last executing test programs: 4m36.051707825s ago: executing program 4 (id=429): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000fc0)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f0000001140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[{0x0, 0x2, 0xd, 0x2}], 0x10, 0x1f}, 0x94) 4m32.543324764s ago: executing program 4 (id=446): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103800) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x189482) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_usb_connect(0x3, 0x55, &(0x7f00000026c0)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000005240601010705810308000a09040100020a"], 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002600)={0x50, 0x0, r5, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) write$FUSE_WRITE(r3, &(0x7f0000002680)={0x18, 0x0, r5, {0x5}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x90, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0xc9e, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}, @NL80211_ATTR_BEACON_TAIL={0xb, 0xf, [@challenge={0x10, 0x1, 0xb7}, @supported_rates={0x1, 0x2, [{0x1b, 0x1}, {0x36}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x39db77225c63fa4c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xffffffffffffff9c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1bd4, 0x71a07}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4m30.32617979s ago: executing program 4 (id=451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYBLOB="010026bd7000040000003900000008000300", @ANYRES32=r3, @ANYBLOB="10005a800c000080050002daef00000024b9d594f316e110aeb3bcaf415a70c5eaeb1719ea232f6ec9032f90754f13245bbe197cf7bc77003d86b30487214d57684f38ff411fa3de2f1d1baf9108e41b57d0f9599a4d8cd8abc65b380b234e3dd686e92641665d71f26870781df8a383d953624a4f01a5232d0afedd3aa4c0b5751996b57f6774a774e488b2f760ee15c6e1b8e3a619dd21884a919f444561c9da868c851c0f3c88945eabc34cb31a16ce"], 0x2c}, 0x1, 0x0, 0x0, 0x26004051}, 0x24000) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x7c}}, 0x8004000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000540)={0xffffffff, 0x2, 0x1, 0x80000000}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x128}, 0x2400c005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) (async) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x40) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0xc2) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x8, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000800)=0x7) (async) mmap(&(0x7f0000425000/0x8000)=nil, 0x8000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x57970000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r10, 0x0, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 4m28.990190574s ago: executing program 4 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000700000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m27.923759001s ago: executing program 4 (id=461): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) syz_emit_ethernet(0x1de, &(0x7f0000019480)={@broadcast, @random="2a0988f8bd86", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], "223431d5c9a46b9f85ba48070a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d2"}}}}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000200)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="80", 0x1}], 0x1, &(0x7f0000000300)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000180)={"f238ea1d", 0xd, 0x38, 0x7, 0x8000, 0x5, "e5200f9060ef780cd8dc6808fecbb6", "6e02c8b7", "dc46cb57", "e290732c", ["68d1c21fa245f1c7c34851db", "7d1e4b55b3d8b3156cfb834d", "858b4b0502857fea338ef500", "a9b53cf862046f4fb129b2b0"]}) socket$inet_udp(0x2, 0x2, 0x0) acct(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00') 4m26.480717761s ago: executing program 4 (id=465): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00008e4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000016}) mmap$panthor(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r1, 0x0) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='Ri\x00'/18, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xc0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x4a102) fcntl$getownex(r3, 0x10, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r4, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="4d862f68dcf8b9fc4d4c3c21e7a07d4f7fd5a54e3fc9f9ffffffe66ecda91881fe1eb7dec777a94c3ae5acbb14fc33a982600e6bbc9990ab5e8666a1d09a35ccc8821b506ecf9e0b2562af65a35d86bb6c3d5cbe47e426028de1ef8742daea3e6ca76bae3e", 0x65}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', 0xd5) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='.\x00', &(0x7f00000004c0)='virtiofs\x00', 0x2200892, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f0000002980)="d7af3b2b37b6d18ba99a77f69e2348a3b371b38493b5bafcccf15c7b9873a61e626e7b44d5641fdf635afc9903290627efbdb26955df2f88e1b38f18fbb6aa29147ec836d5cc0f4cd874e3db6cdcef1f9178334f240126388a6b50fdf361c04a93c465e05ce5e1dd297ced597f946323c8c50794e8524b45c6c98e67ad8021bf49b381fde7ae5b7203a05101aeb37bbb490895f13c5878d2cc0a72a1cf6c2bbdd87e23c6b9fb121c862afc431c0302df56ed1a078fb1527d5b2699e0812e5bdad39ed048d2010ed3830704303985", 0xce) syz_open_dev$vim2m(&(0x7f0000000540), 0x2000000f5, 0x2) r5 = syz_open_procfs(r4, &(0x7f0000000200)='oom_score_adj\x00') read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000027c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002800)={'sit0\x00', &(0x7f0000002840)=@ethtool_eee={0x44, 0x7, 0x4, 0x4, 0x9, 0x1, 0x7ff, 0x4, [0xc307, 0x101]}}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, 0x0, 0x4880) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000002880)={0x1, @sliced={0x4, [0xa8, 0x0, 0x5, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x401, 0x817e, 0x4, 0x68d, 0xd1d, 0x9, 0x1ff, 0x8, 0x7, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8fa7, 0x6, 0x5, 0x3, 0xed3d, 0xa, 0x5, 0x4, 0xff, 0x15, 0x9, 0xf, 0x7, 0x0, 0x8, 0x2dc2, 0x0, 0x4, 0xa6, 0xb4, 0x1ff, 0x40], 0xc}}) socket$inet_udp(0x2, 0x2, 0x0) 4m9.395304823s ago: executing program 32 (id=465): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00008e4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000016}) mmap$panthor(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r1, 0x0) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='Ri\x00'/18, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xc0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x4a102) fcntl$getownex(r3, 0x10, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r4, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="4d862f68dcf8b9fc4d4c3c21e7a07d4f7fd5a54e3fc9f9ffffffe66ecda91881fe1eb7dec777a94c3ae5acbb14fc33a982600e6bbc9990ab5e8666a1d09a35ccc8821b506ecf9e0b2562af65a35d86bb6c3d5cbe47e426028de1ef8742daea3e6ca76bae3e", 0x65}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', 0xd5) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='.\x00', &(0x7f00000004c0)='virtiofs\x00', 0x2200892, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f0000002980)="d7af3b2b37b6d18ba99a77f69e2348a3b371b38493b5bafcccf15c7b9873a61e626e7b44d5641fdf635afc9903290627efbdb26955df2f88e1b38f18fbb6aa29147ec836d5cc0f4cd874e3db6cdcef1f9178334f240126388a6b50fdf361c04a93c465e05ce5e1dd297ced597f946323c8c50794e8524b45c6c98e67ad8021bf49b381fde7ae5b7203a05101aeb37bbb490895f13c5878d2cc0a72a1cf6c2bbdd87e23c6b9fb121c862afc431c0302df56ed1a078fb1527d5b2699e0812e5bdad39ed048d2010ed3830704303985", 0xce) syz_open_dev$vim2m(&(0x7f0000000540), 0x2000000f5, 0x2) r5 = syz_open_procfs(r4, &(0x7f0000000200)='oom_score_adj\x00') read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000027c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002800)={'sit0\x00', &(0x7f0000002840)=@ethtool_eee={0x44, 0x7, 0x4, 0x4, 0x9, 0x1, 0x7ff, 0x4, [0xc307, 0x101]}}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, 0x0, 0x4880) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000002880)={0x1, @sliced={0x4, [0xa8, 0x0, 0x5, 0x9, 0x6e45, 0x4, 0x4, 0x3, 0xf800, 0x8000, 0xfe01, 0x401, 0x817e, 0x4, 0x68d, 0xd1d, 0x9, 0x1ff, 0x8, 0x7, 0x0, 0x2454, 0x2d64, 0x81, 0x3, 0xfff7, 0x8fa7, 0x6, 0x5, 0x3, 0xed3d, 0xa, 0x5, 0x4, 0xff, 0x15, 0x9, 0xf, 0x7, 0x0, 0x8, 0x2dc2, 0x0, 0x4, 0xa6, 0xb4, 0x1ff, 0x40], 0xc}}) socket$inet_udp(0x2, 0x2, 0x0) 1m36.262264734s ago: executing program 3 (id=1007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000900)={@fd={0x70742a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0xa, 0x0, 0x1}, @fda={0x66646185, 0xc, 0x1, 0x3e}}, &(0x7f0000000a80)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) 1m35.970990875s ago: executing program 3 (id=1009): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200001100000000000000fdffffff03000600000000000200070e0a0101020000000000000002020001000000000000556b0c00000000030005000000000002004e216401010100000000000000e7070019"], 0x88}, 0x1, 0x7}, 0x0) 1m35.134261352s ago: executing program 3 (id=1011): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009", @ANYRES64], 0x0) 1m31.833499777s ago: executing program 3 (id=1026): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000618000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008"], 0x0, 0x52}, 0x28) 1m31.675388618s ago: executing program 3 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x5, 0x2, 0x0, 0x2000, &(0x7f000048e000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2a0802, 0x2) accept$inet6(r4, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r7, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000019440)=0x80000000000003) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f00000194c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000019500)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 1m30.58688639s ago: executing program 3 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c000000060019f409000000050006000900000006000400f4"], 0x80}}, 0x0) 1m15.310929879s ago: executing program 33 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c000000060019f409000000050006000900000006000400f4"], 0x80}}, 0x0) 10.671487213s ago: executing program 1 (id=1247): syz_emit_vhci(0x0, 0xd) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x329ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) io_setup(0x239f, &(0x7f00000000c0)=0x0) r8 = eventfd2(0x0, 0x800) io_submit(r7, 0x2, &(0x7f0000000100)=[&(0x7f0000000300)={0x200000000000000, 0x0, 0x0, 0x0, 0x6, r8, 0x0, 0x300, 0x800002, 0x0, 0x0, r8}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x9841, r8, &(0x7f0000000440)="e2", 0x36, 0x5, 0x0, 0x1, r8}]) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) 9.112086056s ago: executing program 5 (id=1251): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="15", 0x1}], 0x2, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x7, 0x0, 0x47, 0x9, 0x9}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={'streebog256\x00'}}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000000000800600009801000000000000e9e8c6aec6e5331d3576f28044e2063f3dbdc58814ec112f81bdb6c97bb427685025c6da461aad4e204cc94e53e2fb35f0faa7fb6ed8aec86820dbe0229d167e1a55e1fe3733f5c2750ad9f442e020bee6e8cbd7eb6d47ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r8, @ANYBLOB="00f1000000000000bfa200000000000007020000f8ffffffb703000008000070c7b1a19a599f356f1891dcb400b7040000"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xb7, 0x0, &(0x7f0000000880)="e0b9547ed387dbe9abc89b6f5bec94af381e320a9e70637eb796447cdc3b6c76ce672b572b39bddeb947a8f7554169b7399638357cfea30f49eeaab5d9cb8e9a2f7e7dd610e03361f0f46987903140285f9f0b742d1effffffff4d53d888d62552a76b5a53b836b8a76e323b0e5b908ad8ec3e6374439a2da86ad59839c2310ef9885152a7b9ecb991107053d311ef7a015102da77fc52445874124440876a08e51cbda49b275e7d94295f868076bda5f675d53cd1cbb7", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000840)=[@in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) 8.233918378s ago: executing program 6 (id=1253): syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019600)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000019640)=0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000019680)=[{&(0x7f00000196c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004001f000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb8c03050113834fa3bf2c0171eff2a502e1e5dc09b68672731bac7a0094c49e75b9d8c410a59b5e9d46d347a4a783e261b2d8b99dece0a012120ad480e6dceead37ab9e6e03617ddb4f0087744da17bda3bdb7fda8487736d845cd21757070eadcae4a0416953cec740729ced94a81477ffbe17e9c79a3b8a6dc0b4fa3dbf2c112d50659c3bc341bdd252"], 0x8c, 0x3) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x1004000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) 8.148301092s ago: executing program 1 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c800000042000100020000003e000000030100004242000050000100aabbccddeee1aabbccddeee20806600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff0000"], 0xc8}}, 0x0) 7.976916264s ago: executing program 5 (id=1255): r0 = dup(0xffffffffffffffff) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000600)={&(0x7f0000000280)=0x8, 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000005c0)}) r4 = getuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r4, &(0x7f0000000640)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), r0) r5 = accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={0x2, 0x2}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000840)={r8, 0xc3, "9d4bc87d983c84392fa3009e5baed63bf500980b349a3dbadb7b38e9c30a1aa99f38f1828f4049b9e13eb4a52409a67d9dc4b4ecb89647a1fb44d0560c7c618fb060afdb857a7d0ddf4c7bae86413a036222dc4345f3d4b47e78d034a872f2bc573fec180ebb42b9333ddfc668380b1a53e30fc102c2e934011009c1722fe3e0582e36f5da251bede7af27bcc255e4dcbb89506ed1a8c73e696d2ccd631c4d3cfaa8c8f1d0afe41f659c1495099725c9cc0d2086f5ca97c7738c0c2e6a9c075940bb77"}, &(0x7f0000000940)=0xcb) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e22, 0x0, 0x4e22, 0x5, 0x2, 0x190, 0x20, 0x29, r6, r1}, {0xfffffffffffffffa, 0x5dd, 0xd5b5, 0x73, 0x7fff, 0x101, 0x0, 0xa3}, {0x1, 0x6, 0x6, 0xc613}, 0x9, 0x6e6bb9, 0x2, 0x1, 0x3, 0x2}, {{@in=@multicast1, 0x4d5, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3500, 0x2, 0x0, 0x0, 0x6000000, 0x7fff, 0xb3d3}}, 0xe8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a80)={0xc}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000ac0)={'netdevsim0\x00', 0x8}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r9) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, r10, 0x11, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8001) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r9) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000d80)={0x0, @broadcast, @remote}, &(0x7f0000000dc0)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd4, r11, 0x0, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdf2a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x4e23, 0x80, @mcast1, 0x80000000}}, 0x0, 0x0, 0x15, 0x0, "95dc20b0e10edea220888d4378c0b437e2fea7ee47a5316c048a116ace9d931f373c308ddfec274a2819c4c848b9df286e29ff258e0c40d6134fd07b0608fe50c1950a540afb4eff427df28d2479a40f"}, 0xd8) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000010c0), 0x106, 0x5}}, 0x20) fsmount(r0, 0x0, 0x8e) setsockopt$inet6_int(r13, 0x29, 0x46, &(0x7f0000001140)=0xb7, 0x4) fcntl$setownex(r2, 0xf, &(0x7f00000011c0)={0x2}) 6.727773499s ago: executing program 1 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000002c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0) write(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 6.663957691s ago: executing program 6 (id=1258): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b940020000090c0016060000000000003f74d67f6f9400f7d1d9bbe94fa27100a00774cf93adbb50877c98eba68ff29aa2f7617f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a15007000000000000dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd442", 0xd8}], 0x1}, 0x0) 6.619394142s ago: executing program 2 (id=1259): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000100)='./cgroup\x00', 0x0, 0xc008}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x2, 0x200, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @private2, 0x40, 0x700, 0x9, 0xca31}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2e8, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10}, @CTA_EXPECT_NAT={0x1e8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x42}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8814}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@arena={0x21, 0x0, 0x0, 0x31, 0x400, r2, 0x7fffffff, '\x00', r3, r5, 0x5, 0x3, 0x5}, 0x50) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000340)=0x401) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c009900090000000d000000"], 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x4020800) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r8 = open_tree(r7, &(0x7f0000000280)='mnt\x00', 0x88101) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x89101) move_mount(r8, 0x0, r9, 0x0, 0x46) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000ac0)=0x6, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000b00), 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xffffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x800) 6.618901365s ago: executing program 1 (id=1260): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x80045440, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0xbc940000, 0x0, 0x3, 0x8, 0xa1d9, 0xfffb}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x2000000, 0x11, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.379151687s ago: executing program 5 (id=1262): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003900)=ANY=[@ANYBLOB="580000001200010000000000000000000000000000000000000000000000000000000000050000000300"/56, @ANYRES32=0x0, @ANYBLOB="5851000000000000fffffff006000000080003001841"], 0x58}, 0x1, 0x0, 0x0, 0x10810}, 0x0) (async) fchdir(r2) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8000, 0x1f7) (rerun: 64) fanotify_init(0x200, 0x0) (async, rerun: 32) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x8880, 0x4) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000000000001b651c1192328792fad5"], 0x14}}, 0x0) (async, rerun: 64) lseek(r4, 0x100, 0x0) (rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002480), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000004) (async) sendmsg$kcm(r2, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002580)="d98911c6cf92d0626d3ca58be1263a55cd78e9fd27f88998c9193f91d11218d2ec165ebc842ab816e67cd234a48faf5ea27fdc2fcfb15e7fef45421a05a4c5276a1225fbf18722244434b9d3960c2ebe4230262f43ed909c2f3ffe0dbd3521f6fb5eb81349", 0x65}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000000240)="6f6ca8be847b76fc42aef797f98becffef0d97aa05511d75f39900feb64cf79a10c5457b1c07e827f4bd59a516f58e40103c5e56414c058b0173ebd2daf1caece3fc337f99341ca4705de22115328f496fd26e", 0x53}, {&(0x7f00000002c0)="0a9ccf1ba018496b324bc67a7efb819043254e06f914c946aaa7ccc9ec599209d6a7cd51cc21b0952d26853f3ad5d6b5766252447d0842025cd88578f3f3d177c863d4092612d600efb6acd854b6bb2438f8d41c21401aa18a5d5a1ef25fe5ade1e2ddc37b962b988f3615068934568d0a9797304fd906b097b79da7edd764dacf382c125349b15c40b85d", 0x8b}], 0x4, &(0x7f0000003740)=ANY=[@ANYBLOB="a80000000000000013010000040000009857ab41a2cfaf3a3212e3502fc3730ea154a1037a28222c14d923342414e9658e9bd1302bc20a58345d5538a632f7989fa52e362f21124deddfdf7c59f5f932c93da74ad92eaa320ef59e21b0e45968e4a91da9b860710937b760c02d97dc7de81f0c0452dc8974c78056e3a88aaa27a24dc82d8a4c19cf0e44483aa875f7e3f4e95444742714987750542e54ff00000000580000000000000002010000000000002deee9988e810f8b76a923e259d061f7f5e7f38e974c89cf4499b6e3e7c8cff1d7ed9c49923231d13ee86966f69bfc30abdb1eb64164c7564dd88fc6422726b54d00"/256], 0x100}, 0xb0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xa, 0x4) (async, rerun: 64) sendto$packet(r0, &(0x7f00000000c0)='?', 0x1, 0x24000094, &(0x7f0000000100)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003a80)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) r12 = getpgid(0x0) fcntl$setownex(r11, 0xf, &(0x7f0000003ac0)={0x2, r12}) (async) sendmmsg$unix(r10, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003b80)="11", 0x1}], 0x1}}], 0x1, 0x40015) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./proc\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000002340)='./proc\x00', &(0x7f0000002380)='proc\x00', 0x0, 0x0) capset(&(0x7f00000023c0)={0x20080522}, &(0x7f0000002400)={0x0, 0x2, 0x10001, 0x2, 0x1002, 0xffffff73}) (async) openat(0xffffffffffffff9c, &(0x7f0000002440)='./proc/mtrr\x00', 0x801, 0x0) 5.345444432s ago: executing program 0 (id=1264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0}) 5.065037356s ago: executing program 1 (id=1265): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (rerun: 32) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x40, 0x5, 0x86, {0x86, 0x22, "7a1a32411b1a40910df8d71596598d7c40026142b898ba053324fdf55ae4f823e82d08f7e0cdc6fbe2ab6b905739daa7d690b3b6c4bcf286791323791b9270446650563c4f4579ae005bbb912c0c6bbe4ec207f7c57288b123e49af21bc3880888ceece8094778f0c534b69303e1f683ae0401bc83dd224c23313fafc20c22480b12ae89"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x0, 0xe, 0xdd, "e28a516b1bfa174a4a887a44d60e6b2310c6ba3debe3b8be5ac86e7bbef7e9764d42812ef270bc5deb5c26703ada40963c6971c93a547b5a85e3eca2ba30136cf42ad28ce52a4dd1e469e683e8cf4e64535c2a820e604e0fe77723567dda6ad2f43c54901b872ffc212946d6664f61cb0e36892c10af2bde5d15999b31885da700027e3b42666db10516a9869dfa184953b1c8b87fb63cbab9f949994afb2dd9e5d306e8ef7916b99cc594977c0cc935d831ea98afde3398381299c01d2d1e115a3840e9991a1009dbcc3979fe593f268dbcf667f6df6acc253cebfb75"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x81, 0x3, "8a1465"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000000640)={0x20, 0x83, 0x3, "f8712a"}, &(0x7f0000000680)={0x20, 0x84, 0x3, "ef3577"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "cc3c21"}}) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x10600, 0x144) getsockopt$inet_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_usb_control_io(r0, 0x0, 0x0) 4.854059742s ago: executing program 2 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000002700010000000000f0ff000006000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.80471825s ago: executing program 0 (id=1267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x2, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x8d}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x100000000000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}]}, 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r5, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf", 0x60}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/93, 0x50}, {&(0x7f00000008c0)=""/96, 0x60}], 0x2}, 0x40000042) 4.507144949s ago: executing program 2 (id=1268): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x13, 0x92, &(0x7f0000000400)=""/146, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x3, 0x81c6, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000780)=[{0x5, 0x5, 0x9, 0x5}, {0x0, 0x5, 0xe, 0x4}, {0x0, 0x1, 0x5, 0x2}, {0x0, 0x4, 0xfffffffc, 0x5}, {0x0, 0x4, 0xf, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x2, 0x1, 0x10001, 0x2}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x3}], 0x10, 0xc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000"], 0x2c}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) write(r4, &(0x7f0000000040)="8bd5be7bd31c29bbfe8d11b4ad2a2fe2c1ba714ec1e482c3988f82112b12040847a8107186f4", 0x26) 4.501413253s ago: executing program 0 (id=1269): syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, 0x0, 0x0, 0x700000000000000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0xf8, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@empty, 0x7, 0x4000, 0x4e24, 0x8001, 0x0, 0x80, 0x0, 0x87}, {@in6=@local, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x204000, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x70bd29, 0x3503, 0xa, 0x5}, [@sa_dir={0x5, 0x21, 0x2}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x20, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x41014, 0x54c1f}}, 0x20}}, 0x20040000) 4.460914262s ago: executing program 6 (id=1270): close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x6500, 0x34) umount2(&(0x7f0000000500)='./debug\x00', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000b0000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 3.643528956s ago: executing program 5 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc, 0x7, {0xca5d}}, {0xc}}}]}]}, 0x70}}, 0x0) 3.532146937s ago: executing program 2 (id=1272): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000030701010000000000000000000000020c000640000000000000000908000540000000030c000340000000000000008596e331a0ed0d8d23db7fe2046122a9e777cc760b9d730c389a47352ad36548ba60eb918b678b5e12d6c3302b7d705dea247d5861a9faa6a7b55142e948980fb6e85cf55662d96317d66e617cbc4b15adec7ad446aa27c824a765c5fa263befc5c319cc9d7eb53df9b09d5314760303ff0b2e"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r10, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, 0x0, 0x0) 3.461411435s ago: executing program 5 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_CAPBSET_DROP(0x18, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x38}}, 0x0) r8 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_vhci(0x0, 0x7) socket$unix(0x1, 0x1, 0x0) 3.127031385s ago: executing program 6 (id=1274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xc4, 0x19, 0x301, 0x70bd25, 0x0, {{@in=@empty, @in=@broadcast, 0x4e22, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x0, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff, 0x6, 0xffff}, {0x0, 0x8001, 0x2, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0xffffffff}, 0x4080010) 2.997654687s ago: executing program 0 (id=1275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000500)='lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x2}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000900), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r6 = creat(&(0x7f0000000940)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) prlimit64(r3, 0xe, &(0x7f0000000a80)={0x0, 0x8}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/route\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0x800000d, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xf000) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) pread64(r7, &(0x7f0000000b00)=""/102356, 0x18fd4, 0xc2a) sendmsg$nl_generic(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x234, 0x1d, 0x300, 0x70bd2a, 0x25dfdbfd, {0xf}, [@typed={0x8, 0xd3, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x7b}, @generic="472d36bac92a4edb75eb62035b132d678b28ec48f3bb578ec0542a31557f884df8db9cb5165db4aa10aacf35e5ecdb9709382c8b9696178ef23737f59073edb9b0259d4a4d79f6bdccb5dfe4416b555eef8e8f5ae3b3f0cb3770ca59", @nested={0x1a3, 0xe3, 0x0, 0x1, [@typed={0x4, 0x11d}, @generic="a46c0c90193135be18c320c05a5e1c496d35e048410b344bd159fb5b9edc6c7b143f00b8a3aa2b12663fbe02540330ba5f8dcc0537b8d44b6bf7050e8ea2e98e1332f85646f95e37874ec0025fbb2b1bbe668c00cf669653a77dd775f3abcffe91ac753dad991506fbf7fb40397521a3ab29d0834b986c4a545398bbb3db75ff53538d171fe2cafe95a14a89a45f5e4f1838a396535474c337938a791a5fcb27055b94f2e3bd940e3e1edc8fc440b1be751e134b7cf395beab4c72799f7787a49c47621975aeda", @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0xc0, 0x76, 0x0, 0x0, @binary="3ca4bf5f443778beb5fc3ef14a35c140ab2c3ea25d563b0407f2b7ce09117cfa84fc32cdd190553a503faa9e8620a5686e704a674162d8db0176e3efbbee8d716bf582479c9af28da87e2e5b09c41271967ebe3482b7791442d08dd518d6293c888ef6d7d8277612b7a91cf0ab6be72fb1068c3cf8c5598a5b5f6ad3a355af451d731c58500f6ba55441d955df552fe7741343711f9ca1189b1b6ed1d36ac0c83393e4cf17390ba15a367b21ff6b5044e9a1321eda5be08b830ac29a"}]}, @typed={0x14, 0x7d, 0x0, 0x0, @str='$\xeb&(.