last executing test programs: 35.761640342s ago: executing program 2 (id=851): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x3, @win={{0x9, 0x8001, 0xb, 0x2}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) 34.537700349s ago: executing program 4 (id=855): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', 0x0, 0xa25436, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc81fec117070b98e80e0a320b181ce8d00c174c2376f1fea6d6b073b73a76fb67914798ce622cbefd9a4e7b04d1616c96014a6df257b916e53a848ad10233cfd5ffde3c7aa01bfe75b39f97874fa59a203c2e2a35d427c34beb3ba2e8132ffa6e9bbbe9d981660f02afc26beec7848009c8a820763f138204445d36eabd6c87eaabfbe90c8ad0293b80f274f43"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r6, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = getpid() openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x4000000) 33.899595426s ago: executing program 1 (id=860): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000007c0)='{\xe0e%m\"\xbb{\xf4\x01Z\xb7\xf4\x92\xb5\xcb\'\xa3\x0e!\xf1\x88]C\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x02\x00\x00\x00\xc3Dhx\x04\xd8\x17\xbcP\x8bl\xb2\x03\x18!V\x1b\xcbk\xf8\xd6JE4,\xdf\x96\x80j#\xf9\xd8\x13,\x89\x10\x90:\xec/\xb9T\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r5, 0xb) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) 33.771332094s ago: executing program 2 (id=861): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x8, 0x25, 0x0, 0x3f, 0x90d, 0x7, 0x0, 0x2, 0x3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x2400c080) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 33.194456575s ago: executing program 3 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006484ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) (fail_nth: 4) 32.654179033s ago: executing program 2 (id=863): r0 = syz_open_dev$sndctrl(&(0x7f0000000880), 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000ac0)={0x3, 0x1, 0x8, 0xffffffff, &(0x7f00000008c0)=[{}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x20, 0xc, 0x95, {0x95, 0x4, "60967c697104aeac93d4a926e23c080a215241acefd3e963d7a800369906a7d7618d3ac43aaf258842fbf63be6e60f7ea83dad95e7ca3722e55d490befb8b9fba4884eb467d3aa9a9875666b05231d348d9e6734647285b08be8f14c45550911c51795bbdd37f0a24cf8362a6ebabeb5a90bd315f0c9644995fd2c2a785e4baa65dbbfbd940d66383f964b14d21edae684934d"}}, &(0x7f0000000000)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c669ebb38110791b82"}}, &(0x7f0000000180)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0a372e7e237f0fa8fdbcbf2315618b5c"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x4, 0x6, "103edd97", "fc6af9b2"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x4, 0x0, 0x5, 0xfff9, 0xa6b}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x0, 0xa, 0x26, "96efa9fc758cb360f26cc14447babafaa4eebe733f2afe2570ae410b9d0296e1781c70fa3c44"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "d4c0"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x19, 0x2, "cf0f"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0xc3}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xab}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 31.998160055s ago: executing program 3 (id=864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r3 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000040)='cgroup\x00') syz_fuse_handle_req(r9, &(0x7f0000000ac0)="74fca81a094e5eff20e5a35163dc087f600365763c07eff45b001f6e966b3f0aff6858516b180faecd528e20d5ee362d5f85720e001df2b5bacea1d82c9be600fa0bcfacb12b7de4fb2750ae0f79a0d83e14279c38a5f2b4b153a3f912fe6b9c8af6c636e640676f979681d948f76df02ce0c462485a84b14a7617ff56cfd79b98d143a4dea1ad223d9d41b373666272d261033eed1694743d1573333a0156576d59557c720241af7d7ab0cb2ab63c80a7ac3b4145eb7300367c185bdf1e7685b36c0fe98a72408ce9b30cd351c7f26123e90c1c349cefc6ebb6489b64e145acd005c2b11ff0f8028629c631b8267cc35f519196e9395f5847f4a35f491c1a7f7846f789aabeb19b1061561bf9b7185588bc81a6a6b1c27dc0ca2e052308941557bc014c85d5511206301c5b247ba2bb9824add742f4b68c92974aa5dd8e91743071e096b44a028e69a2d11320a841d547c2198dcc39106dd588695f0db772e2323bb75859d85e5404aa6fae75afd0c7604b3e9a3c908426787ad595d2ec80fc576c672e06442561c07f5d63a216ffb1d3066e749f4405202e7786025346b5269acc39169d5c6417fc4c20091c449ca28325ca170ce8eb1bf9acfc5aff2dff8469a54ae2497378952e5b8e960474cd550e91e73d5e487cf0d6797a189b7caf7a01b66b8f2d740b6b3acd326fd6ef2c9d93e2dfffada050822890f63ee1d293f8afb85568b42461ba182f09635ae8af78b71f0385de02cec76efd3f80c5fbe76611843975575a4464cfd77b80a9640c03d5351b3519e25d3956ecb8d6c07862b1de6bb3a552b70289b4f46ca02cfa7c4daba5ca6e7ca245dc62a3f2c78c5bc4b6d2f0dc22dc2b38315378d9cd3b1637d2e698b1f36049cdb9552318051ab4bad02fb99caab24c3f5278079aaa83081adf81ca7b674bf9f9e030615889ff8916f9bca3b320a01d2901477e25957cf41ff33ac16871bc8f11156aa046320888e02798495cb058745782b17a8545516c1d2b652d07923dce25c20b455ae565dc0f66265236c5de0b6bba8e182ded7efeef82dc05f559a6c2e84981ad006c712d4799f6e85f5102ee4fcefdd85c20f51e533aa4eafa9b5328259837318be982d06e63e5c6088df81e8fb87b7ad09147b85c0a4f1ea16e1147212f1b1772e061ee11dd0998e73b2611e5e4631c1e71fd3c3cc20370029cdeb20f4a7e5754b5bd4679f594a32e742d2e3e553eb9bfeb7ea5b14d73539682d49fa8f8fb817dfcd5cf2b8e8ee7e437c8b15bd3e9717f3c80bc6f52f4dc91de9f68d9d1e9c3ad7839157d4b5162612fb14d87638202757832415f5ebbd5317f59b08bfe89b1dd334deed7512ff11ac24a1ae315bfd94ebbe2d8504173d7e49941dc9ad0fd86105732d2697597cc5b0ed66230e64169a9fdfc648de36c95c7d60ae32c9931151b81343324894e151b92b50ad9e495a1b71db00ecfcabfc0006b39ed09497afa325b4df4a3bce0eecd430ecbbd54f4c6c7905d4f267cf5cc0367d5740f6632f6926c0ef6325ec1bbaecee21cb25bfd4d8749cf8e8ba4c0e89794db76940d74595bff439034eb7a58d8b7c13f6d287987bbaf9d6cbf301497280d77fbf5ac527e3985e7660bc2d1adc8eddd180477d076012661e1d300c4aa1dfd1926eab1c0a2483fb5e36e4ebea882e395a1f28ec65664d973b66328f01cd0ddd2f62aea0775c901d4f6f7314e97f80dab92e1de77637e194984c1bdeae1e57a0b17d33839d8df696f9ca880fa0f8197e6802e13d7983193604cb2eb3f1233a707d04361489af3a886135e4a861fb567f333e4741757aa977653275f4bb687d721c7204384dbd4c0a6913668141b7158df916fbac4003f84c86b1f09eae8800a12348dc9994eab2c6c6db64dce2b92e172412f9e7e5fe4116afd790f64b6155491ca653309febaf9761628828d1f3a99822b4492e6d179501e96cbd9d674f32cdfe7d8a45904703d800cd0a4f61c24202c06b471262310803d44715be0721bda34fe481f8f4356631573bfdc98abe6430ffe0a4dcede13457cf2a672bec0446096a5eb70e51b0b2120ecabf7cc1f90fd0c104c69a3c76048a786446a84e41accad538bdc60f56054e9741250a5ce18ad2b66ebbdaab8156026dfef9d5d8bed2000bf5218d785116ba9dd98044da042e5f58f33c563bd1325e9e5711920b79f0f177e326e26f58af7864da556516579d1f105dce01dd396b798f6d2a93ff9b4b2357a616d41d458715631e0b7d545f6576d431acf32434ca791fa5122e295019cc59eda61b399e119448f86c7258049cb5e6aaffad5c11b6a0745e1e7438e8a74868b75bf8c192cc745c153acc7a3b802f89d3bcc6b2094ce8da688c571fa84fa953c6ce667b98f1e7770a332178e41fdf6e75a456c178c25f1a0187fc5303fc2baa30c7fa62ade57d6b1dd20cb977806a004ce65f7a1caa98edf1cbf8ef42c08f902bd9fe7dd4c48aeb34815184dd2f8e5b1cb5b52611cc136bc75d6fac2cb31d41618ab60f3f8ca44952dad45df6f83c1f24d186f3b5f84210c0689201e7e15dc1f793b3a2dbfe71ce117c0b119c54aa1f95da9d1a40ed47c470b8f3836df84e9c53d16b8fd3d06544176cdb8c1909a33648e39057368b9be091c1fca09edfe27b0a4626925ebd3bbef44d74298fcf5d0aa13f2b85e31586c6cefd27eac576a927eae34d5aa81c2fb3daef502b4e66a05f64639bfcc9df53264ca3d9448adcb368666d41b174d013c43f357f104dcf63cc4daea464ccafa1cf07f07e92ce2d2c75c1b63432610023c1923a69effc9c1edfe35f250207bfdeea18ab395bec457ed78a9276968de4ab65e8413dcb314580ead73e4c3f75e8a8c1f0e2988332707f62dd05b9ea9c53135f5980e82e006da30de63e78a733974bdea07ec6e8a3f0629ad6233337b5d7f70cc04d3a8b11c8a2629881d029b75666d604c9ba5cbe6739e2dd5bd9f31f9f8488f98b05e50e40bebd483e8cfcd5e63e543ded359a6e1905a857d65be16de1197570d6abf0cefe28d5a76071f7c4bd5b92c09658fe2a81473021839e84356b7a612c24137f77e496f6f5fcc076c6119b8cee7eeefb7671ce56763870d183df426121ca0838b9f1a0e5055991767bfdffb8d66d6ecf2a1a19516258e8427650f8aa3b8a58732f7413d7757f1245f9117481e01663429734f4d63bdc20b7de7c0be414e52564ec1bcf428441448fe376bf03e23f60d60aeaa947a93db9d5216d6fb305226b7c9301eee50733d722acfb6d24d755d3ec1a2c07e3c5e0a1168cb0f259a0bd284e690df0af8125ad4fe25eb5f8c8c93c7d5b9158ce3c96ffb4fe42419b67664e977c3cb246a89281fbbf22fb4be6692732982b8210480e3dbc798a2f913f123b2c82aa383a79eeca01d9a001e9ee02d883e22cc010795b135de6468b7d0ecba7e552d4a0dd0ace9def717d2ffb1a2fa77177b670fad8517c94572b55b2f9b9faf7f529a8073a068fb75d1fcfe4332e6aa7189c6cbb2b2bfbf033b7ace4064a96fe9e8714ba809deedb580d17b7a753652df9d8ac0ebab2c9ba5228d55f613041a1b947946939c7d8ea9721a25897fe29a0419f7425bfd602b96ff73afe39515fbea57ea6e6f65da27684d32c77a373c539a9bf87b0ab4b764822d0bd0f5f4135d078290bfb42fae2b8c66b9b1b04ea091483e7d58b31f7cc3b248db49e4a06847dc2ec7c3ffc78c6759d9714328dffe97117fbaf9f5c527d1e4ec28254ccce8737904b29784eb0a57153c558d00ff5faef2cf5451e6dbd267fd9d0acd227189dea4c848f58a25984caa44d2c9036c918664c8cc77e38e4b1ad7ef60619762004b5c22673c929555e427a857f93903f4469010ac20fdd95f7eda8669530baef2f29a53172141bad23c0ad9f4a6d7a5f48b17fe5b7464e2f122436d26e43ebbac2dd0280cf91fb8b399fdbfda5b3ce403bb823779e0a91ba996cc9e992d412a036d3a1f284897f415c7ea75fb0015ba82089c8cec0194feea028c78d7d57f20bf6e4bdbd86fd2fbd816f69a7529d15b283dd157cff47c763a2c134d24fbff02a5ef520432a59cc7687bfb1e38196ddbaec9f586c34257da65df7d30d4a1964e97c7c82f6e0b6c333752a09bbe769aaa0aa9163a83eff58ffd73222561f098d284463ed1da4c6341afd08ce9fc9759b6385e97ba542bbffa20e731ce5e893f6755094a2fec36000bad060d07a31ec72ad52acd15436bbc75711d7ccaa16bea5db5bd70349354beea7a7d19daa507343936301566551eb7f2efb0a07391c493922349b9610b2c204dc0e93a156cd7873932c3a93837b97f3681f80bb31a0af6dc94820e1db8ed8112161f68c99cdd5f27d574f701eadbfb57b3190264433b65bf296cf00ed8950a72eb9f825ef3524ab5729e0bd59cc41bff967e3883ef6b3dd67644d14a9e6390fa05e49f2d72ae7ae29daa094a468ea3fdf3fe7b6ecd1caf82d69820e0f533a83102cd2caff74fd9d2a23163c0aa78c02498ba7fac6cb36aae07122ca7f9371ea4bb8ad9dbd6123e3964cc84bb298e6be00462186732e137c2fd158d5f7d54f34b617ac1a21286683eff66880429e2fb28dd91f3352cf0ebb09d4f2f80acc856c7cd8659d157a26b490ba88cc4857a2f9051781b23a7c878bd17dbf85d5cdf444f3f9af5733c94302518871185d9eeba6b6797d89b77043987848fe61074ca4fd51ba9a162ac540deb222493ba3db6c6e091f0a6d11da78b521a70c70e222b95cd93bef3f70b1be05a4a406a4b823c77fc952e0ca842310df7e343c718cfbb7cce98943e13df2c504091f87b4b2b477e3a91d182385bb4d97e50d8c93192de82b8c5dd73766fe3d6328a73240de1893192338e46048476709841ed0d3c307c73983b8e54f5d63e0f92ebd96afc9b76ae59d1ced7fed6d614e428b6d0b761c656d45bff815181a0bce68bf29c50a2d42f582adeaa9643a9d5ff06c796f6109615337b7e2cb2abc69bf659b489b270a258543befabbbc2f075ef904a796710e9bbdf61de6118bb017eb11caf964d891cd96437706953fc7bfc862e62b7febbdafa6772749f7cba3f2e0fb252a4297c3140c1f2977343cd96b1c3a89359270efca0405eaacb4bd851e0c2822fd71c2dda1e857e343184bb9ead04a304a27678a38938e5cf447980c96b40bb8d7bffd24ef2fec6a347591ed608e4c3a0153338ac5a945af99a1f16bbdbaff247d9b30c8e3536d1c842b7b1d5a2009f7a81fca2ecfc1c32b5ec3956cf2ce2374dc3a9014b7c0a1774124460141485d6bd23085f2c71b33d70fc4aad51b9b28e3101174504c349d3d66e4e6e3122937eabd391834a063126578ea1e61c7c77316988406fd0baaeeefb2a98651575a309865c82e98e4613de15cb82cd0029d9bb1505a3f57cc9c041794694f9f3c37bc6a90f13a17c673adff8127cd965b9fbecb667e0e0b703d7f965aacb6da5efcc5ee1d351f2d3f80d474b69cbe539e0bd6b3558dea13e8df2b879ce7313500ef89e7b8d33fc71295d1f73a76d18ecc3c68cb5897c65330ff1d0be6abc7db951efcfa19df0c921230da76706f3ad2cc12b09565a53eafe8deb8500cbb7c6a20df61fba56fcdfa25bc9f4c4bf4dd3922fed400ac604391ae9924b3f5e2f6b63c61026fe6592657d19149f5588f270b155a67d52084e50dd670285c0a957fe87cf098a576394f6c8bd8827464cdd324563ad06a3b8b41bb5dd3ac06c5b131856b4bd653ea6b9bde369f53d42f001d775a8607c7382f7f897e817e1b614a259e2e552908ccc676a4b5124c0c2cbc834b6d94f6d62f9b1e8d0d59219898e5625ae65bfc382ad7876f6eb7e5526185592089c4980e89343f34a2734fdf3062bbb5a287007e59c69c75c1deed01991897491012aa834c81750d5d660ce88c6a3e91573f22843b34456609a82656f3a24fbabc9034174cb1a2209e215a51baad48a5fef69bf627d69508a3fec96504ba308a7648f26f6d784d6fd27d9fd25497bec8196d2f1e3803ea8c253ce6190b8def9d6a3819da1fe37e0587be0b7e6aea6c879961846938640fbaa72c1fc1fdfbf12da36c251640b70222cfe8e5069fefeb2d545022888a05ba118d20fefaca6b2e24538ec0a28e8a70439ed81694f875116ebfa7f1e9f7ce224694b2588dd00c1f41295738491a4126c2d9424fa2e113af9574957fa41f47dfbef02fce9a82b7472a12696294bc31c4831a4d97a80bf7d6b07aba5cfdc6b7cd23a5d0549c976d42ce534e3860d8891e6911c5e6817ad8a7c380cc8d4b7486993b710b559e004a009a3115fa8902494fc593794e8103aa7caeb7728e415c5bded1b172a610fe7900d6a1c5b9e17411fa7dd7cf76564c35ff417a0030ab42ad3f5ff5b474ca4936168b04722887a5fe672b7b3238dcc4c36984ac673233b92c75904652347bdda5cd289a59f6fa0e7703f8996f7c1c8d7a6621fd1557da860eb127df5f35310b7d190e2c2860cee8dd9768aaa1d4e4edc1116a9555eea70ba4e241e4d8dd7f141f7036b9178d126eeccbf8b6cd0e53134ff48c41b20cbe7259adb29b6bb6b470c437f5d044ffbb3f51032d829c26845bb44ca275f8bd5cf0480ffb226e11c6a8296f31368281851d46314ba523ebb5d6ccfb61237c5705374f2dd37b5dd2134dfe24056877a2bcd68313a694a2a3fe8362a4f6e62d4e256089b8ae8d88dba0066cdb06634f8107858b907144f141e683ba3eb35db24403b80097bc5cc4d11f7ee38f1f6424837d2cb7aa9cc6029d013487c77dba270663bbfb6460c3a1993c7f147e1614e08e8ee55b4d13c1a0b3ff29264bbc2f26402ed0a37fb7e752d480d6be04dc6aff74b552c36e83a57f2189c8ba45327b5b4698d2d359bc9590cad072cd5e8ba2af200e8a79ba6a0fe057385980a709984d70b5767ea77324c69f0c4f147d97f876d84d65747c6dab707256946bf18c5602cd89b0f972804e8196f0ff79e89031369b3be7709baed338f31a3bc9881ed9286c89433f8cd60e0da1cbc1f60e14b85bc561465e020715bb00b326ed9398aae82bc1f4b64203c6533d26b5ca9cb75048c20a57351cc2fc2520e797ed1d45b0b03d57bf52af3641a98de943c68881f196131c9cd679a98243464bf826b71febe16007f3c5f32ba81b90ad4b3511f883a4b018bcfbc0f7ea12229ce6ebb335989331dadab42cfe9667b1a27829fced81e917c440cb2157776da910b6d60f8eecabaab762921364481a497abfef3549a493d2fc9749fed4fede6d8f93dc520ae2d4d2e93b0019f0cc446c34de26b931539f378f3c8a6730e2a0e31c76a5366aad50415e5c16ac5bccd0b18dd3bd6a1db4b6c1a65748521d22236674b210e47df62feda6e0c9c27087a0a81739bbf03126564acb761f3843a30c50c50bb6825fd6b50a47caf410ad72dc7f81776ed363ddaa936b12f7d3c49ffce798eaf27d02b01d95c25267304f311debd900f71e53d842455a9df09e546a3d6f64a64f27ac0e589b4a6bcaa9e5075456844a1c3c1f979e9e468b177c87ce4c1a141ff02bf825c1da209275aa4e80b5b228f9b1e2167529aab7567b3571ffe85e455ca6ed4a9fc5fccfd4e8877e1c587d280445e563a36018d76f0d2ee976e51b7e02875cff70bb078ef7fbbac276880adc9411f266fb7153c8348823dba17043855b19d2d857a3be1822ac324e83b721c9da7b81a16a2215a411baaa41dafe6a8a3818efd5690b5fa489b104e7adecf3e942109c872d263e68209b23d260eee90197d0c5988ea71bc13a1d926d0a3208afe9894e7ac6bf027fcc4761cc1df53303ed78fb2966ab2444549588224626edd712d392be395b598d32fe161378343827a28905e78c34cb989a2ad6ac520bf9215aa453e007c3b9e1a87dd1cfa018178d71dda4d6f7b35092fcdd1b32db0b72dfeeacb78c40f7dc3155bf48a663a19d4a061707a2d6b2715a0a05b1871b7dc1920be538eee0b2e289a64e8219b162a4654ebb55d15513781c9d5228c6f5078266b3147fd0a420c3c48ab8f394d49924e1c857478b0a2d4c3e8c6186ba436312bbbf580764c17f680ed343f3b9ac3cd7e89fd9fa6e4d04e97836352ef25c14692a697d6294793bf7f6ee8885f3b61b7c97b5942b8f6c000f79783a9be016cd13b72841021927b626484ba14e750dfd5e8f551fe3fbcb180d5e8668a32e9cdf7306c15786bfe038517b9cb6a2aa45bcabafe7f74198ee26f23a47056e9dc4204b71d3a2ca3c4dc70031a7d26e89a8b2d104d7dcf43aa5020b84e5c91b44ac1f999efc453182719b2e739ad0a1ab3fb2946dd26baf67a9e6ba2ea885fe79c45f8aae31246adfe51c0d0f5aa86a1bb47ae267d1338137378c0d5e544033897e17f6ee817adaed6fe36a032409e9f7131f2b9256ef1ca5a27e41663a3507745a86c22e93ba7dccb4a4e4a2b9b1d3769291a87f629ca2a73abe4f3ce76ac210022954dc2e854dadde65dc4885651e95d777926ba1c66cd34f80caffe2994b0c8bc0e810b9b80b26f0cfc843f1ac063d506a427ed10b2969cce5de58f48dffd23c2fb7290ae6c15e2dd0bc2f1930aa7e1d0759bb2fa12cffbb3fdcdb3c919e50974995edc0847e6ebf2c9f12d56ad7df8cad31e342993b48d369984a4f3a3f78cbb162ba8e2657caf9b781c7cc47853939df237707f77ea82d95ef83091302e7d21d99a7316529e8b2f363fd1cbea976bdfc773d27471be704a0a4973a3144cc17ad9c3d1c3513890ae17da5dc260fd39185a568cc3651d2a0c08666d04f4cc4f285ef1a4f0e7b5d9d8eafa71572db6b25f7d0d835ab6d447f260eeeb86b38eef46433a4649b7b835a1d37e57b79748372b69ea397845692c1568279aabe3c13ad59de558021970104134555a8e63e2fa5b0a2b067f14315544d0e44a5886649907325f1d6d86feae924e4a1acf837ac0f040856f305551e530748e264382306928631b3289245a63bb326cb53c295546c03d15b81fc13ea7ece96074d615aee9ca0646a3454b2530f09b1e3eb9dbf4d661a40c7da722212d2f70618307f662208bce5e4ce9ea76ed08f117c39abcd58a47dcd719e730e180fa53daaf28b5c6d96f96e5adff18359be14e25c7998bafd7ee8b2741a007fc89b0676536ef76aabf33b2491be0db8c36ddf34114771ea7c8786f3b185fe66153447ad483d03fc9fcab09601fca07b52608c3569971276fd59d6cc04e7e5d2a30f577b9c35af02f2ab69a5101e7261c6862b59b67394a54f32d8fc25349cd7498f45797f8aa06a88a677ef467ad5cdf7ca38efb80678fef8eb48f2889e797f9a992851dc1c6f0849c563e036dc40a333842f5fce5782ddfa7e24e1e3899565952706a31964aecf211554248b039d1314aa370297b353aebb58df1f45655dce8f38dd52a661db6feb6d2d334bae9bc04ff38f262f48daed732962680595fb9e629ebd5a5e1dd80c54924a5b9e061ce1bd34aec81315ca5ad91ad8ecb0f40b4a56c3465f2196a90176bee1a3309a61cb69701cde329ae420a48b16b23c992ca5e6695d523d244a69bc9a112e2526afe729189844ca06d67aaa9c41edcd590897800315236f9adbde9e9af613d84a0b7edd948d0d47b24582a47840c26146704512870c9229f5c05997d511f34b33bffa64c83eec8ef2661b9080774014e1d82a4d1dd92798134f67e36d1eed67241a0cd9b7d11ddd4580f27af0540787bb32d3748a06990a7c83a67b544c7a720510a669a87c5c5c0f92ce64e1c8148c8c46b26751a88bb81019ad4f3e7ed0f61dd548b7a42d8eff9ea9876eff75743640f3ba13473c719a677be170095b259097dba1ca25c578be10b32c78687395ed8a19f7508bcaa6057470b8f7797f331115b66e4960753a3abf55e67780ffa97db2cc84ae6086251ea1f1063961610b70db409b76658ac98be8f1930e3a6792cca824c7f6ce56434755533411a40a9cbdcedc624594e5719d0845c95d775d6a3de8c9c419e41ad06c4f2ce175dface2806f0f33b2e1bb2dd9abe03cd12ec8d37939a9d53ebc75771992fef5d65126893cc55d3a9ac95332beaa8a3cc1ca2923c55cf6cd1c31336d438c48739de4a57425fa2cf969afd3cd1c9f21d2d9545071bf1edc6a25bf11ebd70c6a2b74dcc10e8f625a3e7ca0315092310f12888831077f6f9d7fe1d006099b6ea6f34cd2dfac5076f4373e42970ac91d35665f94eb3eaf360d60d8d0c8eeed5cdfd441cc8d0ea98aad2e91979e625969232c01d698c4a87ee435a726b32b9c162f3153a4c43b4819730c782d96a57df99f743fabc976917c69a32a33cfd8e753f556355885f598d989e1fc9596696901b02c5eea80cb90c90933259be417184619bc783f2a8e049fb4234426c25d6b506fd17c9c81d97bad14f5ad0043f85224059cd6e24cfe0a2920c2edd6f14f8df00da992183ee3e2455cdd3dbfecb2cd9a8918d7b7ee016dd0cbc461993e8b2f890eecfbdeb706ba964f4f8076320db2dce8b9a7fb47abb56f09413254aba0ee3d280aabfc2ce5e0679c975c45c7d963d198f27fa775982b896c7727c2edd34f2c5121f3a0da5767935a78b144eb91875cc3b0caac1f6d43cfdc7719452d24ee702b44b609d1199af03d14704a2346726306626a80b78ed27db79be9c4a5b2ca459d9e20c928fa8c4bc39643b4af210ce9db0f7d8ac16a1e7d2e33c8ffac8de99a806dbea8fe738fa2c0ea6dc74babedd9cab7a5ce2da1e1572752939ac62ed66e3c814d77d89830c1245293ca5bd0ff6c66a932eda802a4bc389b6b37d9cfe143b713c73e7519962ee11791441a38a4d1242f5d9cb4fca2cea7a272132189bb0353d69025221bea2794d5a87c69aaca4c7a84cca8c13775c9d9f2213b941ba99319b9e870deb0e55f3447fda7dbc533ed330e5bc28569ab4d923750af787683fe0e5acc98cb4ae5124678a86b30316f979fef069914f051849cc41895120830a92fad052b2dce7c2029f2263b21042158ab90217718608be53ea9b4b19ab58781859efaab8826fe7fed997befde31216138ea6100758971807301e8eabf784e42503aa468c960902bddf70491ee89eac97ed22a4ba797fe3cd16271fc29a5050105dc8e3e92c610c59cce7956c66234f59f802601b310a1b3cd9c802a7fd9ca9ee096450c54398f1e6f62cf2b10b123d699ec6c5d341de31010ddad27bd734a650d7319ee6855c5bbf1cd3e563a39cfc4cfdc05bab326bb9e5ad90c6ac9d4fb2a1de7214e723ce48abf87026533f63fbf3ff0ac357ed8ea0622221efef759b54186d5269ab667aef82acfe74d6246010d16d612aaaa391bb0e6a801d6e65fba6e849bcdbdafdf8690c41d3a5aa2c4e51962d7985cc6d32d85616c56d1dc1f314953579c4e5d08c8187c8aef8c9b0e871083f5467033a3a05ae7155c69c31d6d72832c9b3b67ed1cdbf93456d48c46c512031ae6c3d61d306c92e73c21c6cd0a061e34ec0b6542982b4141ac9542ac181b73605d35cd6533c86176931f1980a7d283c0594f0c3f5c755a11412f5b7cc395ae6e21066672b6ad4238627ba90a4bb43458955ad0c3b0a40a7ea4f8c39b5", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) 