last executing test programs: 14.136009425s ago: executing program 1 (id=2172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000046c000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="420f01c90f40730b0f01cab9f00b0000b8322a0000ba000000000f300fc7afbd4400006567450f30c744240007000000c744240260dd47fdc7442406000000000f011424420f01cac4c1e6510dbb000000b9490a00000f32", 0x58}], 0x1, 0x60, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="310300000000000000d02f1d2f"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000700)={0x1036c0, 0x58, 0x8}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0) setpriority(0x2, 0xff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="a40100001000130700000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a0004005000000000000000480002"], 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 14.135148275s ago: executing program 1 (id=2173): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0xa120) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 14.076387315s ago: executing program 1 (id=2174): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0xff97, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'silent'}}]}}) 14.076090785s ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f52}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x6c}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8a0}]}, 0x1c}}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r3, r6, &(0x7f0000000440)=0x7, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wake_unlock', 0x40000, 0x21) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000004c0)=0x1) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x248202, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7ef45c25332d4c3a15b6b4aba3f22185fdeb87ca8b408f23"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) ptrace(0x4208, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000740)={0x10000012}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40000000) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x201, &(0x7f00000009c0)={&(0x7f0000000900)=""/174, 0xae}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x54}}, 0x80) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r12, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40044) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xb4, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x93d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x66}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd600}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r14, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x28}}, 0x8dac20efe995ddf) 14.075831935s ago: executing program 1 (id=2176): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x114, &(0x7f0000000000)={{0x12, 0x1, 0x5dda519c656ff8b0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x1, 0x1, 0x8, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x6, 0x24, 0x6, 0x0, 0x0, "b5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x305c0, 0x0, 0x7, 0x24}, [@ncm={0x6, 0x24, 0x1a, 0x401, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xd}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0x9}, @mdlm_detail={0x9f, 0x24, 0x13, 0x0, "0e62d5239060397959a24509a108457aeb498687e39f13b21f47c1a251d9a99c9782daa6c9adc04f438841f5793473a643baad079e2b7c9609f926d814512ea3a5a279e33781c72d7530c5fa63c6608ae9c8d467e31d427afcfbfd2b96d995225fe3a7526ca09b9fda2f3a1d1973c2ae198bb5d67ff39f7b56f882ec6ea79f1d5126adadf3b8c03eaaa364ecbbb89fd5eabcdfd1ebfaff13c15577"}, @obex={0x5, 0x24, 0x15, 0x270}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x71, 0x1, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x4, 0xfa, 0xf1, 0x20, 0x9e}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f340000"], 0x3, [{0x36, &(0x7f00000001c0)=@string={0x36, 0x3, "12c504f8059de9939e62b789075d8d28bcb24ea38209fe3e949ac26a90c5398eb35829e0050a8d4d5aefaad1ca54a35d0c9035bd"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44a}}, {0xf4, &(0x7f0000000240)=@string={0xf4, 0x3, "0e9cae0b6029d5c8cc3478a53e7798de1c57ccc467ebda1a06dff5264be3267415a023cba8910d89e96fb2dbb86125be939514038e3c52218c6a9aaee914caef0928e6b1a0ff0be50f9608c8cdf686d3ac1429cc54c09dd47cf7ac642d3e27c4b09d83727848d35a0bbe530fa0bb5f837b72848f5d81cd715cb3c3df0bf8aff7ec33d58c7432028f6ece7e49ee52402668e48353b7e150039533e100b10927ba3fa2c978a2cf4c1ea973d9bb28c12d507e88676d213980313f05f5b136611dc5517779c4a1cc0a9176c3a357c08cfad778c8c60df2a764190bd413a535b1600ba0f6c393ec8fefd16e3d2e1cd399530b3793"}}]}) 13.548344918s ago: executing program 1 (id=2186): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.097096908s ago: executing program 0 (id=2219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) inotify_init1(0x400) write(r4, &(0x7f0000000000)='3', 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2000c2, 0x3c) r5 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="080000001d00db6e2cbd7000ffdbdf250a0010000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="71ea53d8ebfcaaaaaaaaaabb8100000008004556007800650000821190787f000000e00000014e224e1f00649078020000000100000008000000c4a1b8e01aa9a62c1c2e41f577a8d851045ef41945f383ccf17c931e9bdd7df2960200000000000020e612cf41970f3f00855f5dc8025460287d5461246a68a5ad0103ce305267f066ea89cf5fc128045dc96f64d4747d96bcdd70533ca4e0c27cff124f5b2e8ed0eb979339d75c3c16435f82ab8062c566eaeb04053d824ca2b8e0bbedb2bdf28e1fb29060c9a974d087b4b97dfd221f429a"], 0x8a) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x93786b3529a1dbe6}, 0xc0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r10, 0x9204, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x48854) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000040)='9\x00\x00\x00', 0x4}], 0x1) 7.096664678s ago: executing program 2 (id=2220): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x3c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc0000150025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 7.096237918s ago: executing program 3 (id=2221): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x1, 0x0, 0x0, 0x4d, 0x80, 0x1, 0x4, 0x7, 0x3, 0x4, 'syz0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000002, 0x0, 0x1}]}) 5.906446085s ago: executing program 0 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x40800) clock_adjtime(0xffffffd3, &(0x7f0000000180)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x101, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000010c0)={&(0x7f0000000fc0), 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 5.905827295s ago: executing program 2 (id=2223): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, 0x0) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000780)={0x0, &(0x7f00000007c0)=[@enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}], 0x30}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfff]}, 0x8, 0x800) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r8}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) syz_ublk_setup_queues(r12, r9, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x1bf, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) ftruncate(r0, 0xffff) 5.905659825s ago: executing program 3 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x1000, &(0x7f0000ff8000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@svm={0x1, 0x1, 0x1080, {0xc000}, {"572b5575380ac346d7d417dae0c381d6d9a4c5e7ac101489c425349116001dc9b32533b9aee490ea30e9b80aad3645a7480b2bdd84e5af792b1d44f55aeb96e07b735850fb5c95026b552ff4324989473c024cf9638dd385c28648cc11c43bdf2f0dc8f6f8e39d9fbc695fd3f5c612d2a9b4663e89b58a05031d62b846d45985c4b4ee21c2bd7885b77af61f19510368cfc465d9be4a903b240c72951c8ccca3ec12e3bf198d3602613c899f08d33c27664b82a55b080e76e8028b0ff91f64066b162f489fd44dcacb2dbb4ffeebcc37b87d8c230f18392317a6c6c784c30a109484af76bf9e273d787cf0e29d5af060048bdc5f75e7ab17b7a67f25629148cb7d2263197491fa937ac1436a7a5753df7f6e6a6b0f7b021655cd122cc54b618f30d2dd9fb55a3cfa1c2cc76bb28f9c41fd4605ba69ad3f3cc0f3b27e14a131f8f7c3b8a7743ebd75e60329c4584ac4157f45769ac540dacbd1a11c60612e7f99344f0da1ea2c66cbc9a91166bf2f292381c7c374d6da302fb4b248253901fceb4613ceb5abf762474ea5eb5edfe83d9ea0e0fc544efad99681a68594742fe029aeb5c7a978b8fa5e460e6ecdffb2379873a150ec4c6de31518fb1879fada2e0b7f16c94b86a0ebd75ce18061e25454f95ded47846151f962ddeb0df1e1f72cc8b6fd8e627e15c466e22ecf01dad956515c97ab342c8fd4d2159e663ad56ed9befe2db8e7bc24ccf9a57c20ecdb1802ad3f0279c7c58a1af71af36e49f1da323a17e0f57a3d5505c04cda8f6cabcfb8b4b9b479760d31f11ebe3422f080c88809f897c81448bae0ee42fff0582fb8d7ab06c5c02609a79dac37f5322e54c7c61b40d4bbafa48986b29fe97bfc23e204593ef937bab2feb62bf1fe3a2867ddf8dd49b580725866c561186cbcf65b7fa845f671f1539a5a718d65929a454a75c8b812f930f7b0e4fc45ebb19ab8ddfd761c2bfaae2a364b3dbce58eda80923a9166a53c9848cfea0ca07f77ce0d400dacd8bfe554530110a5eff5be9ac7353cda19ad4b0f0942d9d6b1dcd40b2742e55ffb8d1cd64cad0e50e87254c3ec8da77c42644056c4c26392350f9e3d6f0e12953f0a81d214f0ca9bb5fc308c190b401f6ec46e4a199c1254e625d5426c34bd12eab7a303059277781d6612a11430b6df4d38682a3814356e699baf16bf4b71298c95d5f73efbf4d19794c22453e9778354ce69df34b7033b176d7a60ac86a7a7458aab3fca2aa79fdb80b11541478472342b1b99ed15eff9d257b869edb7031ef6234e6fea1f98a38555cbebd1978d78a008af19659158d057918e57f3900e8a47fe8994f6388bafcee60711fbe75d96ab6c399c98579d160766f6f49aafbb5d132e69b06e220019c152c89d080e3cf8f3ec8e9a004b6358f494e11d79af73db7bf9a99f5d031b70585762687f56230e0db154c54f05a76c97f6e021c29ec43ff0e4b42da331a578aa30271838493d1e1555d3cd58b4dba2f7967c926e6d60397c5c0bf3ac6a967432d133c623646086c8e74606821a56dd5a4b36147ced86083ce4e39d56c8e907830702eaec2d242f27b94dbdb463c8ed7713b5af006bec25c2564731a4bfd1fb550adcc35187b8e1be267f257d203067ecb60f1ec11000382ce8a492a61e060db70679a9eab63f0c178dec62b8a40086e68545231a896e387f66c9d5230d2e04074dc3bcabba5629ca1cba38387fbe3e4eb7620435deebb6d5a5a3f34e970dc80705a11e5b77a898a7c8afdc09d5e861322e0fbef888b782ef65dde1355abcf1bd872f2667ee772ced742aa1504100605b09f21b467ccd3f3a085f7ffc9a43635226d161b3fc302be52c7cfcfd8e3e46f722ff355845f615defaaa26ce695acb97b63043c7ab487ae6c76b15358641475106dc5a0909c45b14e5be93b3916b3e4faf0f22a1246ac96c7c3ba860ba5a1e17224571f8fec36339a88b62ad7ffe7de9a79fcebb408a5be931a161ceb613b7212b4d48f70f99a399622a85b8f5984dceff58234e77f04d719512dca7db8d70a9661d39f45be0cba1ed842b5eac76971ba9a9990d920dc306e945fd8c2649467281ad704253619cb4765b8562e01f9abe00cda34bb95120e1f13e91083d90df20c06f8ed55e969ebcf53899fba2786db6fd1ae0558500588a9e7f43738e2a13824bde22b77678be2b760821d9dcf1ce47631bee02a31379ac73a4f8d699b04ac9481b6b106f5a435a4fddea1ffda8ff98bfbf0844953ee9016c95aa7131c14e5f78d4aaf23b86c3739067c91951f6999eb36f5cb12c18d20c68ab0d985bfe033530d1d1c166635aad20a9ded90532054f3f3b7eba351dd8b90c75e4168921f514663a0e3c1b7a07b7f4254ecb642b468954f271ad5895628bdf68ada00ed2f3990413d510d5802c31553369a590e31177ab500a67188b0784efaa388e279aedabd058aa04f9b7d01a4e1aeabd5e229e514e45fef7fb3520c3349bd9a592480b50cd1e8eb44cf27d098683e5af0f4b47e69a695945146bad2ca858f03efc285ff3fc213569c4be7fbe5474a251a192326145088add0d9f43dae5af41a1981a4086a96850ccee5ae81e5067f290e462b84f6a6777e3b908010b0a2be7bf075fda2ea87eb891fb182e4fdf4ecb042d227fd58e9f3b98696774379e31b80b19b152a391ceb5d87f6c52da6ce8a7a7dbbf5029079185cdf1924987291ca76d174c2a284f7494c4b14afbd36333444d7054b8ac45a901ba849560cf230a5bd40dab7c4c65affb7a71b4a9474a721c3e0b4d22a3a826b4f97b9eeca96cfd9323ffaefb33bd1c49092a7cc4b0105258b78ca584954b9f14eb8f54a002bbafe9a0d11543ca9e963d0e909ece82edb953ce3ee0170ba9f06d06a59964121b632bc03d7ff4ae04d35db525e00d9bb0d4b79cb49444089d952ec77787c569045201c99ae804b30fb64bdd3fa954b9366a1122c032d840534db40a1e0e3cda5ce1702f20c48278bff93dd67958c4f744a42789377516d84988d33e9253a3ccce22c15a2f41a5cab4b156b1102892ea40bf0b94fce8f9b6be7fd159ecf819c67e65bf41582589994573a2f42835ed9865133ca41517e5eae758b92a029b4c67690da4750fbfb43180ef9c3d404809f036ec23accaa74a2fbbc160289243c012f2580b783c0e83527479e81b5dd54c0d534bd7985605fe3a6f3bd77e260335d126f468e1d982b9eacf5adc2f65970c9527097b4dcb179e98bc0f4395a3f32aaeeb9b5962a032791b1e7e014286d2cbba458508bba44ef79fff0e3a76402d64fd45e962de36a23f1461479a287e48a11383ee0f5feb383952f90ead46125f6c88550f10a46acc83a65fe20200fd9b18c25d41917f7b68ab1ce1193f524226846d5034e223b2976813f97ef298fd1212f741717363ec61a3ebd33e8e6351530278998161a3ae3d6ea21e0e4bbfb3d517692d71f5a3a31075f400bd565bfd2941f7c34cd34304f0468d68a0e9b44230ea2bb53512d2988e9542d1bc8706a4b47fa822eff83c5e1d4adbfe719ae095e51d2dfa9a00e6378d388be4f947d9aea65d752afab8efe4812d4daf03ff88c921d798046a42d936922fff94d11461c5c6662f9f83de88f948630447b789b5494d3a742008d965b0c3d52242d3777ce1737b38b8d8a8086aa082b4bc481765f205dd754f9ea1ef83bb378bb475332a7d1f4a5dc26d8fe0742f03d7e9361c3ee5e0e25a41a9de4f8481d72d97cce9a79a61ae34258802ceff6f16afef3fce64324fc2344108d097b7f69f05a92846691fc27b1649423a0d4bf115b2a11e1bcd0da50d39e2aba321d6877dc2f0d21969ceefaf734a9ea11568268835ed3d93cfb3c121859bebd50bb81bc88f153cdf7b08e5fdb94d778f42143e5949f4276e982e379fbf682d83f52557d3085acfca86d8aeab9c93badc580cc0267efe86ee6f0e9b3fc289669fce06ca6c15a5682d0223158941a6a9e05199eac3afef300e54a9cfb79c1cc22fa82f44771fc5a8e01cf80a5f2dcc2b8016743416499b2aeed4522d81cf848f71ff0d68daf1ef93c73e6928d60369b8807a723da507e690a598c189b472673ebb5bf713c7bfe62dcbbf31108fcef59b0c7f81fd9df5ab980f707a661cf3b92e44a71df60f16be2ab50f91974d071ea4e60739f70a004d4450c4b1c1d5ff0558a1264685440ec04e652e2d7a2e6248f34f0eee592ddda5f3d31605e6b10cb5dc1d1c7e13426a4e2d8fd5f6372f72b97e0e87a2212ec20e07d4dc8d1adc3f2ac1da7ca3b7292c88828bc0ec31af3941c9d0323294faf117a68f7d5bef17d90d885e806982b4263b55e2eb995092030e5ca9a3be4d57d5b68f1d70320e413f77b97b79df2f2d946c7736b3092978d98b15ff8dc67a1f75906088750116375ac7cc12b8a4adbffa43e3049c7bafa3abc93d7e56803bb68af5ef1c905f40c1da6eac91b60da13c39d8faf26b5f27b954f545c6b4a35b170f7770e2150c6c84afd7cf00bc42571fdfc92215f1e4f59fd4cc6237ae479faacc5ed68fa8146f0c9ca6c0936ac27183bf76806ecee4fc1f986c953916564a5c2d44dc8d4b0f10d5700c2642d390c686c5a98e9b6d78b31ad795b8ab1c8c95c232a91c91c225b86c717a8a15c67d4126d8ea5471f49e0831268164cf256eb869ca4ba4509966fa6a92e4e4eba7bab056eac430105d6d0a636277af9ec6a6f1b7a264cf2596adbad52eeee46762bf86dc6c11950a255530c78fb606fb8fb7387921bcda0f64eaa8e8e0070f0a25e599837a455ae66024acb3cb15a4251e79ca2bbe8131521338ba722c12690b8520ec505cf223f13fa6e98268834efd2ba1d0512c6ae64f9b3b16c4d51725eef6f81b7addb7578cdb1f6c9951db58e674f158a0bb0ab7f7681e65c523633e61451722919a5f2514f9d1ea737654263a05a7687869501b193057996e86d627f030291d09435b109cbe5b9edeca0b18a6c4d12dbc325eb9ff15d394a7d406d960c8139cab805d5f2b235972c08b1560924ebd8842741c3b1822b67408367e238b16aab2c72919b0d27e13945cb28534f3d900e88dfcde974715441f17193f94cb1cd9e95b05d0f4a41bcedc2c8eacfc6c0984ed49ea74e6719840326ff15090839f46e16501a3489afc969ae229a9d8423db9df8b9a20d4d842503b85c15373248ea12ef16713641deb63cbbd8188bc0dc9d277c106eb0f93244de728f921ffc7dd5ace65bea3a09a58c5b3f050ea17b3b47018910a3d40cd8ef257c7611dee108a22b053e49e0f547218c1108f60e194e280cdac86897bb6743992c5e122e6dc47a7e4a250634286785811ed64cc9ddc948c402d80b43e26a92bdf4eb59a0cd4e81bf10d855573aae30b736873363d88a867bd680956ed084093660f664ba9cb54c04047b8f48a09fd1fd50c74ccb839e16007e00c06a7fbe18ee80468d9c80883a087ad378b7904bfc85ff6add1eab158b19c1c052261b6cad43b4da618c1c3e94baac5333ee5da10a17158f05620b6f157b0abb0a6f4e101f6002cc70e957ffced10ca4fcb3132454db49efc70f239ca7f59d1553638fbcaa638f9ab66f01ecc50afe4d39cf635e8541577de001d8e7f16d3ef2298b2058501ad93f760f53c984df492d66524a1f13aa522dc05430d89544d6ed415f1228c2c8aee22f86c67b5cfd1299fa97bbb5c5dbcfa49301f117d18f9100c37b3dec18f1ce60589ba94d4af061de5d841194515c4302a0d8081c541bcad183d4cdbc948d096cbb19883a0caf958c82f6be6d92a06dc63"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.556392947s ago: executing program 0 (id=2225): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000600)="fc00fc001a000700ab092500090007000aab0700a90100001d60369321000300ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 4.556143476s ago: executing program 2 (id=2226): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000200", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.555928477s ago: executing program 3 (id=2227): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) socket(0x1, 0x2, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002000), 0x800, 0x0) preadv2(r2, &(0x7f0000003240)=[{&(0x7f0000003080)=""/143, 0x8f}, {&(0x7f0000003140)=""/125, 0x7d}], 0x2, 0x5, 0x401, 0x6) syz_kvm_add_vcpu$x86(r1, &(0x7f0000000800)={0x0, &(0x7f0000000480)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest32=0x480e, 0x7fffffffffffffff, 0x7fffffff}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @wrmsr={0x65, 0x20, {0x986, 0x8}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x9150}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x9291, 0x0, 0xefb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_syzos={0x136, 0xf3, {0x0, 0x4, [@out_dx={0x6a, 0x28, {0xe2ae, 0x4, 0xd}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_code={0x12e, 0x83, {0x3, "66baf80cb8b37b8683ef66bafc0cec48b83a000000000000000f23d80f21f835800000c00f23f866baf80cb86c49d287ef66bafc0cb00beec4837917cb7bc4627d137f0f66b898008ec066baf80cb86e75e98eef66bafc0c66b8239b66ef470f01c8460f200564360f01cb"}}, @nested_amd_stgi={0x17e, 0x10}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x94, 0x5, 0x0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x17, 0x3, 0x9, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x6, 0x1}}, @out_dx={0x6a, 0x28, {0xec7e, 0x1, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @set_irq_handler={0xc8, 0x20, {0x3d}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x373}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000080)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 3.19110694s ago: executing program 0 (id=2228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="d036"], 