-+^i/^N+(*\x00'}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) execve(&(0x7f0000019b00)='./file0\x00', 0x0, &(0x7f0000019b40)={[&(0x7f0000019b80)=' ']}) timer_create(0x0, 0x0, 0x0) 519.394788ms ago: executing program 6 (id=1276): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x3000000, 0x20040890}, 0x200080c0) 335.394906ms ago: executing program 0 (id=1277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0}) 276.132257ms ago: executing program 5 (id=1278): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0xfff7, 0x3, 0x8, 0x6}]}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010700c0df000000000000109022400010000e80b09040000010300020009210800040122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x412, {0x8, 0x21, 0x1}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 205.491514ms ago: executing program 2 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000018800000000000000000000000a20000000000a01040000000000000000020000000900010073797a300000000040000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000040c0004800800040000000002"], 0x88}}, 0x0) 111.254045ms ago: executing program 1 (id=1280): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x1, 0xc3, "bdc01014ee6077c43254e2749134dd15cda1b9d117f6724aa2bf1ecdb5afba7bf329e4609960a7d9c7675f6fa7af3654baa12aef79299e95d32521c729657744ca99ef893cd26c589931f97b281526cde322aa8d28fe817174d232f09ca6f08264bafe1dbbf49d37e7b33681e702b21e46487062687b0c9aac99c6f9cf39bd77a8696f65dbcc2e60574c1b1d9185a36a4618d3bd911e2d3734a866ad4175ae2bdb449dbdfd28cdf30521d12bc16b522490950b588714f21848ea87335a4e71ec58cd21"}, &(0x7f0000000180)=0xcb) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x7, 0x3, 0x4, 0x5, 0x20}, 0x14) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000240)=0x2, 0x4) (async) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/17, 0x11, 0x42, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000340)={0x4, 0x1, 0x9}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x340, 0x2c, 0x300, 0x70bd25, 0x25dfdbff, {0x3}, [@nested={0x1a3, 0x2e, 0x0, 0x1, [@generic="7d35964bd00bf6480c8875d2d5838bce25b6256d5dd3d0ff5ba5d748dd5362ed768ce0108cf69e779cfeb8ab3d2badf059979142094a03ce02aad7af92aacfa9dbf303a3ab711d65fd1d2c9ce63c9be7e2414e047fdcc2d7ce69adba1cce570c2e5de19d4cf2e6670a85c0cf844f918f1dbcb66a73377d5e430af6145229c004d8021256b55756bd2094b65c2c703d38063b6cce73fba8d31d1faadfa58956e73784591000c34a04b193ca270fd627202ce2bf74f2f69c99ea0e5a16a16355fee2e961788482e6b225b64d5be04d732ce7acad4e7909f91f97e763f2ee3a716e413d95ed4e54f86ff22063", @typed={0xb2, 0x168, 0x0, 0x0, @binary="83e75fb6c1cbd723918b33e2bf9ed4024accda96340484a2f6bfa2575e7535833b12a678fe0ea7f0e46756b0a09572fa9ee37e4f6471dcd5d46148bed1ad32e720dc57fcd56632c8e4d80cce122a0cfc22144a1b3a180db66a5574b9fd72e42f950d668c9178b36bfb3f2f5d6b95057f2d1ee73d6b4c3bfc8e40d6c48fdec1a112424f227eccad1d85953f8ee12cde89a2efd8164e9c671cd84dc28946b104c94216eeb5a2764cb5dc761bf1b771"}]}, @nested={0x188, 0xf3, 0x0, 0x1, [@nested={0x4, 0x43}, @typed={0xc, 0x27, 0x0, 0x0, @u64}, @generic="04371f23393f17895e69fd561550e33791d29890f119847212c878858ab3ba07e15815e5a70bfb86e30dba28eece459ff921a6793e77d02b18786807a249663ecb246d704eca0a5e6a0f4ce9cad010aa8ef0a652f8b8b6d997e012d1bbf09779480c1419cd130585f70d0095c5b5261ef23d8873521df694682704f4dd201e358e5ad5763d79f8339fecc08a09692d3b1e8338621503", @generic="649cba3f6605dbd2f52f1bbeaf28721b21e750857c393e10fbfa60aa799d761d2682972c2fad8b4dc788a8f96b10f7cb516634b7ce69c660428a9cdf1133981dc41f709334700730b6763c1167a196d521d73a4ebcfbb112bc6a0ce7352ed5ed9896a81cc4a7590a6e11a9a91a3d148379818870137ac12bba934b9477781ec4cb387052be2400563cb23e1a4801bbf76bd97949d4b86b9bab7f24bbce2c2768a381ad1e8b6730ae533848dd9476b3147af0", @nested={0x4, 0x86}, @typed={0xc, 0x139, 0x0, 0x0, @u64}, @typed={0xe, 0x154, 0x0, 0x0, @str='&\\-[t:/*[\x00'}, @nested={0x4, 0xf1}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x880}, 0xc091) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000800)={{@_ha_fsid={[0x9, 0x1]}, {0xfffd, 0x9, 0x10, 0x5}}, {{[0x2f, 0x401, 0x7, 0xfffffffd]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000780)=[{{@_ha_fsid={[0x6, 0x9]}, {0x7, 0x3, 0x9, 0x3}}, 0xfffffffe, 0x0, '\x00'}, {{@align=0x94c6, {0x3dcf, 0x9, 0x0, 0x7}}, 0x2, 0x0, '/dev/uinput\x00'}, {{@align=0x4, {0xfff7, 0x1, 0x80, 0x71abca41}}, 0x1, 0x0, '\x00'}]}}) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) r6 = openat(r3, &(0x7f0000000840)='./file0\x00', 0x442400, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000008c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000940)={'gre0\x00', r7, 0x40, 0x7800, 0x0, 0x80000001, {{0x35, 0x4, 0x1, 0x7, 0xd4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0x7, [{@multicast1, 0x55}, {@multicast1, 0xaa}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@local, 0x40}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@multicast1, 0x9}, {@local, 0x4}, {@broadcast, 0xd0}]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x8, [{@empty, 0xfffff000}, {@remote, 0x1}, {@broadcast, 0xff}, {@multicast1, 0x40}]}, @generic={0x94, 0x6, "04197cae"}, @timestamp_addr={0x44, 0x44, 0x10, 0x1, 0x4, [{@multicast2}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010100, 0xe}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x8}, {@remote, 0xd1}]}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0xc, [{@local, 0x3ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x118, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x118}}, 0x20000040) (async) r9 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000c80)=0xc2, 0x4) (async) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000cc0)={0xe}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000d00)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000d80)={0x4, 0xfff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xffffffff, 0x6}) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)=@migrate={0x84, 0x21, 0x100, 0x70bd26, 0x25dfdbfb, {{@in6=@loopback, @in6=@loopback, 0x4e22, 0xb, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0xd7e3bda47260ddb9, 0x0, r12}, 0x6e6bb6}, [@replay_thresh={0x8, 0xb, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @lifetime_val={0x24, 0x9, {0x3, 0x3ff, 0xed, 0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0xc000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r6, 0x58, &(0x7f0000000f00)}, 0x10) (async, rerun: 32) getgroups(0x1, &(0x7f00000032c0)=[0xee00]) (rerun: 32) syz_fuse_handle_req(r9, &(0x7f0000000fc0)="fe29f56527a7525945ecf7616973301174dda102a6e48a9589e45c08618f51bda5683708bf9f6711f887ee662ead9a6d938bf04066cfd2e94bfda72903d6dfe834144af94c288c9d0c1272a38da7bd36817700504cc0b626516d82a412ed730f9b64e06f1750715fa846adbcd802e21a6599a1013bd03136734c218c3dca914b8b734a9e618f0a87e54851ea15514b950d1611b72afdbbefc5c65ed90bdbe4b279019e35504e7a0f89e840fcaaa3f4fde396d8c6fb5d3c7487d11f6bb766ef81921e00fcc42d4efccc2645b7e186c34366b51d68c6e11e2624c58458e21402daf0694fa1e1e55b8d5bad58b8d4145f73d6ace7d1b7517603f99d1ce43fda74b7d21e4543783054fe48aac5090937c0914c2e745b3d7efcd6b2e86edec9fe67c15413418719b406ddbfa1fbd096023c36266f8667639bb7b0c74dbc08e6cbed29c8d436dce25a499b894d784ebd7e55a2ee1312ac218f111a2f004d422c624f13b14573f7f7d4ad71434f4ceff0d8693e264c9d52c3a62bf313c7d3b0ac9cac3ef7efa108b2764ee5eb688f425f3a3f65f43abacb136d9ee0e1d23bce8fecdaa8106a340cc912cbdebb004584102b3928b6f756353a66dfd52dc66ec8ad3f71ce23dc8072e8097cd309905022a5070249e311d3f133b44a8f1ccdbc6e762d3cb16a2d8cc7c21ba73cb085dd6a96adc07bb7c53e16bd00fe0a9e9425002028fa094b02fa85f797735ce1af6c547b312ead7dd9de722d66e3a22e91cf6032c473964f4ec5792db138213ef112f4dfad41b641876e698e0b588cd9091d5a9b04636b8f8665df84b6603d9d4dedb40e6fc3570f34e1df8ca6937b336d45fb13b05454cce4783a5373e856072762b7b65c73c4f153471adb816936559f58ae7e42960ea75e545df12ab8247b022e025e460a40cae83007d7855f99e2929193183f2373793e3307f3a00aabf25475c8764c235b1f10bb81cd80391c4c3ea45772833ad58c97676e86acc5881bda8246cb9059d767c4debb431a40ef202b1c8dec36528dbc2eaf34813d3b2fd86eb8d1bfc2c24ac77ce5b6c57d0b6c030f5fe8457a5f397d55fb8f65370f87f2df90cfa31525dea024c8f5e2340cfa2e001b24bb6bb2c0cb7ed6a29f7b63afc97449b0e7f608d94c6cb68b5b4bd75de7c34af408e288321f91294f4ee999b33931c1f16ffb773a1876571c31fbba59daba312d8e832795755577590fe1a5db25f9764e32d341a183413fb5b84f499a3e75062cb61e1dc8d732da61cee25f28d8516fefb0bb78bd7e2dc6b7f8a9db8071370a14cd4b6fd31401c513622121e8e75ae04f116ee112878cea549705ba3aac4096a12ac65fd4a09307b3557af17c6c982d9530dbc2612129e92b15b29fd84fef8b2fe378cf51c709cd913292ff2b58af6d7cc82c9b46c776f9c3a11f1e1d02133c48be996ad2b4fc89afc8905cc66c49936f147fa21631d48b36f5450c3d4d60a73e0e15e449bb2197b0ff5e07168a7e23c02bbdb496d29f700957ea0b807d85e2bfdd23a77307d83478a7028888e2c52de0a1c85e40f75ea7e6504cf337475e32e21a6a04c33d12fb4eb4a4579b09470eac5ebc30a46e54c7a5c0f283d36df459a913a66a91f048ba6c66f171888c506ae5daf7d45e4f459c686c266e3831f6ac0bf314260843e30d4a6e58e679cd5feb198490a37f07f6e051b9f59c55562c55f3ff66c3aef6ffc63dc87f5bc2610ef84cfe9e8a5027e8ade335beb1471bc547abd8c6e96abf7587db56ced61adb7df1ea76edb8993af811a417922be1bde94386bbeca01585fb7eed63abca117178dbb394e1f489e3707d562f01ada80411a005f34e542fae994211e2bacd2818d0a773ce67ec4b0d99dcdbcb3f4e2841a70c10f67e4b70c482d3f1479219e3ee3557a182a06e6ff0ec8ef9f6b26f8c9741ae735a0002db95f3ee0c1d5fd4e616d82ed5f83f49a5e80507de83c09e859c246bc918117dfc2245f6672124a24c48b6a541a01b80b6fea6d315b83e4e594bd64472c86329f3ef7995ea5105daa86af3e81c066b4f3e7e9bff3f4528b2c033ff8c799cab2519d47f50f0335ed1c24ecd7a88c7400746ef36b57e8d121a9937683baf6b1b66618302497bc594e78a988bb4f76750846798852d7f84314e4851e692bf35e6c1cc9bff0b73c6387a133c9e3854f49dfe27a1705015f21ee67652071a0679f4b6941ceb23d2d1207e1a4031a7d1e0b5b0765997c457c382931d17a4008aeb9db8b355da2b0f6dca6ba6d8af23d43c92c513e7be45741066b01cf62b7d153aec73236b799b578a5278dcd52ab1c2f3fd1734af2129e3522a9c2147be163cebdc8904c680b6063d8ad72804c0e59787cca7509b924f4e522ca41fd22a768265478f878f321f7b1841c7301e79b6e53b26a32152975fe537453c22079cd502860b2f8c517aeab4e39dc3bb0842abea36cd4f946d9c2511e3b6323eb6a8768e2e32d1f78eaaa31c70ff9aa7e9a24e15a63f79b6a71f6ab5a234cc19804597a70c8e58c74ba5cf9bd86aaa1ba73cff164fd965c9c37c51c469638dd13f919237bab84bf42767ae18954ee048854a5418a50345de7cc9ce589182679adf88dd7f98ca206febe0731a259a9d6f9b098e7678a337f3ab667f42a199ac29901b35dfc0dda74a0e66aca920db772194d2df12f72f755693e9cfcb5937fa7ced7530a411482dc5cdf2320c9e1f52b4f2ee31e5a3d828969ea35c81468cb319d010d0dc16d23c6cd26e8496e16c1093542accf823d3b77f741d2b162d87cd5e71ccec11e63d02391540a47d450b2c52fa3572ce42cfb0189258596d75822360e0730cc4fcb4c972d96404463585037bf45be917a9aee8cf9e62bf5b5abe58e67d2e141679d033692f3d0abcba7ddd360c68619e135bcdd7624be415c38a2bde1a34b69cc175f23a49146c84233b25dc9eba1a5a78c2fe3b2bdce63b2bb0e718b0c0fabf330b65c9e0c54594ec790d0025937f44d01c32b8f5195ff74c73e3ee552dc8c45d3970d2f3b6d9467a1cace8c8c96f2a7dbf0548ba5e7b9fc70752ca29aed95807adc39242b6bca0ebd7523bae9547105ac1be865d9149f68e323d6a58f2791c825c8c7d71c9b2c94cb1338bc8f3e50c6edbe6242b17e395fd918807bed24007e496f623f91075b568a563a289228fe00ffe71b15a3e24f6a7e22d741111725daacbd47798495f97f84cab2720c50b9390a404640528b25673daa4d6a56bde4e5e39367702beddd89c22ef765f34144f3d1cf285008e234102f79fe4d2e26ae8aa42e71e524dffc8b287463320c61fec6911095fd66e25503b5679dc841548498c49ba8de5cef8563ac557d1baffd6a1feadc10de94a7be8c9b9928d45bd3b8bd329e47d5ec5b43861f78f8b2b5544179dc202344e447b43a908edeb7a5a012ae2c9b42cb0687711eda84fd7157dc67e5c4c8c405c110f4e23537131c38b15dfdb7a30aa66d0ac6f912ba1d873e769f1c0ba5037e3f00b5363f8dac4a6fdd3a5ea1526f48ad7c1047074b21dda9ee538365aed890dc8dbceed63225118bac7a0283cc43fa38d4bc316f997206242f61535d361721af4cba524ab657b37f0a12166cd10d6d389bf93c2836df9017163022116b9ab952dd40b60698161