last executing test programs: 11.393032904s ago: executing program 1 (id=4116): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) io_setup(0x2, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x200, r0, &(0x7f0000000100)="74fbe24a76a37a90064563b7848eb8d98afaf2ce240c215179d246d8e8330a5fd746f48d68e4f7", 0x27, 0x6, 0x0, 0x2}, &(0x7f0000000180)) 11.178356316s ago: executing program 1 (id=4119): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 7.948368207s ago: executing program 1 (id=4131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002f40)={'ip6gre0\x00', &(0x7f0000002ec0)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0x1, 0x400, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7, 0x7, 0x8}}) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="23100ad443409e8e95569591959482867ddc4a96e67537db7db355730c62e4348d6a4b6bc2b9c598e642d0a6642748306b73c29c145aae1b86513351f06b3d9dc6dac9f6236553", 0x47}, {&(0x7f00000001c0)="a8c52c2d3b8fd8757878c2608f06c489acc4e71cdd0e3a6e04ff10c8655f5c7b52cf33fab54afec12ca3a7daae323a685059002adb8fdcd629e845818cad547070c9f48fa014340b728ca79ce46f237c2fef9e6bbad103262fc6784f05a2b31dcdec", 0x62}, {&(0x7f0000000880)="1fa80fce3c3fd6c6bf4180959f91743efa0b5e7298f2abbc7210e1d297283a393d2a915b8fca9cbaa33b12b7f15fbd2ede7366a3874c6c8b99da960da18608f7d4b1d3e25e0ae055c8b3521c8e16aaccb4786be2632196945e64cdc03e311a463d16aeaa2e551adb401f9762d0db259135ed3ca6e51a34bb5dc2958dc4854a424b4fca013bd6186c150d8a81223d379efedfbb7bb21d1f691f9f6c6b4e46a01463bfe46b612697c20f72cf30e7436f447329c219946b92ac7c07482d7814894c38a5570adb5359ecfef1907c6688ea569344bb330fe9020cef7c3a7e282951b2e93e67e98efe0b66a645ed218cf00301a518e8ffb69067451afedecabc84c1ec35a5a21d2d7474a98b8171f43a97e82a15498d53ced97d8b842b8192e2e0087e8c637f533bc8a6b605bf1c042a7c32891d4ad07aafc3e0ef4ea10d4f7d1b9e7fed40295ab0b92710d6434000dce5a7e0c366a90c06fc7754c8c1d7133692fd4b35b9971012e3bba302583d34dc851cdeaf3abf0249cce0f21eec378f6b556cef444e0087acda6310014f36c2cd3473f96637a57999a986c4a23c20bc59144e088ca765d294984a1e56ccfffc8369aee83873c9b8aea2c52557660760c57cc5f6c24f7459ff0aa36e29305dbc39dbf8bedaa2f0c2cd9518f1d341c237e18ed01bc20607574769971d9241af8c6f9366ee78c3085d0cf352dd3809eeb24db92c92da1a9061c216206e0aa4aba3b1d961cf27a4a9a22ef5dad40506d44028344d3228d67531fba987afc6ed7bda930dbc975a638c6799bc54540a7530e5f9ba1d46be28bd5c224ba84f12cad0fdeee8d67082146fefd3ffbfc9c3f4112d4588f3c788d235e54cdcc33795495677a4aad0f857942b3003bda02eb3e32bd55d16bf5a0941954fcce587842e30a429ef28834a62abf287d31866fcea975cd848d62c47aa391903847aff4f77f558aed204e10281f789c9f42b2ca982248d3d2d9eb0ecffe61df80dc97e0544efc9d83beb0dfbe3fef5597333c60031bfbd2242831d440ea5a42c98e6012eff5dc2e574182ccffb7d81ba7567d3b6bdffadfdd20fa8c9ae5c2e6984a3b562500739d5f5bdfd9fbc9d3425cd54c29d7652d123b73b2599757eaf85f688e2d9c596833ac8138be177e40a841afdb5772b006ba303e4bfa5d5c14d1a66a423fb99f897bcd6fcbbc35fa72873ec8a91c24df1958d82afd50c1525319d6447a94a4b34e84bc42eb30910162604bec968476216db3958ac285d5bd6e866f8a974a5eed0e7555290a0dca4d9bb4513add5d5253c8021458da8718b8b05a241fa293d402b9838bdf0b6efae544620fffccec8104f088f40cf4f16bb19089bacb0ce2f01bf5969c34a7c6026bee967c4eebc9cf27c7f342ea7da524ae386a234d644c74f67828a57b57d837bb31f3ed51faaa46b1f191cf9c221b97760501652c0852a83bcfb306781f8e03d7715dd0b49c90dc85767fe51bbb3c0ef30f6333070c3eccdd30e0afeb0fa003c66407c1b0f79b51a87ce64c8992f4ee77e3b52eeb21b48b8db8cda366ad33769dd1f590eb8815b0487abe575028e96def008eb890df89b66f9954666e37ffcb0bfc860933f1baf511f7511801261dbdf864821ae46792e34ddf16f47144383c1e83d81234dfd7f1b1eb6e10f70d75e056236de90bbfce8a0f63a6e0a1bfd2a85fa7bd8a200c4ed315158dec1b1b73fc2e43992fdc233641167c7ac3a11c8a6abe7490b594dde82122c95b78083a485a1bb0db64c4c73eacc96a56e5db1f23dfd3c6b5abb9bd32e5fac40cb6083fc28bd95b7a3b8d56e2299c4cdec20dac5a3b0012a45417f69084f10fa28ce186df8c65b6f23a6894f0efd9130a3e95fb797bfe5896967f671f4ac8af6508e1bf408a6e192d9631d3e7812dd6c427df5692acc6839b0b9c269d84765d85feade3481949747a3fdc41ad1633d5da0a273a24b331215d6404caa6eed381c4d828c7df47a5f45bee87519e145d55a3d240bf3d8bfea0b631e64bda42f9f81f45306ba19440e03a42647489777b2da8dddcb3336052ed52368227d4ada3583bc1edf271350b798e0204b4b10211a9d1d0c74bbc755e8e9f75c650a967aeda11f59636f237d934d42b5cef3cd53fa82e7472160495f5d012063222299274db8ebfc06237dc803dfad55e4d8145af7e4febb1673ab7c03b5b7a0869d7f71a1540ebc70f181bcb99cd6f510ae6ac7a87abe734b7893b6b0c234126226418a7cc65e4ac4b1017b4588be40abbdc15c2e154d050c9f70bcc51f68f90dc1a9982cf966059eaee08b1c7f8b713fecec95439640e1e3bf71f9a97553edc7d1e229cb3caf5c5633927b2945464603397742fc421afd7c8cba5abbdc60cd622a3369133922d7545adb57fb3cf91539ac7680bc7ab85e263e23f76468125ca8a34c1f229750906c6112270e195f3061bde4436f7ceaa09ddbd8d218182b203cfa9d2f962b1e306d509a4d9e09973dd5933e736c5ce8349ce6300cbb15718fb34d0eeb09db91571f7f66ab953b91dc600ac28f61bbc206f930a87844dc81ae1ad10965b3d5a5af7256358fb596b27ad3eaafe6394e8e1f84179c6806c4f624d393c0975d5ffa4118d0194fc4660f81854df3d830eb24103d01af3ee7a0435914da1c6d9cfa76d002345c057369d73e672f5a6e66181941ca425fe1b561c10ada483bfc906c65584fdb86cc69cd1cdd3cd5cf745a6e260e13eef2770593ac3cb8f7e502384cd136f284339bed953f7d0bdb3d11d556b718417f264490acf6bc7e12f4dc581b659793a8d2bb3e0865d6767a06897dc33ac332b895243de459abdacfab1c5fbcfe761d92563818d600a0391d407289d4502924460f84580127fbfb7ac3ddf461afefeeb62b3f105f3bb8d84ac4c1c696b95c8b56859480b8a3b45aaae4f8131dd9a22e0d815f1025fccdfa2af32403d1e21a6a3aab1e78adf2188469659c8758a7f18ea89430b6497ac417a0e6bb1a44a71ca161307650e5c931a31e7440911be72a33bacab21d94f52831283414519ab58d44adb05fbb2b095edbe6a1fcc274d48a334bfe187e8c56d1b94510e4774edfb0d1e292368f9edf7e037e604b3bb8b9eac0156938ffc3d458fa795414178652ddd56241f8ba568e4c3fb573690a3c5b56c7220a42c31c1d35a86ba7377299fd485604a17c3092f52ca859a3d2c52c2091f6c433bf6a832b5ce55112a85f7ab97a03d8ed121478a463cb6d8654acacaca584ff9e0bc1521761a871fa7f58adbfd62d11ad8fa722bbe35b246ae759162625be9d7d93aee0e804723eed5475fdbd777d07e099773b4538c7975a8a502101506a05884a2710eac7acc2ddd2f8708c44d8bfb44f4527d92d12258cf096ab9bc69b070dc5b2e2c12a3c66aed6fc5322e15bdc320f8e9f430ffa3b8ee8e9f74a28e3793d65f66da5dd498bcdda4a509358a1d0b405dd75b02a6579dd6d437190f781ea32569c9e1f64ccf757913660c9f6ec705350d8431de83216e6f10e8d5755113167b4629294f57c9923da81247e26982604c0a48426f77de46837a3d7f24c24dcd10b494c6f320277cefe40ec3b3380e93c395217bfe354ca534bf531b1abff3673daa753f6b03f087e5caa63c5ed24aa442fb7b70e95739d4e539abd44537fffccec970df9325d62aee7aa94d959dd53c2ba78078cc2d41e5b4d107374db09d43ff87078dc7e560709e45fa04b26967a8ae14b4f0be6426fa0d233a85f7afb03fec4af81e0b178d7e753874f08271c219c8e7d55971cd4215ec2f4d6f551eedc3b43348b6c3d39ed6091b9cc12b5638f97b512e8862946ae275433f242210036006a4e573ac7cb4b35f7b1ea8e3259b161833b66d0c2834138e8ad1e8afcb1b62370e5cd6b4e10672b388bc31a9b03c19123e06bf070dc1e96e54e56aeb171973f834cfb56df3c8dc8df868388c32fb61260a928cb73b062c30ab6fad6fc49e9223cfd266fb95da9de6ad1470f860e402f2e3035a03565b371889906b98c102eed084bd4ecb7011ad4c0ec98069a57217bfd7e8d3aa18c01347413cb25d01e11122d3da4647114e7c6bbc8caee78b3f6e6537114dca7ecdc5bb5900c45cf2535854b3462b0b4583ceef87ff37f8c8ca892a5e76a653bd6e2be4069ae75c7c499b54a6e665a095bc275d4c0b14d7358ce76b37e7ac434d49478b0b3ba1c7cbbebd9bfc5fdb032ec248120c5bf371ae0b585469127844ced583ccba34db1293a66771466fd900c283117343ccfffe6d8e3c5b21028dd658a9f4f1430d6ecfd1440278790854839fba9f8e036e1ae5082269c1cf8fd26bb591afb0c51177a0aae620cafffc88d986a07f3f96a80f1c26c9c3afa7f1a0fa2d0439aedf8289d21b876f591c0c52b1ccf898df3ad172c51b214ee918d72cc6a9b69527898dee42a77282cc549eebf3c185bff75604fffa6ba5b4b6544fd87b93b6732bbec7976eeaf26d08ea767c51baf6a39061955fa6a7a6a643c0242f82451a68f89b6c346fe8c58952ab3e09dc39e85c969d44307531b87542d52fa282f27b6108548348d574897c7e62c5bf91a3bde78d850ffe0b2f745cd240ed1e3f2a18cf6b4c9253a321ddf7a34c872d9fd23d4abc31bac74cd4bd7f4f469fd19652d87f30b0a3121eec31427fa3d7c661753ea3108e1428b4f8cacf6397016af8fe822fe2bd37903af868290eb7433c5f1078f11acf7df4ad4bb0fe54816cf8b10d9a2f0a117f47ca2798f0d20c8ea692009fb7c25b112c3a0e24a99d5fcb135073a656fdb495bc99ee8f1973b8de35209f86448d9fb21a114e08a89d5ed1562709fdb65b66f374b488fdc97488cb4b7e4621ad20303fc00842ede5501c3479d2bce21f3d20cd2e10a986772af11effaf93f26677c21bd5e9d20085514b8ed812ac5d2f9dd34fa1326652eb491d2b76b3c16ed72d84f36ac404d2eeb38fb0802e5f7979308e496cf06e77c910187bf853b2f8f8575a748b2c6dab084619f2dadafdfe2151472917339670021625ac4067427a25bb3bd58a57abc39c7a57401b03aabcc9ae4c2fdbf463b656bbc3620499bb36943c3eb0a93e4650bc92213f97fb24a445bb4f9a809843a32234b46a7dcb342f1d72c7017db55863f411d49a54ff3bf5810acfc9d10d8e10ad12a5b45ea30b13346a5bcf8ab4bc4850e9039b39fac23f37099f0762b4f76ed39889e7badcd7893d5cf3760fab7e4cad616629b568728fd07ca2ca01db9fa246f15c6ef646cb45b14a0ea3824941e87f9ff21de5a9662919e005a06e7d5c64ccd9f0278299a85c4475a2c33a0cd81b093f98f5970a7a448a95f52c5255b671ebc92a0c123b24f309ead5edf0049704cb994447fe4d7e1bf183c39ed473e1f70db38423df14b34a94cea577ae58ec0bb2e745d83f32e2b3828a3e84aafed128420f3006e1cec1923a4ebe3a3b0b78c088a7a8e1a13ea27a91e0ce9263cb1c3df409194edf6a387f50876606e76545c2e278d495f0c093b36fde25e92059e6aad397f99afbca3def060f1ef87ec9d85d84341410ad4d353af5f191ec0a731ce547083c3fea5a73b34a068783b4ae75f5c355058298b876f6834edc4b4037347f1eb9f01ccbc5f83a422b9ddf041000393fa6cc6fbf79fd224365efcb3d70c86b6c386e374e753faab6b9a21fc1ac85f5022bbb464e8c876ea7bb792787b30aa19f820ad463ed3c2764cac5b534a543abc1f80da3decf2d34303ab7f40e999b0e3fbcb843e7823fd483b39f9978b674774849325c467b61e2e8680e46ba04abd754d", 0x1000}, {&(0x7f0000000340)="bf0a1c9d1178da958bfd1cfdbc1cfc03531384ad2c8982b3aa97341e09113a14554279ad1fc5549bec17624841e0bf429cd5869d0a7a08d4a7dd557d91825250d434ac97eabb3b030cc2d73252ae814aea686f79d523eeaece2803f1957a628aa6883d96734a23b2a40d3d9777847c43b1efeb96e99a1081c0851983a87cf834ddce794794a4059f0989b3890f344451bf7bb894501f56eec9230ad5bd55b2b12ca8d218c9f356a8fe9b919546fc3a82200a476b445c114c4c91b699d9c1366231605b4cbab2188c", 0xc8}, {&(0x7f0000000440)="812f5bbc04ce67d0ca41794c780d4478aad2e6703eaaa14de8e3ede4a4d50821a9e31da9ded4dbb59c489640e16d52b41414860b4e5fec7b6689b3b4853922fb506edc5a9c706452c5fc633dfff1f31bd9905cdd1fb5a344225a8b6883fc1be4edb24d901eeb370292e958b29cda0c873d80841db08ed17fd28762f4ed63689983f2ee05467e006cd53bd206eaf11f46f826531d9d36038b1464b9c79f655b308d6c23947674ce315ba25c70606468ec7e290c7172e738e5f30d4a0887d61cb34111f1dc043e1904762af2370a3d7436ed08a9e401f49e6c18863fa6438b4ffb4e16fe6087857f573231e8b4fedacdf002180afae0295b3fe7d3bd", 0xfb}], 0x5, &(0x7f0000001880)=[@rthdrdstopts={{0x12d8, 0x29, 0x37, {0x5e, 0x257, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "e62030277864520bf3831f698e7810d8721799e267dd7cc58446e0a0bbb05bbfe430c6929131ce8620366a925ba9cda2d7cfc9ebf416d5d7f71e1b2c2fb6e33bf4711c22996f33da9f7158b788542bb03b5a6a99ca1188e647cddacb521dacfedfb9368b0942e87f3dcbe2f03e0321810bd1a5488567ac0006526ccd953820dde7841db7c5509b9e7e4d156791e80e1c0214225670b1bbb0b89de76c713799793a9ea737eab9ee7b5120f7f75d77c6b12e5fe94e0e486dd6ef6d151eb0642b9945c36441b039ebb0ee3265f644cd15a6889c8af3ce696317413c75ee756b8e4091c87989060fc216cb7c559a590b17646887944daccf15f22981e43e57e14d309568e266c89063e95d343f1e70a4b401611a6582e7f41ce65c12d90e33b182e595c8c94a0f0fb0948f789c889f5642f106e16a49b29c793acb7c48b6dfec5f667b98062b1d54722191a936a85c90b1656b502d20f10040fd1c18bed0c4ccccd58222caa8436c5f70ca35b17ea15a3e55e1fd631560e5f784c8d40cc35d90b8359592dcf4a771e21389b907f107b734714cc3deb92729a3609be28b15588503e7ad5ff2420c14f6dd0a43056a688c1b872c872fc52221bb8065a9d394d169ff0331b27d9adde0c73f5d5162038218feae8c33c9aac0b1a6c0ebc13850e863140dccdcb9272ad2f5777bfa031454d09b1cacb45deffdd4411db927edb5fec1f8968e74f90734e4b508ff738a6b1473958f428644e7a5e195da134f6b4a5ce4daa10a0aff67768560346c9cb91d9982add1fc942850d08e67e2c5772c9b626c47450910dc4a730edb600d8813a4ea8bda4b51ad83c815bf1d015c101052a9d4e297859c78a684430c34803c824d49d5a43fed1b043186c032e3b6aad66c2efc192385a88ff4472e6c17bb3266676d2a3290055e7ed00a7c48d931a5e536a7ebf328e268e677295b0442d2f399136984353e4117f9bd5494fa3eaae40f5787148bfa41621339070ba1f84b47991198f3ea0bd5d7fa020189e0cd92c91ff73ca2f6e532a9ea8ffb5b4f240d0129ca38f6801621ef3329d9e583ad156267754bee4ad5ba54eb47a8eb50923eb11e4b2dc57326f578c20750a2baa57615923ad0400dda53a6c8f4209191840c7846b017718b633e94fdcdd1da9da271e18b2f8828c23e99761d2f6092a5325f1b1285a67ad1afcc9e5e881a880005e2f1c76b8538bc6fb333144c5879a87a369b2e81f75dd543b2ea1e5f9aa02969465a4ab5ffccbb3a07b66613413754c15c533375c371ee1f04f0f14290c069379303e94653cd91ae280b8a9c257d9eda83684e42c759505e781089d8786a58215b91c45edf365ab7600cc03c29b305c5735c63b0b2c66a6df8a478731ffe8f69cc580bf7a25028809eb1cba273e49c6a8799bb26ae701442a9116312b99ebcea069917814f3bde2d7614313f3dcfc28df11bcdcf026675765dea190e69646bb53c1245f0b52dc9a5d973129fe718e118f6d8181453ceee990d1d5188a6c7527d4545c82e132b7e5840f7bb28a0c652199d74f5dfff24446ff3f7661b04a1b05e5a4dd111479f116023c6a6926dcf9100786c5ddcde1ac8fef6f71aba2eee53bccaa2e58a66d2ffdf4eb15194e5fad596060077e337ad9db8ce300736a2a91a1a3988ee95e20ab6f730e13a64506c2076c0a7a8d4d22e19e25cacd3a05b427ffbea94baf816a9f0d5faf1b60d1b859ed95ddddf0d34847547d3653d47fd5b97bc6f49c991adcce9f0168898bfa28b164b9c33bf7921d5e02edf1c82d61fbcbdce106dd06312a299f7ab90898c6dbee18fdea0ac8006857a1f456fd185d4380e6d72007355e48d61b6d9712421190a5db7fdd524dde3a0389e7cd4751429c8e573e216cf55b74ab42142f8ac4ce3f5ec607e6e0f01259342a0477321950d2374677c04ea40cd4afaffc3df3e0f065434ee107998ffd6bac607d8e6cdf635287408150aa72d1cebf51ba4bfec3b4bc0725f341152fdfcf1363d734c7f226f829d4678912f000cfaeb372eec5f68c948dc79354b0e950fb4b983968e6a54ed5171036888122d0d8e9dcd1671f92c1904bdb5961815b255eceda2c0195050ae45eee534a793ded9efbe7dfd3a797f7e511df30fa3bf8c029beceee007ca287f0bc3aa4e867a1346b383093a69b8a753be9641365eb097bc62001207346801f7c6df3d20a2ff8bb7603cdb2c05acfb38d9fd81cad5b0251b4ffb595a51e54320a9732a0f09cdc62d0c20d64f4876e9f8c6326d0d9d3d7ec5cb8c5e32a60a66eba0e0f2f995f05f3c03c1b8b578b35f65d0b1668349d4eca743c058eaddeda873720a700055694d2c9f609f7aeb86b50e16406be02e1ffbfc0b850238f54793039e3db7a4fd3f66287b4a76342f741fe9c19c3abb6e712f24516adf2e9507640979a736c6075c56342015dc493c21d7247e52e970c665f048d58c94c4302b271a6cc087577ca37c8455cc3b5312ae364b84dbf4e6ab8bca8b76a88dae05701c28986b567bfe38a296b9931ccf1b6c1b94a0828451f65a4c415f95e0b60e0914ead3b980d5f057c641ad38fb03bd418387959f3c1a00b033102ca81040694ca957d0966dcb93675df2044011e2f31087ce36f4105ecf82ee9b0e3bfff3d21f95a5b69442dbdd014f205ec338eebc327824cd2fbf93a516f6e4b623062886fe8897733e2466f69eb87a08fa9ac90eff07b2d029074624324ded643edc73efffaf7df48a2382b083d745b12cc7fae5422b88effebc26b4fe65fa6b1c91ea56c582435e29183ea5af3e791f502ebe6da40db83e67b7af5f063311fa27edc217335600998668f417f382dc3df13053b16c77e78dcbf499aa799f6eba924087d3351db9e8ca548515ac97c577add6790e6d39640412a1a28a944857503c29ab3a70596d05a3eb0c632468dbdf2cac51af3a2218a7884f99eba3adb32e50f915530ef0c8757bd3e3aede8923ceaaa64abae9cbfa74c3a6108b1f6af8def32119ac1b909391e04396d8e2c9a21f187568ab7a73533bf7cba18b74beb22170ca6c56be2a3e030a4f619231cd5721924f0cd482376295f509fa171cb908756255ebae5120b026fa391013ea605a0e3b8e25e9d8f876b06297c1bf2e49a3d20f5f6d054b2dcb69e1f75116133b68bb24d1099eb52a53f4c4ac61129156823a773a0cab151780c3ae670c19ad32d3719aa2d949cc426d410467961412f08d61402a269b446f15254470f2d910a21bb831c76ffcf21fdf552386c2f745d1e83056db6c807277b20b3bd9a9fee0c9696c2c8666cc1195d8bfef13b171546d3d6773f1dc7dd7558ed82fe0cb3d6727027f6aa40bc38a5a74a46a617f6e796a00cb5b58abbbd7116366cb3fa5492eb6248cfbc33c85c8b03016153239f125242938ffce8372c064460cbcccbbf852b66bea1d7488aeda45bfdd3f255012c541faff31d3b9587dd907f803c19c62740ebe48874448fc361f56a43659089202866f950e2e60447e7dae0bf33d74c20e4fa7660afd1ca07d6ffbfa28759c680df8f28bc24c5808264d9e92182ba300cb0c5e7cd540480bb3c7e8a9caf48c3f669b97114d0d91d8f94a36f76486171aeb57a1ba293b0f68c6cd5e13e16a24f13e0a0e37491c1d357e357d096d612b7135bff0395e1449108e2bb51ac2ea38af32f1c3915aef9d9923122e5f27e42ba5f331aa2f98c7a349f4bfe25acdc88a44ddd6e295bff17741e043433ff9f0762b063ee2aea2d56619f53b1676086dc93991860661b5a7fdaddf35b6d30222965e59000356e4517ebe94d80cce5b55b85fa505e4bbe332c8979ea3bb3ab123d32e9be80fa5a67b8da224784dca9e144dbccc6dedb169a0f1638ccab137e8cd31eb5ca4a6870a76dadab7d2b9a6d695c8e981c17018307654dacabb73064a8a07cd36651984dbce21da3f88e2939b1342bfbad381c0d1c1ef9a2b63ede3e2db08779fc1a9d29f73f76ad16ffb998e254646638e29b01a97405b969237400b3381382ca6c6320853bad35fd22a42b6cf74bdc8b8fa67746bc05e280fee6482cf03e5e205625d3333386adb905333c7bef83e958192eb59be62e8b80ae427cbc0a29ae7f88e135c2fee6960c09966c5bbe7bcfcef6f388a0e56d990a747514fb16baa02fbf233e71b740f42b8f4a5e7b494ebcb97677748c0ce551323b13bae27932086a8854f60eff552f11248259c30914d999bb36bfd513764b488de180a435d7b72f0f9e974a626b914bce1c76a21be570f85dca5568ee99a3efdde7672928e1aa0edab8d8cb9242e1f8a99b22b9a9ccc0f31654a5794279eb34680e6543775b7cd781c09051abd26b98208243ceb6d0afe0f56b700ffb775e87f7aeed603e855960bf434ae3638bdcb928d5fb5a79b8e301e32887f605be120fd64436d59cf3fc92635cfa7bd76732510b8b8590e0e6a817916b06bc50c31b51287b7baded8e495373bbc26692729b6171ec592efb1e0a5f52fd8307a646c9fdec906c7f12d1d7bec29cd4dd31ee50446c20a3c88609d9bc68c4c2385b5972170171c8a1259881c76c6ff3feb0ac314f67d7f04386c70f6693d4440d730d69634514115125c988b7b4a5540646b2ca0cafee785d47def017951af90715305eeca90e3ea0080175713dbc0f7d44c7d734acb3acc2bf1332084a98fbf5450c2d2dac54ad5ffc938b51ed60bc6e5374b1701111ffaa2f34124bb2a85a9f67e4af06bbaf0f16ed6c9aea496612edad96e48a12551839fed6916072425aa021003793e98d7eabd75d2f349a20e56a03b9a690391ff56af188a134be706909757a2d713f39b936186ae2b2a4cb523622fdda1b0ab16dd00253c72bfe7555366c4bebbed5829f91328dd876b27382cea4dc43ec9207fd63caef5d575549d380e3146f4f2ab44d93f6e43a3fe24c07f5cef902874a4deda8350ef09af621fbea1d4c2cdf91d483fa6d35368857d9a742e4191962f9a17fdfccf5888fbb4d464963dfcd4e81c4e98f17e7febf4ac39ca048095bde37077987eeb4caebf8a2381c52a60a024867a615f4b78dca5d3097fb5a742d51aff617a674c62d4698ad45dfe49ebd3f5191b63581d66321ea49e2bd0af9206d2332412afc5e64f8a4aecef1775186b261898e311b98d56c294b0dece31308d12f1c372878a84035894faa37d3feee1eae9e637cb66e6022f54ec214dbd1025e0373086016b84bd82e24db5dbd8175d1c9e821ac555bc4767f3958c8b249050494d0ed095a258fcbaf3a79988cb6dc2a20c8ed8a67c781c0a45fc5aaf825756acab0453e8aaefbcb9af8f858c8ea5a3af2b5ebdb367e626456b8888e6cb8adaebbfaf38f1867848985dad15d99be06f603662082a194b45b1c801a7827b414296f258d6f98f1a457741cfbe809ca106d5fffa8af20607c275bfc90f8b893e561ea48ab2cecf41e119ea14e0b08b3d77275b1574d600d8de1ebeca39c82aeab6d2dc9fefe0481fdf84cd35107fd59d5c97b51d2492c71df92a4b41c03b95e8633760e4c3d445da12ff5154052f91030b535cc7c33cc03fa3d9645bdfdac856f0f209e4882a0d8ba12cb5fee29f98ae7cdfd0289f5dcb192853e310288e4920b9836d2221082e6cc36b8c9e989c8f9ecfe82137cb466795a29fc84947d423357153a2623df1308fc30311d593b1525a6b4a483e65da96d61a096ed3f2b4692f554fc6095fe3f0daa60e9bbfef4da487773214b8c360ce0ee370d08a97629ddaaa90e00c9fb620eec0994e0110d9c96f34eddbcc98443c32186938c12bae"}, @generic={0x0, 0xe1, "10b724947e6be34e56387367e331852137c65eb45e432141226d113e5911432f88d392f2226176c4fed2d22075916e5f33138cbe983a91149380cd0f4e9b0fdf75dc844dcc07eb9b360de9b1c2430f4d217fe608d00aad71671d0bb4d72f0f9e94a82dadc15929c59c4c090e6c3da69140aa46cbe0ce92319e80af04e2d864431aa47240d2289da7b547d11c5133db95852e581c6b6dc9cd1cb0c1ac93bf55ca6aee37996bc787c3041f5a39d92ea4d732bf18f0322350c2773aa37bcf40d15e5358fc5624aecaccc64cf4d1e1ceb49f37429aa4274b14def5d0c440e54d65b9cb"}, @generic={0x6, 0xd0, "607db61eb9b21b2f3cf90695a9b19230201cdff22eb44333f9ebc7f9bd4db953b4744208718ee5c2085522ad1d64366d2842f723a0d4b8fe6ad0240bc937df01b182a47446842b8e75399c949aa5dcb80794c52af66e2088a5ab555c7d18d6331b6980c89940a217a1ea9c4d5c57902af155b174649012502e3b69fbe88095ebe88e792029ae2fe87db367f7e68a83137b6e29a9fd4d85c571c4787bdc60a4308e3635cc28759f823c44efb4010ebe860aeca8b5df2679b5a88480ad229bfeccd86f0d886fcf7f946d44539278468fdd"}, @ra={0x5, 