0x8) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x706f, 0x0, 0x2, 0x23e}, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) sync() 3.19087816s ago: executing program 2 (id=2229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x100000b, 0x12, r1, 0xffffc000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000249000/0x2000)=nil, &(0x7f0000059000/0x4000)=nil, 0x2000}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0xa3, &(0x7f0000000040)={0x80042, 0x1}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/manufacturer\x00', 0x0, 0x0) read(r7, &(0x7f0000000100)=""/128, 0x80) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x453, 0x800, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2404c884}, 0x4040) syz_usb_connect(0x4, 0x39, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYBLOB="3e88e88ca1d1b0aeb4d5aeb6051630e74a49718d57c502e1b24830153c5ccf87176ba9fb225c9a9529812dd2129071c4067f95f3d0c11b3fe5504ba53096dbf98a2d723591a7b40727757aabaeae9d22cf8cb4bf88c56359636918a4d10ae2156a56f7c58a"], 0x0) 3.19069542s ago: executing program 3 (id=2230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) inotify_init1(0x400) write(r4, &(0x7f0000000000)='3', 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2000c2, 0x3c) r5 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="080000001d00db6e2cbd7000ffdbdf250a0010000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="71ea53d8ebfcaaaaaaaaaabb8100000008004556007800650000821190787f000000e00000014e224e1f00649078020000000100000008000000c4a1b8e01aa9a62c1c2e41f577a8d851045ef41945f383ccf17c931e9bdd7df2960200000000000020e612cf41970f3f00855f5dc8025460287d5461246a68a5ad0103ce305267f066ea89cf5fc128045dc96f64d4747d96bcdd70533ca4e0c27cff124f5b2e8ed0eb979339d75c3c16435f82ab8062c566eaeb04053d824ca2b8e0bbedb2bdf28e1fb29060c9a974d087b4b97dfd221f429a"], 0x8a) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x93786b3529a1dbe6}, 0xc0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r10, 0x9204, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x48854) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000040)='9\x00\x00\x00', 0x4}], 0x1) 1.66445824s ago: executing program 0 (id=2231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) fcntl$lock(r0, 0x26, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x1d8, 0xfffffffffffffffd) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64$ublk_ch(r3, &(0x7f0000001580), 0x1000, 0xc1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x9, &(0x7f0000000040)={0x10, 0xffff, 0x6}) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000040)=""/30) 1.66002198s ago: executing program 2 (id=2232): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000280)={0x30, r1, 0x301, 0x0, 0x0, {0x4e}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9f4c7000) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r2 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x706f, 0x0, 0x2, 0x23e}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x100000) r4 = openat(r3, &(0x7f0000000080)='./file7\x00', 0x50082, 0x40) pwritev2(r4, &(0x7f0000002a80)=[{&(0x7f0000000140)="ef80d8b109", 0x5}], 0x1, 0x9, 0x65, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x7f812000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000340), 0xb, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)=0xfffffffd, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000940)={{r2}, r6, 0x8, @inherit={0x60, &(0x7f00000008c0)={0x0, 0x3, 0x9, 0x76, {0x20, 0x3e, 0x9, 0x80000001, 0x2}, [0x5, 0x5, 0x0]}}, @subvolid=0x200}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x5, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x7, 0x1, 0xeb, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0x3, 0x3, 0x20101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x10001, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x2, 0x8, 0x9, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x76, 0x2, 0x8, 0x3, 0xa, 0x40, 0x4, 0x4, 0x1, 0x0, 0x6, 0x8001, 0x7, 0x5a6, 0x3, 0x9, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8244, 0x9, 0xacf, 0xedb, 0xe772, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x5, 0x10006, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x6, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0x1, 0x8, 0x3ff, 0x2, 0x0, 0x8001, 0x33, 0x5, 0x0, 0x6, 0xaf, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x2, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xffffffff, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x1, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x400008, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0xfffffff9, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x9, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffefff, 0x5, 0xb]}, 0x45c) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) fadvise64(r5, 0xfffffffffffffffd, 0xffff, 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) 1.65895813s ago: executing program 3 (id=2233): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0xa120) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, 0x0, 0x1, 0x0, 0x0) 5.79232ms ago: executing program 0 (id=2234): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/63, 0x37}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000002580)=""/4065, 0xff1}, {&(0x7f0000000380)=""/109}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x400021c, 0x40012002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000000280)=0xc) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) (async) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0xa, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x2006011d) 4.98626ms ago: executing program 2 (id=2235): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket(0xa, 0x3, 0x3a) (async) r1 = socket(0xa, 0x3, 0x3a) connect$tipc(r1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x1ff, 0x33ba8, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c) ioctl$TCFLSH(r0, 0x400455c8, 0x2000000000000004) 0s ago: executing program 3 (id=2236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) close(0x3) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) kernel console output (not intermixed with test programs): invalid descriptor of length 0, skipping remainder of the config [ 94.316600][ T498] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.327893][ T498] usb 4-1: string descriptor 0 read error: -22 [ 94.334146][ T498] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 94.343409][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.358160][ T498] usb 4-1: selecting invalid altsetting 1 [ 94.364266][ T498] usb 4-1: unit 6 not found! [ 94.386528][ T36] audit: type=1400 audit(1790964449.200:272): avc: denied { watch } for pid=2269 comm="syz.2.675" path="/134" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 94.758092][ T2300] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.286483][ T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 95.364948][ T498] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.377924][ T1781] udevd[1781]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.395443][ T498] usb 4-1: USB disconnect, device number 20 [ 95.396543][ T310] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 95.436499][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 95.444869][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.454358][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.467200][ T46] usb 2-1: Product: syz [ 95.471552][ T46] usb 2-1: Manufacturer: syz [ 95.476195][ T46] usb 2-1: SerialNumber: syz [ 95.576813][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 95.583136][ T310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.590943][ T310] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 95.602592][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.615759][ T310] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.627790][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.639170][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.650899][ T310] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 95.664865][ T310] usb 3-1: config 168 interface 0 has no altsetting 0 [ 95.672569][ T310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.680144][ T310] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 95.691472][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.703525][ T310] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.704102][ T46] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.716539][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.723655][ T46] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.734469][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.752128][ T310] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 95.755054][ T46] usb 2-1: USB disconnect, device number 20 [ 95.771676][ T310] usb 3-1: config 168 interface 0 has no altsetting 0 [ 95.787646][ T310] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.797088][ T310] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 95.800394][ T1781] udevd[1781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.809290][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.837553][ T310] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.849715][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.861183][ T310] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.872865][ T310] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 95.895139][ T310] usb 3-1: config 168 interface 0 has no altsetting 0 [ 95.904254][ T310] usb 3-1: string descriptor 0 read error: -22 [ 95.910676][ T310] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.920047][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.140088][ T339] usb 3-1: USB disconnect, device number 19 [ 96.420424][ T2390] tipc: Enabling of bearer rejected, failed to enable media [ 96.446539][ T46] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 96.536586][ T498] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 96.597793][ T46] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.609134][ T46] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.622045][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.628724][ T46] usb 1-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 96.637987][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.647070][ T46] usb 1-1: config 0 descriptor?? [ 96.699049][ T498] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.708316][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.716379][ T498] usb 4-1: Product: syz [ 96.720975][ T498] usb 4-1: Manufacturer: syz [ 96.725636][ T498] usb 4-1: SerialNumber: syz [ 96.731550][ T498] usb 4-1: config 0 descriptor?? [ 96.876289][ T2413] FAULT_INJECTION: forcing a failure. [ 96.876289][ T2413] name failslab, interval 1, probability 0, space 0, times 0 [ 96.889329][ T2413] CPU: 1 UID: 0 PID: 2413 Comm: syz.2.730 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 96.889375][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.889391][ T2413] Call Trace: [ 96.889400][ T2413] [ 96.889409][ T2413] __dump_stack+0x21/0x30 [ 96.889453][ T2413] dump_stack_lvl+0x140/0x1c0 [ 96.889489][ T2413] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.889527][ T2413] ? kasan_save_alloc_info+0x3a/0x50 [ 96.889552][ T2413] dump_stack+0x19/0x20 [ 96.889586][ T2413] should_fail_ex+0x3c2/0x510 [ 96.889617][ T2413] should_failslab+0xac/0x100 [ 96.889650][ T2413] __kmalloc_cache_noprof+0x41/0x470 [ 96.889678][ T2413] ? file_init_path+0x3b/0x590 [ 96.889712][ T2413] ? io_uring_alloc_task_context+0xbe/0x6b0 [ 96.889739][ T2413] ? __asan_memcpy+0x5a/0x80 [ 96.889765][ T2413] io_uring_alloc_task_context+0xbe/0x6b0 [ 96.889792][ T2413] ? alloc_file_pseudo+0x191/0x1f0 [ 96.889827][ T2413] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 96.889854][ T2413] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 96.889889][ T2413] ? anon_inode_make_secure_inode+0xf5/0x150 [ 96.889928][ T2413] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 96.889968][ T2413] __io_uring_add_tctx_node+0x324/0x590 [ 96.890002][ T2413] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 96.890035][ T2413] ? anon_inode_create_getfile+0x3f/0x50 [ 96.890072][ T2413] io_uring_create+0xc78/0x13f0 [ 96.890099][ T2413] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 96.890136][ T2413] ? __se_sys_futex+0x13c/0x320 [ 96.890171][ T2413] ? __x64_sys_io_uring_setup+0x80/0x80 [ 96.890222][ T2413] ? __kasan_check_write+0x18/0x20 [ 96.890249][ T2413] __x64_sys_io_uring_setup+0x5f/0x80 [ 96.890287][ T2413] x64_sys_call+0x22c0/0x2ee0 [ 96.890312][ T2413] do_syscall_64+0x57/0xf0 [ 96.890338][ T2413] ? clear_bhb_loop+0x50/0xa0 [ 96.890372][ T2413] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.890405][ T2413] RIP: 0033:0x7fa7f4d9e159 [ 96.890426][ T2413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.890448][ T2413] RSP: 002b:00007fa7f5cb9fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 96.890475][ T2413] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007fa7f4d9e159 [ 96.890494][ T2413] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000efe [ 96.890511][ T2413] RBP: 00007fa7f4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 96.890528][ T2413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.890544][ T2413] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc5205e148 [ 96.890565][ T2413] [ 97.165235][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.172311][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.182595][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.189795][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.197188][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.204277][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.212729][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.219995][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.227127][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.234151][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.241408][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.249850][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.256893][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.263917][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.270954][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.278023][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.285241][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.292542][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.299689][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.306739][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.313775][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.320816][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.327943][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.334958][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.342001][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.349028][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.356312][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.366123][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.373201][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.380446][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.387760][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.394776][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.401855][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.408999][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.416010][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.423110][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.430213][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.437283][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.440702][ T2421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 97.444283][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.469137][ T46] lenovo 0003:04B3:3105.0019: unknown main item tag 0x0 [ 97.477577][ T46] lenovo 0003:04B3:3105.0019: hidraw0: USB HID v17.00 Device [HID 04b3:3105] on usb-dummy_hcd.0-1/input0 [ 97.498524][ T46] usb 1-1: USB disconnect, device number 17 [ 97.876526][ T339] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 98.027625][ T339] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 98.035927][ T339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.046339][ T339] usb 3-1: config 0 has no interface number 0 [ 98.053856][ T339] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6213, setting to 64 [ 98.072351][ T339] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.093848][ T339] usb 3-1: config 0 interface 52 has no altsetting 0 [ 98.102634][ T339] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 98.112149][ T339] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 98.120812][ T339] usb 3-1: Product: syz [ 98.125107][ T339] usb 3-1: Manufacturer: syz [ 98.130084][ T339] usb 3-1: SerialNumber: syz [ 98.135726][ T339] usb 3-1: config 0 descriptor?? [ 98.290333][ T36] audit: type=1400 audit(1790964453.110:273): avc: denied { ioctl } for pid=2471 comm="syz.0.751" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.316566][ T2472] input: syz1 as /devices/virtual/input/input17 [ 98.776530][ T310] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 98.946476][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 98.957262][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 98.968411][ T310] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 98.986906][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 98.996198][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.004806][ T310] usb 1-1: Product: syz [ 99.009333][ T310] usb 1-1: Manufacturer: syz [ 99.014114][ T310] usb 1-1: SerialNumber: syz [ 99.022875][ T2478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 99.243878][ T310] usb 1-1: USB disconnect, device number 18 [ 99.268088][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.314605][ T10] usb 4-1: USB disconnect, device number 21 [ 99.544095][ T2501] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.761'. [ 99.986511][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 100.136475][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 100.142998][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 100.154266][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 100.163474][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.175464][ T10] usb 1-1: config 0 descriptor?? [ 100.385220][ T10] usb 1-1: USB disconnect, device number 19 [ 100.654804][ T10] usb 3-1: USB disconnect, device number 20 [ 101.066499][ T310] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 101.238871][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.262431][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.282190][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.295284][ T310] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.304442][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.316684][ T310] usb 2-1: config 0 descriptor?? [ 101.496504][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 101.647613][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.658622][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 101.671498][ T10] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 101.680678][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.688820][ T10] usb 1-1: Product: syz [ 101.693044][ T10] usb 1-1: Manufacturer: syz [ 101.697885][ T10] usb 1-1: SerialNumber: syz [ 101.706596][ T2564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.726006][ T310] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 101.740467][ T310] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 101.886523][ T498] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 101.916885][ T46] usb 1-1: USB disconnect, device number 20 [ 102.036494][ T498] usb 4-1: Using ep0 maxpacket: 16 [ 102.042884][ T498] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 102.053994][ T498] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 102.063773][ T498] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.071847][ T498] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 102.081010][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.089475][ T498] usb 4-1: Product: syz [ 102.093701][ T498] usb 4-1: Manufacturer: syz [ 102.098403][ T498] usb 4-1: SerialNumber: syz [ 102.103762][ T498] usb 4-1: config 0 descriptor?? [ 102.176477][ T310] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 102.313604][ T498] usb 4-1: USB disconnect, device number 22 [ 102.327671][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.337872][ T310] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.346989][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.355988][ T310] usb 3-1: config 0 descriptor?? [ 102.881285][ T2600] kvm: MWAIT instruction emulated as NOP! [ 103.758535][ T2622] kvm: kvm [2621]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 103.768974][ T2622] kvm: kvm [2621]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 103.806928][ T339] usb 2-1: USB disconnect, device number 21 [ 104.036526][ T310] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 104.217644][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.228242][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.237307][ T310] usb 1-1: New USB device found, idVendor=0415, idProduct=3010, bcdDevice= 1.00 [ 104.246451][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.267161][ T310] usb 1-1: 0:1 : does not exist [ 104.346512][ T339] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 104.476390][ T46] usb 1-1: USB disconnect, device number 21 [ 104.496482][ T339] usb 4-1: Using ep0 maxpacket: 16 [ 104.503195][ T339] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 104.511447][ T498] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 104.519145][ T339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.529650][ T339] usb 4-1: config 0 has no interface number 0 [ 104.535820][ T339] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 104.545876][ T339] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.555904][ T339] usb 4-1: config 0 interface 98 has no altsetting 0 [ 104.564099][ T339] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 104.573281][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.581342][ T339] usb 4-1: Product: syz [ 104.585542][ T339] usb 4-1: Manufacturer: syz [ 104.590230][ T339] usb 4-1: SerialNumber: syz [ 104.595592][ T339] usb 4-1: config 0 descriptor?? [ 104.601014][ T2632] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 104.608308][ T2632] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 104.686477][ T498] usb 2-1: Using ep0 maxpacket: 8 [ 104.693945][ T498] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.703107][ T498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.711235][ T498] usb 2-1: Product: syz [ 104.715504][ T498] usb 2-1: Manufacturer: syz [ 104.720579][ T498] usb 2-1: SerialNumber: syz [ 104.726196][ T498] usb 2-1: config 0 descriptor?? [ 104.817076][ T2632] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 104.824408][ T2632] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 104.942874][ T498] usb 3-1: USB disconnect, device number 21 [ 104.958866][ T36] audit: type=1400 audit(1790964459.780:274): avc: denied { write } for pid=2635 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.036731][ T2645] FAULT_INJECTION: forcing a failure. [ 105.036731][ T2645] name failslab, interval 1, probability 0, space 0, times 0 [ 105.049484][ T2645] CPU: 0 UID: 0 PID: 2645 Comm: syz.2.817 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 105.049524][ T2645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.049542][ T2645] Call Trace: [ 105.049550][ T2645] [ 105.049561][ T2645] __dump_stack+0x21/0x30 [ 105.049602][ T2645] dump_stack_lvl+0x140/0x1c0 [ 105.049637][ T2645] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.049673][ T2645] dump_stack+0x19/0x20 [ 105.049707][ T2645] should_fail_ex+0x3c2/0x510 [ 105.049739][ T2645] should_failslab+0xac/0x100 [ 105.049770][ T2645] __kmalloc_cache_noprof+0x41/0x470 [ 105.049797][ T2645] ? __list_lru_init+0xc0/0x480 [ 105.049828][ T2645] __list_lru_init+0xc0/0x480 [ 105.049858][ T2645] alloc_super+0x77e/0x950 [ 105.049893][ T2645] sget_fc+0x325/0xa70 [ 105.049926][ T2645] ? __cfi_set_anon_super_fc+0x10/0x10 [ 105.049951][ T2645] ? __cfi_proc_fill_super+0x10/0x10 [ 105.049981][ T2645] get_tree_nodev+0x2e/0x170 [ 105.050012][ T2645] ? proc_get_tree+0x11/0x30 [ 105.050038][ T2645] proc_get_tree+0x20/0x30 [ 105.050063][ T2645] vfs_get_tree+0x9e/0x290 [ 105.050088][ T2645] do_new_mount+0x251/0xb40 [ 105.050115][ T2645] ? security_capable+0x44/0x130 [ 105.050146][ T2645] path_mount+0x66a/0xff0 [ 105.050170][ T2645] ? putname+0x113/0x150 [ 105.050198][ T2645] __se_sys_mount+0x2bf/0x480 [ 105.050226][ T2645] ? __x64_sys_mount+0xf0/0xf0 [ 105.050254][ T2645] ? __kasan_check_write+0x18/0x20 [ 105.050278][ T2645] ? fpregs_restore_userregs+0x11c/0x260 [ 105.050310][ T2645] __x64_sys_mount+0xc3/0xf0 [ 105.050337][ T2645] x64_sys_call+0x2021/0x2ee0 [ 105.050360][ T2645] do_syscall_64+0x57/0xf0 [ 105.050385][ T2645] ? clear_bhb_loop+0x50/0xa0 [ 105.050419][ T2645] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.050450][ T2645] RIP: 0033:0x7fa7f4d9e159 [ 105.050472][ T2645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.050493][ T2645] RSP: 002b:00007fa7f5cba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.050522][ T2645] RAX: ffffffffffffffda RBX: 00007fa7f5025fa0 RCX: 00007fa7f4d9e159 [ 105.050541][ T2645] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 105.050559][ T2645] RBP: 00007fa7f4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 105.050575][ T2645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.050590][ T2645] R13: 00007fa7f5026038 R14: 00007fa7f5025fa0 R15: 00007ffc5205e148 [ 105.050613][ T2645] [ 105.344681][ T2648] kvm: kvm [2647]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 105.353599][ T2648] kvm: kvm [2647]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 105.437515][ T339] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 105.460130][ T339] asix 4-1:0.98: probe with driver asix failed with error -71 [ 105.477568][ T339] usb 4-1: USB disconnect, device number 23 [ 105.756532][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 105.846487][ T498] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 105.967251][ T36] audit: type=1400 audit(1790964460.790:275): avc: denied { read write } for pid=2677 comm="syz.3.826" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.970905][ T2678] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 105.991119][ T36] audit: type=1400 audit(1790964460.790:276): avc: denied { open } for pid=2677 comm="syz.3.826" path="/237/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.023929][ T36] audit: type=1400 audit(1790964460.790:277): avc: denied { ioctl } for pid=2677 comm="syz.3.826" path="/237/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 106.035762][ T498] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.058959][ T498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.069076][ T498] usb 3-1: config 0 descriptor?? [ 106.110011][ T2665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.121213][ T2665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.132776][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.143305][ T46] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.151042][ T46] usb 1-1: can't read configurations, error -71 [ 106.328561][ T2689] kvm: kvm [2688]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 106.337524][ T2689] kvm: kvm [2688]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 106.826736][ T498] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 106.977796][ T498] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.988413][ T498] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.001393][ T498] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 107.010492][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.196541][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 107.285973][ T498] usb 2-1: USB disconnect, device number 22 [ 107.346489][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 107.352962][ T46] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.364305][ T46] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.374896][ T46] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 107.388047][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.394820][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 107.404704][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.414177][ T46] usb 1-1: config 0 descriptor?? [ 107.580041][ T2722] kvm: kvm [2721]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 107.588960][ T2722] kvm: kvm [2721]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 107.932388][ T36] audit: type=1400 audit(1790964462.750:278): avc: denied { create } for pid=2737 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.028067][ T310] usb 1-1: USB disconnect, device number 23 [ 108.288947][ T36] audit: type=1400 audit(1790964463.110:279): avc: denied { setopt } for pid=2750 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.579843][ T2755] kvm: kvm [2754]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 108.588804][ T2755] kvm: kvm [2754]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 108.622157][ T10] usb 3-1: USB disconnect, device number 22 [ 109.152829][ T2781] Zero length message leads to an empty skb [ 109.406475][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 109.499636][ T2793] FAULT_INJECTION: forcing a failure. [ 109.499636][ T2793] name failslab, interval 1, probability 0, space 0, times 0 [ 109.512710][ T2793] CPU: 1 UID: 0 PID: 2793 Comm: syz.0.862 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 109.512749][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.512766][ T2793] Call Trace: [ 109.512775][ T2793] [ 109.512785][ T2793] __dump_stack+0x21/0x30 [ 109.512827][ T2793] dump_stack_lvl+0x140/0x1c0 [ 109.512861][ T2793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.512895][ T2793] ? do_pipe2+0xab/0x190 [ 109.512921][ T2793] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.512956][ T2793] dump_stack+0x19/0x20 [ 109.512987][ T2793] should_fail_ex+0x3c2/0x510 [ 109.513028][ T2793] should_failslab+0xac/0x100 [ 109.513060][ T2793] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 109.513087][ T2793] ? __d_alloc+0x42/0x8c0 [ 109.513110][ T2793] __d_alloc+0x42/0x8c0 [ 109.513134][ T2793] d_alloc_pseudo+0x23/0xc0 [ 109.513158][ T2793] alloc_file_pseudo+0xde/0x1f0 [ 109.513191][ T2793] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 109.513226][ T2793] ? __mutex_init+0xa6/0x1a0 [ 109.513261][ T2793] create_pipe_files+0x287/0x6c0 [ 109.513286][ T2793] __do_pipe_flags+0x50/0x2f0 [ 109.513311][ T2793] do_pipe2+0xab/0x190 [ 109.513335][ T2793] ? xfd_validate_state+0x68/0x140 [ 109.513369][ T2793] ? pipe_fcntl+0x520/0x520 [ 109.513397][ T2793] __x64_sys_pipe2+0x5e/0x70 [ 109.513421][ T2793] x64_sys_call+0x8be/0x2ee0 [ 109.513443][ T2793] do_syscall_64+0x57/0xf0 [ 109.513468][ T2793] ? clear_bhb_loop+0x50/0xa0 [ 109.513500][ T2793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.513532][ T2793] RIP: 0033:0x7fc8f619e159 [ 109.513552][ T2793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.513574][ T2793] RSP: 002b:00007fc8f713c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 109.513601][ T2793] RAX: ffffffffffffffda RBX: 00007fc8f6425fa0 RCX: 00007fc8f619e159 [ 109.513620][ T2793] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 109.513635][ T2793] RBP: 00007fc8f623506b R08: 0000000000000000 R09: 0000000000000000 [ 109.513651][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.513669][ T2793] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 109.513691][ T2793] [ 109.567642][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 109.599853][ T46] usb 4-1: USB disconnect, device number 24 [ 109.640083][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.765777][ T10] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 109.774979][ T10] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 109.783602][ T10] usb 2-1: Product: syz [ 109.795651][ T10] usb 2-1: Manufacturer: syz [ 109.804380][ T10] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 109.811813][ T10] usb 2-1: No streaming interface found for terminal 2. [ 109.931571][ T2804] FAULT_INJECTION: forcing a failure. [ 109.931571][ T2804] name failslab, interval 1, probability 0, space 0, times 0 [ 109.944717][ T2804] CPU: 0 UID: 0 PID: 2804 Comm: syz.2.865 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 109.944759][ T2804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.944776][ T2804] Call Trace: [ 109.944785][ T2804] [ 109.944794][ T2804] __dump_stack+0x21/0x30 [ 109.944840][ T2804] dump_stack_lvl+0x140/0x1c0 [ 109.944876][ T2804] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.944915][ T2804] dump_stack+0x19/0x20 [ 109.944949][ T2804] should_fail_ex+0x3c2/0x510 [ 109.944982][ T2804] should_failslab+0xac/0x100 [ 109.945017][ T2804] __kmalloc_cache_noprof+0x41/0x470 [ 109.945046][ T2804] ? raw_ioctl+0x1b04/0x37a0 [ 109.945071][ T2804] raw_ioctl+0x1b04/0x37a0 [ 109.945095][ T2804] ? handle_mm_fault+0x16fe/0x1ba0 [ 109.945127][ T2804] ? __cfi_raw_ioctl+0x10/0x10 [ 109.945151][ T2804] ? selinux_file_ioctl+0x732/0x1480 [ 109.945178][ T2804] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 109.945210][ T2804] ? __fget_files+0x2bc/0x330 [ 109.945242][ T2804] ? bpf_lsm_file_ioctl+0xd/0x20 [ 109.945275][ T2804] ? security_file_ioctl+0x3e/0x110 [ 109.945300][ T2804] ? __cfi_raw_ioctl+0x10/0x10 [ 109.945321][ T2804] __se_sys_ioctl+0x126/0x1b0 [ 109.945354][ T2804] __x64_sys_ioctl+0x7f/0xa0 [ 109.945397][ T2804] x64_sys_call+0x1878/0x2ee0 [ 109.945421][ T2804] do_syscall_64+0x57/0xf0 [ 109.945448][ T2804] ? clear_bhb_loop+0x50/0xa0 [ 109.945493][ T2804] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.945526][ T2804] RIP: 0033:0x7fa7f4d9ddeb [ 109.945547][ T2804] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 109.945568][ T2804] RSP: 002b:00007fa7f5cb7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.945596][ T2804] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa7f4d9ddeb [ 109.945616][ T2804] RDX: 00007fa7f5cb8fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 109.945634][ T2804] RBP: 00007fa7f5cb8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 109.945651][ T2804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7f5cb7fa0 [ 109.945667][ T2804] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 109.945688][ T2804] [ 110.187124][ T310] usb 2-1: USB disconnect, device number 23 [ 111.258554][ T2878] FAULT_INJECTION: forcing a failure. [ 111.258554][ T2878] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.271835][ T2878] CPU: 0 UID: 0 PID: 2878 Comm: syz.3.883 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 111.271876][ T2878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.271891][ T2878] Call Trace: [ 111.271900][ T2878] [ 111.271917][ T2878] __dump_stack+0x21/0x30 [ 111.271960][ T2878] dump_stack_lvl+0x140/0x1c0 [ 111.271996][ T2878] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.272035][ T2878] dump_stack+0x19/0x20 [ 