupported parameter 'mpol' [ 231.207285][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.335385][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4955'. [ 231.357271][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 231.363866][ T31] usb 5-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.377083][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.383851][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 231.393089][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.411002][ T31] usb 5-1: config 0 descriptor?? [ 231.413572][T11892] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4957'. [ 231.457324][T11898] ./dev/sda1: Can't lookup blockdev [ 231.882395][ T31] magicmouse 0003:05AC:0265.000E: unknown main item tag 0xd [ 231.889818][ T31] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x6 [ 231.897155][ T31] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x1 [ 231.904509][ T31] magicmouse 0003:05AC:0265.000E: item fetching failed at offset 18/40 [ 231.917457][ T31] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 231.930624][ T31] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22 [ 231.982550][T11905] ./dev/sda1: Can't lookup blockdev [ 232.012344][T11911] ./dev/sda1: Can't lookup blockdev [ 232.082481][ T31] usb 5-1: USB disconnect, device number 14 [ 232.584881][T11927] netlink: 'syz.3.4973': attribute type 4 has an invalid length. [ 232.641554][T11927] netlink: 'syz.3.4973': attribute type 4 has an invalid length. [ 232.939342][T11946] tipc: Enabling of bearer rejected, already enabled [ 232.954527][T11946] tipc: Enabling of bearer rejected, already enabled [ 232.970643][T11946] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 233.121788][T11954] futex_wake_op: syz.2.4986 tries to shift op by 144; fix this program [ 233.282527][T11974] ./dev/sda1: Can't lookup blockdev [ 233.602213][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 233.602189][ T36] audit: type=1400 audit(1788983172.257:33799): avc: denied { nlmsg_read } for pid=11981 comm="syz.4.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.669147][T11988] syzkaller0: entered promiscuous mode [ 233.674626][T11988] syzkaller0: entered allmulticast mode [ 233.888196][T12005] netlink: 'syz.1.5009': attribute type 11 has an invalid length. [ 233.904694][T12007] overlayfs: failed to clone upperpath [ 234.098180][T12018] ./dev/sda1: Can't lookup blockdev [ 234.134520][T12026] ./dev/sda1: Can't lookup blockdev [ 234.196758][T12040] ./dev/sda1: Can't lookup blockdev [ 234.250908][T12050] ./dev/sda1: Can't lookup blockdev [ 235.611198][T12092] ./dev/sda1: Can't lookup blockdev [ 236.192878][T12141] futex_wake_op: syz.1.5070 tries to shift op by 144; fix this program [ 237.061896][T12191] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 237.106176][ T36] audit: type=1400 audit(1788983175.757:33800): avc: denied { read append } for pid=12196 comm="syz.4.5093" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 237.130561][ T36] audit: type=1400 audit(1788983175.797:33801): avc: denied { open } for pid=12196 comm="syz.4.5093" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 237.208067][T12208] 9pnet_fd: p9_fd_create_tcp (12208): problem connecting socket to 127.0.0.1 [ 237.296134][T12218] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 237.896228][T12272] ./dev/sda1: Can't lookup blockdev [ 237.937409][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 238.088891][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 238.097296][ T10] usb 5-1: config 0 has no interface number 0 [ 238.103605][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 238.112487][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 238.126288][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.134643][ T10] usb 5-1: Product: syz [ 238.141074][ T10] usb 5-1: Manufacturer: syz [ 238.149893][ T10] usb 5-1: SerialNumber: syz [ 238.155424][ T10] usb 5-1: config 0 descriptor?? [ 238.365017][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 238.379158][ T10] usb 5-1: USB disconnect, device number 15 [ 238.769850][ T36] audit: type=1326 audit(1788983177.427:33802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.3.5134" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23659e159 code=0x0 [ 238.817465][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 238.987282][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 238.994132][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 239.003038][ T31] usb 5-1: config 0 has no interface number 0 [ 239.009375][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 239.020159][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 239.030309][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 239.038719][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 239.047968][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.056044][ T31] usb 5-1: Product: syz [ 239.060950][ T31] usb 5-1: Manufacturer: syz [ 239.065636][ T31] usb 5-1: SerialNumber: syz [ 239.071575][ T31] usb 5-1: config 0 descriptor?? [ 239.078902][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.086203][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.181384][T12301] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 239.302268][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.404183][T12257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.017561][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 241.037515][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 241.048223][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 241.058050][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 241.068722][ T31] usb 5-1: USB disconnect, device number 16 [ 241.159002][T12308] ./dev/sda1: Can't lookup blockdev [ 241.165027][T12310] rust_binder: Error in use_page_slow: ESRCH [ 241.165050][T12310] rust_binder: use_range failure ESRCH [ 241.177445][T12310] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 241.188357][T12310] rust_binder: Failure in copy_transaction_data: ESRCH [ 241.205765][T12310] rust_binder: 12309:12310 transaction async to 12309:0 failed ESRCH, code 0 size 0-0 [ 241.227391][ T10] rust_binder: 12309: undelivered TRANSACTION_ERROR: 29201 [ 241.298130][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5144'. [ 241.551048][ T36] audit: type=1400 audit(1788983180.207:33803): avc: denied { read } for pid=12325 comm="syz.4.5146" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 241.834463][T12340] syz.2.5153 uses obsolete (PF_INET,SOCK_PACKET) [ 242.381119][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 242.382965][T12379] netlink: 'syz.1.5170': attribute type 27 has an invalid length. [ 242.409261][T12379] veth0_vlan: left promiscuous mode [ 242.414740][T12379] veth0_vlan: entered promiscuous mode [ 242.420840][T12379] veth1_macvtap: left promiscuous mode [ 242.426767][T12379] veth1_macvtap: entered promiscuous mode [ 242.454001][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.461084][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.469734][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.476782][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.527948][T12389] overlayfs: failed to resolve './bus': -2 [ 243.073098][T12423] ./dev/sda1: Can't lookup blockdev [ 243.091388][T12425] overlayfs: failed to clone upperpath [ 243.449820][T12443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.664751][T12456] ./dev/sda1: Can't lookup blockdev [ 244.459437][T12485] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 244.459459][T12485] rust_binder: Read failure Err(EFAULT) in pid:508 [ 244.469456][T12485] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 244.476109][T12485] rust_binder: Read failure Err(EFAULT) in pid:508 [ 244.486196][T12485] rust_binder: 12484:12485 error while translating object: EBADF [ 244.501818][T12485] rust_binder: Failure in copy_transaction_data: EBADF [ 244.501852][T12485] rust_binder: 12484:12485 transaction call to 12484:0 failed EBADF, code 0 size 112-4280 [ 244.520722][ T31] rust_binder: 12484: undelivered TRANSACTION_ERROR: 29201 [ 244.693489][T12495] ./dev/sda1: Can't lookup blockdev [ 245.855930][ T36] audit: type=1400 audit(1788983184.507:33804): avc: denied { lock } for pid=12587 comm="syz.3.5255" path="socket:[203512]" dev="sockfs" ino=203512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 246.984661][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5266'. [ 247.138903][T12629] ./dev/sda1: Can't lookup blockdev [ 249.053721][T12686] ./dev/sda1: Can't lookup blockdev [ 249.095174][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'. [ 249.626673][T12711] ./dev/sda1: Can't lookup blockdev [ 251.525447][ T36] audit: type=1400 audit(1788983190.177:33805): avc: denied { ioctl } for pid=12831 comm="syz.4.5367" path="/218/tracing/uprobe_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 251.643048][T12855] ./dev/sda1: Can't lookup blockdev [ 251.937323][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 252.087313][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 252.094064][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.102463][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 252.114721][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 252.123788][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.131896][ T31] usb 5-1: Product: syz [ 252.136041][ T31] usb 5-1: Manufacturer: syz [ 252.140641][ T31] usb 5-1: SerialNumber: syz [ 252.311555][T12898] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5397'. [ 252.358354][ T31] usb 5-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 252.366830][ T31] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 252.376276][ T31] usb 5-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 252.395451][ T31] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 252.405636][ T31] usb 5-1: failed to enable PITCH for EP 0x1 [ 252.412393][ T31] usb 5-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 252.421241][ T31] usb 5-1: found format II with max.bitrate = 3, frame size=5 [ 252.429349][ T31] usb 5-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 252.438207][ T31] usb 5-1: found format II with max.bitrate = 3, frame size=5 [ 252.463463][ T31] usb 5-1: USB disconnect, device number 17 [ 252.484250][T12259] udevd[12259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 252.912962][ T36] audit: type=1400 audit(1788983191.567:33806): avc: denied { setopt } for pid=12949 comm="syz.4.