last executing test programs: 10.362582035s ago: executing program 0 (id=702): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r3}}], 0x1, 0x0, 0x0) 10.321541686s ago: executing program 0 (id=703): socket$inet_udp(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x88) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda71, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x4, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x2, 0x40040002, 0x336, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4001, 0xffffffff}}], 0x1, 0x0, 0x0) 10.321007816s ago: executing program 0 (id=704): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 4) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 10.269383758s ago: executing program 0 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 64) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x1, 0xfffffffe}}, 0x2e) (async, rerun: 64) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockname(r3, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x80) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000240)={0x7, 0x9dc5, 0x40000000, 0x0, 0x5}) (rerun: 64) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) (async) close(r1) 10.103831212s ago: executing program 0 (id=710): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 9.930797785s ago: executing program 0 (id=711): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) close(0x4) 9.809516448s ago: executing program 32 (id=711): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) close(0x4) 4.179201212s ago: executing program 4 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xfff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 5) 3.768150771s ago: executing program 4 (id=769): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfef9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x6, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x103, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x404, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x50e, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x2, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x588180, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x8, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) epoll_create1(0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.593433995s ago: executing program 2 (id=771): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 3.592989995s ago: executing program 2 (id=773): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r7, r8, &(0x7f0000000140)={0x0, 0xba1d, 0x4000, 0x2, 0x3, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc50, 0x800, 0x1, 0xe8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x267e, 0x200, 0x1, 0x15c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f69, 0x4, 0x1, 0x3d4, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8e3, 0x8000, 0x0, 0x148, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r10}}], 0x1, 0x0, 0x0) 2.99107697s ago: executing program 1 (id=775): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000a00)=""/143, 0x34, 0x5e) 2.925466811s ago: executing program 1 (id=776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8454f238666efbafc0cec6887000f6aea0f20d86635200000000f22d8baf80c66b8380ae38e66efbafc0cb80000efd0db0f01c43e65f30f012c66b96808000066b89150000066ba000000000f3066b8022c00000f23d00f21f866351000000d0f23f8", 0x67}], 0x1, 0x65, &(0x7f0000000280)=[@dstype0={0x6, 0x3}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.891637102s ago: executing program 1 (id=777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xd0c}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.765076665s ago: executing program 4 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.735785276s ago: executing program 1 (id=779): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x88) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda71, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x4, 0x4, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x2, 0x40040002, 0x336, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4001, 0xffffffff}}], 0x1, 0x0, 0x0) 2.729373406s ago: executing program 2 (id=780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0xffffffff, 0x5b}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000118, 0x3}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.473486382s ago: executing program 2 (id=782): syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) (async) r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x280000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x4, 0x8000801, 0x3, 0x8100002, 0x5}, 0x0, &(0x7f0000000000)={0xc, 0x1, 0x5, 0x0, 0x9, 0x0, 0x7f, 0x4}, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000580)={0xe000200f}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000580)={0xe000200f}) 2.336746285s ago: executing program 3 (id=785): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) setreuid(0xee00, 0x0) ioprio_get$uid(0x3, 0xee00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x11) r7 = openat(r6, &(0x7f0000000100)='./file0\x00', 0x290500, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000300)={{r5}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x1}}], 0x18}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) 2.275809297s ago: executing program 2 (id=786): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfef9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x6, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x103, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x404, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x50e, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x2, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x588180, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x8, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) epoll_create1(0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.169491069s ago: executing program 3 (id=787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xd0c}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.870134776s ago: executing program 1 (id=788): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000240)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.737610659s ago: executing program 4 (id=789): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.728589179s ago: executing program 3 (id=790): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x3, 0x6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bind$tipc(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000140)={0x6b4e, 0x40001000}) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRES16=r3, @ANYRES16=r0, @ANYBLOB="575f1eebeca5a4e666b303bf8dc05e34c112e9138cf011f0305459193986bdd62650649573b00ebedef6ccab3aa02e78bd2621a85cab823c54aa3aea4564bca1071995db1aab887be8ca1119833e2e66d2b30b8aa0a139a81d6463cc5d28108fe9922cc8a60fb7a6604548d6c64038a14d1cf31b0251c9461aa12016dbffe08eda83346f2d91a9ba2bc4f9c4728dd2386e020ee271f3ca4f55829a15ab85b6fcd2d2aa372a96730806eaa17b69284e656fe7c9b510bd7e4068e8f33d0d11d4ae4c5062f02497baf1c526bef17395820af5d1981ac73d91ccc758415dc646a4838992f0059787c97fa982182917b066627584", @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0xb0040) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x5000, {0x3}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0fc736b9820900000f32c4c38d7a5108000f8000880000660f61e7c744240000180000c74424028a000000c7442406000000000f011c24670fc7187410f30f1ed90f20e035000020000f22e0", 0x4c}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.322737569s ago: executing program 2 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f0000001740)) 1.025507046s ago: executing program 3 (id=792): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) 1.020891136s ago: executing program 3 (id=793): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 884.545199ms ago: executing program 4 (id=794): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}], 0x1, 0x20080058) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_pidfd_open(0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x0, 0x3, 0xe, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 772.680832ms ago: executing program 4 (id=795): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 171.301716ms ago: executing program 3 (id=796): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r6}}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 29.688015][ T36] audit: type=1400 audit(1786394379.590:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.691680][ T287] cgroup: Unknown subsys name 'net' [ 29.711325][ T36] audit: type=1400 audit(1786394379.590:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.739364][ T36] audit: type=1400 audit(1786394379.630:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.740006][ T287] cgroup: Unknown subsys name 'devices' [ 29.864719][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.870465][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.966431][ T36] audit: type=1400 audit(1786394379.870:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.989828][ T36] audit: type=1400 audit(1786394379.870:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.015026][ T36] audit: type=1400 audit(1786394379.870:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.037492][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.047183][ T36] audit: type=1400 audit(1786394379.960:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.073022][ T36] audit: type=1400 audit(1786394379.960:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.160445][ T36] audit: type=1400 audit(1786394380.060:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.161854][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.186179][ T36] audit: type=1400 audit(1786394380.060:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.977083][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.987341][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.994946][ T294] bridge_slave_0: entered allmulticast mode [ 31.001553][ T294] bridge_slave_0: entered promiscuous mode [ 31.008776][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.015885][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.023021][ T294] bridge_slave_1: entered allmulticast mode [ 31.029365][ T294] bridge_slave_1: entered promiscuous mode [ 31.167800][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.175586][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.182972][ T298] bridge_slave_0: entered allmulticast mode [ 31.189373][ T298] bridge_slave_0: entered promiscuous mode [ 31.199160][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206607][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.213820][ T298] bridge_slave_1: entered allmulticast mode [ 31.220148][ T298] bridge_slave_1: entered promiscuous mode [ 31.258149][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.265338][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.272584][ T299] bridge_slave_0: entered allmulticast mode [ 31.279599][ T299] bridge_slave_0: entered promiscuous mode [ 31.288071][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.295187][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.302552][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309705][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.322446][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.329539][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.336808][ T299] bridge_slave_1: entered allmulticast mode [ 31.343378][ T299] bridge_slave_1: entered promiscuous mode [ 31.358828][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.365973][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.373156][ T300] bridge_slave_0: entered allmulticast mode [ 31.379488][ T300] bridge_slave_0: entered promiscuous mode [ 31.389245][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.396596][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.403760][ T300] bridge_slave_1: entered allmulticast mode [ 31.410088][ T300] bridge_slave_1: entered promiscuous mode [ 31.518662][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.525783][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.533146][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.540214][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.565312][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.572915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.580363][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.588362][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.613863][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.620973][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.640439][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.647726][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.695229][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.702364][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.710796][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.717912][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.731606][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.738767][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.755376][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.762525][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.795256][ T294] veth0_vlan: entered promiscuous mode [ 31.817710][ T294] veth1_macvtap: entered promiscuous mode [ 