0x2, 0xf}, @generic={0x9d, 0x3f, "570acb1a2c0beb87a73b0d7eb3f7eb8549b916f3e9fc2162a3cf383cc4dab2adddf1fc0c2bb5fb5b6a90205f3d369941b31f195caae3aaf3400adb295a03ed"}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xa3, 0xb6, "e9a9033b4b67557ec06816f0e29c6b08bee45b57afe601a3c6e1daa0afa32cd5b9ac4162b013fda41a4f0f889ea4736e4cecf57091c33aaa52a00fe316872b299b49c51d5a467521b2cec67f1ab93fa6e76265bc95a6eab24a178cf0c73f0ac2b758facdd2326cdeb8bb0fa58a585d4e82e54e8e9e3a6bacb9d9fd8310b66d7438b05c4584683854155fc092bbbbeca9f493f49e6af9ef739a358e8c50b7cf0d66eae324e5b87f6e143d9bf114eca10b2b29bd05967c"}]}}}], 0x12d8}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="54e565035a7eee5beda47f702690fae70e361b5aad3256650a49cf7e814fbbc03aa60591f7626f8a85bc61", 0x2b}], 0x1, &(0x7f00000005c0)=[@rthdrdstopts={{0xc0, 0x29, 0x37, {0x0, 0x15, '\x00', [@generic={0xfa, 0x1, "82"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x6, [0x6, 0x1ff, 0x10]}}, @ra={0x5, 0x2, 0x81}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @generic={0x0, 0x62, "601c632f2ce11355a5314f37a48e69cce79e46066ea33e6809a063417fde0f8bce8fe82c372a08f1749c7ef0adcf2a59895d6a5ee81c1a3c98b9ff1e0c733afc6f13565dfb53f158a33f2f35165617ab79840c5bf352642e5900298ca090a13124df"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x1d, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0x38, 0x29, 0x39, {0x4, 0x4, 0x2, 0x8, 0x0, [@local, @mcast1]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x2c, 0xa, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x2, [0x1, 0x3, 0x7]}}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x8}]}}}], 0x1a0}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c, &(0x7f0000002c00)=[{&(0x7f00000007c0)="ee45ae57d63140a1c3c6efb3c805163e5759d13cf7", 0x15}, {&(0x7f0000002b80)="f7db80a6a868b24716d920d85247f8a03eea567cbcc646d920211e31ce8c532440faceea40a7901fbca59903f413192b28e14ad636e467eca041f8d3100787ae922a8109705e0e25caf7bbeb3be5d5d8b8b59dad8311fb774b627af647b29e82034b", 0x62}, {&(0x7f0000000800)="bfb7ae94614844e12b5328e955bf8c6a54e6bd1ebd7f16c72eba33780106da0fecad56572ec666c97f940413f0c13636ba71a023fa6c2eeb36edf29b", 0x3c}], 0x3, &(0x7f0000002c40)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}}, {{&(0x7f0000002c80)={0xa, 0x4e21, 0x4, @mcast1, 0x103f}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000002cc0)="0534a35db9b593201fb2e30abd4e8b55b07ac35033fe5551111e4ea3ee713778571892000bbaa13308691315f74a2f1faf80d190a5e92dbc8df28ceed41a2cfafd9784988d", 0x45}, {&(0x7f0000002d40)="e2fc6d00c5666505620a5ed2", 0xc}, {&(0x7f0000002d80)="1cc039483459dad74ec4bd485c432c525b3048a9cf4b7fe002486a0f2f9206fd184cab519660c5b666f053d91cefa4fc1002c151853d3bc7bd06bc197db482eac5ad42e20b0f1a15b911b23edc8ba007ab457f572debcf332682422d5becfc6ae9a823ab313775244f75978c10c510311c94b8dc895ed28b63446dd5ca7193c68066e78c073e105fd58d94b5c4917b9eac5e214c4409464fadfefc62e21f365dc48d7e15ba647712b5fd2e0daf585c7cec4fb6eb61327ac23a4111744534584008f26b6cd9ff2152d9e898e2af17d8912ef081d3d63d41d83b5c5846", 0xdc}], 0x3, &(0x7f0000002f80)=[@dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0x10, 0x0, [@remote, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x130}}, {{&(0x7f00000030c0)={0xa, 0x4e24, 0x3, @local}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000003100)="2c7e01653cc044bcdbbde3e6890b00270c71e65ffda34f9091828b6cb6aaf743677a3ff0e0a6fe0f23047d0ae3eb2c6cd772441b09ea64633854d127ee68cb73fabe098886707fc9c15789935a3805aa84067d65de736eac653379aaec134d9d05c0e71d115445947ce529713b4be2ecf96101ea9f6ac94bc0f52ca7ce1dd661327d99aec6928c25f38b0ed91dee34c08cc1e077aedaec6e9eb40ca0dd48fafe745457bf7e00b950d19d3a61344325e7a1fdebc6d67a222f8a4a7617f09f1e448f", 0xc1}, {&(0x7f0000003200)="5a0beaafc6c2447b848c36d933f11b7655db3dfbceb45b8fc8b5cf8b5005031ee068ef1708bb02dedd43f4f0fe9f4c0b4e58af99cae93bad0ef973d04ecee60475a1a4aa7b9de2b8dbcf4722acf22c444848cf5fd195cf95256597a12fb7b765b62a8e1ec3b705cd9a1197f4ae5123629b12de733373791496f4b03d9ef407fcf8924836ee9b993ffcb8d95e397a25f1158eae902997e51d491fca814830659eb1227db4fb1331760cce3383faca4d6632cbb8bca732e3577eeaa43e68e6b0b8d6019c430dfa363d1b14512ea13b70051a9f92ae78cd74a7bccd050c52bab1624b84172e46d91065e6768a57f41c3ce9", 0xf0}], 0x2, &(0x7f0000003340)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hopopts_2292={{0x150, 0x29, 0x36, {0xc, 0x26, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x8, 0x86f, [0x409, 0xf, 0x200, 0x7, 0xfffffffffffffffa, 0x5, 0x9, 0x0, 0xfffffffffffeffff]}}, @enc_lim={0x4, 0x1, 0xa}, @calipso={0x7, 0x10, {0x1, 0x2, 0xc, 0x9f, [0x7]}}, @generic={0x40, 0x83, "64407405ee51094d5247d83885192f84121ef40e4de4b06f2660bf8da75698c2466f21e018246366472712ea5eecd29c7a06dd3be061b1594b8a4d0c7e6e294a46d6f32f90624101b20e378780e72004129bfe3aba2e0c31dbdcc1243cc643ab577bb1ad01baa23a65d498df2224a5e6874cedabc3f7759a6953050160cfdfc1778a13"}, @enc_lim, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x1, [0x0, 0x6, 0xad1b, 0x5, 0x8, 0xffffffffffffffff, 0x0]}}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x88, 0x6, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x2000}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4dd}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x208}}, {{&(0x7f0000003580)={0xa, 0x4e22, 0xffff8d41, @private2, 0xae4}, 0x1c, &(0x7f0000003880)=[{&(0x7f00000035c0)="655a03da16625c237411bd40199b3d5f08f049fb3bb54f0c93943d07e48dc50711c3c5f4a239bc19be26f80a8028a981b81d201da2a3d4c0eb768dab94468ccf1f76c53d541af8b8f8c1ec219c5641eaa50f4f3a39d3baf4e8f56fb9aaf94deb715370311e1fdd7f45c1c6139cd885242a92ebeb1faaeea943c0bb786dd1b2536e2c90933590cbacb70e5966426c1af7c060552fd875461d04071f5d387877736721befcc0bf58a6389faa6a5e55176ffad03321c3bc08d6bd590919eb5083449007ba3e22dc5377d0ff19821c241496008d622b0a2d0538cf411108a6f588564ce93dbebf94e21fd9428bb5bff1476f337bef41b3e38deb98", 0xf9}, {&(0x7f00000036c0)="ebd5a7f0de1462e9f7b2e965e3e95bb66505b6c5660743228f743d1458c2e4a61972fef35e1b3a9e3d7af4be4144d5f9f90d4bc8699daf88915f44e2353b0ff7dea891e8b6afc13545c42738015f7b7cfc9e94df17f8ae4b56849f0bd6ec", 0x5e}, {&(0x7f0000003740)="4dc5684a649d", 0x6}, {&(0x7f0000003780)="96006309d688dd0d609413833dce1df0bb588623fda7744e32d0af789f695948f4348037ef4bdaafd26562a6b3117a5695dd47b54814954e9ef6d3818592f51b209d99b5b42017dbb3dc480000e02166a6e0f2264a6e61d4f080c300d194f0a37e8061d12829a9c10ab4c2f1c63e3b9b106606e9db53d15a27cdb94c0d598784f2a3717bc2b47d7d199c19126ce002149ee08fd39bc52d9c3e9fd5e097f07d849493390017eb5d183767d10cd158c6e42bf462291bc1a6549feda371e58e7588f8006e8afb7f666cec9234a8a49be41fd778", 0xd2}], 0x4, &(0x7f00000038c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}, @rthdr={{0x48, 0x29, 0x39, {0x16, 0x6, 0x1, 0x1, 0x0, [@private1, @mcast2, @local]}}}, @hopopts={{0x70, 0x29, 0x36, {0x2b, 0xb, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x5, 0x5, [0xffffffffffffffff, 0x3, 0x2, 0xff, 0x2, 0xff, 0x6]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x37181b6a7251c785, 0x16, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x4, [0x1000, 0x1a1]}}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xff}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x7, [0xa, 0x6]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x54, 0xe, [0x2, 0x6, 0x0, 0x5, 0x10001]}}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0x1000, [0x100000000, 0x0, 0x9, 0xffffffffffffffc0]}}, @jumbo={0xc2, 0x4, 0x9}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0xa, 0x0, [@mcast2, @mcast2]}}}], 0x210}}, {{&(0x7f0000003b00)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000003b40)="0f0760093f4dbb3fb58e760c266006859aae05db0634670a40268adf22264696ea8a733a8ccb7ee57a6e6ede312f3f84a8a21a4d91fcb0721268914d6c7bf9daa76d884e0fbb576c0f9f60ae357ab7a993b21845393213cdf92f682445cdc1771f9564ff5364e48f7dbd74e56c5ee22569b2a27101ee6b3bac5fb1f0d6e0", 0x7e}, {&(0x7f0000003bc0)="beb83094463bacfdcaa99fce0ac5d039419cf1fe2b05bc22156dc2c345961fb935ca868e458161e5cece7d920d88a4ed885f2574ad1e324304340f1f8d8cdd4be8516978cea7ce85560f281536f53934cb714ca68ef0deebce0dffd97c5b4ff9d9af4fddd2f1eac33b0aa49145ef2070e60ab2eb33ec378ad380a0b247666bb48d", 0x81}, {&(0x7f0000003c80)="2a195d662771a800e91afd0c7e1e30c39177f8828afec3993455fb259ca318febd6b545117c7d696ba207fb2bd4f21ee35df9b78a7574422defd9818087bc62d702645142423a7f082ec51b3204e90281934d5eb3d1d30cc0465a57929f425744313bedbdbb3fa8cc4c09da0029d8f7362f282c355a1dfbda5a2e8492571082110f7fe441cbecc559e0500f3b2ddb72f7a32dd6537b1f086c725d87f2532dacf4bed46d96cac681ed9bf77723d32998dd50df6c236ec8f6ae4f5b5b369", 0xbd}], 0x3}}], 0x7, 0x4000044) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r2 = epoll_create(0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x20000000}) 7.130886412s ago: executing program 3 (id=4136): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000497000/0x3000)=nil, 0x3000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) 6.68069575s ago: executing program 2 (id=4137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}}, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 6.67046935s ago: executing program 0 (id=4138): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz0\x00', {0x0, 0x0, 0xfffd}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x202]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x1, 0x3ff, 0x2f1, 0x3}, 0x35, [0x4, 0x3, 0xb15, 0x5, 0xb7, 0xf6, 0x8, 0x0, 0x3, 0x2db, 0x8, 0x6, 0x0, 0x1, 0x0, 0x85, 0x2, 0xff, 0xffffff01, 0x6, 0x0, 0x2, 0x4, 0x9, 0x56f, 0x7fff, 0x0, 0xd, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x5, 0x8, 0x6, 0x5, 0x4, 0xff, 0x5, 0x2, 0x6, 0x2, 0x7, 0x3, 0x2, 0x2, 0x2, 0x200, 0x6, 0xff, 0x4, 0xfff, 0xfffffffa, 0x6, 0x3, 0xfffffffc, 0xe, 0x80000000, 0x0, 0x73e, 0x6fd, 0x8], [0x6, 0x1, 0x5, 0x8, 0x100, 0x3, 0x0, 0x401, 0xd, 0x7ff, 0x6, 0x80, 0xa, 0x3, 0x1, 0x3, 0x1000, 0x2, 0x9, 0x0, 0x3, 0x2, 0x9, 0x7, 0x7fffffff, 0x5, 0x0, 0xe, 0x561, 0x3, 0x1400, 0x21d, 0x93, 0xc, 0x3, 0x2, 0x8000, 0x3, 0xfffffffe, 0x8001, 0x3ff, 0x5, 0xda0, 0x1, 0x3a, 0x1000, 0x2, 0x7, 0xffff, 0x8, 0x0, 0x3, 0x100, 0x7, 0x5, 0x9, 0x0, 0xffffffff, 0x7, 0x8000, 0x0, 0x9, 0x7fffffff, 0x6], [0x8, 0x1, 0xad9, 0xe60, 0x8001, 0xac01, 0x81, 0x4, 0x9, 0x3, 0x401, 0x7c, 0x4, 0x9, 0x32e, 0x0, 0x6, 0x4, 0x0, 0x5, 0x400, 0x8, 0x9, 0x6, 0x1, 0x184c, 0xe5, 0x5, 0x8, 0x4, 0x2, 0x4, 0x6, 0x7, 0x200, 0x0, 0x2, 0x0, 0x2e3, 0x1, 0x8000, 0x7, 0x9, 0x1, 0x0, 0x2, 0x7fff, 0x200, 0xffffffff, 0xfffffffb, 0x2, 0x5, 0x800, 0xcaa, 0x5, 0x80000000, 0x6, 0x1, 0xffff4e8e, 0x2, 0xffff, 0x9, 0xe62d, 0x8], [0xa, 0x7, 0xfffffffe, 0x2, 0x9, 0x0, 0x8, 0x2, 0x9, 0x2, 0xfffffffd, 0x1, 0x8, 0xaae3, 0x8, 0x4140, 0x9, 0x94, 0x9, 0x1, 0x401, 0x9, 0x1, 0x4, 0x0, 0xb7, 0x2, 0x0, 0x35b2, 0xff, 0x3, 0x9, 0x4, 0x0, 0xb, 0x4, 0x6, 0x200, 0x1, 0x3, 0x0, 0x7, 0x0, 0xffffc4e7, 0x7ff, 0xd, 0x6, 0x0, 0x5, 0x5, 0x8, 0x7ff, 0x8, 0xbe, 0x2, 0x8, 0x6, 0x1b, 0x1e8, 0x0, 0x8, 0x429, 0x3, 0x4]}, 0x45c) 6.436878332s ago: executing program 2 (id=4140): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="53af000003000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r2, 0x0, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0xa8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00009fc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/4061, 0xfdd, 0x1, 0x0}, &(0x7f0000000000)=0xffffffffffffff0d) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.436624512s ago: executing program 3 (id=4141): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x47ba, 0x636d, 0x0, 0x0, 0x0) 6.42275845s ago: executing program 0 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x1000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 6.15626787s ago: executing program 0 (id=4143): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}}, 0x1c}}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0198000003130c001c001280098008000300e000000100"/36], 0x3c}}, 0x0) 5.460803778s ago: executing program 1 (id=4144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040)=0xc8f5, 0x4) stat(&(0x7f0000000500)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000050) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x5) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) 5.414278047s ago: executing program 2 (id=4145): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.887065603s ago: executing program 3 (id=4146): r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 4.681920243s ago: executing program 3 (id=4147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000400000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xf0}}, 0x0) 4.496889081s ago: executing program 1 (id=4148): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="400b1c000000ce5f02174d42"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000d40)={0x0, 0x16, 0x3, '#Gn'}, 0x0, 0x0}) r1 = socket(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x0, 0xa0, 0x0, 0x170, 0x358, 0x430, 0x430, 0x430, 0x170, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x243e3445, 0x9, @multicast1, 0x4e20}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x89, 0x3, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x10, 0x5, [0x25, 0x13, 0x12, 0x17, 0x28, 0x1c, 0x1d, 0x16, 0x18, 0x2d, 0x2c, 0x1e, 0x1c, 0x33, 0x39, 0xe], 0x1, 0x762, 0x4}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'veth0_vlan\x00', 'bond0\x00', {}, {0xff}, 0x12, 0x3, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7f}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7f, 0x2}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x37}, 0xffffff00, 0xff000000, 'wg0\x00', 'wg1\x00', {0xca95e30d265167f1}, {}, 0x1d, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 4.407463376s ago: executing program 0 (id=4149): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000040)=0x8000, 0x4) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2) poll(&(0x7f0000000040)=[{r2, 0x81}], 0x1, 0xffffff01) 4.378927276s ago: executing program 3 (id=4150): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x108, 0x37f, 0x148, 0x108, 0x148, 0x1d8, 0x240, 0x240, 0x1d8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x67af7477, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x0, 0x1, 0x0, 0x4, 0x2], 0x0, 0x7}, {0x1, [0x4, 0x4, 0x0, 0x4, 0x2, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x300000000000000}}, {0x28}}}}, 0x2d0) 3.958527346s ago: executing program 3 (id=4151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x4, "0300253f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x20, 0xd, 0x4, "6b0262af"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x79, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a01700000000b3813e25030bdde84050b3"], 0x0}, 0x0) 3.956997777s ago: executing program 4 (id=4152): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x5d45000) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) 3.699887368s ago: executing program 2 (id=4153): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="7706", 0x2}, {0x0}, {0x0}, {&(0x7f0000000300)="bf281997984d621fbb35738ab5813cd7a778e17ee4b3f0f9b25e07e1acef6b84384035979e633ef0b53a444479f08f601b406c233f1df0826a323d4b43d24c31002e0a2b116f6481b5c182d5958bdd3a833c5f5ebafbf2c65688e582da40bae898ef9d0522dfe3d4618aab3374bf4d9d1d15e419cd9fc8025dd237431115f9f97c045859cf0171938614a614a09335bbba5ff08629fc3e6c5274ee03fdaa93e23de706343282", 0xa6}, {&(0x7f0000000100)}], 0x5, 0x0, 0x7f) 3.621641273s ago: executing program 0 (id=4154): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d4786682467", 0x1e}], 0x2}, 0x4) r1 = fanotify_init(0x20, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(0xffffffffffffffff, r2) fanotify_mark(r1, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d4786682467", 0x1e}], 0x2}, 0x4) (async) fanotify_init(0x20, 0x40000) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x3, 0x6, @random="cea0300a1672"}, 0x10) (async) dup2(0xffffffffffffffff, r2) (async) fanotify_mark(r1, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') (async) 3.56608243s ago: executing program 4 (id=4155): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x258, 0x2, 0x1, 0x201, 0x0, 0x0, {0xdef3f0647e2c8b2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x588}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x87}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000018}, 0x81) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}, {0x3, 0x8, 0xe8, 0x2, @tick=0x80, {0x80, 0x10}, {0x2}, @quote={{0x6, 0x3}, 0xc}}], 0x54) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) tkill(r1, 0x37) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) 2.565084551s ago: executing program 0 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1804f400"/14], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="05124ea3b80793b41925fbe30c6cfecd9a3e8772c9914cb9f437e6280cf2bb3a1ce71b4fea943d3fc80978be8677c7a75ea44664fc141520c9356baa406463517551270d210e61d6c283b9a60f15f4f0a07ee30276d58c8d5981931898974d88de553f012079dfe4b5546f71963529fdd4eadb05a0d5e7f015efbaa91a027673fa55795f59f08b111ac14f16671c44685620a48c293c0b6b387cf6238356241b4ce789e1d278890862ab689541792b5590ec154b4e3c5981210cdc123994fcd0c5c161a4a1db14f05c2ecd8ceb7e400bf18311415b6632469333439a", 0xdc}], 0x1) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r7 = socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000480), 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r10, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002e00090027bd705addc027338fe300"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.112902253s ago: executing program 4 (id=4157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x80, 0x7, 0x80000000, 0x4, 0x8, "4720dcc7b11929043a30c84b4ef1dc73754a73", 0x7ff, 0xfffffff9}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000380)={0x4b, 0x7fff, 0x5, 0x3, 0x6, "c5dab4bb25bf7462d2d0f715dfcdcf6fbdecaf", 0x1, 0x8001}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xb, 0xe18, 0x172b, 0x3, 0x7, 0x6, 0x3]}}) 2.029059171s ago: executing program 2 (id=4158): r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1.905920949s ago: executing program 4 (id=4159): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x300) 1.660860418s ago: executing program 4 (id=4160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000010008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.659278691s ago: executing program 1 (id=4161): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, 0x0, 0x3, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x31}) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r4}, 0x38) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x18}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 1.634651137s ago: executing program 2 (id=4162): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0xc, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x9000, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 0s ago: executing program 4 (id=4163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x1170, 0x1170, 0x128, 0x1170, 0x280, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_vlan\x00', {}, {}, 0x2e}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xa}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x7fff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) r2 = io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x145e, 0x800, 0x0, 0x32b}) mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x2208004, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$dsp(0xffffffffffffffff, 0x0, 0xfffffe59) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][T18828] No control