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.925554][T12952] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 253.068993][T12982] ./dev/sda1: Can't lookup blockdev [ 253.168576][T12994] tipc: New replicast peer: 0.255.255.255 [ 253.174464][T12994] tipc: Enabled bearer , priority 24 [ 253.187792][T12996] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5445'. [ 253.226129][T13004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5449'. [ 253.235196][T13004] tipc: Invalid UDP bearer configuration [ 253.235212][T13004] tipc: Enabling of bearer rejected, failed to enable media [ 253.289597][T13014] /dev/loop0: Can't lookup blockdev [ 253.539130][ T31] logitech-hidpp-device 0003:046D:C082.000F: item fetching failed at offset 0/2 [ 253.549058][ T31] logitech-hidpp-device 0003:046D:C082.000F: hidpp_probe:parse failed [ 253.557383][ T31] logitech-hidpp-device 0003:046D:C082.000F: probe with driver logitech-hidpp-device failed with error -22 [ 253.847353][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 253.998344][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.009278][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.015886][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 254.024997][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.033552][ T31] usb 5-1: config 0 descriptor?? [ 254.441635][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.449836][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.457945][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.466089][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.474202][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.482409][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.490520][ T31] logitech-djreceiver 0003:046D:C532.0010: unknown main item tag 0x0 [ 254.614938][T13051] ./dev/sda1: Can't lookup blockdev [ 254.657550][ T9] usb 5-1: USB disconnect, device number 18 [ 255.255434][T13100] overlayfs: failed to clone lowerpath [ 255.302770][T13110] ./dev/sda1: Can't lookup blockdev [ 255.647346][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 255.807352][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 255.813678][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.824790][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 255.834780][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 255.844466][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.858122][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.867164][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.875175][ T31] usb 5-1: SerialNumber: syz [ 255.880987][T13119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.888196][T13119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.895913][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 255.901867][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 256.096724][T13119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.104573][T13119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 256.314313][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 256.347924][ T31] usb 5-1: USB disconnect, device number 19 [ 256.734643][T13199] bridge0: port 3(vlan0) entered blocking state [ 256.741324][T13199] bridge0: port 3(vlan0) entered disabled state [ 256.747709][T13199] vlan0: entered allmulticast mode [ 256.752842][T13199] veth0_vlan: entered allmulticast mode [ 256.761065][T13199] vlan0: entered promiscuous mode [ 256.766237][T13199] bridge0: port 3(vlan0) entered blocking state [ 256.772521][T13199] bridge0: port 3(vlan0) entered forwarding state [ 257.089766][ T36] audit: type=1400 audit(1788983195.747:33807): avc: denied { accept } for pid=13231 comm="syz.4.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.143273][T13239] ./dev/sda1: Can't lookup blockdev [ 257.177894][T13245] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.5567' resets device [ 257.205204][T13251] rust_binder: 13250:13251 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 257.218208][ T31] rust_binder: 13250: undelivered TRANSACTION_ERROR: 29201 [ 257.231813][T13255] kvm: kvm [13254]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x1 [ 257.453161][T13274] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 257.692976][T13305] ./dev/sda1: Can't lookup blockdev [ 257.717318][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.853725][T13332] ./dev/sda1: Can't lookup blockdev [ 257.908322][ T31] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 257.920658][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.938797][ T31] ums-sddr55 5-1:1.0: USB Mass Storage device detected [ 257.956451][ T31] ums-sddr55 5-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 257.956451][ T31] Please send a copy of this message to and [ 257.983607][ T31] scsi host1: usb-storage 5-1:1.0 [ 258.047656][T13368] ./dev/sda1: Can't lookup blockdev [ 258.382658][T13380] overlayfs: failed to clone upperpath [ 258.418490][T13388] ./dev/sda1: Can't lookup blockdev [ 258.614091][T13407] ./dev/sda1: Can't lookup blockdev [ 258.688436][T13409] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 259.004747][T13425] ./dev/sda1: Can't lookup blockdev [ 259.058090][ T891] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR55 0000 PQ: 0 ANSI: 0 [ 259.275098][ T31] usb 5-1: USB disconnect, device number 20 [ 259.276988][ T1293] sd 1:0:0:0: [sdb] Unit Not Ready [ 259.286313][ T1293] sd 1:0:0:0: [sdb] Sense Key : 0x4 [current] [ 259.292534][ T1293] sd 1:0:0:0: [sdb] ASC=0x0 ASCQ=0x0 [ 259.298726][ T1293] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 259.308672][ T1293] sd 1:0:0:0: [sdb] Sense not available. [ 259.314435][ T1293] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 259.321752][ T1293] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 259.327716][ T1293] sd 1:0:0:0: [sdb] Write Protect is off [ 259.333563][ T1293] sd 1:0:0:0: [sdb] Asking for cache data failed [ 259.339965][ T1293] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 259.349508][ T1293] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 259.368862][T12304] udevd[12304]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 259.404788][T12304] udevd[12304]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 259.907808][ T36] audit: type=1400 audit(1788983198.567:33808): avc: denied { sys_module } for pid=13482 comm="syz.3.5681" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.994967][T13501] ./dev/sda1: Can't lookup blockdev [ 260.374811][T13516] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 260.385160][T13516] SELinux: failed to load policy [ 260.424940][T13524] Line length is too long: Should be less than 4094 [ 260.509530][T13536] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 260.617541][ T36] audit: type=1400 audit(1788983199.277:33809): avc: denied { read } for pid=13550 comm="syz.4.5714" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.640687][ T36] audit: type=1400 audit(1788983199.277:33810): avc: denied { open } for pid=13550 comm="syz.4.5714" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.747371][T13562] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 260.757670][T13562] SELinux: failed to load policy [ 260.773089][T13564] device-mapper: table: 252:0: zero-length target [ 260.779654][T13564] device-mapper: ioctl: error adding target to table [ 260.797620][T13567] FAULT_INJECTION: forcing a failure. [ 260.797620][T13567] name failslab, interval 1, probability 0, space 0, times 0 [ 260.810388][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.4.5721 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 260.810425][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.810439][T13567] Call Trace: [ 260.810447][T13567] [ 260.810456][T13567] __dump_stack+0x21/0x30 [ 260.810523][T13567] dump_stack_lvl+0x140/0x1c0 [ 260.810550][T13567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 260.810580][T13567] dump_stack+0x19/0x20 [ 260.810605][T13567] should_fail_ex+0x3c2/0x510 [ 260.810741][T13567] should_failslab+0xac/0x100 [ 260.810817][T13567] __kmalloc_cache_node_noprof+0x46/0x430 [ 260.810875][T13567] ? __get_vm_area_node+0x150/0x390 [ 260.810953][T13567] ? kasan_save_alloc_info+0x3a/0x50 [ 260.810973][T13567] ? __kasan_slab_alloc+0x73/0x90 [ 260.811023][T13567] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 260.811045][T13567] __get_vm_area_node+0x150/0x390 [ 260.811073][T13567] __vmalloc_node_range_noprof+0x340/0x1300 [ 260.811103][T13567] ? copy_process+0x57c/0x3350 [ 260.811208][T13567] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 260.811238][T13567] ? kasan_save_alloc_info+0x3a/0x50 [ 260.811256][T13567] ? __kasan_slab_alloc+0x73/0x90 [ 260.811288][T13567] ? arch_dup_task_struct+0x5b/0xe0 [ 260.811327][T13567] ? __asan_memcpy+0x5a/0x80 [ 260.811345][T13567] dup_task_struct+0x5d6/0xd80 [ 260.811364][T13567] ? copy_process+0x57c/0x3350 [ 260.811387][T13567] ? _raw_spin_lock_irq+0x93/0x120 [ 260.811469][T13567] ? copy_process+0x3350/0x3350 [ 260.811493][T13567] ? __kasan_check_write+0x18/0x20 [ 260.811515][T13567] copy_process+0x57c/0x3350 [ 260.811538][T13567] ? __kasan_check_write+0x18/0x20 [ 260.811559][T13567] ? futex_wake+0x666/0x950 [ 260.811615][T13567] ? __cfi_copy_process+0x10/0x10 [ 260.811637][T13567] ? proc_fail_nth_write+0x184/0x220 [ 260.811740][T13567] kernel_clone+0x233/0x810 [ 260.811765][T13567] ? __cfi_kernel_clone+0x10/0x10 [ 260.811788][T13567] ? do_futex+0x37d/0x510 [ 260.811836][T13567] __x64_sys_clone+0x1b7/0x230 [ 260.811859][T13567] ? __cfi___x64_sys_clone+0x10/0x10 [ 260.811884][T13567] ? __kasan_check_write+0x18/0x20 [ 260.811901][T13567] ? fpregs_restore_userregs+0x11c/0x260 [ 260.811952][T13567] ? switch_fpu_return+0x12/0x20 [ 260.811975][T13567] x64_sys_call+0x2b3c/0x2ee0 [ 260.811994][T13567] do_syscall_64+0x57/0xf0 [ 260.812040][T13567] ? clear_bhb_loop+0x50/0xa0 [ 260.812197][T13567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.812220][T13567] RIP: 0033:0x7feefef9e159 [ 260.812239][T13567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.812256][T13567] RSP: 002b:00007feeffebdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 260.812288][T13567] RAX: ffffffffffffffda RBX: 00007feeff225fa0 RCX: 00007feefef9e159 [ 260.812302][T13567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 260.812314][T13567] RBP: 00007feeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 260.812326][T13567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.812338][T13567] R13: 00007feeff226038 R14: 