31.829441][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.836570][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.851717][ T299] veth0_vlan: entered promiscuous mode [ 31.864506][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.871643][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.903909][ T298] veth0_vlan: entered promiscuous mode [ 31.920975][ T299] veth1_macvtap: entered promiscuous mode [ 31.935161][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.977898][ T298] veth1_macvtap: entered promiscuous mode [ 32.000100][ T300] veth0_vlan: entered promiscuous mode [ 32.051441][ T300] veth1_macvtap: entered promiscuous mode [ 32.254490][ T336] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 33.462392][ T365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=365 comm=syz.2.18 [ 33.502554][ T365] Zero length message leads to an empty skb [ 33.511652][ T370] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.997342][ T382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=382 comm=syz.0.24 [ 34.018634][ T384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=384 comm=syz.2.25 [ 34.040272][ T382] udc dummy_udc.0: failed to start g1: -19 [ 34.052754][ T382] UDC core: g1: couldn't find an available UDC or it's busy [ 34.072270][ T384] udc dummy_udc.0: failed to start g1: -19 [ 34.089194][ T384] UDC core: g1: couldn't find an available UDC or it's busy [ 34.658670][ T397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=397 comm=syz.3.29 [ 35.734001][ T416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=416 comm=syz.1.36 [ 35.756719][ T416] udc dummy_udc.0: failed to start g1: -19 [ 35.764568][ T416] UDC core: g1: couldn't find an available UDC or it's busy [ 35.825344][ T422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=422 comm=syz.1.38 [ 36.697766][ T442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=442 comm=syz.3.46 [ 37.873411][ T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=483 comm=syz.3.62 [ 38.119717][ T501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=501 comm=syz.1.67 [ 38.931688][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 38.931708][ T36] audit: type=1400 audit(1786394388.830:131): avc: denied { read write } for pid=514 comm="syz.3.74" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.981770][ T36] audit: type=1400 audit(1786394388.870:132): avc: denied { open } for pid=514 comm="syz.3.74" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.022155][ T36] audit: type=1400 audit(1786394388.870:133): avc: denied { create } for pid=514 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.109507][ T525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=525 comm=syz.2.71 [ 39.322796][ T541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=541 comm=syz.1.82 [ 39.368453][ T546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=546 comm=syz.1.84 [ 39.387128][ T546] udc dummy_udc.0: failed to start g1: -19 [ 39.394998][ T546] UDC core: g1: couldn't find an available UDC or it's busy [ 39.472949][ T553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=553 comm=syz.3.86 [ 40.176809][ T36] audit: type=1400 audit(1786394390.080:134): avc: denied { map } for pid=566 comm="syz.2.92" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 40.483081][ T601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=601 comm=syz.1.95 [ 40.625624][ T36] audit: type=1400 audit(1786394390.530:135): avc: denied { read write } for pid=612 comm="syz.3.100" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.650436][ T36] audit: type=1400 audit(1786394390.530:136): avc: denied { open } for pid=612 comm="syz.3.100" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.674962][ T36] audit: type=1400 audit(1786394390.530:137): avc: denied { ioctl } for pid=612 comm="syz.3.100" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.699844][ T36] audit: type=1400 audit(1786394390.530:138): avc: denied { relabelfrom } for pid=612 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.720735][ T36] audit: type=1400 audit(1786394390.530:139): avc: denied { relabelto } for pid=612 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.078367][ T658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=658 comm=syz.2.104 [ 41.336299][ T36] audit: type=1400 audit(1786394391.240:140): avc: denied { create } for pid=669 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.337987][ T670] FAULT_INJECTION: forcing a failure. [ 41.337987][ T670] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.369571][ T670] CPU: 1 UID: 0 PID: 670 Comm: syz.2.109 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 41.369614][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.369637][ T670] Call Trace: [ 41.369645][ T670] [ 41.369655][ T670] __dump_stack+0x21/0x30 [ 41.369692][ T670] dump_stack_lvl+0x140/0x1c0 [ 41.369724][ T670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.369756][ T670] ? _parse_integer+0x2e/0x40 [ 41.369779][ T670] ? kstrtoull+0x13b/0x1e0 [ 41.369801][ T670] dump_stack+0x19/0x20 [ 41.369836][ T670] should_fail_ex+0x3c2/0x510 [ 41.369862][ T670] should_fail+0xf/0x20 [ 41.369885][ T670] should_fail_usercopy+0x1e/0x30 [ 41.369913][ T670] _copy_from_user+0x20/0xa0 [ 41.369944][ T670] ___sys_sendmsg+0x1c7/0x370 [ 41.369970][ T670] ? __sys_sendmsg+0x2a0/0x2a0 [ 41.369993][ T670] ? proc_fail_nth_write+0x184/0x220 [ 41.370027][ T670] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 41.370066][ T670] ? __fget_files+0x2bc/0x330 [ 41.370095][ T670] __x64_sys_sendmsg+0x206/0x2e0 [ 41.370119][ T670] ? fput+0x1a4/0x230 [ 41.370148][ T670] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 41.370172][ T670] ? ksys_write+0x1f3/0x260 [ 41.370197][ T670] ? __kasan_check_read+0x15/0x20 [ 41.370222][ T670] x64_sys_call+0x2a4c/0x2ee0 [ 41.370243][ T670] do_syscall_64+0x57/0xf0 [ 41.370269][ T670] ? clear_bhb_loop+0x50/0xa0 [ 41.370301][ T670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.370332][ T670] RIP: 0033:0x7fb27d99e0d9 [ 41.370351][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.370370][ T670] RSP: 002b:00007fb27e830028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.370401][ T670] RAX: ffffffffffffffda RBX: 00007fb27dc25fa0 RCX: 00007fb27d99e0d9 [ 41.370419][ T670] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 41.370434][ T670] RBP: 00007fb27e830090 R08: 0000000000000000 R09: 0000000000000000 [ 41.370448][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.370462][ T670] R13: 00007fb27dc26038 R14: 00007fb27dc25fa0 R15: 00007ffdcb488158 [ 41.370480][ T670] [ 42.117492][ T696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=696 comm=syz.1.118 [ 42.519048][ T718] FAULT_INJECTION: forcing a failure. [ 42.519048][ T718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.532680][ T718] CPU: 0 UID: 0 PID: 718 Comm: syz.3.126 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 42.532713][ T718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.532728][ T718] Call Trace: [ 42.532735][ T718] [ 42.532744][ T718] __dump_stack+0x21/0x30 [ 42.532781][ T718] dump_stack_lvl+0x140/0x1c0 [ 42.532812][ T718] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.532844][ T718] ? _parse_integer+0x2e/0x40 [ 42.532876][ T718] ? kstrtoull+0x13b/0x1e0 [ 42.532899][ T718] dump_stack+0x19/0x20 [ 42.532929][ T718] should_fail_ex+0x3c2/0x510 [ 42.532955][ T718] should_fail+0xf/0x20 [ 42.532978][ T718] should_fail_usercopy+0x1e/0x30 [ 42.533005][ T718] _copy_from_user+0x20/0xa0 [ 42.533036][ T718] ___sys_sendmsg+0x1c7/0x370 [ 42.533061][ T718] ? __sys_sendmsg+0x2a0/0x2a0 [ 42.533084][ T718] ? proc_fail_nth_write+0x184/0x220 [ 42.533117][ T718] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.533155][ T718] ? __fget_files+0x2bc/0x330 [ 42.533185][ T718] __x64_sys_sendmsg+0x206/0x2e0 [ 42.533208][ T718] ? fput+0x1a4/0x230 [ 42.533237][ T718] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 42.533261][ T718] ? ksys_write+0x1f3/0x260 [ 42.533310][ T718] ? __kasan_check_read+0x15/0x20 [ 42.533335][ T718] x64_sys_call+0x2a4c/0x2ee0 [ 42.533355][ T718] do_syscall_64+0x57/0xf0 [ 42.533381][ T718] ? clear_bhb_loop+0x50/0xa0 [ 42.533413][ T718] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.533441][ T718] RIP: 0033:0x7f0df799e0d9 [ 42.533467][ T718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.533485][ T718] RSP: 002b:00007f0df8836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.533507][ T718] RAX: ffffffffffffffda RBX: 00007f0df7c25fa0 RCX: 00007f0df799e0d9 [ 42.533524][ T718] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 42.533537][ T718] RBP: 00007f0df8836090 R08: 0000000000000000 R09: 0000000000000000 [ 42.533550][ T718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.533562][ T718] R13: 00007f0df7c26038 R14: 00007f0df7c25fa0 R15: 00007ffcedbf37b8 [ 42.533580][ T718] [ 42.877290][ T725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=725 comm=syz.0.128 [ 45.406891][ T818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=818 comm=syz.1.160 [ 45.680738][ T839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=839 comm=syz.2.169 [ 45.862039][ T855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=855 comm=syz.2.174 [ 45.979526][ T863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=863 comm=syz.0.178 [ 46.252253][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 46.423113][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 46.434576][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.472192][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.487678][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.511761][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.528621][ T9] usb 4-1: Product: syz [ 46.545542][ T9] usb 4-1: Manufacturer: syz [ 46.554649][ T9] usb 4-1: SerialNumber: syz [ 46.776593][ T9] usb 4-1: 0:2 : does not exist [ 46.786006][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 46.802537][ T9] usb 4-1: USB disconnect, device number 2 [ 46.830946][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.287490][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 47.287533][ T36] audit: type=1400 audit(1786394397.190:142): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.353492][ T927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=927 comm=syz.0.195 [ 47.367344][ T927] udc dummy_udc.0: failed to start g1: -19 [ 47.374623][ T927] UDC core: g1: couldn't find an available UDC or it's busy [ 47.716751][ T945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=945 comm=syz.2.203 [ 49.044467][ T1005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1005 comm=syz.3.223 [ 49.082536][ T1005] udc dummy_udc.0: failed to start g1: -19 [ 49.088698][ T1005] UDC core: g1: couldn't find an available UDC or it's busy [ 49.744376][ T1028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1028 comm=syz.0.232 [ 49.787135][ T1031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1031 comm=syz.2.233 [ 49.963456][ T1051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1051 comm=syz.2.242 [ 50.669471][ T1108] selinux_netlink_send: 2 callbacks suppressed [ 50.669497][ T1108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1108 comm=syz.2.268 [ 50.691086][ T1108] udc dummy_udc.0: failed to start g1: -19 [ 50.697614][ T1108] UDC core: g1: couldn't find an available UDC or it's busy [ 51.120961][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1139 comm=syz.0.282 [ 51.134830][ T1139] udc dummy_udc.0: failed to start g1: -19 [ 51.150225][ T1139] UDC core: g1: couldn't find an available UDC or it's busy [ 51.650506][ T1172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1172 comm=syz.0.294 [ 52.339197][ T36] audit: type=1400 audit(1786394402.240:143): avc: denied { map } for pid=1193 comm="syz.1.303" path="pipe:[2931]" dev="pipefs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.402168][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.562189][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 53.572697][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.586232][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.597150][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.608223][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.627592][ T9] usb 1-1: Product: syz [ 53.639998][ T9] usb 1-1: Manufacturer: syz [ 53.644831][ T9] usb 1-1: SerialNumber: syz [ 53.854598][ T9] usb 1-1: 0:2 : does not exist [ 53.864426][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 53.888373][ T9] usb 1-1: USB disconnect, device number 2 [ 53.901323][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.071351][ T36] audit: type=1400 audit(1786394404.970:144): avc: denied { mounton } for pid=1310 comm="syz.1.345" path="/73/file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.080616][ T1312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1312 comm=syz.1.345 [ 55.264621][ T36] audit: type=1400 audit(1786394405.170:145): avc: denied { write } for pid=1310 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.286535][ T36] audit: type=1400 audit(1786394405.190:146): avc: denied { setopt } for pid=1310 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.920104][ T36] audit: type=1400 audit(1786394405.820:147): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.030261][ T1334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1334 comm=syz.2.352 [ 56.053466][ T1334] udc dummy_udc.0: failed to start g1: -19 [ 56.059717][ T1334] UDC core: g1: couldn't