pipe specified [ 949.803680][ T30] audit: type=1400 audit(1764834014.216:980): avc: denied { lock } for pid=18826 comm="syz.4.3363" path="socket:[66018]" dev="sockfs" ino=66018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 949.975622][T18831] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3364'. [ 950.042884][ T6081] usb 1-1: unable to get BOS descriptor or descriptor too short [ 950.048841][T18834] Cannot find del_set index 1 as target [ 950.081314][ T6081] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 950.088925][ T6081] usb 1-1: can't read configurations, error -71 [ 950.353954][ T30] audit: type=1400 audit(1764834015.106:981): avc: denied { mounton } for pid=18838 comm="syz.3.3368" path="/87/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 950.877856][T18846] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3369'. [ 951.318538][T18840] 9pnet: Could not find request transport: xen [ 954.245366][T18891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3377'. [ 954.432707][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 954.488020][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 955.294539][T18903] netlink: 'syz.4.3383': attribute type 10 has an invalid length. [ 955.601470][T18911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3386'. [ 956.590572][T18925] netlink: 'syz.1.3389': attribute type 10 has an invalid length. [ 956.648650][ T6081] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 956.834628][ T6081] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 956.857480][ T6081] usb 4-1: config 0 has no interface number 0 [ 956.868125][ T6081] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 956.878462][ T6081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.883774][T18931] macvlan2: entered allmulticast mode [ 956.892314][ T6081] usb 4-1: Product: syz [ 956.896501][ T6081] usb 4-1: Manufacturer: syz [ 956.902417][ T6081] usb 4-1: SerialNumber: syz [ 956.907402][T18933] netlink: 'syz.0.3392': attribute type 3 has an invalid length. [ 956.925837][ T6081] usb 4-1: config 0 descriptor?? [ 956.942779][ T6081] xr_serial 4-1:0.46: More than one union descriptor, skipping ... [ 957.007870][ T30] audit: type=1400 audit(1764834021.756:982): avc: denied { accept } for pid=18934 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 957.205938][ T5906] usb 4-1: USB disconnect, device number 59 [ 958.741462][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 958.814795][T18967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3399'. [ 959.862733][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 961.159433][T18997] binder: 18993:18997 unknown command 0 [ 961.186822][T18997] binder: 18993:18997 ioctl c0306201 200000000080 returned -22 [ 961.269251][T19005] binder: 18993:19005 ioctl c0306201 2000000003c0 returned -14 [ 961.429574][T19011] input: syz0 as /devices/virtual/input/input52 [ 961.710031][T19028] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3418'. [ 961.862915][ T30] audit: type=1400 audit(1764834026.616:983): avc: denied { setopt } for pid=19013 comm="syz.2.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 961.951035][ T6000] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 962.394472][T19026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.431537][ T6081] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 962.550767][T19013] delete_channel: no stack [ 962.795384][ T6081] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 962.808923][ T6081] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.831060][ T6081] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.837681][ T6081] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 962.943209][ T6081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.052344][ T6081] usb 1-1: config 0 descriptor?? [ 963.091357][ T6000] usb 4-1: unable to get BOS descriptor or descriptor too short [ 963.101515][ T6000] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 963.109098][ T6000] usb 4-1: can't read configurations, error -71 [ 963.348901][T19047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3424'. [ 963.365143][ T30] audit: type=1400 audit(1764834028.116:984): avc: denied { ioctl } for pid=19046 comm="syz.2.3424" path="socket:[66462]" dev="sockfs" ino=66462 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 963.451147][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 963.566640][ T5928] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 963.685920][T19059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19059 comm=syz.0.3420 [ 963.701278][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 963.716187][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 963.727742][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.131799][T19059] infiniband syz2: set active [ 964.136503][T19059] infiniband syz2: added ip6_vti0 [ 964.144039][T18055] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.180119][T19059] RDS/IB: syz2: added [ 964.184954][T19059] smc: adding ib device syz2 with port count 1 [ 964.191202][T19059] smc: ib device syz2 port 1 has no pnetid [ 964.199929][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.306082][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.399641][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.493438][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.589410][T19059] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.691505][T18055] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.710958][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 964.731392][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.774216][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.804484][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.843525][ T5928] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 965.228790][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.256038][ T5928] usb 2-1: config 0 descriptor?? [ 965.266504][T19071] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3426'. [ 965.788432][ T6081] usbhid 1-1:0.0: can't add hid device: -71 [ 965.794937][ T6081] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 966.137226][ T5928] hid_parser_main: 1 callbacks suppressed [ 966.137237][ T5928] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 966.161550][ T6081] usb 1-1: USB disconnect, device number 79 [ 966.221942][ T5928] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 966.297634][ T5928] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 966.351407][ T5928] microsoft 0003:045E:07DA.0028: no inputs found [ 966.388339][ T5928] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 966.426853][T19098] sp0: Synchronizing with TNC [ 966.428332][ T5928] usb 2-1: USB disconnect, device number 57 [ 966.729164][T19097] [U] è [ 966.891909][T19096] fido_id[19096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 967.437119][T19113] binder: 19112:19113 unknown command 0 [ 967.450281][T19113] binder: 19112:19113 ioctl c0306201 200000000080 returned -22 [ 967.469805][T19113] binder: 19112:19113 ioctl c018937b 200000000240 returned -22 [ 967.485446][T19113] binder: 19112:19113 ioctl 40049366 2000000000c0 returned -22 [ 968.367641][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 968.956145][T16344] Bluetooth: hci3: command 0x0406 tx timeout [ 969.376875][T17096] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 969.511073][T17096] usb 1-1: device descriptor read/64, error -71 [ 969.578931][ T5928] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 969.726350][T19160] binder: 19159:19160 unknown command 0 [ 969.732407][T19160] binder: 19159:19160 ioctl c0306201 200000000080 returned -22 [ 969.741765][T19160] binder: 19159:19160 ioctl c0306201 2000000003c0 returned -14 [ 969.751009][T17096] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 969.760193][ T5928] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 969.816218][ T5928] usb 4-1: config 0 has no interface number 0 [ 969.825342][ T5928] usb 4-1: New USB device found, idVendor=413c, idProduct=8138, bcdDevice=e1.2f [ 969.834559][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.842729][ T5928] usb 4-1: Product: syz [ 969.846892][ T5928] usb 4-1: Manufacturer: syz [ 969.852288][ T5928] usb 4-1: SerialNumber: syz [ 969.859098][ T5928] usb 4-1: config 0 descriptor?? [ 969.881048][T17096] usb 1-1: device descriptor read/64, error -71 [ 969.992701][T17096] usb usb1-port1: attempt power cycle [ 970.010491][T19166] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.3460'. [ 970.030865][ T30] audit: type=1326 audit(1764834034.776:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.137601][ T5928] usb 4-1: USB disconnect, device number 62 [ 970.168477][ T30] audit: type=1326 audit(1764834034.896:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.222687][ T30] audit: type=1326 audit(1764834034.976:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.391105][T17096] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 970.538377][ T30] audit: type=1326 audit(1764834035.166:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.566672][ T30] audit: type=1326 audit(1764834035.286:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.591955][T17096] usb 1-1: device descriptor read/8, error -71 [ 970.611455][ T30] audit: type=1326 audit(1764834035.366:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.655152][ T30] audit: type=1326 audit(1764834035.406:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19167 comm="syz.4.3459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bff8f749 code=0x0 [ 970.748461][T19181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3461'. [ 970.841095][T17096] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 971.033023][T17096] usb 1-1: device descriptor read/8, error -71 [ 971.141683][T19191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3465'. [ 971.169846][T19193] netlink: 'syz.2.3463': attribute type 10 has an invalid length. [ 971.178107][T17096] usb usb1-port1: unable to enumerate USB device [ 971.417174][T19201] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 971.711629][T19206] x_tables: duplicate underflow at hook 3 [ 971.979764][ T30] audit: type=1400 audit(1764834036.696:992): avc: denied { setopt } for pid=19205 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 972.540178][ T30] audit: type=1400 audit(1764834037.276:993): avc: denied { append } for pid=19214 comm="syz.0.3471" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 974.097914][T19240] bridge0: port 3(gretap0) entered blocking state [ 974.105266][T19240] bridge0: port 3(gretap0) entered disabled state [ 974.114817][T19240] gretap0: entered allmulticast mode [ 974.131401][T19240] gretap0: entered promiscuous mode [ 974.138584][T19240] bridge0: port 3(gretap0) entered blocking state [ 974.145465][T19240] bridge0: port 3(gretap0) entered forwarding state [ 974.159001][T19239] Bluetooth: MGMT ver 1.23 [ 974.403898][ T6081] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 974.689519][T19254] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3481'. [ 974.927890][ T30] audit: type=1400 audit(1764834039.676:994): avc: denied { getopt } for pid=19250 comm="syz.1.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 975.907545][T19263] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3485'. [ 976.835310][ T6081] usb 4-1: unable to get BOS descriptor or descriptor too short [ 977.282260][ T6081] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 977.289887][ T6081] usb 4-1: can't read configurations, error -71 [ 977.561943][T19275] input: syz0 as /devices/virtual/input/input53 [ 977.569578][T19266] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3486'. [ 977.685001][T19276] netlink: 'syz.4.3489': attribute type 10 has an invalid length. [ 977.722020][ T6001] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 977.773718][ T6001] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 977.878967][T19286] syzkaller0: entered promiscuous mode [ 977.897372][T19286] syzkaller0: entered allmulticast mode [ 978.080119][T19296] ip6_vti0 speed is unknown, defaulting to 1000 [ 978.922179][T19307] Cannot find del_set index 1 as target [ 979.098985][T19309] netlink: 'syz.1.3498': attribute type 10 has an invalid length. [ 979.148015][T19313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3500'. [ 979.402444][T19320] netlink: 'syz.1.3503': attribute type 10 has an invalid length. [ 979.756031][T19323] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3504'. [ 980.071368][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 980.267063][ T30] audit: type=1400 audit(1764834045.016:995): avc: denied { mounton } for pid=19339 comm="syz.0.3509" path="/61/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 981.432829][T19358] netlink: 'syz.3.3514': attribute type 10 has an invalid length. [ 981.752462][T19362] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 981.907403][T19365] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input54 [ 981.936308][ T30] audit: type=1400 audit(1764834046.686:996): avc: denied { write } for pid=19366 comm="syz.0.3516" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 982.772099][T19374] netlink: 'syz.2.3518': attribute type 10 has an invalid length. [ 982.877131][ T6000] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 983.181146][ T6000] usb 4-1: device descriptor read/64, error -71 [ 983.254181][T19388] netlink: 'syz.4.3520': attribute type 10 has an invalid length. [ 983.435005][T19372] delete_channel: no stack [ 983.451171][ T6000] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 983.651871][ T6000] usb 4-1: device descriptor read/64, error -71 [ 983.771924][ T6000] usb usb4-port1: attempt power cycle [ 984.611278][ T5975] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 984.661015][ T6000] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 984.702420][ T6000] usb 4-1: device descriptor read/8, error -71 [ 984.721723][T19406] Cannot find del_set index 1 as target [ 984.771381][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 984.783920][T19408] netlink: 'syz.4.3528': attribute type 10 has an invalid length. [ 984.805956][ T5975] usb 1-1: config 9 has an invalid interface number: 63 but max is 0 [ 984.814943][ T5975] usb 1-1: config 9 has no interface number 0 [ 984.829502][ T5975] usb 1-1: config 9 interface 63 has no altsetting 0 [ 984.839781][ T5975] usb 1-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=e9.7d [ 984.850175][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.862714][ T5975] usb 1-1: Product: syz [ 984.866957][ T5975] usb 1-1: Manufacturer: syz [ 984.873395][ T5975] usb 1-1: SerialNumber: syz [ 984.962003][ T6000] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 985.183927][ T6000] usb 4-1: device not accepting address 68, error -71 [ 985.320700][ T6000] usb usb4-port1: unable to enumerate USB device [ 985.384544][ T5975] usb 1-1: USB disconnect, device number 84 [ 985.656468][T11712] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 986.370635][T19430] tmpfs: Bad value for 'mpol' [ 986.401200][T11712] usb 3-1: Using ep0 maxpacket: 16 [ 986.421108][T11712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.451176][T11712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.465182][T11712] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.479549][T11712] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 987.034486][ T6000] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 987.217208][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.262336][T11712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.297626][T11712] usb 3-1: config 0 descriptor?? [ 987.584728][ T6000] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 987.620058][T19443] netlink: 'syz.3.3539': attribute type 10 has an invalid length. [ 987.658357][ T6000] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 987.690848][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.798329][T11712] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 987.811062][T11712] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 987.836177][ T6000] usb 1-1: config 0 descriptor?? [ 987.909598][T19451] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 988.519651][T11712] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 988.543050][T11712] microsoft 0003:045E:07DA.002A: no inputs found [ 988.557808][T11712] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 988.595895][T11712] usb 3-1: USB disconnect, device number 70 [ 988.975232][ T6000] kovaplus 0003:1E7D:2D50.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 989.208518][T19464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3543'. [ 989.945915][T19473] netlink: 'syz.4.3546': attribute type 12 has an invalid length. [ 989.996322][T19473] only policy match revision 0 supported [ 989.996334][T19473] unable to load match [ 990.997721][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'. [ 991.039956][T19488] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 991.457878][ T6000] kovaplus 0003:1E7D:2D50.002B: couldn't init struct kovaplus_device [ 991.479610][ T6000] kovaplus 0003:1E7D:2D50.002B: couldn't install mouse [ 991.510536][ T6000] kovaplus 0003:1E7D:2D50.002B: probe with driver kovaplus failed with error -71 [ 991.551854][ T6000] usb 1-1: USB disconnect, device number 85 [ 991.621523][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 991.664326][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 992.514333][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 992.621560][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.669601][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.795241][ T6001] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 993.220663][ T30] audit: type=1326 audit(1764834057.966:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 993.277435][T19519] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3562'. [ 993.279405][ T6001] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 993.341963][ T30] audit: type=1326 audit(1764834058.006:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 993.361045][ T6001] usb 5-1: config 0 has no interface number 0 [ 993.462202][ T6001] usb 5-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 993.481728][T19523] netlink: 'syz.1.3563': attribute type 10 has an invalid length. [ 993.510017][ T30] audit: type=1326 audit(1764834058.006:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 993.510208][ T6001] usb 5-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 993.537781][ T30] audit: type=1326 audit(1764834058.006:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 993.878122][ T6001] usb 5-1: config 0 interface 231 has no altsetting 0 [ 993.887572][ T6001] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 994.057188][ T30] audit: type=1326 audit(1764834058.006:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 994.101182][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.109364][ T30] audit: type=1326 audit(1764834058.006:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 994.109682][ T6001] usb 5-1: Product: syz [ 994.585441][ T6001] usb 5-1: Manufacturer: syz [ 994.590277][ T6001] usb 5-1: SerialNumber: syz [ 994.770045][T19543] tmpfs: Bad value for 'mpol' [ 995.110462][ T30] audit: type=1326 audit(1764834058.006:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 995.229933][ T6001] usb 5-1: config 0 descriptor?? [ 995.254294][ T6001] usb 5-1: can't set config #0, error -71 [ 995.572184][ T30] audit: type=1326 audit(1764834058.016:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 995.579920][ T6001] usb 5-1: USB disconnect, device number 64 [ 995.614325][ T30] audit: type=1326 audit(1764834058.016:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 995.820381][ T30] audit: type=1326 audit(1764834058.016:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19518 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96798f749 code=0x7ffc0000 [ 997.794536][T19577] netlink: 'syz.4.3577': attribute type 10 has an invalid length. [ 998.048181][T19586] netlink: 'syz.1.3581': attribute type 10 has an invalid length. [ 999.315378][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3586'. [ 999.336391][T19609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=19609 comm=syz.3.3586 [ 999.750980][T18055] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 999.760963][T17096] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 999.931025][T17096] usb 4-1: Using ep0 maxpacket: 8 [ 999.942432][T18055] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 999.954439][T18055] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.964274][T18055] usb 5-1: config 0 interface 0 has no altsetting 0 [ 999.964953][T17096] usb 4-1: unable to get BOS descriptor or descriptor too short [ 999.971134][T18055] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 999.982427][T17096] usb 4-1: config 4 interface 0 has no altsetting 0 [ 999.994337][T18055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.018644][T18055] usb 5-1: config 0 descriptor?? [ 1000.046275][T17096] usb 4-1: string descriptor 0 read error: -22 [ 1000.054227][T17096] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1000.064193][T17096] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1000.104615][T17096] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1000.130267][T17096] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1000.142047][T19564] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1000.324813][T17096] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1000.326335][T19612] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 1000.365712][T17096] usb 4-1: media controller created [ 1000.384688][T17096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1000.918484][T19634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19634 comm=syz.4.3587 [ 1000.941776][T19633] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1001.662159][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1001.662176][ T30] audit: type=1400 audit(1764834066.296:1043): avc: denied { wake_alarm } for pid=19611 comm="syz.3.3588" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1001.931365][T17096] zl10353_read_register: readreg error (reg=127, ret==0) [ 1001.979310][T17096] usb 4-1: USB disconnect, device number 69 [ 1002.973815][T18055] usbhid 5-1:0.0: can't add hid device: -71 [ 1002.995323][T18055] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1003.042081][T18055] usb 5-1: USB disconnect, device number 65 [ 1003.287583][T19564] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1003.296377][T19564] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1003.313052][T19564] usb 3-1: can't read configurations, error -71 [ 1003.573487][T17096] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1004.161134][T17096] usb 1-1: device descriptor read/64, error -71 [ 1004.578406][T17096] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1004.915002][T19671] tipc: Started in network mode [ 1004.966190][T17096] usb 1-1: device descriptor read/64, error -71 [ 1005.011930][T19671] tipc: Node identity 3606c0da245f, cluster identity 4711 [ 1005.019410][T19671] tipc: Enabled bearer , priority 0 [ 1005.028753][T19674] syzkaller0: entered promiscuous mode [ 1005.035026][T19674] syzkaller0: entered allmulticast mode [ 1005.064194][T19671] tipc: Resetting bearer [ 1005.080693][T19670] tipc: Resetting bearer [ 1005.106981][T19670] tipc: Disabling bearer [ 1005.216976][T17096] usb usb1-port1: attempt power cycle [ 1005.824726][T19694] FAULT_INJECTION: forcing a failure. [ 1005.824726][T19694] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.873107][ T30] audit: type=1400 audit(1764834070.616:1044): avc: denied { mount } for pid=19696 comm="syz.4.3610" name="/" dev="configfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1005.950456][T19694] CPU: 1 UID: 0 PID: 19694 Comm: syz.2.3609 Not tainted syzkaller #0 PREEMPT(full) [ 1005.950481][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.950491][T19694] Call Trace: [ 1005.950497][T19694] [ 1005.950504][T19694] dump_stack_lvl+0x16c/0x1f0 [ 1005.950529][T19694] should_fail_ex+0x512/0x640 [ 1005.950546][T19694] ? fs_reclaim_acquire+0xae/0x150 [ 1005.950570][T19694] should_failslab+0xc2/0x120 [ 1005.950589][T19694] __kmalloc_noprof+0xdd/0x870 [ 1005.950611][T19694] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.950639][T19694] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.950662][T19694] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.950687][T19694] ? tomoyo_profile+0x47/0x60 [ 1005.950705][T19694] tomoyo_path_number_perm+0x245/0x580 [ 1005.950725][T19694] ? tomoyo_path_number_perm+0x237/0x580 [ 1005.950748][T19694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1005.950771][T19694] ? find_held_lock+0x2b/0x80 [ 1005.950808][T19694] ? find_held_lock+0x2b/0x80 [ 1005.950823][T19694] ? hook_file_ioctl_common+0x144/0x410 [ 1005.950846][T19694] ? __fget_files+0x20e/0x3c0 [ 1005.950870][T19694] security_file_ioctl+0x9b/0x240 [ 1005.950899][T19694] __x64_sys_ioctl+0xb7/0x210 [ 1005.950923][T19694] do_syscall_64+0xcd/0xf80 [ 1005.950942][T19694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.950958][T19694] RIP: 0033:0x7f06cfd8f749 [ 1005.950972][T19694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.950987][T19694] RSP: 002b:00007f06d0c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.951003][T19694] RAX: ffffffffffffffda RBX: 00007f06cffe5fa0 RCX: 00007f06cfd8f749 [ 1005.951012][T19694] RDX: 0000200000000000 RSI: 0000000000001277 RDI: 0000000000000003 [ 1005.951023][T19694] RBP: 00007f06d0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.951033][T19694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.951042][T19694] R13: 00007f06cffe6038 R14: 00007f06cffe5fa0 R15: 00007ffc9897ee68 [ 1005.951067][T19694] [ 1006.189140][T17096] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1006.201010][T19694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1006.264598][T17096] usb 1-1: device descriptor read/8, error -71 [ 1006.299370][T19698] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 1007.154942][T19689] delete_channel: no stack [ 1007.641942][T19720] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1008.869368][T19751] tipc: Enabled bearer , priority 0 [ 1008.985480][ T30] audit: type=1326 audit(1764834073.736:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.0.3625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb73758f749 code=0x0 [ 1009.561910][T19756] tipc: Disabling bearer [ 1009.989578][T19772] netlink: 'syz.0.3632': attribute type 10 has an invalid length. [ 1010.196029][T19775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3630'. [ 1012.238541][T19799] openvswitch: netlink: Message has 4 unknown bytes. [ 1012.418223][T19803] tmpfs: Bad value for 'mpol' [ 1016.204437][T19826] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 1016.655857][T17141] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1016.832430][T17141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.848425][T17141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.865226][T17141] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1016.876494][T17141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.885569][ T30] audit: type=1400 audit(1764834081.636:1046): avc: denied { write } for pid=19839 comm="syz.1.3649" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1016.926680][T17141] usb 1-1: config 0 descriptor?? [ 1017.249238][T19843] Cannot find del_set index 1 as target [ 1017.556720][T17141] pyra 0003:1E7D:2CF6.002C: item fetching failed at offset 5/7 [ 1017.577952][T17141] pyra 0003:1E7D:2CF6.002C: parse failed [ 1017.598700][T17141] pyra 0003:1E7D:2CF6.002C: probe with driver pyra failed with error -22 [ 1017.822747][T19852] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1017.941224][ T30] audit: type=1400 audit(1764834082.546:1047): avc: denied { listen } for pid=19847 comm="syz.4.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1018.165578][T17141] usb 1-1: USB disconnect, device number 90 [ 1019.856985][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1019.879896][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1019.897658][T19875] erofs (device loop2): cannot find valid erofs superblock [ 1020.088823][T19884] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3657'. [ 1020.326897][ T30] audit: type=1400 audit(1764834084.836:1048): avc: denied { map } for pid=19877 comm="syz.4.3657" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1020.487023][T19887] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1020.814031][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1022.732814][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 1022.748126][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 1023.065349][ T30] audit: type=1400 audit(1764834087.726:1049): avc: denied { write } for pid=19921 comm="syz.2.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1024.181081][ T6081] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1024.613817][T19946] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1024.653568][ T6081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.676071][ T6081] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1024.692863][ T6081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.723439][ T6081] usb 4-1: config 0 descriptor?? [ 1025.172262][ T6081] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 1025.209528][ T6081] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002D/input/input56 [ 1025.794413][ T6081] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1027.049628][T19974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1027.769934][T19982] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1028.760372][T19986] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1028.792498][ T6081] usb 4-1: USB disconnect, device number 70 [ 1028.927026][T19990] netlink: 'syz.2.3689': attribute type 10 has an invalid length. [ 1029.630971][ T5906] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1030.618914][T20010] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1031.096190][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1031.134953][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1031.173883][ T5906] usb 5-1: can't read configurations, error -71 [ 1032.884868][ T30] audit: type=1400 audit(1764834097.636:1050): avc: denied { listen } for pid=20023 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1032.924830][T20028] Cannot find del_set index 1 as target [ 1032.956081][ T30] audit: type=1400 audit(1764834097.636:1051): avc: denied { connect } for pid=20023 comm="syz.2.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1032.975772][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.398091][ T30] audit: type=1400 audit(1764834098.146:1052): avc: denied { ioctl } for pid=20033 comm="syz.3.3701" path="socket:[69904]" dev="sockfs" ino=69904 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1033.450364][ T30] audit: type=1400 audit(1764834098.196:1053): avc: denied { getopt } for pid=20033 comm="syz.3.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1033.820443][ T30] audit: type=1400 audit(1764834098.566:1054): avc: denied { create } for pid=20044 comm="syz.4.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1033.840283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.880775][ T30] audit: type=1400 audit(1764834098.606:1055): avc: denied { sys_admin } for pid=20044 comm="syz.4.3706" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1035.829430][T20073] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1037.033202][ T30] audit: type=1400 audit(1764834101.706:1056): avc: denied { write } for pid=20086 comm="syz.2.3716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1037.602888][T20087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3716'. [ 1037.612191][T20087] unsupported nlmsg_type 40 [ 1038.110971][ T5975] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1038.300951][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.374745][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.414617][ T5975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1038.456649][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.506036][ T5975] usb 3-1: SerialNumber: syz [ 1038.507038][T20103] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1038.585497][ T5975] usb 3-1: 0:2 : does not exist [ 1039.026930][T20087] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3716'. [ 1039.037707][ T6081] usb 3-1: USB disconnect, device number 73 [ 1039.059016][T20101] veth0: entered promiscuous mode [ 1039.100541][T20100] veth0: left promiscuous mode [ 1040.211372][ T30] audit: type=1400 audit(1764834104.916:1057): avc: denied { ioctl } for pid=20127 comm="syz.1.3726" path="socket:[70912]" dev="sockfs" ino=70912 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1044.185121][T20175] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1044.575362][T20183] netlink: 'syz.3.3739': attribute type 10 has an invalid length. [ 1046.130963][T19564] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1047.842388][T19564] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1048.182213][T19564] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1048.200978][T19564] usb 3-1: can't read configurations, error -71 [ 1050.503463][T20265] netlink: 'syz.1.3760': attribute type 10 has an invalid length. [ 1050.702817][ T30] audit: type=1400 audit(1764834115.456:1058): avc: denied { ioctl } for pid=20268 comm="syz.3.3763" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1051.012067][T20272] FAULT_INJECTION: forcing a failure. [ 1051.012067][T20272] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.024878][T20272] CPU: 0 UID: 0 PID: 20272 Comm: syz.3.3764 Not tainted syzkaller #0 PREEMPT(full) [ 1051.024901][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.024910][T20272] Call Trace: [ 1051.024916][T20272] [ 1051.024922][T20272] dump_stack_lvl+0x16c/0x1f0 [ 1051.024947][T20272] should_fail_ex+0x512/0x640 [ 1051.024961][T20272] ? kmem_cache_alloc_node_noprof+0x65/0x7b0 [ 1051.024981][T20272] should_failslab+0xc2/0x120 [ 1051.024995][T20272] kmem_cache_alloc_node_noprof+0x78/0x7b0 [ 1051.025012][T20272] ? __alloc_skb+0x2b2/0x380 [ 1051.025031][T20272] ? __alloc_skb+0x2b2/0x380 [ 1051.025045][T20272] ? __pfx___might_resched+0x10/0x10 [ 1051.025056][T20272] __alloc_skb+0x2b2/0x380 [ 1051.025072][T20272] ? __pfx___alloc_skb+0x10/0x10 [ 1051.025087][T20272] ? __lock_acquire+0x433/0x22f0 [ 1051.025101][T20272] ? process_measurement+0x4a6/0x22d0 [ 1051.025117][T20272] ? down_write+0x14d/0x200 [ 1051.025134][T20272] alloc_skb_with_frags+0xe0/0x860 [ 1051.025150][T20272] sock_alloc_send_pskb+0x7f9/0x980 [ 1051.025168][T20272] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1051.025184][T20272] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1051.025199][T20272] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1051.025215][T20272] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1051.025236][T20272] unix_dgram_sendmsg+0x3e9/0x17f0 [ 1051.025256][T20272] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1051.025275][T20272] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1051.025298][T20272] ____sys_sendmsg+0xa5d/0xc30 [ 1051.025312][T20272] ? copy_msghdr_from_user+0x10a/0x160 [ 1051.025322][T20272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.025338][T20272] ? __pfx__kstrtoull+0x10/0x10 [ 1051.025359][T20272] ___sys_sendmsg+0x134/0x1d0 [ 1051.025371][T20272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.025388][T20272] ? find_held_lock+0x2b/0x80 [ 1051.025407][T20272] __sys_sendmmsg+0x200/0x420 [ 1051.025419][T20272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1051.025434][T20272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1051.025452][T20272] ? fput+0x70/0xf0 [ 1051.025468][T20272] ? ksys_write+0x1ac/0x250 [ 1051.025481][T20272] ? __pfx_ksys_write+0x10/0x10 [ 1051.025496][T20272] __x64_sys_sendmmsg+0x9c/0x100 [ 1051.025506][T20272] ? lockdep_hardirqs_on+0x7c/0x110 [ 1051.025518][T20272] do_syscall_64+0xcd/0xf80 [ 1051.025531][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.025542][T20272] RIP: 0033:0x7fc96798f749 [ 1051.025551][T20272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.025561][T20272] RSP: 002b:00007fc968785038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1051.025572][T20272] RAX: ffffffffffffffda RBX: 00007fc967be6090 RCX: 00007fc96798f749 [ 1051.025579][T20272] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000006 [ 1051.025586][T20272] RBP: 00007fc968785090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.025592][T20272] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 1051.025598][T20272] R13: 00007fc967be6128 R14: 00007fc967be6090 R15: 00007ffc8eafe038 [ 1051.025612][T20272] [ 1052.285495][T20280] Cannot find del_set index 1 as target [ 1052.857010][ T30] audit: type=1400 audit(1764834117.606:1059): avc: denied { connect } for pid=20285 comm="syz.4.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1053.984206][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1053.993898][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.000670][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.068541][ T30] audit: type=1400 audit(1764834118.816:1060): avc: denied { append } for pid=20305 comm="syz.4.3775" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1054.280491][T20314] /dev/nullb0: Can't open blockdev [ 1054.484105][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1054.506211][T20327] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1054.630092][ T30] audit: type=1400 audit(1764834119.376:1061): avc: denied { map } for pid=20322 comm="syz.3.3780" path="socket:[70444]" dev="sockfs" ino=70444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1057.668437][T20363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1058.413209][T20377] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1058.492076][T20381] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1059.588883][T20389] can0: slcan on ttyS3. [ 1059.681083][T20389] can0 (unregistered): slcan off ttyS3. [ 1059.689122][T20389] can0: slcan on ttyS3. [ 1059.771692][T20388] can0 (unregistered): slcan off ttyS3. [ 1060.296386][T20397] netlink: 'syz.4.3798': attribute type 10 has an invalid length. [ 1061.934667][T20413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3802'. [ 1062.538977][T20428] binder: 20422:20428 ioctl 4018620d 0 returned -22 [ 1063.554876][T20431] netlink: 'syz.1.3808': attribute type 10 has an invalid length. [ 1064.184569][T20438] nfs: Unknown parameter '18446744073709551615' [ 1065.168113][T20450] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1065.537793][T20459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1065.581185][T17096] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1065.613721][ T30] audit: type=1400 audit(1764834130.286:1062): avc: denied { create } for pid=20458 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.614816][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1065.693489][ T30] audit: type=1400 audit(1764834130.286:1063): avc: denied { write } for pid=20458 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.714867][ T30] audit: type=1400 audit(1764834130.286:1064): avc: denied { nlmsg_write } for pid=20458 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1065.765825][ T30] audit: type=1400 audit(1764834130.346:1065): avc: denied { read write } for pid=16813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1066.561393][ T30] audit: type=1400 audit(1764834130.346:1066): avc: denied { open } for pid=16813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1066.598543][T20479] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1066.673973][T17096] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1066.737249][T17096] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1066.793165][T17096] usb 5-1: can't read configurations, error -71 [ 1066.855908][ T30] audit: type=1400 audit(1764834130.346:1067): avc: denied { ioctl } for pid=16813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1067.296733][ T30] audit: type=1400 audit(1764834130.356:1068): avc: denied { ioctl } for pid=20451 comm="syz.4.3814" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1067.484481][ T30] audit: type=1400 audit(1764834130.366:1069): avc: denied { write } for pid=20460 comm="syz.0.