last executing test programs: 22.72689039s ago: executing program 3 (id=1813): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x1, 0x4, "e3f5e7d1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x40) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 22.186969646s ago: executing program 3 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x420, 0x0) 22.184580046s ago: executing program 3 (id=1817): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=0000000000']) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) (rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001cafd04600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xfdef) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000340), 0xb, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)=0xfffffffd, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x82, 0x8, 0x9e, "c9d70bfe", "13eec4ed"}}, 0x0}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="44010000100001"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a00)}], 0x2}, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) r6 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x103) 22.083564302s ago: executing program 3 (id=1818): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000c00)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0xfff9cffb, {}, 0x1, 0x1}, {"dd5be3d9f0710de77fd739b5e5257598c35c3f3260d3ad09289da94bf2cbe16c9fb40aab4a12c415de0cf619ff56427bab5f8706641bbe43d7a0b3c25ddf1991c6a9f90e81caa61804afaaef7fcfeef5dd7afae8e5528f2d07f597a5e3bde91d77f8e25f9c845d70f7034c8463b254dd543293398b64c2ece3fcd45e60153a4a5bd471f0856e76cf6ea0056b38c93944ad50087099624778f885b3286e95782a0ce3c9e1b422f414118b779be8a8391dba9c6d86ceb9c49372775474d40a7430c43c7f915680ba1bb62d9fd447db06f66c14d7c94a1ed906452a589a828ae236ced1417b4032c1a4de250a66e557d2140a66c561682e05190ecda116ad26a56a2e766ed06707aee5a19336445c1ef20ec5835cc8e378100844a8c907db93c7def9e29f15b0ded5faa22da685942ee4607ed4789331f0006a1ed98d4ac95b0eb13ab91b79d815a6bb00891ad4432dc6967234c7abe68d4ef745395a4856010147a867ff25381d2fe3f3f721fc462c416785e043efddb28d82fc7fec5737b40d25f0063499a4a05a70f4eed7acc93e35720e4f75b17c68b160e0ebdf277bc4b2aafe9d845a618debbb37405c6139b07ea9d22ba8d08c5583a8c71c6b114221b2722bdaf7bf68dbe2aa5afb9ca3addbc6900386a48de6d4ead764c72ab031440c6544d3ba310c42c0481afc487fb15c3f1d674da8478307aa4e8edbebac929f86ae868045919b4144fdda9c1a5f8b973acd5ca29e0f47ecb3db44f6857bd26d9bfd7e30287a1aaee2afc18405c2a66ae2062c205bb48c2619356c0ae6e83b15d10a3d959d86468bbd8c8b9a94cb9ce8d60f1f8a175d06094732565e4d07e69b9da3f1550db71cf374cece7fee3f6dcb9ac5a3e7995ff9e52758809c4214c72899e11c908c8e01a2c76c8ff398ebae7930b885770c99b462e43210a7b0358be3cffb1b085ef67b2281b50f8bda5ff76ab98f25f8866aadf0bbf3b0cfe53f1e22cdf5a1b48b4554eac57aac14a0cfc396ff06a4bf1482232bc8c6a72f59fdb9e8262165747729fc5da458786a3263796a88bab54d43549454bbb8cdce25b71529864c00312e5c6a771cbbd90676d454cbbc414af407144b5fd5b7742e10ef6900c7fe0adc33f59002076a09e4cacd57d863081155f97398f4b428da191f884c89a0b0d86e9c9ce74ecbf75b7770cb400e2adb7002f605b54ba5cc592db042f1415204858e5b7e64b4efe9c58ca2aa25d9aa62264e1df12f2cfbb8779886c9d334aa93a742fd4a3ecee0ca852721d642ab8817b59423bd7e020ce5461d3d6247bd2b6a71a0f1e5ae5b1de4bc2b7cf462517a412fe3b34483ca1ac6ef69d33060f9b162f6241dbe87dcd4aeebd2cc2c6b608a52d6e4a369f7e26dc2fa986bd783d1bcef0cd958b8237e9bbcb47fdb233bee5a3470da26f391adbd84445791ae272b1586583aa8a5e2800ff3f829305e6793d35977a902bbb2ee20e3d84517b8f5073ee71c42b470ef2d0a30b210d2beca2f90cb84ae6919c97bd96c313494fb11643da8dbcc8705b6583ccf252299d0e48ca708fe81b620a4919c5ad24623036bc6bcb15cb5949147fa487f69748c3cd92b0faea6249da26b189033df4b077417c1d629934fc838a012dcbc3d7c5a2d33b63bd6b403f7897157044cd46c0f5dec13b6c6ac531b6a493c8e9880dae8d94a1dcc4bf588fef7eef68d73430932638ffff46c973d9ad038f899e845dda940fcfabe544a908317a4ae35544a2de694540441a6e36272a50bbf4efdb593841951b389416719720d1a08b0ab6464b466060be9763ccfd1a2161263cd0f1fb68818e0bb3a7edea455969d73bfc3de684e803489740d02ee56a67868cdf87814db4ff50de2a730c5d79bb8f3b25f0b0d8ba6f150f63ffcd766776dd452d664970e66991ef3f61f201c597210099e4adaaef96bd9a83a2dde2198c04d7660491a78ce270807a564cadff11db1bdae7a63f63da029198ad9192ea573829a17aa185f4d7bc9e77f8cc2602c543bb6d65d05a7b6d4671445509fdfd73c4f5fc445374f6b16ef26c9a259d1b5ee08e8c6301cda1b9c2251d9510763acdddf5300e6b4583c3a621bbab52ecafc34b11081cca77d74a78e669647dbc1e58478ba7b6c042940dd1bf73b0720f1a718a5941af2f5ccd77c1efbe258ff216938ed6cd7e15817b8814c1859ef13546c30d95236e3501781c943b25e9c9d2c326a4b5f928f0ad4ae0b875f59b06be539133b6265635098ac0be41abb00e9e9553775a8313a2f49790125c1d066ef691434f218a96813be397b1f762d9ec5029c69650932cea94242ccc451513ce9900fb8a425bc7801107f0d0f244a59d4b90dfc4d64ce80382e25ce6baec8f4f3e2a97edfb4ceaba52ac38b23a5b4069279b9682461d96f2de9345edd6695fb704370749621a5e848a21628c74bdc5d34a0cbfe6e725c526df6062b4ac87577f4737b3d10bf9f085acc1a1263f56a82edceddd8f1ef8cdcfadb33b07d426a8ed14c19e9d14d278bcaf03cf6a4c84b5671692d36b1256f02cc3fe9a3c81484e04fed17f6ac30760a44e816adede455f4bf4c4d05191f30e0234d12401d8d42e2b341db67bf968c78235fd9f0b16bc1cc5677a48710f0f6ea7da24c364d4c332e0d04f206e3d90de5a1365462786191a108057c7801023760f12b9ff5b59e55d2f35b9f102928e79b1d2a76cb41d1543f928f0978859c9ed15350058cf0b6541031707201aeac70dc0bde1f76c4abaa9f5a6a507dd0b61965ba0cc3e17e19c4d423ecebca71c3acb31d27550e061793731c0804beebf76ac06017ca1e306dafa63d26bd7cbc1cecbf48aa962f45d5a28ea599e6fdd72869b867a848e3fae2822de31923198fc74c9184b1b09bc4c293096da989684895925eda36072b1c6d6ba4272658351e77558cdce8db0bf5a1658b43fccbf74aac172b62802279c8a79984bfbc80fe159aebd75d98f4a0a6b4d41ea499c554223b0391a1633df5e8ec72e1bdfd8f4a1c2ae3ebb6541e6a312fa4334f773cdf73babb65fc5ab7a17bd151a4f6743655cb38e5887872f5e2a7143bf2fe25c6eb6fbbb8f26fcb35fe2b9b82c025cca244dbeb00ef6a005ceaa7abb63efa87a7e7a9dfe79f2684e0443894119a086f9f43957a1e2c23f488e358acb88ad7bf5550d3a39255f55ff4195f57537c042cc1a8e3a86f6cd0df24d9427bc784604a220be08a9d24ee6e7902de0dc996714f17c6b2a5d40fe22b336b89aee914a69d81487a6837797bb80f8d015abe044dde1d208aee7dda01f15fce77f9cba045f224c6a77bcac382e21326d46b1959febe39dcb7e9b572f87d92866f322a86539d9571eda277e5b3914871e31043a66abd8297a149c6cd82de5ae1bd3343e34bea34416f8b2db02ba0f8e67fb510f421666de910eac4ff4e1307a485d1c611f1437a4f74fb1908d58ab3126fe9f6ef33da8d8682fc33db5248bbe769ed67d837c953b335d1d67e91b636a936dbd9c442ec8d8bc1b6c589d57ae758a6c93619a084e7a145cddb1057c2e93e82ad7eabe677cf7e79bb3eaf7f6c2b35ebb496e60c0da447458279c3bcd56c148f978cf8f5d34cd1b75067a8030de53dae89ac2401c1cce87ccb0a8e1ca50db2854e830c009167f30b261c54a0d0c615a594cdda0d529c0917f5aedef1cb0f903c279f09c6036fe1e3943b126e191258fc77fabff2e5bc100420a11c1a40618d68f1600e9f76b624393934fb96632c0d34771ab04ff426cb2c33a8a004890a764f29d76a09a32053b8c4180a9807aced88e44154f1ec5eb8952715277f718dcf4c1e5586cd714190ea60d377a1c92b59c744089a89f82eafc1858dd53f8f3da4d4dbcf25d6c71370dd19bc8cd2b02168d9db0e293b7ecb00457c1cc1e38c1c622af76e2c8ed6dab2da2b5653824ca59052bd9f7dd1ac623e3931aeae7ab56b57d06e74bcb2ae517f334571e3c418bf14c046d5867f9dbaf5b19ff08d2de3521dd2bf23b594a00462629bf72e82a489655e3dd85acb56e23b969e7c11b494ea266df811d206cffa80b186617fbe15a5520b03ac0053e90e506b80b82981e71cf165c50d6b0e0aab6eb6d83083474dacea3b520606ab21be308d70b2b0b3a6f02e67f27b688f6c14b0baaa0da992635882701bc91d5d2e6ac8ce82889becac2d8058a23e40132ac915a14a990da412f7fc0276a5a82362e32e3361468608e93b0e6a0aea72580c8fcff8875310b49971fbd717bf1a100a0883fb0bc9e72ccb96a01dead02f8fa967dceb0a7b6ad5eb30a133f1085f7009264faef3342bdd355f147a49add2585e33e53a6d0c01f6369cd5443846ac850662875009c3029afbc2f6ef9a0a17720d287cac7628c507143cf9e708d9c33a7b424a303eab4ff16ce30b13dde9bed19bd55bf7d54dfc7ee0cad6da04df1edfab1640022a491d552a2935e997fba1d39fbbc5a1d229bc376624ca7a12ea0e2ddaf3283ac1674c2954ff3138be5e06981314ca57a9c553817abb95c335cd89ba2b762ba56988fe75a1f394a910249020cd0f4e5c0a95f6b4ff052af752613125d03bcd354367b34e059f60ed6285441fd9871c68675cdde935f6708685bb3a677ed7bc02a028579abe10c124af82c8be315ec148141562eed9b81f855e3ec11ced61fd030032fbdc62ba7cc08977d6d1b29911af816ad5f5088f265982e436cb860ef46ac8434c9034da70b1135e1d7399763fa00d9596b2bb639bd1fdc346963e0e6ef9c9380b51237767f05535689a152e1c7586912e9c96fc35c9b35bbb6b34d90f8ca583c8b1ea379b444fc092cd312a4985730e0e36143eea7bbf1d7b3e8e956c64916057a08a83f7899ec87eaf323d56c431efeaf1b3ba5e6f11192a5d7a4fab68d4bb7ae86ca1298ed507d458b5ab27b106e846141bf3ff98551078792e1d7bce153316ded0f16bf005be6f3bd13ff1a666c7af01faf0dab2f3693066de0a148d1a181083da645e6302ed4aa67b2f92670f4ababbf24080dcedcce0f729f92c43d0af020f1c5911c1c39e52ebe50203489d0ed70dd35fbdf365329a39b5e1cd72f50873be3117fa3044f53c425b55067cbed9f7e5022fb288702e6e277c1d724b69f5c261495c8185a12d52effe1bf97874330df782c5ab58f9b5a572c164dd0faab26f64fbab777f7786b31a9e1a147c99a67aff4dbf7bd48bfb46982fb87b524975a909f80a2e8486d69089660a42e28d56686cdc836bff636203faf17d6d947081e156d4becd3b58cfebc532d64680b6d03a5ab3427b2d6ef3e77f6ef5ae52fb243d713e50dd9693f6e41834f4be4ef8d16b7d039b6c7eda14eb4a2ff979b20eb3f104012b299911fa01447aa962be526e998b3f702794308ba7761da6d4fbef0ec05cae87ea90017dedad07775636d9c764011446516322f5c42226b23846b0515cddac344d2078aa5173c0d14934cfd2f1a9b5a29e7fec7e5cbb1a1858a7a41673b6f5c354610a39ed9f853d658660cce39b1a68e1dfc462494051fb1efaab701070b1fe8634cfd087580cd2145e7a7fa878f42205f963ad513a289385ddc0e637afdabd708f32a86fe00f6f5888e8e027656c93db2b47cc6dcf98d4030b1a99a88be34374c035ccfd18290ef2f4259e1d77520a888097133a1f9f4163ec047e8124914e87caed00c019a9b87b2161095a52b028cb9cb40f3572ada0594fae4f71f500fa250a4659c31e8785bdaba2f8a5a4be5f9a3ab23c587c9325113679cc57052c68fffc9c04e45d224458dbe33622db50ad1f40a1", "ca82466b6aefa535f3803656229230956118599f0e5f5256cd87e74189a9102f7ed55e644de056cc0d1405a06c3625d7eaac7f68f15fd166f676a0422eea301699b281353662db00f52b2aa57e164d2e435444bc08827de3d06ff2eb6669093c39d9440a66ed3ed98fee5349efa0f0ad8f2f0f43b6b7cb3adf8c46e0bea1d0ebfd81bac27dab4271c1ed197d589abc6bea914d783f28902a518e9c6d76db3ebe7c061d9da694031923c98aff064a2dd939b4befc937f7ecee30d2313c63399efd2250ac4960a13525cdfac527345999b7df083e6a616bb4d786cfa886d4954b59bf5192d2c834e7a638c9bf3099d018b52daa6c806b3260a48a8956def83835352d09654ff20a8602b2d44b33686912c1089d13f3cd56da9d05ffe116b0ddd5f8fdaca6752ff635382f621f83b8aed8bd8e093b1d2e66c953d35a8352c14ac427ebfa76f76b1bb7feee006a1c01b97388eefe95afd9a64f047478f4d9a433874e17c9bf40d655f2a181d8f6a96b8ddc90e820d14dd5897f37b2e6d3fc84c5b0ac5e8d6b4592a6ec1fe33ee5019ab41562962081a8f61475cdaa3cddedfa2da0d67098bf9e94f994229d7c36b3dfd334a909165981c4e0cf73b28c3edad5884566cbe927fe2cb2e588c539d55bc3513a95e2aadf3a4be6f7fe6380af31fe014317081fb9d804ea29f91ec2c2f546a627dc38ee93fcc49fba084ec0d320744bda1ccb5c7aa4787d8b858d073826eb09d2d0bcdf1f85e5a735988f7caf9c36cf93fcd6ad97f8eadca6ea3f56a456a2e2c64e54c856c5ff7a422b31d31d335940781b1ea160d7d29ec98fd3c32443a1071ce87d79a8ba5998c0b2d0d20a81ab73762bad45b534aa2cf57717d9eb2e0cbd89a8c3a1ba95360bc2cb2ff5e1813a7e85b9f6de65bf43325a50781ceda75ed2445b64550c8142a9064379e761d3b4ac2da08aa983f7c6a623c8804494cf42dd01e61abc5947b673369b11bc32ad5473a6c23d59bcc855a289ce68e72b38d9d0614857c024937ae060de4d2335bf78c21112a19ed2b9ee62f316d00b5638edb4cffc2befa3bc61079f42e2d5aa30a9329de84e12b8fd4d0621e6a0eeb147d351df7568bb25b2ac556bbc67ce339b6089f6f521692880271adcf3835493d3e5c07762f50517f964afb43da9d7ed78fbfe4c75afe7ab2efae7108af4e103a71361f595c57b31dc1a433344192aa21c8be63c49e1e2b9aab4efab83971c1572eace447eb8b149729b74ba0b6708f09c0bd2b687457a26ea9b7b43e23d3f89aa30132c03c321eb94161c862dab0b7fbee222fa2055eb4c779cfaa7e453e403638d28250caf20595d9e05ba9841852e4902da2b19afc9fd3fadb914b87408659e2b31048ee31e978251d4ea4ca54ce3affe9a7ccfd5b305b73a56f0441d3234d0738e24a7333337c8de6430ad53ade950568e8b3084eb7e38a5f52a3cbf19997a13eddb96fe97947dee0c89e472efc986d018b8ab6e80a9527581de20e63d19f6fcab1fe9a0009374672f193084329681e538e78f82beed1ce39e98d2f07cdd242f13da855433d47fcea4ff6f4bd81177f2fd8ec0e2302faa4995d8c04b41519d265ec6f9290168af41ea783af036a85c427ebb1b2c40ba245f425ef9521b5fa38ec2210b4fac302664eda675b54a72d2faa82e3ab533f9be22dfac59f0cf4f10c60f0b77a9fe95a6106dbd78c66e65bee70353d2525464f38a938cc2722ca32af69c72fecb6a6f333b607444be6599a00ca0fafb5d58cdeab4ac25625992e4428232f5e114e2344860309a6a3b7f05e97c913ebf50b72b0e7ef23cc0e1e87d3c2d687495ecee3324abec904be8e1c6edfdbaa018e0bb6ffa2077dae2db9e18a3573161007b93142442d6502b542bfc92c90dbdc17872ca81d76a45e94bea6b7446a525136f266b4e1472d17bb89aad8666bd0c18980d311175f09ba05dfd1fe4c9d272e78c17f2cbffa542308e8eecb2272d43f85241819fca1eedfb8f941a9e1cb9e1a010343a2ed4137ff8d13f945b91cb37c0f2facb3b0d85689b66b8f19644e04de3b5e70014016623b58492ebcb070248fd5a63995a85bbe15484dbe1407d2b820c939bd6f078349ef3cb62b8aefdbd13c868f2450aae7f42b174480fd9b338b4be2d38ece3f74ad9c06dc951d6658c534bcc6169d1430824fe4e3ed29311a19dddefaa04c914299a7e46002170064882146fea1dd0edc0a504545e8fe22ef2399327883db1cf1ab4803fbf4e173dd40136c3715a4e7b331a6d6d890c6010edb4e104b04b98e618179997253ac202c1d5b9fedd6f11434eaf90954214b16432540ab03c8b2f2dffd50e802783fffd728dd168357a684dddd6387da875d95d3706f3f8e5c5f8ced35f722e2625ffc70439646efd412dbd7ce66065be63b36f6c408bf4c77a99effce4a4637830e483d3a13023e58149a9da367f06e6300229ddfb71feb302db44fdf6e18b3d2823cf3836ae4d4dc03632c73df10f2b0637611ec86374a928a9e844f5080be71afa81e17369e226f70fb393a4ca9fbcea17e570f40d3a52077a4f0070eb5cb3fdb9966573e03244ad8f6c90fc0c9ae93b280c89375d7edf1d594152055369edfe9c9319fd86ebf572f26de48d1e2313f1c04a33b5261907c9ba8f15ad45ec637288f14fad05982fbeba9b12d8f9721451683a7767c29832020b0dd38a98825c30026c145b44b62026bb9708e2a0aca8cadb316e82f9648c59bd3eae092a646a3b3ed71b088f76b3779d6304bc9b6c999a6c94fc17a89ada3b65a09ef89f0b1334ca706b84e89935e8e08a7bad4291835cfac6f6bb3d4816a180fefc1ac4fdf398572f7dc64dc37042ccfa22f9767595cb44eda0e846d2877c9449b2c00f309376a802a8efbb5e4fd4363f40e06bc0fd8d6feacfc53950e23af875e759296d7b87f11a3e6e4e60d3ac9d36305505c74e047ad51862078c194515c40b84c77f439828e51041a04fc3d9bbd8941389ab79c7a1c557c81acfc8d97a3d37b4fae774fa574cad7f718782d91cc2a403fb84bef6842a9f2d8cbfacf8c2e425811f09a38467b0bc8bc7acb612efdba2e7def7024e5f04a5b772cce3d1f5d64b99126ffab008bf32a5467acecac4e0491b66b360da5c2c8bfc1d3fb25c5db57a9e53c0a76bad2e7aa61685f9eb7ea4502f8dd11fc4a90cc4664525245506e05f7a2d6a25835a7d44d82362b27eff6ed534886d73ccf59e3661bf338969019049a527acab8592492715474423a53a01201325bd9456e6145334e472d8d9b43313e553d3f1e201339bfff91ee23be4d2ac56600f9d8da1cf15a06cf163bef19b2d11e042ef71c3a30bb6bf454c4f77ecf1fc93f2758af947ad73c649687db200dd9c1f70c674498348b1ba41b6d89d1dd1f244a7d19cdfd830aab9d39efd282d438f60bf82688cf99e7f6fd15d3c5563e0322c0834db90e0f80a0aa6ba1f5441d10641cce5aee168f23c93683fd63fea5369bc3651bb0a3c6458ce4e347959da9d9ef7ca25f9cbabd991944cfe7ce7608e641068120f9614863d4e4897f4f9523ef8b1ea112230cd68192c655befec1fd30026d63500b4b9003e4cbfbc6fbdad680f98f2a8b2a400a6b5d872ab26dc165cd501b147082a8e50cfa0118f8945c909bf1e38f26ed741994bce1a6bb9543fd06686d730fca907fec9481fc0633ae0ed614453a7f4bd2f955363ed4430a91484a397761e345f748b528946c1e0993aad012d37692d8d922758d2062daead02e1395d0cfe265f195872129c7cbf4e74670b6fc03fc2b71e368f0b9d802c3358724946beb3fd4da56b960b891672f050e8b7a16f906dc0b1329859de7075e7e8656aa1cb94977439311cfc6c41ba1377af4e413130b907a7bbe5d04127513bfdee8923b6c0ba145ad966414135b1611cf1ad7dc3fc89c052a05dea046b87d09c3a1defc4386026e674dad6004741b637a8f56011964dbfe76e56a90b8a815ff6c8ceb309cd04ef300cb3f59adf08dc46a4b095a92ce426952467459a0d0e3da5f887903e0d9b7babb7ee60f27f72a9b3b9fdd0ac5a8b79ede0122bfa9ecfc2001565dec810ad82e3815496ed5655c0e2c9ac40330ba08d7689d296bcfbfbf1b94dd2bec19e5f31d0c71bdbaadfe1d1c0e8350d5efeff69fb095180f4d86191facad71b0d4dd191ccbea3706f4c71b7506a629c36208790595c1aeb47c89e5ff25d8caa16fa99b56e34f8e1c24c3286b58474db683fde2abcfaeb6eb334dec7f579e3f612ce1081484275c96f3e4f7e8f7d5f38a61f5da3a2da4937ae7d8b15514f1db5b2af8d6ab86cbaf4a413bfc9b1a28bdad56319d92913184315e6773c1991553bc1dc907a14302ca4ed84d46bed95b098e8f398a0b8c190f0e417b6796abac518b7b8c2f8bcd272bfed9ef6507c9eaa71b1504e68d3b4d443bcd26b828cb3d0d405ad1f447a1c3cc1e86a4c6d3a0fbe68877ac4ae39a969c74204226c2dc7db6d873b362eee4639e4263631b4fb786c0bb13065a0db1c952637643411a2277f1c4e4b980758b44161516803427f5c1f2ac2f20b0127101280b49fe5964bf401e8aa7a700c2babe561ad3851c8fcf37ab41334783bdcc7070f0f60e93567eed181c99e9ef7733f0d87eb7283533ef0d9b425d5852ec7c75e03499b6197f0c8c40dfca36cf30f48d5c24e117dec0e08e08d4610603ead50b689652a0ba83f1c54476f6cd7531a460f7494cff9fedb57e2966c8ad44835fa106dcc3ec0c24a76c967699317f38a1f12d226a578c37b18288905417915a90abc771b656f929a8a7e7eba118724ddbe9ae49b0e98932b7223e26a535cf6b2d0c5484c69ba432608c2c8258c59f4baedaef4965ae06910de6d848a6b61cb53559bc3f12473e7bd8318aa195cac1158b97d9795ba1de7cba0082b76d9c585f77ae04bf0113a1357e53ad74b6084ee827bb70fd71a60d86fe84444e45af7f695fe42925da92a1b06cfb24c42627658f2e8a2b1eee132aa2dacfc3070c8f889f0c4c002504d047e2e061bd702077741dd7b47cd4fcb42c2025364fa2e7433b64f2a242d9adc6170398aa2f777efc5ce63963288c5a7a0c12ca3e7bc874d87944df5a4c2b96397ff68cf5df5647d1c2c9aabc38fac1bbd404fa9bf7f86b746bacdc356b15fb1caca0288cdeb3892bc3182540f608adb2f1135165543d1d3fab037f601b0db123aa23480ade5bf0acd7136df75a2cd20d5a7d8e691bbbbbe3d12c64bde830c5cc44b13d5f7253d4d642eadc6057962f784e07667f4ca0a67b58fc63d0d3a69f13c9a9b9c741dc8862e4f92244cd8b63c7e6413164db252001ebe97ec330903f9769ea03b45db802a89e64ccfd268d89f5e159372db737cb8034165981eea261302d4d19cb94a8c18d0514e4236116a538f83da3d20eed90d089e61fffbfc6d35518ec6143c1f64ae705f62348bd155fca55e73b44eb63bf01ba2957aa541e9bedd08b00e35b15b26350ac35b7d80453cb6c6f0327383dae9abe3e3e8af0d1b1db3ae1903a7ac12f3ba5603a385a4d2cd9dc8c2f31613fb98d1598238dd748a96836e3d895dc4b0b92704f6476a9680d501160a27170a609343037b473d41d19de3202ea25e0b5ed3a1b731e92e053885203f534c6f0c66b6630d396a3d20ded29a1f6ae4d6aeeb818c934e61119848f294580cbf8eee61258cd110676c9942607fa46ce5de734eac04c9ac36e0d953e462877d0dbfd046e1e5ed3bd893d39d4c771b98ac1cf4c028c96bfae32fb49433face74e9b82014419ec7cc3e9e3"}}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x491, 0x0, 0x9}]}) socket(0x11, 0x5, 0x1) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000500)=""/250) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x804800, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733dbd100801000000655c", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="6c090e0429e7bb0d4f7f077a87e31aeb6c6170687b3d6d7dc2cad92cce1c5d003c526f593f089ad4840c2bfc9de63eb540ee8425b6fc21784e9ff811af9710c5676a01e6efaa5fbc0f35720bb29d8e9f65b6b4533f79575430ebc8affbefe435894dbb7d5063b84766517eccd7721fae424253d16d1de71a4b7a0696f0f82e2f90ca8237b3859b7a93f2a7d6b596e6c50c91bbc31a4409ae"]) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fgetxattr(r10, &(0x7f0000000080)=@random={'trusted.', '\xff\xff\xff\xff\xff\xff'}, &(0x7f0000000140)=""/136, 0x88) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @multicast}) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRESDEC], 0x0) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f00000000c0)=0x8) 21.521281699s ago: executing program 3 (id=1822): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) (async) r0 = socket(0x80000000000000a, 