00007feeff225fa0 R15: 00007ffc046afba8 [ 260.812353][T13567] [ 260.812414][T13567] syz.4.5721: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 261.139874][T13567] CPU: 0 UID: 0 PID: 13567 Comm: syz.4.5721 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 261.139907][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.139920][T13567] Call Trace: [ 261.139926][T13567] [ 261.139934][T13567] __dump_stack+0x21/0x30 [ 261.139967][T13567] dump_stack_lvl+0x140/0x1c0 [ 261.139993][T13567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 261.140025][T13567] dump_stack+0x19/0x20 [ 261.140050][T13567] warn_alloc+0x1e7/0x2c0 [ 261.140162][T13567] ? __kasan_kmalloc+0x28/0xb0 [ 261.140188][T13567] ? __cfi_warn_alloc+0x10/0x10 [ 261.140214][T13567] ? __get_vm_area_node+0x150/0x390 [ 261.140242][T13567] ? kasan_save_alloc_info+0x3a/0x50 [ 261.140262][T13567] ? __get_vm_area_node+0x382/0x390 [ 261.140290][T13567] __vmalloc_node_range_noprof+0x365/0x1300 [ 261.140323][T13567] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 261.140352][T13567] ? kasan_save_alloc_info+0x3a/0x50 [ 261.140370][T13567] ? __kasan_slab_alloc+0x73/0x90 [ 261.140394][T13567] ? arch_dup_task_struct+0x5b/0xe0 [ 261.140422][T13567] ? __asan_memcpy+0x5a/0x80 [ 261.140443][T13567] dup_task_struct+0x5d6/0xd80 [ 261.140467][T13567] ? copy_process+0x57c/0x3350 [ 261.140491][T13567] ? _raw_spin_lock_irq+0x93/0x120 [ 261.140510][T13567] ? copy_process+0x3350/0x3350 [ 261.140535][T13567] ? __kasan_check_write+0x18/0x20 [ 261.140555][T13567] copy_process+0x57c/0x3350 [ 261.140579][T13567] ? __kasan_check_write+0x18/0x20 [ 261.140600][T13567] ? futex_wake+0x666/0x950 [ 261.140620][T13567] ? __cfi_copy_process+0x10/0x10 [ 261.140643][T13567] ? proc_fail_nth_write+0x184/0x220 [ 261.140673][T13567] kernel_clone+0x233/0x810 [ 261.140698][T13567] ? __cfi_kernel_clone+0x10/0x10 [ 261.140722][T13567] ? do_futex+0x37d/0x510 [ 261.140764][T13567] __x64_sys_clone+0x1b7/0x230 [ 261.140794][T13567] ? __cfi___x64_sys_clone+0x10/0x10 [ 261.140823][T13567] ? __kasan_check_write+0x18/0x20 [ 261.140844][T13567] ? fpregs_restore_userregs+0x11c/0x260 [ 261.140869][T13567] ? switch_fpu_return+0x12/0x20 [ 261.140892][T13567] x64_sys_call+0x2b3c/0x2ee0 [ 261.140911][T13567] do_syscall_64+0x57/0xf0 [ 261.140929][T13567] ? clear_bhb_loop+0x50/0xa0 [ 261.140950][T13567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.140969][T13567] RIP: 0033:0x7feefef9e159 [ 261.140986][T13567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.141004][T13567] RSP: 002b:00007feeffebdfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 261.141027][T13567] RAX: ffffffffffffffda RBX: 00007feeff225fa0 RCX: 00007feefef9e159 [ 261.141043][T13567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 261.141057][T13567] RBP: 00007feeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 261.141071][T13567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.141084][T13567] R13: 00007feeff226038 R14: 00007feeff225fa0 R15: 00007ffc046afba8 [ 261.141102][T13567] [ 261.141111][T13567] Mem-Info: [ 261.437252][T13567] active_anon:6921 inactive_anon:11134 isolated_anon:0 [ 261.437252][T13567] active_file:16866 inactive_file:16835 isolated_file:0 [ 261.437252][T13567] unevictable:16426 dirty:87 writeback:0 [ 261.437252][T13567] slab_reclaimable:5910 slab_unreclaimable:79438 [ 261.437252][T13567] mapped:24274 shmem:11250 pagetables:2096 [ 261.437252][T13567] sec_pagetables:0 bounce:0 [ 261.437252][T13567] kernel_misc_reclaimable:0 [ 261.437252][T13567] free:1478159 free_pcp:2645 free_cma:0 [ 261.483325][T13567] Node 0 active_anon:27484kB inactive_anon:44536kB active_file:67464kB inactive_file:67340kB unevictable:65704kB isolated(anon):0kB isolated(file):0kB mapped:97096kB dirty:348kB writeback:0kB shmem:45000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7268kB pagetables:8884kB sec_pagetables:0kB all_unreclaimable? no [ 261.515979][T13567] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:5204kB free_cma:0kB [ 261.546739][T13567] lowmem_reserve[]: 0 3921 3921 [ 261.551832][T13567] Normal free:2958220kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27584kB inactive_anon:44536kB active_file:67464kB inactive_file:67340kB unevictable:65704kB writepending:348kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3444kB local_pcp:3444kB free_cma:0kB [ 261.584911][T13567] lowmem_reserve[]: 0 0 0 [ 261.589340][T13567] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 261.614871][T13567] Normal: 276*4kB (UME) 1617*8kB (UME) 1415*16kB (UME) 607*32kB (UME) 617*64kB (UME) 309*128kB (UME) 256*256kB (UME) 130*512kB (UME) 62*1024kB (UME) 31*2048kB (UME) 626*4096kB (UM) = 2958312kB [ 261.635627][T13567] 61525 total pagecache pages [ 261.641011][T13567] 27 pages in swap cache [ 261.645539][T13567] Free swap = 87820kB [ 261.653898][T13567] Total swap = 124996kB [ 261.658262][T13567] 2097051 pages RAM [ 261.662272][T13567] 0 pages HighMem/MovableOnly [ 261.667584][T13567] 352243 pages reserved [ 261.672138][T13567] 0 pages cma reserved [ 261.679585][T13567] Memory allocations: [ 261.683622][T13567] 0 B 0 init/main.c:1477 func:do_initcalls [ 261.698266][T13567] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 261.707275][T13567] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 261.714940][T13567] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 261.727752][T13567] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 261.736046][T13567] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 261.745128][T13567] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 261.756175][T13567] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 261.764407][T13567] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 261.768643][T13647] 9pnet_fd: Insufficient options for proto=fd [ 261.782358][T13567] 0 B 0 init/initramfs.c:101 func:find_link [ 261.826967][ T36] audit: type=1400 audit(1788983200.477:33811): avc: denied { read } for pid=13659 comm="syz.4.5767" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 261.931049][T13678] SELinux: failed to load policy [ 262.187311][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.337295][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 262.343588][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.351942][ T31] usb 5-1: config 0 has no interface number 0 [ 262.360656][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.370169][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.378707][ T31] usb 5-1: Product: syz [ 262.383033][ T31] usb 5-1: Manufacturer: syz [ 262.388078][ T31] usb 5-1: SerialNumber: syz [ 262.397492][ T31] usb 5-1: config 0 descriptor?? [ 262.407537][ T31] smsc95xx v2.0.0 [ 262.528130][T13732] ./dev/sda1: Can't lookup blockdev [ 262.610887][T13734] netlink: 'syz.2.5804': attribute type 12 has an invalid length. [ 262.785464][T13750] ./dev/sda1: Can't lookup blockdev [ 262.947140][ T36] audit: type=1326 audit(1788983201.597:33812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13754 comm="syz.1.5814" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ad439e159 code=0x0 [ 263.406055][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 263.424030][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.434454][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 263.445690][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 263.455265][ T31] usb 5-1: USB disconnect, device number 21 [ 264.157343][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 264.308508][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.319547][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.329460][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.342708][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.352166][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.360797][ T31] usb 5-1: config 0 descriptor?? [ 264.498369][T13810] overlayfs: failed to clone upperpath [ 264.504750][T13810] overlayfs: failed to clone upperpath [ 264.768148][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.775599][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.783151][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.790652][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.798428][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.805832][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.813246][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.820754][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.828461][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.835879][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.843299][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.850720][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.858327][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.865988][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.873609][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 264.881426][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 264.892901][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 265.027855][ T31] usb 5-1: USB disconnect, device number 22 [ 265.557509][T13847] kvm: apic: phys broadcast and lowest prio [ 265.887274][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.037280][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 266.044585][ T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 266.054460][ T31] usb 5-1: config 0 has no interface number 0 [ 266.061555][ T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 266.074932][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 266.085260][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.093315][ T31] usb 5-1: Product: syz [ 266.097623][ T31] usb 5-1: Manufacturer: syz [ 266.102265][ T31] usb 5-1: SerialNumber: syz [ 266.107953][ T31] usb 5-1: config 0 descriptor?? [ 266.114909][T13853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.335762][T13853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.944646][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 267.145998][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 267.156343][ T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 267.166959][ T31] asix 5-1:0.188: probe with driver asix failed with error -32 [ 267.174247][T13919] overlayfs: failed to clone upperpath [ 267.177358][ T31] usb 5-1: USB disconnect, device number 23 [ 268.059155][T13967] ./dev/sda1: Can't lookup blockdev [ 