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1067.575888][ T30] audit: type=1400 audit(1764834130.436:1070): avc: denied { bpf } for pid=20463 comm="syz.1.3819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1067.650961][T18055] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1067.666205][ T30] audit: type=1400 audit(1764834130.446:1071): avc: denied { create } for pid=20465 comm="syz.2.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1068.049131][T20504] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3827'. [ 1068.301938][T18055] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1068.312266][T18055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.363505][T18055] usb 2-1: config 0 descriptor?? [ 1068.767381][T18055] kaweth 2-1:0.0: Firmware present in device. [ 1068.987154][T18055] kaweth 2-1:0.0: Statistics collection: 0 [ 1069.019530][T18055] kaweth 2-1:0.0: Multicast filter limit: 0 [ 1069.510679][T18055] kaweth 2-1:0.0: MTU: 0 [ 1069.515432][T18055] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1069.724064][T18055] kaweth 2-1:0.0: Error setting SOFS wait [ 1069.745384][T18055] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1069.817727][T20520] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1070.002417][T18055] usb 2-1: USB disconnect, device number 58 [ 1070.192662][T20527] binder: 20526:20527 unknown command 0 [ 1070.198232][T20527] binder: 20526:20527 ioctl c0306201 200000000080 returned -22 [ 1070.251635][T20527] binder: 20526:20527 ioctl c0306201 2000000003c0 returned -14 [ 1070.330923][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1070.680663][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1070.712575][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.750799][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1070.761190][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1070.761204][ T30] audit: type=1400 audit(1764834135.506:1123): avc: denied { create } for pid=20544 comm="syz.3.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1070.787520][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1070.804429][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.036512][ T10] usb 5-1: config 0 descriptor?? [ 1071.056567][ T30] audit: type=1400 audit(1764834135.776:1124): avc: denied { create } for pid=20544 comm="syz.3.3841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1071.097416][ T30] audit: type=1400 audit(1764834135.836:1125): avc: denied { ioctl } for pid=20544 comm="syz.3.3841" path="socket:[71690]" dev="sockfs" ino=71690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1071.230336][T20552] netlink: 'syz.3.3843': attribute type 10 has an invalid length. [ 1071.241404][T20552] netlink: 'syz.3.3843': attribute type 10 has an invalid length. [ 1071.382783][ T30] audit: type=1400 audit(1764834136.126:1126): avc: denied { kexec_image_load } for pid=20533 comm="syz.2.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1071.409278][ T30] audit: type=1400 audit(1764834136.156:1127): avc: denied { create } for pid=20533 comm="syz.2.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1071.438971][T20557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.448848][ T30] audit: type=1400 audit(1764834136.156:1128): avc: denied { connect } for pid=20533 comm="syz.2.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1071.468843][ T30] audit: type=1400 audit(1764834136.186:1129): avc: denied { append } for pid=20553 comm="syz.3.3844" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1071.584426][ T30] audit: type=1400 audit(1764834136.186:1130): avc: denied { read write } for pid=20553 comm="syz.3.3844" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1071.613254][T20557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.624065][ T30] audit: type=1400 audit(1764834136.186:1131): avc: denied { open } for pid=20553 comm="syz.3.3844" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1071.652110][T20557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.659851][T20557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.718073][T20560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20560 comm=syz.4.3833 [ 1071.737422][T20560] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1071.801012][ T30] audit: type=1400 audit(1764834136.486:1132): avc: denied { create } for pid=20523 comm="syz.4.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1072.357713][T20563] Cannot find del_set index 1 as target [ 1072.553267][T20565] FAULT_INJECTION: forcing a failure. [ 1072.553267][T20565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.566760][T20565] CPU: 0 UID: 0 PID: 20565 Comm: syz.1.3846 Not tainted syzkaller #0 PREEMPT(full) [ 1072.566780][T20565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.566787][T20565] Call Trace: [ 1072.566792][T20565] [ 1072.566799][T20565] dump_stack_lvl+0x16c/0x1f0 [ 1072.566817][T20565] should_fail_ex+0x512/0x640 [ 1072.566832][T20565] _copy_to_user+0x32/0xd0 [ 1072.566844][T20565] simple_read_from_buffer+0xcb/0x170 [ 1072.566863][T20565] proc_fail_nth_read+0x197/0x240 [ 1072.566881][T20565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.566893][T20565] ? rw_verify_area+0xcf/0x6c0 [ 1072.566905][T20565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.566916][T20565] vfs_read+0x1e4/0xcf0 [ 1072.566929][T20565] ? __pfx___mutex_lock+0x10/0x10 [ 1072.566945][T20565] ? __pfx_vfs_read+0x10/0x10 [ 1072.566961][T20565] ? __fget_files+0x20e/0x3c0 [ 1072.566975][T20565] ? warn_bogus_irq_restore+0x20/0x20 [ 1072.566992][T20565] ksys_read+0x12a/0x250 [ 1072.567005][T20565] ? __pfx_ksys_read+0x10/0x10 [ 1072.567021][T20565] do_syscall_64+0xcd/0xf80 [ 1072.567035][T20565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.567047][T20565] RIP: 0033:0x7f04e238e15c [ 1072.567056][T20565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1072.567067][T20565] RSP: 002b:00007f04e31b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1072.567079][T20565] RAX: ffffffffffffffda RBX: 00007f04e25e5fa0 RCX: 00007f04e238e15c [ 1072.567085][T20565] RDX: 000000000000000f RSI: 00007f04e31b60a0 RDI: 0000000000000008 [ 1072.567092][T20565] RBP: 00007f04e31b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.567098][T20565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.567104][T20565] R13: 00007f04e25e6038 R14: 00007f04e25e5fa0 R15: 00007ffe67c6db68 [ 1072.567119][T20565] [ 1073.175696][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1073.239930][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1073.331551][T20576] binder: 20573:20576 unknown command 0 [ 1073.337180][T20576] binder: 20573:20576 ioctl c0306201 200000000080 returned -22 [ 1073.428093][T20576] binder: 20573:20576 ioctl c0306201 2000000003c0 returned -14 [ 1073.535550][T20580] syz.2.3849 (20580) used obsolete PPPIOCDETACH ioctl [ 1073.734720][ T10] usb 5-1: USB disconnect, device number 70 [ 1074.050995][ T48] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1074.311015][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 1074.472469][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.503334][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.517637][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.533016][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1074.643167][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.686132][ T48] usb 3-1: config 0 descriptor?? [ 1075.522608][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 1075.528933][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1075.677509][ T48] usb 3-1: USB disconnect, device number 76 [ 1075.788182][T20611] FAULT_INJECTION: forcing a failure. [ 1075.788182][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.801592][T20611] CPU: 0 UID: 0 PID: 20611 Comm: syz.4.3858 Not tainted syzkaller #0 PREEMPT(full) [ 1075.801615][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1075.801625][T20611] Call Trace: [ 1075.801632][T20611] [ 1075.801639][T20611] dump_stack_lvl+0x16c/0x1f0 [ 1075.801664][T20611] should_fail_ex+0x512/0x640 [ 1075.801685][T20611] _copy_from_user+0x2e/0xd0 [ 1075.801712][T20611] kstrtouint_from_user+0xd6/0x1d0 [ 1075.801733][T20611] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1075.801759][T20611] ? preempt_schedule_thunk+0x16/0x30 [ 1075.801792][T20611] proc_fail_nth_write+0x83/0x220 [ 1075.801811][T20611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1075.801841][T20611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1075.801857][T20611] vfs_write+0x2a0/0x11d0 [ 1075.801880][T20611] ? __pfx___mutex_lock+0x10/0x10 [ 1075.801903][T20611] ? __pfx_vfs_write+0x10/0x10 [ 1075.801930][T20611] ? __fget_files+0x20e/0x3c0 [ 1075.801960][T20611] ksys_write+0x12a/0x250 [ 1075.801980][T20611] ? __pfx_ksys_write+0x10/0x10 [ 1075.802001][T20611] ? fput+0x70/0xf0 [ 1075.802029][T20611] do_syscall_64+0xcd/0xf80 [ 1075.802050][T20611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.802066][T20611] RIP: 0033:0x7f84bff8e1ff [ 1075.802081][T20611] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1075.802096][T20611] RSP: 002b:00007f84c0dc4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1075.802114][T20611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84bff8e1ff [ 1075.802125][T20611] RDX: 0000000000000001 RSI: 00007f84c0dc40a0 RDI: 0000000000000008 [ 1075.802135][T20611] RBP: 00007f84c0dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.802145][T20611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1075.802155][T20611] R13: 00007f84c01e6218 R14: 00007f84c01e6180 R15: 00007ffedb73d038 [ 1075.802180][T20611] [ 1075.999503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.143641][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1076.143657][ T30] audit: type=1400 audit(1764834140.896:1161): avc: denied { read write } for pid=20616 comm="syz.4.3862" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1076.148434][T20617] input: syz0 as /devices/virtual/input/input57 [ 1076.149852][ T30] audit: type=1400 audit(1764834140.896:1162): avc: denied { open } for pid=20616 comm="syz.4.3862" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1076.173472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.204369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.230616][ T30] audit: type=1400 audit(1764834140.896:1163): avc: denied { ioctl } for pid=20616 comm="syz.4.3862" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1076.255766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.264980][ T30] audit: type=1400 audit(1764834140.926:1164): avc: denied { read } for pid=5179 comm="acpid" name="js0" dev="devtmpfs" ino=3637 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.287213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.296508][ T30] audit: type=1400 audit(1764834140.926:1165): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3637 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.319737][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.328097][ T30] audit: type=1400 audit(1764834140.926:1166): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3637 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.352808][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.364598][ T30] audit: type=1400 audit(1764834141.116:1167): avc: denied { read write } for pid=20612 comm="syz.3.3861" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1076.388177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.396377][ T30] audit: type=1400 audit(1764834141.146:1168): avc: denied { open } for pid=20612 comm="syz.3.3861" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1076.419834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.433663][ T30] audit: type=1400 audit(1764834141.186:1169): avc: denied { write } for pid=20612 comm="syz.3.3861" path="socket:[72867]" dev="sockfs" ino=72867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1076.457096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.361019][ T30] audit: type=1400 audit(1764834142.806:1170): avc: denied { getopt } for pid=20637 comm="syz.1.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1078.629021][T20648] netlink: 'syz.4.3868': attribute type 3 has an invalid length. [ 1078.637708][T20648] netlink: 'syz.4.3868': attribute type 3 has an invalid length. [ 1080.107848][T20664] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3873'. [ 1081.863987][T20667] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1081.961822][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1081.961840][ T30] audit: type=1400 audit(1764834153.701:1186): avc: denied { setattr } for pid=20683 comm="syz.3.3879" name="ALG" dev="sockfs" ino=71858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1081.997337][ T30] audit: type=1400 audit(1764834153.741:1187): avc: denied { create } for pid=20684 comm="syz.4.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1082.070643][ T30] audit: type=1400 audit(1764834153.811:1188): avc: denied { create } for pid=20684 comm="syz.4.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1082.238779][ T30] audit: type=1400 audit(1764834153.981:1189): avc: denied { read write } for pid=20683 comm="syz.3.3879" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1082.282554][ T30] audit: type=1400 audit(1764834153.981:1190): avc: denied { open } for pid=20683 comm="syz.3.3879" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1082.400248][ T30] audit: type=1400 audit(1764834154.081:1191): avc: denied { mounton } for pid=20690 comm="syz.0.3881" path="/135/bus" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1082.434573][ T30] audit: type=1400 audit(1764834154.091:1192): avc: denied { unlink } for pid=20690 comm="syz.0.3881" name="#2f" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1082.459548][ T30] audit: type=1400 audit(1764834154.101:1193): avc: denied { mount } for pid=20690 comm="syz.0.3881" name="/" dev="overlay" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1082.899678][ T30] audit: type=1400 audit(1764834154.631:1194): avc: denied { read write } for pid=20699 comm="syz.4.3882" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1083.020998][ T30] audit: type=1400 audit(1764834154.681:1195): avc: denied { open } for pid=20699 comm="syz.4.3882" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1083.085130][T20700] ucma_write: process 716 (syz.4.3882) changed security contexts after opening file descriptor, this is not allowed. [ 1083.120088][T20706] Cannot find del_set index 1 as target [ 1084.408495][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 1084.437682][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 1084.961292][T20743] ip6_vti0 speed is unknown, defaulting to 1000 [ 1085.142072][T19564] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1085.295152][ T5899] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1085.336818][T20746] binder: 20740:20746 unknown command 0 [ 1085.342793][T20746] binder: 20740:20746 ioctl c0306201 200000000080 returned -22 [ 1085.553230][T19564] usb 2-1: device descriptor read/64, error -71 [ 1085.620662][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1085.623815][T20748] binder: 20740:20748 ioctl c0306201 2000000003c0 returned -14 [ 1085.645600][ T5899] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1085.680122][ T5899] usb 4-1: config 0 has no interface number 0 [ 1085.712563][ T5899] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1085.741187][ T5899] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1085.757752][ T5899] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1085.786843][ T5899] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1085.802807][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.812597][ T5899] usb 4-1: Product: syz [ 1085.817245][ T5899] usb 4-1: Manufacturer: syz [ 1085.829736][ T5899] usb 4-1: SerialNumber: syz [ 1085.890578][ T5899] usb 4-1: config 0 descriptor?? [ 1085.890651][T19564] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1085.901606][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1085.907083][T20758] netlink: 'syz.4.3896': attribute type 10 has an invalid length. [ 1085.910753][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1086.410964][T19564] usb 2-1: device descriptor read/64, error -71 [ 1086.521198][T19564] usb usb2-port1: attempt power cycle [ 1086.632277][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1086.639578][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1086.890986][ T5975] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1086.962784][T19564] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1086.993814][T19564] usb 2-1: device descriptor read/8, error -71 [ 1087.043914][T20776] netlink: 'syz.4.3903': attribute type 10 has an invalid length. [ 1087.085792][ T5899] Error reading MAC address [ 1087.098155][ T5975] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1087.109397][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1087.109430][ T30] audit: type=1400 audit(1764834158.841:1218): avc: denied { write } for pid=20735 comm="syz.3.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1087.152517][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1087.160470][ T5975] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1087.173468][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1087.182603][ T5975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1087.200421][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.310929][T19564] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1087.389846][T20766] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1087.401577][T19564] usb 2-1: device descriptor read/8, error -71 [ 1087.403924][ T5975] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1087.534459][T19564] usb usb2-port1: unable to enumerate USB device [ 1087.604505][ T30] audit: type=1400 audit(1764834159.351:1219): avc: denied { bind } for pid=20735 comm="syz.3.