0x2, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x5, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x20004, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0xf, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0x4, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000000)={@empty}, &(0x7f0000000080)=0x14) 21.370761757s ago: executing program 3 (id=1823): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000eaffffff00100000000a0000002f44303023000000"], 0x20}], 0x1}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='^-{\x00', 0x0, r2) r4 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r4}, &(0x7f0000000140)=0x0) timer_settime(r5, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="242dfcb354", 0x5}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}], 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000001c0)) 21.241801114s ago: executing program 32 (id=1823): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000eaffffff00100000000a0000002f44303023000000"], 0x20}], 0x1}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='^-{\x00', 0x0, r2) r4 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r4}, &(0x7f0000000140)=0x0) timer_settime(r5, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="242dfcb354", 0x5}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}], 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000001c0)) 9.24861098s ago: executing program 0 (id=1857): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0x16, 0x54, {0x54, 0x21, "fc035221427ca8dfaa2ffae04d17689745d5b91c2d93c542d6a6fb1e78479e419436bd58abef694587a41739dbc00fc93a872da12443b6936e3fd3113d5c122c05842f754934faa15f6759538e543b931926"}}, &(0x7f0000000040)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "ea95d80b4cfe7c89c4ac15a6494708123e660f42d97275517fecd274bb7a626223b7adaf5c637892df"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000200)={0x40, 0x17, 0xd3, "36d05eecc459658af865e711ae5c133703e4fc59250708ceae26e012ca189c803a277abb0ec8ee256300439199c2e54f6092dbe5d9d3e5f50d1ce4631f5421aad170be816fdf19e278f582e0e3edd3482c4344eb57a5850b44f6b4c57e0f4cf5739967addb03ed7a96f05824ff4bf2ab5a363f071d11e732f9d9bd7d3a083b8b4674bd7e82cb23c1f94f7461d9440a1b25dce5cab5d3d91302e9d6900eb4df5c7388db0b3db3d296a1913d8a4f492b66a97b7b6137791b790553de5c2322ddb8febf69b463153cbe88f5473a119e6343dcc5d0"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x89}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "b92d3e"}, &(0x7f0000000400)={0x20, 0x82, 0x1, '8'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "43a8"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "e74cefc8"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "810762"}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000780)={0x0, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x20, 0x22, 0xd7, {0xd7, 0xf, "a7343d12a300ec2dd3ce15175a8ab6d48225f677947ba89bc0b2a964472cf1a9bd6c180cc21c559a2e30889f6b665f91c3156ca3247d96ed105c4192b3113178439c2300da11e4f720c72d412655a5b6c61146269498875e027a610785c20147a36222c761605c3c3b83779886a8a41d5d211f91a3db5e1fd7c0ad53c64c0de3888ac63be3ebbfd438f635cc59a7d9b083e8b31a31c9570f9e0b1d62fb5ad107d46a083415dd2c9f5d065aeb0c36cc03f62e8efcd1005f5b9721df2a9ef33f4827486dd446e9dc243271d4db024015cdf6a28b3bbf"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000e80)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xb, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "000000000000000082a31f8200"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x1, 0xaf, 0x8, 0x92}, @ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x0, 0x1, "dfed3708", "8dff171e"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x6, 0x7, 0xc, 0x6, 0x9}}}, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, &(0x7f0000000940)={0x40, 0x7, 0xab, {0xab, 0x7, "4fdcfeac64de873ddf38834b15211b7240cf9cc659261dd78e081960a1b6ab183effc35e0ba4fa4a19a75c6eadd64564ddf9bcb9e61cfc9cbe731623f9d167b2f99d068ce8c2f9209c1d2a89f7015ffdc12ac7b0814fc0ff8bba3f091721c92af1fe3296e2fd77ebcfeb24b765f95ecf142cef8d3c30142c75fe4054c82d93f02c8a38b0eb99c053353fc50fad5bc9e45d9a133eb67bdb3e14e2fcad5ab0e209100929c584e19158e9"}}, &(0x7f0000000b40)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "6d078457b867689f7735f2eb7bab730ba53763d83d252114635bf31b7708a6d0a4a684a6a89683910ababd14bb12529bcbd6ae1158a17aba2f9c85cfd6bcad0ce72a2a8ac55c23c5019be2a83b0e5d473ccad447bd708ff5718e0c33ac3e86de5dc10796e510eacbeec91751add4ca02f48f2eba32feea10d3cd34f280ab3f16cad88d44fb575d5c902504cddd2ccc999a9eca67f221a0f8ca59aff677fb2052f76ebbc74b2d6cfa8c11bd1d575203b20f27ebe68ec7f413e882e5da1ad2e4fdfb9c10e60b4e7b461dcc0d79bd9576e7683de8f6a5e4"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000a00)={0x40, 0x14, 0x3f, "37ce2f65b017d09f2ab25e775a36ccd1d8300396db7a2731bf3d32ec62cdf4f043020382021b9a9474b6c9581d3f382a465107dcc978bb3f0e1157913ec179"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'H'}, &(0x7f0000000c80)={0x20, 0x82, 0x2, "53e6"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "b3d245"}, &(0x7f0000000d00)={0x20, 0x84, 0x1, "80"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "3dcd96"}}) 9.24409501s ago: executing program 1 (id=1858): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000b7, 0xfffffffffffffffe}}], 0x20}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000380)={0x0, &(0x7f0000004bc0)=[@in_dx={0x69, 0x20, {0x3a5e, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @nested_load_code={0x12e, 0x76, {0x0, "660fc737c744240000000000c74424026829b21ac7442406000000000f011424460fd1ff66b8ea000f00d0b9800000c00f3235010000000f30b9800000c00f3235000400000f30420f01c226440f092e64663667660fc73366b83b008ed0"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_syzos={0x136, 0x148, {0x1, 0xfff, [@nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x487, 0xb4de, 0x6ed, 0x4}}, @in_dx={0x69, 0x20, {0xcfac}}, @nested_create_vm={0x12d, 0x18, 0xfffffffffffffffd}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9b, 0x7, 0xcb}}, @wr_drn={0x68, 0x20, {0x0, 0x4}}, @wrmsr={0x65, 0x20, {0x9c0, 0x64bc0958}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x1, 0xfffffffffffffffd, 0x10, 0x10000000000}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x3, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xc8, 0x2}}, @cpuid={0x64, 0x18, {0x401, 0x929}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0xee, 0x1}}, @wr_drn={0x68, 0x20, {0x3, 0x56ac}}, @rdmsr={0x66, 0x18, {0x1d9d}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7e9, 0x0, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7ff}], 0x3ee}) io_setup(0x10007, &(0x7f0000000040)=0x0) r6 = eventfd2(0x100, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r9, &(0x7f00000027c0)={0x2020}, 0x2020) io_submit(r5, 0x4, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="3624e7ee18dcd1b2305a1e0012b476b9b9ca18a9b14f8a9ed8e0c136d49d5155430e5bacd5b3378d8ba15a2005a9094fe761a40e560cda66bf2b9bb0cf736e9a82abc459ae5412fcd3aa94bfe9df099e3ff9180f2950aa3f38205dd40b68616b4800ce0115aa8d8bf3e63e8c914312b5ba548491bd8fbb2ea3c4af82991deba0939d1e3bb6cffdc393d9d1b8c1b29eddc45f93002d9a9f30c443de05de1f20ad2157ec0e", 0xa4, 0x3, 0x0, 0x0, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x401, r3, &(0x7f00000001c0)="10b63d3f3c7eeba62f0f49a36c1af2b3d36bf05c17be0b0052547619929482e107dd3560a54f82f4289b235c952031a3e8f36a769b11d514b5d65db6663861b17469bde2ff39", 0x46, 0xffffffff80000000}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x40, r4, &(0x7f0000000280)="78164f6faf64b0d2f678a3d377371a4a6c390edd2cbfc97ac8b3650edef3efd75630e599e6eb7dfffb9eab51a8366849cefc0347eb06bfcdba46e30a89888cfd854452c8632220217cd154b33c72504a8b2cc489a100f730558cdcb742e0087c0b2ae3302ed421ded5e09171786d92567fd73273cf0b38e4f02a40660edac0efda7b51c13ee8928a58dd106f83515ff359a5a77c131518b7070559d9e6e6c848385d4e252f8459a40a6e6e16335392532adea8724c78e0569937ff3c9ef0387dd3dc04083b32cca0702d72726d4e8fb58d", 0xd1, 0x0, 0x0, 0x2, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x101, r8, &(0x7f0000000440)="b5839b352061b07876adaf5ad5d0a904c1ac559a587abddef35520f17cba877316e2281d6e4ef83ac9b8fc45", 0x2c, 0x401, 0x0, 0x3, r9}]) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.197451392s ago: executing program 2 (id=1859): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x1, 0x4, "e3f5e7d1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x0, 0x18, 0x1d, "922e9c9137556e1ae502ab7363f4816ca8581fc04653f3b998072b593f"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000040)=ANY=[@ANYBLOB="33c7bb079cbdbb39eb2004005b47ef81de5b6bd6418634733a006ee4133e7a79ea973e83c48bf699a9428bbec1101bc64aa757ba2ca3df"], &(0x7f0000000e00)=ANY=[@ANYBLOB="02000eea7600eff10c070febfca5f13c228e14be762409cb24989ff75b582f1dd04894ef1574a93bbb4344b20365c886c1f6add8e67bc7e38ef35a"], &(0x7f0000000cc0)={0x20, 0x83, 0x2, "d27a"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x3, 0x57, {0x57, 0x10, "724997355bd3519f66bc871c6f00d279c46e02f715137f11378559a8ffeeaecffdc9da5baf98c73c3eb2404a2ba0c32b0e6aaedf7e564b21462ef7c55d396431fee18400eb498e48a1d0eb89bc812fff3fb34470e4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x40, 0x18, 0xc1, "7531aeaf19ae4dd9c6c81fcb21ed5732315b2959051d5653c571ee7bf51e8684969de45900aa1b89f586d4856fd5a9cd652291a7ffa5327012dbea93df6c028752b9b7f5506a0285b573b398306730dd819f0ccdac38271d95461fe2dbb5230bdc74b30e5da4a83822c5ff2d6b11b6721dd5d2ff09f9cd375d180dca2e1869fb0e966685890ec4cc29499e232b9aa974c572ece15c2e40e29a18d74902c56acd04014e35188c7c740c9aed3fdb99de8eaf9c15b13e17033f589abeb4a6101ad5c9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x81, 0x2, "7cbf"}, &(0x7f0000000380)={0x20, 0x82, 0x1, 'g'}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "1aa9"}, &(0x7f0000000400)={0x20, 0x84, 0x2, "09dc"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "65ee40"}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 7.569711843s ago: executing program 0 (id=1860): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x40}], 0x1, 0x6) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(0x0, 0x0, &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 7.568929384s ago: executing program 1 (id=1861): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f8001bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 7.568487183s ago: executing program 2 (id=1862): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e21, 0xfe00, 0x4e21, 0xffff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x8000, 0x6, 0x80000001, 0x9f3c, 0x6, 0xfffffffffffffff9, 0x1, 0x2}, {0x100000001, 0x0, 0x3}, 0xfd0b, 0x6e6bbb, 0x0, 0x1, 0x3, 0x1}, {{@in6=@private1, 0x4d7, 0x9c}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x4, 0x2, 0x7, 0x8, 0x2, 0xc}}, 0xe8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x50800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="3e41cd0e2e430f2080c402a1936ca194c463056d9dbe6b000000420f00550098c74424001f000000c7442402432b0000ff1c246466400f383306b957080000b898aa0000ba000000000f30450fe4d1", 0x4f}], 0x1, 0x32, &(0x7f0000000180), 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="200c0700000000000000054a34"], 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000000280)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000440)={0x220, 0x2f, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x20e, 0x12e, 0x0, 0x1, [@generic="5d32b9aa6fce9478ab4e3f07f4588e6289dce834ba54b5dd8556895b2da3bea7eade0f6e6c629aa24e94dec2b8d73cf139c9b282e2829fc40bc8c2992a7da02943cb00fc42ef1e1f1fb75671e9f4bd2e93f1edc6ba3a08d8f050a2d95e4393cc211391d451bb0854b42ef3", @nested={0x4, 0xe1}, @generic="56af173d7733154f3439d0f9ca61cd1a253d1ec0e78465b603631f68662631bc4e40af046957b0c0f6e96145c6ea660beefed40a89f4fb11c26841dd64ca0ac8a64c8522a3f949e2a6991fc2ef6a1295ff893b4bba711f803e079c228055f7b885f30730141da041c0686aa3bbcc89f1ecb98144d68977af61852d53e6d12ee3df2c177c6f352284dfac791573c5edd5297a7bdb91408272146fb1158fddfc743eeaf5171f178006293d886f72a8a9caa964b782ac44469563136e23afdfbdbb46e3b0b22aec6e9dbd92d837f465f7f6c308a40b428cd7ee384021eac85a86d7ca610d6c4bebde5e50", @generic="fcc900178f6c35ecbffd727d02409b4ef02d23cabccdd99aa84fd6655cbc1576756123c6def8c209330c87ebe43f7ad78e2031ca2bf0a10b2aa5c42a1bea8443bf019afa7474aa4d82ca9a98498c30376f0bcc368fda42844d39c5cb49bca395", @nested={0x4, 0x57}, @nested={0x4, 0xb3}, @nested={0x4, 0x11b}, @generic="b68d05142e46b3407cc68f650998e5c59367ed0ed571855b582cfec927fabd7a480020b46f3575548c81558d84d3d01ee2762b80c05773541c2d02e0c35b22584cb61caac4df"]}]}, 0x220}, {&(0x7f0000000680)={0x384, 0x439c, 0x10, 0x70bd28, 0x25dfdbff, "", [@nested={0x373, 0x6f, 0x0, 0x1, [@generic="d332250a6802c5d94d683a383bb7b5b2a7866d19c762907da45c5c12ae07b18bcf715f9a8f9171e541102e0e3ff7f914252e8ea092ed86d336cbb6e43cbdc7ad40518281618a00e7d4571c08b03e7dc7d98a4a164e09901696bbacdb", @generic="7860816483a6795102cd64246538d333688f69aa207b2fb35962c6354623dda38ce897fabd7f7f227e3e864728a52057a525a28666926e6bde07aa2ade0c554f6fa4d4c467717703d18347c3990a629432c264c6cd23c3adb8181bedac4345f79668cfa71ec2e5f2dfd7b15bb84f8235bb13a84b54e631c86420b5aa23ae824a56e5e8a9811c33e13342d54394194abcdb3b643cb40d48bf9fe611b4bd1d013940a03ba92da32872b0ab0ca3d2067a6eb5d1111c1b22881a45e076a6c3a8ae5f5e7c50eb259b73a7d7130770ca355de76e461555104db97ee082fea20746345cf10ae83632acd47a5ec26e0bd7cf05184d840b", @generic="ac76de46245f1a69ad087edf69f680030d06029499fc482952af16431c4e3e1d4ec92767292039dcad34562f6e626d2aae3c3b444605af1db2fed55713879cc9a924e6a95971cb6c6521f2a09a1731b31539057750375a157c611ba533ae06ecbfb0c99ccc03662f4d09a82dcba27e4d67d63fb48e4500ef03126953078f3fbcdb6d75c2e0ee14e9c3eb8a01ca36506814787ca59c7c3989b81a301b7850978ff1a4668e9a02425d41457a5583655c687c7e35f373920a4aa2d40a5e82b1d5ae637fe504c739a6b3cad5900e1ec738c6e6670f889a816c4175a25b4e7c28487d57071c957acdd5b5e3b56c7ee3a6", @nested={0x4, 0x15b}, @generic="20bcb0cd64da0e7293e260f5688861eb7faa151b92b386c347815d9bd11e5faf054c82bee3948baa5ff0abaa4fdbdd7f88a2b6ddd08e330a3796386031d6c15a85bd0ff45bb1817206fa2b426de55f3e26d995e826c991f93ec6622109ea2cfa7cebb1663a442bcfc1232b98dc", @generic="9c0ab654803dc17e2dc0323b3a62b69811d8ec1dae01c03905e9d469de938ffb004ec40ebede59abfc090894354169102d8831c9bfd4f37f26cf7a888fd827bf04e0e0c10e93c328ad51340ca5f27308df1c50891f16359650e120d64f42383dda06a174bba14357975f808929e885e9395973ae6a8e4b87c432bd30ee8bcc8844f8fd457b5e8a49f2d90ee62072bef0d0ba97b376596a03c19c832432b6d89ea9cae954f6d78bba7e37b5676fd63e33fd9bc538a4acf9663aed440649317ddb00"]}]}, 0x384}, {&(0x7f00000001c0)={0x10, 0x36, 0x2, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000000a40)={0x334, 0x2e, 0x922, 0x3, 0x25dfdbfe, "", [@generic="a3496529a74dfa0ee86fb9e507734517cbea3c047f0b99f21cdc68e60e88ea8db8e3c503046dd475fa563309ab45b9e5dff9d96ad05d2a9005f0f4cdf2b3e7cc81bf5c60f4b1b8635aae9aa0d3819a9ef0f655e92496e210d962ac8c4469465d4f2817053786746a4c147386b470aadcc3e20af124406c46e809bce801948f8d3720c519e4f41b6c2765ec14733617ff30f48e5e7754a7cec606c037215aa098b875bd8f82b8dd683145674c51c5d48b1f0bbb8100bc59867cec8dcc582838ef7539a601197ea470c4bea3c8063b0b4ccfb300", @nested={0x137, 0x109, 0x0, 0x1, [@generic="97d748a22641073a83a970b28e5ff5fc371b60ef587b38b1ea2ec16d58e6314e49ffeba5b01468bb30c80ba7da94c71a62d7539dc0e0ae2be5aac93ea31668a0c84d5c43ffab4d06d77b1b8fc0a37111574add03c9", @generic="5f2651b0f45cabf3290bc89a8dfbf60798fab290d8a908670a423d892127edf2c61147ac79c09e499fb02f5ad3f900c0a3685eaddb0978053ca9d4130f401aa9acb625a00ee5396ab0b66231c19fc9fc1f10c8c0c8e1569e20fa48736a1901c05f9a6dcb30c3bf3715668bdf40982af711ff439a3ec3cf5b39fbcd54ef02410651b72fa0a6c4733f1a6a9380b4beec48124874d1c4566eb34d008398da2865c4e282ae74839def82a639b6c1f300333dd1ef31a5b372487f2c2291c7d9dba97711c2dc6d4d539799a931819add9d8182e3670ac25dca0564d8b59e9d756a"]}, @generic="858d985e6ad18e5c775f5e42b9ac760dfa93d33176d7913e55d2a6948c0a606469292706adff21fba0a9325ef1c732b5245f111e3470cb3157f951e193b732907b227cacb06f6ce5d71b36d6617ff74e20bfd76a33dcb5af656ceb1c9d0c4f6c35c59731e801acd981e4b51400dfbfd0e5c8cb19638920328fec2fceec13debb74afaed75d7d5a3d24227d5c6ff93b414dcb61af2d6b4faf7622a8035abd8b88", @typed={0x8, 0xae, 0x0, 0x0, @u32=0x78f}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@empty}, @generic="54e3a5d31219688df6948c29cf9622ab9a9d207735982d159acff944922653ff530a00f5e9b2147fb743dbbd780f2e3222dfb6a565b382563724fd6e703362eb96ba7a9d7fb7b71c19dbb92f9643f2dc90da68126a270b6c827a75d5b595ff0184e96a09be7a"]}, 0x334}, {&(0x7f0000000d80)={0x448, 0x10, 0x100, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x14}, @generic="2cc585471b802bbe9a65885f", @generic="1fb55ab373c398b89c1010a6d6ee7bc605754011c3143b5190b32c90bcf5242b24ae2d86f3c8c99fa4b7647d17b91a9a067b641215446eb6a6b402ec1401605cc523a876e34c6cb86a66917c895dc858641146f50e194440654dca4bbb50ed83561c578a1d24e61a8ff857bdf2049f1c8584818fb7f327979bc7e66ad1b3860214d9c54092e0f8882d6516cfae44fcc3", @generic="c1be9592ec19b5f2a662fa2138e5674043803746e242f7", @generic="077b201892df81debd3cde0bc68fcb1380a1c82c1b0c9fc04b65065a48714a04168c9b85539329d41eec1a6a0a425cf7cf90a3a8cd18f95b3e8398759355a1ba8710bcbd8be63a31a7fc", @generic="9bbea2a7b01261848b24c700c8f738b92e38bad67749cf75880148ffcdf81d053a38ac84ee9dc1a61e726fb4dc6d06b5133eaff065ef5d7ba77f67877ffc2f1fd9e129c8288680de969ae876c46504c673d95648de160c2b8f94938059bc249f2c28ad725f7431e5f5fc0a0ef904114b1595641eda0eb5e60886590a38c4d504a805944f81f959aaa7ffec26ed62d8e892481aff1ed6b28bfb6e43ec9d841031e937ee3294fdc818068450d959d0d02a0693dd831f7df0a6884618d2057657a94b9cfe1e1a9588a688740d088dd300b6612dec8ab53af642b6db9904de8c5a5a9c7c4bf9", @nested={0x136, 0x44, 0x0, 0x1, [@nested={0x4, 0x119}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@mcast2}, @generic="a5c1f4613e3f861b757526b412d81ecd06059a9db65ef63a3e17a2c395f1004fd1952b85fc89e6e2636097ce92dd18387f7a8ffd6811f8a20bc199cd107c6aa23c5c011026df0a546216c0adcc35b34664ddb569a282ff6a4fd3790ed9fecc67df03572b39f5cc35460216293864ea71f6b91145608ab73edcd18a884afebce36cfc4e22a9dc7c3981c0beafea8875bdbcbc435adc9417dad5a7497a5ce3f95a02debab0a408eba2ae7294b68af90e0f0d149d941abf1e9a75c2e4cb07769a4730a66affec956fae663da09d3aa0190a353f68359f289ae620", @typed={0xd, 0x1b, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic="4bc047bd3ee0c6c6c96c977db0b13b438f1b34d519ab664384743dacf1afb3b9731797781f59535a84", @typed={0x6, 0xc0, 0x0, 0x0, @str='%\x00'}]}, @generic="422e2e5e1b459378a5b418a06793283e5b2f28713baa3131dab81395dda54d43c648aa8acd0850dd6d03fda565c3a51204bd70c02eb93f6a2cde7e60db3c2da209aaf158a87354682703242457fb066df38705c6f90a09e4666eedb3673fcb7c8bc2f077a87a6462d383ce1fd8fb551aaa88e7366a660b57a53307bfe15a8bb42cf02790", @generic="ee955f136cc9a817ca5ce5f42bbcdf040b172397982c0a3330d9e1bedabd5ca3cd89b0a2c4c29918b4fb8d2197934bc00a2266569878112d2e3a32fe483f550f29c63459179d3cdaa8187d55448556e64a16a3c6684edab8ce21123bb2c6c034ac5c5679b3049afb50b891312c01c5e2c7688c0c043f006743d313ab027281aa0507cb2f8bfe6b43e4", @typed={0xc, 0x12c, 0x0, 0x0, @u64}]}, 0x448}], 0x5, 0x0, 0x0, 0x4008018}, 0x8000) 5.82248195s ago: executing program 0 (id=1863): setreuid(0xee01, 0x0) r0 = syz_clone(0x820400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, 0x0, 