434c45fb8d3f5507c6a40b694d2e4a991a45b0acb85b5a7a76acba744bd5e727a72c8a1ba13384e3c4dbb45bd53fd16e386d2cf2f8751959efa529531593acd400cf164f713216f14bf3063665a6f09ff6a75b4ee6a00147c842da77c38cd5aabfe2f1058d90fd4b48bbc99f7ecfe48ca695b479ece004df0896a4a2c1d4c000980f3dfa8ac2156c06a2a5fcc7315397c543d0e6fb0d3225c3c6c7f8e3751af6053babc62a318d43eebd37866f0fe1a28d16275064ef5ee1530676880bc33fdbcbb4f6ece5f9ec2f40c969c7a63f9fd1e75fcb2161e7c222d0ed83d9f55363f012dc5f7972c150d33bccbe175757362d6f1cfd10fd4cf13ceeb71ebc244a8a2ccc417947981839b2bb0ae33db1c30c0b84d22c54f9fff1b046eb9bb34b7aa25bab8ca25b778cd2f2c3d644b2c0f6fd08ecb2c01abfa598890c763128367a1576d917bc8b2b2eed1b17cd7dc67504090b08141f536b64b817806f35082d058bc38161900690cebf5494c80b8dff09c0f570dece5b1796efd3ba6d0b05f5f8ab69a1eede41c3a76de9ad01eddf6818a67bff6eb03ca74cd0feb6818a6eb559be995501cfa40fe08a90ea78ff29ef7200464b495349892d65dc876a01e08f5cfb5cfd8f400919181b0e4acb1763315b9b545992325339713a49404f178d1a1871635dfc3ea69c929129f27d5c1505962bd7d77ccd1f34c2f934c4471f2110321cdd2a42c2e72523417c13afbb8f31d66765cab279afa285a1467a97d9d1a1d41524c54b735590be3e953d91aeb1ace29a059da1a2d82fd9feece78f7b685d267234f98ed426e8d07c6b13cc09f4aba47316e83d19dda1e4da8349ebd8dd30f6654d584e10ac92c16c7ebc8bd88237779ea508320e4861eb4936014e3c5663e7316722fbf9708e9b7ab3ae6fc9e144c666e3d6cee1d7b6dd005d8ed754027214eda64a15be226ebe3d1bf2bdb7f014a5f9b540b14fb645112753d3c5f0c2b6c41cbf283d4fe0d98779ad9751097fb073e8a1f2b2092de91df824a5ee6dd838f25c3363968dbd154fde40ebe54cdfbe6db036a62ee23ab3cfb855f0ba75408a208c31128343f850c105e8f2fbcd8f31f2d5aaf3529327d7840494828a38c75270b23319c19f5fa98fb4e210e45e7f1140a5fc83906dd53c53e00f83c16ba30510d2ade1fd1b159a7fac3ab8a5a6d3c09453e151f79ed173d90c6a2231882e3e36d040586185b1f5db96958d2d2889a13c01e92085a20aac8471b36a583e23fddad34a32ab8e86d433dd0d0c4500fd4d60ef1d19e216b8152625862ae097ff5b593d40fa925a0d06a4f9172a0c9dc9067c20f6ba69692a8626d6bd8a27c6e5f59f697a16d0b7e0840465bb1bdf52efcc76ba8d9df7986777c95a341ba356fe775bdc8a90d0f3ccd45707a52592ced6f1de6d5ca213d23509e54d94c1765401397d06053776d2f21a3e5fa3cdefe465b28a66d87b66cccd26b59e8d53f3dc5deb2c4fd239345bad40f2924e5f99ee6a23edc50bc64c14d8d1e3d8f5322872789882a402f9c2370967ce7cd38cdfd6703a30e8aa2aaf1c4fd894b47081d8c7b705dc717e2414dfc4f5b4551f1adec1ba05a69b9bf2d21127379722112c67ffca5db661c63493da33c8ea19ae441809eb0698e070ecd484bd5fd320c59c88ad5e23bf95e9acee08fe889192385234d442a3cf70257e1470fcf2e027430302e9cec06bca7844ca16fcebf2a5934962a9fd5d944571ad241918cbce3a66095835b5d6fddedc8997672602f17c09a3e4849bc5de3fb35972a8aaaad4b4957c7a9440eade84b872613541f347014051796669a7323346b6872c170341913368bdb19b29cf4a8e15ca47a5549f6336df5d738cd1d4ce4185426145cb3817383dcd72265c7f2128a253092a27af23c4db7e0730e548b94b30dbfdead81f236d8e011f6191c661fb2d6ea76d11dd7da76c4f67f8a9da8765d1b73bb648fa49d7aa53a6132bb7dab55d9131bab6ec7932f68be7100a03b3e557a1681786a8f99d70b0bc0ffcd946c26d07ea1e3d0c0dd96b435b6ef277a0e6e04abf7cd894fcb56adb621379740fc88703c566d78975b5702c8c8a0bc154eafde7d4c2805da60feb8886a7d830de771c3babed4ba9db46ac09558216c61bf7be9f507d4d2878a7ea3ae3e0f5021f3a46b37fae4ea3ecdfa11a449bbd0bd43f22db8bbc67ca048b67175f5c0910ad49176d68b11b69fdad12bbac7e11e45de886ad32be6eafd37ed9365bebe7ae5f5f12790f369dd2dd3cca0ca36305c9dcc33b758812107544e53a2f8040aeec4df1c103cd182838c3f05c7266d2ecf79fdc61f93bcd23af6bd09a48ac5324f9adc1992c657ba8db49a97198bdca01f0c3a001726a039d8fe1ab5a68037f92ae05aca78eabd0e5037c857c4621f63fe48470718a57c2b2f27d8eb132fb614b64f6c4fbc00eb5302eb416942b9667ba1510029b982afdfdfa9aa21c70f6ea416c88897ed81a9cac9a0cea28f5738d3fb8a1cb4ca0f90ac16b6f78ce5a687941abb0c7e6c79ed80edf60cbdbbe7d86af65279d4eb6af718e75e7efe28be804068783190938d777af0c5d4dee1115bcf04e825a6e3085347f56cf06054871837bf0c0e67fedd435b0ebb976625ed121ca2661b8d1ba23ba0b51685ab75f4c8e4289824e2571b67c5911b5965ea1982873e1330478ed1bd15aba6c2bae0e0d90a23686b4a7a89f906d86e64b2d0ed47d28f33a3303fb7230b4c0138676e3bf194a221966f40a9c91b3c053bc2a6198e9c84bfa3687a57983f008700a879ca8b2bda1dfb1df18f869a02f99e9de192ba43bd2c9c77c367657af7a065e693b3ec11f94ca6d93cc52e1e9772c902d038000edf451e02ae6efa145a6377c9ae4047066857a0fd236bf3617ce44dabb2ac85af0e2929012a543766d0b94caa63dd2f6fbbf2eafa1141c87fb042a581b6e16f4c65b728100defb58d4551c49d675b8ededcfc69e96191ed1de5b9c7c105acb874997e77f86cf6a225d2992a3b1463fc623ea61a86c5168725ef7300a74fbfa0a9917c8a429b02d1e465e9c1daebefda239202b4a72e19e373a57677fe75b8c1f75ff1e0d62d9670e404104bf8189f9bb2b87524cac13310f0292fcde921a47c4e326e654db7c1dac07f7a68decaaa247d5163cbb3a55bea2bcb3f9cd7cee6f94aa5c7e41ab1ae61b190b0033318a6d509ee99363f4e1b21f32f82377f7260540b2e335cbdffed0f070ca2387f9318312aff3a0f96fd6b7d5a5c12cb4c2bcdb4454eaf6eb992af87228955df60db68b14bfe7a78d51215a74a4222128f53ca58c0c0bc2c948cb111a8195a647c8115957604ee4f0591b7ba8f3e03f443e4902f8a68e9a133f8f24df3d4dd36bd678d40d32f95ecd4724a87901bdf46e622eccef2c4b88af5e1bc3f6e745e712955dff01911d30d2dd0127dc2ba4ac8b2ec47beef0bb7b9a7bf8161e8d0a5e6dc759de080f36e59efa370e18f9f9b7671e52aac3e28d402407cfce3d616becb33ddfa98a4e65750bc692f977bdbd8e052e85d31528081ab5a85526185c28dfa7db8a7f11ca301126ea4aab53a2ff562d4105089543d81c975e671266df467f9a5bb6405062cb4929d67c9083b1c3874de9921a4b5ea92a289fe859a7dd16ccb4516b6e98e5349cd504929499a2c17e3b0f385bc7e688af23c3c7780aeeaa818b6334fec520d67856969badfa91ae26d44a4812464cb22e0fd748bdc14e2a5cda2942ba697d209d6d49ffc63cad82288f959ed3c5f0c58a70738a9a168496879aac3425c7ae5afa29c37ba3befa129d0381ac52c55c039e31b1d85afb3148ed8200e7b168bdb75a12b39ac9f4792a866ec793e0289ff7b56b6d65596b418c9d69ad5d19cdad4335ac766f422c35927561af38ea43a1170a9fbbf3b13fd55adb3cc32b270c3653538c97478c6070c4a7c60368aaf411e83d74005258eb94a7bfd8b73bc1331c9625c9ab907615f9dc2412b5a37b2377492025a6f429977b575173f88bd9f0619a65647e5d8a155ad7e448a2c1ff18f5647548f0eaadada4a2f5b0c57d88fab17aeca30576e6ab02112278b26974b1a856a25854678b1dc4b4352005cd5bc23aedab9de58e1d63837bdf1f9704870e54740c37984271efd10a78354621b292ac9752db92cefe3f38a6bf7dd752c131d3712442f5d4952454a15a6615da03b21440f4f74c2c804ddc718c2ccc02df57f658ca9aa2d87907424d955ce79ca11322fdc5fc9016df5b2935faff987a4c451835f394c8396629721ca40bbfae397b60d2eae7a1e3d0dde482e60a003e1a17c7b1edcf84ad65196bce316f1fe170b92af68638ac0f6a52e44c0ede2b61fea4c15dbb2c987aced880e58f62f15e2dc989ec54e6b89f6be755095c7ff8cba101f97b500dbaa476e73d397fbfd322d2c949078a5f929b3e50adfbd037b5cd12ccd2cd124b0a18ddc5f181ac7d2ff2b9d77df27f79d4e4ea3de14b021fb22018b96c64164a863f35fb794f2f308a059c6c43f04910ca2cdb13b05046886ea2e8991b5bbb16a30ad8edeab93223b2d617e1084bc7bbdea2ce26d37b76a4ae282150644250cb400aedcf77394cb56f866c5d7894c61499681527896add2bfbba6191d8ad6e39872a2c64f2b1d0a734bd42fb9f135eb60f6bf8613c101f26b71174957ffe039bbffbdf0225d105e6f1b2a6d7cf21c3a1694ea1df44f13df902000a10b1e062f49e057bacde82b6bc3b442face7f709319bdba6036af5473f9adca2cfe0938b10da6ade4141304620ab1fd8d7554d08e7554705e7ace50082287d17e4b2867b8ab2eb87d3f76cd4877277012f62f797bedb812dd6a115946121aa1630209d18256dfd7c669432bffbaa8b117a54d1c994a8115490d35d98d2f1891e92d1b83839fb78da80b5a6000b05f79c991407ffc18c89b5dbff0c32e58d2788c038aba41b2269bf93db099b7c7209ea5b3e10e035595e6d704a5658e4b9f695c0d184cc5e570a58e63201a0234cad4d0d282a890008866a650bb22ea8f9f5ef156cc456538ba5904c0296763500bbc488d674f650c74048bb74b2fdd1e9d10a9d3099bc667ae355e32cd94e2495a3132c0e77ddf20a7e61a4e1d9814e36888948e2da8bd16b0204191f0f0006edd45802a1cb7a2cf3ab47c3c4283a465ec5379f89431c8d94bb6170b5de542064993742db39bf27991c3e6b20054affe9711bc38c1e233038a959adbc317886c04e74a01d7584d1c4d8e5d16ff1b2b7c64c8d0af5a4df83381ef992ca521d6bf4c45367995b18cbd53ac8877c85deb5d918c36f67265209d9694fa75dab8a61d847fe05b2b72478000ca6a1dfdd284d9c8bc357bf545b67758f5ae6c07a87e3e95662d8b01a95968b321d0836788a0fc635476869e3402c0be073541f3ed5e17e10d7f861347f34f659cc63c8783b255d210b28cb273f375ab50fc0f4c1676d58552e8232f6ae55cf8f0bde4e090549dff734ecda7db0651d37e25455b280b60c7984285c40919a3c636341293f36b718616ad701a5663a28d2ad6d95c90e2cf9059d06c14de586db369aa562f3d756206ea9e8233d2e5e2d14c81dedd6c28643191d03ba954fbf0bdfadc4a303701262621d5533a8855f3ba31a2602b5115dd79f24e357fe8b35ca3e05a578cad546e90ca905ee15e6cab75c0dbff4500d502ddb472666fee52e8b0640f0bcf10cab0cee781fa3cbdd91767c723bd39fd9d3d8ad05172888e80378ca202d44584c796d08e83491e954900e66b3d3af3684900662cf5b7068a4cdb6c1bc72615123630807d00fa30550a19eb6eda76c63f5ae2e477d4939ab5d9995c8265a174da52163ed160006fe55055f27763de0ef2d52f62d055d17637db8ec879cee06845a79abfb8ef1edb2941c40cdb066d89f743673dcea414cf8f52e7a708e221f939af8fd03a2cea07db3606a311ac67eb0186dfa349bb75f003038dc8fb9aaf76f24f80ecc61ffde4667bac110f8ccd4a40a5ee7ba65be20aed5790a8367de4f3dfc6f230e3fad26748b1ff02bafbb83ccea39df204e843fae3c80e7f6c82dc53f50f7c2499fd3448a2e1dd8e5b4fc223477cdfa808e9594279ca2695b4ee22c8556a01f66b8fbbb080c2121715cea8062c3413ec06f818faab529cad6ed2f598dec5ea8c9d23682c3727e370568191eecb3fbaa060c83c7c77e50ad4557cd8595b19139f19e3c9e9413d229f0aee6d49f308f77c6c6c71b9c95e0387d30acb66bfef3873e966e41578f89995fdcbc2cdc65d98a83f3f0256ce78b760c3078df14c4d1587e05b5688b2f50e38a3083e38700f34e2c85d5c44fd382ef751068d084f9f8642f20753410664d70bfe30f5c7725307193f5bd4070e1a41e2551210c0a5c22c05192676486e8fd4bb8f0fca75e69f675c11500fa0cfb67558ad111ae5b230ba7880971c16d0c6a95b013b60387c59310e04d5969944a39fc85aa58ff9347d93018d5c23e1987d746838250983de32d3f434910f9463dd65f2717d5b555a8ac4de7c65e9675756d86d796e28066de1a3aeff0383567f1fe8577f6240b2b97bfea2225af4fa458f5cd20802b6c5e688a3f3e08c7c486978b9c491df33e21189e9760fa58b06f2ca447eb50dfe33bfb0456569906d7e625454a55d23e0d503f6de05b9296f5750d854164b39ddcd4c2f319d5c83e61c525c5180ae448d089a863e0642c8cd31a5432a965b3f157fed6f025698d37d8b2c852d50dadea93b7f1d12c0084e270d58c2171cf8b2ac18141cfffaa92de6059b4636edada0f8f425667f9178fb67ead6c65986f514fc2c7c91e3f42406972f2a6e8fa4e5a0a252780d45f72df2b9fd14f0b4af4527efc0af12e9396d7f5701492915bad62d18d95ad073c7ef0708485662e020fe29ba1a08e87cd9b6b050cd3f55c634e055b21d05ea063d9c335c36485cae33973185982f8924079b7b9d7eb46c2511b03adb1c3fe88f0f73ac4d0d1a8b9fdf9349d560262575e07e289026699f77b351ba96dd099a3ce288d1cc94a645c4bb26ff12ac14be974ecdf595d73c6bbca983139338d65fbe5b81266d274984eb5c7f1b9e701182029a72b482869fb8cafd912695c56f15d2fbbd8ce8f683b62b2b2c9dac6f9907b541ff0a94e5860032da2486a3e86529a4e045ffb698faa98ee9f5dbe968f35a5947fec540551305cdba9d822d4bcbf2d4d5fb87579d84016a7de5db7824b58f167552f209c80756d319c165f88592cb18026fd3b7c5911de494ba90930f78b22c9517feb7d80ecbbb8d32091f6c4ab3610d60d2d72183e8a0c760408e3e6646e80b0332cc90d9e814f8d9273aba15c28aa163bf6d35ec38d46d36c9bea95f03ecc3a08330a0ea707e014ceeaf2feafb03e246578ff77d320cf11179c104bead393be61c283bb48e9d441d77b1cc281360b999c2efeb66994dc4bc39e989b17a53aee80d7ed6aff3498d2bb2fdaff9faf8023ffdcb7550d427800b9f6a4585a48b4c8c1b0b4b4ae86b885f0d72a056670d7e7b6e51f5bdda167e140243e017a6c6f1643c0c08f54c2a2d3e72d473ff2160ac10cc06e5984d9c28e9a3020aaade497da979028422a162355c8f16e741c84f2eb37a0f528a2e63dbcc6d7e0c9282c5c12045d9431bd80b9235b384b865e853a5807fe99e9e6852b0a23e358bfe2eb79513f7f1f180138d967812a3063bbc4e060dcd3fd1819e876a20b8e7d9dd0f0bf810cac0a66f01f3aa8a5fa31989c2cbcbdaa8db8703caa16c3b0708a81867c4caa2a724cf5d4366ed46d386d6eec4ead56f3252608852c23485a31fe1454c2afc353741a4578bab0dff874619724089d74b250a89523fd2ecd7011323d56feb762ad0142514c897793a926c73efc297141e58bfa1811f93828761b9876eeda5cb6401459e617a83a991a73b1a4fc5f", 0x2000, &(0x7f0000005e80)={&(0x7f0000002fc0)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x10000000, 0xffffffffa0020060, 0x4, 0xfff8, 0xca10, 0x7ff, 0x0, 0x0, 0x8, 0x7}}, &(0x7f0000003040)={0x18, 0x0, 0xfffffffffffff9e5, {0x8}}, &(0x7f0000003080)={0x18, 0x0, 0x1, {0xffff}}, &(0x7f00000030c0)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000003100)={0x18, 0x0, 0x7, {0xffffffff}}, &(0x7f0000003140)={0x28, 0x0, 0x9, {{0x92, 0x3, 0x0, r11}}}, &(0x7f0000003180)={0x60, 0x0, 0x9, {{0x8, 0xe85d, 0x1fe, 0xffff000000000000, 0x7fffffff0, 0x5, 0xd, 0xd}}}, &(0x7f0000003200)={0x18, 0xffffffffffffffda, 0x6, {0x3d}}, &(0x7f0000003240)={0x1b, 0x0, 0xd97, {'syzkaller1\x00'}}, &(0x7f0000003280)={0x20, 0x0, 0x8000000000000001, {0x0, 0x10}}, &(0x7f0000003300)={0x78, 0x0, 0x749d, {0x2, 0x80, 0x0, {0x1, 0xfff, 0xfff, 0x2, 0x81, 0x8, 0xd1, 0x7, 0x4, 0x6000, 0x3, r12, r13, 0x8, 0x7fffffff}}}, &(0x7f00000034c0)={0x90, 0x0, 0x7fffffff000000, {0x2, 0x3, 0x7, 0x0, 0xfffffff7, 0x8, {0x4, 0xec, 0x4, 0x1, 0x681, 0x9, 0x2e45, 0x2, 0x5, 0x8000, 0x3b, r12, 0x0, 0x400, 0x7c}}}, &(0x7f0000003580)={0xc0, 0xfffffffffffffff5, 0x6, [{0x1, 0x8, 0x3, 0x1, '*)\''}, {0x6, 0x4, 0x8, 0xff, 'ipvlan1\x00'}, {0x3, 0xcf, 0xc, 0xfffffff2, '/dev/uinput\x00'}, {0x1, 0x8, 0x5, 0x0, '//\x89)$'}, {0x6, 0x4080, 0xd, 0x5, 'veth1_to_hsr\x00'}]}, &(0x7f00000057c0)={0x350, 0xfffffffffffffffe, 0xffff, [{{0x1, 0x2, 0x5, 0x8, 0x4, 0x4, {0x3, 0xb910, 0x1ff, 0x100, 0x563a, 0x0, 0x20000000, 0xffff, 0xa2, 0x2000, 0x5303, r12, 0x0, 0x4, 0x79e3}}, {0x2, 0x6, 0x24, 0x6, './binderfs/binder_logs/transactions\x00'}}, {{0x3, 0x2, 0x6, 0x8, 0x3, 0x0, {0x5, 0x4, 0x8f, 0xb02, 0x5, 0x8001, 0xffffffe8, 0x5, 0x5, 0x8000, 0x9, r12, 0x0, 0x6650ee99, 0xde79}}, {0x1, 0x8, 0x0, 0x2d9b}}, {{0x3, 0x3, 0x8, 0x5, 0xf, 0x0, {0x1, 0x101, 0x6, 0xa, 0x3, 0x8, 0x2, 0x6, 0x7, 0x6000, 0x2, r12, 0x0, 0xff, 0x7}}, {0x3, 0x7, 0xc, 0x7fff, '/dev/uinput\x00'}}, {{0x3, 0x1, 0x9, 0x4, 0x2b7d, 0x0, {0x3, 0x100, 