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1087.638716][ T5899] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1088.287779][ T5975] usb 3-1: USB disconnect, device number 77 [ 1088.468005][T20788] cgroup: fork rejected by pids controller in /syz2 [ 1089.448661][T19564] usb 4-1: USB disconnect, device number 71 [ 1089.638782][ T30] audit: type=1400 audit(1764834161.381:1220): avc: denied { map } for pid=20900 comm="syz.3.3909" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1089.788264][ T30] audit: type=1400 audit(1764834161.381:1221): avc: denied { read write } for pid=20900 comm="syz.3.3909" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1089.792156][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 1090.044783][T20918] netlink: 'syz.4.3915': attribute type 10 has an invalid length. [ 1090.160946][T19564] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1090.265407][T20917] bridge0: entered promiscuous mode [ 1090.272840][T20916] bridge0: left promiscuous mode [ 1090.305737][ T30] audit: type=1400 audit(1764834162.011:1222): avc: denied { setopt } for pid=20916 comm="syz.4.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1090.431164][T19564] usb 2-1: device descriptor read/64, error -71 [ 1090.469072][ T2904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.691856][T19564] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1090.717815][ T30] audit: type=1400 audit(1764834162.461:1223): avc: denied { read write } for pid=20900 comm="syz.3.3909" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1090.867897][ T30] audit: type=1400 audit(1764834162.461:1224): avc: denied { open } for pid=20900 comm="syz.3.3909" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1090.921811][T19564] usb 2-1: device descriptor read/64, error -71 [ 1091.051451][T19564] usb usb2-port1: attempt power cycle [ 1091.160917][T18055] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1091.322329][ T2904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.466684][ T2904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.519081][T16344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1091.533505][T16344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1091.542714][T16344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1091.545138][T18055] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.563377][T16344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1091.571609][T16344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1091.571886][T20938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1091.600081][T19564] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1091.611448][T18055] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1091.626807][ T30] audit: type=1400 audit(1764834163.371:1225): avc: denied { mounton } for pid=20939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1091.650852][T18055] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.655715][ T2904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.676722][T19564] usb 2-1: device descriptor read/8, error -71 [ 1091.684541][T18055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.711286][T20927] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1091.716368][T20939] ip6_vti0 speed is unknown, defaulting to 1000 [ 1091.724141][T18055] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.940693][ T30] audit: type=1400 audit(1764834163.681:1226): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1091.962819][T19564] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1092.248388][T19564] usb 2-1: device descriptor read/8, error -71 [ 1092.307871][ T30] audit: type=1400 audit(1764834164.041:1227): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.351741][ T30] audit: type=1400 audit(1764834164.041:1228): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.375191][T19564] usb usb2-port1: unable to enumerate USB device [ 1092.392361][ T48] usb 5-1: USB disconnect, device number 71 [ 1092.402074][ T2904] gretap0: left allmulticast mode [ 1092.407817][ T2904] gretap0: left promiscuous mode [ 1092.417138][ T2904] bridge0: port 3(gretap0) entered disabled state [ 1092.424790][ T30] audit: type=1400 audit(1764834164.041:1229): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.460830][ T2904] bridge_slave_1: left allmulticast mode [ 1092.466579][ T2904] bridge_slave_1: left promiscuous mode [ 1092.476793][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.485177][ T30] audit: type=1400 audit(1764834164.041:1230): avc: denied { read } for pid=5489 comm="dhcpcd" name="n137" dev="tmpfs" ino=6902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1092.513677][ T30] audit: type=1400 audit(1764834164.041:1231): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n137" dev="tmpfs" ino=6902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1092.538262][ T2904] bridge_slave_0: left allmulticast mode [ 1092.544429][ T2904] bridge_slave_0: left promiscuous mode [ 1092.550200][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.559016][ T30] audit: type=1400 audit(1764834164.041:1232): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n137" dev="tmpfs" ino=6902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1092.593019][ T30] audit: type=1400 audit(1764834164.221:1233): avc: denied { listen } for pid=20948 comm="syz.0.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1092.654030][ T30] audit: type=1400 audit(1764834164.221:1234): avc: denied { accept } for pid=20948 comm="syz.0.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1092.781263][ T30] audit: type=1400 audit(1764834164.331:1235): avc: denied { read open } for pid=20952 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.873773][ T30] audit: type=1400 audit(1764834164.331:1236): avc: denied { getattr } for pid=20952 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.685675][T16344] Bluetooth: hci1: command tx timeout [ 1093.739965][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.755985][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.770176][ T2904] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1093.779160][ T2904] bond0 (unregistering): (slave team0): Releasing backup interface [ 1093.787696][ T2904] bond0 (unregistering): Released all slaves [ 1093.867707][ T2904] tipc: Disabling bearer [ 1093.884656][ T2904] tipc: Left network mode [ 1094.140983][T20985] netlink: 'syz.1.3928': attribute type 10 has an invalid length. [ 1094.472156][T20994] input: syz0 as /devices/virtual/input/input58 [ 1094.506807][T20455] udevd[20455]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 1094.881095][ T5906] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1095.182645][ T5906] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1095.223328][ T5906] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.245748][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1095.252473][ T5906] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1095.261918][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.291765][ T5906] usb 5-1: config 0 descriptor?? [ 1095.439301][ T2904] hsr_slave_0: left promiscuous mode [ 1095.481820][ T2904] hsr_slave_1: left promiscuous mode [ 1095.502398][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.528164][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.564767][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.585168][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.751085][T16344] Bluetooth: hci1: command tx timeout [ 1095.835282][ T2904] veth1_macvtap: left promiscuous mode [ 1095.924616][T21034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21034 comm=syz.4.3932 [ 1095.941317][T21034] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1096.449725][ T2904] veth0_macvtap: left promiscuous mode [ 1096.525275][ T2904] veth1_vlan: left promiscuous mode [ 1096.567868][ T2904] veth0_vlan: left promiscuous mode [ 1097.666587][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 1097.681301][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1097.703306][ T5906] usb 5-1: USB disconnect, device number 72 [ 1097.831387][T16344] Bluetooth: hci1: command tx timeout [ 1097.992376][T21045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.056018][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1098.056034][ T30] audit: type=1400 audit(1764834169.801:1245): avc: denied { ioctl } for pid=21041 comm="syz.4.3940" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1098.144479][T21045] netlink: 'syz.4.3940': attribute type 10 has an invalid length. [ 1098.182768][ T30] audit: type=1400 audit(1764834169.891:1246): avc: denied { ioctl } for pid=21041 comm="syz.4.3940" path="socket:[73458]" dev="sockfs" ino=73458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1098.233336][ T30] audit: type=1400 audit(1764834169.891:1247): avc: denied { bind } for pid=21041 comm="syz.4.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1098.262797][ T30] audit: type=1400 audit(1764834169.971:1248): avc: denied { create } for pid=21041 comm="syz.4.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1098.285054][ T30] audit: type=1400 audit(1764834169.971:1249): avc: denied { setopt } for pid=21041 comm="syz.4.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1098.420270][ T2904] team0 (unregistering): Port device team_slave_1 removed [ 1098.508932][ T2904] team0 (unregistering): Port device team_slave_0 removed [ 1099.062925][T21041] delete_channel: no stack [ 1099.538657][T21061] netlink: 'syz.1.3944': attribute type 10 has an invalid length. [ 1099.912409][T16344] Bluetooth: hci1: command tx timeout [ 1100.039806][T21028] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1100.105242][T20939] chnl_net:caif_netlink_parms(): no params data found [ 1100.489392][T21068] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3946'. [ 1100.507959][ T30] audit: type=1400 audit(1764834172.231:1250): avc: denied { ioctl } for pid=21070 comm="syz.1.3948" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1100.697072][T20939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.738925][T21082] binder: 21081:21082 unknown command 0 [ 1100.765286][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.775328][T21082] binder: 21081:21082 ioctl c0306201 200000000080 returned -22 [ 1100.813326][T20939] bridge_slave_0: entered allmulticast mode [ 1100.838243][ T30] audit: type=1400 audit(1764834172.581:1251): avc: denied { append } for pid=21084 comm="syz.1.3950" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1100.852565][T20939] bridge_slave_0: entered promiscuous mode [ 1101.137468][ T30] audit: type=1400 audit(1764834172.631:1252): avc: denied { map } for pid=21084 comm="syz.1.3950" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1101.191993][T18055] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1101.292737][T20939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.324603][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.340953][ T30] audit: type=1400 audit(1764834172.631:1253): avc: denied { execute } for pid=21084 comm="syz.1.3950" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1101.393174][T20939] bridge_slave_1: entered allmulticast mode [ 1101.413617][T18055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1101.430539][T20939] bridge_slave_1: entered promiscuous mode [ 1101.436366][T18055] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1101.436414][T18055] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1101.436440][T18055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.476063][T18055] usb 5-1: config 0 descriptor?? [ 1101.496360][T21085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1101.687355][T21101] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1101.883026][T20939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.947599][T20939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.968629][T18055] hkems 0003:2006:0118.002E: unbalanced collection at end of report description [ 1102.008547][T18055] hkems 0003:2006:0118.002E: parse failed [ 1102.023348][T18055] hkems 0003:2006:0118.002E: probe with driver hkems failed with error -22 [ 1102.163199][T20939] team0: Port device team_slave_0 added [ 1102.193444][T20939] team0: Port device team_slave_1 added [ 1102.230689][T21082] binder: 21081:21082 ioctl c0306201 2000000003c0 returned -14 [ 1102.309091][T17096] usb 5-1: USB disconnect, device number 73 [ 1102.322093][T20939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.353151][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.432444][T20939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.461449][T20939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.490523][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.561003][T20939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.882148][T20939] hsr_slave_0: entered promiscuous mode [ 1102.888590][T20939] hsr_slave_1: entered promiscuous mode [ 1102.909906][T20939] debugfs: 'hsr0' already exists in 'hsr' [ 1103.221455][T20939] Cannot create hsr debugfs directory [ 1103.599867][T21129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1104.051031][T21149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3959'. [ 1104.072484][T21149] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 1104.241173][ T5906] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 1104.753061][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.760513][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1104.772247][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.803590][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1104.824247][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1104.855328][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.863222][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1104.891524][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.913565][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1104.925646][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1104.948889][ T5906] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.960093][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1104.971037][ T5906] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.984322][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1104.995978][ T5906] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1105.037867][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 1105.050715][ T5906] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1105.063451][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.075469][ T5906] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1105.093281][T21166] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1106.222844][T20939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1106.256170][T20939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1106.389241][T20939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1106.414676][T20939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1106.851697][T21189] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3963'. [ 1106.922872][T20939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.955571][T20939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.981384][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.988504][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.999977][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1107.029959][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1107.055485][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.062662][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.196860][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 1107.468357][T21211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1107.500286][ T30] audit: type=1400 audit(1764834179.241:1254): avc: denied { connect } for pid=21204 comm="syz.0.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1107.702009][T21209] loop9: detected capacity change from 0 to 7 [ 1107.714151][T21209] Dev loop9: unable to read RDB block 7 [ 1107.719794][ T30] audit: type=1400 audit(1764834179.251:1255): avc: denied { name_connect } for pid=21204 comm="syz.0.3967" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1107.743467][T21209] loop9: AHDI p1 [ 1107.747117][T21209] loop9: partition table partially beyond EOD, truncated [ 1107.801330][ T30] audit: type=1400 audit(1764834179.531:1256): avc: denied { ioctl } for pid=21208 comm="syz.1.3968" path="socket:[73723]" dev="sockfs" ino=73723 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1107.993999][T20939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.504159][T20939] veth0_vlan: entered promiscuous mode [ 1108.543556][T21229] netlink: 'syz.4.3965': attribute type 10 has an invalid length. [ 1108.573385][T21229] netlink: 'syz.4.3965': attribute type 10 has an invalid length. [ 1108.600104][T20939] veth1_vlan: entered promiscuous mode [ 1108.666498][T20939] veth0_macvtap: entered promiscuous mode [ 1108.710129][T21241] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1108.737429][T20939] veth1_macvtap: entered promiscuous mode [ 1108.772778][T20939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.856509][T21241] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1108.865608][ T30] audit: type=1400 audit(1764834180.591:1257): avc: denied { write } for pid=21230 comm="syz.1.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1108.866154][T19564] usb 4-1: USB disconnect, device number 72 [ 1108.920420][T20939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.955520][T14118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.004852][T14118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.052029][T14118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.117594][T14118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.262035][T21256] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1109.319563][T14118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.364699][T14118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.428914][T17285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.440574][T21257] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1109.469654][T17285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.871313][ T30] audit: type=1400 audit(1764834181.271:1258): avc: denied { mounton } for pid=20939 comm="syz-executor" path="/root/syzkaller.HdMIv1/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1109.945321][ T30] audit: type=1400 audit(1764834181.281:1259): avc: denied { mount } for pid=20939 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1110.151213][ T30] audit: type=1400 audit(1764834181.281:1260): avc: denied { mounton } for pid=20939 comm="syz-executor" path="/root/syzkaller.HdMIv1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1110.647601][ T30] audit: type=1400 audit(1764834181.281:1261): avc: denied { mounton } for pid=20939 comm="syz-executor" path="/root/syzkaller.HdMIv1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=75069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1110.676212][ T30] audit: type=1400 audit(1764834181.741:1262): avc: denied { mounton } for pid=20939 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1110.861306][ T30] audit: type=1400 audit(1764834181.741:1263): avc: denied { mount } for pid=20939 comm="syz-executor" name="/" dev="gadgetfs" ino=6965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1111.098643][T21285] netlink: 'syz.2.3978': attribute type 10 has an invalid length. [ 1111.351003][ T5975] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1111.514270][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1111.528800][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1111.556666][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1111.585525][ T5975] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1111.604809][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.613938][ T5975] usb 4-1: Product: syz [ 1111.618444][ T5975] usb 4-1: Manufacturer: syz [ 1111.623533][ T5975] usb 4-1: SerialNumber: syz [ 1111.630432][ T5975] usb 4-1: config 0 descriptor?? [ 1111.637627][T21287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1111.661393][T21287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1111.680443][ T5975] usb 4-1: ucan: probing device on interface #0 [ 1111.977056][ T5975] usb 4-1: ucan: could not read protocol version, ret=-71 [ 1112.045363][ T5975] usb 4-1: ucan: probe failed; try to update the device firmware [ 1112.150973][ T5975] usb 4-1: USB disconnect, device number 73 [ 1113.080933][T19564] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1113.131333][T21353] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1113.310521][T19564] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.325451][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1113.365233][T21359] Cannot find del_set index 1 as target [ 1113.391496][T19564] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.446297][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1113.468006][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1113.499600][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1113.499614][ T30] audit: type=1400 audit(1764834185.241:1273): avc: denied { bind } for pid=21360 comm="syz.3.