0xfdef) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(r0, &(0x7f0000000380)='fdinfo\x00') 5.779009412s ago: executing program 1 (id=1864): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 5.778806272s ago: executing program 2 (id=1865): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x1, 0x4, "e3f5e7d1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x40) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.975467032s ago: executing program 0 (id=1866): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/78, 0x4e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$revoke(0x3, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) r3 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e23, @private=0xa010101}}) 3.971487402s ago: executing program 1 (id=1867): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x41, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x23, 0x6, 0xf}}]}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="002415000001152361564d4906007bd293edaae3370d37cf74a9401b6e7c7d52d96d47b43523ae37b3c8a9f350184503a5c880874566ba85a1eebc78753a814504775b8e6f6a6579e0c29353f52caa60f3746ce94ec40421967cbe6ebd2fa288350c3415bcd0c9168cb26927a4cf53eae6c2939cfa2901f7c07715f1"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r3], 0x20}}, 0x40816) 3.967791592s ago: executing program 2 (id=1868): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0x16, 0x54, {0x54, 0x21, "fc035221427ca8dfaa2ffae04d17689745d5b91c2d93c542d6a6fb1e78479e419436bd58abef694587a41739dbc00fc93a872da12443b6936e3fd3113d5c122c05842f754934faa15f6759538e543b931926"}}, &(0x7f0000000040)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "ea95d80b4cfe7c89c4ac15a6494708123e660f42d97275517fecd274bb7a626223b7adaf5c637892df"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000200)={0x40, 0x17, 0xd3, "36d05eecc459658af865e711ae5c133703e4fc59250708ceae26e012ca189c803a277abb0ec8ee256300439199c2e54f6092dbe5d9d3e5f50d1ce4631f5421aad170be816fdf19e278f582e0e3edd3482c4344eb57a5850b44f6b4c57e0f4cf5739967addb03ed7a96f05824ff4bf2ab5a363f071d11e732f9d9bd7d3a083b8b4674bd7e82cb23c1f94f7461d9440a1b25dce5cab5d3d91302e9d6900eb4df5c7388db0b3db3d296a1913d8a4f492b66a97b7b6137791b790553de5c2322ddb8febf69b463153cbe88f5473a119e6343dcc5d0"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x89}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "b92d3e"}, &(0x7f0000000400)={0x20, 0x82, 0x1, '8'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "43a8"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "e74cefc8"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "810762"}}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000780)={0x0, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x20, 0x22, 0xd7, {0xd7, 0xf, "a7343d12a300ec2dd3ce15175a8ab6d48225f677947ba89bc0b2a964472cf1a9bd6c180cc21c559a2e30889f6b665f91c3156ca3247d96ed105c4192b3113178439c2300da11e4f720c72d412655a5b6c61146269498875e027a610785c20147a36222c761605c3c3b83779886a8a41d5d211f91a3db5e1fd7c0ad53c64c0de3888ac63be3ebbfd438f635cc59a7d9b083e8b31a31c9570f9e0b1d62fb5ad107d46a083415dd2c9f5d065aeb0c36cc03f62e8efcd1005f5b9721df2a9ef33f4827486dd446e9dc243271d4db024015cdf6a28b3bbf"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000e80)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xb, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "000000000000000082a31f8200"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x1, 0xaf, 0x8, 0x92}, @ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x0, 0x1, "dfed3708", "8dff171e"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x6, 0x7, 0xc, 0x6, 0x9}}}, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000940)={0x40, 0x7, 0xab, {0xab, 0x7, "4fdcfeac64de873ddf38834b15211b7240cf9cc659261dd78e081960a1b6ab183effc35e0ba4fa4a19a75c6eadd64564ddf9bcb9e61cfc9cbe731623f9d167b2f99d068ce8c2f9209c1d2a89f7015ffdc12ac7b0814fc0ff8bba3f091721c92af1fe3296e2fd77ebcfeb24b765f95ecf142cef8d3c30142c75fe4054c82d93f02c8a38b0eb99c053353fc50fad5bc9e45d9a133eb67bdb3e14e2fcad5ab0e209100929c584e19158e9"}}, &(0x7f0000000b40)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "6d078457b867689f7735f2eb7bab730ba53763d83d252114635bf31b7708a6d0a4a684a6a89683910ababd14bb12529bcbd6ae1158a17aba2f9c85cfd6bcad0ce72a2a8ac55c23c5019be2a83b0e5d473ccad447bd708ff5718e0c33ac3e86de5dc10796e510eacbeec91751add4ca02f48f2eba32feea10d3cd34f280ab3f16cad88d44fb575d5c902504cddd2ccc999a9eca67f221a0f8ca59aff677fb2052f76ebbc74b2d6cfa8c11bd1d575203b20f27ebe68ec7f413e882e5da1ad2e4fdfb9c10e60b4e7b461dcc0d79bd9576e7683de8f6a5e4"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000a00)={0x40, 0x14, 0x3f, "37ce2f65b017d09f2ab25e775a36ccd1d8300396db7a2731bf3d32ec62cdf4f043020382021b9a9474b6c9581d3f382a465107dcc978bb3f0e1157913ec179"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'H'}, &(0x7f0000000c80)={0x20, 0x82, 0x2, "53e6"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "b3d245"}, &(0x7f0000000d00)={0x20, 0x84, 0x1, "80"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "3dcd96"}}) 1.99448225s ago: executing program 0 (id=1869): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)={0x40, 0x1, 0x4, "e3f5e7d1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x0, 0x18, 0x1d, "922e9c9137556e1ae502ab7363f4816ca8581fc04653f3b998072b593f"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000040)=ANY=[@ANYBLOB="33c7bb079cbdbb39eb2004005b47ef81de5b6bd6418634733a006ee4133e7a79ea973e83c48bf699a9428bbec1101bc64aa757ba2ca3df"], &(0x7f0000000e00)=ANY=[@ANYBLOB="02000eea7600eff10c070febfca5f13c228e14be762409cb24989ff75b582f1dd04894ef1574a93bbb4344b20365c886c1f6add8e67bc7e38ef35a"], &(0x7f0000000cc0)={0x20, 0x83, 0x2, "d27a"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x3, 0x57, {0x57, 0x10, "724997355bd3519f66bc871c6f00d279c46e02f715137f11378559a8ffeeaecffdc9da5baf98c73c3eb2404a2ba0c32b0e6aaedf7e564b21462ef7c55d396431fee18400eb498e48a1d0eb89bc812fff3fb34470e4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x40, 0x18, 0xc1, "7531aeaf19ae4dd9c6c81fcb21ed5732315b2959051d5653c571ee7bf51e8684969de45900aa1b89f586d4856fd5a9cd652291a7ffa5327012dbea93df6c028752b9b7f5506a0285b573b398306730dd819f0ccdac38271d95461fe2dbb5230bdc74b30e5da4a83822c5ff2d6b11b6721dd5d2ff09f9cd375d180dca2e1869fb0e966685890ec4cc29499e232b9aa974c572ece15c2e40e29a18d74902c56acd04014e35188c7c740c9aed3fdb99de8eaf9c15b13e17033f589abeb4a6101ad5c9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x81, 0x2, "7cbf"}, &(0x7f0000000380)={0x20, 0x82, 0x1, 'g'}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "1aa9"}, &(0x7f0000000400)={0x20, 0x84, 0x2, "09dc"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "65ee40"}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.99411952s ago: executing program 1 (id=1870): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}}, 0x4) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1000, 0xfffff000}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) 1.9938907s ago: executing program 2 (id=1871): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f0020bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 1.44507ms ago: executing program 0 (id=1872): r0 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, 0x0, 0x0, 0x1489a, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB=',', @ANYRESHEX]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_usb_connect$uac2(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008532b3100400001020301090272000301001020080b0101010520fd090400000001012000092401100002090049090401000001022000090401010101022000092402020b00000004090501090800f907100825010200000000090402000001022000090402010101"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='?', 0x1}], 0x1}, 0x4000000) close(0x3) splice(r0, &(0x7f0000000100)=0xe, r0, &(0x7f0000000140)=0x15, 0x4, 0x1) sendmsg$inet(r3, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x1f00, 0xffffffff}, 0x1c) 667.939µs ago: executing program 1 (id=1873): r0 = syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1}, &(0x7f00000003c0), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1c, 0x27, 0x5, 0x372, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10008, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inode=K,\x00']) 0s ago: executing program 2 (id=1874): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) kernel console output (not intermixed with test programs): ndpoint 0x3 is Bulk; changing to Interrupt [ 82.844235][ T325] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 82.857591][ T325] usb 3-1: config 1 interface 0 has no altsetting 0 [ 82.867078][ T325] usb 3-1: string descriptor 0 read error: -22 [ 82.873478][ T325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.882539][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.890701][ T1508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 82.902866][ T1510] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 82.910042][ T1510] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 82.924651][ T325] usb 3-1: bad CDC descriptors [ 83.098814][ T1508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.107402][ T1508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.119507][ T325] usb 3-1: USB disconnect, device number 30 [ 83.552808][ T325] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 83.712777][ T325] usb 1-1: Using ep0 maxpacket: 32 [ 83.718419][ T388] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 83.728667][ T388] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 83.732429][ T325] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 83.739993][ T388] asix 2-1:0.188: probe with driver asix failed with error -61 [ 83.762885][ T325] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 83.772069][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.780256][ T325] usb 1-1: Product: syz [ 83.784604][ T325] usb 1-1: Manufacturer: syz [ 83.789240][ T325] usb 1-1: SerialNumber: syz [ 83.798822][ T325] usb 1-1: config 0 descriptor?? [ 83.806213][ T325] usb 1-1: bad CDC descriptors [ 83.811166][ T325] usb 1-1: unsupported MDLM descriptors [ 84.006789][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.015467][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.023776][ T36] audit: type=1400 audit(1774415363.250:350): avc: denied { map } for pid=1514 comm="syz.0.373" path="socket:[12110]" dev="sockfs" ino=12110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 84.025078][ T325] usb 1-1: USB disconnect, device number 42 [ 84.433601][ T1524] FAULT_INJECTION: forcing a failure. [ 84.433601][ T1524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.446794][ T1524] CPU: 0 UID: 0 PID: 1524 Comm: syz.2.377 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 84.446829][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.446842][ T1524] Call Trace: [ 84.446849][ T1524] [ 84.446858][ T1524] __dump_stack+0x21/0x30 [ 84.446893][ T1524] dump_stack_lvl+0x140/0x1c0 [ 84.446922][ T1524] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.446956][ T1524] ? check_stack_object+0x12b/0x150 [ 84.446979][ T1524] dump_stack+0x19/0x20 [ 84.446999][ T1524] should_fail_ex+0x3d7/0x530 [ 84.447047][ T1524] should_fail+0xf/0x20 [ 84.447073][ T1524] should_fail_usercopy+0x1e/0x30 [ 84.447105][ T1524] _copy_to_user+0x24/0xa0 [ 84.447129][ T1524] simple_read_from_buffer+0xed/0x160 [ 84.447147][ T1524] proc_fail_nth_read+0x1aa/0x220 [ 84.447181][ T1524] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.447209][ T1524] ? bpf_lsm_file_permission+0xd/0x20 [ 84.447232][ T1524] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.447260][ T1524] vfs_read+0x289/0xcb0 [ 84.447280][ T1524] ? fput+0x1a4/0x240 [ 84.447299][ T1524] ? __cfi_vfs_read+0x10/0x10 [ 84.447341][ T1524] ? __kasan_check_write+0x18/0x20 [ 84.447372][ T1524] ? mutex_lock+0x97/0x1d0 [ 84.447391][ T1524] ? __cfi_mutex_lock+0x10/0x10 [ 84.447412][ T1524] ? __fget_files+0x2c5/0x340 [ 84.447428][ T1524] ksys_read+0x145/0x260 [ 84.447449][ T1524] ? __cfi_ksys_read+0x10/0x10 [ 84.447487][ T1524] ? __kasan_check_read+0x15/0x20 [ 84.447518][ T1524] __x64_sys_read+0x7f/0x90 [ 84.447551][ T1524] x64_sys_call+0x2638/0x2ee0 [ 84.447575][ T1524] do_syscall_64+0x57/0xf0 [ 84.447596][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 84.447633][ T1524] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.447662][ T1524] RIP: 0033:0x7f3083b5cfce [ 84.447689][ T1524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.447709][ T1524] RSP: 002b:00007f30825e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.447730][ T1524] RAX: ffffffffffffffda RBX: 00007f30825e36c0 RCX: 00007f3083b5cfce [ 84.447742][ T1524] RDX: 000000000000000f RSI: 00007f30825e30a0 RDI: 0000000000000005 [ 84.447753][ T1524] RBP: 00007f30825e3090 R08: 0000000000000000 R09: 0000000000000000 [ 84.447778][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.447792][ T1524] R13: 00007f3083e16038 R14: 00007f3083e15fa0 R15: 00007ffe66776c38 [ 84.447812][ T1524] [ 84.542143][ T31] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.710061][ T1527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.719127][ T31] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 84.729825][ T1527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.737943][ T31] asix 4-1:0.188: probe with driver asix failed with error -71 [ 84.751793][ T31] usb 4-1: USB disconnect, device number 23 [ 84.866607][ T36] audit: type=1400 audit(1774415364.090:351): avc: denied { create } for pid=1534 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.002826][ T356] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 85.079685][ T1539] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 85.087441][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 85.153969][ T356] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.162373][ T356] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 85.171405][ T356] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.181771][ T356] usb 1-1: config 220 has no interface number 2 [ 85.188947][ T356] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 85.202146][ T356] usb 1-1: config 220 interface 0 has no altsetting 0 [ 85.208969][ T356] usb 1-1: config 220 interface 76 has no altsetting 0 [ 85.215884][ T356] usb 1-1: config 220 interface 1 has no altsetting 0 [ 85.224183][ T356] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.233292][ T356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.241313][ T356] usb 1-1: Product: syz [ 85.245525][ T356] usb 1-1: Manufacturer: syz [ 85.250165][ T356] usb 1-1: SerialNumber: syz [ 85.464316][ T356] usb 1-1: selecting invalid altsetting 0 [ 85.470190][ T356] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 85.476683][ T356] usb 1-1: No valid video chain found. [ 85.485065][ T356] usb 1-1: USB disconnect, device number 43 [ 85.753137][ T36] audit: type=1400 audit(1774415364.980:352): avc: denied { ioctl } for pid=1550 comm="syz.3.387" path="socket:[12277]" dev="sockfs" ino=12277 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.771583][ T31] usb 2-1: USB disconnect, device number 33 [ 85.922854][ T356] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 86.072780][ T356] usb 3-1: Using ep0 maxpacket: 16 [ 86.079204][ T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.090507][ T356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.100392][ T356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.113506][ T356] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 86.122564][ T356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.133073][ T356] usb 3-1: config 0 descriptor?? [ 86.212832][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 86.242756][ T388] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 86.362967][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 86.369334][ T31] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 86.377729][ T31] usb 4-1: config 0 has no interface number 0 [ 86.383937][ T31] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.395528][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 86.404681][ T388] usb 1-1: Using ep0 maxpacket: 8 [ 86.409766][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.418078][ T31] usb 4-1: Product: syz [ 86.422427][ T31] usb 4-1: Manufacturer: syz [ 86.427127][ T31] usb 4-1: SerialNumber: syz [ 86.432207][ T388] usb 1-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 86.442844][ T388] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.452152][ T31] usb 4-1: config 0 descriptor?? [ 86.457503][ T1565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.460431][ T388] usb 1-1: string descriptor 0 read error: -22 [ 86.471490][ T388] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.40 [ 86.480607][ T388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.540732][ T356] hid (null): unknown global tag 0xd [ 86.547577][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.555364][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.563064][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.570737][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.578453][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.586176][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.593895][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.601575][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.610247][ T356] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 86.617984][ T356] hid-multitouch 0003:0457:07DA.0006: unknown global tag 0xd [ 86.625435][ T356] hid-multitouch 0003:0457:07DA.0006: item 0 2 1 13 parsing failed [ 86.633665][ T356] hid-multitouch 0003:0457:07DA.0006: probe with driver hid-multitouch failed with error -22 [ 86.665951][ T36] audit: type=1400 audit(1774415365.890:353): avc: denied { read } for pid=1575 comm="syz.1.396" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.690123][ T36] audit: type=1400 audit(1774415365.890:354): avc: denied { open } for pid=1575 comm="syz.1.396" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.710628][ T1565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.714509][ T36] audit: type=1400 audit(1774415365.910:355): avc: denied { ioctl } for pid=1575 comm="syz.1.396" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.747618][ T977] usb 3-1: USB disconnect, device number 31 [ 86.922899][ T356] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 87.052806][ T356] usb 2-1: device descriptor read/64, error -71 [ 87.292754][ T356] usb 2-1: device descriptor read/64, error -71 [ 87.502834][ T977] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 87.532783][ T356] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 87.540549][ T31] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 46 [ 87.652800][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 87.659253][ T977] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 87.667711][ T977] usb 3-1: config 0 has no interface number 0 [ 87.673907][ T356] usb 2-1: device descriptor read/64, error -71 [ 87.680234][ T977] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 12320, setting