0x4, 0x40000000000000, 0x8, 0x5, 0x379a0794, 0xea, 0x0, 0x1000, 0x599, r12, 0xffffffffffffffff, 0x1, 0x9}}, {0x0, 0x1, 0xf, 0x8000000, 'bridge_slave_1\x00'}}, {{0x2, 0x3, 0xb7, 0x1, 0x4, 0x1, {0x5, 0x3, 0x6, 0x2, 0x7, 0x5, 0x7fff, 0x80, 0x9, 0x1000, 0x0, r12, 0x0, 0x7f, 0xf0000000}}, {0x3, 0xb, 0x0, 0x200}}]}, &(0x7f0000005c00)={0xa0, 0xfffffffffffffff5, 0x9, {{0x1, 0x0, 0x8, 0xffff, 0x7ff, 0x0, {0x1, 0x5f, 0x8, 0x9, 0x7fff, 0x7a32938a, 0xe1, 0xbbd4, 0x5, 0x4000, 0x88a1, r12, 0x0, 0x1, 0x4}}, {0x0, 0x1}}}, &(0x7f0000005cc0)={0x20, 0x0, 0xfffffffffffffffb, {0x1, 0x4, 0x6d2, 0x6}}, &(0x7f0000005d40)={0x130, 0x0, 0x5, {0x9, 0xfffffff4, 0x0, '\x00', {0x100, 0x7fff, 0xe, 0x2, r12, 0x0, 0x2000, '\x00', 0x7, 0xffff, 0x5, 0x1c, {0x6, 0x9}, {0x7, 0xc}, {0xffffffffffff32d0, 0x1240cad2}, {0x100000000, 0x7}, 0x6000000, 0x60, 0x1, 0x2}}}}) 41.893627ms ago: executing program 2 (id=1281): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100039266580843195722c2f1010203010902120f01020930060904410c0034a5ef09"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = getpgid(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000001740)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000017c0)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00", 0xffffffffffffffff}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000003880), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003e40)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003f40)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004000)={'ip6gre0\x00', &(0x7f0000003f80)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x5a, 0x4, 0x7f198d5a055c4bb5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, 0x8000, 0x8000, 0x0, 0x400}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004180)={&(0x7f0000004040)={0x118, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xca}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x33}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20010000}, 0x41) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f00000038c0)=ANY=[@ANYBLOB="0100000002"]) r7 = dup3(r4, r3, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bind$802154_dgram(r8, &(0x7f00000013c0)={0x24, @none={0x0, 0xffff}}, 0x14) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) read$FUSE(r9, &(0x7f0000001840)={0x2020}, 0x2020) sendmsg$netlink(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x408}], 0x1}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/firmware/acpi/tables/DSDT\x00', 0x0, 0x0) read(r10, &(0x7f0000000240)=""/4096, 0x1000) r11 = io_uring_setup(0x5daa, &(0x7f00000000c0)={0x0, 0xdfc5, 0x10000, 0x2, 0x80055, 0x0, r10}) io_uring_setup(0xe97, &(0x7f00000001c0)={0x0, 0xa2bd, 0x80, 0x3, 0x30f, 0x0, r11}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f00000012c0)={0x5, 0x6}) syz_open_procfs(r0, &(0x7f0000000000)='net/stat\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES64], 0x0) 26.076206ms ago: executing program 6 (id=1282): gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0xfca804a0, 0xa, 0x0, &(0x7f0000000500)="0400c811fe37db1ba91d", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000780), 0x0, 0x2882) pselect6(0x40, &(0x7f0000000800)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x600, 0x7}, 0x0, &(0x7f0000000840)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 0s ago: executing program 0 (id=1283): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x89, 0x101800) recvmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000080)=""/58, 0x3a}], 0x2, &(0x7f0000000100)}, 0x42) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x218481, 0x18c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0xba}}, {{0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, 0x108) syz_open_dev$admmidi(&(0x7f0000000300), 0xfffffffffffffffc, 0x80080) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x466}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000500)=0x4, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x144, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1d}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000840)={r5, 0x5}, &(0x7f0000000880)=0x8) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000008c0)=[{{0x2, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x28) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000900)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000940)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) semget(0x0, 0x1, 0x218) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) syz_clone(0x30106c80, &(0x7f0000000a40)="218ec5d16bba9f970d8cd350362976059503796b7e080748d297e8cf385e925a23e90eeb4995b7ad6fec0bc24dd34f2d0f87ace8692348bf91b18213931e322668376c671a6ad186307f06f6484d36556ac89b9f33937694195fcf8b1069794e86c7fe95", 0x64, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="ab90312de6404c8d4847c940128772ab6234999b028e55bbeb05afb6f0906beb0dc4a7c378e7488e25f6bedca94670f693cb938987205fdaa01156ed9184bfad534d40aacc433798ec5d7e70390dfaaf41bf74b824326431e4d17bcac944d5d1a3159ef167a97e8c1c75e12e82117da1c67e9eadd2ca72df284208e7978f") ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000c40)={0x60, 0x1, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, &(0x7f0000000bc0)=[{0x4, 0x0, 0x3}, {0x7, 0x2, 0xfffffffffffffffb}, {0x2, 0x1, 0x6}], 0x3, 0xdf09, 0x10, 0x0, 0x10, 0x4}) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000cc0)={0x1, 0xffffff4c}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000d00)={r5, 0x6}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp6_SCTP_EVENT(r1, 0x84, 0x7f, &(0x7f0000000d80)={r9, 0xd}, 0x8) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x190, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x173}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23d}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "9a9adcba576aa603dc24c173c67e53be16ddbddbd69a10b7f4cab1abf6a3e222c263047cd012"}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe3f7}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "005b494246df1825b9e1e1fcf9526de18eae0b75b6daebfd3e099f06c3fe19116a999bb524b0a3b8727e9cbadc30d6454c8bc1f220ad7dcb24b1da6134f0944328a4afa4afb5b8b3071b069281e921b192088529b85d4628fd066588dfc190506085bff2dbb25b4cdf3f622965b06833414f3ede2655d8a44062880ff1e3099b555607b8f75ac75b0da2690fa6b622290b92b77a909673a8393725932c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000001040)={0x1, 0x1, 0x401}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001080)) kernel console output (not intermixed with test programs): ket: 16 [ 359.712428][ T8129] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 359.714418][ T5723] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 359.715642][ T5723] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 359.715685][ T5723] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.716169][ T8129] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 359.716191][ T8129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.716210][ T8129] usb 1-1: config 0 has no interface number 0 [ 359.716235][ T8129] usb 1-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 359.716288][ T8129] usb 1-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 359.716315][ T8129] usb 1-1: config 0 interface 68 has no altsetting 0 [ 359.721231][ T8129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.721255][ T8129] usb 1-1: Product: syz [ 359.721270][ T8129] usb 1-1: Manufacturer: syz [ 359.721307][ T8129] usb 1-1: SerialNumber: syz [ 359.846667][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 359.987368][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.987395][ T5723] usb 6-1: Product: syz [ 359.987408][ T5723] usb 6-1: Manufacturer: syz [ 359.987423][ T5723] usb 6-1: SerialNumber: syz [ 359.997669][ T8129] usb 1-1: config 0 descriptor?? [ 359.999884][ T5723] usb 6-1: config 0 descriptor?? [ 360.027246][ T9] usb 2-1: device descriptor read/64, error -71 [ 360.041791][ T8129] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 360.134233][ T9] usb usb2-port1: attempt power cycle [ 360.207187][ T10] usb 6-1: USB disconnect, device number 5 [ 360.491975][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 360.505799][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 360.535963][ T9] usb 2-1: device descriptor read/8, error -71 [ 360.772241][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 360.794717][ T9] usb 2-1: device descriptor read/8, error -71 [ 360.904259][ T9] usb usb2-port1: unable to enumerate USB device [ 361.211094][ T5844] usb 1-1: Failed to submit usb control message: -110 [ 361.211243][ T5844] usb 1-1: unable to send the bmi data to the device: -110 [ 361.211292][ T5844] usb 1-1: unable to get target info from device [ 361.211334][ T5844] usb 1-1: could not get target info (-110) [ 361.211378][ T5844] usb 1-1: could not probe fw (-110) [ 361.674837][ T9082] FAULT_INJECTION: forcing a failure. [ 361.674837][ T9082] name failslab, interval 1, probability 0, space 0, times 0 [ 361.674890][ T9082] CPU: 0 UID: 0 PID: 9082 Comm: syz.5.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.674921][ T9082] Tainted: [L]=SOFTLOCKUP [ 361.674929][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.674947][ T9082] Call Trace: [ 361.674954][ T9082] [ 361.674962][ T9082] dump_stack_lvl+0x100/0x190 [ 361.675008][ T9082] should_fail_ex.cold+0x5/0xa [ 361.675038][ T9082] should_failslab+0xc2/0x120 [ 361.675068][ T9082] kmem_cache_alloc_noprof+0x92/0x6a0 [ 361.675093][ T9082] ? d_instantiate+0x8a/0xb0 [ 361.675114][ T9082] ? alloc_empty_file+0x5b/0x1c0 [ 361.675140][ T9082] alloc_empty_file+0x5b/0x1c0 [ 361.675162][ T9082] alloc_file_pseudo+0x183/0x290 [ 361.675184][ T9082] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 361.675205][ T9082] ? alloc_fd+0x471/0x7a0 [ 361.675240][ T9082] sock_alloc_file+0x50/0x210 [ 361.675264][ T9082] __sys_socket+0x1c0/0x260 [ 361.675291][ T9082] ? __pfx___sys_socket+0x10/0x10 [ 361.675326][ T9082] __x64_sys_socket+0x72/0xb0 [ 361.675352][ T9082] ? lockdep_hardirqs_on+0x7d/0x110 [ 361.675381][ T9082] do_syscall_64+0x123/0x790 [ 361.675412][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.675434][ T9082] RIP: 0033:0x7f595179e1d9 [ 361.675452][ T9082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.675471][ T9082] RSP: 002b:00007f595260c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 361.675498][ T9082] RAX: ffffffffffffffda RBX: 00007f5951a25fa0 RCX: 00007f595179e1d9 [ 361.675513][ T9082] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 000000000000000a [ 361.675526][ T9082] RBP: 00007f5951835888 R08: 0000000000000000 R09: 0000000000000000 [ 361.675540][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.675553][ T9082] R13: 00007f5951a26038 R14: 00007f5951a25fa0 R15: 00007ffe9a1c0658 [ 361.675587][ T9082] [ 363.538574][ T8129] usb 1-1: USB disconnect, device number 23 [ 364.329497][ T9109] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 365.012173][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 365.162538][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 365.163594][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.163622][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 365.165483][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.165509][ T9] usb 2-1: Product: syz [ 365.165525][ T9] usb 2-1: Manufacturer: syz [ 365.165541][ T9] usb 2-1: SerialNumber: syz [ 365.406138][ T8133] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 365.552707][ T8133] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 365.562111][ T8133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.562136][ T8133] usb 6-1: Product: syz [ 365.562151][ T8133] usb 6-1: Manufacturer: syz [ 365.562166][ T8133] usb 6-1: SerialNumber: syz [ 365.604623][ T8133] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.605064][ T8133] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 367.539824][ T9125] FAULT_INJECTION: forcing a failure. [ 367.539824][ T9125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.539851][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.3.