31.765907054s ago: executing program 4 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000654000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x2000) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) 30.60802284s ago: executing program 4 (id=866): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x94016) (fail_nth: 2) 30.545183032s ago: executing program 1 (id=868): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x9, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x29}, 0x80, 0x0}}], 0x1, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x2, 0x6}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r2, 0x8b32, &(0x7f0000000040)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000900)={0x0, 0x16}, 0x0, 0x0}) 30.231597645s ago: executing program 3 (id=870): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 29.839403768s ago: executing program 3 (id=871): unshare(0x68040200) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000100)="4b6df213fa830ffa112ef6765dc267d5f4412b7c29c4817226c8de02f4073067fdbb798596cdf41bd5437429914c6e0eb810de5a0d45d5b45e620a082679c151b9f6516a096b1782a91ad254d80abd4ad9b723d545fb91e00a1e8c1019c103d2a089a8da3f", &(0x7f0000000000)=""/32}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) 29.740825422s ago: executing program 0 (id=872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) 29.598775078s ago: executing program 0 (id=873): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x8, 0x25, 0x0, 0x3f, 0x90d, 0x7, 0x0, 0x2, 0x3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x2400c080) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 28.916537851s ago: executing program 4 (id=874): pipe(&(0x7f00000002c0)) syz_usb_connect(0x5, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b2f92920e1092151fd4e010203010902140001010000cc8a"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 28.71011759s ago: executing program 0 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0}, 0x1840}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (fail_nth: 4) 28.652354347s ago: executing program 3 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000654000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x2000) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) 28.394254701s ago: executing program 1 (id=877): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b", 0x5a}], 0x1, 0x0, 0x0, 0x4004090}], 0x1, 0x4004000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0x18, 0x810}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)={0x20, r5, 0xedceecb76ebd4fd, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x5884) 28.063874314s ago: executing program 0 (id=878): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='lock']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/nfsfs\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r7, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 28.044749358s ago: executing program 2 (id=879): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1f, 0x2003, @empty, 0x7}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x3f) 27.9521757s ago: executing program 4 (id=880): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r2}) (fail_nth: 4) 27.950598455s ago: executing program 1 (id=881): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.854832421s ago: executing program 4 (id=882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r4 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r2, r8, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000e40)=[0x5, 0x1, 0x200, 0x5, 0x2, 0x80000001, 0x5, 0x2013, 0x6], &(0x7f0000000e00)=[0x2, 0x5, 0x4, 0x4, 0x4], 0x4, 0x9}}, 0xffffffffffffff50) socket(0x10, 0x803, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r5], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)={0x20, 0x4, 0xef, {0xef, 0x21, "621c7d2882fa6e98f19e3154bd46c15693736e7d1a72b5a403db7258f7e7bc210a8b28dadc485e8c3cf1f9df3386997fbfb441c65f47f9efdb4dc6189a7de80db7e779d6949f57b2e1d67a851bb6f3efcd7e8254cf3ff022cc2703ceab467d5421d04f5ac6f237e6a9df1288372d6b74fc01001e4be60238b73efd9a260b3138b249192ca0b50986cd8797b470d408443d381748a5707d27371e53fb5149b2824b727b7472269f34a147fe97db2dc702309bf6ce03e33e7a61ff3157ca11c7c83d78364109f52cce6813c7629624d110672878aba83a5c7ed855d048c4164eb72f735da7a89fef41be8e000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000000100)={r11}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="8140e143a894802231c3f97dd0a66411b08cbd499dbbdc7fdcbcc55a6afc3b2e94136cc2c8cf0e42071b9c", 0x2b}, {&(0x7f0000000ac0)="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", 0x15d}, {&(0x7f00000006c0)="7ba09846c085dc7a77b9dfab281f0d2be948c40a6b9abf808619e7eae35575ff83c9d1db65feedf0bdf23bb1801db8804e5fefd05c624720db2fce616ef9e5a024d40a38d87182f886c131214e3cb477443cef2497f6ba79324e4c8a5675cf2b0b936c96a7d0877bad305cff2e0eaa514d34a236d85d1f78dcf6e8530123e4455ac0718cf6c443fbc051993389364178f6d644a0da2fabdbe7f53b59b2cf485973d8ba1050b8e012100f3dcc92f124e7cfc931ac95279fc7fe82f7a3b0946e72ed5eada3fb2fdef1783bc1c7fd44c35a2bc0f1", 0xd3}, {&(0x7f0000000c40)="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", 0x1a3}], 0x4, &(0x7f00000007c0)=[{0x18, 0x116, 0x3, "8f90fc"}, {0x98, 0x10c, 0x8, "8541b42bea083f9e40d3ff6db1d253bd3617b856140fff36877a2851c842c28d3cab983f1c99c660763b26d8abf146796c8a41833e6863739c6bb152eba212f0e44c0bb5c6f8d4a2b9a28a3f8b971df59a631b519c448ac96fb0f09331f36271cb381ce8652ecc95419db0fd0a020fe141771db9aa627d42015c8e927211cd03f51f1c"}, {0x80, 0x29, 0x5, "2da58231222afc9261d27cfd1953cb31e3c7a56fb52551de5ba1bcef357a4f2e7e9102d02ff16e3a3b10c4f19a1d3234d61dfe6c8a97686b146327c9d86d794572b544388d9079d6d0007ece37675413727c324c1d7b00bcc843a92d1eb4b47b65c67c60ba1929dff2e4826a1e"}, {0xa0, 0x29, 0x6, "b1ba32549d88505852c9f33a32f789ac696b66be1d9b1c5b4a69279a215cc40d6909fbe6c87e58a6d0a3c30d84f2ed708a53ee2e1b6731de206b491dca88befb01879c0352d4ef61cc64651c43d972fb08c798b46ffffcfde4cfcad352c1d21769593ab1d040ed510d046e030a11f9a1c4dfa68575edc6cf0b36eb58a54be3b7782ae8962aec3fe407719596d5"}], 0x1d0}, 0x2004c100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 27.741532004s ago: executing program 2 (id=883): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 27.355537552s ago: executing program 1 (id=884): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x3}, 0x3, 0x0, 0x3, 0xb}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x10001, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x6, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) 26.591384173s ago: executing program 0 (id=885): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x8, 0x25, 0x0, 0x3f, 0x90d, 0x7, 0x0, 0x2, 0x3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x2400c080) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 25.281581546s ago: executing program 2 (id=886): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = dup3(r5, r1, 0x0) r7 = syz_io_uring_setup(0x891, &(0x7f0000000840)={0x0, 0xcc36, 0x100, 0x100002, 0x1000380, 0x0, r6}, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x100, 0x7fff, {{0x5, 0x4, 0x0, 0x1e, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) syz_open_dev$mouse(&(0x7f0000000640), 0x3, 0x200400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000004000000040000005ffe000000000000", @ANYRES32, @ANYBLOB="000000000000e8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000040)=""/61}, 0x20) dup3(r7, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 24.955867159s ago: executing program 1 (id=887): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', 0x0, 0xa25436, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001f00010029bd7000fedbdf25fc000000000000000000000000000001000004d2020032000a0101020000000000000000000000001b090000000000800c0015005b073500f2520000b3d6cded9e62ee1bc81fec117070b98e80e0a320b181ce8d00c174c2376f1fea6d6b073b73a76fb67914798ce622cbefd9a4e7b04d1616c96014a6df257b916e53a848ad10233cfd5ffde3c7aa01bfe75b39f97874fa59a203c2e2a35d427c34beb3ba2e8132ffa6e9bbbe9d981660f02afc26beec7848009c8a820763f138204445d36eabd6c87eaabfbe90c8ad0293b80f274f43"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = getpid() openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x4000000) 24.795104204s ago: executing program 0 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r4 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') execveat$binfmt(0xffffffffffffffff, r4, &(0x7f0000000640)={[&(0x7f0000000100)=']\x00', &(0x7f00000003c0)='-\x00', &(0x7f0000000480)='l\\&./#7@-\x00', &(0x7f00000004c0)='/dev/cpu/#/msr\x00', &(0x7f0000000500)='/dev/kvm\x00', &(0x7f0000000540)='(/#\x00', &(0x7f00000005c0)='&(,)\x00', &(0x7f0000000600)='\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/kvm\x00', &(0x7f0000000740)='/dev/cpu/#/msr\x00']}, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f20e035004000000f22e00f01c20fc7babc6600000f01c466b83f010f00d00fc7350f0000003e0f0f515c9ab9800000c00f3235000400000f30660f381c8b00180000b9120000000f32", 0x4a}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13.922957856s ago: executing program 3 (id=889): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0xfeca) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x804, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x0, 0x32344d59, 0x8, 0x3, [{0x4, 0x7}, {0x5, 0x10}, {0xffff, 0x3}, {0x0, 0xfff}, {0x7, 0xfffff3cd}, {0x4, 0x6}, {0x47e, 0x1}, {0x5, 0x3}], 0x1, 0x2, 0x0, 0x2, 0x6}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000140), 0xfffffffe, 0x4600) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 32 (id=882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r4 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r2, r8, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000e40)=[0x5, 0x1, 0x200, 0x5, 0x2, 0x80000001, 0x5, 0x2013, 0x6], &(0x7f0000000e00)=[0x2, 0x5, 0x4, 0x4, 0x4], 0x4, 0x9}}, 0xffffffffffffff50) socket(0x10, 0x803, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r5], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)={0x20, 0x4, 0xef, {0xef, 0x21, "621c7d2882fa6e98f19e3154bd46c15693736e7d1a72b5a403db7258f7e7bc210a8b28dadc485e8c3cf1f9df3386997fbfb441c65f47f9efdb4dc6189a7de80db7e779d6949f57b2e1d67a851bb6f3efcd7e8254cf3ff022cc2703ceab467d5421d04f5ac6f237e6a9df1288372d6b74fc01001e4be60238b73efd9a260b3138b249192ca0b50986cd8797b470d408443d381748a5707d27371e53fb5149b2824b727b7472269f34a147fe97db2dc702309bf6ce03e33e7a61ff3157ca11c7c83d78364109f52cce6813c7629624d110672878aba83a5c7ed855d048c4164eb72f735da7a89fef41be8e000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000000100)={r11}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="8140e143a894802231c3f97dd0a66411b08cbd499dbbdc7fdcbcc55a6afc3b2e94136cc2c8cf0e42071b9c", 0x2b}, {&(0x7f0000000ac0)="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", 0x15d}, {&(0x7f00000006c0)="7ba09846c085dc7a77b9dfab281f0d2be948c40a6b9abf808619e7eae35575ff83c9d1db65feedf0bdf23bb1801db8804e5fefd05c624720db2fce616ef9e5a024d40a38d87182f886c131214e3cb477443cef2497f6ba79324e4c8a5675cf2b0b936c96a7d0877bad305cff2e0eaa514d34a236d85d1f78dcf6e8530123e4455ac0718cf6c443fbc051993389364178f6d644a0da2fabdbe7f53b59b2cf485973d8ba1050b8e012100f3dcc92f124e7cfc931ac95279fc7fe82f7a3b0946e72ed5eada3fb2fdef1783bc1c7fd44c35a2bc0f1", 0xd3}, {&(0x7f0000000c40)="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", 0x1a3}], 0x4, &(0x7f00000007c0)=[{0x18, 0x116, 0x3, "8f90fc"}, {0x98, 0x10c, 0x8, "8541b42bea083f9e40d3ff6db1d253bd3617b856140fff36877a2851c842c28d3cab983f1c99c660763b26d8abf146796c8a41833e6863739c6bb152eba212f0e44c0bb5c6f8d4a2b9a28a3f8b971df59a631b519c448ac96fb0f09331f36271cb381ce8652ecc95419db0fd0a020fe141771db9aa627d42015c8e927211cd03f51f1c"}, {0x80, 0x29, 0x5, "2da58231222afc9261d27cfd1953cb31e3c7a56fb52551de5ba1bcef357a4f2e7e9102d02ff16e3a3b10c4f19a1d3234d61dfe6c8a97686b146327c9d86d794572b544388d9079d6d0007ece37675413727c324c1d7b00bcc843a92d1eb4b47b65c67c60ba1929dff2e4826a1e"}, {0xa0, 0x29, 0x6, "b1ba32549d88505852c9f33a32f789ac696b66be1d9b1c5b4a69279a215cc40d6909fbe6c87e58a6d0a3c30d84f2ed708a53ee2e1b6731de206b491dca88befb01879c0352d4ef61cc64651c43d972fb08c798b46ffffcfde4cfcad352c1d21769593ab1d040ed510d046e030a11f9a1c4dfa68575edc6cf0b36eb58a54be3b7782ae8962aec3fe407719596d5"}], 0x1d0}, 0x2004c100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): [ 201.240877][ T30] audit: type=1326 audit(1770449618.278:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7624 comm="syz.0.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7de879aeb9 code=0x7fc00000 [ 202.223206][ T7663] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 202.229744][ T7663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.287738][ T7663] vhci_hcd vhci_hcd.0: Device attached [ 202.570912][ T10] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 202.611527][ T5821] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.911398][ T5821] usb 5-1: no configurations [ 202.918629][ T5821] usb 5-1: can't read configurations, error -22 [ 203.029179][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 203.094532][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.241357][ T30] audit: type=1400 audit(1770449620.448:337): avc: denied { ioctl } for pid=7677 comm="syz.2.418" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 203.489147][ T5821] usb 5-1: no configurations [ 203.493894][ T5821] usb 5-1: can't read configurations, error -22 [ 203.502179][ T5821] usb usb5-port1: attempt power cycle [ 203.930515][ T5821] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.961441][ T5821] usb 5-1: no configurations [ 203.966081][ T5821] usb 5-1: can't read configurations, error -22 [ 204.139714][ T30] audit: type=1400 audit(1770449621.348:338): avc: denied { write } for pid=7693 comm="syz.2.422" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 204.166546][ T5821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.239968][ T7696] fuse: Unknown parameter 'group_i00000000000000000000' [ 204.259240][ T5821] usb 5-1: no configurations [ 204.268599][ T5821] usb 5-1: can't read configurations, error -22 [ 204.288292][ T5821] usb usb5-port1: unable to enumerate USB device [ 204.558081][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 204.584528][ T7704] netlink: 'syz.2.425': attribute type 30 has an invalid length. [ 204.607548][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.623617][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.654905][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.673150][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.700437][ T7709] input: syz1 as /devices/virtual/input/input9 [ 204.802905][ T5133] Bluetooth: Wrong link type (-71) [ 205.377228][ T7664] vhci_hcd: connection reset by peer [ 205.427866][ T6376] vhci_hcd vhci_hcd.4: stop threads [ 205.446607][ T6376] vhci_hcd vhci_hcd.4: release socket [ 205.461252][ T6376] vhci_hcd vhci_hcd.4: disconnect device [ 205.579572][ T7727] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 205.587396][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.430'. [ 205.596339][ T7727] batadv0: entered promiscuous mode [ 205.601578][ T7727] batadv0: entered allmulticast mode [ 205.608372][ T7727] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 205.707198][ T30] audit: type=1400 audit(1770449622.908:339): avc: denied { mounton } for pid=7719 comm="syz.0.429" path="/proc/276/task" dev="proc" ino=16620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 205.770428][ T30] audit: type=1401 audit(1770449622.958:340): op=setxattr invalid_context="" [ 205.993548][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 206.699456][ T7740] fuse: Unknown parameter 'group_i00000000000000000000' [ 207.150293][ T5821] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.751000][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 207.801462][ T5821] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 207.816596][ T5821] usb 3-1: config 0 has no interface number 0 [ 207.961048][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 207.969812][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 208.084929][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 208.170619][ T7768] netlink: ct family unspecified [ 208.175684][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.495548][ T5821] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 208.534480][ T5821] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 208.555925][ T5821] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 208.570161][ T5821] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 208.581288][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.589949][ T5821] usb 3-1: Product: syz [ 208.594837][ T5821] usb 3-1: Manufacturer: syz [ 208.599501][ T5821] usb 3-1: SerialNumber: syz [ 208.617772][ T30] audit: type=1400 audit(1770449625.828:341): avc: denied { bind } for pid=7769 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.650356][ T5821] usb 3-1: config 0 descriptor?? [ 208.656035][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.668223][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.885143][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.930514][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.968977][ T7773] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 209.023035][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 209.156745][ T5821] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 209.231356][ T5813] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 209.324363][ T7786] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 209.340448][ T7786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.445'. [ 209.447779][ T5813] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 209.456809][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.471618][ T5813] usb 4-1: config 0 has no interface number 0 [ 209.477910][ T5813] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 