111.272068][ T2878] should_fail_ex+0x3c2/0x510 [ 111.272101][ T2878] should_fail+0xf/0x20 [ 111.272129][ T2878] should_fail_usercopy+0x1e/0x30 [ 111.272162][ T2878] _copy_from_iter+0x56d/0x1520 [ 111.272201][ T2878] ? __cfi__copy_from_iter+0x10/0x10 [ 111.272237][ T2878] ? __check_object_size+0x54c/0x870 [ 111.272266][ T2878] ? __cfi___check_object_size+0x10/0x10 [ 111.272294][ T2878] ? skb_put+0x10e/0x200 [ 111.272334][ T2878] netlink_sendmsg+0x66d/0xad0 [ 111.272374][ T2878] ? __cfi_netlink_sendmsg+0x10/0x10 [ 111.272411][ T2878] ? __futex_queue+0x19f/0x350 [ 111.272450][ T2878] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 111.272486][ T2878] ? security_socket_sendmsg+0x3d/0x100 [ 111.272523][ T2878] ____sys_sendmsg+0x99e/0xa00 [ 111.272562][ T2878] ? __import_iovec+0x3fa/0x7d0 [ 111.272585][ T2878] ? __sys_sendmsg_sock+0x50/0x50 [ 111.272625][ T2878] ? import_iovec+0x80/0xb0 [ 111.272648][ T2878] ___sys_sendmsg+0x2a6/0x370 [ 111.272685][ T2878] ? __kasan_check_read+0x15/0x20 [ 111.272712][ T2878] ? __sys_sendmsg+0x260/0x260 [ 111.272751][ T2878] ? __cfi_futex_wait+0x10/0x10 [ 111.272780][ T2878] ? __fget_files+0x2bc/0x330 [ 111.272813][ T2878] __x64_sys_sendmsg+0x1be/0x2a0 [ 111.272851][ T2878] ? fput+0x1a4/0x230 [ 111.272884][ T2878] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 111.272932][ T2878] ? __kasan_check_write+0x18/0x20 [ 111.272958][ T2878] ? fpregs_restore_userregs+0x11c/0x260 [ 111.272992][ T2878] ? switch_fpu_return+0x12/0x20 [ 111.273024][ T2878] x64_sys_call+0x2a4c/0x2ee0 [ 111.273049][ T2878] do_syscall_64+0x57/0xf0 [ 111.273075][ T2878] ? clear_bhb_loop+0x50/0xa0 [ 111.273110][ T2878] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.273144][ T2878] RIP: 0033:0x7f7d7619e159 [ 111.273165][ T2878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.273188][ T2878] RSP: 002b:00007f7d7707d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.273215][ T2878] RAX: ffffffffffffffda RBX: 00007f7d76425fa0 RCX: 00007f7d7619e159 [ 111.273241][ T2878] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004 [ 111.273258][ T2878] RBP: 00007f7d7623506b R08: 0000000000000000 R09: 0000000000000000 [ 111.273275][ T2878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.273291][ T2878] R13: 00007f7d76426038 R14: 00007f7d76425fa0 R15: 00007ffcfda237a8 [ 111.273314][ T2878] [ 111.866491][ T498] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 111.874233][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 111.882028][ T46] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 112.046482][ T498] usb 1-1: Using ep0 maxpacket: 8 [ 112.051607][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 112.058370][ T65] usb 4-1: config 0 has no interfaces? [ 112.063901][ T65] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 112.073180][ T498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.083856][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.092399][ T498] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.101715][ T46] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.110750][ T498] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 112.122308][ T65] usb 4-1: config 0 descriptor?? [ 112.127324][ T46] usb 2-1: config 179 has no interface number 0 [ 112.136455][ T46] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 112.152100][ T498] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.163508][ T46] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 112.175138][ T498] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.184279][ T46] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 112.195868][ T498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.204451][ T46] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 112.220210][ T46] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.234472][ T498] hub 1-1:1.0: bad descriptor, ignoring hub [ 112.240469][ T498] hub 1-1:1.0: probe with driver hub failed with error -5 [ 112.247946][ T498] cdc_wdm 1-1:1.0: skipping garbage [ 112.253196][ T498] cdc_wdm 1-1:1.0: skipping garbage [ 112.258526][ T46] usb 2-1: config 179 interface 65 has no altsetting 0 [ 112.265436][ T46] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 112.275040][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.283269][ T498] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 112.290806][ T498] cdc_wdm 1-1:1.0: Unknown control protocol [ 112.305538][ T46] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18 [ 112.350216][ T46] usb 4-1: USB disconnect, device number 25 [ 112.366644][ T95] input input18: unable to receive magic message: -110 [ 112.381604][ T95] input input18: unable to receive magic message: -32 [ 112.393270][ T95] input input18: unable to receive magic message: -32 [ 112.546590][ T498] usb 1-1: USB disconnect, device number 24 [ 112.706783][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.715243][ T46] usb 2-1: USB disconnect, device number 24 [ 112.721848][ T46] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.836490][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 112.876685][ T498] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 112.906147][ T2906] FAULT_INJECTION: forcing a failure. [ 112.906147][ T2906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.919488][ T2906] CPU: 0 UID: 0 PID: 2906 Comm: syz.3.895 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 112.919526][ T2906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.919540][ T2906] Call Trace: [ 112.919550][ T2906] [ 112.919560][ T2906] __dump_stack+0x21/0x30 [ 112.919604][ T2906] dump_stack_lvl+0x140/0x1c0 [ 112.919636][ T2906] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.919669][ T2906] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 112.919705][ T2906] dump_stack+0x19/0x20 [ 112.919737][ T2906] should_fail_ex+0x3c2/0x510 [ 112.919766][ T2906] should_fail_alloc_page+0xec/0x110 [ 112.919795][ T2906] __alloc_pages_noprof+0x1c0/0x7e0 [ 112.919827][ T2906] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 112.919862][ T2906] ? folio_add_lru+0x116/0x400 [ 112.919890][ T2906] ? __cfi_folio_add_lru+0x10/0x10 [ 112.919919][ T2906] __folio_alloc_noprof+0x14/0x80 [ 112.919951][ T2906] folio_prealloc+0x46/0x220 [ 112.919980][ T2906] do_pte_missing+0x16af/0x4440 [ 112.920012][ T2906] ? pte_marker_clear+0x1b0/0x1b0 [ 112.920041][ T2906] ? cgroup_rstat_updated+0x144/0x800 [ 112.920065][ T2906] ? putname+0x113/0x150 [ 112.920089][ T2906] ? do_sys_openat2+0x170/0x1d0 [ 112.920123][ T2906] ? x64_sys_call+0xe69/0x2ee0 [ 112.920145][ T2906] ? do_syscall_64+0x57/0xf0 [ 112.920172][ T2906] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 112.920199][ T2906] handle_mm_fault+0x1189/0x1ba0 [ 112.920261][ T2906] ? __cfi_handle_mm_fault+0x10/0x10 [ 112.920281][ T2906] ? lock_vma_under_rcu+0x4cf/0x590 [ 112.920307][ T2906] ? do_sys_openat2+0x170/0x1d0 [ 112.920333][ T2906] ? __x64_sys_sched_setscheduler+0xa0/0xa0 [ 112.920356][ T2906] do_user_addr_fault+0x951/0x1230 [ 112.920372][ T2906] ? __kasan_check_read+0x15/0x20 [ 112.920391][ T2906] exc_page_fault+0x58/0xc0 [ 112.920415][ T2906] asm_exc_page_fault+0x2b/0x30 [ 112.920437][ T2906] RIP: 0033:0x7f7d76065c2a [ 112.920452][ T2906] Code: 00 4c 89 e7 31 c0 48 8d 35 53 ff 1c 00 e8 ce 6a 0e 00 66 0f 6f 05 16 f8 1e 00 4c 89 e6 48 8d bc 24 f0 10 00 00 ba 80 00 00 00 <0f> 29 84 24 70 10 00 00 66 0f ef c0 0f 29 84 24 80 10 00 00 0f 29 [ 112.920467][ T2906] RSP: 002b:00007f7d7707af60 EFLAGS: 00010202 [ 112.920483][ T2906] RAX: 000000000000000b RBX: 0000000000000006 RCX: 0000000000000000 [ 112.920493][ T2906] RDX: 0000000000000080 RSI: 00007f7d7707afa0 RDI: 00007f7d7707c050 [ 112.920505][ T2906] RBP: 00007f7d7707bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 112.920517][ T2906] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f7d7707afa0 [ 112.920528][ T2906] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 112.920541][ T2906] [ 112.920565][ T2906] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 113.036525][ T498] usb 1-1: Using ep0 maxpacket: 8 [ 113.128283][ T10] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.132447][ T498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.138213][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.145942][ T498] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.155687][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 113.161836][ T498] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 113.170833][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.172914][ T498] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 113.187375][ T10] usb 3-1: config 0 descriptor?? [ 113.198486][ T498] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.278381][ T498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.286488][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 113.296084][ T498] hub 1-1:1.0: bad descriptor, ignoring hub [ 113.302530][ T498] hub 1-1:1.0: probe with driver hub failed with error -5 [ 113.313186][ T498] cdc_wdm 1-1:1.0: skipping garbage [ 113.318484][ T498] cdc_wdm 1-1:1.0: skipping garbage [ 113.326709][ T498] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 113.332755][ T498] cdc_wdm 1-1:1.0: Unknown control protocol [ 113.447624][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.457872][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.467255][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.478824][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 113.488092][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.496170][ T9] usb 4-1: Product: syz [ 113.500644][ T9] usb 4-1: Manufacturer: syz [ 113.505323][ T9] usb 4-1: SerialNumber: syz [ 113.616569][ T498] usb 1-1: USB disconnect, device number 25 [ 113.624862][ T10] logitech-djreceiver 0003:046D:C70E.001C: unknown main item tag 0x7 [ 113.640151][ T10] logitech-djreceiver 0003:046D:C70E.001C: unknown main item tag 0x6 [ 113.648700][ T10] logitech-djreceiver 0003:046D:C70E.001C: unexpected long global item [ 113.657788][ T10] logitech-djreceiver 0003:046D:C70E.001C: logi_dj_probe: parse failed [ 113.666674][ T10] logitech-djreceiver 0003:046D:C70E.001C: probe with driver logitech-djreceiver failed with error -22 [ 113.724885][ T9] usb 4-1: USB disconnect, device number 26 [ 113.733612][ T1781] udevd[1781]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.826164][ T10] usb 3-1: USB disconnect, device number 23 [ 114.124300][ T36] audit: type=1400 audit(1790964468.940:280): avc: denied { read } for pid=2927 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.326235][ T2941] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 114.335025][ T2941] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.364350][ T36] audit: type=1400 audit(1790964469.180:281): avc: denied { create } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.385096][ T36] audit: type=1400 audit(1790964469.200:282): avc: denied { bind } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.435198][ T36] audit: type=1400 audit(1790964469.220:283): avc: denied { listen } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.469731][ T36] audit: type=1400 audit(1790964469.220:284): avc: denied { connect } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.490073][ T36] audit: type=1400 audit(1790964469.230:285): avc: denied { accept } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.546148][ T36] audit: type=1400 audit(1790964469.230:286): avc: denied { write } for pid=2942 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.836846][ T498] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 114.997589][ T498] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.008710][ T36] audit: type=1400 audit(1790964469.830:287): avc: denied { mounton } for pid=2965 comm="syz.2.917" path="/191/file0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 115.032580][ T498] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.041879][ T498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.050251][ T498] usb 2-1: SerialNumber: syz [ 115.058227][ T498] cdc_ether 2-1:1.0: skipping garbage [ 115.064720][ T498] usb 2-1: bad CDC descriptors [ 115.156536][ T65] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 115.262390][ T2956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.271180][ T2956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.279672][ T10] usb 2-1: USB disconnect, device number 25 [ 115.306486][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 115.313120][ T65] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 115.323697][ T65] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 115.335456][ T65] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.346553][ T65] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 115.361181][ T65] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 115.370318][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.378376][ T65] usb 4-1: Product: syz [ 115.382732][ T65] usb 4-1: Manufacturer: syz [ 115.387567][ T65] usb 4-1: SerialNumber: syz [ 115.860333][ T36] audit: type=1400 audit(1790964470.680:288): avc: denied { write } for pid=2984 comm="syz.0.924" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.862564][ T10] kernel write not supported for file /rfkill (pid: 10 comm: kworker/0:1) [ 115.925084][ T36] audit: type=1400 audit(1790964470.740:289): avc: denied { unmount } for pid=2990 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.951913][ T2993] syzkaller0: entered promiscuous mode [ 115.957812][ T2993] syzkaller0: entered allmulticast mode [ 116.256574][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 116.406517][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 116.414323][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.426181][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.438517][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.447673][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.455698][ T10] usb 3-1: Product: syz [ 116.460070][ T10] usb 3-1: Manufacturer: syz [ 116.464759][ T10] usb 3-1: SerialNumber: syz [ 116.470093][ T10] usb 3-1: config 0 descriptor?? [ 116.678281][ T3038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.946'. [ 116.682436][ T10] usb 3-1: USB disconnect, device number 24 [ 117.756467][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 117.789113][ T3063] kvm: kvm [3062]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 117.798148][ T3063] kvm: kvm [3062]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 117.906512][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 117.913086][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 117.921597][ T10] usb 3-1: config 0 has no interface number 0 [ 117.929334][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.940670][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.950864][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 117.960511][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 117.970815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.979597][ T10] usb 3-1: Product: syz [ 117.983980][ T10] usb 3-1: Manufacturer: syz [ 117.988925][ T10] usb 3-1: SerialNumber: syz [ 117.996062][ T10] usb 3-1: config 0 descriptor?? [ 118.212079][ T10] usb 3-1: USB disconnect, device number 25 [ 118.499380][ T65] usb 4-1: USB disconnect, device number 27 [ 118.836501][ T65] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 118.986493][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 118.993253][ T65] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.001987][ T65] usb 4-1: config 0 has no interface number 0 [ 119.008181][ T65] usb 4-1: config 0 interface 184 has no altsetting 0 [ 119.016519][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.025869][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.033948][ T65] usb 4-1: Product: syz [ 119.038155][ T65] usb 4-1: Manufacturer: syz [ 119.042794][ T65] usb 4-1: SerialNumber: syz [ 119.048237][ T65] usb 4-1: config 0 descriptor?? [ 119.054118][ T65] smsc75xx v1.0.0 [ 119.096527][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 119.247622][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.257499][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 119.268758][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 119.277967][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.285983][ T9] usb 1-1: Product: syz [ 119.290256][ T9] usb 1-1: Manufacturer: syz [ 119.294880][ T9] usb 1-1: SerialNumber: syz [ 119.585553][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 119.585572][ T36] audit: type=1400 audit(1790964474.400:295): avc: denied { remount } for pid=3080 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.632386][ T36] audit: type=1326 audit(1790964474.450:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3084 comm="syz.2.965" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4d9e159 code=0x0 [ 119.663043][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 119.673940][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 120.479032][ T36] audit: type=1400 audit(1790964475.300:297): avc: denied { transfer } for pid=3093 comm="syz.2.