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.539873][ T9125] Tainted: [L]=SOFTLOCKUP [ 367.539880][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 367.539892][ T9125] Call Trace: [ 367.539899][ T9125] [ 367.539907][ T9125] dump_stack_lvl+0x100/0x190 [ 367.539948][ T9125] should_fail_ex.cold+0x5/0xa [ 367.539965][ T9125] ? prepare_alloc_pages+0x16d/0x5b0 [ 367.539984][ T9125] should_fail_alloc_page+0xeb/0x140 [ 367.540003][ T9125] prepare_alloc_pages+0x1f0/0x5b0 [ 367.540032][ T9125] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 367.540072][ T9125] ? __lock_acquire+0x5c0/0x1f40 [ 367.540096][ T9125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.540112][ T9125] ? __lock_acquire+0x5c0/0x1f40 [ 367.540127][ T9125] ? lock_acquire+0x1d1/0x380 [ 367.540140][ T9125] ? do_raw_spin_lock+0x128/0x260 [ 367.540157][ T9125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.540183][ T9125] ? find_held_lock+0x2b/0x80 [ 367.540219][ T9125] ? __lock_acquire+0x5c0/0x1f40 [ 367.540241][ T9125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.540260][ T9125] ? policy_nodemask+0xed/0x4f0 [ 367.540279][ T9125] alloc_pages_mpol+0x201/0x550 [ 367.540297][ T9125] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.540321][ T9125] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 367.540365][ T9125] folio_alloc_mpol_noprof+0x36/0x260 [ 367.540388][ T9125] shmem_alloc_folio+0x135/0x160 [ 367.540407][ T9125] shmem_alloc_and_add_folio+0x371/0xd40 [ 367.540423][ T9125] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 367.540440][ T9125] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 367.540455][ T9125] ? __lock_acquire+0x5c0/0x1f40 [ 367.540481][ T9125] shmem_get_folio_gfp+0x75b/0x1980 [ 367.540510][ T9125] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 367.540539][ T9125] shmem_write_begin+0x1a4/0x420 [ 367.540554][ T9125] ? __pfx_shmem_write_begin+0x10/0x10 [ 367.540567][ T9125] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 367.540584][ T9125] generic_perform_write+0x292/0xa40 [ 367.540611][ T9125] ? __pfx_generic_perform_write+0x10/0x10 [ 367.540640][ T9125] ? mnt_put_write_access_file+0x4e/0x100 [ 367.540668][ T9125] ? file_update_time_flags+0x38c/0x520 [ 367.540687][ T9125] ? __kmalloc_noprof+0x350/0x840 [ 367.540704][ T9125] shmem_file_write_iter+0x10e/0x140 [ 367.540720][ T9125] iter_file_splice_write+0x830/0x10b0 [ 367.540748][ T9125] ? __pfx_iter_file_splice_write+0x10/0x10 [ 367.540782][ T9125] ? lock_acquire+0x1d1/0x380 [ 367.540802][ T9125] ? get_pid_task+0x2a/0x250 [ 367.540856][ T9125] ? __pfx_iter_file_splice_write+0x10/0x10 [ 367.540875][ T9125] do_splice+0x109c/0x1fa0 [ 367.540886][ T9125] ? __lock_acquire+0x5c0/0x1f40 [ 367.540905][ T9125] ? ksys_write+0x190/0x250 [ 367.540930][ T9125] ? lock_acquire+0x1d1/0x380 [ 367.540960][ T9125] ? __pfx_do_splice+0x10/0x10 [ 367.540976][ T9125] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 367.540993][ T9125] ? __fget_files+0x34/0x3d0 [ 367.541009][ T9125] ? find_held_lock+0x2b/0x80 [ 367.541028][ T9125] __do_splice+0x33b/0x370 [ 367.541041][ T9125] ? __pfx___do_splice+0x10/0x10 [ 367.541069][ T9125] __x64_sys_splice+0x187/0x250 [ 367.541092][ T9125] do_syscall_64+0x123/0x790 [ 367.541121][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.541136][ T9125] RIP: 0033:0x7ff28939e1d9 [ 367.541146][ T9125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.541157][ T9125] RSP: 002b:00007ff2875d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 367.541169][ T9125] RAX: ffffffffffffffda RBX: 00007ff289626180 RCX: 00007ff28939e1d9 [ 367.541177][ T9125] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 367.541184][ T9125] RBP: 00007ff2875d5090 R08: 00000000088000cc R09: 0000000000000000 [ 367.541194][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.541205][ T9125] R13: 00007ff289626218 R14: 00007ff289626180 R15: 00007ffd66a0ad18 [ 367.541235][ T9125] [ 368.306002][ T10] usb 6-1: USB disconnect, device number 6 [ 368.496780][ C0] greybus greybus1: 0/0:0: unexpected response id 0x8c00 received [ 368.713523][ T9] usb 2-1: USB disconnect, device number 23 [ 368.714103][ C0] usb 2-1: failed to resubmit arpc in-urb: -19 [ 368.714152][ C0] usb 2-1: failed to resubmit arpc in-urb: -19 [ 368.714191][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 368.714226][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 368.714265][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 368.714305][ C0] usb 2-1: failed to resubmit in-urb: -19 [ 368.731200][ T9] usb 2-1: failed to send ARPC request 4: -19 [ 368.731275][ T9] usb 2-1: failed to execute ARPC: -19 [ 368.731290][ T9] usb 2-1: failed to flush cport 0: -19 [ 368.731327][ T9] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 368.731451][ T9] usb 2-1: failed to send ARPC request 2: -19 [ 368.731514][ T9] usb 2-1: failed to execute ARPC: -19 [ 368.731530][ T9] usb 2-1: failed to quiesce cport 0: -19 (0) [ 368.731549][ T9] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 368.735356][ T9] usb 2-1: failed to send ARPC request 3: -19 [ 368.735421][ T9] usb 2-1: failed to execute ARPC: -19 [ 368.735436][ T9] usb 2-1: failed to clear cport 0: -19 [ 368.735453][ T9] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 370.935132][ T9151] binder: 9149:9151 ioctl c0306201 200000000680 returned -14 [ 370.938726][ T9151] binder: 9149:9151 ioctl c0306201 2000000007c0 returned -14 [ 371.725424][ T9155] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 372.168824][ T9163] loop4: detected capacity change from 0 to 8 [ 372.308430][ T9163] Dev loop4: unable to read RDB block 8 [ 372.311398][ T9163] loop4: unable to read partition table [ 372.326841][ T9163] loop4: partition table beyond EOD, truncated [ 372.326959][ T9163] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 375.321094][ T9210] netlink: 280 bytes leftover after parsing attributes in process `syz.1.930'. [ 375.401909][ T8129] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 375.585285][ T8129] usb 6-1: Using ep0 maxpacket: 8 [ 375.587518][ T8129] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 375.589549][ T8129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.645883][ T8129] pvrusb2: Hardware description: Terratec Grabster AV400 [ 375.645911][ T8129] pvrusb2: ********** [ 375.645916][ T8129] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 375.645926][ T8129] pvrusb2: Important functionality might not be entirely working. [ 375.645933][ T8129] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 375.645943][ T8129] pvrusb2: ********** [ 376.259218][ T9216] netlink: 'syz.1.931': attribute type 4 has an invalid length. [ 377.119617][ T8129] usb 6-1: USB disconnect, device number 7 [ 377.174426][ T2345] pvrusb2: Invalid write control endpoint [ 377.416627][ T9224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.914545][ T31] audit: type=1400 audit(1791680899.289:589): avc: denied { ioctl } for pid=9227 comm="syz.5.937" path="socket:[27529]" dev="sockfs" ino=27529 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 378.119706][ T2345] pvrusb2: Invalid write control endpoint [ 378.119729][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 378.119737][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 378.119745][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 378.119754][ T2345] pvrusb2: Device being rendered inoperable [ 378.127043][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 378.127100][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 378.394505][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.427068][ T2345] pvrusb2: Attached sub-driver cx25840 [ 378.427085][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 378.427094][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 379.658691][ T9257] qnx4: no qnx4 filesystem (no root dir). [ 380.305397][ T9264] binder: 9262:9264 ioctl c0306201 200000000680 returned -14 [ 380.308126][ T9264] binder: 9262:9264 ioctl c0306201 2000000007c0 returned -14 [ 380.310175][ T31] audit: type=1400 audit(1791680901.679:590): avc: denied { audit_write } for pid=9263 comm="syz.3.943" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 380.548197][ T31] audit: type=1400 audit(1791680901.919:591): avc: denied { append } for pid=9277 comm="syz.3.948" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 382.190001][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.190568][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.191434][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.193829][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.194329][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.196479][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.196916][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.197369][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.197756][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.198187][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.198618][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.199083][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.199525][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.199916][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.200305][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.200897][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.201289][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.347458][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.348219][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.348721][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.349174][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.349559][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.349955][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.350394][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.350785][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.351211][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.375146][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.408323][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.439325][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.439858][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.440226][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.440654][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.441035][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.441437][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.457956][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 382.458427][ T5805] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 382.477339][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.519480][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.520211][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.520612][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.521037][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.521449][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.544947][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.564412][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.570643][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.577284][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.585583][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.600220][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.602121][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.609298][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.617065][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.627783][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.639383][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.639804][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.640196][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.640586][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.640979][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.641375][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.664902][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.696291][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 382.696799][ T5805] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 382.697138][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.697618][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 382.697948][ T5805] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 382.697970][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.697990][ T5805] usb 4-1: config 0 has no interface number 0 [ 382.698017][ T5805] usb 4-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 382.698110][ T5805] usb 4-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 382.698138][ T5805] usb 4-1: config 0 interface 68 has no altsetting 0 [ 382.698965][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 382.698988][ T10] usb 2-1: config 0 has no interface number 0 [ 382.699025][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 382.700742][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.719034][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.719059][ T10] usb 2-1: Product: syz [ 382.719074][ T10] usb 2-1: Manufacturer: syz [ 382.719089][ T10] usb 2-1: SerialNumber: syz [ 382.732635][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.738609][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.746926][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.757611][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.774453][ T9303] overlay: filesystem on ./file0 not supported as upperdir [ 382.802842][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.802869][ T5805] usb 4-1: Product: syz [ 382.802882][ T5805] usb 4-1: Manufacturer: syz [ 382.802896][ T5805] usb 4-1: SerialNumber: syz [ 382.848635][ T10] usb 2-1: config 0 descriptor?? [ 382.851114][ T5805] usb 4-1: config 0 descriptor?? [ 382.900930][ T5805] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 383.017592][ T9317] binder: 9316:9317 ioctl c0306201 200000000680 returned -14 [ 383.018585][ T9317] binder: 9316:9317 ioctl c0306201 2000000007c0 returned -14 [ 384.082971][ T5844] usb 4-1: Failed to submit usb control message: -110 [ 384.083086][ T5844] usb 4-1: unable to send the bmi data to the device: -110 [ 384.083133][ T5844] usb 4-1: unable to get target info from device [ 