209.490158][ T5813] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.536608][ T5813] usb 4-1: config 0 interface 113 has no altsetting 0 [ 210.537040][ T30] audit: type=1326 audit(1770449627.338:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cc39aeb9 code=0x7fc00000 [ 210.545526][ T5813] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 210.608145][ T30] audit: type=1326 audit(1770449627.638:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55cc39aeb9 code=0x7fc00000 [ 210.703665][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.720638][ T5821] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 210.775955][ T5813] usb 4-1: Product: syz [ 210.780144][ T5813] usb 4-1: Manufacturer: syz [ 210.788911][ T5821] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 210.810274][ T5813] usb 4-1: SerialNumber: syz [ 210.820580][ T5821] asix 3-1:0.34: probe with driver asix failed with error -71 [ 210.835442][ T5813] usb 4-1: config 0 descriptor?? [ 210.860004][ T5821] usb 3-1: USB disconnect, device number 13 [ 210.867259][ T5813] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 211.843334][ T30] audit: type=1326 audit(1770449629.048:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7789 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de879aeb9 code=0x7fc00000 [ 211.924229][ T5813] usb 4-1: USB disconnect, device number 12 [ 212.211305][ T5821] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 212.382095][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.401086][ T5821] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 212.467700][ T7805] siw: device registration error -23 [ 212.879560][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.901057][ T5821] usb 3-1: config 0 descriptor?? [ 212.908687][ T7798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.994708][ T7809] FAULT_INJECTION: forcing a failure. [ 212.994708][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 213.007563][ T7809] CPU: 1 UID: 0 PID: 7809 Comm: syz.4.451 Not tainted syzkaller #0 PREEMPT(full) [ 213.007593][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 213.007603][ T7809] Call Trace: [ 213.007609][ T7809] [ 213.007615][ T7809] dump_stack_lvl+0x100/0x190 [ 213.007640][ T7809] should_fail_ex.cold+0x5/0xa [ 213.007658][ T7809] should_failslab+0xc2/0x120 [ 213.007682][ T7809] kmem_cache_alloc_noprof+0x83/0x780 [ 213.007696][ T7809] ? dst_alloc+0x99/0x1a0 [ 213.007711][ T7809] ? __pfx_ip6_dst_gc+0x10/0x10 [ 213.007724][ T7809] ? dst_alloc+0x99/0x1a0 [ 213.007739][ T7809] dst_alloc+0x99/0x1a0 [ 213.007761][ T7809] ip6_pol_route+0x948/0x1230 [ 213.007779][ T7809] ? __pfx_ip6_pol_route+0x10/0x10 [ 213.007801][ T7809] ? ip6t_do_table+0xbed/0x1c90 [ 213.007818][ T7809] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 213.007828][ T7809] fib6_rule_lookup+0x52f/0x720 [ 213.007847][ T7809] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 213.007867][ T7809] ? inet6_ehashfn+0x88/0x4f0 [ 213.007887][ T7809] ? __pfx_inet6_ehashfn+0x10/0x10 [ 213.007907][ T7809] ? ila_nf_input+0x586/0xcb0 [ 213.007928][ T7809] ? ila_nf_input+0x586/0xcb0 [ 213.007954][ T7809] ip6_route_input+0x662/0xc50 [ 213.007966][ T7809] ? __inet6_lookup_established+0x679/0xca0 [ 213.007983][ T7809] ? __pfx_ip6_route_input+0x10/0x10 [ 213.007998][ T7809] ? __pfx___inet6_lookup_established+0x10/0x10 [ 213.008019][ T7809] ? tcp_v6_early_demux+0x3f3/0xbe0 [ 213.008043][ T7809] ? tcp_v6_early_demux+0xca/0xbe0 [ 213.008071][ T7809] ip6_rcv_finish_core.isra.0+0x1a9/0x5a0 [ 213.008091][ T7809] ipv6_rcv+0x1e8/0x610 [ 213.008105][ T7809] ? __pfx_ipv6_rcv+0x10/0x10 [ 213.008116][ T7809] __netif_receive_skb_one_core+0x12d/0x1e0 [ 213.008129][ T7809] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 213.008144][ T7809] ? lock_acquire+0x17c/0x330 [ 213.008158][ T7809] __netif_receive_skb+0x1f/0x120 [ 213.008177][ T7809] netif_receive_skb+0x139/0x760 [ 213.008196][ T7809] ? __pfx_netif_receive_skb+0x10/0x10 [ 213.008222][ T7809] tun_rx_batched.isra.0+0x3f6/0x750 [ 213.008244][ T7809] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 213.008263][ T7809] ? tun_get_user+0x1c7e/0x3e10 [ 213.008278][ T7809] ? rcu_is_watching+0x12/0xc0 [ 213.008295][ T7809] tun_get_user+0x1e2e/0x3e10 [ 213.008325][ T7809] ? __pfx_tun_get_user+0x10/0x10 [ 213.008349][ T7809] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.008380][ T7809] ? find_held_lock+0x2b/0x80 [ 213.008396][ T7809] ? tun_get+0x191/0x370 [ 213.008409][ T7809] ? tun_get+0x191/0x370 [ 213.008427][ T7809] tun_chr_write_iter+0xdc/0x200 [ 213.008444][ T7809] vfs_write+0x6ac/0x1070 [ 213.008463][ T7809] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.008487][ T7809] ? __pfx_vfs_write+0x10/0x10 [ 213.008503][ T7809] ? find_held_lock+0x2b/0x80 [ 213.008533][ T7809] ksys_write+0x12a/0x250 [ 213.008549][ T7809] ? __pfx_ksys_write+0x10/0x10 [ 213.008565][ T7809] do_syscall_64+0xc9/0xf80 [ 213.008579][ T7809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.008591][ T7809] RIP: 0033:0x7f55cc35b78e [ 213.008605][ T7809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.008620][ T7809] RSP: 002b:00007f55cd2d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.008635][ T7809] RAX: ffffffffffffffda RBX: 00007f55cd2d56c0 RCX: 00007f55cc35b78e [ 213.008645][ T7809] RDX: 000000000000004e RSI: 0000200000000140 RDI: 00000000000000c8 [ 213.008655][ T7809] RBP: 00007f55cd2d5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.008669][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.008676][ T7809] R13: 00007f55cc616038 R14: 00007f55cc615fa0 R15: 00007ffe995ce8d8 [ 213.008691][ T7809] [ 213.594124][ T30] audit: type=1326 audit(1770449630.808:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.618609][ T30] audit: type=1326 audit(1770449630.808:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.643373][ T30] audit: type=1326 audit(1770449630.808:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.644096][ T5821] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 213.666568][ T30] audit: type=1326 audit(1770449630.808:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.666610][ T30] audit: type=1326 audit(1770449630.808:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.666645][ T30] audit: type=1326 audit(1770449630.808:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.666685][ T30] audit: type=1326 audit(1770449630.808:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.666717][ T30] audit: type=1326 audit(1770449630.808:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.807181][ T30] audit: type=1326 audit(1770449631.008:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d79aeb9 code=0x7ffc0000 [ 213.820504][ T7816] xt_hashlimit: size too large, truncated to 1048576 [ 215.027719][ T7831] netlink: 'syz.0.453': attribute type 12 has an invalid length. [ 215.056560][ T7831] netlink: 'syz.0.453': attribute type 29 has an invalid length. [ 215.074764][ T7831] netlink: 148 bytes leftover after parsing attributes in process `syz.0.453'. [ 215.574722][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 215.583328][ T5821] usb 3-1: USB disconnect, device number 14 [ 215.767184][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 215.858413][ T9] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 215.876700][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.913716][ T9] usb 4-1: config 0 has no interface number 0 [ 216.029146][ T9] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 216.040103][ T9] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 216.049980][ T9] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 216.060143][ T9] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 216.071765][ T9] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 216.140515][ T7854] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 216.933583][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 216.960276][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.025185][ T7860] siw: device registration error -23 [ 217.224794][ T9] usb 4-1: Product: syz [ 217.230070][ T9] usb 4-1: Manufacturer: syz [ 217.398342][ T9] usb 4-1: SerialNumber: syz [ 217.461897][ T9] usb 4-1: config 0 descriptor?? [ 217.478254][ T7843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.590789][ T5821] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.801954][ T5821] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 217.972127][ T5821] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 217.997528][ T9] usb 4-1: NFC: intf ffff888056a52000 id ffffffff8f5aa580 [ 218.005394][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.089602][ T5821] usb 5-1: config 0 descriptor?? [ 218.116059][ T9] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 218.318438][ T9] usb 4-1: USB disconnect, device number 13 [ 218.333904][ T9] usb 4-1: NFC: intf ffff888056a52000 [ 218.423596][ T5948] usb 5-1: USB disconnect, device number 15 [ 218.452752][ T7886] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 218.833381][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 218.833397][ T30] audit: type=1400 audit(1770449636.048:383): avc: denied { kexec_image_load } for pid=7890 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 218.948708][ T7891] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 220.448095][ T7922] SQUASHFS error: Failed to read block 0x0: -5 [ 220.810892][ T30] audit: type=1400 audit(1770449638.028:384): avc: denied { create } for pid=7913 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.830509][ T30] audit: type=1400 audit(1770449638.028:385): avc: denied { ioctl } for pid=7913 comm="syz.2.482" path="socket:[16192]" dev="sockfs" ino=16192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.865671][ T30] audit: type=1400 audit(1770449638.028:386): avc: denied { connect } for pid=7913 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.890103][ T30] audit: type=1400 audit(1770449638.028:387): avc: denied { write } for pid=7913 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.933373][ T30] audit: type=1400 audit(1770449638.028:388): avc: denied { write } for pid=7913 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.951629][ T7923] lo speed is unknown, defaulting to 1000 [ 221.210610][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.360722][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 221.713033][ T7941] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 221.722613][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 221.732598][ T9] usb 2-1: config 0 has no interfaces? [ 221.739438][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.487'. [ 221.739502][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.763215][ T7941] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 221.800281][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.808486][ T9] usb 2-1: Manufacturer: syz [ 221.852066][ T9] usb 2-1: config 0 descriptor?? [ 222.562362][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 222.822246][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.832798][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.541129][ T7964] netlink: 'syz.0.492': attribute type 4 has an invalid length. [ 223.930656][ T5813] usb 2-1: USB disconnect, device number 10 [ 224.078431][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 224.109794][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 224.311030][ T30] audit: type=1400 audit(1770449641.518:389): avc: denied { read } for pid=7969 comm="syz.3.495" path="socket:[17284]" dev="sockfs" ino=17284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.301224][ T7994] SQUASHFS error: Failed to read block 0x0: -5 [ 226.756693][ T5133] Bluetooth: Wrong link type (-71) [ 227.011371][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 227.707674][ T30] audit: type=1400 audit(1770449644.878:390): avc: denied { create } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.823271][ T30] audit: type=1400 audit(1770449644.968:391): avc: denied { bind } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.910055][ T30] audit: type=1400 audit(1770449644.968:392): avc: denied { listen } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.021886][ T8022] netlink: 'syz.3.508': attribute type 3 has an invalid length. [ 228.284553][ T30] audit: type=1400 audit(1770449644.968:393): avc: denied { connect } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.560363][ T30] audit: type=1400 audit(1770449644.968:394): avc: denied { accept } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.700597][ T30] audit: type=1400 audit(1770449644.968:395): avc: denied { write } for pid=7996 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.722074][ T30] audit: type=1400 audit(1770449644.988:396): avc: denied { write } for pid=8009 comm="syz.1.506" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 229.881751][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 230.100023][ T8046] netlink: 'syz.3.513': attribute type 4 has an invalid length. [ 230.270392][ T116] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.679770][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 230.714272][ T116] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 230.752549][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 230.904909][ T116] usb 2-1: config 0 has no interface number 0 [ 231.414692][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.431377][ T116] usb 2-1: config 0 has no interface number 0 [ 231.448799][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.474415][ T116] usb 2-1: config 0 has no interface number 0 [ 231.497732][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.506384][ T116] usb 2-1: config 0 has no interface number 0 [ 231.519212][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.529680][ T116] usb 2-1: config 0 has no interface number 0 [ 231.760539][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.790983][ T116] usb 2-1: config 0 has no interface number 0 [ 231.823732][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.840962][ T116] usb 2-1: config 0 has no interface number 0 [ 231.848919][ T116] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 231.860837][ T116] usb 2-1: config 0 has no interface number 0 [ 231.872625][ T116] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 231.883196][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.891572][ T116] usb 2-1: Product: syz [ 231.900406][ T116] usb 2-1: Manufacturer: syz [ 231.911820][ T116] usb 2-1: SerialNumber: syz [ 231.930893][ T116] usb 2-1: config 0 descriptor?? [ 231.947195][ T30] audit: type=1326 audit(1770449905.157:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 231.973427][ T116] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 231.987453][ T30] audit: type=1326 audit(1770449905.157:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.051885][ T30] audit: type=1326 audit(1770449905.157:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.059913][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 232.075795][ T30] audit: type=1326 audit(1770449905.157:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.107186][ T30] audit: type=1326 audit(1770449905.157:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.144416][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 232.153768][ T30] audit: type=1326 audit(1770449905.157:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.183553][ T30] audit: type=1326 audit(1770449905.157:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8053 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7de879aeb9 code=0x7ffc0000 [ 232.207704][ T8062] FAULT_INJECTION: forcing a failure. [ 232.207704][ T8062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.229302][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 232.229326][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.229337][ T8062] Call Trace: [ 232.229342][ T8062] [ 232.229349][ T8062] dump_stack_lvl+0x100/0x190 [ 232.229379][ T8062] should_fail_ex.cold+0x5/0xa [ 232.229395][ T8062] ? prepare_alloc_pages+0x16d/0x5f0 [ 232.229421][ T8062] should_fail_alloc_page+0xeb/0x140 [ 232.229444][ T8062] prepare_alloc_pages+0x1f0/0x5f0 [ 232.229467][ T8062] ? rcu_is_watching+0x12/0xc0 [ 232.229491][ T8062] __alloc_frozen_pages_noprof+0x193/0x2410 [ 232.229512][ T8062] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 232.229540][ T8062] ? __lock_acquire+0x4a5/0x2630 [ 232.229559][ T8062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.229579][ T8062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.229605][ T8062] ? __lock_acquire+0x4a5/0x2630 [ 232.229627][ T8062] ? __lock_acquire+0x4a5/0x2630 [ 232.229649][ T8062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.229677][ T8062] ? policy_nodemask+0xed/0x4f0 [ 232.229703][ T8062] alloc_pages_mpol+0x1fb/0x550 [ 232.229727][ T8062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.229751][ T8062] ? do_raw_spin_lock+0x128/0x260 [ 232.229771][ T8062] ? find_held_lock+0x2b/0x80 [ 232.229794][ T8062] ? __pud_alloc+0x575/0x760 [ 232.229821][ T8062] alloc_pages_noprof+0x131/0x390 [ 232.229845][ T8062] __pmd_alloc+0x3b/0x9c0 [ 232.229868][ T8062] ? __pud_alloc+0x57a/0x760 [ 232.229895][ T8062] __handle_mm_fault+0xa99/0x2b50 [ 232.229917][ T8062] ? mt_find+0x45e/0x8e0 [ 232.229939][ T8062] ? __pfx___handle_mm_fault+0x10/0x10 [ 232.229956][ T8062] ? __pfx_mt_find+0x10/0x10 [ 232.229990][ T8062] ? find_vma+0xbf/0x140 [ 232.230012][ T8062] ? __pfx_find_vma+0x10/0x10 [ 232.230036][ T8062] handle_mm_fault+0x36d/0xa20 [ 232.230060][ T8062] do_user_addr_fault+0x74c/0x12f0 [ 232.230090][ T8062] exc_page_fault+0x6f/0xd0 [ 232.230109][ T8062] asm_exc_page_fault+0x26/0x30 [ 232.230126][ T8062] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 232.230150][ T8062] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 232.230166][ T8062] RSP: 0018:ffffc90003087d80 EFLAGS: 00050212 [ 232.230181][ T8062] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000010 [ 232.230192][ T8062] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90003087df8 [ 232.230202][ T8062] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000610fc0 [ 232.230212][ T8062] R10: ffffc90003087e07 R11: 0000000000000000 R12: 0000000000000000 [ 232.230223][ T8062] R13: ffffc90003087df8 R14: 0000000000000010 R15: 0000000000000000 [ 232.230246][ T8062] _copy_from_user+0x98/0xd0 [ 232.230271][ T8062] move_addr_to_kernel+0x65/0x170 [ 232.230292][ T8062] __sys_connect+0xb5/0x170 [ 232.230312][ T8062] ? __pfx___sys_connect+0x10/0x10 [ 232.230330][ T8062] ? __fget_files+0x21f/0x3d0 [ 232.230360][ T8062] ? __pfx_ksys_write+0x10/0x10 [ 232.230384][ T8062] __x64_sys_connect+0x72/0xb0 [ 232.230402][ T8062] ? lockdep_hardirqs_on+0x78/0x100 [ 232.230420][ T8062] do_syscall_64+0xc9/0xf80 [ 232.230441][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.230458][ T8062] RIP: 0033:0x7fb70a19aeb9 [ 232.230472][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.230487][ T8062] RSP: 002b:00007fb7083f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 232.230503][ T8062] RAX: ffffffffffffffda RBX: 00007fb70a415fa0 RCX: 00007fb70a19aeb9 [ 232.230513][ T8062] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 232.230523][ T8062] RBP: 00007fb7083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.230532][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.230541][ T8062] R13: 00007fb70a416038 R14: 00007fb70a415fa0 R15: 00007fffc254b728 [ 232.230565][ T8062] [ 232.677344][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 232.711693][ T116] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 232.731920][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 232.794321][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 233.441419][ T5813] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 233.459742][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.493952][ T5813] usb 3-1: Product: syz [ 233.551842][ T5813] usb 3-1: Manufacturer: syz [ 233.564468][ T5813] usb 3-1: SerialNumber: syz [ 233.580751][ T5813] usb 3-1: config 0 descriptor?? [ 233.590701][ T8056] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.598034][ T8056] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.648932][ T5813] usb 3-1: ucan: probing device on interface #0 [ 233.746233][ T8078] FAULT_INJECTION: forcing a failure. [ 233.746233][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 233.808362][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 233.808387][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.808397][ T8078] Call Trace: [ 233.808403][ T8078] [ 233.808410][ T8078] dump_stack_lvl+0x100/0x190 [ 233.808442][ T8078] should_fail_ex.cold+0x5/0xa [ 233.808462][ T8078] should_failslab+0xc2/0x120 [ 233.808486][ T8078] ? tomoyo_encode2+0xfb/0x3c0 [ 233.808503][ T8078] __kmalloc_noprof+0xf6/0x9c0 [ 233.808519][ T8078] ? __pfx_tomoyo_get_local_path+0x10/0x10 [ 233.808545][ T8078] ? tomoyo_encode2+0xfb/0x3c0 [ 233.808566][ T8078] tomoyo_encode2+0xfb/0x3c0 [ 233.808590][ T8078] tomoyo_encode+0x29/0x50 [ 233.808607][ T8078] tomoyo_realpath_from_path+0x18c/0x690 [ 233.808632][ T8078] tomoyo_path_perm+0x276/0x460 [ 233.808657][ T8078] ? tomoyo_path_perm+0x262/0x460 [ 233.808684][ T8078] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 233.808733][ T8078] ? __d_lookup+0x25c/0x4a0 [ 233.808758][ T8078] tomoyo_path_rmdir+0x91/0xe0 [ 233.808778][ T8078] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 233.808806][ T8078] ? lookup_dcache+0x66/0x170 [ 233.808833][ T8078] security_path_rmdir+0x145/0x2b0 [ 233.808851][ T8078] do_rmdir+0x295/0x560 [ 233.808873][ T8078] ? __pfx_do_rmdir+0x10/0x10 [ 233.808904][ T8078] ? getname_flags.part.0+0x1c5/0x540 [ 233.808934][ T8078] __x64_sys_unlinkat+0x1d5/0x250 [ 233.808958][ T8078] do_syscall_64+0xc9/0xf80 [ 233.808980][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.808997][ T8078] RIP: 0033:0x7fb70a19aeb9 [ 233.809011][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.809027][ T8078] RSP: 002b:00007fb7083f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 233.809044][ T8078] RAX: ffffffffffffffda RBX: 00007fb70a415fa0 RCX: 00007fb70a19aeb9 [ 233.809054][ T8078] RDX: 0000000000000200 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 233.809064][ T8078] RBP: 00007fb7083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.809073][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.809082][ T8078] R13: 00007fb70a416038 R14: 00007fb70a415fa0 R15: 00007fffc254b728 [ 233.809104][ T8078] [ 233.813576][ T8078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.590461][ T5813] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 234.618191][ T5813] usb 3-1: USB disconnect, device number 15 [ 234.710968][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 234.721991][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 234.729952][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 234.738423][ T5476] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 235.097059][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 235.097250][ T5813] usb 2-1: USB disconnect, device number 11 [ 235.106285][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 235.106343][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 235.106396][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 235.106447][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 235.106502][ C1] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 235.110142][ T5476] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 236.428472][ T5813] etas_es58x 2-1:0.2: Disconnecting syz syz [ 236.592570][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 236.723896][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 236.723912][ T30] audit: type=1400 audit(1770449909.930:440): avc: denied { lock } for pid=8132 comm="syz.0.534" path="socket:[17662]" dev="sockfs" ino=17662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.865536][ T30] audit: type=1400 audit(1770449910.070:441): avc: denied { mount } for pid=8126 comm="syz.2.533" name="/" dev="hugetlbfs" ino=17663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 236.916299][ T8131] fuse: Bad value for 'fd' [ 236.964194][ T30] audit: type=1400 audit(1770449910.160:442): avc: denied { wake_alarm } for pid=8126 comm="syz.2.533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.497762][ T8153] tun0: tun_chr_ioctl cmd 1074025675 [ 237.503128][ T8153] tun0: persist enabled [ 237.508398][ T30] audit: type=1400 audit(1770449910.510:443): avc: denied { create } for pid=8144 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.656645][ T30] audit: type=1400 audit(1770449910.510:444): avc: denied { ioctl } for pid=8144 comm="syz.3.537" path="socket:[18743]" dev="sockfs" ino=18743 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 238.085060][ T8171] FAULT_INJECTION: forcing a failure. [ 238.085060][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.087864][ T5813] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.112648][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(full) [ 238.112672][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 238.112682][ T8171] Call Trace: [ 238.112688][ T8171] [ 238.112694][ T8171] dump_stack_lvl+0x100/0x190 [ 238.112722][ T8171] should_fail_ex.cold+0x5/0xa [ 238.112743][ T8171] _copy_from_user+0x2e/0xd0 [ 238.112767][ T8171] kvm_vm_ioctl+0x1239/0x4020 [ 238.112809][ T8171] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 238.112848][ T8171] ? kasan_quarantine_put+0x104/0x240 [ 238.112868][ T8171] ? lockdep_hardirqs_on+0x78/0x100 [ 238.112891][ T8171] ? find_held_lock+0x2b/0x80 [ 238.112912][ T8171] ? tomoyo_path_number_perm+0x28f/0x580 [ 238.112939][ T8171] ? tomoyo_path_number_perm+0x28f/0x580 [ 238.112970][ T8171] ? tomoyo_path_number_perm+0x188/0x580 [ 238.112998][ T8171] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.113033][ T8171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.113060][ T8171] ? do_vfs_ioctl+0x226/0x13e0 [ 238.113078][ T8171] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.113093][ T8171] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 238.113115][ T8171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 238.113154][ T8171] ? selinux_file_ioctl+0x139/0x290 [ 238.113171][ T8171] ? selinux_file_ioctl+0xb4/0x290 [ 238.113191][ T8171] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 238.113217][ T8171] __x64_sys_ioctl+0x18e/0x210 [ 238.113236][ T8171] do_syscall_64+0xc9/0xf80 [ 238.113257][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.113275][ T8171] RIP: 0033:0x7f7de879aeb9 [ 238.113290][ T8171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.113306][ T8171] RSP: 002b:00007f7de9570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.113324][ T8171] RAX: ffffffffffffffda RBX: 00007f7de8a15fa0 RCX: 00007f7de879aeb9 [ 238.113336][ T8171] RDX: 0000200000000000 RSI: 000000004020ae76 RDI: 0000000000000004 [ 238.113346][ T8171] RBP: 00007f7de9570090 R08: 0000000000000000 R09: 0000000000000000 [ 238.113356][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.113366][ T8171] R13: 00007f7de8a16038 R14: 00007f7de8a15fa0 R15: 00007ffd00de9aa8 [ 238.113390][ T8171] [ 238.268126][ T5813] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 238.353160][ T5813] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 238.363794][ T5813] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.410641][ T5813] usb 4-1: config 1 has no interface number 1 [ 238.450924][ T5813] usb 4-1: too many endpoints for config 1 interface 4 altsetting 206: 224, using maximum allowed: 30 [ 238.468252][ T5813] usb 4-1: config 1 interface 4 altsetting 206 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 238.492765][ T8189] netlink: 9 bytes leftover after parsing attributes in process `syz.0.543'. [ 238.511783][ T5813] usb 4-1: config 1 interface 4 has no altsetting 0 [ 238.519343][ T8189] netlink: 9 bytes leftover after parsing attributes in process `syz.0.543'. [ 238.530546][ T5813] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.592596][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.605232][ T5813] usb 4-1: Product: syz [ 238.610583][ T5813] usb 4-1: Manufacturer: Þ昑랗轣茈쉤ã—è¥€ê¡°ç¢“êž«â¤„ë¡¨à¼²éŸŽë¹ [ 238.619963][ T5813] usb 4-1: SerialNumber: syz [ 238.640966][ T8189] cgroup: noprefix used incorrectly [ 239.752977][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 240.046181][ T30] audit: type=1400 audit(1770449913.252:445): avc: denied { append } for pid=8159 comm="syz.3.540" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.944365][ T30] audit: type=1400 audit(1770449914.152:446): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 241.517194][ T5813] usb 4-1: 0:2 : does not exist [ 241.656827][ T5813] usb 4-1: USB disconnect, device number 14 [ 241.740677][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.054550][ T5813] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 242.206105][ T5813] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 242.217090][ T5813] usb 1-1: config 0 has no interface number 0 [ 242.223467][ T5813] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 242.237959][ T5813] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 242.249626][ T5813] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.259914][ T5813] usb 1-1: config 0 interface 113 has no altsetting 0 [ 242.270360][ T5813] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 242.279813][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.288133][ T5813] usb 1-1: Product: syz [ 242.292476][ T5813] usb 1-1: Manufacturer: syz [ 242.297569][ T5813] usb 1-1: SerialNumber: syz [ 242.307864][ T5813] usb 1-1: config 0 descriptor?? [ 242.316869][ T5813] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 242.498758][ T8253] gfs2: gfs2 mount does not exist [ 242.574395][ T30] audit: type=1400 audit(1770449915.703:447): avc: denied { mounton } for pid=8251 comm="syz.3.559" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 242.722590][ T5821] usb 1-1: USB disconnect, device number 18 [ 243.102900][ T5948] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 243.105337][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 243.307392][ T5948] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 243.317052][ T5948] usb 4-1: config 0 has no interface number 0 [ 243.325099][ T5948] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 243.352061][ T5948] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 243.374232][ T5948] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.623153][ T5948] usb 4-1: config 0 interface 113 has no altsetting 0 [ 243.865360][ T5948] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 243.883532][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.902621][ T5948] usb 4-1: Product: syz [ 243.943632][ T5948] usb 4-1: Manufacturer: syz [ 243.948329][ T5948] usb 4-1: SerialNumber: syz [ 243.955640][ T5948] usb 4-1: config 0 descriptor?? [ 243.969782][ T5948] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 244.339970][ T30] audit: type=1400 audit(1770449917.554:448): avc: denied { create } for pid=8278 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.361368][ T8279] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 244.379668][ T8279] audit: out of memory in audit_log_start [ 244.390377][ T5948] usb 4-1: USB disconnect, device number 15 [ 244.781000][ T9] libceph: connect (1)[c::]:6789 error -101 [ 244.795730][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 245.908520][ T9] libceph: connect (1)[c::]:6789 error -101 [ 245.915062][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 246.180999][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 246.187131][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 246.207899][ T8283] ceph: No mds server is up or the cluster is laggy [ 246.261335][ T8295] FAULT_INJECTION: forcing a failure. [ 246.261335][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.278117][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT(full) [ 246.278140][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.278150][ T8295] Call Trace: [ 246.278155][ T8295] [ 246.278162][ T8295] dump_stack_lvl+0x100/0x190 [ 246.278191][ T8295] should_fail_ex.cold+0x5/0xa [ 246.278211][ T8295] _copy_from_iter+0x43a/0x1690 [ 246.278240][ T8295] ? __pfx__copy_from_iter+0x10/0x10 [ 246.278266][ T8295] ? __pfx__copy_from_iter+0x10/0x10 [ 246.278291][ T8295] ? lock_acquire+0x17c/0x330 [ 246.278311][ T8295] copy_page_from_iter+0xde/0x180 [ 246.278338][ T8295] skb_copy_datagram_from_iter+0x399/0x720 [ 246.278368][ T8295] tun_get_user+0x1884/0x3e10 [ 246.278404][ T8295] ? __pfx_tun_get_user+0x10/0x10 [ 246.278429][ T8295] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 246.278462][ T8295] ? find_held_lock+0x2b/0x80 [ 246.278484][ T8295] ? tun_get+0x191/0x370 [ 246.278510][ T8295] ? tun_get+0x191/0x370 [ 246.278536][ T8295] tun_chr_write_iter+0xdc/0x200 [ 246.278565][ T8295] do_iter_readv_writev+0x6ee/0x920 [ 246.278586][ T8295] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 246.278601][ T8295] ? avc_policy_seqno+0x9/0x20 [ 246.278622][ T8295] ? selinux_file_permission+0x8f/0x6d0 [ 246.278642][ T8295] ? bpf_lsm_file_permission+0x9/0x10 [ 246.278663][ T8295] ? security_file_permission+0x76/0x210 [ 246.278682][ T8295] ? rw_verify_area+0xce/0x6d0 [ 246.278699][ T8295] vfs_writev+0x360/0xe10 [ 246.278714][ T8295] ? get_pid_task+0x106/0x250 [ 246.278736][ T8295] ? __pfx_vfs_writev+0x10/0x10 [ 246.278753][ T8295] ? find_held_lock+0x2b/0x80 [ 246.278790][ T8295] ? __fget_files+0x21f/0x3d0 [ 246.278817][ T8295] ? do_writev+0x13e/0x340 [ 246.278833][ T8295] do_writev+0x13e/0x340 [ 246.278851][ T8295] ? __pfx_do_writev+0x10/0x10 [ 246.278875][ T8295] do_syscall_64+0xc9/0xf80 [ 246.278896][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.278913][ T8295] RIP: 0033:0x7fb70a19aeb9 [ 246.278927][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.278943][ T8295] RSP: 002b:00007fb7083f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 246.278960][ T8295] RAX: ffffffffffffffda RBX: 00007fb70a415fa0 RCX: 00007fb70a19aeb9 [ 246.278971][ T8295] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 246.278981][ T8295] RBP: 00007fb7083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.278990][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.278999][ T8295] R13: 00007fb70a416038 R14: 00007fb70a415fa0 R15: 00007fffc254b728 [ 246.279021][ T8295] [ 246.289999][ T8298] FAULT_INJECTION: forcing a failure. [ 246.289999][ T8298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.654370][ T8298] CPU: 1 UID: 0 PID: 8298 Comm: syz.2.572 Not tainted syzkaller #0 PREEMPT(full) [ 246.654396][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.654405][ T8298] Call Trace: [ 246.654412][ T8298] [ 246.654418][ T8298] dump_stack_lvl+0x100/0x190 [ 246.654445][ T8298] should_fail_ex.cold+0x5/0xa [ 246.654462][ T8298] _copy_to_user+0x32/0xd0 [ 246.654486][ T8298] simple_read_from_buffer+0xcb/0x170 [ 246.654513][ T8298] proc_fail_nth_read+0x1af/0x230 [ 246.654537][ T8298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.654561][ T8298] ? rw_verify_area+0xce/0x6d0 [ 246.654578][ T8298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.654599][ T8298] vfs_read+0x1e4/0xb30 [ 246.654619][ T8298] ? __pfx_vfs_read+0x10/0x10 [ 246.654633][ T8298] ? find_held_lock+0x2b/0x80 [ 246.654653][ T8298] ? __fget_files+0x215/0x3d0 [ 246.654675][ T8298] ? __fget_files+0x21f/0x3d0 [ 246.654697][ T8298] ksys_read+0x12a/0x250 [ 246.654713][ T8298] ? __pfx_ksys_read+0x10/0x10 [ 246.654733][ T8298] do_syscall_64+0xc9/0xf80 [ 246.654753][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.654769][ T8298] RIP: 0033:0x7f58a555b78e [ 246.654786][ T8298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.654800][ T8298] RSP: 002b:00007f58a6478fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.654815][ T8298] RAX: ffffffffffffffda RBX: 00007f58a64796c0 RCX: 00007f58a555b78e [ 246.654824][ T8298] RDX: 000000000000000f RSI: 00007f58a64790a0 RDI: 0000000000000009 [ 246.654832][ T8298] RBP: 00007f58a6479090 R08: 0000000000000000 R09: 0000000000000000 [ 246.654840][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.654848][ T8298] R13: 00007f58a5816038 R14: 00007f58a5815fa0 R15: 00007fffdb287608 [ 246.654869][ T8298] [ 246.846530][ T9] libceph: connect (1)[c::]:6789 error -101 [ 247.075678][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 247.090698][ T8308] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 247.105479][ T8308] audit: out of memory in audit_log_start [ 247.369648][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 247.482845][ T116] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 247.642972][ T116] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 247.651189][ T116] usb 3-1: config 0 has no interface number 0 [ 247.657727][ T5928] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 247.665359][ T30] audit: type=1400 audit(1770449920.875:449): avc: denied { shutdown } for pid=8321 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.685658][ T116] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 247.699726][ T116] usb 3-1: config 0 interface 113 has no altsetting 0 [ 247.709156][ T116] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 247.718877][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.730550][ T116] usb 3-1: Product: syz [ 247.735025][ T116] usb 3-1: Manufacturer: syz [ 247.746251][ T116] usb 3-1: SerialNumber: syz [ 247.755900][ T116] usb 3-1: config 0 descriptor?? [ 247.763202][ T8311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.772441][ C1] usb 3-1: NFC: Urb failure (status -71) [ 247.779436][ C1] usb 3-1: NFC: Urb failure (status -71) [ 247.786682][ T116] usb 3-1: NFC: Unable to get FW version [ 247.792563][ T116] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 247.844568][ T5928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.858314][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.867211][ T30] audit: type=1400 audit(1770449921.075:450): avc: denied { module_request } for pid=8321 comm="syz.3.580" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 247.888751][ T5928] usb 2-1: Product: syz [ 247.893609][ T5928] usb 2-1: Manufacturer: syz [ 247.899734][ T5928] usb 2-1: SerialNumber: syz [ 247.913967][ T5928] usb 2-1: config 0 descriptor?? [ 248.014617][ T8311] 9p: Bad value for 'wfdno' [ 248.032063][ T116] usb 3-1: USB disconnect, device number 16 [ 248.133426][ T5928] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.258449][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.387802][ T8342] bridge_slave_0 (unregistering): left allmulticast mode [ 248.410296][ T8342] bridge_slave_0 (unregistering): left promiscuous mode [ 248.551123][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.344558][ T5928] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.449817][ T8361] SQUASHFS error: Failed to read block 0x0: -5 [ 250.204044][ T5928] usb 2-1: USB disconnect, device number 12 [ 250.510081][ T5821] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.579691][ T8369] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 250.587926][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 250.608667][ T8371] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 250.689068][ T8369] batadv0: entered promiscuous mode [ 251.074850][ T8369] batadv0: entered allmulticast mode [ 251.101437][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 251.175219][ T8369] bridge0: port 1(batadv0) entered blocking state [ 251.182371][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.195510][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.208473][ T8369] bridge0: port 1(batadv0) entered disabled state [ 251.316415][ T5821] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 251.337762][ T8369] bridge0: port 1(batadv0) entered blocking state [ 251.344321][ T8369] bridge0: port 1(batadv0) entered forwarding state [ 251.346749][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.437512][ T5821] usb 5-1: config 0 descriptor?? [ 251.700979][ T2962] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 251.710269][ T2962] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 251.931874][ T5821] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 252.140431][ T5821] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 252.263999][ T30] audit: type=1400 audit(1770449925.488:451): avc: denied { append } for pid=8389 comm="syz.3.593" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 252.342484][ T5821] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 252.361129][ T8390] input: syz0 as /devices/virtual/input/input10 [ 252.479140][ T30] audit: type=1400 audit(1770449925.618:452): avc: denied { read } for pid=5166 comm="acpid" name="event4" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.545670][ T5821] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup [ 252.559098][ T5821] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 252.575763][ T5821] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 252.653807][ T30] audit: type=1400 audit(1770449925.618:453): avc: denied { open } for pid=5166 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2976 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.735686][ T5821] usb 5-1: USB disconnect, device number 16 [ 252.754889][ T30] audit: type=1400 audit(1770449925.618:454): avc: denied { ioctl } for pid=5166 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2976 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.890493][ T30] audit: type=1400 audit(1770449925.768:455): avc: denied { getopt } for pid=8362 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.991256][ T5821] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 254.151295][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.161417][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 254.172846][ T5821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 254.183258][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.338274][ T5821] usb 2-1: config 0 descriptor?? [ 254.559840][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 254.702210][ T5821] ath6kl: Failed to submit usb control message: -71 [ 254.730523][ T5821] ath6kl: unable to send the bmi data to the device: -71 [ 254.779990][ T5821] ath6kl: Unable to send get target info: -71 [ 254.834464][ T5821] ath6kl: Failed to init ath6kl core: -71 [ 254.856108][ T5821] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 254.871939][ T5821] usb 2-1: USB disconnect, device number 13 [ 255.186057][ T8415] capability: warning: `syz.4.600' uses 32-bit capabilities (legacy support in use) [ 255.200712][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.217812][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.615553][ T8429] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 255.629532][ T8431] FAULT_INJECTION: forcing a failure. [ 255.629532][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 255.747352][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 255.747378][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.747392][ T8431] Call Trace: [ 255.747397][ T8431] [ 255.747404][ T8431] dump_stack_lvl+0x100/0x190 [ 255.747436][ T8431] should_fail_ex.cold+0x5/0xa [ 255.747452][ T8431] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 255.747479][ T8431] should_failslab+0xc2/0x120 [ 255.747502][ T8431] kmem_cache_alloc_noprof+0x83/0x780 [ 255.747524][ T8431] ? skb_clone+0x190/0x400 [ 255.747551][ T8431] ? skb_clone+0x190/0x400 [ 255.747573][ T8431] skb_clone+0x190/0x400 [ 255.747597][ T8431] netlink_deliver_tap+0xaed/0xcc0 [ 255.747628][ T8431] netlink_unicast+0x650/0x870 [ 255.747658][ T8431] ? __pfx_netlink_unicast+0x10/0x10 [ 255.747692][ T8431] netlink_sendmsg+0x8b0/0xda0 [ 255.747721][ T8431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.747745][ T8431] ? __might_fault+0xb0/0x140 [ 255.747774][ T8431] ____sys_sendmsg+0xa54/0xc30 [ 255.747795][ T8431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.747824][ T8431] ___sys_sendmsg+0x190/0x1e0 [ 255.747845][ T8431] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.747876][ T8431] ? find_held_lock+0x2b/0x80 [ 255.747915][ T8431] __sys_sendmsg+0x170/0x220 [ 255.747940][ T8431] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.747980][ T8431] do_syscall_64+0xc9/0xf80 [ 255.748002][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.748021][ T8431] RIP: 0033:0x7f58a559aeb9 [ 255.748036][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.748053][ T8431] RSP: 002b:00007f58a6479028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.748071][ T8431] RAX: ffffffffffffffda RBX: 00007f58a5815fa0 RCX: 00007f58a559aeb9 [ 255.748083][ T8431] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.748094][ T8431] RBP: 00007f58a6479090 R08: 0000000000000000 R09: 0000000000000000 [ 255.748104][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.748115][ T8431] R13: 00007f58a5816038 R14: 00007f58a5815fa0 R15: 00007fffdb287608 [ 255.748140][ T8431] [ 256.257082][ T5821] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 256.445042][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.956631][ T5821] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 257.965926][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.981626][ T5821] usb 4-1: config 0 descriptor?? [ 257.989336][ T8427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.281639][ T8451] fuse: Bad value for 'rootmode' [ 258.288005][ T30] audit: type=1400 audit(1770449931.511:456): avc: denied { bind } for pid=8448 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.314180][ T8447] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 258.321993][ T8447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 258.338485][ T8447] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 258.445414][ T5821] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 258.866662][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.015730][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 259.102245][ T5821] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 259.110488][ T5821] usb 2-1: config 0 has no interface number 0 [ 259.153976][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 259.183407][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.227243][ T5821] usb 2-1: Product: syz [ 259.232098][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 259.235275][ T5821] usb 2-1: Manufacturer: syz [ 259.241030][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 259.440831][ T5821] usb 2-1: SerialNumber: syz [ 259.483923][ T5821] usb 2-1: config 0 descriptor?? [ 259.528852][ T8473] netlink: ct family unspecified [ 259.533993][ T8473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.860590][ T5821] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 259.894384][ T5821] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 260.186054][ T5821] usb 2-1: USB disconnect, device number 14 [ 260.514358][ T24] usb 4-1: USB disconnect, device number 16 [ 262.708447][ T8496] fuse: Unknown parameter 'use00000000000000000000' [ 262.736707][ T8499] netlink: 'syz.4.623': attribute type 4 has an invalid length. [ 262.776265][ T8501] x_tables: duplicate underflow at hook 1 [ 262.796851][ T30] audit: type=1400 audit(1770449936.023:457): avc: denied { read } for pid=8494 comm="syz.3.626" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 262.924586][ T8502] fuse: Unknown parameter '000000000000000000007120x0000000000000003' [ 262.968702][ T30] audit: type=1400 audit(1770449936.053:458): avc: denied { open } for pid=8494 comm="syz.3.626" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.112912][ T8510] FAULT_INJECTION: forcing a failure. [ 263.112912][ T8510] name failslab, interval 1, probability 0, space 0, times 0 [ 263.126580][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.0.628 Not tainted syzkaller #0 PREEMPT(full) [ 263.126604][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.126617][ T8510] Call Trace: [ 263.126623][ T8510] [ 263.126630][ T8510] dump_stack_lvl+0x100/0x190 [ 263.126664][ T8510] should_fail_ex.cold+0x5/0xa [ 263.126683][ T8510] should_failslab+0xc2/0x120 [ 263.126707][ T8510] ? tomoyo_realpath_from_path+0xb6/0x690 [ 263.126724][ T8510] __kmalloc_noprof+0xf6/0x9c0 [ 263.126743][ T8510] ? tomoyo_realpath_from_path+0xb6/0x690 [ 263.126759][ T8510] tomoyo_realpath_from_path+0xb6/0x690 [ 263.126779][ T8510] tomoyo_path_number_perm+0x23c/0x580 [ 263.126801][ T8510] ? tomoyo_path_number_perm+0x22e/0x580 [ 263.126824][ T8510] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.126848][ T8510] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 263.126887][ T8510] ? find_held_lock+0x2b/0x80 [ 263.126905][ T8510] ? hook_file_ioctl_common+0x146/0x410 [ 263.126923][ T8510] ? __fget_files+0x215/0x3d0 [ 263.126944][ T8510] ? __fget_files+0x21f/0x3d0 [ 263.126964][ T8510] security_file_ioctl+0xd3/0x230 [ 263.126980][ T8510] __x64_sys_ioctl+0xb7/0x210 [ 263.126995][ T8510] do_syscall_64+0xc9/0xf80 [ 263.127013][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.127028][ T8510] RIP: 0033:0x7f7de879aeb9 [ 263.127039][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.127052][ T8510] RSP: 002b:00007f7de69d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.127066][ T8510] RAX: ffffffffffffffda RBX: 00007f7de8a16180 RCX: 00007f7de879aeb9 [ 263.127075][ T8510] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000005 [ 263.127084][ T8510] RBP: 00007f7de69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 263.127092][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.127100][ T8510] R13: 00007f7de8a16218 R14: 00007f7de8a16180 R15: 00007ffd00de9aa8 [ 263.127119][ T8510] [ 263.127158][ T8510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.644207][ T30] audit: type=1400 audit(1770449936.053:459): avc: denied { ioctl } for pid=8494 comm="syz.3.626" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.778519][ T8521] FAULT_INJECTION: forcing a failure. [ 263.778519][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.799487][ T8517] lo speed is unknown, defaulting to 1000 [ 263.805539][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 263.805561][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.805572][ T8521] Call Trace: [ 263.805577][ T8521] [ 263.805584][ T8521] dump_stack_lvl+0x100/0x190 [ 263.805612][ T8521] should_fail_ex.cold+0x5/0xa [ 263.805631][ T8521] _copy_from_iter+0x1f4/0x1690 [ 263.805657][ T8521] ? __alloc_skb+0x220/0x410 [ 263.805677][ T8521] ? __alloc_skb+0x35d/0x410 [ 263.805697][ T8521] ? __pfx__copy_from_iter+0x10/0x10 [ 263.805719][ T8521] ? netlink_autobind.isra.0+0x130/0x370 [ 263.805754][ T8521] netlink_sendmsg+0x808/0xda0 [ 263.805783][ T8521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.805806][ T8521] ? __might_fault+0xb0/0x140 [ 263.805833][ T8521] ____sys_sendmsg+0xa54/0xc30 [ 263.805852][ T8521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.805880][ T8521] ___sys_sendmsg+0x190/0x1e0 [ 263.805900][ T8521] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.805927][ T8521] ? find_held_lock+0x2b/0x80 [ 263.805966][ T8521] __sys_sendmsg+0x170/0x220 [ 263.805989][ T8521] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.806027][ T8521] do_syscall_64+0xc9/0xf80 [ 263.806049][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.806066][ T8521] RIP: 0033:0x7f7de879aeb9 [ 263.806080][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.806096][ T8521] RSP: 002b:00007f7de9570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.806113][ T8521] RAX: ffffffffffffffda RBX: 00007f7de8a15fa0 RCX: 00007f7de879aeb9 [ 263.806124][ T8521] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 263.806134][ T8521] RBP: 00007f7de9570090 R08: 0000000000000000 R09: 0000000000000000 [ 263.806144][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.806153][ T8521] R13: 00007f7de8a16038 R14: 00007f7de8a15fa0 R15: 00007ffd00de9aa8 [ 263.806175][ T8521] [ 264.295942][ T30] audit: type=1400 audit(1770449937.524:460): avc: denied { write } for pid=8523 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 264.533615][ T5928] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 265.015684][ T5928] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 265.033927][ T5928] usb 4-1: config 8 has no interface number 0 [ 265.041075][ T5928] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 265.054382][ T5928] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 265.066405][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 265.075309][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 265.084154][ T8538] netlink: 'syz.0.637': attribute type 14 has an invalid length. [ 265.257589][ T5928] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 265.308633][ T8539] netlink: ct family unspecified [ 265.313706][ T8539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.344622][ T5928] usb 4-1: config 8 interface 177 has no altsetting 0 [ 265.364378][ T5928] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 265.383472][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.394867][ T8540] siw: device registration error -23 [ 265.418970][ T8522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.829477][ T8550] 9pnet_virtio: no channels available for device 127.0.0.1 [ 268.053192][ T5928] usb 4-1: string descriptor 0 read error: -71 [ 268.069741][ T5928] ir_toy 4-1:8.177: required endpoints not found [ 268.096194][ T5928] usb 4-1: USB disconnect, device number 17 [ 268.172265][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 268.365119][ T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 268.376960][ T9] usb 3-1: config 0 has no interface number 0 [ 268.391810][ T9] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 268.477884][ T9] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 268.520303][ T9] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.540609][ T9] usb 3-1: config 0 interface 113 has no altsetting 0 [ 268.560359][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 268.569588][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.596696][ T9] usb 3-1: Product: syz [ 268.611643][ T9] usb 3-1: Manufacturer: syz [ 268.681329][ T9] usb 3-1: SerialNumber: syz [ 268.705527][ T9] usb 3-1: config 0 descriptor?? [ 268.728825][ T9] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 268.815472][ T8578] netlink: 'syz.0.646': attribute type 15 has an invalid length. [ 268.842050][ T8580] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.647'. [ 268.871709][ T8578] netlink: 71 bytes leftover after parsing attributes in process `syz.0.646'. [ 268.985015][ T9] usb 3-1: USB disconnect, device number 17 [ 270.634438][ T8601] FAULT_INJECTION: forcing a failure. [ 270.634438][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.647592][ T8601] CPU: 1 UID: 0 PID: 8601 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(full) [ 270.647619][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.647630][ T8601] Call Trace: [ 270.647636][ T8601] [ 270.647643][ T8601] dump_stack_lvl+0x100/0x190 [ 270.647676][ T8601] should_fail_ex.cold+0x5/0xa [ 270.647695][ T8601] _copy_from_iter+0x1f4/0x1690 [ 270.647729][ T8601] ? __alloc_skb+0x220/0x410 [ 270.647748][ T8601] ? __alloc_skb+0x35d/0x410 [ 270.647769][ T8601] ? __pfx__copy_from_iter+0x10/0x10 [ 270.647798][ T8601] ? netlink_autobind.isra.0+0x130/0x370 [ 270.647829][ T8601] netlink_sendmsg+0x808/0xda0 [ 270.647854][ T8601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.647878][ T8601] ? __might_fault+0xb0/0x140 [ 270.647903][ T8601] ____sys_sendmsg+0xa54/0xc30 [ 270.647918][ T8601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.647940][ T8601] ___sys_sendmsg+0x190/0x1e0 [ 270.647958][ T8601] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.647973][ T8601] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 270.648011][ T8601] __sys_sendmsg+0x170/0x220 [ 270.648032][ T8601] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.648058][ T8601] ? rcu_is_watching+0x12/0xc0 [ 270.648082][ T8601] do_syscall_64+0xc9/0xf80 [ 270.648101][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.648115][ T8601] RIP: 0033:0x7f7de879aeb9 [ 270.648127][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.648140][ T8601] RSP: 002b:00007f7de69d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.648155][ T8601] RAX: ffffffffffffffda RBX: 00007f7de8a16180 RCX: 00007f7de879aeb9 [ 270.648166][ T8601] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 270.648174][ T8601] RBP: 00007f7de69d5090 R08: 0000000000000000 R09: 0000000000000000 [ 270.648182][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.648190][ T8601] R13: 00007f7de8a16218 R14: 00007f7de8a16180 R15: 00007ffd00de9aa8 [ 270.648209][ T8601] [ 271.422770][ T8604] netlink: 'syz.3.649': attribute type 4 has an invalid length. [ 273.373685][ T8615] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 273.396603][ T30] audit: type=1400 audit(1770449946.628:461): avc: denied { read } for pid=8614 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.610872][ T30] audit: type=1400 audit(1770449947.849:462): avc: denied { listen } for pid=8631 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 274.880521][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 274.928391][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 274.993795][ T8652] Driver unsupported XDP return value 0 on prog (id 99) dev N/A, expect packet loss! [ 275.455875][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 275.497443][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12815, setting to 64 [ 275.540420][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 275.554093][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.568533][ T10] usb 1-1: Product: syz [ 275.572724][ T10] usb 1-1: Manufacturer: syz [ 275.577328][ T10] usb 1-1: SerialNumber: syz [ 275.594482][ T10] usb 1-1: config 0 descriptor?? [ 275.604158][ T8634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.620398][ T10] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 275.899466][ T9] usb 1-1: USB disconnect, device number 19 [ 276.916955][ T8679] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 277.524149][ T30] audit: type=1400 audit(1770449950.750:463): avc: denied { mount } for pid=8683 comm="syz.3.676" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 277.670757][ T8699] openvswitch: netlink: Missing key (keys=40, expected=80) [ 277.691623][ T8699] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 277.799592][ T8685] pim6reg: entered allmulticast mode [ 277.813761][ T8689] team0: entered allmulticast mode [ 277.822217][ T8689] team_slave_0: entered allmulticast mode [ 277.843161][ T8689] team_slave_1: entered allmulticast mode [ 277.853059][ T8690] team0: left allmulticast mode [ 277.864485][ T8690] team_slave_0: left allmulticast mode [ 277.883135][ T8690] team_slave_1: left allmulticast mode [ 277.893337][ T8690] pim6reg: left allmulticast mode [ 277.905247][ T8700] overlay: Bad value for 'verity' [ 277.973934][ T8709] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 278.192446][ T30] audit: type=1400 audit(1770449951.421:464): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 278.483480][ T8715] binder: 8712:8715 ioctl 4018620d 0 returned -22 [ 279.032006][ T8717] tipc: Enabling of bearer rejected, failed to enable media [ 279.632694][ T8726] SQUASHFS error: Failed to read block 0x0: -5 [ 279.883551][ T8728] SQUASHFS error: Failed to read block 0x0: -5 [ 280.093888][ T8741] fuse: Unknown parameter 'user_id00000000000000000000' [ 280.236287][ T30] audit: type=1400 audit(1770449953.462:465): avc: denied { execute } for pid=8742 comm="syz.2.692" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=20988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 280.238127][ T8736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10768 sclass=netlink_route_socket pid=8736 comm=syz.3.689 [ 280.622005][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.931471][ T8754] netlink: 'syz.4.693': attribute type 10 has an invalid length. [ 280.980302][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'. [ 281.002516][ T8754] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 281.634064][ T8767] binder: 8764:8767 ioctl 4018620d 0 returned -22 [ 282.106923][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 282.255037][ T9] usb 4-1: device descriptor read/64, error -71 [ 282.504040][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.022696][ T8779] SQUASHFS error: Failed to read block 0x0: -5 [ 283.504429][ T9] usb 4-1: device descriptor read/64, error -71 [ 283.623478][ T9] usb usb4-port1: attempt power cycle [ 283.993313][ T5821] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.006653][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 284.841846][ T8797] siw: device registration error -23 [ 285.051213][ T9] usb 4-1: device descriptor read/8, error -71 [ 285.282662][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 285.295168][ T5821] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 285.339922][ T5821] usb 2-1: config 179 has no interface number 0 [ 285.423380][ T8811] binder: 8802:8811 ioctl c0306201 0 returned -14 [ 286.021363][ T5821] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 286.158614][ T8814] SQUASHFS error: Failed to read block 0x0: -5 [ 286.167924][ T8816] 9p: Bad value for 'rfdno' [ 286.181652][ T5821] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 286.203491][ T5821] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 286.215176][ T5821] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 286.225787][ T8816] sctp: [Deprecated]: syz.4.714 (pid 8816) Use of int in max_burst socket option deprecated. [ 286.225787][ T8816] Use struct sctp_assoc_value instead [ 287.300454][ T5821] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 287.326350][ T5821] usb 2-1: config 179 interface 65 has no altsetting 0 [ 287.334417][ T5821] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 287.344502][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.391942][ T5821] usb 2-1: can't set config #179, error -71 [ 287.471636][ T5821] usb 2-1: USB disconnect, device number 15 [ 288.551230][ T5928] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 288.599982][ T8848] FAULT_INJECTION: forcing a failure. [ 288.599982][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.621744][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.2.724 Not tainted syzkaller #0 PREEMPT(full) [ 288.621770][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 288.621780][ T8848] Call Trace: [ 288.621789][ T8848] [ 288.621795][ T8848] dump_stack_lvl+0x100/0x190 [ 288.621824][ T8848] should_fail_ex.cold+0x5/0xa [ 288.621844][ T8848] _copy_to_user+0x32/0xd0 [ 288.621870][ T8848] bpf_test_finish.isra.0+0x452/0x660 [ 288.621897][ T8848] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 288.621924][ T8848] ? 0xffffffffa02052c0 [ 288.621937][ T8848] ? bpf_dispatcher_change_prog+0x2dc/0xa60 [ 288.621959][ T8848] bpf_prog_test_run_xdp+0xa70/0x1670 [ 288.621993][ T8848] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.622022][ T8848] ? fput+0x79/0x100 [ 288.622044][ T8848] ? __bpf_prog_get+0x97/0x2a0 [ 288.622068][ T8848] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.622090][ T8848] __sys_bpf+0x1e56/0x5050 [ 288.622112][ T8848] ? __pfx___sys_bpf+0x10/0x10 [ 288.622129][ T8848] ? proc_fail_nth_write+0x9f/0x220 [ 288.622152][ T8848] ? find_held_lock+0x2b/0x80 [ 288.622180][ T8848] ? find_held_lock+0x2b/0x80 [ 288.622201][ T8848] ? ksys_write+0x190/0x250 [ 288.622225][ T8848] ? __mutex_unlock_slowpath+0x15c/0x790 [ 288.622259][ T8848] ? fput+0x79/0x100 [ 288.622282][ T8848] ? xfd_validate_state+0x129/0x190 [ 288.622308][ T8848] __x64_sys_bpf+0x7b/0xc0 [ 288.622327][ T8848] ? lockdep_hardirqs_on+0x78/0x100 [ 288.622346][ T8848] do_syscall_64+0xc9/0xf80 [ 288.622367][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.622384][ T8848] RIP: 0033:0x7f58a559aeb9 [ 288.622397][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.622413][ T8848] RSP: 002b:00007f58a6479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.622430][ T8848] RAX: ffffffffffffffda RBX: 00007f58a5815fa0 RCX: 00007f58a559aeb9 [ 288.622440][ T8848] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 288.622450][ T8848] RBP: 00007f58a6479090 R08: 0000000000000000 R09: 0000000000000000 [ 288.622460][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.622470][ T8848] R13: 00007f58a5816038 R14: 00007f58a5815fa0 R15: 00007fffdb287608 [ 288.622501][ T8848] [ 289.163057][ T8854] syzkaller0: entered promiscuous mode [ 289.168606][ T8854] syzkaller0: entered allmulticast mode [ 289.170682][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 289.571378][ T5928] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 289.586032][ T5928] usb 2-1: config 0 has no interface number 0 [ 289.595344][ T5928] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 289.606325][ T5928] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 289.619295][ T5928] usb 2-1: config 0 interface 126 has no altsetting 0 [ 289.631660][ T5928] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 289.771506][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.780491][ T5928] usb 2-1: Product: syz [ 289.784897][ T5928] usb 2-1: Manufacturer: syz [ 289.789603][ T5928] usb 2-1: SerialNumber: syz [ 290.513929][ T5928] usb 2-1: config 0 descriptor?? [ 290.626144][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 290.640174][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 290.647445][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 290.657517][ T8840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.657633][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 290.675515][ T8864] ceph: No mds server is up or the cluster is laggy [ 290.692136][ T30] audit: type=1400 audit(1770449963.927:466): avc: granted { setsecparam } for pid=8862 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 290.701213][ T8840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.648950][ T5133] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 291.682059][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 291.771507][ T5928] ir_usb 2-1:0.126: IR Dongle converter detected [ 291.808578][ T5928] usb 2-1: IRDA class descriptor not found, device not bound [ 291.855926][ T5928] usb 2-1: USB disconnect, device number 16 [ 292.097606][ T8903] FAULT_INJECTION: forcing a failure. [ 292.097606][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 292.116153][ T8903] CPU: 1 UID: 0 PID: 8903 Comm: syz.3.738 Not tainted syzkaller #0 PREEMPT(full) [ 292.116179][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.116190][ T8903] Call Trace: [ 292.116196][ T8903] [ 292.116201][ T8903] dump_stack_lvl+0x100/0x190 [ 292.116227][ T8903] should_fail_ex.cold+0x5/0xa [ 292.116245][ T8903] should_failslab+0xc2/0x120 [ 292.116268][ T8903] ? sk_prot_alloc+0x10b/0x2a0 [ 292.116295][ T8903] __kmalloc_noprof+0xf6/0x9c0 [ 292.116310][ T8903] ? __might_fault+0xc5/0x140 [ 292.116335][ T8903] ? sk_prot_alloc+0x10b/0x2a0 [ 292.116359][ T8903] sk_prot_alloc+0x10b/0x2a0 [ 292.116387][ T8903] sk_alloc+0x36/0xe80 [ 292.116408][ T8903] bpf_prog_test_run_skb+0x4cd/0x3140 [ 292.116440][ T8903] ? find_held_lock+0x2b/0x80 [ 292.116462][ T8903] ? __fget_files+0x215/0x3d0 [ 292.116497][ T8903] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 292.116523][ T8903] ? fput+0x79/0x100 [ 292.116549][ T8903] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 292.116573][ T8903] __sys_bpf+0x1e56/0x5050 [ 292.116595][ T8903] ? __pfx___sys_bpf+0x10/0x10 [ 292.116612][ T8903] ? proc_fail_nth_write+0x9f/0x220 [ 292.116635][ T8903] ? find_held_lock+0x2b/0x80 [ 292.116662][ T8903] ? find_held_lock+0x2b/0x80 [ 292.116683][ T8903] ? ksys_write+0x190/0x250 [ 292.116706][ T8903] ? __mutex_unlock_slowpath+0x15c/0x790 [ 292.116740][ T8903] ? fput+0x79/0x100 [ 292.116763][ T8903] ? ksys_write+0x1ac/0x250 [ 292.116782][ T8903] ? __pfx_ksys_write+0x10/0x10 [ 292.116804][ T8903] __x64_sys_bpf+0x7b/0xc0 [ 292.116824][ T8903] ? lockdep_hardirqs_on+0x78/0x100 [ 292.116843][ T8903] do_syscall_64+0xc9/0xf80 [ 292.116861][ T8903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.116878][ T8903] RIP: 0033:0x7fb70a19aeb9 [ 292.116893][ T8903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.116908][ T8903] RSP: 002b:00007fb7083f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.116925][ T8903] RAX: ffffffffffffffda RBX: 00007fb70a415fa0 RCX: 00007fb70a19aeb9 [ 292.116935][ T8903] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 292.116945][ T8903] RBP: 00007fb7083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.116954][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.116964][ T8903] R13: 00007fb70a416038 R14: 00007fb70a415fa0 R15: 00007fffc254b728 [ 292.116988][ T8903] [ 292.836331][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 292.845317][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 293.381829][ T8921] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 293.448318][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 294.287584][ T8938] netlink: ct family unspecified [ 294.293096][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.592899][ T30] audit: type=1400 audit(1770449967.839:467): avc: denied { audit_write } for pid=8943 comm="syz.4.747" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 294.638614][ T30] audit: type=1400 audit(1770449967.859:468): avc: denied { mount } for pid=8943 comm="syz.4.747" name="/" dev="configfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 294.847759][ T30] audit: type=1400 audit(1770449967.859:469): avc: denied { getopt } for pid=8943 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.031167][ T30] audit: type=1400 audit(1770449967.859:470): avc: denied { search } for pid=8943 comm="syz.4.747" name="/" dev="configfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.116378][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 295.125221][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 295.157632][ T30] audit: type=1400 audit(1770449967.919:471): avc: denied { read open } for pid=8943 comm="syz.4.747" path="/" dev="configfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.341593][ T8962] netlink: ct family unspecified [ 295.346606][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.387285][ T30] audit: type=1400 audit(1770449967.919:472): avc: denied { watch watch_reads } for pid=8943 comm="syz.4.747" path="/" dev="configfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.429896][ T30] audit: type=1400 audit(1770449968.239:473): avc: denied { write } for pid=8950 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.453096][ T30] audit: type=1400 audit(1770449968.239:474): avc: denied { read } for pid=8950 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 295.474206][ T30] audit: type=1400 audit(1770449968.309:475): avc: denied { ioctl } for pid=8952 comm="syz.1.749" path="socket:[20376]" dev="sockfs" ino=20376 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.099880][ T8974] : entered allmulticast mode [ 296.560982][ T8980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.615469][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.038082][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 297.645039][ T8998] fuse: Unknown parameter '0x0000000000000003' [ 298.303559][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.303590][ T30] audit: type=1400 audit(1770449971.501:477): avc: denied { map } for pid=9005 comm="syz.0.767" path="socket:[21351]" dev="sockfs" ino=21351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.343096][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 298.485931][ T30] audit: type=1400 audit(1770449971.501:478): avc: denied { read accept } for pid=9005 comm="syz.0.767" path="socket:[21351]" dev="sockfs" ino=21351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.497647][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 298.872480][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 298.897171][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.943621][ T24] usb 2-1: config 0 descriptor?? [ 298.949520][ T9003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.010138][ T9021] syzkaller0: entered promiscuous mode [ 299.026436][ T9021] syzkaller0: entered allmulticast mode [ 299.931357][ T9023] Invalid logical block size (768) [ 300.144291][ T24] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 300.808869][ T24] usb 2-1: USB disconnect, device number 17 [ 300.898100][ T9036] fido_id[9036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 301.175102][ T9045] No control pipe specified [ 301.187796][ T30] audit: type=1400 audit(1770449974.432:479): avc: denied { mount } for pid=9044 comm="syz.4.781" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 301.242519][ T9047] Cannot find set identified by id 0 to match [ 302.110384][ T9060] netlink: 'syz.2.783': attribute type 12 has an invalid length. [ 302.164524][ T30] audit: type=1400 audit(1770449975.373:480): avc: denied { getopt } for pid=9049 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.407144][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 303.464389][ T9060] netlink: 'syz.2.783': attribute type 29 has an invalid length. [ 303.472202][ T9060] netlink: 148 bytes leftover after parsing attributes in process `syz.2.783'. [ 304.034967][ T116] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 304.194463][ T9080] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 304.214440][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.779'. [ 304.234915][ T116] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 304.243811][ T116] usb 2-1: config 0 has no interface number 0 [ 304.251980][ T116] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 304.274259][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 304.282591][ T116] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.335935][ T116] usb 2-1: config 0 interface 113 has no altsetting 0 [ 304.355107][ T116] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 304.373264][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.381265][ T116] usb 2-1: Product: syz [ 304.396493][ T30] audit: type=1400 audit(1770449977.644:481): avc: denied { write } for pid=9081 comm="syz.0.789" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 304.396811][ T9084] 0x000000000001-0x00000000000a : "" [ 304.433141][ T116] usb 2-1: Manufacturer: syz [ 304.437757][ T116] usb 2-1: SerialNumber: syz [ 304.460827][ T116] usb 2-1: config 0 descriptor?? [ 304.473881][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 304.474429][ T116] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 304.498640][ T9] usb 3-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 304.520001][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 304.542403][ T9084] ftl_cs: FTL header corrupt! [ 304.565492][ T9] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=4e.fd [ 304.717863][ T5813] usb 2-1: USB disconnect, device number 18 [ 304.733867][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.752124][ T9] usb 3-1: Product: syz [ 304.757492][ T9] usb 3-1: Manufacturer: syz [ 304.762219][ T9] usb 3-1: SerialNumber: syz [ 305.012569][ T9073] syzkaller1: entered promiscuous mode [ 