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1113.499906][T19564] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.534159][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1113.545015][T19564] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.557340][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1113.569750][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1113.583118][T19564] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.590522][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1113.607394][T19564] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.620940][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1113.632722][T19564] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1113.647827][T19564] usb 3-1: string descriptor 0 read error: -22 [ 1113.654280][T19564] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1113.664381][T19564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.680175][T19564] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1113.704505][ T30] audit: type=1400 audit(1764834185.261:1274): avc: denied { setopt } for pid=21360 comm="syz.3.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1114.261092][ T30] audit: type=1400 audit(1764834186.011:1275): avc: denied { ioctl } for pid=21344 comm="syz.2.3994" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1115.354153][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.363802][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.373985][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.798035][ T30] audit: type=1400 audit(1764834187.541:1276): avc: denied { setopt } for pid=21380 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1116.037411][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1116.089874][ T30] audit: type=1400 audit(1764834187.831:1277): avc: denied { connect } for pid=21385 comm="syz.1.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1116.150038][T21395] netlink: 'syz.3.4006': attribute type 10 has an invalid length. [ 1116.376338][T21396] fuse: Bad value for 'fd' [ 1116.382044][ T30] audit: type=1400 audit(1764834188.121:1278): avc: denied { create } for pid=21385 comm="syz.1.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1116.422545][ T30] audit: type=1400 audit(1764834188.121:1279): avc: denied { write } for pid=21385 comm="syz.1.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1116.473299][T19564] usb 3-1: USB disconnect, device number 78 [ 1116.829178][ T30] audit: type=1400 audit(1764834188.561:1280): avc: denied { mount } for pid=21399 comm="syz.4.4009" name="/" dev="autofs" ino=75391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1117.201022][ T6001] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1117.337830][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1117.348936][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1117.369716][ T6001] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 1117.421287][T11712] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1117.433146][ T6001] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1117.472853][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.526663][ T30] audit: type=1400 audit(1764834189.271:1281): avc: denied { unmount } for pid=16341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1117.528872][ T6001] usb 1-1: Product: syz [ 1117.571691][ T6001] usb 1-1: Manufacturer: syz [ 1117.576428][ T6001] usb 1-1: SerialNumber: syz [ 1117.751023][T21418] FAULT_INJECTION: forcing a failure. [ 1117.751023][T21418] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.764084][T21418] CPU: 0 UID: 0 PID: 21418 Comm: syz.1.4014 Not tainted syzkaller #0 PREEMPT(full) [ 1117.764106][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.764115][T21418] Call Trace: [ 1117.764121][T21418] [ 1117.764127][T21418] dump_stack_lvl+0x16c/0x1f0 [ 1117.764150][T21418] should_fail_ex+0x512/0x640 [ 1117.764171][T21418] should_failslab+0xc2/0x120 [ 1117.764193][T21418] kmem_cache_alloc_noprof+0x75/0x720 [ 1117.764217][T21418] ? lock_acquire+0x179/0x330 [ 1117.764238][T21418] ? skb_clone+0x190/0x3f0 [ 1117.764260][T21418] ? skb_clone+0x190/0x3f0 [ 1117.764275][T21418] skb_clone+0x190/0x3f0 [ 1117.764293][T21418] dev_queue_xmit_nit+0x3e7/0xca0 [ 1117.764320][T21418] dev_hard_start_xmit+0x56b/0x6e0 [ 1117.764344][T21418] ? netlink_unicast+0x64c/0x870 [ 1117.764365][T21418] __dev_queue_xmit+0xa46/0x4330 [ 1117.764399][T21418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1117.764448][T21418] ? __skb_clone+0x570/0x760 [ 1117.764479][T21418] netlink_deliver_tap+0xa87/0xd30 [ 1117.764502][T21418] netlink_unicast+0x64c/0x870 [ 1117.764526][T21418] ? __pfx_netlink_unicast+0x10/0x10 [ 1117.764555][T21418] netlink_sendmsg+0x8c8/0xdd0 [ 1117.764579][T21418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.764609][T21418] ____sys_sendmsg+0xa5d/0xc30 [ 1117.764630][T21418] ? copy_msghdr_from_user+0x10a/0x160 [ 1117.764646][T21418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.764665][T21418] ? __lock_acquire+0x433/0x22f0 [ 1117.764697][T21418] ___sys_sendmsg+0x134/0x1d0 [ 1117.764716][T21418] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.764731][T21418] ? __lock_acquire+0x433/0x22f0 [ 1117.764781][T21418] __sys_sendmsg+0x16d/0x220 [ 1117.764799][T21418] ? __pfx___sys_sendmsg+0x10/0x10 [ 1117.764832][T21418] do_syscall_64+0xcd/0xf80 [ 1117.764852][T21418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.764870][T21418] RIP: 0033:0x7f04e238f749 [ 1117.764882][T21418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.764897][T21418] RSP: 002b:00007f04e3174038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.764913][T21418] RAX: ffffffffffffffda RBX: 00007f04e25e6180 RCX: 00007f04e238f749 [ 1117.764924][T21418] RDX: 00000000000480c4 RSI: 0000200000000080 RDI: 0000000000000004 [ 1117.764933][T21418] RBP: 00007f04e3174090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.764942][T21418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.764951][T21418] R13: 00007f04e25e6218 R14: 00007f04e25e6180 R15: 00007ffe67c6db68 [ 1117.764974][T21418] [ 1118.504094][T21420] binder: 21419:21420 unknown command 0 [ 1118.668448][T21420] binder: 21419:21420 ioctl c0306201 200000000080 returned -22 [ 1118.733879][T21420] binder: 21419:21420 ioctl c0306201 2000000003c0 returned -14 [ 1118.842593][T21423] binder_alloc: 21419: binder_alloc_buf, no vma [ 1118.993046][T11712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1119.124702][T11712] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1119.147933][T11712] usb 3-1: can't read configurations, error -71 [ 1119.166789][ T6001] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1119.195702][ T6001] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1119.272102][ T6001] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1119.284984][ T6001] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1119.340368][ T6001] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1119.378728][ T6001] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1120.613271][ T6001] usb 1-1: USB disconnect, device number 91 [ 1120.930544][T21462] binder: 21459:21462 unknown command 0 [ 1120.939233][T21462] binder: 21459:21462 ioctl c0306201 200000000080 returned -22 [ 1120.966478][T21462] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.972597][T21462] binder: 21459:21462 ioctl 4018620d 200000000040 returned -16 [ 1120.981820][T21462] binder: 21459:21462 ioctl c0306201 2000000003c0 returned -14 [ 1122.153270][T21472] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1122.591664][T21476] Cannot find del_set index 1 as target [ 1122.708073][ T30] audit: type=1400 audit(1764834194.451:1282): avc: denied { write } for pid=21478 comm="syz.0.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1123.273689][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1123.292006][T21484] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1123.299240][T21484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.543713][T18055] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1124.778595][T21510] FAULT_INJECTION: forcing a failure. [ 1124.778595][T21510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.792746][T21510] CPU: 0 UID: 0 PID: 21510 Comm: syz.0.4040 Not tainted syzkaller #0 PREEMPT(full) [ 1124.792773][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1124.792783][T21510] Call Trace: [ 1124.792787][T21510] [ 1124.792791][T21510] dump_stack_lvl+0x16c/0x1f0 [ 1124.792807][T21510] should_fail_ex+0x512/0x640 [ 1124.792822][T21510] _copy_to_user+0x32/0xd0 [ 1124.792833][T21510] simple_read_from_buffer+0xcb/0x170 [ 1124.792851][T21510] proc_fail_nth_read+0x197/0x240 [ 1124.792864][T21510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.792875][T21510] ? vfs_read+0x15d/0xcf0 [ 1124.792887][T21510] ? vfs_read+0x16b/0xcf0 [ 1124.792899][T21510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.792909][T21510] vfs_read+0x1e4/0xcf0 [ 1124.792922][T21510] ? __pfx___mutex_lock+0x10/0x10 [ 1124.792936][T21510] ? __pfx_vfs_read+0x10/0x10 [ 1124.792952][T21510] ? __fget_files+0x20e/0x3c0 [ 1124.792971][T21510] ksys_read+0x12a/0x250 [ 1124.792983][T21510] ? __pfx_ksys_read+0x10/0x10 [ 1124.793000][T21510] do_syscall_64+0xcd/0xf80 [ 1124.793013][T21510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.793024][T21510] RIP: 0033:0x7fb73758e15c [ 1124.793033][T21510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1124.793043][T21510] RSP: 002b:00007fb7357f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1124.793054][T21510] RAX: ffffffffffffffda RBX: 00007fb7377e6090 RCX: 00007fb73758e15c [ 1124.793061][T21510] RDX: 000000000000000f RSI: 00007fb7357f60a0 RDI: 000000000000000a [ 1124.793068][T21510] RBP: 00007fb7357f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.793074][T21510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.793080][T21510] R13: 00007fb7377e6128 R14: 00007fb7377e6090 R15: 00007ffdea1d93a8 [ 1124.793094][T21510] [ 1125.161182][T18055] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1125.170596][T18055] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1125.179027][T18055] usb 2-1: can't read configurations, error -71 [ 1125.326146][T21518] syzkaller0: entered promiscuous mode [ 1125.392265][ T30] audit: type=1400 audit(1764834197.141:1283): avc: denied { write } for pid=21517 comm="syz.0.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1125.418763][T21518] syzkaller0: entered allmulticast mode [ 1126.781998][T21533] macvlan2: entered allmulticast mode [ 1128.406615][T21556] netlink: 'syz.1.4052': attribute type 10 has an invalid length. [ 1128.714502][ T30] audit: type=1400 audit(1764834200.461:1284): avc: denied { create } for pid=21560 comm="syz.0.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1128.739269][T21562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.791576][T21562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.846824][ T30] audit: type=1400 audit(1764834200.491:1285): avc: denied { listen } for pid=21560 comm="syz.0.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1128.927888][ T30] audit: type=1400 audit(1764834200.491:1286): avc: denied { ioctl } for pid=21560 comm="syz.0.4053" path="socket:[74474]" dev="sockfs" ino=74474 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1129.083043][T11712] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1129.866889][T21577] input: syz0 as /devices/virtual/input/input59 [ 1130.201040][T11712] usb 1-1: device descriptor read/64, error -71 [ 1130.441076][T11712] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1132.004010][T21602] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4065'. [ 1132.241192][T11712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1132.271323][T11712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1132.291063][T11712] usb 1-1: can't read configurations, error -71 [ 1132.300543][T11712] usb usb1-port1: attempt power cycle [ 1132.391372][T19564] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1132.555612][T19564] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1132.942587][T19564] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.967424][T19564] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1132.993058][T19564] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1133.004732][T19564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.027224][T19564] usb 2-1: config 0 descriptor?? [ 1133.057828][ T30] audit: type=1400 audit(1764834204.801:1287): avc: denied { bind } for pid=21609 comm="syz.0.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1133.324014][ T5928] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1133.332081][ T6000] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1133.586803][ T5928] usb 4-1: device descriptor read/64, error -71 [ 1133.663963][ T6000] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1133.728786][ T6000] usb 5-1: config 0 has no interface number 0 [ 1133.752360][ T6000] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=59.e2 [ 1133.772783][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.839672][T21627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21627 comm=syz.1.4066 [ 1133.860604][T21627] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1133.871605][ T5928] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1134.201861][ T6000] usb 5-1: Product: syz [ 1134.215688][ T6000] usb 5-1: Manufacturer: syz [ 1134.221239][ T6000] usb 5-1: SerialNumber: syz [ 1134.231867][ T6000] usb 5-1: config 0 descriptor?? [ 1134.245508][ T6000] ftdi_sio 5-1:0.205: FTDI USB Serial Device converter detected [ 1134.258892][ T6000] ftdi_sio ttyUSB0: unknown device type: 0x59e2 [ 1134.312610][ T5928] usb 4-1: device descriptor read/64, error -71 [ 1134.494231][ T5928] usb usb4-port1: attempt power cycle [ 1134.495565][ T5899] usb 5-1: USB disconnect, device number 74 [ 1134.653745][ T5899] ftdi_sio 5-1:0.205: device disconnected [ 1134.892300][T21639] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1134.914626][T21639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1135.092543][ T10] IPVS: starting estimator thread 0... [ 1135.152031][ T5928] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1135.214480][T21640] IPVS: using max 76 ests per chain, 182400 per kthread [ 1135.222370][T19564] usbhid 2-1:0.0: can't add hid device: -71 [ 1135.232195][T19564] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1135.257030][T19564] usb 2-1: USB disconnect, device number 69 [ 1135.302799][ T30] audit: type=1400 audit(1764834207.051:1288): avc: denied { write } for pid=21641 comm="syz.2.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1135.657063][ T5928] usb 4-1: device descriptor read/8, error -71 [ 1135.981467][T19564] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1136.123654][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1136.679438][T19564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1136.696707][T19564] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1136.708108][T19564] usb 5-1: can't read configurations, error -71 [ 1136.731312][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 1136.764942][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 1136.964906][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1138.593061][T21692] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4093'. [ 1138.949947][T21699] binder: 21697:21699 unknown command 0 [ 1138.962873][T21699] binder: 21697:21699 ioctl c0306201 200000000080 returned -22 [ 1138.972795][T21699] binder: 21697:21699 ioctl c0306201 2000000003c0 returned -14 [ 1140.211841][ T5928] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1140.672046][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 1140.681679][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.693370][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.704207][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1140.722172][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1140.731847][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.745081][ T5928] usb 4-1: config 0 descriptor?? [ 1140.873461][ T30] audit: type=1400 audit(1764834212.621:1289): avc: denied { ioctl } for pid=21724 comm="syz.1.4103" path="socket:[76099]" dev="sockfs" ino=76099 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1141.032614][T21731] binder: 21727:21731 unknown command 0 [ 1141.038470][T21731] binder: 21727:21731 ioctl c0306201 200000000080 returned -22 [ 1141.073194][T21731] binder: BINDER_SET_CONTEXT_MGR already set [ 1141.079314][T21731] binder: 21727:21731 ioctl 4018620d 200000000040 returned -16 [ 1141.100213][T21731] binder: 21727:21731 ioctl c0306201 2000000003c0 returned -14 [ 1141.247581][ T30] audit: type=1400 audit(1764834212.641:1290): avc: denied { ioctl } for pid=21724 comm="syz.1.4103" path="socket:[76108]" dev="sockfs" ino=76108 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1141.248630][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 1141.319988][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1141.375568][ T5928] usb 4-1: USB disconnect, device number 78 [ 1141.413261][T21742] netlink: 'syz.1.4103': attribute type 10 has an invalid length. [ 1141.543316][ T48] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1141.695746][T21724] delete_channel: no stack [ 1141.721266][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1141.743161][ T48] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 1141.773335][ T48] usb 5-1: config 4 has no interface number 0 [ 1141.780614][ T48] usb 5-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 1141.791801][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.887902][T21751] openvswitch: netlink: Message has 4 unknown bytes. [ 1142.208050][T21754] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1142.991745][ T48] usb 5-1: string descriptor 0 read error: -71 [ 1143.009400][ T48] keyspan 5-1:4.196: Keyspan - (without firmware) converter detected [ 1143.040098][ T48] usb 5-1: USB disconnect, device number 77 [ 1143.065005][ T48] keyspan 5-1:4.196: device disconnected [ 1143.515404][T21782] netlink: 'syz.2.4118': attribute type 10 has an invalid length. [ 1143.589352][ T30] audit: type=1400 audit(1764834215.331:1291): avc: denied { bind } for pid=21788 comm="syz.2.