384.083301][ T5844] usb 4-1: could not get target info (-110) [ 384.083347][ T5844] usb 4-1: could not probe fw (-110) [ 384.167838][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -32 [ 385.100898][ T31] audit: type=1400 audit(1791680906.469:592): avc: denied { setopt } for pid=9331 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.243040][ T8128] usb 4-1: USB disconnect, device number 30 [ 385.272270][ T8129] usb 2-1: USB disconnect, device number 24 [ 385.472422][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 385.591959][ T8133] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 386.437940][ T8133] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 386.440417][ T8133] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 386.440446][ T8133] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 386.440462][ T8133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 386.440478][ T8133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.463024][ T8133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.463041][ T8133] usb 3-1: Product: syz [ 386.463050][ T8133] usb 3-1: Manufacturer: syz [ 386.463058][ T8133] usb 3-1: SerialNumber: syz [ 386.502011][ T8133] usb 3-1: config 0 descriptor?? [ 386.513107][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.523771][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.523796][ T9] usb 6-1: config 0 has no interfaces? [ 386.544781][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.544810][ T9] usb 6-1: Product: syz [ 386.544824][ T9] usb 6-1: Manufacturer: syz [ 386.544840][ T9] usb 6-1: SerialNumber: syz [ 386.554932][ T9] usb 6-1: config 0 descriptor?? [ 386.670897][ T9353] netlink: 76 bytes leftover after parsing attributes in process `syz.0.966'. [ 386.706113][ T9354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9354 comm=syz.3.968 [ 386.732452][ T9354] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 386.778605][ T9] usb 3-1: USB disconnect, device number 15 [ 386.795012][ T5803] usb 6-1: USB disconnect, device number 8 [ 386.917089][ T9356] bond1: (slave geneve2): making interface the new active one [ 386.938710][ T9356] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 386.943220][ T979] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.943365][ T979] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.943466][ T979] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 386.943579][ T979] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 387.025983][ T9360] binder: 9359:9360 ioctl c0306201 200000000680 returned -14 [ 387.043542][ T9360] binder: 9359:9360 ioctl c0306201 2000000007c0 returned -14 [ 387.235239][ T9367] FAULT_INJECTION: forcing a failure. [ 387.235239][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 387.235279][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.3.972 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.235306][ T9367] Tainted: [L]=SOFTLOCKUP [ 387.235314][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 387.235325][ T9367] Call Trace: [ 387.235331][ T9367] [ 387.235339][ T9367] dump_stack_lvl+0x100/0x190 [ 387.235374][ T9367] should_fail_ex.cold+0x5/0xa [ 387.235405][ T9367] should_failslab+0xc2/0x120 [ 387.235436][ T9367] __kmalloc_cache_noprof+0x91/0x6d0 [ 387.235460][ T9367] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 387.235493][ T9367] bpf_prog_alloc_no_stats+0x161/0x690 [ 387.235524][ T9367] bpf_prog_alloc+0x3b/0x200 [ 387.235570][ T9367] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.235598][ T9367] bpf_prog_load+0x49e/0x2ab0 [ 387.235633][ T9367] ? __pfx_bpf_prog_load+0x10/0x10 [ 387.235688][ T9367] __sys_bpf+0x1f46/0x4a30 [ 387.235718][ T9367] ? __pfx___sys_bpf+0x10/0x10 [ 387.235740][ T9367] ? find_held_lock+0x2b/0x80 [ 387.235768][ T9367] ? get_pid_task+0xfc/0x250 [ 387.235794][ T9367] ? get_pid_task+0xfc/0x250 [ 387.235831][ T9367] ? find_held_lock+0x2b/0x80 [ 387.235865][ T9367] ? rcu_read_lock_any_held+0x6a/0x90 [ 387.235885][ T9367] ? find_held_lock+0x2b/0x80 [ 387.235913][ T9367] ? ksys_write+0x190/0x250 [ 387.235936][ T9367] ? ksys_write+0x190/0x250 [ 387.235959][ T9367] ? lock_acquire+0x1d1/0x380 [ 387.236002][ T9367] ? fput+0x7c/0x100 [ 387.236029][ T9367] ? ksys_write+0x1ac/0x250 [ 387.236056][ T9367] ? __x64_sys_bpf+0xce/0x140 [ 387.236077][ T9367] __x64_sys_bpf+0xce/0x140 [ 387.236107][ T9367] ? do_syscall_64+0xae/0x790 [ 387.236136][ T9367] do_syscall_64+0x123/0x790 [ 387.236166][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.236187][ T9367] RIP: 0033:0x7ff28939e1d9 [ 387.236206][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.236224][ T9367] RSP: 002b:00007ff28a19d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.236244][ T9367] RAX: ffffffffffffffda RBX: 00007ff289625fa0 RCX: 00007ff28939e1d9 [ 387.236259][ T9367] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 387.236271][ T9367] RBP: 00007ff28a19d090 R08: 0000000000000000 R09: 0000000000000000 [ 387.236284][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.236309][ T9367] R13: 00007ff289626038 R14: 00007ff289625fa0 R15: 00007ffd66a0ad18 [ 387.236338][ T9367] [ 387.602050][ T9376] tipc: Started in network mode [ 387.602081][ T9376] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 387.606217][ T9376] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 387.606800][ T9376] tipc: Enabled bearer , priority 10 [ 388.548712][ C1] Illegal XDP return value 16128 on prog (id 76) dev lo, expect packet loss! [ 388.833835][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 389.588902][ T4919] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 389.615853][ T989] IPVS: starting estimator thread 0... [ 389.618189][ T9384] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 389.619965][ T10] tipc: Node number set to 1 [ 390.181004][ T5608] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 390.202435][ T9391] IPVS: using max 30 ests per chain, 72000 per kthread [ 390.751854][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 390.751893][ T9396] netlink: 312 bytes leftover after parsing attributes in process `syz.2.983'. [ 390.751969][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 390.752820][ T9398] binder: 9397:9398 ioctl c0306201 200000000680 returned -14 [ 390.759998][ T9398] binder: 9397:9398 ioctl 4018620d 0 returned -22 [ 390.760231][ T9398] binder: 9397:9398 ioctl c0306201 2000000007c0 returned -14 [ 390.771695][ T5608] usb 2-1: Using ep0 maxpacket: 16 [ 390.772387][ T5608] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 390.783406][ T5608] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 390.783433][ T5608] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.783452][ T5608] usb 2-1: config 0 has no interface number 0 [ 390.783478][ T5608] usb 2-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 390.783509][ T5608] usb 2-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 390.783534][ T5608] usb 2-1: config 0 interface 68 has no altsetting 0 [ 390.791835][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.791863][ T5608] usb 2-1: Product: syz [ 390.791878][ T5608] usb 2-1: Manufacturer: syz [ 390.791894][ T5608] usb 2-1: SerialNumber: syz [ 390.818524][ T5608] usb 2-1: config 0 descriptor?? [ 390.877478][ T8129] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 390.903434][ T5608] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.927663][ T9384] lo: entered allmulticast mode [ 391.044285][ T8129] usb 6-1: Using ep0 maxpacket: 8 [ 391.045063][ T8129] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 391.046253][ T8129] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.046293][ T8129] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 391.046309][ T8129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 391.046334][ T8129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 391.046356][ T8129] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 391.050110][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 391.050137][ T8129] usb 6-1: Product: syz [ 391.050152][ T8129] usb 6-1: Manufacturer: syz [ 391.050166][ T8129] usb 6-1: SerialNumber: syz [ 391.214684][ T8129] usb 6-1: config 0 descriptor?? [ 391.428392][ T5723] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 391.499278][ T8129] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 391.557134][ T8129] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 391.602203][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 391.603727][ T5723] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 391.608368][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.681192][ T5608] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 391.751139][ T5723] usb 1-1: config 0 descriptor?? [ 391.989196][ T8129] usb 6-1: USB disconnect, device number 9 [ 392.124411][ T5843] usb 2-1: Failed to submit usb control message: -110 [ 392.124490][ T5843] usb 2-1: unable to send the bmi data to the device: -110 [ 392.124557][ T5843] usb 2-1: unable to get target info from device [ 392.124600][ T5843] usb 2-1: could not get target info (-110) [ 392.124645][ T5843] usb 2-1: could not probe fw (-110) [ 392.338093][ T5723] as10x_usb: device has been detected [ 392.339029][ T5723] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 392.397987][ T9407] netlink: 'syz.5.986': attribute type 14 has an invalid length. [ 392.440015][ T9410] netlink: 'syz.2.985': attribute type 23 has an invalid length. [ 392.459618][ T5608] usb 4-1: device descriptor read/all, error -71 [ 392.528266][ T9388] lo: left allmulticast mode [ 392.607987][ T5723] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 392.649885][ T8129] usb 2-1: USB disconnect, device number 25 [ 392.775830][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 392.853459][ T9414] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1073741824.0), cmd(9) [ 392.860926][ T5723] as10x_usb: error during firmware upload part1 [ 392.861430][ T5723] Registered device nBox DVB-T Dongle [ 392.888651][ T5723] usb 1-1: USB disconnect, device number 24 [ 392.938829][ T5723] Unregistered device nBox DVB-T Dongle [ 392.942886][ T5723] as10x_usb: device has been disconnected [ 393.009781][ T9412] syz_tun: entered allmulticast mode [ 393.010436][ T9412] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 393.085671][ T9420] xt_l2tp: invalid flags combination: 8 [ 393.178795][ T31] audit: type=1400 audit(1791680914.549:593): avc: denied { ioctl } for pid=9419 comm="syz.2.990" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 393.315791][ T31] audit: type=1400 audit(1791680914.649:594): avc: denied { write } for pid=9419 comm="syz.2.990" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 394.020666][ T9430] binder: 9429:9430 ioctl c0306201 200000000680 returned -14 [ 394.033515][ T9430] binder: 9429:9430 ioctl 4018620d 0 returned -22 [ 394.045470][ T9430] binder: 9429:9430 ioctl c0306201 2000000007c0 returned -14 [ 398.312141][ T31] audit: type=1400 audit(1791680919.689:595): avc: denied { write } for pid=9439 comm="syz.5.997" name="configs" dev="configfs" ino=10067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.354337][ T31] audit: type=1400 audit(1791680919.729:596): avc: denied { write } for pid=9439 comm="syz.5.997" name="functions" dev="configfs" ino=10066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.395108][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 398.435964][ T31] audit: type=1400 audit(1791680919.809:597): avc: denied { write } for pid=9439 comm="syz.5.997" name="report_desc" dev="configfs" ino=29021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 398.618889][ T9452] serio: Serial port ttyS3 [ 398.931749][ T5805] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 399.101634][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 399.102897][ T5805] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 399.659093][ T5805] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 399.659124][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.659143][ T5805] usb 4-1: config 0 has no interface number 0 [ 399.659172][ T5805] usb 4-1: too many endpoints for config 0 interface 68 altsetting 225: 115, using maximum allowed: 30 [ 399.659208][ T5805] usb 4-1: config 0 interface 68 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 399.659239][ T5805] usb 4-1: config 0 interface 68 has no altsetting 0 [ 399.665148][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.665176][ T5805] usb 4-1: Product: syz [ 399.665190][ T5805] usb 4-1: Manufacturer: syz [ 399.665205][ T5805] usb 4-1: SerialNumber: syz [ 399.685935][ T5805] usb 4-1: config 0 descriptor?? [ 399.754339][ T5805] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 400.875146][ T979] usb 4-1: Failed to submit usb control message: -110 [ 400.875225][ T979] usb 4-1: unable to send the bmi data to the device: -110 [ 400.875271][ T979] usb 4-1: unable to get target info from device [ 400.875314][ T979] usb 4-1: could not get target info (-110) [ 400.875358][ T979] usb 4-1: could not probe fw (-110) [ 401.724162][ T8133] usb 4-1: USB disconnect, device number 33 [ 401.990474][ T9483] binder: 9480:9483 ioctl c0306201 200000000680 returned -14 [ 401.997265][ T9483] binder: 