268.167292][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.318316][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.328020][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.337702][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.351987][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 268.361069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 268.369178][ T9] usb 5-1: Product: syz [ 268.373322][ T9] usb 5-1: Manufacturer: syz [ 268.377942][ T9] usb 5-1: SerialNumber: syz [ 268.585758][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 268.652637][T13985] ./dev/sda1: Can't lookup blockdev [ 268.790643][ T36] audit: type=1400 audit(1788983207.447:33813): avc: denied { read write } for pid=13950 comm="syz.4.5903" name="lp0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 268.791721][ T9] usb 5-1: USB disconnect, device number 24 [ 268.814605][ T36] audit: type=1400 audit(1788983207.447:33814): avc: denied { open } for pid=13950 comm="syz.4.5903" path="/dev/usb/lp0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 268.822235][ T9] usblp0: removed [ 269.176599][T14003] ./dev/sda1: Can't lookup blockdev [ 269.359991][ T36] audit: type=1400 audit(1788983208.017:33815): avc: denied { map } for pid=14018 comm="syz.4.5936" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.398433][T14023] ./dev/sda1: Can't lookup blockdev [ 269.637280][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 269.797315][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.809202][ T31] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.823142][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.839215][ T31] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 269.848656][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.848943][T14043] ./dev/sda1: Can't lookup blockdev [ 269.865615][ T31] usb 5-1: config 0 descriptor?? [ 269.929992][T14055] overlayfs: failed to clone lowerpath [ 269.936048][T14055] overlayfs: failed to clone lowerpath [ 270.106670][T14078] ./dev/sda1: Can't lookup blockdev [ 270.273903][ T31] aureal 0003:0755:2626.0012: collection stack underflow [ 270.281021][ T31] aureal 0003:0755:2626.0012: item 0 0 0 12 parsing failed [ 270.288446][ T31] aureal 0003:0755:2626.0012: probe with driver aureal failed with error -22 [ 270.476315][ T31] usb 5-1: USB disconnect, device number 25 [ 271.062951][T14119] overlay: Unknown parameter '/' [ 271.068581][T14119] overlayfs: failed to clone lowerpath [ 271.340912][T14123] ./dev/sda1: Can't lookup blockdev [ 271.417325][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 271.579987][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 271.589293][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.597561][ T10] usb 5-1: Product: syz [ 271.602103][ T10] usb 5-1: Manufacturer: syz [ 271.606852][ T10] usb 5-1: SerialNumber: syz [ 271.789329][T14157] overlayfs: failed to clone upperpath [ 272.336286][ T10] rtl8150 5-1:1.0: couldn't reset the device [ 272.342738][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 272.352294][ T10] usb 5-1: USB disconnect, device number 26 [ 272.832402][T14171] ./dev/sda1: Can't lookup blockdev [ 273.197200][T14203] ./dev/sda1: Can't lookup blockdev [ 273.275504][T14205] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 273.355259][T14210] ./dev/sda1: Can't lookup blockdev [ 273.548618][T14222] ./dev/sda1: Can't lookup blockdev [ 273.635457][T14226] fuse: Bad value for 'fd' [ 273.771422][T14242] ./dev/sda1: Can't lookup blockdev [ 273.916429][T14261] ./dev/sda1: Can't lookup blockdev [ 274.642203][T14282] ./dev/sda1: Can't lookup blockdev [ 275.043004][T14306] ./dev/sda1: Can't lookup blockdev [ 275.099748][T14318] overlayfs: failed to resolve './cgroup': -2 [ 275.841786][T14328] ./dev/sda1: Can't lookup blockdev [ 275.987317][T14352] ./dev/sda1: Can't lookup blockdev [ 276.110381][T14368] netlink: 'syz.2.6103': attribute type 27 has an invalid length. [ 276.124409][T14368] bridge0: port 3(vlan0) entered disabled state [ 276.130755][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.137925][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.145677][T14368] tipc: Resetting bearer [ 277.035980][T14388] overlayfs: failed to clone upperpath [ 277.227481][T14408] ./dev/sda1: Can't lookup blockdev [ 277.398425][T14421] ./dev/sda1: Can't lookup blockdev [ 277.577297][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 277.697782][T14446] netlink: 'syz.2.6140': attribute type 12 has an invalid length. [ 277.727280][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 277.731904][T14454] ./dev/sda1: Can't lookup blockdev [ 277.738431][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.749823][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.760162][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.769415][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.777707][ T9] usb 5-1: Product: syz [ 277.782327][ T9] usb 5-1: Manufacturer: syz [ 277.787442][ T9] usb 5-1: SerialNumber: syz [ 277.839105][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6152'. [ 277.860382][T14478] ./dev/sda1: Can't lookup blockdev [ 277.903487][T14486] overlayfs: failed to clone lowerpath [ 277.918404][T14488] ./dev/sda1: Can't lookup blockdev [ 277.997771][ T9] usb 5-1: 0:2 : does not exist [ 278.010896][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 278.031802][ T9] usb 5-1: USB disconnect, device number 27 [ 278.056843][T14490] udevd[14490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.118129][T14495] ./dev/sda1: Can't lookup blockdev [ 278.152187][T14499] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 278.216724][T14507] 9pnet_fd: p9_fd_create_tcp (14507): problem connecting socket to 127.0.0.1 [ 278.356233][T14525] ./dev/sda1: Can't lookup blockdev [ 278.430237][T14531] ./dev/sda1: Can't lookup blockdev [ 278.521963][T14553] ./dev/sda1: Can't lookup blockdev [ 278.597268][T14565] ./dev/sda1: Can't lookup blockdev [ 278.666371][T14578] ./dev/sda1: Can't lookup blockdev [ 278.791891][T14594] ./dev/sda1: Can't lookup blockdev [ 278.967300][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 279.020629][T14621] ./dev/sda1: Can't lookup blockdev [ 279.127279][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 279.133599][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 279.142073][ T31] usb 5-1: config 0 has no interface number 0 [ 279.148403][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 279.156895][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 279.170616][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.178729][ T31] usb 5-1: Product: syz [ 279.182889][ T31] usb 5-1: Manufacturer: syz [ 279.187525][ T31] usb 5-1: SerialNumber: syz [ 279.192867][ T31] usb 5-1: config 0 descriptor?? [ 279.200056][ T31] smsc75xx v1.0.0 [ 279.209066][T14642] ./dev/sda1: Can't lookup blockdev [ 279.297565][T14660] ./dev/sda1: Can't lookup blockdev [ 279.397256][T14667] ./dev/sda1: Can't lookup blockdev [ 279.455992][T14676] ./dev/sda1: Can't lookup blockdev [ 279.508667][T14681] ./dev/sda1: Can't lookup blockdev [ 279.627650][T14688] tipc: Enabling of bearer rejected, failed to enable media [ 280.176081][T14702] ./dev/sda1: Can't lookup blockdev [ 280.273796][T14717] overlayfs: failed to clone upperpath [ 280.307935][T14721] ./dev/sda1: Can't lookup blockdev [ 280.387447][T14737] ./dev/sda1: Can't lookup blockdev [ 280.410909][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.421551][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.430782][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 280.443536][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.453734][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 280.464671][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 280.474359][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 280.484950][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 280.494631][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 280.507976][ T31] usb 5-1: USB disconnect, device number 28 [ 280.537604][T14746] netlink: 'syz.2.6281': attribute type 4 has an invalid length. [ 280.546105][T14746] netlink: 'syz.2.6281': attribute type 4 has an invalid length. [ 280.852417][T14756] ./dev/sda1: Can't lookup blockdev [ 281.077438][T14772] ./dev/sda1: Can't lookup blockdev [ 281.460901][T14781] ./dev/sda1: Can't lookup blockdev [ 281.629030][T14796] ./dev/sda1: Can't lookup blockdev [ 281.690141][T14800] ./dev/sda1: Can't lookup blockdev [ 281.928653][T14812] ./dev/sda1: Can't lookup blockdev [ 282.307290][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.378525][T14833] ./dev/sda1: Can't lookup blockdev [ 282.458331][T14837] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 282.467375][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 282.474698][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 282.483794][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.491927][ T31] usb 5-1: Product: syz [ 282.496105][ T31] usb 5-1: Manufacturer: syz [ 282.500811][ T31] usb 5-1: SerialNumber: syz [ 283.110434][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 283.120322][ T31] usb 5-1: USB disconnect, device number 29 [ 283.660440][T14862] tipc: Enabling of bearer rejected, failed to enable media [ 283.686789][ T36] audit: type=1400 audit(1788983222.337:33816): avc: denied { read } for pid=14865 comm="syz.4.6338" path="socket:[211160]" dev="sockfs" ino=211160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.885069][T14881] overlayfs: failed to clone upperpath [ 283.904830][T14883] ./dev/sda1: Can't lookup blockdev [ 284.448788][T14916] No source specified [ 284.633027][T14950] ./dev/sda1: Can't lookup blockdev [ 284.667856][T14956] ./dev/sda1: Can't lookup blockdev [ 284.687382][T14959] No source specified [ 284.829335][T14964] overlayfs: failed to clone upperpath [ 285.356507][ T36] audit: type=1400 audit(1788983224.007:33817): avc: denied { mounton } for pid=14978 comm="syz.4.6392" path="/331/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 285.388221][T14986] No source specified [ 285.640062][T15023] overlayfs: failed to clone upperpath [ 285.677569][ T36] audit: type=1400 audit(1788983224.337:33818): avc: denied { create } for pid=15030 comm="syz.4.6409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 285.698546][ T36] audit: type=1400 audit(1788983224.337:33819): avc: denied { setopt } for pid=15030 comm="syz.4.6409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 285.720548][ T36] audit: type=1400 audit(1788983224.337:33820): avc: denied { connect } for pid=15030 comm="syz.4.6409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 285.742007][ T36] audit: type=1400 audit(1788983224.337:33821): avc: denied { name_connect } for pid=15030 comm="syz.4.6409" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 285.788073][T15040] rust_binder: Failure in copy_transaction_data: EFAULT [ 285.788105][T15040] rust_binder: 15039:15040 transaction call to 15039:0 failed EFAULT, code 0 size 23-24 [ 285.805584][ T31] rust_binder: 15039: undelivered TRANSACTION_ERROR: 29201 [ 285.941218][T15057] overlayfs: failed to clone upperpath [ 285.988872][T15069] overlayfs: failed to clone upperpath [ 286.171146][T15085] netlink: 'syz.2.6435': attribute type 4 has an invalid length. [ 286.179177][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 286.195625][T15087] ./dev/sda1: Can't lookup blockdev [ 286.338799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.349729][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.359482][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.372374][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.381422][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.396324][ T9] usb 5-1: config 0 descriptor?? [ 286.811724][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.819216][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.826635][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.834072][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.841495][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.848900][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.856278][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.863691][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.871096][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.878495][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.885883][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.893309][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.900814][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.908236][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.915619][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 286.923181][ T9] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 286.931998][ T9] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 287.478496][T15122] usb 5-1: language id specifier not provided by device, defaulting to English [ 288.981480][ T36] audit: type=1400 audit(1788983227.637:33822): avc: denied { remove_name } for pid=15129 comm="syz.4.6451" name="Loopback.0" dev="configfs" ino=211538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.005629][ T36] audit: type=1400 audit(1788983227.637:33823): avc: denied { rmdir } for pid=15129 comm="syz.4.6451" name="Loopback.0" dev="configfs" ino=211538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.179517][T15151] ./dev/sda1: Can't lookup blockdev [ 289.230986][T15163] FAULT_INJECTION: forcing a failure. [ 289.230986][T15163] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.243910][T15163] CPU: 0 UID: 0 PID: 15163 Comm: syz.4.6469 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 289.243944][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.243958][T15163] Call Trace: [ 289.243965][T15163] [ 289.243973][T15163] __dump_stack+0x21/0x30 [ 289.244008][T15163] dump_stack_lvl+0x140/0x1c0 [ 289.244035][T15163] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.244063][T15163] ? rtnl_unlock+0x12/0x20 [ 289.244229][T15163] ? devinet_ioctl+0x133d/0x1af0 [ 289.244332][T15163] dump_stack+0x19/0x20 [ 289.244359][T15163] should_fail_ex+0x3c2/0x510 [ 289.244385][T15163] should_fail+0xf/0x20 [ 289.244407][T15163] get_futex_key+0x178/0x940 [ 289.244434][T15163] ? get_user_ifreq+0x130/0x180 [ 289.244499][T15163] ? __cfi_get_futex_key+0x10/0x10 [ 289.244523][T15163] ? inet_ioctl+0x431/0x570 [ 289.244545][T15163] futex_wake+0x150/0x950 [ 289.244564][T15163] ? __cfi_futex_wake+0x10/0x10 [ 289.244584][T15163] ? sock_do_ioctl+0x1c8/0x330 [ 289.244631][T15163] do_futex+0x37d/0x510 [ 289.244657][T15163] ? errseq_sample+0x48/0x70 [ 289.244728][T15163] ? file_init_path+0x434/0x590 [ 289.244816][T15163] ? __cfi_do_futex+0x10/0x10 [ 289.244844][T15163] __se_sys_futex+0x13c/0x320 [ 289.244871][T15163] ? __x64_sys_futex+0x110/0x110 [ 289.244896][T15163] ? __kasan_check_write+0x18/0x20 [ 289.244923][T15163] __x64_sys_futex+0xe9/0x110 [ 289.244948][T15163] x64_sys_call+0x227f/0x2ee0 [ 289.244967][T15163] do_syscall_64+0x57/0xf0 [ 289.244987][T15163] ? clear_bhb_loop+0x50/0xa0 [ 289.245010][T15163] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.245032][T15163] RIP: 0033:0x7feefef9e159 [ 289.245050][T15163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.245067][T15163] RSP: 002b:00007feeffebe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.245089][T15163] RAX: ffffffffffffffda RBX: 00007feeff225fa8 RCX: 00007feefef9e159 [ 289.245105][T15163] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feeff225fac [ 289.245119][T15163] RBP: 00007feeff225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 289.245134][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.245147][T15163] R13: 00007feeff226038 R14: 00007ffc046afac0 R15: 00007ffc046afba8 [ 289.245164][T15163] [ 289.477351][ T9] usb 5-1: USB disconnect, device number 30 [ 290.399261][T15207] ./dev/sda1: Can't lookup blockdev [ 290.491468][T15218] ./dev/sda1: Can't lookup blockdev [ 290.784897][T15225] ./dev/sda1: Can't lookup blockdev [ 290.807906][T15227] ./dev/sda1: Can't lookup blockdev [ 292.440575][T15280] ./dev/sda1: Can't lookup blockdev [ 292.674465][T15301] ./dev/sda1: Can't lookup blockdev [ 292.773449][T15309] ./dev/sda1: Can't lookup blockdev [ 293.053926][T15313] overlayfs: failed to clone upperpath [ 293.309208][T15335] ./dev/sda1: Can't lookup blockdev [ 294.117329][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 294.204315][T15376] ./dev/sda1: Can't lookup blockdev [ 294.267300][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 294.273664][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.284081][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.293309][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.301890][ T31] usb 5-1: config 0 descriptor?? [ 294.309336][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 294.315331][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 295.029517][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.038731][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.250640][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.259194][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.783031][T15396] ./dev/sda1: Can't lookup blockdev [ 295.783792][T15399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.812964][T15399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.367278][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.383685][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.406918][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.420094][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.613376][T15433] 9pnet_fd: p9_fd_create_tcp (15433): problem connecting socket to 127.0.0.1 [ 296.672144][T15441] ./dev/sda1: Can't lookup blockdev [ 296.922362][T15471] overlay: Unknown parameter '/' [ 296.928138][T15471] overlayfs: failed to clone lowerpath [ 296.935329][T15473] ./dev/sda1: Can't lookup blockdev [ 296.957511][T15477] FAULT_INJECTION: forcing a failure. [ 296.957511][T15477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 296.975772][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.4.6619 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 296.975808][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.975822][T15477] Call Trace: [ 296.975829][T15477] [ 296.975837][T15477] __dump_stack+0x21/0x30 [ 296.975872][T15477] dump_stack_lvl+0x140/0x1c0 [ 296.975900][T15477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 296.975930][T15477] dump_stack+0x19/0x20 [ 296.975954][T15477] should_fail_ex+0x3c2/0x510 [ 296.975979][T15477] should_fail+0xf/0x20 [ 296.976001][T15477] get_futex_key+0x178/0x940 [ 296.976027][T15477] ? __cfi___futex_wait+0x10/0x10 [ 296.976046][T15477] ? __cfi_get_futex_key+0x10/0x10 [ 296.976069][T15477] ? __cfi_futex_wake_mark+0x10/0x10 [ 296.976089][T15477] futex_wake+0x150/0x950 [ 296.976107][T15477] ? futex_wait+0x2b8/0x7c0 [ 296.976125][T15477] ? __cfi_futex_wake+0x10/0x10 [ 296.976146][T15477] do_futex+0x37d/0x510 [ 296.976172][T15477] ? __cfi_do_futex+0x10/0x10 [ 296.976195][T15477] ? mutex_unlock+0x90/0x240 [ 296.976217][T15477] __se_sys_futex+0x13c/0x320 [ 296.976251][T15477] ? __x64_sys_futex+0x110/0x110 [ 296.976282][T15477] __x64_sys_futex+0xe9/0x110 [ 296.976307][T15477] x64_sys_call+0x227f/0x2ee0 [ 296.976324][T15477] do_syscall_64+0x57/0xf0 [ 296.976341][T15477] ? clear_bhb_loop+0x50/0xa0 [ 296.976365][T15477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 296.976385][T15477] RIP: 0033:0x7feefef9e159 [ 296.976402][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.976421][T15477] RSP: 002b:00007feeffebe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.976444][T15477] RAX: ffffffffffffffda RBX: 00007feeff225fa8 RCX: 00007feefef9e159 [ 296.976460][T15477] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feeff225fac [ 296.976475][T15477] RBP: 00007feeff225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 296.976491][T15477] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 296.976505][T15477] R13: 00007feeff226038 R14: 00007ffc046afac0 R15: 00007ffc046afba8 [ 296.976523][T15477] [ 297.056296][T15482] ./dev/sda1: Can't lookup blockdev [ 297.085879][T15486] ./dev/sda1: Can't lookup blockdev [ 297.353225][T15499] overlay: Unknown parameter '/' [ 297.358462][ T36] audit: type=1400 audit(1788983236.007:33824): avc: denied { mounton } for pid=15498 comm="syz.4.6620" path="/362/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 297.398196][T15507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.412714][T15507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.704255][T15519] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 298.281203][T15553] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.391356][T15556] ./dev/sda1: Can't lookup blockdev [ 298.955519][T15580] overlayfs: failed to clone upperpath [ 299.077724][ T36] audit: type=1326 audit(1788983237.737:33825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.3.6666" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23659e159 code=0x0 [ 