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.498277][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.509123][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 120.519022][ T65] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 120.528802][ T65] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 120.538225][ T65] usb 4-1: USB disconnect, device number 28 [ 120.715128][ T36] audit: type=1400 audit(1790964475.530:298): avc: denied { write } for pid=3096 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.905442][ T3101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 121.028723][ T36] audit: type=1400 audit(1790964475.850:299): avc: denied { bind } for pid=3106 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.324427][ T65] rust_binder: 3093: undelivered TRANSACTION_COMPLETE [ 121.339271][ T65] rust_binder: 3093: undelivered TRANSACTION_ERROR: 29189 [ 121.954828][ T9] usb 1-1: USB disconnect, device number 26 [ 122.553115][ T3152] netlink: 80 bytes leftover after parsing attributes in process `syz.2.989'. [ 122.632499][ T3148] kvm: pic: non byte write [ 122.654295][ T3158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 122.722223][ T3168] overlayfs: failed to clone upperpath [ 122.741869][ T36] audit: type=1400 audit(1790964477.560:300): avc: denied { read } for pid=3169 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.730533][ T65] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 123.897267][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 123.906064][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.917942][ T65] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 123.927252][ T65] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 123.935727][ T65] usb 3-1: Product: syz [ 123.940407][ T65] usb 3-1: Manufacturer: syz [ 123.950841][ T65] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 124.150562][ T65] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 124.164625][ T65] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 124.182593][ T65] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 124.201431][ T65] usb 3-1: USB disconnect, device number 26 [ 124.284387][ T3198] overlayfs: failed to clone upperpath [ 124.956869][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 124.990997][ T3222] serio: Serial port ttyS3 [ 125.116615][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 125.133705][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 125.143757][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.152640][ T10] usb 4-1: Product: syz [ 125.157625][ T10] usb 4-1: Manufacturer: syz [ 125.162421][ T10] usb 4-1: SerialNumber: syz [ 125.171931][ T10] usb 4-1: config 0 descriptor?? [ 125.631882][ T3225] overlayfs: failed to clone upperpath [ 125.866073][ T3241] kvm: kvm [3240]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 125.874995][ T3241] kvm: kvm [3240]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 126.015301][ T65] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 126.257821][ T65] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.271105][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.277836][ T65] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 126.288041][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.296849][ T65] usb 3-1: config 0 descriptor?? [ 126.705567][ T65] chicony 0003:04F2:0418.001D: unknown main item tag 0x7 [ 126.712813][ T65] chicony 0003:04F2:0418.001D: unknown main item tag 0x6 [ 126.719993][ T65] chicony 0003:04F2:0418.001D: unexpected long global item [ 126.727558][ T65] chicony 0003:04F2:0418.001D: Chicony hid parse failed: -22 [ 126.735018][ T65] chicony 0003:04F2:0418.001D: probe with driver chicony failed with error -22 [ 126.906672][ T9] usb 3-1: USB disconnect, device number 27 [ 127.507535][ T498] usb 4-1: USB disconnect, device number 29 [ 127.906530][ T498] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 128.056561][ T498] usb 4-1: Using ep0 maxpacket: 8 [ 128.077559][ T498] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 128.096527][ T498] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.107619][ T498] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.118202][ T498] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.132142][ T498] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.148739][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.253685][ T3313] kvm: kvm [3312]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 128.270370][ T3313] kvm: kvm [3312]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 128.556960][ T3338] ./dev/sda1: Can't lookup blockdev [ 129.882107][ T36] audit: type=1400 audit(1790964490.699:301): avc: denied { mount } for pid=3351 comm="syz.2.1047" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.482456][ T36] audit: type=1400 audit(1790964491.251:302): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.550254][ T3399] kvm: kvm [3398]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 130.559508][ T3399] kvm: kvm [3398]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 130.621149][ T10] usb 4-1: USB disconnect, device number 30 [ 130.733292][ T36] audit: type=1404 audit(1790964491.495:303): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 130.764422][ T36] audit: type=1400 audit(1790964491.513:304): avc: denied { ioctl } for pid=3403 comm="syz.2.1061" path="socket:[43130]" dev="sockfs" ino=43130 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 130.947828][ T36] audit: type=1400 audit(1790964491.691:305): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.001502][ T36] audit: type=1400 audit(1790964491.738:306): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.027130][ T36] audit: type=1400 audit(1790964491.747:307): avc: denied { read append } for pid=3414 comm="syz.3.1064" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 131.055194][ T36] audit: type=1400 audit(1790964491.766:308): avc: denied { create } for pid=3414 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 131.076510][ T36] audit: type=1400 audit(1790964491.785:309): avc: denied { read } for pid=3414 comm="syz.3.1064" dev="nsfs" ino=4026532308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 131.097913][ T36] audit: type=1400 audit(1790964491.794:310): avc: denied { read } for pid=3414 comm="syz.3.1064" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 132.562185][ T3516] netlink: 'syz.1.1108': attribute type 11 has an invalid length. [ 135.268949][ T36] kauditd_printk_skb: 245 callbacks suppressed [ 135.268970][ T36] audit: type=1400 audit(1790964495.732:556): avc: denied { mounton } for pid=3633 comm="syz.0.1155" path="/279/bus" dev="tmpfs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 135.317751][ T36] audit: type=1400 audit(1790964495.779:557): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.364425][ T36] audit: type=1400 audit(1790964495.807:558): avc: denied { unmount } for pid=3633 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 135.403080][ T36] audit: type=1400 audit(1790964495.844:559): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.451163][ T36] audit: type=1400 audit(1790964495.910:560): avc: denied { read } for pid=3637 comm="syz.0.1156" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 135.497711][ T36] audit: type=1400 audit(1790964495.910:561): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.537571][ T36] audit: type=1400 audit(1790964495.928:562): avc: denied { execmem } for pid=3637 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 135.578682][ T36] audit: type=1400 audit(1790964495.928:563): avc: denied { create } for pid=3637 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 135.616878][ T36] audit: type=1400 audit(1790964495.928:564): avc: denied { read write } for pid=3637 comm="syz.0.1156" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 135.670332][ T36] audit: type=1400 audit(1790964495.938:565): avc: denied { create } for pid=3637 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 137.468222][ T3739] futex_wake_op: syz.1.1199 tries to shift op by 144; fix this program [ 138.175649][ T3777] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 138.183675][ T3777] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1217'. [ 138.914072][ T3811] futex_wake_op: syz.3.1231 tries to shift op by 144; fix this program [ 139.248182][ T3840] futex_wake_op: syz.2.1242 tries to shift op by 144; fix this program [ 140.653784][ T36] kauditd_printk_skb: 386 callbacks suppressed [ 140.653803][ T36] audit: type=1400 audit(1790964500.774:952): avc: denied { mounton } for pid=3911 comm="syz.1.1272" path="/362/proc" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 140.749073][ T36] audit: type=1400 audit(1790964500.867:953): avc: denied { create } for pid=3909 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 140.888560][ T36] audit: type=1400 audit(1790964500.998:954): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.918913][ T36] audit: type=1400 audit(1790964501.017:955): avc: denied { read } for pid=3915 comm="syz.2.1275" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 140.941973][ T36] audit: type=1400 audit(1790964501.045:956): avc: denied { read } for pid=3915 comm="syz.2.1275" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 140.965816][ T36] audit: type=1400 audit(1790964501.045:957): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.989633][ T36] audit: type=1400 audit(1790964501.064:958): avc: denied { read } for pid=3915 comm="syz.2.1275" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 141.012652][ T36] audit: type=1400 audit(1790964501.092:959): avc: denied { unmount } for pid=3917 comm="syz.3.1276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 141.041311][ T36] audit: type=1400 audit(1790964501.139:960): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.069733][ T36] audit: type=1400 audit(1790964501.139:961): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.128965][ T4011] sit0: entered promiscuous mode [ 143.135702][ T4011] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 143.143770][ T4011] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1312'. [ 144.444147][ T4066] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1335'. [ 145.824586][ T4088] syzkaller1: entered promiscuous mode [ 145.830209][ T4088] syzkaller1: entered allmulticast mode [ 146.421951][ T36] kauditd_printk_skb: 307 callbacks suppressed [ 146.421972][ T36] audit: type=1400 audit(1790964506.162:1269): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.466976][ T36] audit: type=1400 audit(1790964506.209:1270): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.500812][ T36] audit: type=1400 audit(1790964506.237:1271): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.533428][ T36] audit: type=1400 audit(1790964506.274:1272): avc: denied { create } for pid=4112 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 146.578794][ T36] audit: type=1400 audit(1790964506.311:1273): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.603994][ T4116] FAULT_INJECTION: forcing a failure. [ 146.603994][ T4116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.614648][ T36] audit: type=1400 audit(1790964506.339:1274): avc: denied { create } for pid=4115 comm="syz.0.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 146.618789][ T4116] CPU: 0 UID: 0 PID: 4116 Comm: syz.0.1356 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 146.618887][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.618920][ T4116] Call Trace: [ 146.618942][ T4116] [ 146.618973][ T4116] __dump_stack+0x21/0x30 [ 146.619065][ T4116] dump_stack_lvl+0x140/0x1c0 [ 146.619151][ T4116] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.619240][ T4116] ? check_stack_object+0x138/0x150 [ 146.619316][ T4116] dump_stack+0x19/0x20 [ 146.619394][ T4116] should_fail_ex+0x3c2/0x510 [ 146.619479][ T4116] should_fail+0xf/0x20 [ 146.619545][ T4116] should_fail_usercopy+0x1e/0x30 [ 146.619632][ T4116] _copy_to_user+0x24/0xa0 [ 146.619718][ T4116] simple_read_from_buffer+0xed/0x160 [ 146.619806][ T4116] proc_fail_nth_read+0x1aa/0x220 [ 146.619900][ T4116] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 146.620003][ T4116] ? bpf_lsm_file_permission+0xd/0x20 [ 146.620115][ T4116] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 146.620210][ T4116] vfs_read+0x28b/0xc70 [ 146.620278][ T4116] ? __cfi_vfs_read+0x10/0x10 [ 146.620343][ T4116] ? __kasan_check_write+0x18/0x20 [ 146.620406][ T4116] ? mutex_lock+0x97/0x1d0 [ 146.620483][ T4116] ? __cfi_mutex_lock+0x10/0x10 [ 146.620575][ T4116] ksys_read+0x145/0x260 [ 146.620641][ T4116] ? __cfi_ksys_read+0x10/0x10 [ 146.620707][ T4116] ? __kasan_check_read+0x15/0x20 [ 146.620770][ T4116] __x64_sys_read+0x7f/0x90 [ 146.620836][ T4116] x64_sys_call+0x2638/0x2ee0 [ 146.620897][ T4116] do_syscall_64+0x57/0xf0 [ 146.620961][ T4116] ? clear_bhb_loop+0x50/0xa0 [ 146.621031][ T4116] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.621113][ T4116] RIP: 0033:0x7fc8f615e98e [ 146.621166][ T4116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.621214][ T4116] RSP: 002b:00007fc8f713bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.621286][ T4116] RAX: ffffffffffffffda RBX: 00007fc8f713c6c0 RCX: 00007fc8f615e98e [ 146.621330][ T4116] RDX: 000000000000000f RSI: 00007fc8f713c0a0 RDI: 0000000000000003 [ 146.621380][ T4116] RBP: 00007fc8f713c090 R08: 0000000000000000 R09: 0000000000000000 [ 146.621428][ T4116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.621476][ T4116] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 146.621539][ T4116] [ 146.884361][ T36] audit: type=1400 audit(1790964506.396:1275): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.908370][ T36] audit: type=1400 audit(1790964506.414:1276): avc: denied { name_bind } for pid=4117 comm="syz.0.1357" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 146.930526][ T36] audit: type=1400 audit(1790964506.424:1277): avc: denied { read } for pid=4117 comm="syz.0.1357" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 146.964215][ T36] audit: type=1400 audit(1790964506.480:1278): avc: denied { read write } for pid=4117 comm="syz.0.1357" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 147.630366][ T4159] FAULT_INJECTION: forcing a failure. [ 147.630366][ T4159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.643918][ T4159] CPU: 0 UID: 0 PID: 4159 Comm: syz.0.1373 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 147.643959][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.643975][ T4159] Call Trace: [ 147.643983][ T4159] [ 147.643992][ T4159] __dump_stack+0x21/0x30 [ 147.644032][ T4159] dump_stack_lvl+0x140/0x1c0 [ 147.644066][ T4159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.644101][ T4159] ? check_stack_object+0x138/0x150 [ 147.644129][ T4159] dump_stack+0x19/0x20 [ 147.644160][ T4159] should_fail_ex+0x3c2/0x510 [ 147.644191][ T4159] should_fail+0xf/0x20 [ 147.644218][ T4159] should_fail_usercopy+0x1e/0x30 [ 147.644250][ T4159] _copy_to_user+0x24/0xa0 [ 147.644284][ T4159] simple_read_from_buffer+0xed/0x160 [ 147.644319][ T4159] proc_fail_nth_read+0x1aa/0x220 [ 147.644356][ T4159] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 147.644392][ T4159] ? bpf_lsm_file_permission+0xd/0x20 [ 147.644425][ T4159] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 147.644470][ T4159] vfs_read+0x28b/0xc70 [ 147.644497][ T4159] ? __cfi_vfs_read+0x10/0x10 [ 147.644521][ T4159] ? __kasan_check_write+0x18/0x20 [ 147.644545][ T4159] ? mutex_lock+0x97/0x1d0 [ 147.644576][ T4159] ? __cfi_mutex_lock+0x10/0x10 [ 147.644609][ T4159] ksys_read+0x145/0x260 [ 147.644635][ T4159] ? __cfi_ksys_read+0x10/0x10 [ 147.644661][ T4159] ? __kasan_check_read+0x15/0x20 [ 147.644685][ T4159] __x64_sys_read+0x7f/0x90 [ 147.644712][ T4159] x64_sys_call+0x2638/0x2ee0 [ 147.644734][ T4159] do_syscall_64+0x57/0xf0 [ 147.644757][ T4159] ? clear_bhb_loop+0x50/0xa0 [ 147.644790][ T4159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.644821][ T4159] RIP: 0033:0x7fc8f615e98e [ 147.644841][ T4159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.644863][ T4159] RSP: 002b:00007fc8f713bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.644888][ T4159] RAX: ffffffffffffffda RBX: 00007fc8f713c6c0 RCX: 00007fc8f615e98e [ 147.644906][ T4159] RDX: 000000000000000f RSI: 00007fc8f713c0a0 RDI: 0000000000000003 [ 147.644921][ T4159] RBP: 00007fc8f713c090 R08: 0000000000000000 R09: 0000000000000000 [ 147.644937][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.644951][ T4159] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 147.644973][ T4159] [ 148.312365][ T4181] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 148.320280][ T4181] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1383'. [ 148.579259][ T4192] futex_wake_op: syz.2.1388 tries to shift op by 144; fix this program [ 148.816014][ T4200] sit0: entered promiscuous mode [ 148.822539][ T4200] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 148.830363][ T4200] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1392'. [ 148.872564][ T4204] futex_wake_op: syz.0.1394 tries to shift op by -1; fix this program [ 149.498920][ T4242] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 149.506887][ T4242] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 149.523897][ T4242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4242 comm=syz.1.1408 [ 151.078513][ T4338] FAULT_INJECTION: forcing a failure. [ 151.078513][ T4338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.092112][ T4338] CPU: 1 UID: 0 PID: 4338 Comm: syz.2.1447 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 151.092149][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.092164][ T4338] Call Trace: [ 151.092172][ T4338] [ 151.092181][ T4338] __dump_stack+0x21/0x30 [ 151.092221][ T4338] dump_stack_lvl+0x140/0x1c0 [ 151.092256][ T4338] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.092291][ T4338] ? check_stack_object+0x138/0x150 [ 151.092318][ T4338] dump_stack+0x19/0x20 [ 151.092351][ T4338] should_fail_ex+0x3c2/0x510 [ 151.092382][ T4338] should_fail+0xf/0x20 [ 151.092410][ T4338] should_fail_usercopy+0x1e/0x30 [ 151.092442][ T4338] _copy_to_user+0x24/0xa0 [ 151.092477][ T4338] simple_read_from_buffer+0xed/0x160 [ 151.092512][ T4338] proc_fail_nth_read+0x1aa/0x220 [ 151.092549][ T4338] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.092583][ T4338] ? selinux_socket_setsockopt+0x324/0x3d0 [ 151.092619][ T4338] ? bpf_lsm_file_permission+0xd/0x20 [ 151.092651][ T4338] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.092687][ T4338] vfs_read+0x28b/0xc70 [ 151.092713][ T4338] ? __cfi_vfs_read+0x10/0x10 [ 151.092738][ T4338] ? __kasan_check_write+0x18/0x20 [ 151.092763][ T4338] ? mutex_lock+0x97/0x1d0 [ 151.092793][ T4338] ? __cfi_mutex_lock+0x10/0x10 [ 151.092826][ T4338] ksys_read+0x145/0x260 [ 151.092850][ T4338] ? __fget_files+0x2bc/0x330 [ 151.092878][ T4338] ? __cfi_ksys_read+0x10/0x10 [ 151.092903][ T4338] ? __kasan_check_write+0x18/0x20 [ 151.092927][ T4338] ? __kasan_check_read+0x15/0x20 [ 151.092950][ T4338] __x64_sys_read+0x7f/0x90 [ 151.092975][ T4338] x64_sys_call+0x2638/0x2ee0 [ 151.092997][ T4338] do_syscall_64+0x57/0xf0 [ 151.093019][ T4338] ? clear_bhb_loop+0x50/0xa0 [ 151.093049][ T4338] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.093078][ T4338] RIP: 0033:0x7fa7f4d5e98e [ 151.093098][ T4338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.093189][ T4338] RSP: 002b:00007fa7f5cb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.093214][ T4338] RAX: ffffffffffffffda RBX: 00007fa7f5cba6c0 RCX: 00007fa7f4d5e98e [ 151.093233][ T4338] RDX: 000000000000000f RSI: 00007fa7f5cba0a0 RDI: 0000000000000004 [ 151.093249][ T4338] RBP: 00007fa7f5cba090 R08: 0000000000000000 R09: 0000000000000000 [ 151.093265][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.093280][ T4338] R13: 00007fa7f5026038 R14: 00007fa7f5025fa0 R15: 00007ffc5205e148 [ 151.093301][ T4338] [ 151.725854][ T4357] FAULT_INJECTION: forcing a failure. [ 151.725854][ T4357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.739180][ T4357] CPU: 1 UID: 0 PID: 4357 Comm: syz.3.1454 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 151.739217][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.739232][ T4357] Call Trace: [ 151.739241][ T4357] [ 151.739254][ T4357] __dump_stack+0x21/0x30 [ 151.739295][ T4357] dump_stack_lvl+0x140/0x1c0 [ 151.739319][ T4357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.739343][ T4357] ? check_stack_object+0x138/0x150 [ 151.739363][ T4357] dump_stack+0x19/0x20 [ 151.739385][ T4357] should_fail_ex+0x3c2/0x510 [ 151.739407][ T4357] should_fail+0xf/0x20 [ 151.739425][ T4357] should_fail_usercopy+0x1e/0x30 [ 151.739453][ T4357] _copy_to_user+0x24/0xa0 [ 151.739478][ T4357] simple_read_from_buffer+0xed/0x160 [ 151.739503][ T4357] proc_fail_nth_read+0x1aa/0x220 [ 151.739535][ T4357] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.739567][ T4357] ? bpf_lsm_file_permission+0xd/0x20 [ 151.739590][ T4357] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.739614][ T4357] vfs_read+0x28b/0xc70 [ 151.739638][ T4357] ? __cfi_mutex_unlock+0x10/0x10 [ 151.739661][ T4357] ? __cfi_vfs_read+0x10/0x10 [ 151.739677][ T4357] ? __kasan_check_write+0x18/0x20 [ 151.739695][ T4357] ? mutex_lock+0x97/0x1d0 [ 151.739715][ T4357] ? __cfi_mutex_lock+0x10/0x10 [ 151.739738][ T4357] ksys_read+0x145/0x260 [ 151.739756][ T4357] ? __cfi_ksys_read+0x10/0x10 [ 151.739773][ T4357] ? __kasan_check_write+0x18/0x20 [ 151.739789][ T4357] ? fput+0x1a4/0x230 [ 151.739811][ T4357] ? __kasan_check_read+0x15/0x20 [ 151.739828][ T4357] __x64_sys_read+0x7f/0x90 [ 151.739846][ T4357] x64_sys_call+0x2638/0x2ee0 [ 151.739861][ T4357] do_syscall_64+0x57/0xf0 [ 151.739878][ T4357] ? clear_bhb_loop+0x50/0xa0 [ 151.739900][ T4357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.739922][ T4357] RIP: 0033:0x7f7d7615e98e [ 151.739937][ T4357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.739952][ T4357] RSP: 002b:00007f7d7707cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.739970][ T4357] RAX: ffffffffffffffda RBX: 00007f7d7707d6c0 RCX: 00007f7d7615e98e [ 151.739983][ T4357] RDX: 000000000000000f RSI: 00007f7d7707d0a0 RDI: 0000000000000004 [ 151.739994][ T4357] RBP: 00007f7d7707d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.740005][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.740015][ T4357] R13: 00007f7d76426038 R14: 00007f7d76425fa0 R15: 00007ffcfda237a8 [ 151.740030][ T4357] [ 152.005380][ T36] kauditd_printk_skb: 358 callbacks suppressed [ 152.005402][ T36] audit: type=1400 audit(1790964511.157:1637): avc: denied { read } for pid=4358 comm="syz.3.1455" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 152.034359][ T36] audit: type=1400 audit(1790964511.157:1638): avc: denied { create } for pid=4358 comm="syz.3.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.037243][ T4361] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 152.055231][ T36] audit: type=1400 audit(1790964511.157:1639): avc: denied { create } for pid=4358 comm="syz.3.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.055271][ T36] audit: type=1400 audit(1790964511.185:1640): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.055336][ T36] audit: type=1400 audit(1790964511.419:1641): avc: denied { create } for pid=4360 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 152.073916][ T4361] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1456'. [ 152.121388][ T36] audit: type=1400 audit(1790964511.494:1642): avc: denied { create } for pid=4362 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 152.157263][ T36] audit: type=1400 audit(1790964511.512:1643): avc: denied { create } for pid=4362 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.177748][ T36] audit: type=1400 audit(1790964511.522:1644): avc: denied { create } for pid=4362 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.198289][ T36] audit: type=1400 audit(1790964511.522:1645): avc: denied { create } for pid=4362 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.219462][ T36] audit: type=1400 audit(1790964511.522:1646): avc: denied { create } for pid=4362 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 152.899975][ T4391] mmap: syz.1.1469 (4391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.281215][ T4429] FAULT_INJECTION: forcing a failure. [ 153.281215][ T4429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.294534][ T4429] CPU: 0 UID: 0 PID: 4429 Comm: syz.0.1484 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 153.294577][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.294593][ T4429] Call Trace: [ 153.294602][ T4429] [ 153.294614][ T4429] __dump_stack+0x21/0x30 [ 153.294649][ T4429] dump_stack_lvl+0x140/0x1c0 [ 153.294672][ T4429] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.294722][ T4429] ? vsnprintf+0x7b4/0x1ad0 [ 153.294745][ T4429] ? check_stack_object+0x10f/0x150 [ 153.294773][ T4429] dump_stack+0x19/0x20 [ 153.294797][ T4429] should_fail_ex+0x3c2/0x510 [ 153.294819][ T4429] should_fail+0xf/0x20 [ 153.294838][ T4429] should_fail_usercopy+0x1e/0x30 [ 153.294860][ T4429] _copy_from_user+0x20/0xa0 [ 153.294884][ T4429] kstrtouint_from_user+0xde/0x170 [ 153.294904][ T4429] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 153.294924][ T4429] ? selinux_file_permission+0x318/0xb60 [ 153.294943][ T4429] ? __cfi_selinux_file_permission+0x10/0x10 [ 153.294961][ T4429] proc_fail_nth_write+0x8f/0x220 [ 153.294987][ T4429] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 153.295012][ T4429] ? bpf_lsm_file_permission+0xd/0x20 [ 153.295035][ T4429] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 153.295060][ T4429] vfs_write+0x3c1/0xfd0 [ 153.295078][ T4429] ? __cfi_vfs_write+0x10/0x10 [ 153.295095][ T4429] ? __kasan_check_write+0x18/0x20 [ 153.295112][ T4429] ? mutex_lock+0x97/0x1d0 [ 153.295133][ T4429] ? __cfi_mutex_lock+0x10/0x10 [ 153.295156][ T4429] ksys_write+0x145/0x260 [ 153.295174][ T4429] ? __cfi_ksys_write+0x10/0x10 [ 153.295192][ T4429] ? __kasan_check_read+0x15/0x20 [ 153.295218][ T4429] __x64_sys_write+0x7f/0x90 [ 153.295236][ T4429] x64_sys_call+0x271c/0x2ee0 [ 153.295251][ T4429] do_syscall_64+0x57/0xf0 [ 153.295268][ T4429] ? clear_bhb_loop+0x50/0xa0 [ 153.295301][ T4429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.295323][ T4429] RIP: 0033:0x7fc8f615e98e [ 153.295337][ T4429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.295351][ T4429] RSP: 002b:00007fc8f713bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.295369][ T4429] RAX: ffffffffffffffda RBX: 00007fc8f713c6c0 RCX: 00007fc8f615e98e [ 153.295381][ T4429] RDX: 0000000000000001 RSI: 00007fc8f713c0a0 RDI: 0000000000000006 [ 153.295391][ T4429] RBP: 00007fc8f713c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.295402][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.295413][ T4429] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 153.295427][ T4429] [ 154.160013][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 156.975820][ T4509] netlink: 'syz.0.1515': attribute type 16 has an invalid length. [ 156.983856][ T4509] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1515'. [ 157.043042][ T4517] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 157.050866][ T4517] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1519'. [ 157.699572][ T36] kauditd_printk_skb: 250 callbacks suppressed [ 157.699604][ T36] audit: type=1400 audit(1790964516.713:1897): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.729682][ T36] audit: type=1400 audit(1790964516.732:1898): avc: denied { create } for pid=4528 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 157.750043][ T36] audit: type=1400 audit(1790964516.732:1899): avc: denied { read } for pid=4528 comm="syz.2.1523" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 157.772885][ T36] audit: type=1400 audit(1790964516.750:1900): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.796631][ T36] audit: type=1400 audit(1790964516.769:1901): avc: denied { create } for pid=4531 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 157.817997][ T36] audit: type=1400 audit(1790964516.769:1902): avc: denied { create } for pid=4531 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 157.839322][ T36] audit: type=1400 audit(1790964516.769:1903): avc: denied { create } for pid=4531 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 157.859913][ T36] audit: type=1400 audit(1790964516.769:1904): avc: denied { execmem } for pid=4531 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 157.879368][ T36] audit: type=1400 audit(1790964516.788:1905): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.903043][ T36] audit: type=1400 audit(1790964516.872:1906): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.944845][ T4540] sit0: entered promiscuous mode [ 157.951385][ T4540] netlink: 'syz.2.1528': attribute type 1 has an invalid length. [ 157.959245][ T4540] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1528'. [ 158.539742][ T4562] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 158.547638][ T4562] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1538'. [ 158.958182][ T4585] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 158.974333][ T4585] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1547'. [ 159.478043][ T4592] netlink: 'syz.2.1549': attribute type 4 has an invalid length. [ 159.580457][ T4606] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 159.588400][ T4606] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1556'. [ 159.711632][ T4626] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 159.721350][ T4626] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1565'. [ 160.386119][ T4634] netlink: 'syz.0.1569': attribute type 12 has an invalid length. [ 160.431516][ T4647] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 160.439490][ T4647] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1575'. [ 161.382660][ T4673] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1587'. [ 161.448907][ T4685] tap0: tun_chr_ioctl cmd 1074025678 [ 161.454311][ T4685] tap0: group set to 823 [ 161.700709][ T4700] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1599'. [ 161.991055][ T4705] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1601'. [ 163.076817][ T36] kauditd_printk_skb: 313 callbacks suppressed [ 163.076837][ T36] audit: type=1400 audit(1790964521.746:2220): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.112832][ T36] audit: type=1400 audit(1790964521.783:2221): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.137179][ T36] audit: type=1400 audit(1790964521.783:2222): avc: denied { name_bind } for pid=4729 comm="syz.2.1612" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 163.165921][ T36] audit: type=1400 audit(1790964521.783:2223): avc: denied { sys_module } for pid=4729 comm="syz.2.1612" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 163.187178][ T36] audit: type=1400 audit(1790964521.811:2224): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.210823][ T36] audit: type=1326 audit(1790964521.830:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7f4d9e159 code=0x0 [ 163.237544][ T36] audit: type=1400 audit(1790964521.839:2226): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.263972][ T36] audit: type=1400 audit(1790964521.858:2227): avc: denied { create } for pid=4733 comm="syz.3.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 163.283932][ T36] audit: type=1400 audit(1790964521.858:2228): avc: denied { create } for pid=4733 comm="syz.3.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 163.303744][ T36] audit: type=1400 audit(1790964521.895:2229): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.134248][ T4805] validate_nla: 3 callbacks suppressed [ 165.134265][ T4805] netlink: 'syz.2.1642': attribute type 21 has an invalid length. [ 165.195668][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.617362][ T4850] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 166.625236][ T4850] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1662'. [ 166.845576][ T4861] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1666'. [ 166.854747][ T4861] gretap0: entered promiscuous mode [ 166.860281][ T4861] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1666'. [ 166.869375][ T4861] 0{X功: renamed from gretap0 [ 166.875471][ T4861] 0{X功: left promiscuous mode [ 166.880686][ T4861] 0{X功: entered allmulticast mode [ 166.886630][ T4861] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 166.903529][ T4861] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1666'. [ 166.913127][ T4861] 0{X功: entered promiscuous mode [ 166.918608][ T4861] 0{X功: left allmulticast mode [ 166.924482][ T4862] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1666'. [ 166.933592][ T4862] 0{X功: renamed from gretap0 (while UP) [ 166.940456][ T4862] 0{X功: entered allmulticast mode [ 166.946239][ T4862] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 167.410834][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.506485][ T4876] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 167.514383][ T4876] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1671'. [ 167.888332][ T4897] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 167.896204][ T4897] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1680'. [ 168.512133][ T36] kauditd_printk_skb: 301 callbacks suppressed [ 168.512154][ T36] audit: type=1400 audit(1790964782.825:2531): avc: denied { create } for pid=4918 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 168.563525][ T36] audit: type=1400 audit(1790964782.872:2532): avc: denied { create } for pid=4922 comm="syz.1.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 168.583490][ T4923] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 168.591532][ T4923] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1689'. [ 168.603088][ T36] audit: type=1400 audit(1790964782.919:2533): avc: denied { name_bind } for pid=4922 comm="syz.1.1689" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 168.625297][ T36] audit: type=1400 audit(1790964782.937:2534): avc: denied { mounton } for pid=4922 comm="syz.1.1689" path="/459" dev="tmpfs" ino=2527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 168.648480][ T36] audit: type=1400 audit(1790964782.956:2535): avc: denied { execmem } for pid=4922 comm="syz.1.