find an available UDC or it's busy [ 56.382187][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.400629][ T36] audit: type=1400 audit(1786394406.300:148): avc: denied { ioctl } for pid=1345 comm="syz.0.356" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14502 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.433823][ T36] audit: type=1400 audit(1786394406.340:149): avc: denied { mount } for pid=1345 comm="syz.0.356" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.541910][ T36] audit: type=1400 audit(1786394406.440:150): avc: denied { name_bind } for pid=1347 comm="syz.0.357" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.542548][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 56.568765][ T36] audit: type=1400 audit(1786394406.440:151): avc: denied { node_bind } for pid=1347 comm="syz.0.357" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.570897][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.610570][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.622603][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.632068][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.641030][ T9] usb 2-1: Product: syz [ 56.654330][ T9] usb 2-1: Manufacturer: syz [ 56.666004][ T36] audit: type=1400 audit(1786394406.570:152): avc: denied { write } for pid=1351 comm="syz.0.358" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.668883][ T9] usb 2-1: SerialNumber: syz [ 56.882267][ T1252] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.905626][ T9] usb 2-1: 0:2 : does not exist [ 56.913371][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 56.926395][ T9] usb 2-1: USB disconnect, device number 2 [ 56.936825][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.042279][ T1252] usb 4-1: Using ep0 maxpacket: 32 [ 57.053059][ T1252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 57.064067][ T1252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.073831][ T1252] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 57.083342][ T1252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.092084][ T1252] usb 4-1: config 0 descriptor?? [ 57.098296][ T1252] hub 4-1:0.0: bad descriptor, ignoring hub [ 57.104357][ T1252] hub 4-1:0.0: probe with driver hub failed with error -5 [ 57.112578][ T1252] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 57.300607][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.309763][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.341514][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.350589][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.605429][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 57.605448][ T36] audit: type=1400 audit(1786394407.510:155): avc: denied { setopt } for pid=1371 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.644467][ T36] audit: type=1400 audit(1786394407.540:156): avc: denied { name_bind } for pid=1371 comm="syz.0.365" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.912273][ T1391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.921048][ T1391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.992425][ T1252] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 58.122203][ T1252] usb 2-1: device descriptor read/64, error -71 [ 58.362231][ T1252] usb 2-1: device descriptor read/64, error -71 [ 58.602238][ T1252] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 58.716231][ T36] audit: type=1400 audit(1786394408.620:157): avc: denied { map } for pid=1409 comm="syz.0.376" path="socket:[14848]" dev="sockfs" ino=14848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.745495][ T1252] usb 2-1: device descriptor read/64, error -71 [ 58.747242][ T36] audit: type=1400 audit(1786394408.620:158): avc: denied { read } for pid=1409 comm="syz.0.376" path="socket:[14848]" dev="sockfs" ino=14848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.800971][ T36] audit: type=1400 audit(1786394408.620:159): avc: denied { getopt } for pid=1409 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.833205][ T36] audit: type=1400 audit(1786394408.630:160): avc: denied { read } for pid=1409 comm="syz.0.376" dev="nsfs" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.855373][ T36] audit: type=1400 audit(1786394408.630:161): avc: denied { open } for pid=1409 comm="syz.0.376" path="net:[4026532500]" dev="nsfs" ino=4026532500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.954917][ T1418] FAULT_INJECTION: forcing a failure. [ 58.954917][ T1418] name failslab, interval 1, probability 0, space 0, times 1 [ 58.982186][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: syz.0.379 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 58.982229][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.982247][ T1418] Call Trace: [ 58.982255][ T1418] [ 58.982267][ T1418] __dump_stack+0x21/0x30 [ 58.982313][ T1418] dump_stack_lvl+0x140/0x1c0 [ 58.982349][ T1418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.982390][ T1418] ? __kasan_check_write+0x18/0x20 [ 58.982420][ T1418] ? proc_fail_nth_write+0x184/0x220 [ 58.982459][ T1418] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 58.982506][ T1418] dump_stack+0x19/0x20 [ 58.982540][ T1418] should_fail_ex+0x3c2/0x510 [ 58.982575][ T1418] should_failslab+0xac/0x100 [ 58.982608][ T1418] kmem_cache_alloc_noprof+0x42/0x410 [ 58.982639][ T1418] ? getname_flags+0xcc/0x6b0 [ 58.982668][ T1418] ? __cfi_vfs_write+0x10/0x10 [ 58.982700][ T1418] getname_flags+0xcc/0x6b0 [ 58.982728][ T1418] getname+0x1b/0x30 [ 58.982760][ T1418] do_sys_openat2+0xda/0x1d0 [ 58.982800][ T1418] ? fput+0x1a4/0x230 [ 58.982837][ T1418] ? do_sys_open+0x100/0x100 [ 58.982875][ T1418] ? ksys_write+0x1f3/0x260 [ 58.982904][ T1418] ? __cfi_ksys_write+0x10/0x10 [ 58.982935][ T1418] __x64_sys_openat+0x13a/0x170 [ 58.982981][ T1418] x64_sys_call+0xe69/0x2ee0 [ 58.983010][ T1418] do_syscall_64+0x57/0xf0 [ 58.983039][ T1418] ? clear_bhb_loop+0x50/0xa0 [ 58.983080][ T1418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.983114][ T1418] RIP: 0033:0x7f07bbf9e0d9 [ 58.983138][ T1418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.983159][ T1418] RSP: 002b:00007f07bcdc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.983192][ T1418] RAX: ffffffffffffffda RBX: 00007f07bc225fa0 RCX: 00007f07bbf9e0d9 [ 58.983213][ T1418] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 58.983232][ T1418] RBP: 00007f07bcdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.983254][ T1418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.983271][ T1418] R13: 00007f07bc226038 R14: 00007f07bc225fa0 R15: 00007fff37a688f8 [ 58.983297][ T1418] [ 59.213311][ T1252] usb 2-1: device descriptor read/64, error -71 [ 59.241915][ T1421] udc dummy_udc.0: failed to start g1: -19 [ 59.247965][ T36] audit: type=1400 audit(1786394409.140:162): avc: denied { write } for pid=1420 comm="syz.2.380" name="UDC" dev="configfs" ino=13771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.271420][ T36] audit: type=1400 audit(1786394409.140:163): avc: denied { open } for pid=1420 comm="syz.2.380" path="/119/config/usb_gadget/g1/UDC" dev="configfs" ino=13771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.296675][ T1421] UDC core: g1: couldn't find an available UDC or it's busy [ 59.322327][ T1252] usb usb2-port1: attempt power cycle [ 59.563748][ T36] audit: type=1400 audit(1786394409.470:164): avc: denied { ioctl } for pid=1432 comm="syz.3.385" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.662165][ T1252] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 59.683865][ T1252] usb 2-1: device descriptor read/8, error -71 [ 59.823179][ T1252] usb 2-1: device descriptor read/8, error -71 [ 59.874079][ T1442] udc dummy_udc.0: failed to start g1: -19 [ 59.880450][ T1442] UDC core: g1: couldn't find an available UDC or it's busy [ 60.072177][ T1252] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 60.103309][ T1252] usb 2-1: device descriptor read/8, error -71 [ 60.122183][ T31] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 60.233430][ T1252] usb 2-1: device descriptor read/8, error -71 [ 60.252224][ T31] usb 3-1: device descriptor read/64, error -71 [ 60.342324][ T1252] usb usb2-port1: unable to enumerate USB device [ 60.461472][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.470635][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.480297][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.489673][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.492375][ T31] usb 3-1: device descriptor read/64, error -71 [ 60.509555][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.518300][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.527794][ T1455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.536449][ T1455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.742253][ T31] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 60.873264][ T31] usb 3-1: device descriptor read/64, error -71 [ 60.953811][ T1469] udc dummy_udc.0: failed to start g1: -19 [ 60.959953][ T1469] UDC core: g1: couldn't find an available UDC or it's busy [ 60.987736][ T1471] rust_binder: Error in use_page_slow: ESRCH [ 60.987773][ T1471] rust_binder: use_range failure ESRCH [ 61.000766][ T1471] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 61.006399][ T1471] rust_binder: Failure in copy_transaction_data: ESRCH [ 61.014444][ T1471] rust_binder: 1470:1471 transaction async to 1470:0 failed ESRCH, code 0 size 0-0 [ 61.033099][ T1252] rust_binder: 1470: undelivered TRANSACTION_ERROR: 29201 [ 61.086623][ T1478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1478 comm=syz.1.403 [ 61.123330][ T31] usb 3-1: device descriptor read/64, error -71 [ 61.232505][ T31] usb usb3-port1: attempt power cycle [ 61.287376][ T1492] udc dummy_udc.0: failed to start g1: -19 [ 61.293719][ T1492] UDC core: g1: couldn't find an available UDC or it's busy [ 61.353209][ T1498] can0: slcan on ttyS3. [ 61.359175][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.376329][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.406625][ T1498] can0 (unregistered): slcan off ttyS3. [ 61.582250][ T31] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 61.623368][ T31] usb 3-1: device descriptor read/8, error -71 [ 61.710538][ T1523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1523 comm=syz.0.414 [ 61.765592][ T31] usb 3-1: device descriptor read/8, error -71 [ 61.918545][ T1536] netlink: 'syz.0.416': attribute type 6 has an invalid length. [ 62.016108][ T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 62.043039][ T1547] FAULT_INJECTION: forcing a failure. [ 62.043039][ T1547] name failslab, interval 1, probability 0, space 0, times 0 [ 62.043756][ T31] usb 3-1: device descriptor read/8, error -71 [ 62.073651][ T1547] CPU: 0 UID: 0 PID: 1547 Comm: syz.0.420 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 62.073703][ T1547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.073717][ T1547] Call Trace: [ 62.073724][ T1547] [ 62.073733][ T1547] __dump_stack+0x21/0x30 [ 62.073769][ T1547] dump_stack_lvl+0x140/0x1c0 [ 62.073799][ T1547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.073831][ T1547] ? release_sock+0x171/0x1f0 [ 62.073861][ T1547] dump_stack+0x19/0x20 [ 62.073889][ T1547] should_fail_ex+0x3c2/0x510 [ 62.073914][ T1547] should_failslab+0xac/0x100 [ 62.073941][ T1547] kmem_cache_alloc_node_noprof+0x45/0x420 [ 62.073964][ T1547] ? netlink_data_ready+0x20/0x20 [ 62.073984][ T1547] ? __alloc_skb+0x10c/0x360 [ 62.074014][ T1547] __alloc_skb+0x10c/0x360 [ 62.074043][ T1547] netlink_alloc_large_skb+0xf7/0x1b0 [ 62.074075][ T1547] netlink_sendmsg+0x576/0xad0 [ 62.074098][ T1547] ? __cfi_netlink_sendmsg+0x10/0x10 [ 62.074128][ T1547] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 62.074152][ T1547] ? security_socket_sendmsg+0x3d/0x100 [ 62.074179][ T1547] ____sys_sendmsg+0x9a1/0xa00 [ 62.074203][ T1547] ? __import_iovec+0x5b9/0x7d0 [ 62.074235][ T1547] ? __sys_sendmsg_sock+0x50/0x50 [ 62.074258][ T1547] ? import_iovec+0x80/0xb0 [ 62.074289][ T1547] ___sys_sendmsg+0x2a6/0x370 [ 62.074311][ T1547] ? __sys_sendmsg+0x2a0/0x2a0 [ 62.074333][ T1547] ? proc_fail_nth_write+0x184/0x220 [ 62.074363][ T1547] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 62.074397][ T1547] ? __fget_files+0x2bc/0x330 [ 62.074423][ T1547] __x64_sys_sendmsg+0x206/0x2e0 [ 62.074444][ T1547] ? fput+0x1a4/0x230 [ 62.074470][ T1547] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 62.074492][ T1547] ? ksys_write+0x1f3/0x260 [ 62.074515][ T1547] ? __kasan_check_read+0x15/0x20 [ 62.074537][ T1547] x64_sys_call+0x2a4c/0x2ee0 [ 62.074556][ T1547] do_syscall_64+0x57/0xf0 [ 62.074580][ T1547] ? clear_bhb_loop+0x50/0xa0 [ 62.074608][ T1547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.074634][ T1547] RIP: 0033:0x7f07bbf9e0d9 [ 62.074653][ T1547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.074688][ T1547] RSP: 002b:00007f07bcdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.074712][ T1547] RAX: ffffffffffffffda RBX: 00007f07bc225fa0 RCX: 00007f07bbf9e0d9 [ 62.074729][ T1547] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 62.074744][ T1547] RBP: 00007f07bcdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.074758][ T1547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.074772][ T1547] R13: 00007f07bc226038 R14: 00007f07bc225fa0 R15: 00007fff37a688f8 [ 62.074791][ T1547] [ 62.193656][ T31] usb 3-1: device descriptor read/8, error -71 [ 62.472285][ T31] usb