to 1024 [ 87.691621][ T977] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 87.703384][ T977] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 87.712442][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.720479][ T977] usb 3-1: Product: syz [ 87.724714][ T977] usb 3-1: Manufacturer: syz [ 87.729313][ T977] usb 3-1: SerialNumber: syz [ 87.734677][ T977] usb 3-1: config 0 descriptor?? [ 87.740101][ T1579] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 87.912768][ T356] usb 2-1: device descriptor read/64, error -71 [ 87.949497][ T1579] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 88.023183][ T356] usb usb2-port1: attempt power cycle [ 88.117492][ T36] audit: type=1400 audit(1774415367.340:356): avc: denied { write } for pid=1569 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.136937][ T36] audit: type=1400 audit(1774415367.340:357): avc: denied { bind } for pid=1569 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.362775][ T356] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 88.383936][ T356] usb 2-1: device descriptor read/8, error -71 [ 88.513933][ T356] usb 2-1: device descriptor read/8, error -71 [ 88.561006][ T1579] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 88.569317][ T977] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 88.579541][ T977] asix 3-1:0.188: probe with driver asix failed with error -61 [ 88.752782][ T356] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 88.773929][ T356] usb 2-1: device descriptor read/8, error -71 [ 88.904052][ T356] usb 2-1: device descriptor read/8, error -71 [ 88.988279][ T10] usb 4-1: USB disconnect, device number 24 [ 89.012933][ T356] usb usb2-port1: unable to enumerate USB device [ 89.138674][ T325] usb 1-1: USB disconnect, device number 44 [ 89.199688][ T1604] netlink: 4608 bytes leftover after parsing attributes in process `syz.0.405'. [ 89.452767][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 89.613971][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 89.622882][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 89.631769][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 89.642071][ T10] usb 4-1: config 220 has no interface number 2 [ 89.648377][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.661581][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 89.668444][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 89.675366][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 89.684871][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 89.694038][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.702296][ T10] usb 4-1: Product: syz [ 89.713021][ T10] usb 4-1: Manufacturer: syz [ 89.717715][ T10] usb 4-1: SerialNumber: syz [ 89.928712][ T10] usb 4-1: selecting invalid altsetting 0 [ 89.934693][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 89.941108][ T10] usb 4-1: No valid video chain found. [ 89.951537][ T10] usb 4-1: USB disconnect, device number 25 [ 90.083014][ T31] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 90.212800][ T977] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 90.234132][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.243067][ T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 90.254109][ T31] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 90.264238][ T31] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 90.274290][ T31] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 90.287672][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 90.295226][ T10] usb 3-1: USB disconnect, device number 32 [ 90.297230][ T31] usb 2-1: string descriptor 0 read error: -22 [ 90.314919][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.324132][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.333788][ T1609] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.341055][ T1609] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.349357][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 90.377113][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.388181][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.400338][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.410680][ T977] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 90.419787][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.430061][ T977] usb 1-1: config 0 descriptor?? [ 90.527580][ T1629] kvm: MONITOR instruction emulated as NOP! [ 90.573112][ T31] usb 2-1: USB disconnect, device number 38 [ 90.636494][ T977] usb 1-1: string descriptor 0 read error: -71 [ 90.653462][ T977] usb 1-1: USB disconnect, device number 45 [ 90.722922][ T36] audit: type=1400 audit(1774415369.950:358): avc: denied { getopt } for pid=1645 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.952755][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 91.082803][ T31] usb 2-1: device descriptor read/64, error -71 [ 91.166597][ T1650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1650 comm=syz.0.423 [ 91.322789][ T31] usb 2-1: device descriptor read/64, error -71 [ 91.352769][ T977] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 91.397572][ T36] audit: type=1400 audit(1774415370.620:359): avc: denied { write } for pid=1653 comm="syz.0.425" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 91.420261][ T36] audit: type=1400 audit(1774415370.630:360): avc: denied { remount } for pid=1653 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.493849][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 91.502933][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 91.509276][ T977] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 91.517601][ T977] usb 3-1: config 0 has no interface number 0 [ 91.523786][ T977] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 91.535620][ T977] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 91.546102][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.554168][ T977] usb 3-1: Product: syz [ 91.558445][ T977] usb 3-1: Manufacturer: syz [ 91.563145][ T31] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 91.570820][ T977] usb 3-1: SerialNumber: syz [ 91.576397][ T977] usb 3-1: config 0 descriptor?? [ 91.582028][ T1648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.644158][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.652597][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 91.661546][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.671870][ T10] usb 4-1: config 220 has no interface number 2 [ 91.678182][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.691376][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 91.698238][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 91.705170][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 91.713183][ T31] usb 2-1: device descriptor read/64, error -71 [ 91.713977][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.728628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.736674][ T10] usb 4-1: Product: syz [ 91.740860][ T10] usb 4-1: Manufacturer: syz [ 91.745523][ T10] usb 4-1: SerialNumber: syz [ 91.794665][ T1648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.842787][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 91.954327][ T10] usb 4-1: selecting invalid altsetting 0 [ 91.960221][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 91.963712][ T31] usb 2-1: device descriptor read/64, error -71 [ 91.967384][ T10] usb 4-1: No valid video chain found. [ 91.981589][ T10] usb 4-1: USB disconnect, device number 26 [ 91.993890][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.004195][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.014666][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 92.023779][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.031817][ T45] usb 1-1: Product: syz [ 92.036063][ T45] usb 1-1: Manufacturer: syz [ 92.040726][ T45] usb 1-1: SerialNumber: syz [ 92.082862][ T31] usb usb2-port1: attempt power cycle [ 92.432806][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 92.453904][ T31] usb 2-1: device descriptor read/8, error -71 [ 92.583882][ T31] usb 2-1: device descriptor read/8, error -71 [ 92.608006][ T45] usb 1-1: unit 0 not found! [ 92.615612][ T45] usb 1-1: USB disconnect, device number 46 [ 92.628396][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.722783][ T388] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 92.832756][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 92.853683][ T31] usb 2-1: device descriptor read/8, error -71 [ 92.882770][ T388] usb 4-1: Using ep0 maxpacket: 32 [ 92.888978][ T388] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 92.897531][ T388] usb 4-1: config 0 has no interface number 0 [ 92.903698][ T388] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 92.915030][ T388] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 92.924129][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.932162][ T388] usb 4-1: Product: syz [ 92.936374][ T388] usb 4-1: Manufacturer: syz [ 92.940996][ T388] usb 4-1: SerialNumber: syz [ 92.946771][ T388] usb 4-1: config 0 descriptor?? [ 92.952238][ T1663] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 92.983872][ T31] usb 2-1: device descriptor read/8, error -71 [ 93.092875][ T31] usb usb2-port1: unable to enumerate USB device [ 93.161155][ T1663] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 93.384347][ T36] audit: type=1400 audit(1774415372.610:361): avc: denied { mount } for pid=1673 comm="syz.0.433" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.407138][ T36] audit: type=1400 audit(1774415372.610:362): avc: denied { search } for pid=1673 comm="syz.0.433" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.429816][ T36] audit: type=1400 audit(1774415372.650:363): avc: denied { read } for pid=1673 comm="syz.0.433" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.451901][ T36] audit: type=1400 audit(1774415372.650:364): avc: denied { open } for pid=1673 comm="syz.0.433" path="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.487144][ T1676] syzkaller1: entered promiscuous mode [ 93.492697][ T1676] syzkaller1: entered allmulticast mode [ 93.500201][ T1676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 93.588744][ T36] audit: type=1400 audit(1774415372.810:365): avc: denied { shutdown } for pid=1684 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.619858][ T1687] cgroup: release_agent respecified [ 93.701758][ T36] audit: type=1400 audit(1774415372.920:366): avc: denied { listen } for pid=1696 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.721280][ T36] audit: type=1400 audit(1774415372.920:367): avc: denied { accept } for pid=1696 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.770164][ T388] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 93.789036][ T1700] devtmpfs: Unknown parameter '/dev/uinput' [ 93.795863][ T36] audit: type=1404 audit(1774415373.020:368): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 93.811496][ T36] audit: type=1400 audit(1774415373.030:369): avc: denied { create } for pid=1699 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 93.832069][ T36] audit: type=1400 audit(1774415373.030:370): avc: denied { create } for pid=1699 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 93.855195][ T977] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.867061][ T977] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 93.878762][ T977] asix 3-1:0.188: probe with driver asix failed with error -71 [ 93.888853][ T977] usb 3-1: USB disconnect, device number 33 [ 93.977479][ T388] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 93.987677][ T388] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 93.998156][ T388] asix 4-1:0.188: probe with driver asix failed with error -71 [ 94.006727][ T388] usb 4-1: USB disconnect, device number 27 [ 94.353310][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 96.276484][ T1818] tap0: tun_chr_ioctl cmd 1074025677 [ 96.281898][ T1818] tap0: linktype set to 780 [ 96.287087][ T1818] tap0: tun_chr_ioctl cmd 1074025672 [ 96.292406][ T1818] tap0: ignored: set checksum disabled [ 96.299384][ T1819] tap0: tun_chr_ioctl cmd 1074025672 [ 96.304948][ T1819] tap0: ignored: set checksum disabled [ 97.361184][ T1916] netlink: 9 bytes leftover after parsing attributes in process `syz.2.532'. [ 97.371357][ T1916] gretap0: entered promiscuous mode [ 98.673442][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 98.673461][ T36] audit: type=1400 audit(1774415377.900:719): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.716265][ T36] audit: type=1400 audit(1774415377.940:720): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.792768][ T36] audit: type=1400 audit(1774415378.020:721): avc: denied { read } for pid=1975 comm="syz.3.555" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 98.795869][ T1978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1978 comm=syz.1.554 [ 98.842957][ T36] audit: type=1400 audit(1774415378.020:722): avc: denied { create } for pid=1975 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 98.875630][ T36] audit: type=1400 audit(1774415378.020:723): avc: denied { create } for pid=1973 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.912841][ T36] audit: type=1326 audit(1774415378.060:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1973 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e7f9c799 code=0x7fc00000 [ 98.936313][ T36] audit: type=1400 audit(1774415378.060:725): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.960646][ T36] audit: type=1400 audit(1774415378.090:726): avc: denied { create } for pid=1981 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 98.983534][ T36] audit: type=1400 audit(1774415378.090:727): avc: denied { create } for pid=1981 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 99.002975][ T36] audit: type=1400 audit(1774415378.100:728): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.208654][ T1998] FAULT_INJECTION: forcing a failure. [ 99.208654][ T1998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.221793][ T1998] CPU: 0 UID: 0 PID: 1998 Comm: syz.3.564 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 99.221837][ T1998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.221854][ T1998] Call Trace: [ 99.221860][ T1998] [ 99.221867][ T1998] __dump_stack+0x21/0x30 [ 99.221893][ T1998] dump_stack_lvl+0x140/0x1c0 [ 99.221914][ T1998] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.221935][ T1998] ? vsnprintf+0x7b4/0x1ad0 [ 99.221954][ T1998] ? check_stack_object+0x106/0x150 [ 99.221978][ T1998] dump_stack+0x19/0x20 [ 99.221997][ T1998] should_fail_ex+0x3d7/0x530 [ 99.222018][ T1998] should_fail+0xf/0x20 [ 99.222036][ T1998] should_fail_usercopy+0x1e/0x30 [ 99.222057][ T1998] _copy_from_user+0x20/0xa0 [ 99.222081][ T1998] kstrtouint_from_user+0xde/0x170 [ 99.222100][ T1998] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 99.222119][ T1998] ? selinux_file_permission+0x318/0xb60 [ 99.222140][ T1998] ? __cfi_selinux_file_permission+0x10/0x10 [ 99.222160][ T1998] proc_fail_nth_write+0x8f/0x220 [ 99.222179][ T1998] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 99.222198][ T1998] ? bpf_lsm_file_permission+0xd/0x20 [ 99.222215][ T1998] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 99.222237][ T1998] vfs_write+0x3c8/0xf90 [ 99.222260][ T1998] ? __cfi_vfs_write+0x10/0x10 [ 99.222281][ T1998] ? __kasan_check_write+0x18/0x20 [ 99.222303][ T1998] ? mutex_lock+0x97/0x1d0 [ 99.222317][ T1998] ? __cfi_mutex_lock+0x10/0x10 [ 99.222331][ T1998] ? __fget_files+0x2c5/0x340 [ 99.222347][ T1998] ksys_write+0x145/0x260 [ 99.222369][ T1998] ? __cfi_ksys_write+0x10/0x10 [ 99.222390][ T1998] ? fdget+0x188/0x1e0 [ 99.222404][ T1998] ? __kasan_check_read+0x15/0x20 [ 99.222426][ T1998] __x64_sys_write+0x7f/0x90 [ 99.222448][ T1998] x64_sys_call+0x271c/0x2ee0 [ 99.222471][ T1998] do_syscall_64+0x57/0xf0 [ 99.222492][ T1998] ? clear_bhb_loop+0x50/0xa0 [ 99.222515][ T1998] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.222536][ T1998] RIP: 0033:0x7fbd2355cfce [ 99.222551][ T1998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.222564][ T1998] RSP: 002b:00007fbd244e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.222582][ T1998] RAX: ffffffffffffffda RBX: 00007fbd244ea6c0 RCX: 00007fbd2355cfce [ 99.222594][ T1998] RDX: 0000000000000001 RSI: 00007fbd244ea0a0 RDI: 0000000000000003 [ 99.222604][ T1998] RBP: 00007fbd244ea090 R08: 0000000000000000 R09: 0000000000000000 [ 99.222615][ T1998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.222624][ T1998] R13: 00007fbd23816038 R14: 00007fbd23815fa0 R15: 00007ffc76919248 [ 99.222638][ T1998] [ 99.467329][ T2000] netlink: 188 bytes leftover after parsing attributes in process `syz.1.565'. [ 100.808958][ T2048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 100.873797][ T2059] capability: warning: `syz.0.591' uses 32-bit capabilities (legacy support in use) [ 101.288526][ T2072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2072 comm=syz.1.596 [ 101.750183][ T2097] syzkaller1: entered promiscuous mode [ 101.755731][ T2097] syzkaller1: entered allmulticast mode [ 102.029779][ T2101] FAULT_INJECTION: forcing a failure. [ 102.029779][ T2101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.043231][ T2101] CPU: 0 UID: 0 PID: 2101 Comm: syz.0.609 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 102.043255][ T2101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.043265][ T2101] Call Trace: [ 102.043271][ T2101] [ 102.043277][ T2101] __dump_stack+0x21/0x30 [ 102.043302][ T2101] dump_stack_lvl+0x140/0x1c0 [ 102.043323][ T2101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.043345][ T2101] ? check_stack_object+0x12b/0x150 [ 102.043369][ T2101] dump_stack+0x19/0x20 [ 102.043389][ T2101] should_fail_ex+0x3d7/0x530 [ 102.043409][ T2101] should_fail+0xf/0x20 [ 102.043427][ T2101] should_fail_usercopy+0x1e/0x30 [ 102.043448][ T2101] _copy_to_user+0x24/0xa0 [ 102.043472][ T2101] simple_read_from_buffer+0xed/0x160 [ 102.043491][ T2101] proc_fail_nth_read+0x1aa/0x220 [ 102.043510][ T2101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.043530][ T2101] ? bpf_lsm_file_permission+0xd/0x20 [ 102.043548][ T2101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.043570][ T2101] vfs_read+0x289/0xcb0 [ 102.043596][ T2101] ? __cfi_vfs_read+0x10/0x10 [ 102.043617][ T2101] ? __kasan_check_write+0x18/0x20 [ 102.043639][ T2101] ? mutex_lock+0x97/0x1d0 [ 102.043653][ T2101] ? __cfi_mutex_lock+0x10/0x10 [ 102.043667][ T2101] ? __fget_files+0x2c5/0x340 [ 102.043683][ T2101] ksys_read+0x145/0x260 [ 102.043704][ T2101] ? __cfi_ksys_read+0x10/0x10 [ 102.043727][ T2101] ? __kasan_check_read+0x15/0x20 [ 102.043748][ T2101] __x64_sys_read+0x7f/0x90 [ 102.043770][ T2101] x64_sys_call+0x2638/0x2ee0 [ 102.043793][ T2101] do_syscall_64+0x57/0xf0 [ 102.043820][ T2101] ? clear_bhb_loop+0x50/0xa0 [ 102.043843][ T2101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.043864][ T2101] RIP: 0033:0x7f1b9455cfce [ 