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 168.677142][ T36] audit: type=1400 audit(1790964782.975:2536): avc: denied { mounton } for pid=4922 comm="syz.1.1689" path="/459/dev" dev="tmpfs" ino=2532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 168.700139][ T36] audit: type=1400 audit(1790964782.975:2537): avc: denied { mounton } for pid=4922 comm="syz.1.1689" path="/459/mnt" dev="tmpfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 168.726318][ T36] audit: type=1400 audit(1790964783.031:2538): avc: denied { create } for pid=4924 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 168.761856][ T36] audit: type=1400 audit(1790964783.059:2539): avc: denied { create } for pid=4924 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 168.795640][ T36] audit: type=1400 audit(1790964783.059:2540): avc: denied { create } for pid=4924 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 169.907030][ T4991] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 169.914889][ T4991] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1715'. [ 170.115994][ T5001] netlink: 'syz.0.1719': attribute type 3 has an invalid length. [ 170.123935][ T5001] netlink: 'syz.0.1719': attribute type 3 has an invalid length. [ 170.436124][ T5023] netlink: 'syz.0.1728': attribute type 3 has an invalid length. [ 170.444033][ T5023] netlink: 'syz.0.1728': attribute type 3 has an invalid length. [ 170.480637][ T5027] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1730'. [ 170.720793][ T5050] validate_nla: 1 callbacks suppressed [ 170.720814][ T5050] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 171.993848][ T5115] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 172.001683][ T5115] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 172.347444][ T5126] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 172.388872][ T5133] netlink: 'syz.1.1772': attribute type 4 has an invalid length. [ 172.396745][ T5133] __nla_validate_parse: 2 callbacks suppressed [ 172.396765][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 172.581656][ T5141] netlink: 'syz.0.1775': attribute type 3 has an invalid length. [ 172.589522][ T5141] netlink: 'syz.0.1775': attribute type 3 has an invalid length. [ 173.207716][ T5171] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 173.215594][ T5171] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 173.615961][ T5201] netlink: 'syz.1.1802': attribute type 21 has an invalid length. [ 174.095784][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 174.095803][ T36] audit: type=1400 audit(1790964788.054:2902): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.129193][ T36] audit: type=1400 audit(1790964788.092:2903): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.159527][ T36] audit: type=1400 audit(1790964788.120:2904): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.189760][ T36] audit: type=1400 audit(1790964788.120:2905): avc: denied { read } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.213817][ T36] audit: type=1400 audit(1790964788.148:2906): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.238217][ T36] audit: type=1400 audit(1790964788.148:2907): avc: denied { create } for pid=5215 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 174.259985][ T36] audit: type=1400 audit(1790964788.166:2908): avc: denied { read } for pid=5212 comm="syz.0.1807" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 174.283191][ T36] audit: type=1400 audit(1790964788.166:2909): avc: denied { create } for pid=5215 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 174.303080][ T36] audit: type=1400 audit(1790964788.166:2910): avc: denied { create } for pid=5215 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 174.334418][ T36] audit: type=1400 audit(1790964788.166:2911): avc: denied { execmem } for pid=5215 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 175.060529][ T5302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5302 comm=syz.0.1850 [ 175.768629][ T5364] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1877'. [ 175.802518][ T5373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1879'. [ 175.977060][ T5389] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1887'. [ 176.005006][ T5391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5391 comm=syz.1.1888 [ 176.104259][ T5399] FAULT_INJECTION: forcing a failure. [ 176.104259][ T5399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.117593][ T5399] CPU: 1 UID: 0 PID: 5399 Comm: syz.0.1892 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 176.117639][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.117649][ T5399] Call Trace: [ 176.117656][ T5399] [ 176.117664][ T5399] __dump_stack+0x21/0x30 [ 176.117692][ T5399] dump_stack_lvl+0x140/0x1c0 [ 176.117715][ T5399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.117739][ T5399] ? avc_has_perm_noaudit+0x289/0x360 [ 176.117762][ T5399] dump_stack+0x19/0x20 [ 176.117784][ T5399] should_fail_ex+0x3c2/0x510 [ 176.117805][ T5399] should_fail+0xf/0x20 [ 176.117824][ T5399] should_fail_usercopy+0x1e/0x30 [ 176.117854][ T5399] _copy_from_user+0x20/0xa0 [ 176.117884][ T5399] do_fcntl+0x891/0x1580 [ 176.117905][ T5399] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 176.117923][ T5399] ? check_fcntl_cmd+0xb0/0xb0 [ 176.117943][ T5399] ? __cfi_mutex_unlock+0x10/0x10 [ 176.117968][ T5399] ? bpf_lsm_file_fcntl+0xd/0x20 [ 176.117992][ T5399] ? security_file_fcntl+0x3e/0x110 [ 176.118010][ T5399] __se_sys_fcntl+0xe4/0x180 [ 176.118029][ T5399] __x64_sys_fcntl+0x7f/0xa0 [ 176.118047][ T5399] x64_sys_call+0x1cb3/0x2ee0 [ 176.118062][ T5399] do_syscall_64+0x57/0xf0 [ 176.118079][ T5399] ? clear_bhb_loop+0x50/0xa0 [ 176.118102][ T5399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.118125][ T5399] RIP: 0033:0x7fc8f619e159 [ 176.118140][ T5399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.118154][ T5399] RSP: 002b:00007fc8f713c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 176.118172][ T5399] RAX: ffffffffffffffda RBX: 00007fc8f6425fa0 RCX: 00007fc8f619e159 [ 176.118185][ T5399] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 176.118204][ T5399] RBP: 00007fc8f713c090 R08: 0000000000000000 R09: 0000000000000000 [ 176.118214][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.118224][ T5399] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 176.118239][ T5399] [ 176.478155][ T5412] validate_nla: 2 callbacks suppressed [ 176.478177][ T5412] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 176.491548][ T5412] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1898'. [ 176.902140][ T5431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1906'. [ 176.912387][ T5431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5431 comm=syz.1.1906 [ 176.938426][ T5435] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 176.946339][ T5435] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1907'. [ 177.048318][ T5455] sock: sock_set_timeout: `syz.1.1917' (pid 5455) tries to set negative timeout [ 177.071828][ T5458] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 177.079677][ T5458] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1918'. [ 177.195987][ T5481] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 177.203873][ T5481] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1928'. [ 177.578570][ T5501] netlink: 'syz.2.1936': attribute type 21 has an invalid length. [ 177.598629][ T5503] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 177.606812][ T5503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1937'. [ 178.049615][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 179.738069][ T36] kauditd_printk_skb: 513 callbacks suppressed [ 179.738089][ T36] audit: type=1400 audit(1790964793.339:3425): avc: denied { read } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.768682][ T36] audit: type=1400 audit(1790964793.367:3426): avc: denied { read write } for pid=5599 comm="syz.3.1977" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 179.819051][ T36] audit: type=1400 audit(1790964793.405:3427): avc: denied { create } for pid=5597 comm="syz.1.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 179.862189][ T36] audit: type=1400 audit(1790964793.442:3428): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.919364][ T36] audit: type=1400 audit(1790964793.507:3429): avc: denied { read write } for pid=5603 comm="syz.0.1978" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 179.942783][ T36] audit: type=1400 audit(1790964793.507:3430): avc: denied { create } for pid=5603 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 179.972450][ T36] audit: type=1400 audit(1790964793.545:3431): avc: denied { read } for pid=295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.996239][ T36] audit: type=1400 audit(1790964793.545:3432): avc: denied { create } for pid=5605 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 180.018836][ T36] audit: type=1400 audit(1790964793.545:3433): avc: denied { create } for pid=5605 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 180.038753][ T36] audit: type=1400 audit(1790964793.545:3434): avc: denied { execmem } for pid=5605 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 180.624911][ T5629] futex_wake_op: syz.1.1988 tries to shift op by 144; fix this program [ 181.150621][ T5659] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 181.158615][ T5659] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2000'. [ 181.174101][ T5659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19723 sclass=netlink_route_socket pid=5659 comm=syz.2.2000 [ 182.008940][ T5684] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 182.017335][ T5684] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2010'. [ 182.028286][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19723 sclass=netlink_route_socket pid=5684 comm=syz.3.2010 [ 183.198638][ T5740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5740 comm=syz.2.2032 [ 183.212372][ T5740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5740 comm=syz.2.2032 [ 183.605071][ T5752] netlink: 'syz.3.2036': attribute type 3 has an invalid length. [ 183.616987][ T5752] netlink: 'syz.3.2036': attribute type 3 has an invalid length. [ 183.739030][ T5770] FAULT_INJECTION: forcing a failure. [ 183.739030][ T5770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.752935][ T5770] CPU: 1 UID: 0 PID: 5770 Comm: syz.0.2043 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 183.752975][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.752992][ T5770] Call Trace: [ 183.752999][ T5770] [ 183.753009][ T5770] __dump_stack+0x21/0x30 [ 183.753055][ T5770] dump_stack_lvl+0x140/0x1c0 [ 183.753088][ T5770] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.753133][ T5770] ? check_stack_object+0x138/0x150 [ 183.753167][ T5770] dump_stack+0x19/0x20 [ 183.753198][ T5770] should_fail_ex+0x3c2/0x510 [ 183.753235][ T5770] should_fail+0xf/0x20 [ 183.753262][ T5770] should_fail_usercopy+0x1e/0x30 [ 183.753293][ T5770] _copy_to_user+0x24/0xa0 [ 183.753328][ T5770] simple_read_from_buffer+0xed/0x160 [ 183.753368][ T5770] proc_fail_nth_read+0x1aa/0x220 [ 183.753404][ T5770] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 183.753440][ T5770] ? bpf_lsm_file_permission+0xd/0x20 [ 183.753471][ T5770] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 183.753507][ T5770] vfs_read+0x28b/0xc70 [ 183.753536][ T5770] ? __cfi_vfs_read+0x10/0x10 [ 183.753560][ T5770] ? __kasan_check_write+0x18/0x20 [ 183.753585][ T5770] ? mutex_lock+0x97/0x1d0 [ 183.753614][ T5770] ? __cfi_mutex_lock+0x10/0x10 [ 183.753647][ T5770] ksys_read+0x145/0x260 [ 183.753670][ T5770] ? __cfi_ksys_read+0x10/0x10 [ 183.753695][ T5770] ? __kasan_check_read+0x15/0x20 [ 183.753720][ T5770] __x64_sys_read+0x7f/0x90 [ 183.753746][ T5770] x64_sys_call+0x2638/0x2ee0 [ 183.753768][ T5770] do_syscall_64+0x57/0xf0 [ 183.753792][ T5770] ? clear_bhb_loop+0x50/0xa0 [ 183.753824][ T5770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.753855][ T5770] RIP: 0033:0x7fc8f615e98e [ 183.753875][ T5770] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.753896][ T5770] RSP: 002b:00007fc8f713bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.753923][ T5770] RAX: ffffffffffffffda RBX: 00007fc8f713c6c0 RCX: 00007fc8f615e98e [ 183.753941][ T5770] RDX: 000000000000000f RSI: 00007fc8f713c0a0 RDI: 000000000000000c [ 183.753956][ T5770] RBP: 00007fc8f713c090 R08: 0000000000000000 R09: 0000000000000000 [ 183.753972][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.753987][ T5770] R13: 00007fc8f6426038 R14: 00007fc8f6425fa0 R15: 00007ffe91ed1fb8 [ 183.754008][ T5770] [ 184.077178][ T5783] netlink: 'syz.1.2049': attribute type 21 has an invalid length. [ 185.256196][ T36] kauditd_printk_skb: 271 callbacks suppressed [ 185.256217][ T36] audit: type=1400 audit(1790964798.493:3706): avc: denied { create } for pid=5820 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 185.283156][ T36] audit: type=1400 audit(1790964798.493:3707): avc: denied { create } for pid=5820 comm="syz.1.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 185.307956][ T36] audit: type=1400 audit(1790964798.549:3708): avc: denied { create } for pid=5822 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 185.329093][ T36] audit: type=1400 audit(1790964798.549:3709): avc: denied { create } for pid=5822 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 185.335110][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.349248][ T36] audit: type=1400 audit(1790964798.549:3710): avc: denied { create } for pid=5822 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 185.359034][ T5823] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 185.376019][ T36] audit: type=1400 audit(1790964798.549:3711): avc: denied { create } for pid=5822 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 185.383537][ T5823] audit: backlog limit exceeded [ 185.402681][ T36] audit: type=1400 audit(1790964798.549:3712): avc: denied { create } for pid=5822 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 186.693144][ T5883] netlink: 'syz.0.2090': attribute type 21 has an invalid length. [ 187.660251][ T5956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5956 comm=syz.0.2123 [ 187.966691][ T6005] netlink: 'syz.0.2145': attribute type 17 has an invalid length. [ 188.033964][ T6018] netlink: 'syz.0.2151': attribute type 21 has an invalid length. [ 188.117723][ T6034] syz.0.2159 (6034): /proc/6033/oom_adj is deprecated, please use /proc/6033/oom_score_adj instead. [ 189.001074][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2178'. [ 189.050848][ T6079] ip6gretap0: entered promiscuous mode [ 189.062118][ T6079] ip6gretap0: entered allmulticast mode [ 190.295586][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 190.609388][ T36] kauditd_printk_skb: 12622 callbacks suppressed [ 190.609408][ T36] audit: type=1400 audit(1790964803.496:16173): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.630169][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 190.637557][ T36] audit: type=1400 audit(1790964803.505:16174): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.643738][ T149] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 190.665047][ T36] audit: type=1400 audit(1790964803.505:16175): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.672478][ T149] audit: backlog limit exceeded [ 190.693861][ T36] audit: type=1400 audit(1790964803.505:16176): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.699764][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 190.719869][ T36] audit: type=1400 audit(1790964803.505:16177): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.726082][ T149] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 191.358176][ T6144] netlink: 61922 bytes leftover after parsing attributes in process `syz.3.2206'. [ 191.476722][ T12] bridge_slave_1: left allmulticast mode [ 191.482447][ T12] bridge_slave_1: left promiscuous mode [ 191.499999][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.508321][ T12] bridge_slave_0: left allmulticast mode [ 191.514012][ T12] bridge_slave_0: left promiscuous mode [ 191.520348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.637545][ T12] tipc: Left network mode [ 191.643052][ T12] veth1_macvtap: left promiscuous mode [ 191.648844][ T12] veth0_vlan: left promiscuous mode [ 192.062005][ T6152] syzkaller0: entered promiscuous mode [ 192.067774][ T6152] syzkaller0: entered allmulticast mode [ 193.700847][ T6165] syzkaller1: entered promiscuous mode [ 193.706489][ T6165] syzkaller1: entered allmulticast mode [ 195.762331][ T6181] netlink: 63766 bytes leftover after parsing attributes in process `syz.2.2220'. [ 195.793912][ T6179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6179 comm=syz.0.2219 [ 195.965391][ T36] kauditd_printk_skb: 47454 callbacks suppressed [ 195.965411][ T36] audit: type=1400 audit(1790964808.510:63538): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.992480][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.995879][ T36] audit: type=1400 audit(1790964808.519:63539): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.000238][ T149] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 196.020849][ T36] audit: type=1400 audit(1790964808.519:63540): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.028928][ T149] audit: backlog limit exceeded [ 196.049605][ T36] audit: type=1400 audit(1790964808.519:63541): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.055747][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.075771][ T36] audit: type=1400 audit(1790964808.519:63542): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.082555][ T149] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 199.689955][ T6200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6200 comm=syz.3.2230 Stopping sshd: [ 201.332599][ T36] kauditd_printk_skb: 47634 callbacks suppressed stopped /usr/sbi[ 201.332654][ T36] audit: type=1400 audit(1790964813.533:111167): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 n/sshd (pid 201) [ 201.487149][ T36] audit: type=1400 audit(1790964813.533:111168): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 OK [ 201.532025][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.532169][ T36] audit: type=1400 audit(1790964813.533:111169): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.553283][ T149] audit: audit_lost=96 audit_rate_limit=0 audit_backlog_limit=64 Stopping crond: [ 201.620030][ T149] audit: backlog limit exceeded [ 201.620792][ T36] audit: type=1400 audit(1790964813.533:111170): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 201.642900][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 stopped /usr/sbin/crond (pid 194) OK [ 201.684838][ T149] audit: audit_lost=97 audit_rate_limit=0 audit_backlog_limit=64 [ 201.693765][ T36] audit: type=1400 audit(1790964813.533:111171): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: OK Stopping iptables: FAIL Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.1.20 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 203.794168][ T12] bridge_slave_1: left