usb3-port1: unable to enumerate USB device [ 62.891686][ T1563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1563 comm=syz.2.424 [ 62.950395][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 62.950417][ T36] audit: type=1400 audit(1786394412.850:204): avc: denied { create } for pid=1566 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.986969][ T36] audit: type=1400 audit(1786394412.860:205): avc: denied { getopt } for pid=1566 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.031607][ T36] audit: type=1400 audit(1786394412.920:206): avc: denied { setopt } for pid=1570 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.064467][ T36] audit: type=1400 audit(1786394412.930:207): avc: denied { lock } for pid=1570 comm="syz.2.428" path="socket:[14304]" dev="sockfs" ino=14304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.247477][ T1583] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 63.686970][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.696680][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.202200][ T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.222209][ T1343] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.362276][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 64.373364][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.392315][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 64.397575][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.407526][ T1343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.417874][ T1343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.427154][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.442991][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.451092][ T63] usb 1-1: Product: syz [ 64.462227][ T1343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.471355][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.479481][ T63] usb 1-1: Manufacturer: syz [ 64.484194][ T63] usb 1-1: SerialNumber: syz [ 64.489401][ T1343] usb 3-1: Product: syz [ 64.500153][ T1343] usb 3-1: Manufacturer: syz [ 64.504954][ T1343] usb 3-1: SerialNumber: syz [ 64.699567][ T63] usb 1-1: 0:2 : does not exist [ 64.708927][ T63] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 64.728264][ T1343] usb 3-1: 0:2 : does not exist [ 64.733943][ T63] usb 1-1: USB disconnect, device number 3 [ 64.742612][ T1343] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 64.768446][ T1343] usb 3-1: USB disconnect, device number 6 [ 64.787822][ T903] udevd[903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.805321][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.976406][ T36] audit: type=1400 audit(1786394415.880:208): avc: denied { create } for pid=1672 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.026136][ T36] audit: type=1400 audit(1786394415.910:209): avc: denied { connect } for pid=1672 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.047273][ T36] audit: type=1400 audit(1786394415.930:210): avc: denied { append } for pid=1672 comm="syz.3.463" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.912269][ T1448] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 67.044443][ T36] audit: type=1400 audit(1786394416.950:211): avc: denied { connect } for pid=1716 comm="syz.0.479" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.065394][ T1448] usb 2-1: Using ep0 maxpacket: 16 [ 67.071834][ T1448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.082195][ T1448] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.092870][ T1448] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.102153][ T1448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.110178][ T1448] usb 2-1: Product: syz [ 67.114453][ T1448] usb 2-1: Manufacturer: syz [ 67.119082][ T1448] usb 2-1: SerialNumber: syz [ 67.292302][ T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.326410][ T1448] usb 2-1: 0:2 : does not exist [ 67.333581][ T1448] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 67.344612][ T1448] usb 2-1: USB disconnect, device number 7 [ 67.357124][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.452211][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 67.458842][ T63] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 67.472203][ T63] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 67.485481][ T63] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 67.494734][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.502853][ T63] usb 1-1: Product: syz [ 67.507162][ T63] usb 1-1: Manufacturer: syz [ 67.511882][ T63] usb 1-1: SerialNumber: syz [ 67.706794][ T1737] ======================================================= [ 67.706794][ T1737] WARNING: The mand mount option has been deprecated and [ 67.706794][ T1737] and is ignored by this kernel. Remove the mand [ 67.706794][ T1737] option from the mount to silence this warning. [ 67.706794][ T1737] ======================================================= [ 67.727541][ T63] usb 1-1: Can't get UAC3 power state for id 10 [ 67.754408][ T36] audit: type=1400 audit(1786394417.660:212): avc: denied { mount } for pid=1736 comm="syz.3.488" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.777211][ T63] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 67.786610][ T63] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 67.796599][ T36] audit: type=1400 audit(1786394417.700:213): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.829723][ T63] usb 1-1: USB disconnect, device number 4 [ 67.908105][ T521] udevd[521]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.314937][ T1760] udc dummy_udc.0: failed to start g1: -19 [ 68.321156][ T1760] UDC core: g1: couldn't find an available UDC or it's busy [ 68.365227][ T1757] FAULT_INJECTION: forcing a failure. [ 68.365227][ T1757] name failslab, interval 1, probability 0, space 0, times 0 [ 68.378209][ T1757] CPU: 1 UID: 0 PID: 1757 Comm: syz.1.494 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 68.378260][ T1757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.378277][ T1757] Call Trace: [ 68.378285][ T1757] [ 68.378295][ T1757] __dump_stack+0x21/0x30 [ 68.378336][ T1757] dump_stack_lvl+0x140/0x1c0 [ 68.378371][ T1757] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.378407][ T1757] ? avc_has_perm+0x155/0x240 [ 68.378435][ T1757] ? __cfi_avc_has_perm+0x10/0x10 [ 68.378465][ T1757] dump_stack+0x19/0x20 [ 68.378499][ T1757] should_fail_ex+0x3c2/0x510 [ 68.378527][ T1757] should_failslab+0xac/0x100 [ 68.378560][ T1757] __kmalloc_cache_noprof+0x41/0x470 [ 68.378587][ T1757] ? vhost_task_create+0x12c/0x3f0 [ 68.378615][ T1757] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.378645][ T1757] vhost_task_create+0x12c/0x3f0 [ 68.378672][ T1757] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.378703][ T1757] ? __cfi_vhost_task_create+0x10/0x10 [ 68.378732][ T1757] ? __cfi_vhost_task_fn+0x10/0x10 [ 68.378758][ T1757] ? __kasan_check_write+0x18/0x20 [ 68.378783][ T1757] ? mutex_lock+0x97/0x1d0 [ 68.378817][ T1757] ? __cfi_mutex_lock+0x10/0x10 [ 68.378851][ T1757] ? kernel_text_address+0xa9/0xe0 [ 68.378887][ T1757] kvm_mmu_post_init_vm+0x161/0x300 [ 68.378925][ T1757] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 68.378960][ T1757] ? _parse_integer_limit+0x195/0x1e0 [ 68.378987][ T1757] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 68.379022][ T1757] ? kstrtoull+0x13b/0x1e0 [ 68.379047][ T1757] ? kstrtouint+0x78/0xf0 [ 68.379072][ T1757] ? ioctl_has_perm+0x1bc/0x500 [ 68.379096][ T1757] ? __asan_memcpy+0x5a/0x80 [ 68.379122][ T1757] ? ioctl_has_perm+0x408/0x500 [ 68.379152][ T1757] ? has_cap_mac_admin+0xd0/0xd0 [ 68.379176][ T1757] ? __kasan_check_write+0x18/0x20 [ 68.379201][ T1757] ? mutex_lock_killable+0x97/0x1d0 [ 68.379245][ T1757] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.379281][ T1757] ? proc_fail_nth_write+0x184/0x220 [ 68.379320][ T1757] kvm_vcpu_ioctl+0xa43/0x1000 [ 68.379346][ T1757] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.379371][ T1757] ? __cfi_vfs_write+0x10/0x10 [ 68.379397][ T1757] ? __kasan_check_write+0x18/0x20 [ 68.379421][ T1757] ? mutex_unlock+0x90/0x240 [ 68.379456][ T1757] ? __cfi_mutex_unlock+0x10/0x10 [ 68.379494][ T1757] ? bpf_lsm_file_ioctl+0xd/0x20 [ 68.379527][ T1757] ? security_file_ioctl+0x3e/0x110 [ 68.379565][ T1757] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.379589][ T1757] __se_sys_ioctl+0x135/0x1b0 [ 68.379621][ T1757] __x64_sys_ioctl+0x7f/0xa0 [ 68.379651][ T1757] x64_sys_call+0x1878/0x2ee0 [ 68.379675][ T1757] do_syscall_64+0x57/0xf0 [ 68.379703][ T1757] ? clear_bhb_loop+0x50/0xa0 [ 68.379738][ T1757] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.379771][ T1757] RIP: 0033:0x7f08f9f9e0d9 [ 68.379793][ T1757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.379814][ T1757] RSP: 002b:00007f08fae11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.379841][ T1757] RAX: ffffffffffffffda RBX: 00007f08fa225fa0 RCX: 00007f08f9f9e0d9 [ 68.379861][ T1757] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.379877][ T1757] RBP: 00007f08fae11090 R08: 0000000000000000 R09: 0000000000000000 [ 68.379893][ T1757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.379909][ T1757] R13: 00007f08fa226038 R14: 00007f08fa225fa0 R15: 00007ffeda4742f8 [ 68.379931][ T1757] [ 68.799477][ T1771] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.815151][ T36] audit: type=1400 audit(1786394418.720:214): avc: denied { bind } for pid=1770 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.835940][ T36] audit: type=1400 audit(1786394418.720:215): avc: denied { setopt } for pid=1770 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.856914][ T36] audit: type=1400 audit(1786394418.720:216): avc: denied { read } for pid=1770 comm="syz.3.499" path="socket:[18941]" dev="sockfs" ino=18941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.170735][ T1782] FAULT_INJECTION: forcing a failure. [ 69.170735][ T1782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.184757][ T1782] CPU: 0 UID: 0 PID: 1782 Comm: syz.0.504 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 69.184803][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.184820][ T1782] Call Trace: [ 69.184829][ T1782] [ 69.184842][ T1782] __dump_stack+0x21/0x30 [ 69.184885][ T1782] dump_stack_lvl+0x140/0x1c0 [ 69.184926][ T1782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.184969][ T1782] dump_stack+0x19/0x20 [ 69.185005][ T1782] should_fail_ex+0x3c2/0x510 [ 69.185040][ T1782] should_fail+0xf/0x20 [ 69.185070][ T1782] should_fail_usercopy+0x1e/0x30 [ 69.185104][ T1782] _copy_from_user+0x20/0xa0 [ 69.185207][ T1782] sk_setsockopt+0x2a7/0x2a00 [ 69.185249][ T1782] ? __cfi_sk_setsockopt+0x10/0x10 [ 69.185290][ T1782] ? selinux_socket_setsockopt+0x324/0x3d0 [ 69.185330][ T1782] ? bpf_lsm_file_permission+0xd/0x20 [ 69.185368][ T1782] ? vfs_write+0xbcf/0xfd0 [ 69.185398][ T1782] ? __cfi_vfs_write+0x10/0x10 [ 69.185430][ T1782] sock_setsockopt+0x5e/0x70 [ 69.185471][ T1782] do_sock_setsockopt+0x211/0x410 [ 69.185500][ T1782] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 69.185530][ T1782] ? __fget_files+0x2bc/0x330 [ 69.185569][ T1782] __x64_sys_setsockopt+0x1b7/0x250 [ 69.185601][ T1782] x64_sys_call+0x2adc/0x2ee0 [ 69.185626][ T1782] do_syscall_64+0x57/0xf0 [ 69.185657][ T1782] ? clear_bhb_loop+0x50/0xa0 [ 69.185692][ T1782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.185735][ T1782] RIP: 0033:0x7f07bbf9e0d9 [ 69.185759][ T1782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.185782][ T1782] RSP: 002b:00007f07bcdc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.185811][ T1782] RAX: ffffffffffffffda RBX: 00007f07bc225fa0 RCX: 00007f07bbf9e0d9 [ 69.185831][ T1782] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 69.185852][ T1782] RBP: 00007f07bcdc7090 R08: 0000000000000004 R09: 0000000000000000 [ 69.185870][ T1782] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 69.185888][ T1782] R13: 00007f07bc226038 R14: 00007f07bc225fa0 R15: 00007fff37a688f8 [ 69.185915][ T1782] [ 69.682973][ T1795] FAULT_INJECTION: forcing a failure. [ 69.682973][ T1795] name failslab, interval 1, probability 0, space 0, times 0 [ 69.697798][ T1795] CPU: 0 UID: 0 PID: 1795 Comm: syz.3.509 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 69.697835][ T1795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.697849][ T1795] Call Trace: [ 69.697856][ T1795] [ 69.697866][ T1795] __dump_stack+0x21/0x30 [ 69.697901][ T1795] dump_stack_lvl+0x140/0x1c0 [ 69.697924][ T1795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.697946][ T1795] ? avc_has_perm_noaudit+0x289/0x360 [ 69.697967][ T1795] dump_stack+0x19/0x20 [ 69.697988][ T1795] should_fail_ex+0x3c2/0x510 [ 69.698007][ T1795] should_failslab+0xac/0x100 [ 69.698027][ T1795] kmem_cache_alloc_node_noprof+0x45/0x420 [ 69.698050][ T1795] ? __alloc_skb+0x10c/0x360 [ 69.698072][ T1795] ? avc_has_perm_noaudit+0x289/0x360 [ 69.698090][ T1795] __alloc_skb+0x10c/0x360 [ 69.698112][ T1795] pfkey_sendmsg+0x19d/0x1190 [ 69.698134][ T1795] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 69.698153][ T1795] ? selinux_socket_sendmsg+0x281/0x380 [ 69.698286][ T1795] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 69.698325][ T1795] ? is_bpf_text_address+0x17b/0x1a0 [ 69.698358][ T1795] ? kernel_text_address+0xa9/0xe0 [ 69.698396][ T1795] ? unwind_get_return_address+0x51/0x90 [ 69.698425][ T1795] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.698464][ T1795] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 69.698493][ T1795] ? security_socket_sendmsg+0x3d/0x100 [ 69.698515][ T1795] ____sys_sendmsg+0x9a1/0xa00 [ 69.698534][ T1795] ? __import_iovec+0x5b9/0x7d0 [ 69.698558][ T1795] ? __sys_sendmsg_sock+0x50/0x50 [ 69.698580][ T1795] ? import_iovec+0x80/0xb0 [ 69.698646][ T1795] ___sys_sendmsg+0x2a6/0x370 [ 69.698662][ T1795] ? __sys_sendmsg+0x2a0/0x2a0 [ 69.698680][ T1795] ? proc_fail_nth_write+0x184/0x220 [ 69.698704][ T1795] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 69.698731][ T1795] ? __fget_files+0x2bc/0x330 [ 69.698752][ T1795] __x64_sys_sendmsg+0x206/0x2e0 [ 69.698769][ T1795] ? fput+0x1a4/0x230 [ 69.698790][ T1795] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 69.698806][ T1795] ? ksys_write+0x1f3/0x260 [ 69.698825][ T1795] ? __kasan_check_read+0x15/0x20 [ 69.698841][ T1795] x64_sys_call+0x2a4c/0x2ee0 [ 69.698856][ T1795] do_syscall_64+0x57/0xf0 [ 69.698875][ T1795] ? clear_bhb_loop+0x50/0xa0 [ 69.698899][ T1795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.698922][ T1795] RIP: 0033:0x7f0df799e0d9 [ 69.698937][ T1795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.698951][ T1795] RSP: 002b:00007f0df8836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.698970][ T1795] RAX: ffffffffffffffda RBX: 00007f0df7c25fa0 RCX: 00007f0df799e0d9 [ 69.698982][ T1795] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 69.698993][ T1795] RBP: 00007f0df8836090 R08: 0000000000000000 R09: 0000000000000000 [ 69.699004][ T1795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.699014][ T1795] R13: 00007f0df7c26038 R14: 00007f0df7c25fa0 R15: 00007ffcedbf37b8 [ 69.699028][ T1795] [ 70.032843][ T36] audit: type=1400 audit(1786394419.920:217): avc: denied { nlmsg_read } for pid=1796 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 70.053516][ T36] audit: type=1400 audit(1786394419.920:218): avc: denied { write } for pid=1796 comm="syz.3.510" name="raw" dev="proc" ino=4026532575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.135683][ T1807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.146108][ T1807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.372192][ T1448] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 70.408872][ T1817] FAULT_INJECTION: forcing a failure. [ 70.408872][ T1817] name failslab, interval 1, probability 0, space 0, times 0 [ 70.422661][ T1817] CPU: 1 UID: 0 PID: 1817 Comm: syz.2.519 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 70.422698][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.422712][ T1817] Call Trace: [ 70.422719][ T1817] [ 70.422728][ T1817] __dump_stack+0x21/0x30 [ 70.422763][ T1817] dump_stack_lvl+0x140/0x1c0 [ 70.422792][ T1817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.422823][ T1817] ? kstrtouint_from_user+0x117/0x170 [ 70.422848][ T1817] dump_stack+0x19/0x20 [ 70.422877][ T1817] should_fail_ex+0x3c2/0x510 [ 70.422902][ T1817] ? kernfs_fop_write_iter+0x15e/0x510 [ 70.422935][ T1817] should_failslab+0xac/0x100 [ 70.422969][ T1817] __kmalloc_noprof+0x69/0x510 [ 70.422991][ T1817] ? kernfs_fop_write_iter+0x15e/0x510 [ 70.423021][ T1817] ? __kasan_check_write+0x18/0x20 [ 70.423041][ T1817] ? proc_fail_nth_write+0x184/0x220 [ 70.423071][ T1817] kernfs_fop_write_iter+0x15e/0x510 [ 70.423104][ T1817] vfs_write+0x75f/0xfd0 [ 70.423128][ T1817] ? __cfi_vfs_write+0x10/0x10 [ 70.423150][ T1817] ? __cfi_mutex_lock+0x10/0x10 [ 70.423184][ T1817] ksys_write+0x145/0x260 [ 70.423207][ T1817] ? __cfi_ksys_write+0x10/0x10 [ 70.423230][ T1817] ? __kasan_check_read+0x15/0x20 [ 70.423252][ T1817] __x64_sys_write+0x7f/0x90 [ 70.423275][ T1817] x64_sys_call+0x271c/0x2ee0 [ 70.423295][ T1817] do_syscall_64+0x57/0xf0 [ 70.423320][ T1817] ? clear_bhb_loop+0x50/0xa0 [ 70.423351][ T1817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.423380][ T1817] RIP: 0033:0x7fb27d99e0d9 [ 70.423398][ T1817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.423416][ T1817] RSP: 002b:00007fb27e830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.423440][ T1817] RAX: ffffffffffffffda RBX: 00007fb27dc25fa0 RCX: 00007fb27d99e0d9 [ 70.423457][ T1817] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 70.423471][ T1817] RBP: 00007fb27e830090 R08: 0000000000000000 R09: 0000000000000000 [ 70.423486][ T1817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.423499][ T1817] R13: 00007fb27dc26038 R14: 00007fb27dc25fa0 R15: 00007ffdcb488158 [ 70.423518][ T1817] [ 70.732181][ T1448] usb 1-1: Using ep0 maxpacket: 16 [ 70.738776][ T1448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.750298][ T1448] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.761014][ T1448] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.770303][ T1448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.778559][ T1448] usb 1-1: Product: syz [ 70.782783][ T1448] usb 1-1: Manufacturer: syz [ 70.787401][ T1448] usb 1-1: SerialNumber: syz [ 70.885915][ T1825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 70.996037][ T1448] usb 1-1: 0:2 : does not exist [ 71.004121][ T1448] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 71.033513][ T1448] usb 1-1: USB disconnect, device number 5 [ 71.053870][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.411293][ T36] audit: type=1400 audit(1786394421.310:219): avc: denied { bind } for pid=1840 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.477203][ T1847] FAULT_INJECTION: forcing a failure. [ 71.477203][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 71.543735][ T1847] CPU: 1 UID: 0 PID: 1847 Comm: syz.2.531 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 71.543772][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.543786][ T1847] Call Trace: [ 71.543793][ T1847] [ 71.543802][ T1847] __dump_stack+0x21/0x30 [ 71.543838][ T1847] dump_stack_lvl+0x140/0x1c0 [ 71.543867][ T1847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.543899][ T1847] ? inode_init_always_gfp+0x756/0x9e0 [ 71.543929][ T1847] ? proc_pident_instantiate+0x6d/0x2c0 [ 71.543964][ T1847] ? proc_tid_base_lookup+0x2f/0x40 [ 71.543996][ T1847] ? path_openat+0x1124/0x35a0 [ 71.544023][ T1847] ? do_filp_open+0x1f2/0x440 [ 71.544067][ T1847] ? __x64_sys_openat+0x13a/0x170 [ 71.544100][ T1847] ? x64_sys_call+0xe69/0x2ee0 [ 71.544126][ T1847] dump_stack+0x19/0x20 [ 71.544161][ T1847] should_fail_ex+0x3c2/0x510 [ 71.544187][ T1847] should_failslab+0xac/0x100 [ 71.544221][ T1847] kmem_cache_alloc_node_noprof+0x45/0x420 [ 71.544246][ T1847] ? __alloc_skb+0x10c/0x360 [ 71.544281][ T1847] ? avc_has_perm_noaudit+0x289/0x360 [ 71.544309][ T1847] __alloc_skb+0x10c/0x360 [ 71.544340][ T1847] pfkey_sendmsg+0x19d/0x1190 [ 71.544381][ T1847] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 71.544410][ T1847] ? selinux_socket_sendmsg+0x281/0x380 [ 71.544440][ T1847] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 71.544474][ T1847] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 71.544500][ T1847] ? security_socket_sendmsg+0x3d/0x100 [ 71.544532][ T1847] ____sys_sendmsg+0x9a1/0xa00 [ 71.544556][ T1847] ? __import_iovec+0x5b9/0x7d0 [ 71.544590][ T1847] ? __sys_sendmsg_sock+0x50/0x50 [ 71.544613][ T1847] ? unwind_get_return_address+0x51/0x90 [ 71.544645][ T1847] ? import_iovec+0x80/0xb0 [ 71.544678][ T1847] ___sys_sendmsg+0x2a6/0x370 [ 71.544702][ T1847] ? __sys_sendmsg+0x2a0/0x2a0 [ 71.544726][ T1847] ? kstrtouint+0x78/0xf0 [ 71.544754][ T1847] ? __fget_files+0x2bc/0x330 [ 71.544783][ T1847] __sys_sendmmsg+0x2b4/0x4e0 [ 71.544808][ T1847] ? __cfi___sys_sendmmsg+0x10/0x10 [ 71.544837][ T1847] ? __cfi_ksys_write+0x10/0x10 [ 71.544863][ T1847] __x64_sys_sendmmsg+0xa4/0xc0 [ 71.544887][ T1847] x64_sys_call+0xfec/0x2ee0 [ 71.544908][ T1847] do_syscall_64+0x57/0xf0 [ 71.544933][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 71.544965][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.544994][ T1847] RIP: 0033:0x7fb27d99e0d9 [ 71.545013][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.545033][ T1847] RSP: 002b:00007fb27e830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.545066][ T1847] RAX: ffffffffffffffda RBX: 00007fb27dc25fa0 RCX: 00007fb27d99e0d9 [ 71.545085][ T1847] RDX: 040000000000007b RSI: 0000200000000180 RDI: 0000000000000004 [ 71.545101][ T1847] RBP: 00007fb27e830090 R08: 0000000000000000 R09: 0000000000000000 [ 71.545116][ T1847] R10: 0000000000004004 R11: 0000000000000246 R12: 0000000000000001 [ 71.545130][ T1847] R13: 00007fb27dc26038 R14: 00007fb27dc25fa0 R15: 00007ffdcb488158 [ 71.545150][ T1847] [ 72.047488][ T36] audit: type=1400 audit(1786394421.950:220): avc: denied { read append } for pid=1869 comm="syz.2.540" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.070855][ T1868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.097531][ T1868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.108752][ T36] audit: type=1400 audit(1786394421.950:221): avc: denied { open } for pid=1869 comm="syz.2.540" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.137144][ T1868] FAULT_INJECTION: forcing a failure. [ 72.137144][ T1868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.152647][ T36] audit: type=1400 audit(1786394421.950:222): avc: denied { map } for pid=1869 comm="syz.2.540" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.170396][ T1868] CPU: 0 UID: 0 PID: 1868 Comm: syz.3.539 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 72.170518][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.170554][ T1868] Call Trace: [ 72.170575][ T1868] [ 72.170598][ T1868] __dump_stack+0x21/0x30 [ 72.170697][ T1868] dump_stack_lvl+0x140/0x1c0 [ 72.170782][ T1868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.170865][ T1868] ? vsnprintf+0x7b4/0x1ad0 [ 72.170925][ T1868] ? check_stack_object+0x10f/0x150 [ 72.170993][ T1868] dump_stack+0x19/0x20 [ 72.171064][ T1868] should_fail_ex+0x3c2/0x510 [ 72.171140][ T1868] should_fail+0xf/0x20 [ 72.171196][ T1868] should_fail_usercopy+0x1e/0x30 [ 72.171263][ T1868] _copy_from_user+0x20/0xa0 [ 72.171352][ T1868] kstrtouint_from_user+0xde/0x170 [ 72.171418][ T1868] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 72.171496][ T1868] ? selinux_file_permission+0x318/0xb60 [ 72.171560][ T1868] ? __cfi_selinux_file_permission+0x10/0x10 [ 72.171618][ T1868] proc_fail_nth_write+0x8f/0x220 [ 72.171706][ T1868] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 72.171781][ T1868] ? bpf_lsm_file_permission+0xd/0x20 [ 72.171874][ T1868] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 72.171977][ T1868] vfs_write+0x3c1/0xfd0 [ 72.172062][ T1868] ? __cfi_vfs_write+0x10/0x10 [ 72.172123][ T1868] ? __kasan_check_write+0x18/0x20 [ 72.172189][ T1868] ? mutex_lock+0x97/0x1d0 [ 72.172267][ T1868] ? __cfi_mutex_lock+0x10/0x10 [ 72.172367][ T1868] ksys_write+0x145/0x260 [ 72.172432][ T1868] ? __cfi_ksys_write+0x10/0x10 [ 72.172490][ T1868] ? fdget+0x188/0x1e0 [ 72.172558][ T1868] ? __kasan_check_read+0x15/0x20 [ 72.172614][ T1868] __x64_sys_write+0x7f/0x90 [ 72.172679][ T1868] x64_sys_call+0x271c/0x2ee0 [ 72.172736][ T1868] do_syscall_64+0x57/0xf0 [ 72.172829][ T1868] ? clear_bhb_loop+0x50/0xa0 [ 72.172910][ T1868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.172989][ T1868] RIP: 0033:0x7f0df795e90e [ 72.173044][ T1868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.173091][ T1868] RSP: 002b:00007f0df8835fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.173158][ T1868] RAX: ffffffffffffffda RBX: 00007f0df88366c0 RCX: 00007f0df795e90e [ 72.173212][ T1868] RDX: 0000000000000001 RSI: 00007f0df88360a0 RDI: 0000000000000004 [ 72.173262][ T1868] RBP: 00007f0df8836090 R08: 0000000000000000 R09: 0000000000000000 [ 72.173321][ T1868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.173356][ T1868] R13: 00007f0df7c26038 R14: 00007f0df7c25fa0 R15: 00007ffcedbf37b8 [ 72.173412][ T1868] [ 72.432309][ T1343] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 72.463137][ T1874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.472509][ T1874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.602195][ T1343] usb 3-1: device descriptor read/64, error -71 [ 72.732156][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.872221][ T1343] usb 3-1: device descriptor read/64, error -71 [ 72.893217][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.904181][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.915962][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.925910][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.940557][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.950625][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.960823][ T10] usb 1-1: Manufacturer: syz [ 72.967977][ T10] usb 1-1: config 0 descriptor?? [ 73.115485][ T1343] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 73.252256][ T1343] usb 3-1: device descriptor read/64, error -71 [ 73.377676][ T10] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 73.385531][ T10] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 73.395551][ T10] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 73.492197][ T1343] usb 3-1: device descriptor read/64, error -71 [ 73.612220][ T1343] usb usb3-port1: attempt power cycle [ 73.962223][ T1343] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 73.983296][ T1343] usb 3-1: device descriptor read/8, error -71 [ 74.113304][ T1343] usb 3-1: device descriptor read/8, error -71 [ 74.352238][ T1343] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 