102.043878][ T2101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.043892][ T2101] RSP: 002b:00007f1b953d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.043910][ T2101] RAX: ffffffffffffffda RBX: 00007f1b953da6c0 RCX: 00007f1b9455cfce [ 102.043922][ T2101] RDX: 000000000000000f RSI: 00007f1b953da0a0 RDI: 0000000000000003 [ 102.043932][ T2101] RBP: 00007f1b953da090 R08: 0000000000000000 R09: 0000000000000000 [ 102.043943][ T2101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.043953][ T2101] R13: 00007f1b94816038 R14: 00007f1b94815fa0 R15: 00007fff397d8078 [ 102.043968][ T2101] [ 102.314711][ T2107] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 102.322524][ T2107] netlink: 17 bytes leftover after parsing attributes in process `syz.2.611'. [ 102.885946][ T2134] netlink: 'syz.1.623': attribute type 27 has an invalid length. [ 102.896454][ T2134] sit0: left promiscuous mode [ 102.981261][ T2152] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 102.982078][ T2149] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 103.044819][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 103.064985][ T2149] netlink: 'syz.3.628': attribute type 13 has an invalid length. [ 103.687197][ T36] kauditd_printk_skb: 315 callbacks suppressed [ 103.687218][ T36] audit: type=1400 audit(1774415382.910:1044): avc: denied { create } for pid=2191 comm="syz.3.646" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 103.714929][ T36] audit: type=1400 audit(1774415382.920:1045): avc: denied { create } for pid=2191 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 103.735214][ T36] audit: type=1400 audit(1774415382.920:1046): avc: denied { create } for pid=2191 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 103.757041][ T36] audit: type=1400 audit(1774415382.920:1047): avc: denied { create } for pid=2191 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 103.778387][ T36] audit: type=1400 audit(1774415382.920:1048): avc: denied { read write } for pid=2191 comm="syz.3.646" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 103.801928][ T36] audit: type=1400 audit(1774415382.940:1049): avc: denied { create } for pid=2184 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 103.822525][ T36] audit: type=1400 audit(1774415382.940:1050): avc: denied { execute } for pid=2184 comm="syz.1.643" path="/125/bus" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 103.845026][ T36] audit: type=1400 audit(1774415382.940:1051): avc: denied { create } for pid=2184 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 103.864770][ T36] audit: type=1400 audit(1774415382.960:1052): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.889029][ T36] audit: type=1400 audit(1774415382.980:1053): avc: denied { read write } for pid=2194 comm="syz.2.647" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 104.058855][ T2201] netlink: 80 bytes leftover after parsing attributes in process `syz.0.650'. [ 106.584521][ T2346] netlink: 'syz.3.709': attribute type 27 has an invalid length. [ 106.717384][ T2354] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 106.725419][ T2354] netlink: 17 bytes leftover after parsing attributes in process `syz.1.712'. [ 106.983276][ T2379] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 106.991144][ T2379] netlink: 17 bytes leftover after parsing attributes in process `syz.0.724'. [ 107.052896][ T2382] netlink: 'syz.3.725': attribute type 16 has an invalid length. [ 108.711258][ T36] kauditd_printk_skb: 733 callbacks suppressed [ 108.711279][ T36] audit: type=1400 audit(2000000000.110:1787): avc: denied { read append } for pid=2460 comm="syz.3.755" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 108.741705][ T36] audit: type=1400 audit(2000000000.120:1788): avc: denied { execmem } for pid=2460 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 108.761815][ T36] audit: type=1326 audit(2000000000.120:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2452 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56e7f5cfce code=0x7ffc0000 [ 108.786393][ T36] audit: type=1400 audit(2000000000.170:1790): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.815587][ T36] audit: type=1326 audit(2000000000.220:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2452 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56e7f5cfce code=0x7ffc0000 [ 108.846516][ T36] audit: type=1400 audit(2000000000.250:1792): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.882364][ T36] audit: type=1400 audit(2000000000.280:1793): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 108.908421][ T2466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4358 sclass=netlink_route_socket pid=2466 comm=syz.3.757 [ 108.926723][ T36] audit: type=1400 audit(2000000000.300:1794): avc: denied { block_suspend } for pid=2465 comm="syz.3.757" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 108.949790][ T36] audit: type=1326 audit(2000000000.320:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2452 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56e7f5cfce code=0x7ffc0000 [ 108.973343][ T36] audit: type=1400 audit(2000000000.320:1796): avc: denied { mounton } for pid=2465 comm="syz.3.757" path="/202/file0" dev="tmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 109.341550][ T2495] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 109.349323][ T2495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 109.359447][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.443776][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.462427][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.494451][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.517654][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.526294][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.542195][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.551654][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.562234][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 109.572247][ T2503] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 110.210303][ T2524] netlink: 96 bytes leftover after parsing attributes in process `syz.0.780'. [ 110.253354][ T2527] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 113.211159][ T2625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2625 comm=syz.0.824 [ 113.726153][ T36] kauditd_printk_skb: 263 callbacks suppressed [ 113.726174][ T36] audit: type=1400 audit(2000000005.130:2060): avc: denied { read write } for pid=2646 comm="syz.3.835" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 113.758430][ T36] audit: type=1400 audit(2000000005.160:2061): avc: denied { read } for pid=2646 comm="syz.3.835" dev="nsfs" ino=4026532487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 113.797561][ T36] audit: type=1400 audit(2000000005.200:2062): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.838469][ T36] audit: type=1400 audit(2000000005.240:2063): avc: denied { read } for pid=2648 comm="syz.2.836" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 113.859786][ T36] audit: type=1400 audit(2000000005.240:2064): avc: denied { read write } for pid=2648 comm="syz.2.836" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 113.894287][ T36] audit: type=1400 audit(2000000005.300:2065): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.941348][ T36] audit: type=1400 audit(2000000005.340:2066): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.975330][ T36] audit: type=1400 audit(2000000005.380:2067): avc: denied { create } for pid=2652 comm="syz.0.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 114.007763][ T36] audit: type=1400 audit(2000000005.410:2068): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.044771][ T36] audit: type=1400 audit(2000000005.450:2069): avc: denied { read } for pid=2654 comm="syz.1.839" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 114.117035][ T2659] netlink: 72 bytes leftover after parsing attributes in process `syz.1.841'. [ 117.323680][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 118.754402][ T36] kauditd_printk_skb: 327 callbacks suppressed [ 118.754421][ T36] audit: type=1400 audit(2000000010.160:2397): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.792522][ T36] audit: type=1400 audit(2000000010.190:2398): avc: denied { read write } for pid=2855 comm="syz.1.930" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 118.820826][ T2856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2856 comm=syz.1.930 [ 118.842755][ T36] audit: type=1400 audit(2000000010.240:2399): avc: denied { unmount } for pid=2855 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 118.875252][ T36] audit: type=1400 audit(2000000010.240:2400): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.906723][ T36] audit: type=1400 audit(2000000010.310:2401): avc: denied { read } for pid=2858 comm="syz.3.931" dev="nsfs" ino=4026532487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 118.936962][ T36] audit: type=1400 audit(2000000010.340:2402): avc: denied { create } for pid=2858 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 118.982904][ T36] audit: type=1400 audit(2000000010.370:2403): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.010400][ T36] audit: type=1400 audit(2000000010.380:2404): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.078123][ T36] audit: type=1400 audit(2000000010.480:2405): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.137704][ T36] audit: type=1400 audit(2000000010.530:2406): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.424970][ T2993] validate_nla: 24 callbacks suppressed [ 122.424988][ T2993] netlink: 'syz.2.990': attribute type 33 has an invalid length. [ 122.510224][ T3000] netlink: 'syz.2.993': attribute type 25 has an invalid length. [ 123.231317][ T3030] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1006'. [ 123.830856][ T36] kauditd_printk_skb: 235 callbacks suppressed [ 123.830876][ T36] audit: type=1400 audit(2000000015.230:2642): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.861346][ T36] audit: type=1400 audit(2000000015.240:2643): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.929375][ T36] audit: type=1400 audit(2000000015.300:2644): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.979689][ T36] audit: type=1400 audit(2000000015.310:2645): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.003841][ T36] audit: type=1400 audit(2000000015.320:2646): avc: denied { read write } for pid=3044 comm="syz.0.1014" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 124.015254][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 124.031291][ T36] audit: type=1400 audit(2000000015.350:2647): avc: denied { read write } for pid=3047 comm="syz.1.1015" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 124.060970][ T36] audit: type=1400 audit(2000000015.360:2648): avc: denied { read write } for pid=3050 comm="syz.3.1016" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 124.097296][ T36] audit: type=1400 audit(2000000015.360:2649): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.122198][ T36] audit: type=1400 audit(2000000015.380:2650): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.148205][ T36] audit: type=1400 audit(2000000015.400:2651): avc: denied { name_bind } for pid=3052 comm="syz.2.1017" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 126.427241][ T3104] FAULT_INJECTION: forcing a failure. [ 126.427241][ T3104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.440575][ T3104] CPU: 0 UID: 0 PID: 3104 Comm: syz.2.1040 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 126.440603][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.440614][ T3104] Call Trace: [ 126.440619][ T3104] [ 126.440625][ T3104] __dump_stack+0x21/0x30 [ 126.440650][ T3104] dump_stack_lvl+0x140/0x1c0 [ 126.440671][ T3104] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.440693][ T3104] ? check_stack_object+0x12b/0x150 [ 126.440718][ T3104] dump_stack+0x19/0x20 [ 126.440737][ T3104] should_fail_ex+0x3d7/0x530 [ 126.440757][ T3104] should_fail+0xf/0x20 [ 126.441004][ T3104] should_fail_usercopy+0x1e/0x30 [ 126.441029][ T3104] _copy_to_user+0x24/0xa0 [ 126.441054][ T3104] simple_read_from_buffer+0xed/0x160 [ 126.441074][ T3104] proc_fail_nth_read+0x1aa/0x220 [ 126.441093][ T3104] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 126.441113][ T3104] ? bpf_lsm_file_permission+0xd/0x20 [ 126.441131][ T3104] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 126.441189][ T3104] vfs_read+0x289/0xcb0 [ 126.441219][ T3104] ? __cfi_vfs_read+0x10/0x10 [ 126.441248][ T3104] ? __kasan_check_write+0x18/0x20 [ 126.441281][ T3104] ? mutex_lock+0x97/0x1d0 [ 126.441296][ T3104] ? __cfi_mutex_lock+0x10/0x10 [ 126.441311][ T3104] ? __fget_files+0x2c5/0x340 [ 126.441327][ T3104] ksys_read+0x145/0x260 [ 126.441349][ T3104] ? __cfi_ksys_read+0x10/0x10 [ 126.441370][ T3104] ? fdget+0x188/0x1e0 [ 126.441384][ T3104] ? __kasan_check_read+0x15/0x20 [ 126.441407][ T3104] __x64_sys_read+0x7f/0x90 [ 126.441429][ T3104] x64_sys_call+0x2638/0x2ee0 [ 126.441453][ T3104] do_syscall_64+0x57/0xf0 [ 126.441491][ T3104] ? clear_bhb_loop+0x50/0xa0 [ 126.441518][ T3104] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.441540][ T3104] RIP: 0033:0x7f3083b5cfce [ 126.441555][ T3104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.441569][ T3104] RSP: 002b:00007f30825e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.441587][ T3104] RAX: ffffffffffffffda RBX: 00007f30825e36c0 RCX: 00007f3083b5cfce [ 126.441600][ T3104] RDX: 000000000000000f RSI: 00007f30825e30a0 RDI: 0000000000000003 [ 126.441610][ T3104] RBP: 00007f30825e3090 R08: 0000000000000000 R09: 0000000000000000 [ 126.441621][ T3104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.441631][ T3104] R13: 00007f3083e16038 R14: 00007f3083e15fa0 R15: 00007ffe66776c38 [ 126.441646][ T3104] [ 128.833726][ T36] kauditd_printk_skb: 158 callbacks suppressed [ 128.833747][ T36] audit: type=1400 audit(2000000020.234:2810): avc: denied { create } for pid=3176 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 128.862856][ T36] audit: type=1400 audit(2000000020.264:2811): avc: denied { create } for pid=3176 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 128.904531][ T36] audit: type=1400 audit(2000000020.304:2812): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.937585][ T36] audit: type=1400 audit(2000000020.334:2813): avc: denied { create } for pid=3178 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 128.957392][ T36] audit: type=1400 audit(2000000020.344:2814): avc: denied { read } for pid=3178 comm="syz.2.1075" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 128.985211][ T36] audit: type=1400 audit(2000000020.354:2815): avc: denied { read write } for pid=3178 comm="syz.2.1075" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 129.019231][ T36] audit: type=1400 audit(2000000020.414:2816): avc: denied { create } for pid=3178 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 129.038790][ T36] audit: type=1400 audit(2000000020.414:2817): avc: denied { read write } for pid=3178 comm="syz.2.1075" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 129.064683][ T36] audit: type=1400 audit(2000000020.414:2818): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.093963][ T36] audit: type=1400 audit(2000000020.484:2819): avc: denied { create } for pid=3182 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 129.730194][ T3202] syzkaller1: entered promiscuous mode [ 129.735796][ T3202] syzkaller1: entered allmulticast mode [ 131.274150][ T3239] netlink: 'syz.0.1100': attribute type 12 has an invalid length. [ 132.404043][ T3274] netlink: 'syz.0.1115': attribute type 5 has an invalid length. [ 132.995836][ T3294] netlink: 'syz.2.1121': attribute type 4 has an invalid length. [ 133.003807][ T3294] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1121'. [ 133.906039][ T36] kauditd_printk_skb: 183 callbacks suppressed [ 133.906060][ T36] audit: type=1400 audit(2000000025.304:3003): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.948770][ T3322] bridge0: port 3(vlan0) entered blocking state [ 133.955227][ T3322] bridge0: port 3(vlan0) entered disabled state [ 133.962778][ T3322] vlan0: entered allmulticast mode [ 133.968096][ T3322] veth0_vlan: entered allmulticast mode [ 133.972904][ T36] audit: type=1400 audit(2000000025.364:3004): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.979790][ T3322] vlan0: entered promiscuous mode [ 134.016104][ T36] audit: type=1400 audit(2000000025.414:3005): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.041316][ T3322] bridge0: port 3(vlan0) entered blocking state [ 134.047659][ T3322] bridge0: port 3(vlan0) entered forwarding state [ 134.058262][ T36] audit: type=1400 audit(2000000025.454:3006): avc: denied { read write } for pid=3323 comm="syz.1.1134" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 134.086959][ T36] audit: type=1400 audit(2000000025.484:3007): avc: denied { create } for pid=3323 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 134.111926][ T36] audit: type=1400 audit(2000000025.504:3008): avc: denied { create } for pid=3326 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 134.139803][ T36] audit: type=1400 audit(2000000025.534:3009): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.182772][ T36] audit: type=1400 audit(2000000025.564:3010): avc: denied { create } for pid=3323 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 134.204707][ T36] audit: type=1400 audit(2000000025.574:3011): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.285236][ T36] audit: type=1400 audit(2000000025.634:3012): avc: denied { create } for pid=3330 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 134.455617][ T3347] netlink: 'syz.1.1143': attribute type 27 has an invalid length. [ 134.476708][ T46] ip6_tunnel:  xmit: Local address not yet configured! [ 134.492187][ T46] ip6_tunnel:  xmit: Local address not yet configured! [ 134.502792][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 134.732912][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 135.110307][ T3372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=3372 comm=syz.3.1154 [ 135.323306][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 135.666225][ T3400] FAULT_INJECTION: forcing a failure. [ 135.666225][ T3400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.680225][ T3401] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 135.680249][ T3400] CPU: 0 UID: 0 PID: 3400 Comm: syz.2.1164 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 135.680316][ T3400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.680373][ T3400] Call Trace: [ 135.680393][ T3400] [ 135.680415][ T3400] __dump_stack+0x21/0x30 [ 135.680524][ T3400] dump_stack_lvl+0x140/0x1c0 [ 135.680598][ T3400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.680672][ T3400] ? _parse_integer+0x2e/0x40 [ 135.680741][ T3400] ? kstrtoull+0x13b/0x1e0 [ 135.680807][ T3400] dump_stack+0x19/0x20 [ 135.680880][ T3400] should_fail_ex+0x3d7/0x530 [ 135.680955][ T3400] should_fail+0xf/0x20 [ 135.681023][ T3400] should_fail_usercopy+0x1e/0x30 [ 135.681098][ T3400] _copy_from_user+0x20/0xa0 [ 135.681181][ T3400] ___sys_sendmsg+0x1c7/0x370 [ 135.681263][ T3400] ? __sys_sendmsg+0x2a0/0x2a0 [ 135.681336][ T3400] ? proc_fail_nth_write+0x184/0x220 [ 135.681409][ T3400] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 135.681502][ T3400] __x64_sys_sendmsg+0x1fb/0x2d0 [ 135.681575][ T3400] ? fput+0x1a4/0x240 [ 135.681636][ T3400] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 135.681726][ T3400] ? ksys_write+0x1f3/0x260 [ 135.681846][ T3400] ? __kasan_check_read+0x15/0x20 [ 135.681939][ T3400] x64_sys_call+0x2a4c/0x2ee0 [ 135.682011][ T3400] do_syscall_64+0x57/0xf0 [ 135.682085][ T3400] ? clear_bhb_loop+0x50/0xa0 [ 135.682162][ T3400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.682246][ T3400] RIP: 0033:0x7f3083b9c799 [ 135.682300][ T3400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.682344][ T3400] RSP: 002b:00007f30825e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.682407][ T3400] RAX: ffffffffffffffda RBX: 00007f3083e15fa0 RCX: 00007f3083b9c799 [ 135.682450][ T3400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.682491][ T3400] RBP: 00007f30825e3090 R08: 0000000000000000 R09: 0000000000000000 [ 135.682531][ T3400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.682565][ T3400] R13: 00007f3083e16038 R14: 00007f3083e15fa0 R15: 00007ffe66776c38 [ 135.682617][ T3400] [ 135.906080][ T3401] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1163'. [ 135.954424][ T3405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3405 comm=syz.2.1165 [ 136.026957][ T3413] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 136.702419][ T3431] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 136.710526][ T3431] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1177'. [ 137.111981][ T3461] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 137.120055][ T3461] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1188'. [ 137.610710][ T3482] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 137.618654][ T3482] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1198'. [ 138.182152][ T3512] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 138.190195][ T3512] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1210'. [ 138.354248][ T3525] mmap: syz.0.1216 (3525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.602870][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 138.671095][ T3537] PM: Enabling pm_trace changes system date and time during resume. [ 138.671095][ T3537] PM: Correct system time has to be restored manually after resume. [ 138.999096][ T36] kauditd_printk_skb: 523 callbacks suppressed [ 138.999116][ T36] audit: type=1400 audit(2000000030.394:3536): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.039441][ T36] audit: type=1400 audit(2000000030.434:3537): avc: denied { read write } for pid=3551 comm="syz.0.1227" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 139.411701][ T36] audit: type=1400 audit(2000000030.804:3538): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.451056][ T36] audit: type=1400 audit(2000000030.844:3539): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.510096][ T36] audit: type=1400 audit(2000000030.904:3540): avc: denied { read write } for pid=3553 comm="syz.1.1228" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 139.542598][ T36] audit: type=1400 audit(2000000030.934:3541): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.580892][ T36] audit: type=1400 audit(2000000030.974:3542): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.618474][ T36] audit: type=1400 audit(2000000031.014:3543): avc: denied { name_bind } for pid=3557 comm="syz.2.1230" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 139.640924][ T36] audit: type=1400 audit(2000000031.024:3544): avc: denied { create } for pid=3557 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 139.689426][ T36] audit: type=1400 audit(2000000031.024:3545): avc: denied { create } for pid=3557 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 139.771806][ T3567] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 139.780689][ T3567] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1234'. [ 139.985911][ T3592] can0: slcan on ttyS3. [ 140.026113][ T3592] can0 (unregistered): slcan off ttyS3. [ 140.325600][ T3607] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 140.345517][ T3607] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1247'. [ 141.203691][ T3632] netlink: 'syz.2.1257': attribute type 17 has an invalid length. [ 141.245582][ T3632] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 141.253551][ T3632] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1257'. [ 141.329118][ T3636] serio: Serial port ptm0 [ 141.484894][ T3636] serio: Serial port ptm0 [ 141.781005][ T3649] netlink: 'syz.3.1264': attribute type 46 has an invalid length. [ 142.695674][ T3680] netlink: 'syz.2.1276': attribute type 10 has an invalid length. [ 142.703823][ T3680] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1276'. [ 143.706239][ T3718] FAULT_INJECTION: forcing a failure. [ 143.706239][ T3718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.743895][ T3718] CPU: 1 UID: 0 PID: 3718 Comm: syz.1.1290 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 143.743933][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.743948][ T3718] Call Trace: [ 143.743955][ T3718] [ 143.743964][ T3718] __dump_stack+0x21/0x30 [ 143.744000][ T3718] dump_stack_lvl+0x140/0x1c0 [ 143.744030][ T3718] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.744061][ T3718] dump_stack+0x19/0x20 [ 143.744090][ T3718] should_fail_ex+0x3d7/0x530 [ 143.744120][ T3718] should_fail+0xf/0x20 [ 143.744146][ T3718] should_fail_usercopy+0x1e/0x30 [ 143.744176][ T3718] _copy_from_iter+0x1a9/0x1510 [ 143.744208][ T3718] ? kmalloc_reserve+0xcf/0x4f0 [ 143.744232][ T3718] ? __virt_addr_valid+0x2a6/0x380 [ 143.744258][ T3718] ? __cfi__copy_from_iter+0x10/0x10 [ 143.744290][ T3718] ? __check_object_size+0x527/0x830 [ 143.744324][ T3718] ? __cfi___check_object_size+0x10/0x10 [ 143.744356][ T3718] ? skb_put+0x112/0x1f0 [ 143.744387][ T3718] netlink_sendmsg+0x68e/0xb10 [ 143.744418][ T3718] ? __cfi_netlink_sendmsg+0x10/0x10 [ 143.744448][ T3718] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 143.744484][ T3718] ? security_socket_sendmsg+0x3d/0x100 [ 143.744508][ T3718] ? __cfi_netlink_sendmsg+0x10/0x10 [ 143.744537][ T3718] ____sys_sendmsg+0xa8c/0xae0 [ 143.744568][ T3718] ? __import_iovec+0x5ad/0x7c0 [ 143.744589][ T3718] ? __sys_sendmsg_sock+0x50/0x50 [ 143.744618][ T3718] ? import_iovec+0x80/0xb0 [ 143.744640][ T3718] ___sys_sendmsg+0x2a6/0x370 [ 143.744670][ T3718] ? __sys_sendmsg+0x2a0/0x2a0 [ 143.744698][ T3718] ? proc_fail_nth_write+0x184/0x220 [ 143.744726][ T3718] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 143.744762][ T3718] __x64_sys_sendmsg+0x1fb/0x2d0 [ 143.744790][ T3718] ? fput+0x1a4/0x240 [ 143.744814][ T3718] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 143.744843][ T3718] ? ksys_write+0x1f3/0x260 [ 143.744876][ T3718] ? __kasan_check_read+0x15/0x20 [ 143.744908][ T3718] x64_sys_call+0x2a4c/0x2ee0 [ 143.744942][ T3718] do_syscall_64+0x57/0xf0 [ 143.744972][ T3718] ? clear_bhb_loop+0x50/0xa0 [ 143.745004][ T3718] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.745034][ T3718] RIP: 0033:0x7f56e7f9c799 [ 143.745054][ T3718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.745075][ T3718] RSP: 002b:00007f56e8e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.745101][ T3718] RAX: ffffffffffffffda RBX: 00007f56e8215fa0 RCX: 00007f56e7f9c799 [ 143.745119][ T3718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 143.745135][ T3718] RBP: 00007f56e8e22090 R08: 0000000000000000 R09: 0000000000000000 [ 143.745150][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.745165][ T3718] R13: 00007f56e8216038 R14: 00007f56e8215fa0 R15: 00007ffcb3e2f048 [ 143.745185][ T3718] [ 144.037863][ T36] kauditd_printk_skb: 6916 callbacks suppressed [ 144.037882][ T36] audit: type=1400 audit(2000000035.434:10462): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.086340][ T36] audit: type=1400 audit(2000000035.434:10463): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.121786][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.137229][ T150] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.139357][ T3720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.144993][ T36] audit: type=1400 audit(2000000035.434:10464): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 144.155640][ T3720] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 144.175734][ T150] audit: backlog limit exceeded [ 144.180358][ T3720] audit: backlog limit exceeded [ 144.190373][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.392534][ T3724] netlink: 'syz.0.1292': attribute type 27 has an invalid length. [ 144.978568][ T3737] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1297'. [ 145.108902][ T3742] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 145.126133][ T3742] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1300'. [ 145.243292][ T46] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 145.252410][ T46] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 145.272859][ T977] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 145.602792][ T977] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 146.122818][ T977] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 146.132052][ T3768] netlink: 'syz.3.1308': attribute type 21 has an invalid length. [ 146.842783][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 147.546661][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3797 comm=syz.0.1320 [ 148.313020][ T3824] netlink: 'syz.0.1331': attribute type 46 has an invalid length. [ 148.533956][ T3833] netlink: 'syz.2.1335': attribute type 10 has an invalid length. [ 148.543811][ T3833] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1335'. [ 149.002795][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 149.042758][ T36] kauditd_printk_skb: 22772 callbacks suppressed [ 149.042778][ T36] audit: type=1400 audit(2000000040.434:33049): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.074209][ T36] audit: type=1400 audit(2000000040.444:33050): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.099948][ T36] audit: type=1400 audit(2000000040.444:33051): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.121391][ T36] audit: type=1400 audit(2000000040.444:33052): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.133384][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.149287][ T150] audit: audit_lost=66 audit_rate_limit=0 audit_backlog_limit=64 [ 149.158041][ T150] audit: backlog limit exceeded [ 149.164045][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.172764][ T36] audit: type=1400 audit(2000000040.444:33053): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.194153][ T36] audit: type=1400 audit(2000000040.444:33054): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 149.564788][ T3855] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 149.573403][ T3855] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1345'. [ 149.582463][ T3855] FAULT_INJECTION: forcing a failure. [ 149.582463][ T3855] name failslab, interval 1, probability 0, space 0, times 0 [ 149.597226][ T3855] CPU: 1 UID: 0 PID: 3855 Comm: syz.0.1345 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 149.597259][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.597273][ T3855] Call Trace: [ 149.597280][ T3855] [ 149.597288][ T3855] __dump_stack+0x21/0x30 [ 149.597322][ T3855] dump_stack_lvl+0x140/0x1c0 [ 149.597350][ T3855] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.597380][ T3855] dump_stack+0x19/0x20 [ 149.597406][ T3855] should_fail_ex+0x3d7/0x530 [ 149.597434][ T3855] should_failslab+0xac/0x100 [ 149.597455][ T3855] kmem_cache_alloc_node_noprof+0x45/0x420 [ 149.597487][ T3855] ? __alloc_skb+0x108/0x370 [ 149.597509][ T3855] __alloc_skb+0x108/0x370 [ 149.597529][ T3855] ? __kasan_check_read+0x15/0x20 [ 149.597560][ T3855] netlink_ack+0x155/0xa50 [ 149.597585][ T3855] ? avc_has_perm_noaudit+0x28a/0x360 [ 149.597618][ T3855] ? avc_has_perm+0x155/0x240 [ 149.597649][ T3855] netlink_rcv_skb+0x2dd/0x4f0 [ 149.597675][ T3855] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 149.597696][ T3855] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 149.597724][ T3855] ? netlink_autobind+0x1c0/0x1c0 [ 149.597752][ T3855] ? is_vmalloc_addr+0x11/0x40 [ 149.597774][ T3855] rtnetlink_rcv+0x20/0x30 [ 149.597812][ T3855] netlink_unicast+0x8c3/0xa60 [ 149.597837][ T3855] netlink_sendmsg+0x7fe/0xb10 [ 149.597865][ T3855] ? __cfi_netlink_sendmsg+0x10/0x10 [ 149.597893][ T3855] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 149.597944][ T3855] ? security_socket_sendmsg+0x3d/0x100 [ 149.597967][ T3855] ? __cfi_netlink_sendmsg+0x10/0x10 [ 149.597994][ T3855] ____sys_sendmsg+0xa8c/0xae0 [ 149.598024][ T3855] ? __import_iovec+0x5ad/0x7c0 [ 149.598056][ T3855] ? __sys_sendmsg_sock+0x50/0x50 [ 149.598085][ T3855] ? import_iovec+0x80/0xb0 [ 149.598108][ T3855] ___sys_sendmsg+0x2a6/0x370 [ 149.598136][ T3855] ? __sys_sendmsg+0x2a0/0x2a0 [ 149.598163][ T3855] ? proc_fail_nth_write+0x184/0x220 [ 149.598207][ T3855] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 149.598242][ T3855] __x64_sys_sendmsg+0x1fb/0x2d0 [ 149.598270][ T3855] ? fput+0x1a4/0x240 [ 149.598293][ T3855] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 149.598321][ T3855] ? ksys_write+0x1f3/0x260 [ 149.598354][ T3855] ? __kasan_check_read+0x15/0x20 [ 149.598385][ T3855] x64_sys_call+0x2a4c/0x2ee0 [ 149.598417][ T3855] do_syscall_64+0x57/0xf0 [ 149.598447][ T3855] ? clear_bhb_loop+0x50/0xa0 [ 149.598477][ T3855] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.598507][ T3855] RIP: 0033:0x7f1b9459c799 [ 149.598526][ T3855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.598547][ T3855] RSP: 002b:00007f1b953da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.598572][ T3855] RAX: ffffffffffffffda RBX: 00007f1b94815fa0 RCX: 00007f1b9459c799 [ 149.598590][ T3855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.598605][ T3855] RBP: 00007f1b953da090 R08: 0000000000000000 R09: 0000000000000000 [ 149.598620][ T3855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.598635][ T3855] R13: 00007f1b94816038 R14: 00007f1b94815fa0 R15: 00007fff397d8078 [ 149.598655][ T3855] [ 150.558748][ T3883] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 150.596562][ T3883] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1356'. [ 151.530694][ T3909] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 151.538772][ T3909] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1368'. [ 152.485147][ T3938] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 152.493149][ T3938] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1378'. [ 152.502672][ T3938] FAULT_INJECTION: forcing a failure. [ 152.502672][ T3938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.515943][ T3938] CPU: 0 UID: 0 PID: 3938 Comm: syz.1.1378 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 152.515980][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.515994][ T3938] Call Trace: [ 152.516002][ T3938] [ 152.516011][ T3938] __dump_stack+0x21/0x30 [ 152.516046][ T3938] dump_stack_lvl+0x140/0x1c0 [ 152.516075][ T3938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.516106][ T3938] ? vsnprintf+0x7b4/0x1ad0 [ 152.516134][ T3938] ? check_stack_object+0x106/0x150 [ 152.516168][ T3938] dump_stack+0x19/0x20 [ 152.516196][ T3938] should_fail_ex+0x3d7/0x530 [ 152.516225][ T3938] should_fail+0xf/0x20 [ 152.516250][ T3938] should_fail_usercopy+0x1e/0x30 [ 152.516282][ T3938] _copy_from_user+0x20/0xa0 [ 152.516316][ T3938] kstrtouint_from_user+0xde/0x170 [ 152.516353][ T3938] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 152.516378][ T3938] ? selinux_file_permission+0x318/0xb60 [ 152.516409][ T3938] ? __cfi_selinux_file_permission+0x10/0x10 [ 152.516438][ T3938] proc_fail_nth_write+0x8f/0x220 [ 152.516464][ T3938] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 152.516492][ T3938] ? bpf_lsm_file_permission+0xd/0x20 [ 152.516517][ T3938] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 152.516544][ T3938] vfs_write+0x3c8/0xf90 [ 152.516576][ T3938] ? __cfi_vfs_write+0x10/0x10 [ 152.516606][ T3938] ? __kasan_check_write+0x18/0x20 [ 152.516637][ T3938] ? mutex_lock+0x97/0x1d0 [ 152.516657][ T3938] ? __cfi_mutex_lock+0x10/0x10 [ 152.516677][ T3938] ? __fget_files+0x2c5/0x340 [ 152.516700][ T3938] ksys_write+0x145/0x260 [ 152.516730][ T3938] ? xfd_validate_state+0x68/0x140 [ 152.516760][ T3938] ? __cfi_ksys_write+0x10/0x10 [ 152.516792][ T3938] ? __kasan_check_read+0x15/0x20 [ 152.516823][ T3938] __x64_sys_write+0x7f/0x90 [ 152.516856][ T3938] x64_sys_call+0x271c/0x2ee0 [ 152.516889][ T3938] do_syscall_64+0x57/0xf0 [ 152.516924][ T3938] ? clear_bhb_loop+0x50/0xa0 [ 152.516956][ T3938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.516986][ T3938] RIP: 0033:0x7f56e7f5cfce [ 152.517006][ T3938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.517027][ T3938] RSP: 002b:00007f56e8e21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.517052][ T3938] RAX: ffffffffffffffda RBX: 00007f56e8e226c0 RCX: 00007f56e7f5cfce [ 152.517070][ T3938] RDX: 0000000000000001 RSI: 00007f56e8e220a0 RDI: 0000000000000004 [ 152.517085][ T3938] RBP: 00007f56e8e22090 R08: 0000000000000000 R09: 0000000000000000 [ 152.517100][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.517114][ T3938] R13: 00007f56e8216038 R14: 00007f56e8215fa0 R15: 00007ffcb3e2f048 [ 152.517134][ T3938] [ 153.696700][ T3957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3957 comm=syz.1.1385 [ 154.053114][ T3978] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 154.061072][ T3978] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1392'. [ 154.070756][ T36] kauditd_printk_skb: 7233 callbacks suppressed [ 154.070775][ T36] audit: type=1400 audit(2000000045.464:40133): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.142728][ T36] audit: type=1400 audit(2000000045.464:40134): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.165039][ T36] audit: type=1400 audit(2000000045.474:40135): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.197197][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.210595][ T3980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.220581][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.227270][ T290] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 154.227682][ T150] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 154.248067][ T36] audit: type=1400 audit(2000000045.474:40136): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 154.264209][ T3982] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.555123][ T4001] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 154.592716][ T4001] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1402'. [ 154.935619][ T4009] netlink: 'syz.3.1406': attribute type 4 has an invalid length. [ 155.526070][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 155.739475][ T4026] netlink: 'syz.3.1412': attribute type 10 has an invalid length. [ 155.749934][ T4026] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1412'. [ 156.442512][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 156.703200][ T4050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1423'. [ 158.913281][ T4093] FAULT_INJECTION: forcing a failure. [ 158.913281][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.949714][ T4093] CPU: 0 UID: 0 PID: 4093 Comm: syz.0.1443 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 158.949746][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.949759][ T4093] Call Trace: [ 158.949766][ T4093] [ 158.949774][ T4093] __dump_stack+0x21/0x30 [ 158.949806][ T4093] dump_stack_lvl+0x140/0x1c0 [ 158.949833][ T4093] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.949861][ T4093] ? check_stack_object+0x12b/0x150 [ 158.949891][ T4093] dump_stack+0x19/0x20 [ 158.949917][ T4093] should_fail_ex+0x3d7/0x530 [ 158.949944][ T4093] should_fail+0xf/0x20 [ 158.949967][ T4093] should_fail_usercopy+0x1e/0x30 [ 158.949994][ T4093] _copy_to_user+0x24/0xa0 [ 158.950025][ T4093] simple_read_from_buffer+0xed/0x160 [ 158.950063][ T4093] proc_fail_nth_read+0x1aa/0x220 [ 158.950089][ T4093] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 158.950114][ T4093] ? bpf_lsm_file_permission+0xd/0x20 [ 158.950136][ T4093] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 158.950161][ T4093] vfs_read+0x289/0xcb0 [ 158.950189][ T4093] ? __cfi_vfs_read+0x10/0x10 [ 158.950217][ T4093] ? __kasan_check_write+0x18/0x20 [ 158.950245][ T4093] ? mutex_lock+0x97/0x1d0 [ 158.950264][ T4093] ? __cfi_mutex_lock+0x10/0x10 [ 158.950283][ T4093] ? __fget_files+0x2c5/0x340 [ 158.950303][ T4093] ksys_read+0x145/0x260 [ 158.950331][ T4093] ? __cfi_ksys_read+0x10/0x10 [ 158.950360][ T4093] ? __kasan_check_read+0x15/0x20 [ 158.950388][ T4093] __x64_sys_read+0x7f/0x90 [ 158.950416][ T4093] x64_sys_call+0x2638/0x2ee0 [ 158.950447][ T4093] do_syscall_64+0x57/0xf0 [ 158.950473][ T4093] ? clear_bhb_loop+0x50/0xa0 [ 158.950502][ T4093] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.950530][ T4093] RIP: 0033:0x7f1b9455cfce [ 158.950547][ T4093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.950566][ T4093] RSP: 002b:00007f1b953d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.950588][ T4093] RAX: ffffffffffffffda RBX: 00007f1b953da6c0 RCX: 00007f1b9455cfce [ 158.950605][ T4093] RDX: 000000000000000f RSI: 00007f1b953da0a0 RDI: 0000000000000003 [ 158.950620][ T4093] RBP: 00007f1b953da090 R08: 0000000000000000 R09: 0000000000000000 [ 158.950634][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.950647][ T4093] R13: 00007f1b94816038 R14: 00007f1b94815fa0 R15: 00007fff397d8078 [ 158.950665][ T4093] [ 159.111474][ T36] kauditd_printk_skb: 8281 callbacks suppressed [ 159.111533][ T36] audit: type=1400 audit(2000000050.356:48193): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.218007][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.224593][ T150] audit: audit_lost=196 audit_rate_limit=0 audit_backlog_limit=64 [ 159.239580][ T150] audit: backlog limit exceeded [ 159.256108][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.263758][ T36] audit: type=1400 audit(2000000050.356:48194): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 159.284085][ T150] audit: audit_lost=197 audit_rate_limit=0 audit_backlog_limit=64 [ 159.290097][ T4095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.299278][ T4095] audit: audit_lost=198 audit_rate_limit=0 audit_backlog_limit=64 [ 159.301472][ T150] audit: backlog limit exceeded [ 159.914676][ T4108] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 159.970491][ T4108] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1449'. [ 160.599842][ T4123] syz.2.1455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.848156][ T4130] tun0: tun_chr_ioctl cmd 1074025675 [ 160.861231][ T4130] tun0: persist enabled [ 160.874296][ T4130] tun0: tun_chr_ioctl cmd 1074025675 [ 160.886247][ T4130] tun0: persist enabled [ 161.025559][ T4135] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 161.046099][ T4135] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1461'. [ 162.671243][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 162.807190][ T4192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=4192 comm=syz.2.1482 [ 162.840334][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 163.172872][ T4204] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 163.197189][ T4204] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1487'. [ 163.361459][ T4220] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1493'. [ 164.118436][ T4243] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 164.126555][ T36] kauditd_printk_skb: 6720 callbacks suppressed [ 164.126571][ T36] audit: type=1400 audit(2000000055.518:54914): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.126605][ T4243] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1502'. [ 164.168266][ T36] audit: type=1400 audit(2000000055.538:54915): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.214495][ T36] audit: type=1400 audit(2000000055.538:54916): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.236167][ T36] audit: type=1400 audit(2000000055.538:54917): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.257379][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.264816][ T4245] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1503'. [ 164.273835][ T150] audit: audit_lost=199 audit_rate_limit=0 audit_backlog_limit=64 [ 164.282906][ T150] audit: backlog limit exceeded [ 164.288196][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.303413][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.310224][ T150] audit: audit_lost=200 audit_rate_limit=0 audit_backlog_limit=64 [ 165.152958][ T4278] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1519'. [ 165.168453][ T4278] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.467793][ T4285] FAULT_INJECTION: forcing a failure. [ 165.467793][ T4285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.481903][ T4285] CPU: 1 UID: 0 PID: 4285 Comm: syz.0.1521 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 165.481936][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.481950][ T4285] Call Trace: [ 165.481958][ T4285] [ 165.481966][ T4285] __dump_stack+0x21/0x30 [ 165.481999][ T4285] dump_stack_lvl+0x140/0x1c0 [ 165.482028][ T4285] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.482058][ T4285] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 165.482082][ T4285] dump_stack+0x19/0x20 [ 165.482109][ T4285] should_fail_ex+0x3d7/0x530 [ 165.482138][ T4285] should_fail+0xf/0x20 [ 165.482164][ T4285] should_fail_usercopy+0x1e/0x30 [ 165.482192][ T4285] _copy_from_user+0x20/0xa0 [ 165.482226][ T4285] get_user_ifreq+0x70/0x180 [ 165.482257][ T4285] inet_ioctl+0x3f3/0x570 [ 165.482288][ T4285] ? __cfi_inet_ioctl+0x10/0x10 [ 165.482322][ T4285] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 165.482350][ T4285] sock_do_ioctl+0x118/0x330 [ 165.482384][ T4285] ? sock_show_fdinfo+0xd0/0xd0 [ 165.482434][ T4285] ? __cfi_vfs_write+0x10/0x10 [ 165.482465][ T4285] ? __kasan_check_write+0x18/0x20 [ 165.482504][ T4285] ? mutex_unlock+0x90/0x240 [ 165.482526][ T4285] sock_ioctl+0x5b5/0x7f0 [ 165.482559][ T4285] ? __cfi_sock_ioctl+0x10/0x10 [ 165.482590][ T4285] ? __fget_files+0x2c5/0x340 [ 165.482612][ T4285] ? bpf_lsm_file_ioctl+0xd/0x20 [ 165.482638][ T4285] ? security_file_ioctl+0x3e/0x110 [ 165.482666][ T4285] ? __cfi_sock_ioctl+0x10/0x10 [ 165.482698][ T4285] __se_sys_ioctl+0x132/0x1b0 [ 165.482720][ T4285] __x64_sys_ioctl+0x7f/0xa0 [ 165.482741][ T4285] x64_sys_call+0x1878/0x2ee0 [ 165.482775][ T4285] do_syscall_64+0x57/0xf0 [ 165.482804][ T4285] ? clear_bhb_loop+0x50/0xa0 [ 165.482837][ T4285] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.482867][ T4285] RIP: 0033:0x7f1b9459c799 [ 165.482886][ T4285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.482906][ T4285] RSP: 002b:00007f1b953da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.482931][ T4285] RAX: ffffffffffffffda RBX: 00007f1b94815fa0 RCX: 00007f1b9459c799 [ 165.482949][ T4285] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000003 [ 165.482965][ T4285] RBP: 00007f1b953da090 R08: 0000000000000000 R09: 0000000000000000 [ 165.482980][ T4285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.482995][ T4285] R13: 00007f1b94816038 R14: 00007f1b94815fa0 R15: 00007fff397d8078 [ 165.483016][ T4285] [ 167.121233][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.127742][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.135788][ T4314] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.154354][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.779452][ T4323] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.1539'. [ 167.788787][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 167.956502][ T4331] FAULT_INJECTION: forcing a failure. [ 167.956502][ T4331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.973287][ T4331] CPU: 1 UID: 0 PID: 4331 Comm: syz.1.1543 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 167.973321][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.973337][ T4331] Call Trace: [ 167.973344][ T4331] [ 167.973353][ T4331] __dump_stack+0x21/0x30 [ 167.973387][ T4331] dump_stack_lvl+0x140/0x1c0 [ 167.973416][ T4331] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.973445][ T4331] ? check_stack_object+0x12b/0x150 [ 167.973477][ T4331] dump_stack+0x19/0x20 [ 167.973505][ T4331] should_fail_ex+0x3d7/0x530 [ 167.973533][ T4331] should_fail+0xf/0x20 [ 167.973559][ T4331] should_fail_usercopy+0x1e/0x30 [ 167.973589][ T4331] _copy_to_user+0x24/0xa0 [ 167.973621][ T4331] simple_read_from_buffer+0xed/0x160 [ 167.973647][ T4331] proc_fail_nth_read+0x1aa/0x220 [ 167.973675][ T4331] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 167.973703][ T4331] ? bpf_lsm_file_permission+0xd/0x20 [ 167.973728][ T4331] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 167.973754][ T4331] vfs_read+0x289/0xcb0 [ 167.973785][ T4331] ? sock_show_fdinfo+0xd0/0xd0 [ 167.973821][ T4331] ? __cfi_vfs_read+0x10/0x10 [ 167.973855][ T4331] ? __kasan_check_write+0x18/0x20 [ 167.973887][ T4331] ? mutex_lock+0x97/0x1d0 [ 167.973908][ T4331] ? __cfi_mutex_lock+0x10/0x10 [ 167.973929][ T4331] ? __fget_files+0x2c5/0x340 [ 167.973952][ T4331] ksys_read+0x145/0x260 [ 167.973984][ T4331] ? __cfi_ksys_read+0x10/0x10 [ 167.974015][ T4331] ? __kasan_check_read+0x15/0x20 [ 167.974047][ T4331] __x64_sys_read+0x7f/0x90 [ 167.974079][ T4331] x64_sys_call+0x2638/0x2ee0 [ 167.974111][ T4331] do_syscall_64+0x57/0xf0 [ 167.974142][ T4331] ? clear_bhb_loop+0x50/0xa0 [ 167.974175][ T4331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.974204][ T4331] RIP: 0033:0x7f56e7f5cfce [ 167.974223][ T4331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.974251][ T4331] RSP: 002b:00007f56e8e21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.974276][ T4331] RAX: ffffffffffffffda RBX: 00007f56e8e226c0 RCX: 00007f56e7f5cfce [ 167.974294][ T4331] RDX: 000000000000000f RSI: 00007f56e8e220a0 RDI: 0000000000000005 [ 167.974310][ T4331] RBP: 00007f56e8e22090 R08: 0000000000000000 R09: 0000000000000000 [ 167.974325][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.974339][ T4331] R13: 00007f56e8216038 R14: 00007f56e8215fa0 R15: 00007ffcb3e2f048 [ 167.974360][ T4331] [ 169.127402][ T36] kauditd_printk_skb: 8664 callbacks suppressed [ 169.127421][ T36] audit: type=1400 audit(2000000060.540:63552): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.154819][ T36] audit: type=1400 audit(2000000060.540:63553): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.157343][ T781] Bluetooth: hci0: command 0x1003 tx timeout [ 169.175960][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.188038][ T36] audit: type=1400 audit(2000000060.540:63554): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.220971][ T36] audit: type=1400 audit(2000000060.540:63555): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.238923][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.243189][ T36] audit: type=1400 audit(2000000060.540:63556): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.252474][ T150] audit: audit_lost=211 audit_rate_limit=0 audit_backlog_limit=64 [ 169.271264][ T36] audit: type=1400 audit(2000000060.540:63557): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.278068][ T150] audit: backlog limit exceeded [ 169.305299][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.156335][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 174.135753][ T36] kauditd_printk_skb: 11801 callbacks suppressed [ 174.135772][ T36] audit: type=1400 audit(2000000065.542:75330): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.173911][ T36] audit: type=1400 audit(2000000065.542:75331): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.196819][ T36] audit: type=1400 audit(2000000065.542:75332): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.217035][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.220358][ T36] audit: type=1400 audit(2000000065.542:75333): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.225027][ T150] audit: audit_lost=222 audit_rate_limit=0 audit_backlog_limit=64 [ 174.247826][ T36] audit: type=1400 audit(2000000065.542:75334): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.253896][ T150] audit: backlog limit exceeded [ 174.276802][ T36] audit: type=1400 audit(2000000065.542:75335): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 174.285997][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.690124][ T4357] syzkaller1: entered promiscuous mode [ 176.695930][ T4357] syzkaller1: entered allmulticast mode [ 177.918848][ T4399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1569'. [ 178.297989][ T4414] syzkaller1: entered promiscuous mode [ 178.312099][ T4414] syzkaller1: entered allmulticast mode [ 179.149784][ T36] kauditd_printk_skb: 9964 callbacks suppressed [ 179.149804][ T36] audit: type=1400 audit(2000000070.554:85298): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.183423][ T36] audit: type=1400 audit(2000000070.554:85299): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.204992][ T36] audit: type=1400 audit(2000000070.554:85300): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.227242][ T36] audit: type=1400 audit(2000000070.554:85301): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.264788][ T36] audit: type=1400 audit(2000000070.554:85302): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.299759][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.307600][ T4446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.314692][ T4445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.316572][ T150] audit: audit_lost=224 audit_rate_limit=0 audit_backlog_limit=64 [ 179.321230][ T4445] audit: audit_lost=225 audit_rate_limit=0 audit_backlog_limit=64 [ 179.962133][ T4470] netlink: 'syz.0.1596': attribute type 13 has an invalid length. [ 183.822666][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 183.856012][ T4582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4582 comm=syz.3.1640 [ 184.150943][ T36] kauditd_printk_skb: 9395 callbacks suppressed [ 184.150968][ T36] audit: type=1400 audit(2000000075.566:94529): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.179443][ T36] audit: type=1400 audit(2000000075.566:94530): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.201408][ T36] audit: type=1400 audit(2000000075.566:94531): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.223652][ T36] audit: type=1400 audit(2000000075.566:94532): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.246285][ T36] audit: type=1400 audit(2000000075.566:94533): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.269896][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.271620][ T36] audit: type=1400 audit(2000000075.566:94534): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.280819][ T150] audit: audit_lost=282 audit_rate_limit=0 audit_backlog_limit=64 [ 184.298770][ T36] audit: type=1400 audit(2000000075.566:94535): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.326884][ T36] audit: type=1400 audit(2000000075.566:94536): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 184.376312][ T4596] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 184.746716][ T4617] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 184.755202][ T4617] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1655'. [ 184.865641][ T4623] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1657'. [ 184.876848][ T4623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4623 comm=syz.0.1657 [ 185.550336][ T4639] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 185.558418][ T4639] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1664'. [ 189.168729][ T36] kauditd_printk_skb: 8456 callbacks suppressed [ 189.168751][ T36] audit: type=1400 audit(2000000080.568:102980): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.225527][ T36] audit: type=1400 audit(2000000080.568:102981): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.228616][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.255585][ T150] audit: audit_lost=287 audit_rate_limit=0 audit_backlog_limit=64 [ 189.268262][ T150] audit: backlog limit exceeded [ 189.274239][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 189.278827][ T36] audit: type=1400 audit(2000000080.568:102982): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.285766][ T150] audit: audit_lost=288 audit_rate_limit=0 audit_backlog_limit=64 [ 189.305351][ T36] audit: type=1400 audit(2000000080.568:102983): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.312403][ T150] audit: backlog limit exceeded [ 193.142515][ T4801] netlink: 'syz.2.1734': attribute type 10 has an invalid length. [ 193.151401][ T4801] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1734'. [ 193.546929][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 194.176912][ T36] kauditd_printk_skb: 10453 callbacks suppressed [ 194.176932][ T36] audit: type=1400 audit(2000000085.591:113437): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.205795][ T36] audit: type=1400 audit(2000000085.591:113438): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.227750][ T36] audit: type=1400 audit(2000000085.591:113439): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.249761][ T36] audit: type=1400 audit(2000000085.591:113440): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.263612][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.273396][ T36] audit: type=1400 audit(2000000085.591:113441): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.277920][ T150] audit: audit_lost=289 audit_rate_limit=0 audit_backlog_limit=64 [ 194.300699][ T36] audit: type=1400 audit(2000000085.591:113442): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 194.306555][ T150] audit: backlog limit exceeded [ 194.334100][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.508013][ T4830] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 194.515963][ T4830] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1747'. [ 195.537601][ T4852] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 195.545444][ T4852] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1758'. [ 196.747624][ T4881] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 196.756404][ T4881] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1770'. [ 197.515769][ T4904] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 197.524136][ T4904] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1779'. [ 197.639809][ T4908] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 197.651324][ T4908] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 197.679263][ T4908] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.1781'. [ 198.326381][ T4927] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 198.334864][ T4927] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1788'. [ 199.185637][ T36] kauditd_printk_skb: 10174 callbacks suppressed [ 199.185657][ T36] audit: type=1400 audit(2000000090.603:123561): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.228245][ T36] audit: type=1400 audit(2000000090.613:123562): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.250597][ T36] audit: type=1400 audit(2000000090.613:123563): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.273366][ T36] audit: type=1400 audit(2000000090.613:123564): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.295606][ T36] audit: type=1400 audit(2000000090.613:123565): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.309321][ T4951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.320999][ T36] audit: type=1400 audit(2000000090.613:123566): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.326054][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.347796][ T36] audit: type=1400 audit(2000000090.613:123567): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 199.351265][ T4951] audit: audit_lost=309 audit_rate_limit=0 audit_backlog_limit=64 [ 199.439738][ T4954] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 199.481302][ T4954] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1799'. [ 199.944219][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 200.051370][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.058568][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.080112][ T4967] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 200.103065][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.700447][ T4980] netlink: 'syz.3.1810': attribute type 10 has an invalid length. [ 200.720446][ T4980] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1810'. [ 201.875238][ T5004] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1820'. [ 202.103293][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.103485][ T781] Bluetooth: hci0: command 0x1003 tx timeout [ 202.117935][ T306] vlan0: left allmulticast mode [ 202.144923][ T306] veth0_vlan: left allmulticast mode [ 202.150262][ T306] vlan0: left promiscuous mode [ 202.193327][ T306] bridge0: port 3(vlan0) entered disabled state [ 202.200361][ T306] bridge_slave_1: left allmulticast mode [ 202.213211][ T306] bridge_slave_1: left promiscuous mode [ 202.218950][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.243889][ T306] bridge_slave_0: left allmulticast mode [ 202.249561][ T306] bridge_slave_0: left promiscuous mode [ 202.261476][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.416628][ T306] veth1_macvtap: left promiscuous mode [ 202.422224][ T306] veth0_vlan: left promiscuous mode [ 203.428937][ T5027] netlink: 'syz.2.1829': attribute type 10 has an invalid length. [ 203.437416][ T5027] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1829'. [ 204.085488][ T5034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1832'. [ 204.193618][ T36] kauditd_printk_skb: 9277 callbacks suppressed [ 204.193639][ T36] audit: type=1400 audit(2000000095.615:132800): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.238940][ T36] audit: type=1400 audit(2000000095.615:132801): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.256860][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.262707][ T36] audit: type=1400 audit(2000000095.615:132802): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.267161][ T150] audit: audit_lost=325 audit_rate_limit=0 audit_backlog_limit=64 [ 204.290090][ T36] audit: type=1400 audit(2000000095.615:132803): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.296125][ T150] audit: backlog limit exceeded [ 204.319756][ T36] audit: type=1400 audit(2000000095.615:132804): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.327798][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.347302][ T36] audit: type=1400 audit(2000000095.615:132805): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.668866][ T5055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19798 sclass=netlink_route_socket pid=5055 comm=syz.2.1838 [ 205.685724][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 206.571029][ T5062] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1841'. [ 209.200580][ T36] kauditd_printk_skb: 11728 callbacks suppressed [ 209.200601][ T36] audit: type=1400 audit(2000000100.627:144487): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.229111][ T36] audit: type=1400 audit(2000000100.627:144488): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.250863][ T36] audit: type=1400 audit(2000000100.627:144489): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 209.285644][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.292316][ T150] audit: audit_lost=342 audit_rate_limit=0 audit_backlog_limit=64 [ 209.298116][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.300146][ T150] audit: backlog limit exceeded [ 209.312440][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.315947][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.318972][ T150] audit: audit_lost=343 audit_rate_limit=0 audit_backlog_limit=64 [ 211.322110][ T5095] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 211.349361][ T5095] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1851'. [ 214.208472][ T36] kauditd_printk_skb: 12461 callbacks suppressed [ 214.208491][ T36] audit: type=1400 audit(2000000105.639:156946): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.237115][ T36] audit: type=1400 audit(2000000105.639:156947): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.258852][ T36] audit: type=1400 audit(2000000105.639:156948): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.280614][ T36] audit: type=1400 audit(2000000105.639:156949): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.290163][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.317810][ T5104] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.331826][ T36] audit: type=1400 audit(2000000105.639:156950): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.337772][ T150] audit: audit_lost=346 audit_rate_limit=0 audit_backlog_limit=64 [ 214.353098][ T5104] audit: audit_lost=347 audit_rate_limit=0 audit_backlog_limit=64 [ 214.369353][ T5108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.018469][ T5117] netlink: 'syz.1.1861': attribute type 10 has an invalid length. [ 216.039178][ T5117] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1861'. [ 219.216223][ T36] kauditd_printk_skb: 12280 callbacks suppressed [ 219.216253][ T36] audit: type=1400 audit(2000000110.641:169170): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.244656][ T36] audit: type=1400 audit(2000000110.641:169171): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.266495][ T36] audit: type=1400 audit(2000000110.641:169172): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.288244][ T36] audit: type=1400 audit(2000000110.641:169173): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.304396][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.311706][ T36] audit: type=1400 audit(2000000110.641:169174): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.316050][ T150] audit: audit_lost=368 audit_rate_limit=0 audit_backlog_limit=64 [ 219.339172][ T36] audit: type=1400 audit(2000000110.641:169175): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.345449][ T150] audit: backlog limit exceeded [ 219.368236][ T36] audit: type=1400 audit(2000000110.641:169176): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.549876][ T5138] netlink: 'syz.2.1871': attribute type 10 has an invalid length. [ 221.557789][ T5138] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1871'. [ 223.907131][ T46] bridge_slave_1: left allmulticast mode [ 223.912820][ T46] bridge_slave_1: left promiscuous mode [ 223.930541][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.951331][ T46] bridge_slave_0: left allmulticast mode [ 223.964106][ T46] bridge_slave_0: left promiscuous mode [ 223.969751][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.138882][ T46] veth1_macvtap: left promiscuous mode [ 224.144480][ T46] veth0_vlan: left promiscuous mode [ 224.224432][ T36] kauditd_printk_skb: 11561 callbacks suppressed [ 224.224449][ T36] audit: type=1400 audit(2000000115.653:180693): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.276392][ T36] audit: type=1400 audit(2000000115.683:180694): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.308624][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.315512][ T150] audit: audit_lost=384 audit_rate_limit=0 audit_backlog_limit=64 [ 224.323428][ T150] audit: backlog limit exceeded [ 224.328375][ T36] audit: type=1400 audit(2000000115.683:180695): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.352632][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.360149][ T150] audit: audit_lost=385 audit_rate_limit=0 audit_backlog_limit=64 [ 224.370206][ T36] audit: type=1400 audit(2000000115.683:180696): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.391428][ T150] audit: backlog limit exceeded [ 224.564270][ T46] ------------[ cut here ]------------ [ 224.569790][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 224.579760][ T46] Modules linked in: [ 224.583706][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 224.595324][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.605430][ T46] Workqueue: netns cleanup_net [ 224.610244][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 224.616277][ T46] Code: e8 31 86 d9 fc 4b 83 3c 3e 00 75 19 e8 55 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 47 59 81 fc 49 83 c7 08 eb c9 e8 3c 59 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 224.635932][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 224.642042][ T46] RAX: ffffffff85064f64 RBX: ffff88812593ea80 RCX: ffff88810b66b900 [ 224.650064][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bac1e0 [ 224.658114][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 224.666140][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: dffffc0000000000 [ 224.674161][ T46] R13: dffffc0000000000 R14: ffff888103bac000 R15: 00000000000001e0 [ 224.682187][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 224.691190][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.697840][ T46] CR2: 000055e8769fa328 CR3: 000000011e1b2000 CR4: 00000000003526b0 [ 224.705871][ T46] DR0: fffffffeffffffff DR1: 0000000000000000 DR2: 0000000000000008 [ 224.713894][ T46] DR3: 000000000000a1a1 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 224.721892][ T46] Call Trace: [ 224.725219][ T46] [ 224.728178][ T46] cleanup_net+0x6bd/0xc90 [ 224.732639][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 224.737690][ T46] ? __schedule+0x1357/0x1ea0 [ 224.742546][ T46] ? kick_pool+0xb9/0x550 [ 224.746973][ T46] process_scheduled_works+0x7d1/0x1020 [ 224.752573][ T46] worker_thread+0xc70/0x10b0 [ 224.757324][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 224.762553][ T46] kthread+0x2c6/0x370 [ 224.766675][ T46] ? __cfi_worker_thread+0x10/0x10 [ 224.771823][ T46] ? __cfi_kthread+0x10/0x10 [ 224.776463][ T46] ret_from_fork+0x67/0xa0 [ 224.780921][ T46] ? __cfi_kthread+0x10/0x10 [ 224.785582][ T46] ret_from_fork_asm+0x1a/0x30 [ 224.790394][ T46] [ 224.793434][ T46] ---[ end trace 0000000000000000 ]--- [ 224.800158][ T46] ------------[ cut here ]------------ [ 224.805664][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 224.815756][ T46] Modules linked in: [ 224.819665][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 224.832730][ T46] Tainted: [W]=WARN [ 224.836569][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.846754][ T46] Workqueue: netns cleanup_net [ 224.851558][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 224.857700][ T46] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 f2 58 81 fc 49 83 c7 08 eb c5 e8 e7 58 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 58 81 fc 5b 41 5c 41 5e 41 [ 224.877373][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 224.883469][ T46] RAX: ffffffff85064fb9 RBX: ffff888103bac800 RCX: ffff88810b66b900 [ 224.891490][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103bac808 [ 224.899520][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 224.907543][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: dffffc0000000000 [ 224.915566][ T46] R13: dffffc0000000000 R14: ffff888103bac000 R15: 0000000000000008 [ 224.923569][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 224.932562][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.939201][ T46] CR2: 000055e8769fa328 CR3: 000000010b39e000 CR4: 00000000003526b0 [ 224.947227][ T46] DR0: fffffffeffffffff DR1: 0000000000000000 DR2: 0000000000000008 [ 224.955259][ T46] DR3: 000000000000a1a1 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 224.963261][ T46] Call Trace: [ 224.966613][ T46] [ 224.969561][ T46] cleanup_net+0x6bd/0xc90 [ 224.974041][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 224.979030][ T46] ? __schedule+0x1357/0x1ea0 [ 224.983772][ T46] ? kick_pool+0xb9/0x550 [ 224.988138][ T46] process_scheduled_works+0x7d1/0x1020 [ 224.993764][ T46] worker_thread+0xc70/0x10b0 [ 224.998525][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 225.003803][ T46] kthread+0x2c6/0x370 [ 225.007902][ T46] ? __cfi_worker_thread+0x10/0x10 [ 225.013049][ T46] ? __cfi_kthread+0x10/0x10 [ 225.017731][ T46] ret_from_fork+0x67/0xa0 [ 225.022188][ T46] ? __cfi_kthread+0x10/0x10 [ 225.026855][ T46] ret_from_fork_asm+0x1a/0x30 [ 225.031658][ T46] [ 225.034747][ T46] ---[ end trace 0000000000000000 ]--- [ 225.045461][ T46] ------------[ cut here ]------------ [ 225.050956][ T46] WARNING: CPU: 0 PID: 46 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 225.060399][ T46] Modules linked in: [ 225.064343][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 01ee1fe7718a1a23130276f3878b30f131ac2da4 [ 225.077442][ T46] Tainted: [W]=WARN [ 225.081262][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.091354][ T46] Workqueue: netns cleanup_net [ 225.096172][ T46] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 225.101754][ T46] Code: 3c 20 00 74 08 48 89 df e8 2f 50 f4 fc 48 8b 3b e8 97 78 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 cc b7 00 cc e8 42 23 9c fc <0f> 0b e9 b0 fd ff ff e8 36 23 9c fc 0f 0b e9 18 fe ff ff e8 2a 23 [ 225.121512][ T46] RSP: 0018:ffffc900002ffb70 EFLAGS: 00010293 [ 225.127692][ T46] RAX: ffffffff84eb855e RBX: ffff88812593ea80 RCX: ffff88810b66b900 [ 225.135726][ T46] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810b66b900 [ 225.143749][ T46] RBP: ffffc900002ffb98 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 225.151753][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: 1ffffffff0fa6d60 [ 225.159773][ T46] R13: dffffc0000000000 R14: ffff88812593f680 R15: dffffc0000000000 [ 225.167798][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 225.176792][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.183405][ T46] CR2: 000055e8769fa328 CR3: 000000010c7c4000 CR4: 00000000003526b0 [ 225.191443][ T46] DR0: fffffffeffffffff DR1: 0000000000000000 DR2: 0000000000000008 [ 225.199480][ T46] DR3: 000000000000a1a1 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 225.207664][ T46] Call Trace: [ 225.210959][ T46] [ 225.213929][ T46] xfrm_net_exit+0x31/0x80 [ 225.218373][ T46] cleanup_net+0x6bd/0xc90 [ 225.222823][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 225.227813][ T46] ? __schedule+0x1357/0x1ea0 [ 225.232617][ T46] ? kick_pool+0xb9/0x550 [ 225.237007][ T46] process_scheduled_works+0x7d1/0x1020 [ 225.242603][ T46] worker_thread+0xc70/0x10b0 [ 225.247356][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 225.252592][ T46] kthread+0x2c6/0x370 [ 225.256729][ T46] ? __cfi_worker_thread+0x10/0x10 [ 225.261887][ T46] ? __cfi_kthread+0x10/0x10 [ 225.266547][ T46] ret_from_fork+0x67/0xa0 [ 225.271016][ T46] ? __cfi_kthread+0x10/0x10 [ 225.275660][ T46] ret_from_fork_asm+0x1a/0x30 [ 225.280471][ T46] [ 225.283544][ T46] ---[ end trace 0000000000000000 ]--- [ 225.334165][ T46] bridge_slave_1: left allmulticast mode [ 225.339848][ T46] bridge_slave_1: left promiscuous mode [ 225.363520][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.370989][ T46] bridge_slave_0: left allmulticast mode [ 225.383482][ T46] bridge_slave_0: left promiscuous mode [ 225.389124][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.498099][ T46] veth1_macvtap: left promiscuous mode [ 225.504154][ T46] veth0_vlan: left promiscuous mode [ 229.232007][ T36] kauditd_printk_skb: 11031 callbacks suppressed [ 229.232025][ T36] audit: type=1400 audit(2000000120.665:191329): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.260711][ T36] audit: type=1400 audit(2000000120.665:191330): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.282273][ T36] audit: type=1400 audit(2000000120.665:191331): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.303416][ T36] audit: type=1400 audit(2000000120.665:191332): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.325208][ T36] audit: type=1400 audit(2000000120.665:191333): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.339590][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.348550][ T36] audit: type=1400 audit(2000000120.665:191334): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.353333][ T150] audit: audit_lost=519 audit_rate_limit=0 audit_backlog_limit=64 [ 229.376047][ T36] audit: type=1400 audit(2000000120.665:191335): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.382263][ T150] audit: backlog limit exceeded