allmulticast mode [ 203.799883][ T12] bridge_slave_1: left promiscuous mode [ 203.805641][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.813377][ T12] bridge_slave_0: left allmulticast mode [ 203.819070][ T12] bridge_slave_0: left promiscuous mode [ 203.824917][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.933758][ T12] veth1_macvtap: left promiscuous mode [ 203.939338][ T12] veth0_vlan: left promiscuous mode [ 204.113119][ T12] ------------[ cut here ]------------ [ 204.118644][ T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 204.128697][ T12] Modules linked in: [ 204.132625][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 204.144298][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.154488][ T12] Workqueue: netns cleanup_net [ 204.159307][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 204.165466][ T12] Code: e8 b1 7f d5 fc 4b 83 3c 3e 00 75 19 e8 d5 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 c7 97 7c fc 49 83 c7 08 eb c9 e8 bc 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 204.185245][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 204.191448][ T12] RAX: ffffffff850ae0e4 RBX: ffff88812f0c11c0 RCX: ffff888102651300 [ 204.199572][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810476c628 [ 204.207618][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 204.215681][ T12] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: dffffc0000000000 [ 204.223752][ T12] R13: dffffc0000000000 R14: ffff88810476c000 R15: 0000000000000628 [ 204.231790][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 204.240810][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.247427][ T12] CR2: 00007f73334d3e9c CR3: 000000010af8c000 CR4: 00000000003526b0 [ 204.255483][ T12] Call Trace: [ 204.258787][ T12] [ 204.261809][ T12] cleanup_net+0x6ba/0xc90 [ 204.266287][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 204.271323][ T12] ? kick_pool+0xb9/0x540 [ 204.275778][ T12] process_scheduled_works+0x7f4/0x1060 [ 204.281353][ T12] worker_thread+0xc99/0x13f0 [ 204.286140][ T12] kthread+0x2c4/0x360 [ 204.290247][ T12] ? __cfi_worker_thread+0x10/0x10 [ 204.295437][ T12] ? __cfi_kthread+0x10/0x10 [ 204.300066][ T12] ret_from_fork+0x67/0xa0 [ 204.304610][ T12] ? __cfi_kthread+0x10/0x10 [ 204.309229][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.314003][ T12] [ 204.317130][ T12] ---[ end trace 0000000000000000 ]--- [ 204.322945][ T12] ------------[ cut here ]------------ [ 204.328475][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 204.338526][ T12] Modules linked in: [ 204.342439][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 204.355548][ T12] Tainted: [W]=WARN [ 204.359385][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.369529][ T12] Workqueue: netns cleanup_net [ 204.374338][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 204.380495][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 80 97 7c fc 49 81 ff f8 07 00 00 74 1b e8 72 97 7c fc 49 83 c7 08 eb c5 e8 67 97 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 57 97 7c fc 5b 41 5c 41 5e 41 [ 204.400164][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 204.406268][ T12] RAX: ffffffff850ae139 RBX: ffff88810476c800 RCX: ffff888102651300 [ 204.414315][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810476c810 [ 204.422404][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 204.430423][ T12] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: dffffc0000000000 [ 204.438603][ T12] R13: dffffc0000000000 R14: ffff88810476c000 R15: 0000000000000010 [ 204.446646][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.455621][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.462265][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 204.470389][ T12] Call Trace: [ 204.473986][ T12] [ 204.477133][ T12] cleanup_net+0x6ba/0xc90 [ 204.481647][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 204.486659][ T12] ? kick_pool+0xb9/0x540 [ 204.491032][ T12] process_scheduled_works+0x7f4/0x1060 [ 204.496672][ T12] worker_thread+0xc99/0x13f0 [ 204.501395][ T12] kthread+0x2c4/0x360 [ 204.505496][ T12] ? __cfi_worker_thread+0x10/0x10 [ 204.510699][ T12] ? __cfi_kthread+0x10/0x10 [ 204.515359][ T12] ret_from_fork+0x67/0xa0 [ 204.519896][ T12] ? __cfi_kthread+0x10/0x10 [ 204.524532][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.529366][ T12] [ 204.532398][ T12] ---[ end trace 0000000000000000 ]--- [ 204.541952][ T12] ------------[ cut here ]------------ [ 204.547533][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 204.556969][ T12] Modules linked in: [ 204.560894][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 204.573953][ T12] Tainted: [W]=WARN [ 204.577765][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.587865][ T12] Workqueue: netns cleanup_net [ 204.592710][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 204.598294][ T12] Code: 3c 20 00 74 08 48 89 df e8 bf 42 f0 fc 48 8b 3b e8 f7 32 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 b3 b7 00 cc e8 d2 5a 97 fc <0f> 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a [ 204.617959][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 204.624052][ T12] RAX: ffffffff84f01dce RBX: ffff88812f0c11c0 RCX: ffff888102651300 [ 204.632092][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102651300 [ 204.640125][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 204.648349][ T12] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: 1ffffffff0fa861c [ 204.656370][ T12] R13: dffffc0000000000 R14: ffff88812f0c1dc0 R15: dffffc0000000000 [ 204.664419][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.673395][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.680038][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 204.688025][ T12] Call Trace: [ 204.691363][ T12] [ 204.694318][ T12] xfrm_net_exit+0x31/0x80 [ 204.698770][ T12] cleanup_net+0x6ba/0xc90 [ 204.703306][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 204.708280][ T12] ? kick_pool+0xb9/0x540 [ 204.712666][ T12] process_scheduled_works+0x7f4/0x1060 [ 204.718230][ T12] worker_thread+0xc99/0x13f0 [ 204.722955][ T12] kthread+0x2c4/0x360 [ 204.727037][ T12] ? __cfi_worker_thread+0x10/0x10 [ 204.732194][ T12] ? __cfi_kthread+0x10/0x10 [ 204.736797][ T12] ret_from_fork+0x67/0xa0 [ 204.741323][ T12] ? __cfi_kthread+0x10/0x10 [ 204.746213][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.751012][ T12] [ 204.754083][ T12] ---[ end trace 0000000000000000 ]--- [ 204.759758][ T12] ------------[ cut here ]------------ [ 204.765266][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3237 xfrm_state_fini+0x2e2/0x310 [ 204.774691][ T12] Modules linked in: [ 204.778599][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 204.791787][ T12] Tainted: [W]=WARN [ 204.795629][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.805765][ T12] Workqueue: netns cleanup_net [ 204.810626][ T12] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 204.816203][ T12] Code: cc e8 d2 5a 97 fc 0f 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a 97 fc 0f 0b e9 8c fe ff ff e8 ae 5a 97 fc <0f> 0b e9 f9 fe ff ff e8 a2 5a 97 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 204.835912][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 204.842057][ T12] RAX: ffffffff84f01df2 RBX: ffff88812f0c11c0 RCX: ffff888102651300 Sent SIGKILL to[ 204.850393][ T12] RDX: 0000000000000000 RSI: ffff888103384300 RDI: ffff8881000418c0 all processes [ 204.859969][ T12] RBP: ffffc900000c7b98 R08: 0000000091fa2791 R09: 000000004e8f6a9a [ 204.868996][ T12] R10: 000000000000000d R11: ffffffff8175a6a0 R12: ffff888103384c80 [ 204.877077][ T12] R13: 1ffff11025e183bb R14: 0000000000000040 R15: ffff88812f0c1dd8 [ 204.885230][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.894297][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.900921][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 204.909025][ T12] Call Trace: [ 204.912344][ T12] [ 204.915374][ T12] xfrm_net_exit+0x31/0x80 [ 204.919835][ T12] cleanup_net+0x6ba/0xc90 [ 204.924345][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 204.929317][ T12] ? kick_pool+0xb9/0x540 [ 204.933673][ T12] process_scheduled_works+0x7f4/0x1060 [ 204.939319][ T12] worker_thread+0xc99/0x13f0 [ 204.944064][ T12] kthread+0x2c4/0x360 [ 204.948224][ T12] ? __cfi_worker_thread+0x10/0x10 [ 204.953398][ T12] ? __cfi_kthread+0x10/0x10 [ 204.958152][ T12] ret_from_fork+0x67/0xa0 [ 204.962656][ T12] ? __cfi_kthread+0x10/0x10 [ 204.967377][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.972188][ T12] [ 204.975477][ T12] ---[ end trace 0000000000000000 ]--- [ 204.981391][ T12] ------------[ cut here ]------------ [ 204.986886][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3239 xfrm_state_fini+0x2ee/0x310 Requesting syst[ 204.996426][ T12] Modules linked in: em poweroff[ 205.001684][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 205.015859][ T12] Tainted: [W]=WARN [ 205.019744][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.029894][ T12] Workqueue: netns cleanup_net [ 205.034774][ T12] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 205.040372][ T12] Code: ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a 97 fc 0f 0b e9 8c fe ff ff e8 ae 5a 97 fc 0f 0b e9 f9 fe ff ff e8 a2 5a 97 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 205.042016][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.060099][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 205.072262][ T12] RAX: ffffffff84f01dfe RBX: ffff88812f0c11c0 RCX: ffff888102651300 [ 205.080313][ T12] RDX: 0000000000000000 RSI: ffff888103384c80 RDI: ffff8881000418c0 [ 205.088488][ T12] RBP: ffffc900000c7b98 R08: 00000000757e1403 R09: 000000003ae2b6e9 [ 205.096534][ T12] R10: 000000000000000d R11: ffffffff8175a6a0 R12: ffff888103a76e80 [ 205.104538][ T12] R13: 1ffff11025e183ba R14: 0000000000000040 R15: ffff88812f0c1dd0 [ 205.112693][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 205.121729][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.128416][ T12] CR2: 00007f73334d3e9c CR3: 000000010af8c000 CR4: 00000000003526b0 [ 205.136450][ T12] Call Trace: [ 205.139836][ T12] [ 205.142798][ T12] xfrm_net_exit+0x31/0x80 [ 205.147498][ T12] cleanup_net+0x6ba/0xc90 [ 205.151995][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 205.156971][ T12] ? kick_pool+0xb9/0x540 [ 205.161414][ T12] process_scheduled_works+0x7f4/0x1060 [ 205.167024][ T12] worker_thread+0xc99/0x13f0 [ 205.171824][ T12] kthread+0x2c4/0x360 [ 205.175932][ T12] ? __cfi_worker_thread+0x10/0x10 [ 205.181163][ T12] ? __cfi_kthread+0x10/0x10 [ 205.185782][ T12] ret_from_fork+0x67/0xa0 [ 205.190244][ T12] ? __cfi_kthread+0x10/0x10 [ 205.194925][ T12] ret_from_fork_asm+0x1a/0x30 [ 205.199729][ T12] [ 205.202875][ T12] ---[ end trace 0000000000000000 ]--- [ 205.256660][ T12] bridge_slave_1: left allmulticast mode [ 205.262371][ T12] bridge_slave_1: left promiscuous mode [ 205.268019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.275595][ T12] bridge_slave_0: left allmulticast mode [ 205.281414][ T12] bridge_slave_0: left promiscuous mode [ 205.287079][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.398364][ T12] veth1_macvtap: left promiscuous mode [ 205.592300][ T12] ------------[ cut here ]------------ [ 205.597870][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 205.607291][ T12] Modules linked in: [ 205.611231][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 205.624445][ T12] Tainted: [W]=WARN [ 205.628283][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.638384][ T12] Workqueue: netns cleanup_net [ 205.643245][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 205.648812][ T12] Code: 3c 20 00 74 08 48 89 df e8 bf 42 f0 fc 48 8b 3b e8 f7 32 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 b3 b7 00 cc e8 d2 5a 97 fc <0f> 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a [ 205.668482][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 205.674632][ T12] RAX: ffffffff84f01dce RBX: ffff88812f0c4700 RCX: ffff888102651300 [ 205.682654][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102651300 [ 205.690738][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d44647 R09: 1ffffffff0fa88c8 [ 205.698755][ T12] R10: dffffc0000000000 R11: fffffbfff0fa88c9 R12: 1ffffffff0fa861c [ 205.706772][ T12] R13: dffffc0000000000 R14: ffff88812f0c5300 R15: dffffc0000000000 [ 205.714771][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 205.723752][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.730415][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 205.738444][ T12] Call Trace: [ 205.741737][ T12] [ 205.744680][ T12] xfrm_net_exit+0x31/0x80 [ 205.749158][ T12] cleanup_net+0x6ba/0xc90 [ 205.753591][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 205.758570][ T12] ? kick_pool+0xb9/0x540 [ 205.762918][ T12] process_scheduled_works+0x7f4/0x1060 [ 205.768501][ T12] worker_thread+0xc99/0x13f0 [ 205.773222][ T12] kthread+0x2c4/0x360 [ 205.777311][ T12] ? __cfi_worker_thread+0x10/0x10 [ 205.782518][ T12] ? __cfi_kthread+0x10/0x10 [ 205.787158][ T12] ret_from_fork+0x67/0xa0 [ 205.791624][ T12] ? __cfi_kthread+0x10/0x10 [ 205.796229][ T12] ret_from_fork_asm+0x1a/0x30 [ 205.801037][ T12] [ 205.804063][ T12] ---[ end trace 0000000000000000 ]--- [ 205.809728][ T12] ------------[ cut here ]------------ [ 205.815310][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3237 xfrm_state_fini+0x2e2/0x310 [ 205.824748][ T12] Modules linked in: [ 205.828673][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 205.841874][ T12] Tainted: [W]=WARN [ 205.845724][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.855819][ T12] Workqueue: netns cleanup_net [ 205.860608][ T12] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 205.866210][ T12] Code: cc e8 d2 5a 97 fc 0f 0b e9 b0 fd ff ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a 97 fc 0f 0b e9 8c fe ff ff e8 ae 5a 97 fc <0f> 0b e9 f9 fe ff ff e8 a2 5a 97 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 205.885872][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 205.892049][ T12] RAX: ffffffff84f01df2 RBX: ffff88812f0c4700 RCX: ffff888102651300 [ 205.900090][ T12] RDX: 0000000000000000 RSI: ffff888104a5f980 RDI: ffff8881000418c0 [ 205.908103][ T12] RBP: ffffc900000c7b98 R08: 0000000091fa2791 R09: 000000004e8f6a9a [ 205.916118][ T12] R10: 000000000000000d R11: ffffffff8175a6a0 R12: ffff888104a5f600 [ 205.924144][ T12] R13: 1ffff11025e18a63 R14: 0000000000000040 R15: ffff88812f0c5318 [ 205.932166][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 205.941230][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.947863][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 205.955909][ T12] Call Trace: [ 205.959229][ T12] [ 205.962188][ T12] xfrm_net_exit+0x31/0x80 [ 205.966626][ T12] cleanup_net+0x6ba/0xc90 [ 205.971057][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 205.976035][ T12] ? kick_pool+0xb9/0x540 [ 205.980380][ T12] process_scheduled_works+0x7f4/0x1060 [ 205.986031][ T12] worker_thread+0xc99/0x13f0 [ 205.990762][ T12] kthread+0x2c4/0x360 [ 205.994927][ T12] ? __cfi_worker_thread+0x10/0x10 [ 206.000078][ T12] ? __cfi_kthread+0x10/0x10 [ 206.004760][ T12] ret_from_fork+0x67/0xa0 [ 206.009270][ T12] ? __cfi_kthread+0x10/0x10 [ 206.013898][ T12] ret_from_fork_asm+0x1a/0x30 [ 206.018745][ T12] [ 206.021825][ T12] ---[ end trace 0000000000000000 ]--- [ 206.027586][ T12] ------------[ cut here ]------------ [ 206.033053][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3239 xfrm_state_fini+0x2ee/0x310 [ 206.042496][ T12] Modules linked in: [ 206.046417][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 206.059561][ T12] Tainted: [W]=WARN [ 206.063399][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.073532][ T12] Workqueue: netns cleanup_net [ 206.078345][ T12] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 206.083977][ T12] Code: ff e8 c6 5a 97 fc 0f 0b e9 18 fe ff ff e8 ba 5a 97 fc 0f 0b e9 8c fe ff ff e8 ae 5a 97 fc 0f 0b e9 f9 fe ff ff e8 a2 5a 97 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 206.103709][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 206.109845][ T12] RAX: ffffffff84f01dfe RBX: ffff88812f0c4700 RCX: ffff888102651300 [ 206.118027][ T12] RDX: 0000000000000000 RSI: ffff888104a5f600 RDI: ffff8881000418c0 [ 206.119601][ T6273] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 206.126117][ T12] RBP: ffffc900000c7b98 R08: 00000000757e1403 R09: 000000003ae2b6e9 [ 206.140209][ T12] R10: 000000000000000d R11: ffffffff8175a6a0 R12: ffff888104a5f180 [ 206.141859][ T6273] ACPI: PM: Preparing to enter system sleep state S5 [ 206.148256][ T12] R13: 1ffff11025e18a62 R14: 0000000000000040 R15: ffff88812f0c5310 [ 206.155814][ T6273] kvm: exiting hardware virtualization [ 206.162980][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 206.177456][ T6273] reboot: Power down [ 206.181429][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.181453][ T12] CR2: 00007f567a1f84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 206.196136][ T12] Call Trace: [ 206.196149][ T12] [ 206.196161][ T12] xfrm_net_exit+0x31/0x80 [ 206.207244][ T12] cleanup_net+0x6ba/0xc90 [ 206.212229][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 206.218382][ T12] ? kick_pool+0xb9/0x540 [ 206.222760][ T12] process_scheduled_works+0x7f4/0x1060 [ 206.229380][ T12] worker_thread+0xc99/0x13f0 [ 206.234521][ T12] kthread+0x2c4/0x360 [ 206.238848][ T12] ? __cfi_worker_thread+0x10/0x10 [ 206.244701][ T12] ? __cfi_kthread+0x10/0x10 [ 206.250590][ T12] ret_from_fork+0x67/0xa0 [ 206.255044][ T12] ? __cfi_kthread+0x10/0x10 serialport: VM disconnected.