299.191569][T15606] overlayfs: failed to clone upperpath [ 299.213218][T15610] ./dev/sda1: Can't lookup blockdev [ 299.620879][T15633] ./dev/sda1: Can't lookup blockdev [ 299.826010][T15644] FAULT_INJECTION: forcing a failure. [ 299.826010][T15644] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 299.839466][T15644] CPU: 0 UID: 0 PID: 15644 Comm: syz.4.6686 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 299.839496][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.839508][T15644] Call Trace: [ 299.839514][T15644] [ 299.839520][T15644] __dump_stack+0x21/0x30 [ 299.839551][T15644] dump_stack_lvl+0x140/0x1c0 [ 299.839574][T15644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.839599][T15644] dump_stack+0x19/0x20 [ 299.839623][T15644] should_fail_ex+0x3c2/0x510 [ 299.839646][T15644] should_fail+0xf/0x20 [ 299.839668][T15644] should_fail_usercopy+0x1e/0x30 [ 299.839692][T15644] _copy_from_user+0x20/0xa0 [ 299.839718][T15644] get_timespec64+0x97/0x1b0 [ 299.839925][T15644] ? __cfi_get_timespec64+0x10/0x10 [ 299.839952][T15644] __se_sys_futex+0x1a3/0x320 [ 299.839979][T15644] ? __x64_sys_futex+0x110/0x110 [ 299.840006][T15644] __x64_sys_futex+0xe9/0x110 [ 299.840031][T15644] x64_sys_call+0x227f/0x2ee0 [ 299.840050][T15644] do_syscall_64+0x57/0xf0 [ 299.840069][T15644] ? clear_bhb_loop+0x50/0xa0 [ 299.840093][T15644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.840115][T15644] RIP: 0033:0x7feefef9e159 [ 299.840132][T15644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.840150][T15644] RSP: 002b:00007ffc046afd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 299.840173][T15644] RAX: ffffffffffffffda RBX: 0000000000049334 RCX: 00007feefef9e159 [ 299.840188][T15644] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feeff225fac [ 299.840203][T15644] RBP: 0000000000000032 R08: 4000000000000000 R09: 0000000000000000 [ 299.840217][T15644] R10: 00007ffc046afe10 R11: 0000000000000246 R12: 00007ffc046afe30 [ 299.840228][T15644] R13: 00007feeff225fac R14: 0000000000049366 R15: 00007ffc046afe10 [ 299.840243][T15644] [ 302.111575][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6700'. [ 302.123489][T15667] ./dev/sda1: Can't lookup blockdev [ 302.447593][T15695] ./dev/sda1: Can't lookup blockdev [ 302.851788][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6711'. [ 303.288074][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.297007][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.840213][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6725'. [ 304.689053][T15763] overlayfs: failed to clone upperpath [ 304.821572][T15772] netlink: 'syz.3.6746': attribute type 27 has an invalid length. [ 304.849369][T15772] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.856524][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.864719][T15772] tipc: Resetting bearer [ 304.959513][T15784] ./dev/sda1: Can't lookup blockdev [ 305.285485][T15812] netlink: 'syz.4.6756': attribute type 27 has an invalid length. [ 305.300014][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.307296][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.349866][T15817] overlayfs: failed to clone upperpath [ 305.385823][T15819] ./dev/sda1: Can't lookup blockdev [ 305.447145][T15827] ./dev/sda1: Can't lookup blockdev [ 305.580066][T15832] ./dev/sda1: Can't lookup blockdev [ 305.606550][T15834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.627427][T15834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.207141][ T36] audit: type=1400 audit(1788983244.857:33826): avc: denied { ioctl } for pid=15843 comm="syz.4.6770" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 306.253698][ T36] audit: type=1400 audit(1788983244.907:33827): avc: denied { setattr } for pid=15845 comm="syz.4.6772" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 306.344136][T15858] ./dev/sda1: Can't lookup blockdev [ 306.349978][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.377438][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.596234][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.604803][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.927626][T15884] ./dev/sda1: Can't lookup blockdev [ 308.003680][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.011956][T15911] 9pnet_fd: p9_fd_create_tcp (15911): problem connecting socket to 127.0.0.1 [ 308.016691][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.052912][T15917] ./dev/sda1: Can't lookup blockdev [ 308.207651][T15924] ./dev/sda1: Can't lookup blockdev [ 308.557093][T15941] 9pnet_fd: p9_fd_create_tcp (15941): problem connecting socket to 127.0.0.1 [ 308.961713][T15970] 9pnet_fd: p9_fd_create_tcp (15970): problem connecting socket to 127.0.0.1 [ 309.046467][T15977] 9pnet_fd: p9_fd_create_tcp (15977): problem connecting socket to 127.0.0.1 [ 309.086380][T15987] ./dev/sda1: Can't lookup blockdev [ 309.958171][T16028] ./dev/sda1: Can't lookup blockdev [ 310.885956][T16066] ./dev/sda1: Can't lookup blockdev [ 311.398474][T16079] ./dev/sda1: Can't lookup blockdev [ 312.586066][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6889'. [ 312.648296][T16107] tipc: Started in network mode [ 312.653205][T16107] tipc: Node identity 4, cluster identity 4711 [ 312.659456][T16107] tipc: Node number set to 4 [ 312.741179][T16125] ./dev/sda1: Can't lookup blockdev [ 312.748977][T16125] overlayfs: failed to clone upperpath [ 312.755230][T16125] Invalid ELF header magic: != ELF [ 313.312668][T16147] ./dev/sda1: Can't lookup blockdev [ 314.175742][T16184] ./dev/sda1: Can't lookup blockdev [ 315.092356][T16207] ./dev/sda1: Can't lookup blockdev [ 316.630642][T16231] ./dev/sda1: Can't lookup blockdev [ 316.712313][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6964'. [ 317.998602][T16301] overlayfs: failed to clone upperpath [ 318.403056][T16306] ./dev/sda1: Can't lookup blockdev [ 318.471703][T16326] overlayfs: failed to clone upperpath [ 318.824617][T16344] ./dev/sda1: Can't lookup blockdev [ 318.863751][T16357] overlayfs: failed to clone upperpath [ 320.020684][T16387] ./dev/sda1: Can't lookup blockdev [ 320.565155][ T36] audit: type=1400 audit(1788983259.217:33828): avc: denied { create } for pid=16400 comm="syz.2.7029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 320.589145][ T36] audit: type=1400 audit(1788983259.247:33829): avc: denied { write } for pid=16400 comm="syz.2.7029" path="socket:[215832]" dev="sockfs" ino=215832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 320.620590][T16414] ./dev/sda1: Can't lookup blockdev [ 323.668354][T16497] tipc: Enabling of bearer rejected, already enabled [ 323.708688][T16510] tipc: Enabling of bearer rejected, failed to enable media [ 323.763152][T16524] tipc: Enabling of bearer rejected, already enabled [ 323.928140][T16558] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7107'. [ 325.357396][T16617] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7132'. [ 325.957601][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7159'. [ 328.022940][T16813] tipc: New replicast peer: 0.255.255.255 [ 328.028813][T16813] tipc: Enabled bearer , priority 24 [ 328.046930][T16819] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7233'. [ 328.191465][T16850] /dev/loop0: Can't lookup blockdev [ 328.236505][T16856] fuse: Bad value for 'user_id' [ 328.241471][T16856] fuse: Bad value for 'user_id' [ 328.824246][ T36] audit: type=1400 audit(1788983267.477:33830): avc: denied { nlmsg_write } for pid=16877 comm="syz.2.7261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 329.744202][T16923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7281'. [ 329.754868][T16923] tipc: Invalid UDP bearer configuration [ 329.754891][T16923] tipc: Enabling of bearer rejected, failed to enable media [ 330.009271][T16943] 9pnet_fd: Insufficient options for proto=fd [ 330.064999][T16959] tipc: Enabling of bearer rejected, already enabled [ 330.342270][ T36] audit: type=1400 audit(2000000001.479:33831): avc: denied { mounton } for pid=16991 comm="syz.3.7315" path="/2021/file0" dev="tmpfs" ino=11052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 331.007780][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7342'. [ 332.172728][T17214] overlayfs: failed to clone upperpath [ 332.250002][T17238] tmpfs: Unknown parameter '0x000000000000000401777777777777777777777' [ 332.957235][ C1] Clock: inserting leap second 23:59:60 UTC [ 334.089859][T17441] netlink: 'syz.1.7535': attribute type 12 has an invalid length. [ 334.661656][T17465] ./dev/sda1: Can't lookup blockdev [ 338.373594][T17605] overlayfs: failed to clone upperpath [ 339.835983][T17683] overlayfs: failed to clone lowerpath [ 340.875243][T17750] overlayfs: failed to clone upperpath [ 340.897908][T17752] ./dev/sda1: Can't lookup blockdev [ 340.996045][T17773] ./dev/sda1: Can't lookup blockdev [ 341.365784][T17779] fuse: Bad value for 'fd' [ 342.923113][T17892] ./dev/sda1: Can't lookup blockdev [ 343.008495][ T36] audit: type=1400 audit(1700006409.059:33832): avc: denied { ioctl } for pid=17897 comm="syz.2.7750" path="socket:[219463]" dev="sockfs" ino=219463 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.047909][T17906] netlink: 'syz.3.7753': attribute type 12 has an invalid length. [ 343.082385][T17910] ./dev/sda1: Can't lookup blockdev [ 343.228624][T17929] ./dev/sda1: Can't lookup blockdev [ 343.255784][T17933] overlayfs: failed to clone lowerpath [ 343.274035][T17937] ./dev/sda1: Can't lookup blockdev [ 343.469035][T17947] ./dev/sda1: Can't lookup blockdev [ 343.492843][T17951] tipc: Enabling of bearer rejected, failed to enable media [ 343.545885][T17961] ./dev/sda1: Can't lookup blockdev [ 343.605160][T17975] ./dev/sda1: Can't lookup blockdev [ 343.644621][T17983] ./dev/sda1: Can't lookup blockdev [ 343.690894][T17993] ./dev/sda1: Can't lookup blockdev [ 343.793236][T18004] ./dev/sda1: Can't lookup blockdev [ 345.789335][T18082] ./dev/sda1: Can't lookup blockdev [ 346.081197][T18088] ./dev/sda1: Can't lookup blockdev [ 346.142699][T18096] tipc: Enabling of bearer rejected, failed to enable media [ 346.744004][T18142] netlink: 'syz.3.7865': attribute type 4 has an invalid length. [ 346.752397][T18142] netlink: 'syz.3.7865': attribute type 4 has an invalid length. [ 347.056984][T18154] ./dev/sda1: Can't lookup blockdev [ 347.071436][T18156] ./dev/sda1: Can't lookup blockdev [ 347.227092][T18163] ./dev/sda1: Can't lookup blockdev [ 347.276542][T18178] ./dev/sda1: Can't lookup blockdev [ 348.423811][T18222] ./dev/sda1: Can't lookup blockdev [ 348.472748][T18236] overlayfs: failed to clone upperpath [ 348.680056][T18252] overlayfs: failed to clone upperpath [ 348.694239][T18254] ./dev/sda1: Can't lookup blockdev [ 348.991590][T18279] ./dev/sda1: Can't lookup blockdev [ 349.050798][T18291] ./dev/sda1: Can't lookup blockdev [ 349.063853][T18293] futex_wake_op: syz.2.7939 tries to shift op by 144; fix this program [ 349.250565][T18324] overlayfs: failed to clone upperpath [ 349.421164][T18347] overlayfs: failed to clone upperpath [ 349.468322][T18357] overlayfs: failed to clone upperpath [ 349.541779][T18361] netlink: 'syz.1.7971': attribute type 4 has an invalid length. [ 349.559096][T18363] ./dev/sda1: Can't lookup blockdev [ 349.997011][ T31] kernel read not supported for file [fscontext] (pid: 31 comm: kworker/1:0) [ 350.874548][T18418] ./dev/sda1: Can't lookup blockdev [ 351.102075][T18450] ./dev/sda1: Can't lookup blockdev [ 351.137261][T18454] ./dev/sda1: Can't lookup blockdev [ 351.165649][T18457] ./dev/sda1: Can't lookup blockdev [ 351.171650][T18458] ./dev/sda1: Can't lookup blockdev [ 351.803456][T18473] ./dev/sda1: Can't lookup blockdev [ 352.219204][T18514] overlayfs: failed to clone upperpath [ 352.251197][T18520] ./dev/sda1: Can't lookup blockdev [ 352.738862][T18529] ./dev/sda1: Can't lookup blockdev [ 352.794158][T18541] ./dev/sda1: Can't lookup blockdev [ 352.888411][T18567] ./dev/sda1: Can't lookup blockdev [ 352.903112][T18569] ./dev/sda1: Can't lookup blockdev [ 352.933253][T18575] ./dev/sda1: Can't lookup blockdev [ 353.276663][T18599] futex_wake_op: syz.4.8081 tries to shift op by 144; fix this program [ 353.385176][T18607] ./dev/sda1: Can't lookup blockdev [ 353.460076][T18622] 9pnet_fd: p9_fd_create_tcp (18622): problem connecting socket to 127.0.0.1 [ 353.893363][T18649] ./dev/sda1: Can't lookup blockdev [ 354.001249][T18655] ./dev/sda1: Can't lookup blockdev [ 354.167578][T18675] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 354.168544][T18675] @0Ù: renamed from bond_slave_1 [ 354.793503][T18699] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 354.811201][T18701] ./dev/sda1: Can't lookup blockdev [ 355.474591][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8143'. [ 355.822497][ T36] audit: type=1326 audit(1700006421.869:33833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18758 comm="syz.3.8154" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23659e159 code=0x0 [ 356.259350][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 356.636803][T18802] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 357.142489][T18822] ./dev/sda1: Can't lookup blockdev [ 357.168383][T18828] ./dev/sda1: Can't lookup blockdev [ 359.998734][ T36] audit: type=1400 audit(1700006426.049:33834): avc: denied { create } for pid=18949 comm="syz.2.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 360.262024][T18969] ./dev/sda1: Can't lookup blockdev [ 360.473929][T18975] ./dev/sda1: Can't lookup blockdev [ 360.569019][T18977] ./dev/sda1: Can't lookup blockdev [ 360.792557][T18990] ./dev/sda1: Can't lookup blockdev [ 360.803623][T18990] overlayfs: failed to clone upperpath [ 360.814260][T18990] Invalid ELF header magic: != ELF [ 360.821372][T18992] ./dev/sda1: Can't lookup blockdev [ 360.832885][T18994] ./dev/sda1: Can't lookup blockdev [ 361.016514][T19007] ./dev/sda1: Can't lookup blockdev [ 361.747332][T19032] netlink: 'syz.1.8269': attribute type 12 has an invalid length. [ 362.286792][T19070] netlink: 'syz.2.8286': attribute type 28 has an invalid length. [ 362.588502][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8304'. [ 362.755620][T19120] bpf: Bad value for 'mode' [ 363.160934][T19143] netlink: 'syz.2.8320': attribute type 29 has an invalid length. [ 364.739100][T19256] syz.2.8368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 365.054427][T19328] fuse: Bad value for 'fd' [ 365.130941][T19356] fuse: Bad value for 'rootmode' [ 365.188803][ T36] audit: type=1400 audit(1700006431.239:33835): avc: denied { getopt } for pid=19374 comm="syz.3.8413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 365.209086][ T36] audit: type=1400 audit(1700006431.259:33836): avc: denied { getattr } for pid=19374 comm="syz.3.8413" path="socket:[227834]" dev="sockfs" ino=227834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 365.338549][T19413] netlink: 'syz.3.8429': attribute type 2 has an invalid length. [ 365.354561][ T36] audit: type=1400 audit(1700006431.399:33837): avc: denied { create } for pid=19415 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 366.593184][T19488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8458'. [ 366.603283][T19488] netlink: 'syz.2.8458': attribute type 27 has an invalid length. [ 366.623324][T19488] veth1_macvtap: left promiscuous mode [ 366.629490][T19488] veth1_macvtap: entered promiscuous mode [ 366.638123][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.645211][ T13] bridge0: port 1(bridge_slave_0) entered listening state [ 366.653081][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.660152][ T13] bridge0: port 2(bridge_slave_1) entered listening state [ 366.671502][ T13] bridge0: port 3(vlan0) entered blocking state [ 366.677780][ T13] bridge0: port 3(vlan0) entered listening state [ 366.795529][ T36] audit: type=1400 audit(1700006432.839:33838): avc: denied { bpf } for pid=19504 comm="syz.1.8466" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 366.817091][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8466'. [ 367.927132][T19610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8509'. [ 367.961790][T19616] futex_wake_op: syz.1.8512 tries to shift op by -1; fix this program [ 368.094097][ T36] audit: type=1326 audit(1700006434.137:33839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19587 comm="syz.2.8500" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f799e159 code=0x7fc00000 [ 368.412399][T19629] batadv_slave_1: entered promiscuous mode [ 368.420331][T19629] fuse: Bad value for 'fd' [ 368.425752][T19629] batadv_slave_1: left promiscuous mode [ 368.572970][ T36] audit: type=1400 audit(1700006434.617:33840): avc: denied { relabelfrom } for pid=19652 comm="syz.3.8528" name="" dev="pipefs" ino=233282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 368.599000][ T36] audit: type=1401 audit(1700006434.617:33841): op=setxattr invalid_context="" [ 369.379959][ T36] audit: type=1400 audit(1700006435.427:33842): avc: denied { watch watch_reads } for pid=19713 comm="syz.2.8550" path="/2400/file0" dev="tmpfs" ino=13117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 369.734306][T19754] ./dev/sda1: Can't lookup blockdev [ 369.801693][T19765] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8570'. [ 369.856891][T19783] overlayfs: failed to clone upperpath [ 369.897816][T19792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8581'. [ 369.992928][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8589'. [ 370.767619][T19870] overlayfs: failed to clone lowerpath [ 371.058423][T19884] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8616'. [ 371.067562][T19884] gretap0: entered promiscuous mode [ 371.073633][T19884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=19884 comm=syz.3.8616 [ 371.619272][T19910] overlayfs: failed to clone upperpath [ 372.514151][T20003] tmpfs: Unknown parameter 'smackfsfloor' [ 372.833276][T20029] sit0: entered promiscuous mode [ 372.838343][T20029] netlink: 'syz.4.8681': attribute type 1 has an invalid length. [ 372.846072][T20029] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8681'. [ 373.346082][T20074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=20074 comm=syz.2.8700 [ 373.476036][T20093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8708'. [ 375.618593][T20172] overlayfs: failed to resolve './cgroup': -2 [ 375.690296][T20171] overlayfs: failed to clone upperpath [ 378.171757][T20238] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8765'. [ 379.054598][ T36] audit: type=1400 audit(1700006445.097:33843): avc: denied { create } for pid=20253 comm="syz.1.8771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.322718][T20270] bridge0: port 3(veth0_vlan) entered blocking state [ 379.329535][T20270] bridge0: port 3(veth0_vlan) entered disabled state [ 379.336259][T20270] veth0_vlan: entered allmulticast mode [ 379.342218][T20270] bridge0: port 3(veth0_vlan) entered blocking state [ 379.348923][T20270] bridge0: port 3(veth0_vlan) entered forwarding state [ 379.358747][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8777'. [ 379.368473][T20270] bridge0: port 3(veth0_vlan) entered disabled state [ 379.377304][T20270] veth0_vlan (unregistering): left allmulticast mode [ 379.384173][T20270] bridge0: port 3(veth0_vlan) entered disabled state [ 379.580818][T20283] overlayfs: failed to clone upperpath [ 379.683993][T20296] sit0: entered promiscuous mode [ 379.687702][T20297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20297 comm=syz.1.8786 [ 379.691930][T20296] netlink: 'syz.1.8786': attribute type 1 has an invalid length. [ 379.737292][T20296] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8786'. [ 379.924677][T20314] ./dev/sda1: Can't lookup blockdev [ 380.144291][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8804'. [ 380.578016][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8808'. [ 381.141107][ T36] audit: type=1326 audit(1700006447.187:33844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20401 comm="syz.3.8831" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23659e159 code=0x0 [ 381.444621][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8834'. [ 381.454176][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8834'. [ 381.484578][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8836'. [ 381.630394][T20433] ./dev/sda1: Can't lookup blockdev [ 381.726243][ T36] audit: type=1400 audit(1700006447.767:33845): avc: denied { mount } for pid=20440 comm="syz.1.8846" name="/" dev="pstore" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 381.901936][T20453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8850'. [ 381.925929][T20455] syz.1.8852(20455): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 381.989807][T20469] netlink: 'syz.3.8857': attribute type 5 has an invalid length. [ 382.177300][ C1] bridge0: port 3(vlan0) entered learning state [ 382.183685][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 382.190812][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 