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1143.624849][ T30] audit: type=1400 audit(1764834215.331:1292): avc: denied { name_bind } for pid=21788 comm="syz.2.4120" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1143.651396][ T30] audit: type=1400 audit(1764834215.331:1293): avc: denied { node_bind } for pid=21788 comm="syz.2.4120" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1143.916000][ T30] audit: type=1400 audit(1764834215.651:1294): avc: denied { bind } for pid=21790 comm="syz.3.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1144.771028][ T30] audit: type=1400 audit(1764834215.901:1295): avc: denied { write } for pid=21790 comm="syz.3.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.195517][T21802] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1145.315821][T21812] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1145.591438][T17096] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1146.200943][T17096] usb 1-1: Using ep0 maxpacket: 32 [ 1146.222952][T17096] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 1146.261659][T17096] usb 1-1: config 0 has no interface number 1 [ 1146.303873][T17096] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1146.325163][T17096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.487167][T17096] usb 1-1: Product: syz [ 1146.521088][T17096] usb 1-1: Manufacturer: syz [ 1146.534784][T17096] usb 1-1: SerialNumber: syz [ 1146.550056][T17096] usb 1-1: config 0 descriptor?? [ 1146.569448][ T30] audit: type=1400 audit(1764834218.311:1296): avc: denied { name_connect } for pid=21826 comm="syz.1.4131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1147.104345][T17096] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 1147.132594][T17096] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1147.185644][T17096] usb 1-1: USB disconnect, device number 95 [ 1147.584601][T21844] netlink: 'syz.4.4134': attribute type 10 has an invalid length. [ 1147.654079][ T30] audit: type=1400 audit(1764834219.401:1297): avc: denied { setopt } for pid=21842 comm="syz.3.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1147.663360][T21844] bond0: (slave team0): Releasing backup interface [ 1147.841247][ T30] audit: type=1400 audit(1764834219.581:1298): avc: denied { block_suspend } for pid=21826 comm="syz.1.4131" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1147.913138][T21853] input: syz0 as /devices/virtual/input/input60 [ 1149.181276][ T30] audit: type=1400 audit(1764834220.911:1299): avc: denied { setopt } for pid=21874 comm="syz.1.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1149.972962][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1150.027695][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1150.251076][ T6001] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1150.253159][T21901] Cannot find del_set index 1 as target [ 1150.452750][ T6001] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1150.582390][ T6001] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1150.598598][T21907] netlink: 'syz.4.4152': attribute type 1 has an invalid length. [ 1150.631004][ T6001] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1150.653766][ T30] audit: type=1400 audit(1764834222.401:1300): avc: denied { map } for pid=21905 comm="syz.4.4152" path="socket:[77112]" dev="sockfs" ino=77112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1150.679578][ T6001] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1150.692790][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.711014][ T6001] usb 2-1: Product: syz [ 1150.721065][ T6001] usb 2-1: Manufacturer: syz [ 1150.728104][ T6001] usb 2-1: SerialNumber: syz [ 1150.750911][ T30] audit: type=1400 audit(1764834222.401:1301): avc: denied { read accept } for pid=21905 comm="syz.4.4152" path="socket:[77112]" dev="sockfs" ino=77112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1150.777123][ T6001] usb 2-1: config 0 descriptor?? [ 1150.797210][T21896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1150.805580][T21896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1150.810929][ T5928] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1150.814379][ T6001] usb 2-1: ucan: probing device on interface #0 [ 1150.951743][ T5928] usb 4-1: device descriptor read/64, error -71 [ 1151.583943][T21916] bridge0: entered promiscuous mode [ 1151.631255][ T5928] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1151.885540][ T6001] ucan 2-1:0.0 can0: registered device [ 1151.919449][T21914] bridge0: left promiscuous mode [ 1152.012169][ T6001] ucan 2-1:0.0 can0: firmware string: #Gn [ 1152.020915][ T5928] usb 4-1: device descriptor read/64, error -71 [ 1152.151852][ T5928] usb usb4-port1: attempt power cycle [ 1152.219898][ T6001] usb 2-1: USB disconnect, device number 70 [ 1152.356790][ T30] audit: type=1400 audit(1764834224.101:1302): avc: denied { setopt } for pid=21921 comm="syz.0.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1152.541728][ T5928] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1152.606409][ T5928] usb 4-1: device descriptor read/8, error -71 [ 1152.879205][ T5928] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1152.922201][ T5928] usb 4-1: device descriptor read/8, error -71 [ 1153.047048][ T5928] usb usb4-port1: unable to enumerate USB device [ 1153.058246][ T30] audit: type=1400 audit(1764834224.801:1303): avc: denied { append } for pid=21946 comm="syz.2.4162" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1153.624388][T21958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.637283][T21958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.530822][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1259.537804][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21957/1:b..l P3003/1:b..l [ 1259.547362][ C1] rcu: (detected by 1, t=10502 jiffies, g=97149, q=1369 ncpus=2) [ 1259.555157][ C1] task:kworker/u8:12 state:R running task stack:23432 pid:3003 tgid:3003 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1259.569360][ C1] Workqueue: iou_exit io_ring_exit_work [ 1259.574894][ C1] Call Trace: [ 1259.578149][ C1] [ 1259.581059][ C1] ? __schedule+0x10b9/0x6150 [ 1259.585739][ C1] __schedule+0x1139/0x6150 [ 1259.590219][ C1] ? find_held_lock+0x2b/0x80 [ 1259.594871][ C1] ? __pfx___schedule+0x10/0x10 [ 1259.599692][ C1] ? mark_held_locks+0x49/0x80 [ 1259.604431][ C1] preempt_schedule_irq+0x51/0x90 [ 1259.609424][ C1] irqentry_exit+0x1d8/0x8c0 [ 1259.613986][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1259.619936][ C1] RIP: 0010:lock_acquire+0x4e/0x330 [ 1259.625108][ C1] Code: 48 8b 05 ed f7 0e 12 48 89 44 24 30 31 c0 66 90 65 8b 05 09 f8 0e 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 92 7b ec 0e <0f> 82 74 02 00 00 8b 35 0a ac ec 0e 85 f6 0f 85 8d 00 00 00 48 8b [ 1259.644684][ C1] RSP: 0018:ffffc9000bf97490 EFLAGS: 00000297 [ 1259.650720][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c95a0 RCX: 0000000000000002 [ 1259.658661][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c95a0 [ 1259.666604][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1259.674544][ C1] R10: ffff888030c42ff0 R11: 0000000000006c47 R12: 0000000000000000 [ 1259.682485][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.690440][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1259.695616][ C1] unwind_next_frame+0xd1/0x20a0 [ 1259.700526][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1259.705609][ C1] ? arch_stack_walk+0x73/0x100 [ 1259.710446][ C1] __unwind_start+0x45f/0x7f0 [ 1259.715104][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1259.721230][ C1] arch_stack_walk+0x73/0x100 [ 1259.725881][ C1] ? arch_stack_walk+0x73/0x100 [ 1259.730713][ C1] stack_trace_save+0x8e/0xc0 [ 1259.735359][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1259.740704][ C1] ? __lock_acquire+0x433/0x22f0 [ 1259.745621][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1259.751662][ C1] kasan_save_stack+0x33/0x60 [ 1259.756329][ C1] kasan_save_track+0x14/0x30 [ 1259.760973][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1259.765541][ C1] kmem_cache_free+0x148/0x7d0 [ 1259.770272][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1259.775620][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1259.780967][ C1] __io_req_caches_free+0x19e/0x5c0 [ 1259.786159][ C1] io_ring_exit_work+0x387/0x10e0 [ 1259.791158][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1259.796585][ C1] ? __lock_acquire+0x433/0x22f0 [ 1259.801494][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1259.807280][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1259.812888][ C1] ? rcu_is_watching+0x12/0xc0 [ 1259.817623][ C1] process_one_work+0x9ba/0x1b20 [ 1259.822538][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1259.827899][ C1] ? assign_work+0x1a0/0x250 [ 1259.832478][ C1] worker_thread+0x6c8/0xf10 [ 1259.837057][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1259.842147][ C1] kthread+0x3c5/0x780 [ 1259.846195][ C1] ? __pfx_kthread+0x10/0x10 [ 1259.850761][ C1] ? rcu_is_watching+0x12/0xc0 [ 1259.855497][ C1] ? __pfx_kthread+0x10/0x10 [ 1259.860063][ C1] ret_from_fork+0x983/0xb10 [ 1259.864623][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.869705][ C1] ? __switch_to+0x7af/0x10d0 [ 1259.874353][ C1] ? __pfx_kthread+0x10/0x10 [ 1259.878916][ C1] ret_from_fork_asm+0x1a/0x30 [ 1259.883662][ C1] [ 1259.886655][ C1] task:dhcpcd-run-hook state:R running task stack:27544 pid:21957 tgid:21957 ppid:21927 task_flags:0x400040 flags:0x00080000 [ 1259.900094][ C1] Call Trace: [ 1259.903349][ C1] [ 1259.906253][ C1] ? __schedule+0x10b9/0x6150 [ 1259.910900][ C1] __schedule+0x1139/0x6150 [ 1259.915379][ C1] ? kernel_text_address+0x8d/0x100 [ 1259.920563][ C1] ? __pfx___schedule+0x10/0x10 [ 1259.925399][ C1] ? mark_held_locks+0x49/0x80 [ 1259.930136][ C1] preempt_schedule_irq+0x51/0x90 [ 1259.935129][ C1] irqentry_exit+0x1d8/0x8c0 [ 1259.939691][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1259.945641][ C1] RIP: 0010:stack_access_ok+0x161/0x200 [ 1259.951162][ C1] Code: 03 80 3c 02 00 0f 85 95 00 00 00 48 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 <48> 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 [ 1259.970838][ C1] RSP: 0018:ffffc90010d7f308 EFLAGS: 00000202 [ 1259.976891][ C1] RAX: 0000000000000001 RBX: ffffc90010d7f3b8 RCX: ffffc90010d80000 [ 1259.984850][ C1] RDX: ffffc90010d7fb01 RSI: ffffc90010d7fb60 RDI: ffffc90010d7f3b8 [ 1259.992797][ C1] RBP: ffffc90010d7fb60 R08: 0000000000000001 R09: 0000000079bf4ce3 [ 1260.000754][ C1] R10: ffff88802df954b0 R11: 0000000000007a8c R12: 0000000000000008 [ 1260.008701][ C1] R13: ffffc90010d7f3c8 R14: ffffc90010d7f3c0 R15: ffffc90010d78000 [ 1260.016654][ C1] unwind_next_frame+0x15c5/0x20a0 [ 1260.021746][ C1] ? mmput+0x62/0x70 [ 1260.025615][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1260.031223][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1260.037364][ C1] arch_stack_walk+0x94/0x100 [ 1260.042017][ C1] ? begin_new_exec+0x1280/0x3730 [ 1260.047017][ C1] stack_trace_save+0x8e/0xc0 [ 1260.051672][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1260.057028][ C1] ? kasan_save_stack+0x42/0x60 [ 1260.061849][ C1] ? kasan_save_stack+0x33/0x60 [ 1260.066667][ C1] kasan_save_stack+0x33/0x60 [ 1260.071324][ C1] ? kasan_save_stack+0x33/0x60 [ 1260.076145][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1260.081494][ C1] ? kmem_cache_free+0x15f/0x7d0 [ 1260.086410][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1260.091230][ C1] ? unlink_anon_vmas+0x58a/0x820 [ 1260.096231][ C1] ? free_pgtables+0x212/0xc00 [ 1260.100965][ C1] ? exit_mmap+0x3f4/0xb60 [ 1260.105350][ C1] ? __mmput+0x12a/0x410 [ 1260.109566][ C1] ? mmput+0x62/0x70 [ 1260.113449][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1260.118623][ C1] kmem_cache_free+0x15f/0x7d0 [ 1260.123355][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1260.128181][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1260.133003][ C1] __put_anon_vma+0x114/0x3a0 [ 1260.137656][ C1] unlink_anon_vmas+0x58a/0x820 [ 1260.142480][ C1] free_pgtables+0x212/0xc00 [ 1260.147054][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1260.152137][ C1] ? __pfx_down_write+0x10/0x10 [ 1260.156962][ C1] exit_mmap+0x3f4/0xb60 [ 1260.161178][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1260.165922][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1260.171442][ C1] __mmput+0x12a/0x410 [ 1260.175487][ C1] mmput+0x62/0x70 [ 1260.179182][ C1] begin_new_exec+0x1280/0x3730 [ 1260.184010][ C1] load_elf_binary+0x8e7/0x4fe0 [ 1260.188835][ C1] ? __lock_acquire+0x433/0x22f0 [ 1260.193755][ C1] ? find_held_lock+0x2b/0x80 [ 1260.198403][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 1260.203660][ C1] ? find_held_lock+0x2b/0x80 [ 1260.208305][ C1] ? bprm_execve+0x8a1/0x1620 [ 1260.212954][ C1] bprm_execve+0x8c2/0x1620 [ 1260.217429][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 1260.222334][ C1] ? copy_strings.isra.0+0x40d/0x4c0 [ 1260.227593][ C1] do_execveat_common.isra.0+0x4a5/0x610 [ 1260.233199][ C1] __x64_sys_execve+0x8e/0xb0 [ 1260.237858][ C1] do_syscall_64+0xcd/0xf80 [ 1260.242332][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.248193][ C1] RIP: 0033:0x7f7fe2cd9107 [ 1260.252585][ C1] RSP: 002b:00007ffdc60449f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1260.260963][ C1] RAX: ffffffffffffffda RBX: 000055bc77608e88 RCX: 00007f7fe2cd9107 [ 1260.268903][ C1] RDX: 000055bc77608ea8 RSI: 000055bc77608e88 RDI: 000055bc77608f30 [ 1260.276842][ C1] RBP: 000055bc77608f30 R08: 00007ffdc6047eac R09: 0000000000000000 [ 1260.284790][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055bc77608ea8 [ 1260.292741][ C1] R13: 00007f7fe2e9ee8b R14: 000055bc77608ea8 R15: 0000000000000000 [ 1260.300710][ C1] [ 1260.303709][ C1] rcu: rcu_preempt kthread starved for 10575 jiffies! g97149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1260.314871][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1260.324811][ C1] rcu: RCU grace-period kthread stack dump: [ 1260.330668][ C1] task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1260.344119][ C1] Call Trace: [ 1260.347374][ C1] [ 1260.350279][ C1] ? __schedule+0x10b9/0x6150 [ 1260.354927][ C1] __schedule+0x1139/0x6150 [ 1260.359409][ C1] ? __pfx___schedule+0x10/0x10 [ 1260.364228][ C1] ? find_held_lock+0x2b/0x80 [ 1260.368878][ C1] ? schedule+0x2d7/0x3a0 [ 1260.373175][ C1] schedule+0xe7/0x3a0 [ 1260.377213][ C1] schedule_timeout+0x123/0x290 [ 1260.382040][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1260.387385][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1260.392642][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1260.398418][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1260.403851][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1260.408591][ C1] ? rcu_gp_init+0xc2e/0x15e0 [ 1260.413250][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1260.418526][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.423707][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1260.428624][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1260.433452][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1260.439235][ C1] rcu_gp_kthread+0x26d/0x380 [ 1260.443887][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1260.449056][ C1] ? rcu_is_watching+0x12/0xc0 [ 1260.453789][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.458957][ C1] ? __kthread_parkme+0x19e/0x250 [ 1260.463963][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1260.469153][ C1] kthread+0x3c5/0x780 [ 1260.473213][ C1] ? __pfx_kthread+0x10/0x10 [ 1260.477784][ C1] ? rcu_is_watching+0x12/0xc0 [ 1260.482518][ C1] ? __pfx_kthread+0x10/0x10 [ 1260.487079][ C1] ret_from_fork+0x983/0xb10 [ 1260.491638][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.496719][ C1] ? __switch_to+0x7af/0x10d0 [ 1260.501364][ C1] ? __pfx_kthread+0x10/0x10 [ 1260.505928][ C1] ret_from_fork_asm+0x1a/0x30 [ 1260.510675][ C1] [ 1260.513665][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1260.519956][ C1] CPU: 1 UID: 0 PID: 21947 Comm: syz.2.4162 Not tainted syzkaller #0 PREEMPT(full) [ 1260.529288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1260.539311][ C1] RIP: 0010:vcpu_run+0x3052/0x56d0 [ 1260.544395][ C1] Code: b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 a0 25 00 00 41 c6 86 32 0c 00 00 01 e8 66 46 84 00 fb 48 8b 95 c0 fe ff ff <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 62 25 [ 1260.563972][ C1] RSP: 0018:ffffc90010d6faa0 EFLAGS: 00000202 [ 1260.570006][ C1] RAX: 00000000023b0461 RBX: ffff888044638c32 RCX: 0000000000000006 [ 1260.577942][ C1] RDX: ffff888044639d08 RSI: ffffffff8daa2b8e RDI: ffffffff8bf1cd00 [ 1260.585881][ C1] RBP: ffffc90010d6fc10 R08: 0000000000000001 R09: 0000000000000001 [ 1260.593830][ C1] R10: ffffffff9085c3d7 R11: 0000000000000000 R12: dffffc0000000000 [ 1260.601769][ C1] R13: 0001000000000000 R14: ffff888044638000 R15: ffff888044638038 [ 1260.609708][ C1] FS: 00007f8b4a8db6c0(0000) GS:ffff888124a9c000(0000) knlGS:0000000000000000 [ 1260.618607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1260.625158][ C1] CR2: 0000000000000000 CR3: 000000005ee17000 CR4: 00000000003526f0 [ 1260.633099][ C1] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000000 [ 1260.641040][ C1] DR3: 0000000000000f5e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1260.648990][ C1] Call Trace: [ 1260.652243][ C1] [ 1260.655152][ C1] ? __pfx_vcpu_run+0x10/0x10 [ 1260.659802][ C1] ? rcu_is_watching+0x12/0xc0 [ 1260.664538][ C1] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1260.670229][ C1] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1260.675749][ C1] kvm_vcpu_ioctl+0x5eb/0x1660 [ 1260.680485][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1260.685654][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1260.691517][ C1] ? do_vfs_ioctl+0x128/0x14f0 [ 1260.696253][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1260.701247][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1260.708070][ C1] ? hook_file_ioctl_common+0x144/0x410 [ 1260.713589][ C1] ? selinux_file_ioctl+0x180/0x270 [ 1260.718770][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 1260.723853][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1260.729023][ C1] __x64_sys_ioctl+0x18e/0x210 [ 1260.733758][ C1] do_syscall_64+0xcd/0xf80 [ 1260.738234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.744096][ C1] RIP: 0033:0x7f8b4998f749 [ 1260.748479][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.768060][ C1] RSP: 002b:00007f8b4a8db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1260.776438][ C1] RAX: ffffffffffffffda RBX: 00007f8b49be5fa0 RCX: 00007f8b4998f749 [ 1260.784378][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1260.792330][ C1] RBP: 00007f8b49a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1260.800268][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.808206][ C1] R13: 00007f8b49be6038 R14: 00007f8b49be5fa0 R15: 00007ffde334c728 [ 1260.816152][ C1]