305.021463][ T9073] syzkaller1: entered allmulticast mode [ 305.197205][ T9104] fuse: Unknown parameter 'use00000000000000000000' [ 305.223993][ T5928] usb 3-1: USB disconnect, device number 18 [ 305.336724][ T9096] kvm: pic: non byte read [ 305.341171][ T9096] kvm: pic: non byte read [ 305.365310][ T9109] netlink: 'syz.3.797': attribute type 12 has an invalid length. [ 305.394719][ T9109] netlink: 'syz.3.797': attribute type 29 has an invalid length. [ 305.412701][ T9096] kvm: pic: non byte read [ 305.417510][ T9096] kvm: pic: non byte read [ 305.431982][ T9096] kvm: pic: level sensitive irq not supported [ 305.432813][ T9096] kvm: pic: non byte read [ 305.439635][ T9109] netlink: 148 bytes leftover after parsing attributes in process `syz.3.797'. [ 305.455636][ T9096] kvm: pic: level sensitive irq not supported [ 305.456012][ T9096] kvm: pic: non byte read [ 305.468984][ T9096] kvm: pic: level sensitive irq not supported [ 305.469202][ T9096] kvm: pic: non byte read [ 305.480836][ T9096] kvm: pic: level sensitive irq not supported [ 305.481066][ T9096] kvm: pic: non byte read [ 305.494314][ T9096] kvm: pic: level sensitive irq not supported [ 305.494552][ T9096] kvm: pic: non byte read [ 305.505907][ T9096] kvm: pic: level sensitive irq not supported [ 305.506206][ T9096] kvm: pic: non byte read [ 305.530140][ T9111] openvswitch: netlink: IP tunnel TTL not specified. [ 305.879367][ T30] audit: type=1400 audit(1770449978.954:482): avc: denied { setopt } for pid=9110 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 306.202241][ T5813] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 306.546735][ T9130] loop6: detected capacity change from 0 to 2640 [ 306.557896][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.570902][ T5813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 306.586844][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.596993][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.612146][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 306.634886][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.645638][ T5813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.658190][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.671592][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.686209][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.697730][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 306.706955][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.721732][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.727189][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 306.742005][ T5813] usb 2-1: Product: syz [ 306.746207][ T5813] usb 2-1: Manufacturer: syz [ 306.751435][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 306.763355][ T5813] usb 2-1: SerialNumber: syz [ 306.771231][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 306.784268][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 306.793410][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 306.920644][ T5800] ldm_validate_partition_table(): Disk read failed. [ 306.929578][ T30] audit: type=1400 audit(1770449980.145:483): avc: denied { ioctl } for pid=9129 comm="syz.3.803" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 307.216423][ T5813] usb 2-1: config 0 descriptor?? [ 307.225747][ T9116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.366310][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.524333][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 307.544483][ T5800] Dev loop6: unable to read RDB block 0 [ 307.553754][ T116] usb 2-1: USB disconnect, device number 19 [ 307.577769][ T5800] loop6: unable to read partition table [ 307.605935][ T9130] ldm_validate_partition_table(): Disk read failed. [ 307.624915][ T9130] Dev loop6: unable to read RDB block 0 [ 307.641165][ T9130] loop6: unable to read partition table [ 307.691818][ T9130] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 307.858203][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 307.934553][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 308.151825][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 308.763800][ T9145] syzkaller0: entered promiscuous mode [ 308.785830][ T9145] syzkaller0: entered allmulticast mode [ 309.154404][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 309.397719][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.470430][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 309.487556][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac [ 309.513926][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.546618][ T9] usb 4-1: config 0 descriptor?? [ 309.572028][ T9] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 309.782231][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 309.792038][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 309.801754][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 309.826746][ T9137] netlink: 'syz.3.805': attribute type 21 has an invalid length. [ 309.943772][ T5928] usb 4-1: USB disconnect, device number 22 [ 310.040395][ T9172] netlink: ct family unspecified [ 310.045401][ T9172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.472329][ T30] audit: type=1400 audit(1770449983.727:484): avc: denied { shutdown } for pid=9182 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.574673][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 311.014501][ T9198] input: syz0 as /devices/virtual/input/input13 [ 311.140496][ T30] audit: type=1400 audit(1770449984.387:485): avc: denied { listen } for pid=9191 comm="syz.3.820" lport=41933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.190942][ T30] audit: type=1400 audit(1770449984.387:486): avc: denied { accept } for pid=9191 comm="syz.3.820" lport=41933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 311.371326][ T30] audit: type=1400 audit(1770449984.627:487): avc: denied { write } for pid=9210 comm="syz.1.824" path="socket:[22767]" dev="sockfs" ino=22767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.394903][ T9196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9196 comm=syz.0.821 [ 311.435482][ T9215] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 311.487547][ T30] audit: type=1400 audit(1770449984.687:488): avc: denied { connect } for pid=9210 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.568121][ T30] audit: type=1400 audit(1770449984.787:489): avc: denied { relabelto } for pid=9210 comm="syz.1.824" name="157" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 311.615379][ T30] audit: type=1400 audit(1770449984.787:490): avc: denied { associate } for pid=9210 comm="syz.1.824" name="157" dev="tmpfs" ino=856 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 311.855040][ T9221] siw: device registration error -23 [ 312.255514][ T30] audit: type=1400 audit(1770449985.027:491): avc: denied { connect } for pid=9210 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.316548][ T30] audit: type=1400 audit(1770449985.037:492): avc: denied { connect } for pid=9210 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.375568][ T30] audit: type=1400 audit(1770449985.588:493): avc: denied { add_name } for pid=9210 comm="syz.1.824" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 312.478080][ T9224] FAULT_INJECTION: forcing a failure. [ 312.478080][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 312.508735][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.2.826 Not tainted syzkaller #0 PREEMPT(full) [ 312.508761][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.508771][ T9224] Call Trace: [ 312.508777][ T9224] [ 312.508788][ T9224] dump_stack_lvl+0x100/0x190 [ 312.508816][ T9224] should_fail_ex.cold+0x5/0xa [ 312.508836][ T9224] should_failslab+0xc2/0x120 [ 312.508859][ T9224] __kmalloc_cache_noprof+0x80/0x810 [ 312.508876][ T9224] ? dvb_dmxdev_add_pid+0x14f/0x380 [ 312.508897][ T9224] ? do_raw_spin_lock+0x128/0x260 [ 312.508920][ T9224] ? dvb_dmxdev_add_pid+0x14f/0x380 [ 312.508939][ T9224] dvb_dmxdev_add_pid+0x14f/0x380 [ 312.508963][ T9224] dvb_demux_do_ioctl+0x6b5/0x1200 [ 312.508993][ T9224] dvb_usercopy+0x167/0x340 [ 312.509011][ T9224] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 312.509034][ T9224] ? __pfx_dvb_usercopy+0x10/0x10 [ 312.509065][ T9224] ? selinux_file_ioctl+0x139/0x290 [ 312.509083][ T9224] ? selinux_file_ioctl+0xb4/0x290 [ 312.509103][ T9224] dvb_demux_ioctl+0x29/0x40 [ 312.509122][ T9224] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 312.509141][ T9224] __x64_sys_ioctl+0x18e/0x210 [ 312.509161][ T9224] do_syscall_64+0xc9/0xf80 [ 312.509184][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.509201][ T9224] RIP: 0033:0x7f58a559aeb9 [ 312.509216][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.509233][ T9224] RSP: 002b:00007f58a6479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.509250][ T9224] RAX: ffffffffffffffda RBX: 00007f58a5815fa0 RCX: 00007f58a559aeb9 [ 312.509261][ T9224] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 312.509271][ T9224] RBP: 00007f58a6479090 R08: 0000000000000000 R09: 0000000000000000 [ 312.509281][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.509291][ T9224] R13: 00007f58a5816038 R14: 00007f58a5815fa0 R15: 00007fffdb287608 [ 312.509315][ T9224] [ 312.901364][ T9234] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 312.937051][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 313.010224][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 313.132026][ T9246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 313.138570][ T9246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 313.154923][ T9246] vhci_hcd vhci_hcd.0: Device attached [ 313.175059][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 313.185135][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.207024][ T9] usb 3-1: config 0 descriptor?? [ 313.388784][ T24] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 313.428808][ T5813] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 313.602576][ T5813] usb 4-1: config 0 has no interfaces? [ 313.613964][ T5813] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 313.624865][ T9] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 313.635615][ T5813] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 313.644611][ T9] hackrf 3-1:0.0: Could not detect board [ 313.655033][ T9] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 313.663921][ T5813] usb 4-1: Manufacturer: syz [ 313.678922][ T5813] usb 4-1: config 0 descriptor?? [ 313.699424][ T9] usb 3-1: USB disconnect, device number 19 [ 314.098720][ T9247] vhci_hcd: cannot find a urb of seqnum 1663411776 max seqnum 2 [ 314.115533][ T36] vhci_hcd vhci_hcd.3: stop threads [ 314.123808][ T5928] usb 4-1: USB disconnect, device number 23 [ 314.130274][ T36] vhci_hcd vhci_hcd.3: release socket [ 314.137493][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 314.708475][ T9270] FAULT_INJECTION: forcing a failure. [ 314.708475][ T9270] name failslab, interval 1, probability 0, space 0, times 0 [ 314.832413][ T9270] CPU: 1 UID: 0 PID: 9270 Comm: syz.0.840 Not tainted syzkaller #0 PREEMPT(full) [ 314.832438][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 314.832447][ T9270] Call Trace: [ 314.832452][ T9270] [ 314.832458][ T9270] dump_stack_lvl+0x100/0x190 [ 314.832485][ T9270] should_fail_ex.cold+0x5/0xa [ 314.832505][ T9270] should_failslab+0xc2/0x120 [ 314.832526][ T9270] ? fib6_info_alloc+0x40/0x160 [ 314.832549][ T9270] __kmalloc_noprof+0xf6/0x9c0 [ 314.832565][ T9270] ? stack_trace_save+0x8e/0xc0 [ 314.832594][ T9270] ? fib6_info_alloc+0x40/0x160 [ 314.832616][ T9270] fib6_info_alloc+0x40/0x160 [ 314.832639][ T9270] ip6_route_info_create+0x14c/0xad0 [ 314.832664][ T9270] ip6_route_add+0x4b/0x1d0 [ 314.832682][ T9270] ipv6_route_ioctl+0x42d/0x5c0 [ 314.832705][ T9270] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 314.832722][ T9270] ? find_held_lock+0x2b/0x80 [ 314.832768][ T9270] inet6_ioctl+0x26a/0x2b0 [ 314.832788][ T9270] ? __pfx_inet6_ioctl+0x10/0x10 [ 314.832823][ T9270] sock_do_ioctl+0x118/0x280 [ 314.832841][ T9270] ? __pfx_sock_do_ioctl+0x10/0x10 [ 314.832856][ T9270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.832886][ T9270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 314.832902][ T9270] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 314.832924][ T9270] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 314.832947][ T9270] sock_ioctl+0x599/0x6b0 [ 314.832966][ T9270] ? __pfx_sock_ioctl+0x10/0x10 [ 314.832988][ T9270] ? selinux_file_ioctl+0x139/0x290 [ 314.833003][ T9270] ? selinux_file_ioctl+0xb4/0x290 [ 314.833022][ T9270] ? __pfx_sock_ioctl+0x10/0x10 [ 314.833039][ T9270] __x64_sys_ioctl+0x18e/0x210 [ 314.833057][ T9270] do_syscall_64+0xc9/0xf80 [ 314.833078][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.833095][ T9270] RIP: 0033:0x7f7de879aeb9 [ 314.833119][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.833135][ T9270] RSP: 002b:00007f7de9570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.833152][ T9270] RAX: ffffffffffffffda RBX: 00007f7de8a15fa0 RCX: 00007f7de879aeb9 [ 314.833163][ T9270] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003 [ 314.833172][ T9270] RBP: 00007f7de9570090 R08: 0000000000000000 R09: 0000000000000000 [ 314.833182][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.833192][ T9270] R13: 00007f7de8a16038 R14: 00007f7de8a15fa0 R15: 00007ffd00de9aa8 [ 314.833214][ T9270] [ 315.138148][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 315.483153][ T9284] FAULT_INJECTION: forcing a failure. [ 315.483153][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.547615][ T9284] CPU: 0 UID: 0 PID: 9284 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) [ 315.547641][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 315.547650][ T9284] Call Trace: [ 315.547656][ T9284] [ 315.547662][ T9284] dump_stack_lvl+0x100/0x190 [ 315.547686][ T9284] should_fail_ex.cold+0x5/0xa [ 315.547701][ T9284] _copy_from_user+0x2e/0xd0 [ 315.547721][ T9284] memdup_user+0x6b/0xe0 [ 315.547740][ T9284] ucma_set_option+0x11f/0x530 [ 315.547753][ T9284] ? __might_fault+0xc5/0x140 [ 315.547769][ T9284] ? __pfx_ucma_set_option+0x10/0x10 [ 315.547787][ T9284] ? __pfx_ucma_set_option+0x10/0x10 [ 315.547800][ T9284] ucma_write+0x1fb/0x330 [ 315.547821][ T9284] ? __pfx_ucma_write+0x10/0x10 [ 315.547840][ T9284] ? bpf_lsm_file_permission+0x9/0x10 [ 315.547859][ T9284] ? security_file_permission+0x76/0x210 [ 315.547876][ T9284] ? rw_verify_area+0xce/0x6d0 [ 315.547892][ T9284] vfs_write+0x2aa/0x1070 [ 315.547907][ T9284] ? __pfx_ucma_write+0x10/0x10 [ 315.547928][ T9284] ? __pfx_vfs_write+0x10/0x10 [ 315.547942][ T9284] ? find_held_lock+0x2b/0x80 [ 315.547961][ T9284] ? __fget_files+0x215/0x3d0 [ 315.547978][ T9284] ? __fget_files+0x215/0x3d0 [ 315.547998][ T9284] ? __fget_files+0x21f/0x3d0 [ 315.548019][ T9284] ksys_write+0x1f8/0x250 [ 315.548035][ T9284] ? __pfx_ksys_write+0x10/0x10 [ 315.548058][ T9284] do_syscall_64+0xc9/0xf80 [ 315.548076][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.548090][ T9284] RIP: 0033:0x7f58a559aeb9 [ 315.548102][ T9284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.548115][ T9284] RSP: 002b:00007f58a6479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.548129][ T9284] RAX: ffffffffffffffda RBX: 00007f58a5815fa0 RCX: 00007f58a559aeb9 [ 315.548138][ T9284] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 315.548147][ T9284] RBP: 00007f58a6479090 R08: 0000000000000000 R09: 0000000000000000 [ 315.548155][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.548163][ T9284] R13: 00007f58a5816038 R14: 00007f58a5815fa0 R15: 00007fffdb287608 [ 315.548182][ T9284] [ 317.095468][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.101942][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.148894][ T5948] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 317.516735][ T5948] usb 1-1: Invalid ep0 maxpacket: 16 [ 317.620057][ T9310] bridge0: port 4(veth0_to_bridge) entered blocking state [ 317.628233][ T9310] bridge0: port 4(veth0_to_bridge) entered disabled state [ 317.636663][ T9310] veth0_to_bridge: entered allmulticast mode [ 317.646377][ T9310] veth0_to_bridge: entered promiscuous mode [ 317.646638][ T5948] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 317.652472][ T9310] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.265318][ T9310] bridge0: port 4(veth0_to_bridge) entered blocking state [ 318.272584][ T9310] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 318.448209][ T5948] usb 1-1: Invalid ep0 maxpacket: 16 [ 318.495693][ T5948] usb usb1-port1: attempt power cycle [ 318.505984][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 319.338062][ T9335] netlink: ct family unspecified [ 319.343148][ T9335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.744119][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 319.769192][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 319.803115][ T9341] FAULT_INJECTION: forcing a failure. [ 319.803115][ T9341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.817619][ T9336] ceph: No mds server is up or the cluster is laggy [ 319.889628][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.3.862 Not tainted syzkaller #0 PREEMPT(full) [ 319.889644][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.889651][ T9341] Call Trace: [ 319.889655][ T9341] [ 319.889659][ T9341] dump_stack_lvl+0x100/0x190 [ 319.889679][ T9341] should_fail_ex.cold+0x5/0xa [ 319.889691][ T9341] _copy_from_iter+0x1f4/0x1690 [ 319.889710][ T9341] ? __build_skb_around+0x278/0x390 [ 319.889722][ T9341] ? __pfx__copy_from_iter+0x10/0x10 [ 319.889738][ T9341] ? __pfx___schedule+0x10/0x10 [ 319.889749][ T9341] ? __pfx___alloc_skb+0x10/0x10 [ 319.889766][ T9341] skb_copy_datagram_from_iter+0x11f/0x720 [ 319.889780][ T9341] ? preempt_schedule_thunk+0x16/0x30 [ 319.889796][ T9341] tun_get_user+0x1884/0x3e10 [ 319.889819][ T9341] ? __pfx_tun_get_user+0x10/0x10 [ 319.889835][ T9341] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 319.889857][ T9341] ? find_held_lock+0x2b/0x80 [ 319.889872][ T9341] ? tun_get+0x191/0x370 [ 319.889885][ T9341] ? tun_get+0x191/0x370 [ 319.889903][ T9341] tun_chr_write_iter+0xdc/0x200 [ 319.889920][ T9341] vfs_write+0x6ac/0x1070 [ 319.889933][ T9341] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 319.889950][ T9341] ? __pfx_vfs_write+0x10/0x10 [ 319.889961][ T9341] ? find_held_lock+0x2b/0x80 [ 319.889985][ T9341] ksys_write+0x12a/0x250 [ 319.889997][ T9341] ? __pfx_ksys_write+0x10/0x10 [ 319.890013][ T9341] do_syscall_64+0xc9/0xf80 [ 319.890027][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.890038][ T9341] RIP: 0033:0x7fb70a19aeb9 [ 319.890047][ T9341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.890057][ T9341] RSP: 002b:00007fb7083f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.890067][ T9341] RAX: ffffffffffffffda RBX: 00007fb70a415fa0 RCX: 00007fb70a19aeb9 [ 319.890074][ T9341] RDX: 000000000000009e RSI: 0000200000000dc0 RDI: 0000000000000003 [ 319.890080][ T9341] RBP: 00007fb7083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.890086][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.890092][ T9341] R13: 00007fb70a416038 R14: 00007fb70a415fa0 R15: 00007fffc254b728 [ 319.890111][ T9341] [ 321.066622][ T5813] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 321.317780][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 321.972730][ T5813] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.984174][ T5813] usb 3-1: config 0 has no interface number 0 [ 322.000465][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 322.011453][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.238262][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 322.238278][ T30] audit: type=1400 audit(1770449995.483:503): avc: denied { associate } for pid=9352 comm="syz.3.864" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 322.286240][ T5813] usb 3-1: Product: syz [ 322.300642][ T5813] usb 3-1: Manufacturer: syz [ 322.344032][ T5813] usb 3-1: SerialNumber: syz [ 322.365347][ T5813] usb 3-1: config 0 descriptor?? [ 322.386021][ T5813] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 322.591144][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 322.624404][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 322.713994][ T5948] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 322.914217][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 322.973690][ T5948] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 323.052844][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 323.080740][ T5948] usb 2-1: Product: syz [ 323.108759][ T5948] usb 2-1: Manufacturer: syz [ 323.113400][ T5948] usb 2-1: SerialNumber: syz [ 323.167336][ T5948] usb 2-1: config 0 descriptor?? [ 323.190154][ T9370] lo speed is unknown, defaulting to 1000 [ 323.205703][ T5948] gspca_main: sq905-2.14.0 probing 2770:9120 [ 323.292443][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.873'. [ 323.596207][ T9379] netlink: ct family unspecified [ 323.601325][ T9379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.714049][ T30] audit: type=1400 audit(1770449996.903:504): avc: denied { create } for pid=9362 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 323.859269][ T5948] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 323.926474][ T5948] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 323.936672][ T30] audit: type=1400 audit(1770449996.903:505): avc: denied { write } for pid=9362 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 323.968650][ T5948] usb 2-1: USB disconnect, device number 20 [ 324.209836][ T9389] FAULT_INJECTION: forcing a failure. [ 324.209836][ T9389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.248859][ T9389] CPU: 1 UID: 0 PID: 9389 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(full) [ 324.248883][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 324.248893][ T9389] Call Trace: [ 324.248899][ T9389] [ 324.248906][ T9389] dump_stack_lvl+0x100/0x190 [ 324.248934][ T9389] should_fail_ex.cold+0x5/0xa [ 324.248954][ T9389] _copy_from_user+0x2e/0xd0 [ 324.248978][ T9389] binder_thread_write+0x953/0x4d70 [ 324.249005][ T9389] ? __lock_acquire+0x4a5/0x2630 [ 324.249022][ T9389] ? __pfx_binder_thread_write+0x10/0x10 [ 324.249041][ T9389] ? binder_debug+0xe0/0x190 [ 324.249070][ T9389] ? __pfx_binder_debug+0x10/0x10 [ 324.249095][ T9389] ? binder_debug+0xe0/0x190 [ 324.249118][ T9389] ? __pfx_binder_debug+0x10/0x10 [ 324.249155][ T9389] binder_ioctl+0x28b8/0x7450 [ 324.249180][ T9389] ? tomoyo_path_number_perm+0x188/0x580 [ 324.249214][ T9389] ? __pfx_binder_ioctl+0x10/0x10 [ 324.249234][ T9389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.249262][ T9389] ? do_vfs_ioctl+0x226/0x13e0 [ 324.249280][ T9389] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 324.249295][ T9389] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 324.249317][ T9389] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 324.249352][ T9389] ? selinux_file_ioctl+0x139/0x290 [ 324.249368][ T9389] ? selinux_file_ioctl+0xb4/0x290 [ 324.249387][ T9389] ? __pfx_binder_ioctl+0x10/0x10 [ 324.249404][ T9389] __x64_sys_ioctl+0x18e/0x210 [ 324.249422][ T9389] do_syscall_64+0xc9/0xf80 [ 324.249443][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.249461][ T9389] RIP: 0033:0x7f7de879aeb9 [ 324.249475][ T9389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.249491][ T9389] RSP: 002b:00007f7de9570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.249508][ T9389] RAX: ffffffffffffffda RBX: 00007f7de8a15fa0 RCX: 00007f7de879aeb9 [ 324.249519][ T9389] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 324.249529][ T9389] RBP: 00007f7de9570090 R08: 0000000000000000 R09: 0000000000000000 [ 324.249539][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.249549][ T9389] R13: 00007f7de8a16038 R14: 00007f7de8a15fa0 R15: 00007ffd00de9aa8 [ 324.249571][ T9389] [ 324.249580][ T9389] binder: 9388:9389 ioctl c0306201 2000000001c0 returned -14 [ 324.821439][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 324.832612][ T5813] usb 3-1: USB disconnect, device number 20 [ 324.920442][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 324.958314][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 324.996263][ T5813] quatech2 3-1:0.51: device disconnected [ 327.352388][ T9423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.885'. [ 327.811829][ T9425] netlink: ct family unspecified [ 327.816832][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.666250][ C1] sched: DL replenish lagged too much [ 380.900578][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.767946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.905817][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.920618][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.260433][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 509.267400][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8984/1:b..l [ 509.275718][ C1] rcu: (detected by 1, t=10503 jiffies, g=26721, q=958 ncpus=2) [ 509.283426][ C1] task:syz.4.757 state:R running task stack:27528 pid:8984 tgid:8984 ppid:5806 task_flags:0x40044c flags:0x00080002 [ 509.297848][ C1] Call Trace: [ 509.301132][ C1] [ 509.304062][ C1] ? __schedule+0xf65/0x5e10 [ 509.308649][ C1] __schedule+0xfe4/0x5e10 [ 509.313062][ C1] ? irqentry_exit+0x180/0x670 [ 509.317834][ C1] ? __pfx___schedule+0x10/0x10 [ 509.322685][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 509.328054][ C1] preempt_schedule_common+0x42/0xc0 [ 509.333332][ C1] preempt_schedule_thunk+0x16/0x30 [ 509.338528][ C1] _raw_spin_unlock+0x3e/0x50 [ 509.343197][ C1] unmap_page_range+0x14ee/0x43e0 [ 509.348247][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 509.353618][ C1] ? mas_next_slot+0x1003/0x18b0 [ 509.358555][ C1] ? uprobe_munmap+0x9e/0x600 [ 509.363228][ C1] unmap_single_vma+0x153/0x240 [ 509.368080][ C1] unmap_vmas+0x218/0x470 [ 509.372411][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 509.377261][ C1] ? mas_next_slot+0x1003/0x18b0 [ 509.382209][ C1] exit_mmap+0x181/0xae0 [ 509.386455][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 509.391220][ C1] ? __lock_acquire+0x4a5/0x2630 [ 509.396162][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 509.401794][ C1] __mmput+0x12a/0x410 [ 509.405865][ C1] mmput+0x67/0x80 [ 509.409697][ C1] do_exit+0x78a/0x2a30 [ 509.413849][ C1] ? __pfx_do_exit+0x10/0x10 [ 509.418431][ C1] ? cgroup_update_frozen_flag+0x107/0x210 [ 509.424239][ C1] ? find_held_lock+0x2b/0x80 [ 509.428917][ C1] ? get_signal+0x184f/0x21e0 [ 509.433605][ C1] do_group_exit+0xd5/0x2a0 [ 509.438104][ C1] get_signal+0x1ec7/0x21e0 [ 509.442606][ C1] ? __asan_memset+0x23/0x50 [ 509.447197][ C1] ? __pfx_get_signal+0x10/0x10 [ 509.452048][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 509.457246][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 509.462796][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 509.467990][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 509.474147][ C1] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 509.479956][ C1] exit_to_user_mode_loop+0x86/0x4b0 [ 509.485241][ C1] ? rcu_is_watching+0x12/0xc0 [ 509.490011][ C1] do_syscall_64+0x4fe/0xf80 [ 509.494608][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.500502][ C1] RIP: 0033:0x7f55cc35b78e [ 509.504915][ C1] RSP: 002b:00007f55cd2d4f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 509.513328][ C1] RAX: fffffffffffffdfc RBX: 00007f55cd2d56c0 RCX: 00007f55cc35b78e [ 509.521305][ C1] RDX: 00007f55cd2d4fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.529277][ C1] RBP: 00007f55cc408c1f R08: 0000000000000000 R09: 0000000000000000 [ 509.537242][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.545208][ C1] R13: 00007f55cc616038 R14: 00007f55cc615fa0 R15: 00007ffe995ce8d8 [ 509.553188][ C1] [ 509.556203][ C1] rcu: rcu_preempt kthread starved for 5418 jiffies! g26721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 509.567299][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 509.577259][ C1] rcu: RCU grace-period kthread stack dump: [ 509.583141][ C1] task:rcu_preempt state:R running task stack:29144 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 509.596631][ C1] Call Trace: [ 509.599904][ C1] [ 509.602832][ C1] ? __schedule+0xf65/0x5e10 [ 509.607420][ C1] __schedule+0xfe4/0x5e10 [ 509.611830][ C1] ? __lock_acquire+0x4a5/0x2630 [ 509.616772][ C1] ? __pfx___schedule+0x10/0x10 [ 509.621614][ C1] ? find_held_lock+0x2b/0x80 [ 509.626290][ C1] ? schedule+0x2bf/0x390 [ 509.630618][ C1] schedule+0xdd/0x390 [ 509.634683][ C1] schedule_timeout+0x127/0x280 [ 509.639536][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 509.644912][ C1] ? __pfx_process_timeout+0x10/0x10 [ 509.650200][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 509.656000][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 509.661455][ C1] rcu_gp_fqs_loop+0x1a9/0xb00 [ 509.666214][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 509.671493][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 509.676947][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 509.681888][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 509.687091][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 509.692902][ C1] rcu_gp_kthread+0x21e/0x320 [ 509.697597][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.702789][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 509.708599][ C1] ? __kthread_parkme+0x18c/0x230 [ 509.713627][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.718818][ C1] kthread+0x3b3/0x730 [ 509.722883][ C1] ? __pfx_kthread+0x10/0x10 [ 509.727467][ C1] ? ret_from_fork+0x79/0xaf0 [ 509.732139][ C1] ? ret_from_fork+0x79/0xaf0 [ 509.736810][ C1] ? rcu_is_watching+0x12/0xc0 [ 509.741573][ C1] ? __pfx_kthread+0x10/0x10 [ 509.746158][ C1] ret_from_fork+0x754/0xaf0 [ 509.750743][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 509.755850][ C1] ? __switch_to+0x7b9/0x10c0 [ 509.760524][ C1] ? __pfx_kthread+0x10/0x10 [ 509.765114][ C1] ret_from_fork_asm+0x1a/0x30 [ 509.769881][ C1] [ 509.772889][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 509.779212][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 509.788140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 509.798187][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 509.804954][ C1] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 509.824558][ C1] RSP: 0018:ffffc90000a07f08 EFLAGS: 00000246 [ 509.830632][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8943b70a [ 509.838596][ C1] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.846560][ C1] RBP: ffff8881d70ea500 R08: 0000000000000005 R09: 0000000000000001 [ 509.854522][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 509.862485][ C1] R13: ffff8881d70e9568 R14: ffff8881d70e95e4 R15: ffff88801c2d4000 [ 509.870449][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 509.879376][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.885959][ C1] CR2: 000020000001a000 CR3: 000000000e392000 CR4: 00000000003526f0 [ 509.893923][ C1] Call Trace: [ 509.897195][ C1] [ 509.900030][ C1] __skb_ext_put+0xea/0x2d0 [ 509.904531][ C1] skb_release_head_state+0x2c8/0x400 [ 509.909900][ C1] sk_skb_reason_drop+0xc4/0x1b0 [ 509.914839][ C1] ip6_mc_input+0x832/0xf50 [ 509.919337][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 509.924355][ C1] ? __netif_receive_skb_core.constprop.0+0xd65/0x3460 [ 509.931213][ C1] ip6_rcv_finish+0x3b1/0x550 [ 509.935889][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.941087][ C1] ip_sabotage_in+0x21e/0x290 [ 509.945761][ C1] nf_hook_slow+0xbf/0x220 [ 509.950175][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 509.955283][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.960474][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 509.966101][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.971291][ C1] ? ip6_rcv_core+0xbaf/0x1c50 [ 509.976050][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 509.980715][ C1] ipv6_rcv+0xa4/0x610 [ 509.984777][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 509.989441][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 509.995334][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 510.001747][ C1] ? lock_acquire+0x17c/0x330 [ 510.006428][ C1] __netif_receive_skb+0x1f/0x120 [ 510.011450][ C1] netif_receive_skb+0x139/0x760 [ 510.016377][ C1] ? br_multicast_count+0x8d/0xbc0 [ 510.021489][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 510.026945][ C1] ? br_netif_receive_skb+0xff/0x1f0 [ 510.032225][ C1] br_pass_frame_up+0x346/0x490 [ 510.037077][ C1] br_handle_frame_finish+0x84f/0x1f00 [ 510.042543][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 510.048431][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 510.053275][ C1] ? __lock_acquire+0x4a5/0x2630 [ 510.058205][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 510.063306][ C1] ? nf_hook_slow+0x167/0x220 [ 510.067985][ C1] br_nf_hook_thresh+0x30d/0x420 [ 510.072937][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 510.078827][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 510.084282][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 510.090171][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.096063][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.101959][ C1] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 510.107939][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 510.113836][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 510.119204][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 510.125092][ C1] ? lock_acquire+0x17c/0x330 [ 510.129768][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 510.136269][ C1] ? net_generic+0xea/0x2a0 [ 510.140774][ C1] br_nf_pre_routing+0x93b/0x1510 [ 510.145884][ C1] br_handle_frame+0xcdd/0x1520 [ 510.150733][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 510.156017][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 510.161911][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 510.167191][ C1] __netif_receive_skb_core.constprop.0+0x6d7/0x3460 [ 510.173862][ C1] ? kasan_quarantine_put+0x104/0x240 [ 510.179226][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 510.184424][ C1] ? kmem_cache_free+0x143/0x720 [ 510.189355][ C1] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 510.194641][ C1] ? kfree_skbmem+0x19a/0x210 [ 510.199313][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 510.206419][ C1] ? kfree_skbmem+0x19a/0x210 [ 510.211084][ C1] ? kfree_skbmem+0x19f/0x210 [ 510.215753][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 510.220952][ C1] ? ip6_mc_input+0x51a/0xf50 [ 510.225629][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 510.230645][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 510.235847][ C1] ? __lock_acquire+0x4a5/0x2630 [ 510.240781][ C1] ? process_backlog+0x32a/0x1580 [ 510.245792][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 510.251594][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 510.258006][ C1] ? lock_acquire+0x17c/0x330 [ 510.262679][ C1] ? process_backlog+0x32a/0x1580 [ 510.267705][ C1] ? process_backlog+0x32a/0x1580 [ 510.272725][ C1] __netif_receive_skb+0x1f/0x120 [ 510.277745][ C1] process_backlog+0x37a/0x1580 [ 510.282598][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 510.287999][ C1] net_rx_action+0xa40/0xf20 [ 510.292591][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 510.297703][ C1] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 510.303081][ C1] ? net_tx_action+0x7d0/0xea0 [ 510.307847][ C1] handle_softirqs+0x1ea/0x910 [ 510.312612][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 510.317899][ C1] __irq_exit_rcu+0xef/0x150 [ 510.322484][ C1] irq_exit_rcu+0x9/0x30 [ 510.326723][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 510.332347][ C1] [ 510.335268][ C1] [ 510.338189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 510.344161][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 510.349787][ C1] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 9e 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 510.369389][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 510.375459][ C1] RAX: 0000000001f50fcf RBX: ffff88801e2ba4c0 RCX: ffffffff8b76e4b5 [ 510.383429][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45fd1 RDI: ffffffff8bfa38a0 [ 510.391399][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 510.399369][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c57498 [ 510.407340][ C1] R13: 0000000000000001 R14: ffffffff90b74ed0 R15: 0000000000000000 [ 510.415316][ C1] ? ct_kernel_exit+0x125/0x180 [ 510.420180][ C1] default_idle+0x9/0x10 [ 510.424421][ C1] default_idle_call+0x6c/0xb0 [ 510.429217][ C1] do_idle+0x35b/0x4b0 [ 510.433289][ C1] ? __pfx_do_idle+0x10/0x10 [ 510.437886][ C1] cpu_startup_entry+0x4f/0x60 [ 510.442646][ C1] start_secondary+0x21d/0x2d0 [ 510.447405][ C1] ? __pfx_start_secondary+0x10/0x10 [ 510.452696][ C1] common_startup_64+0x13e/0x148 [ 510.457647][ C1] [ 516.188870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.202629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.216211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.229932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.243588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.257326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.278188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.291870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.305427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.319144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)