74.383281][ T1343] usb 3-1: device descriptor read/8, error -71 [ 74.513330][ T1343] usb 3-1: device descriptor read/8, error -71 [ 74.622321][ T1343] usb usb3-port1: unable to enumerate USB device [ 74.820413][ T36] audit: type=1400 audit(1786394424.720:223): avc: denied { write } for pid=1911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.841079][ T36] audit: type=1400 audit(1786394424.720:224): avc: denied { nlmsg_write } for pid=1911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.870017][ T36] audit: type=1400 audit(1786394424.730:225): avc: denied { ioctl } for pid=1911 comm="syz.3.552" path="socket:[19524]" dev="sockfs" ino=19524 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.902195][ T36] audit: type=1400 audit(1786394424.730:226): avc: denied { bind } for pid=1911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.932419][ T36] audit: type=1400 audit(1786394424.730:227): avc: denied { name_bind } for pid=1911 comm="syz.3.552" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 74.968009][ T36] audit: type=1400 audit(1786394424.730:228): avc: denied { node_bind } for pid=1911 comm="syz.3.552" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 74.994292][ T36] audit: type=1400 audit(1786394424.730:229): avc: denied { write } for pid=1911 comm="syz.3.552" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.020553][ T36] audit: type=1400 audit(1786394424.730:230): avc: denied { remount } for pid=1911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.041132][ T36] audit: type=1400 audit(1786394424.740:231): avc: denied { create } for pid=1911 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 75.069973][ T36] audit: type=1400 audit(1786394424.750:232): avc: denied { sys_admin } for pid=1911 comm="syz.3.552" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 75.422576][ T1941] FAULT_INJECTION: forcing a failure. [ 75.422576][ T1941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.450167][ T1941] CPU: 0 UID: 0 PID: 1941 Comm: syz.0.563 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 75.450215][ T1941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.450233][ T1941] Call Trace: [ 75.450241][ T1941] [ 75.450254][ T1941] __dump_stack+0x21/0x30 [ 75.450298][ T1941] dump_stack_lvl+0x140/0x1c0 [ 75.450339][ T1941] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.450381][ T1941] ? check_stack_object+0x138/0x150 [ 75.450413][ T1941] dump_stack+0x19/0x20 [ 75.450452][ T1941] should_fail_ex+0x3c2/0x510 [ 75.450486][ T1941] should_fail+0xf/0x20 [ 75.450516][ T1941] should_fail_usercopy+0x1e/0x30 [ 75.450552][ T1941] _copy_to_user+0x24/0xa0 [ 75.450588][ T1941] simple_read_from_buffer+0xed/0x160 [ 75.450639][ T1941] proc_fail_nth_read+0x1aa/0x220 [ 75.450681][ T1941] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 75.450715][ T1941] ? bpf_lsm_file_permission+0xd/0x20 [ 75.450749][ T1941] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 75.450790][ T1941] vfs_read+0x288/0xc70 [ 75.450817][ T1941] ? __cfi_do_pagemap_cmd+0x10/0x10 [ 75.450853][ T1941] ? __cfi_vfs_read+0x10/0x10 [ 75.450879][ T1941] ? __kasan_check_write+0x18/0x20 [ 75.450911][ T1941] ? mutex_lock+0x97/0x1d0 [ 75.450950][ T1941] ? __cfi_mutex_lock+0x10/0x10 [ 75.450990][ T1941] ksys_read+0x145/0x260 [ 75.451021][ T1941] ? __cfi_ksys_read+0x10/0x10 [ 75.451050][ T1941] ? __kasan_check_read+0x15/0x20 [ 75.451082][ T1941] __x64_sys_read+0x7f/0x90 [ 75.451108][ T1941] x64_sys_call+0x2638/0x2ee0 [ 75.451138][ T1941] do_syscall_64+0x57/0xf0 [ 75.451167][ T1941] ? clear_bhb_loop+0x50/0xa0 [ 75.451207][ T1941] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.451244][ T1941] RIP: 0033:0x7f07bbf5e90e [ 75.451266][ T1941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.451291][ T1941] RSP: 002b:00007f07bcdc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.451322][ T1941] RAX: ffffffffffffffda RBX: 00007f07bcdc76c0 RCX: 00007f07bbf5e90e [ 75.451341][ T1941] RDX: 000000000000000f RSI: 00007f07bcdc70a0 RDI: 0000000000000004 [ 75.451364][ T1941] RBP: 00007f07bcdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.451383][ T1941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.451401][ T1941] R13: 00007f07bc226038 R14: 00007f07bc225fa0 R15: 00007fff37a688f8 [ 75.451428][ T1941] [ 75.702583][ T1343] usb 1-1: USB disconnect, device number 6 [ 75.998760][ T1950] FAULT_INJECTION: forcing a failure. [ 75.998760][ T1950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.022208][ T1950] CPU: 0 UID: 0 PID: 1950 Comm: syz.1.567 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 76.022246][ T1950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.022260][ T1950] Call Trace: [ 76.022267][ T1950] [ 76.022275][ T1950] __dump_stack+0x21/0x30 [ 76.022309][ T1950] dump_stack_lvl+0x140/0x1c0 [ 76.022339][ T1950] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.022371][ T1950] ? _parse_integer_limit+0x195/0x1e0 [ 76.022399][ T1950] dump_stack+0x19/0x20 [ 76.022427][ T1950] should_fail_ex+0x3c2/0x510 [ 76.022454][ T1950] should_fail_alloc_page+0xec/0x110 [ 76.022484][ T1950] __alloc_pages_noprof+0x1c0/0x7e0 [ 76.022529][ T1950] ? kstrtouint_from_user+0x117/0x170 [ 76.022554][ T1950] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.022588][ T1950] ? avc_policy_seqno+0xd/0x30 [ 76.022616][ T1950] ? selinux_file_permission+0x318/0xb60 [ 76.022640][ T1950] ? mutex_lock+0x97/0x1d0 [ 76.022671][ T1950] ? __cfi_mutex_lock+0x10/0x10 [ 76.022703][ T1950] ? __kasan_check_write+0x18/0x20 [ 76.022727][ T1950] get_free_pages_noprof+0x14/0x40 [ 76.022760][ T1950] configfs_write_iter+0xbe/0x490 [ 76.022791][ T1950] vfs_write+0x75f/0xfd0 [ 76.022815][ T1950] ? __cfi_vfs_write+0x10/0x10 [ 76.022839][ T1950] ? __cfi_mutex_lock+0x10/0x10 [ 76.022874][ T1950] ksys_write+0x145/0x260 [ 76.022898][ T1950] ? __cfi_ksys_write+0x10/0x10 [ 76.022923][ T1950] ? __kasan_check_read+0x15/0x20 [ 76.022946][ T1950] __x64_sys_write+0x7f/0x90 [ 76.022970][ T1950] x64_sys_call+0x271c/0x2ee0 [ 76.022991][ T1950] do_syscall_64+0x57/0xf0 [ 76.023017][ T1950] ? clear_bhb_loop+0x50/0xa0 [ 76.023049][ T1950] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.023080][ T1950] RIP: 0033:0x7f08f9f9e0d9 [ 76.023101][ T1950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.023121][ T1950] RSP: 002b:00007f08fae11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.023147][ T1950] RAX: ffffffffffffffda RBX: 00007f08fa225fa0 RCX: 00007f08f9f9e0d9 [ 76.023165][ T1950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 76.023180][ T1950] RBP: 00007f08fae11090 R08: 0000000000000000 R09: 0000000000000000 [ 76.023195][ T1950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.023210][ T1950] R13: 00007f08fa226038 R14: 00007f08fa225fa0 R15: 00007ffeda4742f8 [ 76.023231][ T1950] [ 76.437370][ T1965] UDC core: g1: couldn't find an available UDC or it's busy [ 76.562073][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.590413][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.613779][ T1976] SELinux: Context system_u: is not valid (left unmapped). [ 77.431989][ T1999] UDC core: g1: couldn't find an available UDC or it's busy [ 78.634653][ T2041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.662329][ T2041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.215128][ T2070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.235926][ T2070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.822179][ T1252] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.972151][ T1252] usb 1-1: Using ep0 maxpacket: 16 [ 79.987879][ T1252] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.000363][ T1252] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.018053][ T1252] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.037491][ T1252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.047390][ T1252] usb 1-1: Product: syz [ 80.052026][ T1252] usb 1-1: Manufacturer: syz [ 80.057056][ T1252] usb 1-1: SerialNumber: syz [ 80.135690][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 80.135710][ T36] audit: type=1400 audit(1786394430.040:260): avc: denied { connect } for pid=2101 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.162526][ T36] audit: type=1400 audit(1786394430.070:261): avc: denied { read } for pid=2101 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.268627][ T1252] usb 1-1: 0:2 : does not exist [ 80.283206][ T1252] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 80.308053][ T1252] usb 1-1: USB disconnect, device number 7 [ 80.343410][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.536644][ T2143] FAULT_INJECTION: forcing a failure. [ 80.536644][ T2143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.550395][ T2143] CPU: 1 UID: 0 PID: 2143 Comm: syz.1.624 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 80.550433][ T2143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.550447][ T2143] Call Trace: [ 80.550454][ T2143] [ 80.550463][ T2143] __dump_stack+0x21/0x30 [ 80.550498][ T2143] dump_stack_lvl+0x140/0x1c0 [ 80.550528][ T2143] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.550559][ T2143] ? check_stack_object+0x138/0x150 [ 80.550591][ T2143] dump_stack+0x19/0x20 [ 80.550613][ T2143] should_fail_ex+0x3c2/0x510 [ 80.550631][ T2143] should_fail+0xf/0x20 [ 80.550647][ T2143] should_fail_usercopy+0x1e/0x30 [ 80.550666][ T2143] _copy_to_user+0x24/0xa0 [ 80.550698][ T2143] simple_read_from_buffer+0xed/0x160 [ 80.550721][ T2143] proc_fail_nth_read+0x1aa/0x220 [ 80.550745][ T2143] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.550768][ T2143] ? bpf_lsm_file_permission+0xd/0x20 [ 80.550789][ T2143] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.550812][ T2143] vfs_read+0x288/0xc70 [ 80.550827][ T2143] ? asm_exc_page_fault+0x2b/0x30 [ 80.550849][ T2143] ? __cfi_vfs_read+0x10/0x10 [ 80.550864][ T2143] ? __kasan_check_write+0x18/0x20 [ 80.550880][ T2143] ? mutex_lock+0x97/0x1d0 [ 80.550902][ T2143] ? __cfi_mutex_lock+0x10/0x10 [ 80.550925][ T2143] ksys_read+0x145/0x260 [ 80.550940][ T2143] ? __cfi_ksys_read+0x10/0x10 [ 80.550957][ T2143] ? __kasan_check_read+0x15/0x20 [ 80.550972][ T2143] __x64_sys_read+0x7f/0x90 [ 80.550988][ T2143] x64_sys_call+0x2638/0x2ee0 [ 80.551002][ T2143] do_syscall_64+0x57/0xf0 [ 80.551019][ T2143] ? clear_bhb_loop+0x50/0xa0 [ 80.551041][ T2143] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.551061][ T2143] RIP: 0033:0x7f08f9f5e90e [ 80.551075][ T2143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.551088][ T2143] RSP: 002b:00007f08fae10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.551106][ T2143] RAX: ffffffffffffffda RBX: 00007f08fae116c0 RCX: 00007f08f9f5e90e [ 80.551118][ T2143] RDX: 000000000000000f RSI: 00007f08fae110a0 RDI: 0000000000000004 [ 80.551129][ T2143] RBP: 00007f08fae11090 R08: 0000000000000000 R09: 0000000000000000 [ 80.551139][ T2143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.551149][ T2143] R13: 00007f08fa226038 R14: 00007f08fa225fa0 R15: 00007ffeda4742f8 [ 80.551163][ T2143] [ 81.435903][ T36] audit: type=1400 audit(1786394431.340:262): avc: denied { create } for pid=2168 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.455833][ T36] audit: type=1400 audit(1786394431.350:263): avc: denied { setopt } for pid=2168 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.480831][ T36] audit: type=1400 audit(1786394431.380:264): avc: denied { ioctl } for pid=2168 comm="syz.3.633" path="socket:[35886]" dev="sockfs" ino=35886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.484465][ T2169] sd 0:0:1:0: device reset [ 81.506889][ T36] audit: type=1400 audit(1786394431.380:265): avc: denied { bind } for pid=2168 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.544564][ T2171] FAULT_INJECTION: forcing a failure. [ 81.544564][ T2171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.557792][ T2171] CPU: 1 UID: 0 PID: 2171 Comm: syz.3.634 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 81.557830][ T2171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.557851][ T2171] Call Trace: [ 81.557856][ T2171] [ 81.557863][ T2171] __dump_stack+0x21/0x30 [ 81.557890][ T2171] dump_stack_lvl+0x140/0x1c0 [ 81.557912][ T2171] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.557936][ T2171] ? vsnprintf+0x7b4/0x1ad0 [ 81.557954][ T2171] ? check_stack_object+0x10f/0x150 [ 81.557972][ T2171] dump_stack+0x19/0x20 [ 81.557992][ T2171] should_fail_ex+0x3c2/0x510 [ 81.558010][ T2171] should_fail+0xf/0x20 [ 81.558026][ T2171] should_fail_usercopy+0x1e/0x30 [ 81.558046][ T2171] _copy_from_user+0x20/0xa0 [ 81.558067][ T2171] kstrtouint_from_user+0xde/0x170 [ 81.558084][ T2171] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 81.558101][ T2171] ? selinux_file_permission+0x318/0xb60 [ 81.558118][ T2171] ? __cfi_selinux_file_permission+0x10/0x10 [ 81.558134][ T2171] proc_fail_nth_write+0x8f/0x220 [ 81.558157][ T2171] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.558180][ T2171] ? bpf_lsm_file_permission+0xd/0x20 [ 81.558207][ T2171] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.558229][ T2171] vfs_write+0x3c1/0xfd0 [ 81.558246][ T2171] ? __cfi_vfs_write+0x10/0x10 [ 81.558262][ T2171] ? __kasan_check_write+0x18/0x20 [ 81.558277][ T2171] ? mutex_lock+0x97/0x1d0 [ 81.558299][ T2171] ? __cfi_mutex_lock+0x10/0x10 [ 81.558322][ T2171] ksys_write+0x145/0x260 [ 81.558338][ T2171] ? __cfi_ksys_write+0x10/0x10 [ 81.558355][ T2171] ? __kasan_check_read+0x15/0x20 [ 81.558370][ T2171] __x64_sys_write+0x7f/0x90 [ 81.558386][ T2171] x64_sys_call+0x271c/0x2ee0 [ 81.558400][ T2171] do_syscall_64+0x57/0xf0 [ 81.558418][ T2171] ? clear_bhb_loop+0x50/0xa0 [ 81.558440][ T2171] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.558460][ T2171] RIP: 0033:0x7f0df795e90e [ 81.558474][ T2171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.558497][ T2171] RSP: 002b:00007f0df8835fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.558516][ T2171] RAX: ffffffffffffffda RBX: 00007f0df88366c0 RCX: 00007f0df795e90e [ 81.558528][ T2171] RDX: 0000000000000001 RSI: 00007f0df88360a0 RDI: 0000000000000004 [ 81.558538][ T2171] RBP: 00007f0df8836090 R08: 0000000000000000 R09: 0000000000000000 [ 81.558548][ T2171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.558558][ T2171] R13: 00007f0df7c26038 R14: 00007f0df7c25fa0 R15: 00007ffcedbf37b8 [ 81.558572][ T2171] [ 81.870111][ T2177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.879856][ T2177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.372189][ T1343] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 82.522187][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 82.528614][ T1343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.549784][ T1343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.567587][ T1343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.578543][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.591559][ T1343] usb 3-1: Product: syz [ 82.600598][ T1343] usb 3-1: Manufacturer: syz [ 82.605749][ T1343] usb 3-1: SerialNumber: syz [ 82.814270][ T1343] usb 3-1: 0:2 : does not exist [ 82.821616][ T1343] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 82.834173][ T1343] usb 3-1: USB disconnect, device number 11 [ 82.846628][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.592167][ T1252] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 83.762601][ T1252] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 83.779072][ T1252] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 83.788488][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.796970][ T1252] usb 3-1: Product: syz [ 83.801425][ T1252] usb 3-1: Manufacturer: syz [ 83.806473][ T1252] usb 3-1: SerialNumber: syz [ 84.338187][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.346910][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.431188][ T1252] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:a1:24:b5:7d:e8 [ 84.453353][ T1252] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 84.462072][ T1252] usb 3-1: USB disconnect, device number 12 [ 84.558456][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.569163][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.602145][ T36] audit: type=1400 audit(1786394434.500:266): avc: denied { watch } for pid=2236 comm="syz.3.659" path="/183" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.627186][ T2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.642354][ T2237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.262165][ T1252] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 85.412157][ T1252] usb 1-1: Using ep0 maxpacket: 16 [ 85.427916][ T1252] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.438554][ T1252] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.449065][ T1252] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.458284][ T1252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.466765][ T1252] usb 1-1: Product: syz [ 85.470978][ T1252] usb 1-1: Manufacturer: syz [ 85.475676][ T1252] usb 1-1: SerialNumber: syz [ 85.529394][ T2263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.538072][ T2263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.556951][ T2263] syzkaller1: entered promiscuous mode [ 85.562559][ T2263] syzkaller1: entered allmulticast mode [ 85.684271][ T1252] usb 1-1: 0:2 : does not exist [ 85.693547][ T1252] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 85.704802][ T1252] usb 1-1: USB disconnect, device number 8 [ 85.716883][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.125767][ T36] audit: type=1400 audit(1786394436.030:267): avc: denied { cmd } for pid=2268 comm="iou-wrk-2269" path="socket:[41212]" dev="sockfs" ino=41212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.281086][ T2285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 86.616499][ T2302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.625232][ T2302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.642721][ T2302] syzkaller1: entered promiscuous mode [ 86.648492][ T2302] syzkaller1: entered allmulticast mode [ 87.915082][ T2349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=2349 comm=syz.2.696 [ 88.480798][ T36] audit: type=1400 audit(1786394438.380:268): avc: denied { map } for pid=2376 comm="syz.2.707" path="socket:[50007]" dev="sockfs" ino=50007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.731339][ T650] bridge_slave_1: left allmulticast mode [ 88.737563][ T650] bridge_slave_1: left promiscuous mode [ 88.757416][ T650] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.773411][ T650] bridge_slave_0: left allmulticast mode [ 88.792174][ T650] bridge_slave_0: left promiscuous mode [ 88.797876][ T650] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.938928][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.953332][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.997554][ T650] veth1_macvtap: left promiscuous mode [ 89.003207][ T650] veth0_vlan: left promiscuous mode [ 89.129753][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.137765][ T2392] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.145247][ T2392] bridge_slave_0: entered allmulticast mode [ 89.151891][ T2392] bridge_slave_0: entered promiscuous mode [ 89.159590][ T2392] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.167096][ T2392] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.174551][ T2392] bridge_slave_1: entered allmulticast mode [ 89.181169][ T2392] bridge_slave_1: entered promiscuous mode [ 89.272598][ T2392] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.279944][ T2392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.287358][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.294459][ T2392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.329358][ T635] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.337304][ T635] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.347765][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.354949][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.374322][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.381459][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.408288][ T2392] veth0_vlan: entered promiscuous mode [ 89.424293][ T2392] veth1_macvtap: entered promiscuous mode [ 89.451953][ T36] audit: type=1400 audit(1786394439.350:269): avc: denied { mounton } for pid=2392 comm="syz-executor" path="/root/syzkaller.IWk5PH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.633369][ T36] audit: type=1400 audit(1786394439.540:270): avc: denied { create } for pid=2409 comm="syz.4.720" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 90.200190][ T36] audit: type=1400 audit(1786394440.100:271): avc: denied { append } for pid=2424 comm="syz.1.724" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.352749][ T2434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.385365][ T2434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.405766][ T2434] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 90.752181][ T311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 90.904876][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 90.914039][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.922201][ T311] usb 3-1: Product: syz [ 90.926455][ T311] usb 3-1: Manufacturer: syz [ 90.931770][ T311] usb 3-1: SerialNumber: syz [ 91.165864][ T311] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.180168][ T311] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.192741][ T311] usb 3-1: USB disconnect, device number 13 [ 91.216552][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.666007][ T36] audit: type=1400 audit(1786394441.570:272): avc: denied { create } for pid=2471 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 91.817073][ T2472] IPv6: A: Disabled Multicast RS [ 92.702374][ T36] audit: type=1400 audit(1786394442.610:273): avc: denied { ioctl } for pid=2500 comm="syz.4.749" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.747812][ T36] audit: type=1400 audit(1786394442.650:274): avc: denied { read write } for pid=2504 comm="syz.1.752" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.773915][ T36] audit: type=1400 audit(1786394442.650:275): avc: denied { open } for pid=2504 comm="syz.1.752" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.122416][ T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 93.282167][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 93.288532][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.306906][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.317912][ T311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.327931][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.336384][ T311] usb 2-1: Product: syz [ 93.341927][ T311] usb 2-1: Manufacturer: syz [ 93.347677][ T311] usb 2-1: SerialNumber: syz [ 93.559948][ T311] usb 2-1: 0:2 : does not exist [ 93.567409][ T311] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 93.579804][ T311] usb 2-1: USB disconnect, device number 8 [ 93.588187][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.188403][ T36] audit: type=1400 audit(1786394444.090:276): avc: denied { mount } for pid=2545 comm="syz.2.765" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.213270][ T36] audit: type=1400 audit(1786394444.090:277): avc: denied { write } for pid=2545 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.378531][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.513936][ T2553] netlink: 'syz.4.768': attribute type 6 has an invalid length. [ 94.522372][ T2553] FAULT_INJECTION: forcing a failure. [ 94.522372][ T2553] name failslab, interval 1, probability 0, space 0, times 0 [ 94.535819][ T2553] CPU: 0 UID: 0 PID: 2553 Comm: syz.4.768 Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 94.535863][ T2553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.535876][ T2553] Call Trace: [ 94.535883][ T2553] [ 94.535891][ T2553] __dump_stack+0x21/0x30 [ 94.535926][ T2553] dump_stack_lvl+0x140/0x1c0 [ 94.535953][ T2553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.535983][ T2553] ? neigh_get+0x7f1/0xd60 [ 94.536016][ T2553] dump_stack+0x19/0x20 [ 94.536044][ T2553] should_fail_ex+0x3c2/0x510 [ 94.536069][ T2553] should_failslab+0xac/0x100 [ 94.536097][ T2553] kmem_cache_alloc_node_noprof+0x45/0x420 [ 94.536121][ T2553] ? kasan_save_alloc_info+0x3a/0x50 [ 94.536153][ T2553] ? __alloc_skb+0x10c/0x360 [ 94.536182][ T2553] ? __alloc_skb+0x13f/0x360 [ 94.536211][ T2553] ? netlink_sendmsg+0x576/0xad0 [ 94.536233][ T2553] __alloc_skb+0x10c/0x360 [ 94.536264][ T2553] netlink_ack+0x155/0xa50 [ 94.536283][ T2553] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 94.536312][ T2553] ? avc_has_perm+0x155/0x240 [ 94.536339][ T2553] netlink_rcv_skb+0x2cb/0x4e0 [ 94.536360][ T2553] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 94.536389][ T2553] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 94.536410][ T2553] ? selinux_netlink_send+0x7df/0x8b0 [ 94.536442][ T2553] ? netlink_autobind+0x1c0/0x1c0 [ 94.536465][ T2553] ? is_vmalloc_addr+0x11/0x40 [ 94.536493][ T2553] rtnetlink_rcv+0x20/0x30 [ 94.536518][ T2553] netlink_unicast+0x8bc/0xa70 [ 94.536550][ T2553] netlink_sendmsg+0x7d1/0xad0 [ 94.536583][ T2553] ? __cfi_netlink_sendmsg+0x10/0x10 [ 94.536608][ T2553] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 94.536635][ T2553] ? security_socket_sendmsg+0x3d/0x100 [ 94.536667][ T2553] ____sys_sendmsg+0x9a1/0xa00 [ 94.536692][ T2553] ? __import_iovec+0x5b9/0x7d0 [ 94.536726][ T2553] ? __sys_sendmsg_sock+0x50/0x50 [ 94.536752][ T2553] ? import_iovec+0x80/0xb0 [ 94.536786][ T2553] ___sys_sendmsg+0x2a6/0x370 [ 94.536811][ T2553] ? __sys_sendmsg+0x2a0/0x2a0 [ 94.536835][ T2553] ? proc_fail_nth_write+0x184/0x220 [ 94.536870][ T2553] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 94.536909][ T2553] ? __fget_files+0x2bc/0x330 [ 94.536938][ T2553] __x64_sys_sendmsg+0x206/0x2e0 [ 94.536962][ T2553] ? fput+0x1a4/0x230 [ 94.536993][ T2553] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 94.537016][ T2553] ? ksys_write+0x1f3/0x260 [ 94.537043][ T2553] ? __kasan_check_read+0x15/0x20 [ 94.537068][ T2553] x64_sys_call+0x2a4c/0x2ee0 [ 94.537090][ T2553] do_syscall_64+0x57/0xf0 [ 94.537117][ T2553] ? clear_bhb_loop+0x50/0xa0 [ 94.537149][ T2553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.537179][ T2553] RIP: 0033:0x7fa22f99e0d9 [ 94.537199][ T2553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.537220][ T2553] RSP: 002b:00007fa2307a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.537245][ T2553] RAX: ffffffffffffffda RBX: 00007fa22fc25fa0 RCX: 00007fa22f99e0d9 [ 94.537263][ T2553] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 94.537279][ T2553] RBP: 00007fa2307a3090 R08: 0000000000000000 R09: 0000000000000000 [ 94.537294][ T2553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.537309][ T2553] R13: 00007fa22fc26038 R14: 00007fa22fc25fa0 R15: 00007ffce0fdfa58 [ 94.537329][ T2553] [ 94.881155][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 94.887896][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.899636][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.910210][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.919419][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.928046][ T9] usb 2-1: Product: syz [ 94.932364][ T9] usb 2-1: Manufacturer: syz [ 94.937537][ T9] usb 2-1: SerialNumber: syz [ 95.151606][ T9] usb 2-1: 0:2 : does not exist [ 95.159230][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 95.172654][ T9] usb 2-1: USB disconnect, device number 9 [ 95.190831][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.307734][ T36] audit: type=1400 audit(1786394446.210:278): avc: denied { block_suspend } for pid=2595 comm="syz.2.782" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.987262][ T36] audit: type=1400 audit(1786394446.890:279): avc: denied { mount } for pid=2620 comm="syz.3.790" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.013982][ T2621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.027264][ T36] audit: type=1400 audit(1786394446.920:280): avc: denied { append } for pid=2620 comm="syz.3.790" name="sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.053423][ T2621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.072361][ T1616] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 97.233222][ T1616] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.261796][ T1616] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.272224][ T1616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.291448][ T1616] usb 2-1: SerialNumber: syz [ 97.610290][ T36] audit: type=1400 audit(1786394447.510:281): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.636732][ T1252] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 97.802150][ T1252] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 97.818706][ T1252] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 97.836977][ T1252] usb 3-1: config 0 has no interface number 0 [ 97.853603][ T1252] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 97.866315][ T1252] usb 3-1: config 0 interface 200 has no altsetting 0 [ 97.874679][ T1252] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 97.891736][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.900507][ T1252] usb 3-1: Product: syz [ 97.905276][ T1252] usb 3-1: Manufacturer: syz [ 97.910897][ T1252] usb 3-1: SerialNumber: syz [ 97.920320][ T1252] usb 3-1: config 0 descriptor?? [ 98.123214][ T1616] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.137974][ T1252] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input4 [ 98.152145][ T36] audit: type=1400 audit(1786394448.050:282): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=490 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.156607][ T1616] usb 2-1: USB disconnect, device number 10 [ 98.184519][ T1252] usb 3-1: USB disconnect, device number 14 [ 98.191201][ T36] audit: type=1400 audit(1786394448.050:283): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=490 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.635653][ T36] audit: type=1400 audit(1786394448.540:284): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.636373][ T294] ------------[ cut here ]------------ [ 98.664217][ T294] WARNING: CPU: 1 PID: 294 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 98.673029][ T294] Modules linked in: [ 98.677786][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 98.691370][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.702153][ T294] RIP: 0010:drop_nlink+0xce/0x110 [ 98.707245][ T294] Code: 04 00 00 be 08 00 00 00 e8 5f 13 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 4b 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 98.728080][ T294] RSP: 0018:ffffc90006a2fc88 EFLAGS: 00010293 [ 98.734334][ T294] RAX: ffffffff81f225ee RBX: ffff888120f0f480 RCX: ffff888122440000 [ 98.742420][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.750458][ T294] RBP: ffffc90006a2fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 98.758541][ T294] R10: dffffc0000000000 R11: fffff52000d45f80 R12: dffffc0000000000 [ 98.767154][ T294] R13: 1ffff110241e1e99 R14: ffff888120f0f4c8 R15: 0000000000000000 [ 98.776173][ T294] FS: 000055555c816500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 98.785240][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.792382][ T294] CR2: 000055555c839958 CR3: 00000001076d0000 CR4: 00000000003526b0 [ 98.800800][ T294] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 98.809119][ T294] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 98.817698][ T294] Call Trace: [ 98.821032][ T294] [ 98.824035][ T294] shmem_rmdir+0x5f/0x90 [ 98.828701][ T294] vfs_rmdir+0x3de/0x560 [ 98.833150][ T294] incfs_kill_sb+0x102/0x220 [ 98.837801][ T294] deactivate_locked_super+0xd5/0x270 [ 98.843461][ T294] deactivate_super+0xb8/0xe0 [ 98.848217][ T294] cleanup_mnt+0x438/0x4d0 [ 98.852750][ T294] __cleanup_mnt+0x1d/0x40 [ 98.857228][ T294] task_work_run+0x1e8/0x260 [ 98.861877][ T294] ? __cfi_task_work_run+0x10/0x10 [ 98.867959][ T294] ? __x64_sys_umount+0x12e/0x180 [ 98.873944][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 98.880026][ T294] ? __kasan_check_read+0x15/0x20 [ 98.885712][ T294] resume_user_mode_work+0x35/0x50 [ 98.890904][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 98.896574][ T294] do_syscall_64+0x63/0xf0 [ 98.901326][ T294] ? clear_bhb_loop+0x50/0xa0 [ 98.906128][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.912199][ T294] RIP: 0033:0x7f08f9f9f317 [ 98.916845][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.938084][ T294] RSP: 002b:00007ffeda473568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.946929][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08f9f9f317 [ 98.957322][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeda473620 [ 98.968117][ T294] RBP: 00007ffeda473620 R08: 00007ffeda474620 R09: 00000000ffffffff [ 98.978217][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeda4746b0 [ 98.988201][ T294] R13: 00007f08fa034474 R14: 000000000001806a R15: 00007ffeda4746f0 [ 98.997092][ T294] [ 99.000424][ T294] ---[ end trace 0000000000000000 ]--- [ 99.009562][ T294] ================================================================== [ 99.020131][ T294] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 99.028098][ T294] Write of size 4 at addr 0000000000000168 by task syz-executor/294 [ 99.036859][ T294] [ 99.039241][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 99.039286][ T294] Tainted: [W]=WARN [ 99.039294][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.039309][ T294] Call Trace: [ 99.039317][ T294] [ 99.039327][ T294] __dump_stack+0x21/0x30 [ 99.039366][ T294] dump_stack_lvl+0x140/0x1c0 [ 99.039399][ T294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.039434][ T294] print_report+0x3d/0x70 [ 99.039466][ T294] kasan_report+0x162/0x1a0 [ 99.039496][ T294] ? ihold+0x24/0x70 [ 99.039534][ T294] ? ihold+0x24/0x70 [ 99.039562][ T294] kasan_check_range+0x25a/0x2b0 [ 99.039676][ T294] __kasan_check_write+0x18/0x20 [ 99.039745][ T294] ihold+0x24/0x70 [ 99.039772][ T294] vfs_rmdir+0x25c/0x560 [ 99.039803][ T294] incfs_kill_sb+0x102/0x220 [ 99.039827][ T294] deactivate_locked_super+0xd5/0x270 [ 99.039860][ T294] deactivate_super+0xb8/0xe0 [ 99.039897][ T294] cleanup_mnt+0x438/0x4d0 [ 99.039927][ T294] __cleanup_mnt+0x1d/0x40 [ 99.039955][ T294] task_work_run+0x1e8/0x260 [ 99.039986][ T294] ? __cfi_task_work_run+0x10/0x10 [ 99.040016][ T294] ? __x64_sys_umount+0x12e/0x180 [ 99.040039][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.040060][ T294] ? __kasan_check_read+0x15/0x20 [ 99.040084][ T294] resume_user_mode_work+0x35/0x50 [ 99.040116][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 99.040139][ T294] do_syscall_64+0x63/0xf0 [ 99.040186][ T294] ? clear_bhb_loop+0x50/0xa0 [ 99.040219][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.040252][ T294] RIP: 0033:0x7f08f9f9f317 [ 99.040275][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.040296][ T294] RSP: 002b:00007ffeda473568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.040322][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08f9f9f317 [ 99.040339][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeda473620 [ 99.040356][ T294] RBP: 00007ffeda473620 R08: 00007ffeda474620 R09: 00000000ffffffff [ 99.040373][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeda4746b0 [ 99.040390][ T294] R13: 00007f08fa034474 R14: 000000000001806a R15: 00007ffeda4746f0 [ 99.040411][ T294] [ 99.040421][ T294] ================================================================== [ 99.311497][ T294] Disabling lock debugging due to kernel taint [ 99.317823][ T294] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 99.322846][ T36] audit: type=1400 audit(1786394449.220:285): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 99.325658][ T294] #PF: supervisor write access in kernel mode [ 99.325674][ T294] #PF: error_code(0x0002) - not-present page [ 99.325688][ T294] PGD 800000010b788067 [ 99.353868][ T36] audit: type=1400 audit(1786394449.230:286): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.353956][ T36] audit: type=1400 audit(1786394449.230:287): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.360104][ T294] P4D 800000010b788067 PUD 0 [ 99.360129][ T294] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 99.365885][ T36] audit: type=1400 audit(1786394449.260:288): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.385760][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Tainted: G B W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 99.385800][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 99.385809][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.385845][ T294] RIP: 0010:ihold+0x2a/0x70 [ 99.385887][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 99.498748][ T294] RSP: 0018:ffffc90006a2fcc8 EFLAGS: 00010246 [ 99.505184][ T294] RAX: ffff888122440000 RBX: 0000000000000000 RCX: ffff888122440000 [ 99.513622][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.521905][ T294] RBP: ffffc90006a2fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 99.530924][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 99.540417][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 99.549283][ T294] FS: 000055555c816500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.558245][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.564879][ T294] CR2: 0000000000000168 CR3: 00000001076d0000 CR4: 00000000003526b0 [ 99.572920][ T294] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 99.581295][ T294] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 99.589458][ T294] Call Trace: [ 99.592781][ T294] [ 99.595846][ T294] vfs_rmdir+0x25c/0x560 [ 99.600160][ T294] incfs_kill_sb+0x102/0x220 [ 99.604787][ T294] deactivate_locked_super+0xd5/0x270 [ 99.610378][ T294] deactivate_super+0xb8/0xe0 [ 99.615208][ T294] cleanup_mnt+0x438/0x4d0 [ 99.619766][ T294] __cleanup_mnt+0x1d/0x40 [ 99.624242][ T294] task_work_run+0x1e8/0x260 [ 99.628939][ T294] ? __cfi_task_work_run+0x10/0x10 [ 99.634081][ T294] ? __x64_sys_umount+0x12e/0x180 [ 99.639137][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.644568][ T294] ? __kasan_check_read+0x15/0x20 [ 99.649676][ T294] resume_user_mode_work+0x35/0x50 [ 99.654952][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 99.660458][ T294] do_syscall_64+0x63/0xf0 [ 99.664903][ T294] ? clear_bhb_loop+0x50/0xa0 [ 99.669638][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.676157][ T294] RIP: 0033:0x7f08f9f9f317 [ 99.680778][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.700751][ T294] RSP: 002b:00007ffeda473568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.709186][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f08f9f9f317 [ 99.717214][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeda473620 [ 99.725727][ T294] RBP: 00007ffeda473620 R08: 00007ffeda474620 R09: 00000000ffffffff [ 99.733719][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeda4746b0 [ 99.741969][ T294] R13: 00007f08fa034474 R14: 000000000001806a R15: 00007ffeda4746f0 [ 99.749960][ T294] [ 99.753213][ T294] Modules linked in: [ 99.757507][ T294] CR2: 0000000000000168 [ 99.761727][ T294] ---[ end trace 0000000000000000 ]--- [ 99.767217][ T294] RIP: 0010:ihold+0x2a/0x70 [ 99.771752][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 99.791375][ T294] RSP: 0018:ffffc90006a2fcc8 EFLAGS: 00010246 [ 99.797488][ T294] RAX: ffff888122440000 RBX: 0000000000000000 RCX: ffff888122440000 [ 99.805741][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.813725][ T294] RBP: ffffc90006a2fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 99.821712][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 99.829713][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 99.837698][ T294] FS: 000055555c816500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.846670][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.853264][ T294] CR2: 0000000000000168 CR3: 00000001076d0000 CR4: 00000000003526b0 [ 99.861784][ T294] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 99.869788][ T294] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 99.877822][ T294] Kernel panic - not syncing: Fatal exception [ 99.884089][ T294] Kernel Offset: disabled [ 99.888462][ T294] Rebooting in 86400 seconds..