382.244395][ T36] audit: type=1400 audit(1700006448.287:33846): avc: denied { rename } for pid=20511 comm="syz.1.8873" name="file0" dev="tmpfs" ino=13453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.401161][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8878'. [ 382.411270][T20524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8878'. [ 382.781222][T20559] veth1: entered allmulticast mode [ 382.786763][T20559] veth1: left allmulticast mode [ 383.506336][T20617] 9pnet_fd: p9_fd_create_unix (20617): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 383.507319][T20617] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 383.608733][ T36] audit: type=1400 audit(1700006449.657:33847): avc: denied { relabelto } for pid=20616 comm="syz.1.8916" name="2474" dev="tmpfs" ino=13516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 383.635993][ T36] audit: type=1400 audit(1700006449.657:33848): avc: denied { associate } for pid=20616 comm="syz.1.8916" name="2474" dev="tmpfs" ino=13516 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 383.663875][ T36] audit: type=1400 audit(1700006449.687:33849): avc: denied { write } for pid=295 comm="syz-executor" name="2474" dev="tmpfs" ino=13516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 383.690671][ T36] audit: type=1400 audit(1700006449.687:33850): avc: denied { remove_name } for pid=295 comm="syz-executor" name="binderfs" dev="tmpfs" ino=13520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 383.718108][ T36] audit: type=1400 audit(1700006449.687:33851): avc: denied { rmdir } for pid=295 comm="syz-executor" name="2474" dev="tmpfs" ino=13516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 383.744649][ T36] audit: type=1326 audit(1700006449.687:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20620 comm="syz.1.8917" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad439e159 code=0x7ffc0000 [ 383.843132][T20630] overlayfs: failed to clone upperpath [ 383.849560][T20630] overlayfs: failed to clone upperpath [ 385.137926][T20689] fuse: Bad value for 'rootmode' [ 386.689966][T20732] netlink: 'syz.3.8955': attribute type 12 has an invalid length. [ 387.268805][T20742] erofs: dax options not supported [ 387.541068][ T36] kauditd_printk_skb: 136 callbacks suppressed [ 387.541085][ T36] audit: type=1400 audit(1700006453.587:33989): avc: denied { create } for pid=20777 comm="syz.1.8971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 388.122404][T20806] ./dev/sda1: Can't lookup blockdev [ 388.288998][ T36] audit: type=1326 audit(1700006454.337:33990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20829 comm="syz.1.8992" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ad439e159 code=0x0 [ 388.679454][T20839] netlink: 'syz.3.8995': attribute type 1 has an invalid length. [ 388.687310][T20839] netlink: 'syz.3.8995': attribute type 2 has an invalid length. [ 388.696475][T20840] netlink: 'syz.3.8995': attribute type 1 has an invalid length. [ 388.704493][T20840] netlink: 'syz.3.8995': attribute type 2 has an invalid length. [ 390.817907][T20901] ./dev/sda1: Can't lookup blockdev [ 391.059331][ T36] audit: type=1400 audit(1700006457.107:33991): avc: denied { nlmsg_read } for pid=20924 comm="syz.4.9031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 391.279771][T20940] 9pnet_fd: Insufficient options for proto=fd [ 392.244873][T21077] __nla_validate_parse: 3 callbacks suppressed [ 392.244888][T21077] netlink: 288 bytes leftover after parsing attributes in process `syz.3.9090'. [ 392.783947][T21101] veth1_to_batadv: entered allmulticast mode [ 392.791008][T21101] veth1_to_batadv: left allmulticast mode [ 393.690656][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9114'. [ 394.735183][T21215] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9143'. [ 395.171816][ T36] audit: type=1400 audit(1700006461.217:33992): avc: denied { create } for pid=21240 comm="syz.1.9150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 395.218886][ T36] audit: type=1400 audit(1700006461.267:33993): avc: denied { read } for pid=21240 comm="syz.1.9150" path="socket:[242117]" dev="sockfs" ino=242117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.006012][T21375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9193'. [ 397.015703][T21375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9193'. [ 397.537281][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.544547][ C1] bridge0: topology change detected, propagating [ 397.550998][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.558222][ C1] bridge0: topology change detected, propagating [ 397.564624][ C1] bridge0: port 3(vlan0) entered forwarding state [ 397.571073][ C1] bridge0: topology change detected, propagating [ 397.688865][T21404] ./dev/sda1: Can't lookup blockdev [ 397.718216][T21413] fuse: Bad value for 'rootmode' [ 397.719558][T21415] fuse: Bad value for 'rootmode' [ 398.588504][T21442] ./dev/sda1: Can't lookup blockdev [ 399.881217][ T36] audit: type=1400 audit(1700006465.927:33994): avc: denied { listen } for pid=21494 comm="syz.3.9241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 399.975595][T21510] netlink: 328 bytes leftover after parsing attributes in process `syz.4.9246'. [ 400.526241][T21537] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 400.581109][T21550] ./dev/sda1: Can't lookup blockdev [ 400.826116][T21568] ./dev/sda1: Can't lookup blockdev [ 400.857635][ T36] audit: type=1400 audit(1700006466.907:33995): avc: denied { mount } for pid=21574 comm="syz.1.9272" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 401.121790][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9278'. [ 401.131170][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9278'. [ 401.363637][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 401.374038][T21618] netlink: 'syz.2.9289': attribute type 1 has an invalid length. [ 401.382047][T21618] netlink: 'syz.2.9289': attribute type 2 has an invalid length. [ 401.539372][T21638] sit0: entered promiscuous mode [ 401.545902][T21638] netlink: 'syz.2.9298': attribute type 1 has an invalid length. [ 401.554228][T21638] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9298'. [ 402.198080][T21670] ./dev/sda1: Can't lookup blockdev [ 402.264496][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9318'. [ 402.289386][T21686] sit0: entered promiscuous mode [ 402.294466][T21686] netlink: 'syz.3.9320': attribute type 1 has an invalid length. [ 402.302219][T21686] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9320'. [ 403.216246][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9342'. [ 403.226554][T21740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9342'. [ 403.235638][T21740] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9342'. [ 403.244635][T21740] netlink: 'syz.3.9342': attribute type 6 has an invalid length. [ 403.252435][T21740] netlink: 'syz.3.9342': attribute type 5 has an invalid length. [ 404.570899][ T36] audit: type=1400 audit(1700006470.617:33996): avc: denied { create } for pid=21844 comm="syz.1.9383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 404.596781][ T36] audit: type=1400 audit(1700006470.617:33997): avc: denied { create } for pid=21843 comm="syz.2.9382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 405.359210][T21902] __nla_validate_parse: 5 callbacks suppressed [ 405.359233][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9405'. [ 405.431592][T21910] overlayfs: failed to clone upperpath [ 407.858275][ T36] audit: type=1400 audit(1700006473.907:33998): avc: denied { read } for pid=22019 comm="syz.1.9451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 407.969730][ T36] audit: type=1400 audit(1700006474.017:33999): avc: denied { ioctl } for pid=22019 comm="syz.1.9451" path="socket:[243324]" dev="sockfs" ino=243324 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 408.062601][T22025] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 409.368978][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9477'. [ 409.378771][T22087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22087 comm=syz.1.9477 [ 409.392441][T22087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9477'. [ 409.450064][T22087] team_slave_1: entered promiscuous mode [ 409.455736][T22087] team_slave_1: entered allmulticast mode [ 409.818603][ T1255] ------------[ cut here ]------------ [ 409.824124][ T1255] WARNING: CPU: 1 PID: 1255 at io_uring/io_uring.c:2987 io_ring_exit_work+0x3cb/0x83b [ 409.833761][ T1255] Modules linked in: [ 409.837753][ T1255] CPU: 1 UID: 0 PID: 1255 Comm: kworker/u8:27 Not tainted syzkaller #0 01d0fef691542fecbcfb5551c0a705324fcaa78c [ 409.849708][ T1255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.859801][ T1255] Workqueue: iou_exit io_ring_exit_work [ 409.865375][ T1255] RIP: 0010:io_ring_exit_work+0x3cb/0x83b [ 409.871180][ T1255] Code: 89 f5 48 8b 7c 24 40 48 8b 74 24 20 e8 3e 3b a0 04 48 85 c0 4c 8b 74 24 50 75 1d e8 ef e3 81 00 e9 a5 fd ff ff e8 e5 e3 81 00 <0f> 0b b8 70 17 00 00 48 89 44 24 20 eb c2 c7 84 24 b0 00 00 00 00 [ 409.890899][ T1255] RSP: 0018:ffffc9000d0cfb40 EFLAGS: 00010293 [ 409.896991][ T1255] RAX: ffffffff8105937b RBX: ffff88813dd18000 RCX: ffff88812ff80000 [ 409.905008][ T1255] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 409.913048][ T1255] RBP: ffffc9000d0cfc88 R08: ffffc9000d0cfa87 R09: 1ffff92001a19f50 [ 409.921059][ T1255] R10: dffffc0000000000 R11: fffff52001a19f51 R12: dffffc0000000000 [ 409.929081][ T1255] R13: 0000000100002a8a R14: ffff88813dd18010 R15: 0000000100002a8c [ 409.937069][ T1255] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 409.946130][ T1255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.952800][ T1255] CR2: 000000110c2558c3 CR3: 00000001370da000 CR4: 00000000003526b0 [ 409.960819][ T1255] Call Trace: [ 409.964109][ T1255] [ 409.967050][ T1255] ? finish_task_switch+0x139/0x770 [ 409.972423][ T1255] ? __cfi_io_ring_exit_work+0x10/0x10 [ 409.977927][ T1255] ? kick_pool+0xb9/0x540 [ 409.982354][ T1255] process_scheduled_works+0x7f4/0x1060 [ 409.988046][ T1255] worker_thread+0xc99/0x13f0 [ 409.992742][ T1255] kthread+0x2c4/0x360 [ 409.996907][ T1255] ? __cfi_worker_thread+0x10/0x10 [ 410.002065][ T1255] ? __cfi_kthread+0x10/0x10 [ 410.006663][ T1255] ret_from_fork+0x64/0xa0 [ 410.011139][ T1255] ? __cfi_kthread+0x10/0x10 [ 410.015851][ T1255] ret_from_fork_asm+0x1a/0x30 [ 410.020679][ T1255] [ 410.023698][ T1255] ---[ end trace 0000000000000000 ]---