9480:9483 ioctl 4018620d 0 returned -22 [ 401.999899][ T9483] binder: 9480:9483 ioctl c0306201 2000000007c0 returned -14 [ 402.905657][ T9492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 402.905691][ T9492] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 402.929058][ T9492] vhci_hcd vhci_hcd.0: Device attached [ 403.204461][ T5608] usb 34-1: SetAddress Request (2) to port 0 [ 403.204523][ T5608] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 403.231841][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 403.307269][ T9512] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1016'. [ 403.372073][ T9] usb 1-1: device descriptor read/64, error -71 [ 403.391735][ T8133] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 404.502779][ T8133] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 404.503940][ T8133] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 404.503972][ T8133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 404.503999][ T8133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.506264][ T8133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.506290][ T8133] usb 4-1: Product: syz [ 404.506305][ T8133] usb 4-1: Manufacturer: syz [ 404.506321][ T8133] usb 4-1: SerialNumber: syz [ 404.509028][ T8133] usb 4-1: config 0 descriptor?? [ 404.659231][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 404.847147][ T8133] usb 4-1: USB disconnect, device number 34 [ 405.111707][ T9] usb 1-1: device descriptor read/64, error -71 [ 405.171647][ T5805] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 405.224244][ T9] usb usb1-port1: attempt power cycle [ 405.356389][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 405.407712][ T5805] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 405.417077][ T5805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.418822][ T5805] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.418890][ T5805] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.418944][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 405.419025][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.580174][ T5805] usb 2-1: config 0 descriptor?? [ 405.601795][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.148378][ T9493] vhci_hcd: connection reset by peer [ 406.157626][ T9] usb 1-1: device descriptor read/8, error -71 [ 406.207355][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 406.208253][ T5842] vhci_hcd vhci_hcd.0: release socket [ 406.209987][ T5842] vhci_hcd vhci_hcd.0: disconnect device [ 406.295351][ T9545] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 406.344684][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.344723][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.347639][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x2 [ 406.347678][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.347701][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.347724][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.347745][ T5805] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 406.347767][ T5805] glorious 0003:258A:0033.0003: item fetching failed at offset 10/40 [ 406.348391][ T5805] glorious 0003:258A:0033.0003: probe with driver glorious failed with error -22 [ 406.439105][ T31] audit: type=1326 audit(1791680927.809:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.439152][ T31] audit: type=1326 audit(1791680927.809:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.441078][ T31] audit: type=1326 audit(1791680927.809:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.447850][ T31] audit: type=1326 audit(1791680927.819:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.447899][ T31] audit: type=1326 audit(1791680927.819:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.506796][ T31] audit: type=1326 audit(1791680927.869:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.506849][ T31] audit: type=1326 audit(1791680927.869:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.506888][ T31] audit: type=1326 audit(1791680927.869:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.512580][ T31] audit: type=1326 audit(1791680927.869:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.512631][ T31] audit: type=1326 audit(1791680927.869:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.0.1027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 406.683838][ T5805] usb 2-1: USB disconnect, device number 26 [ 406.878642][ T9548] ALSA: mixer_oss: invalid OSS volume '' [ 406.878775][ T9548] ALSA: mixer_oss: invalid OSS volume 'g{p%:PZCwoT[,,r' [ 406.878917][ T9548] ALSA: mixer_oss: invalid OSS volume '3"' [ 406.879088][ T9548] ALSA: mixer_oss: invalid OSS volume 'SZ=YVد̎B;d=h' [ 406.879156][ T9548] ALSA: mixer_oss: invalid OSS volume 'Nd' [ 406.879321][ T9548] ALSA: mixer_oss: invalid OSS volume '{k_' [ 406.879356][ T9548] ALSA: mixer_oss: invalid OSS volume 'a*' [ 406.879487][ T9548] ALSA: mixer_oss: invalid OSS volume ',A:BM' [ 406.957187][ T9548] ALSA: mixer_oss: invalid OSS volume '|Fpy署w1M؃Np' [ 406.957293][ T9548] ALSA: mixer_oss: invalid OSS volume 'Un_6E5' [ 406.957330][ T9548] ALSA: mixer_oss: invalid OSS volume 'tT' [ 406.957368][ T9548] ALSA: mixer_oss: invalid OSS volume '-)=A4Pj⡹Qӗev' [ 406.957486][ T9548] ALSA: mixer_oss: invalid OSS volume 'hgF[2EDG| =' [ 406.957523][ T9548] ALSA: mixer_oss: invalid OSS volume '̩Bm' [ 406.957662][ T9548] ALSA: mixer_oss: invalid OSS volume '!Q?9%gMMz' [ 406.957718][ T9548] ALSA: mixer_oss: invalid OSS volume 'xA5)ۙƮ rejected, already enabled [ 407.761895][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 407.926041][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 407.930433][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 407.930466][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 407.930494][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 407.930522][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 407.933142][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.933169][ T10] usb 1-1: Product: syz [ 407.933184][ T10] usb 1-1: Manufacturer: syz [ 407.933199][ T10] usb 1-1: SerialNumber: syz [ 407.954994][ T10] usb 1-1: config 0 descriptor?? [ 407.955994][ T9562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.281949][ T5608] usb 34-1: device descriptor read/8, error -110 [ 408.703048][ T5608] usb usb34-port1: attempt power cycle [ 408.996474][ T9601] netlink: 'syz.2.1045': attribute type 2 has an invalid length. [ 408.996563][ T9601] netlink: 'syz.2.1045': attribute type 7 has an invalid length. [ 409.051386][ T9601] U: entered promiscuous mode [ 409.853076][ T5608] usb usb34-port1: unable to enumerate USB device [ 409.885559][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 413.053612][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 413.053693][ T9639] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1055'. [ 413.053711][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 413.075688][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 413.075740][ T31] audit: type=1400 audit(1791680934.449:638): avc: denied { ioctl } for pid=9636 comm="syz.2.1054" path="socket:[29408]" dev="sockfs" ino=29408 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.849108][ T9647] netlink: 'syz.0.1058': attribute type 23 has an invalid length. [ 413.968801][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 414.358727][ T9650] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.4261347328.0), cmd(9) [ 415.658468][ T9670] netlink: 'syz.0.1065': attribute type 11 has an invalid length. [ 415.712469][ T31] audit: type=1326 audit(1791680937.089:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.712710][ T31] audit: type=1326 audit(1791680937.089:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.728329][ T31] audit: type=1326 audit(1791680937.099:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.728382][ T31] audit: type=1326 audit(1791680937.099:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.728421][ T31] audit: type=1326 audit(1791680937.099:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.729093][ T31] audit: type=1326 audit(1791680937.099:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.729134][ T31] audit: type=1326 audit(1791680937.099:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.729174][ T31] audit: type=1326 audit(1791680937.099:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 415.730043][ T31] audit: type=1326 audit(1791680937.099:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d4df9e1d9 code=0x7ffc0000 [ 416.029675][ T9674] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1067'. [ 417.690913][ T9685] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 417.724574][ T9685] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 417.812141][ T8129] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 417.974541][ T8129] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 417.979810][ T8129] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.979906][ T8129] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 417.980005][ T8129] usb 6-1: config 1 interface 0 has no altsetting 0 [ 417.994290][ T8129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.994327][ T8129] usb 6-1: Product: syz [ 417.994341][ T8129] usb 6-1: Manufacturer: syz [ 417.994356][ T8129] usb 6-1: SerialNumber: syz [ 418.013173][ T8129] usb-storage 6-1:1.0: USB Mass Storage device detected [ 418.242916][ T8129] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 418.261174][ T9691] x_tables: duplicate underflow at hook 2 [ 418.375163][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.377460][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.463554][ T8129] usb 6-1: USB disconnect, device number 10 [ 419.455778][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 421.868510][ T9732] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 422.818188][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 423.610107][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 424.333900][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.337092][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.338056][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.341326][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.380126][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.412848][ T9751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 424.412877][ T9751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.414247][ T9751] vhci_hcd vhci_hcd.0: Device attached [ 424.987929][ T9768] program syz.2.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.795486][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 425.795506][ T31] audit: type=1400 audit(1791680946.389:689): avc: denied { connect } for pid=9761 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.795545][ T31] audit: type=1400 audit(1791680946.409:690): avc: denied { write } for pid=9761 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.901680][ T8129] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 425.981713][ T5805] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 426.141692][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 426.143077][ T5805] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.145892][ T5805] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.145927][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.145953][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.145977][ T5805] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.146076][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.335062][ T9762] vhci_hcd: connection reset by peer [ 426.338819][ T50] vhci_hcd vhci_hcd.0: stop threads [ 426.338847][ T50] vhci_hcd vhci_hcd.0: release socket [ 426.338897][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 426.431675][ T4919] Bluetooth: hci1: command tx timeout [ 426.436798][ T5805] usb 2-1: GET_CAPABILITIES returned 0 [ 426.436844][ T5805] usbtmc 2-1:16.0: can't read capabilities [ 426.675609][ T5723] usb 2-1: USB disconnect, device number 27 [ 427.061833][ T989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.061867][ T989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.061889][ T989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 427.464213][ T31] audit: type=1400 audit(1791680948.839:691): avc: denied { relabelfrom } for pid=9782 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 427.483467][ T31] audit: type=1400 audit(1791680948.849:692): avc: denied { relabelto } for pid=9782 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 427.517664][ T5805] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 428.330984][ T10] iguanair 1-1:0.0: failed to get version [ 428.331292][ T10] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 428.353140][ T9793] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 428.354320][ T10] usb 1-1: USB disconnect, device number 29 [ 428.360515][ T31] audit: type=1400 audit(1791680949.729:693): avc: denied { ioctl } for pid=9792 comm="syz.2.1094" path="socket:[29660]" dev="sockfs" ino=29660 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.377814][ T31] audit: type=1400 audit(1791680949.749:694): avc: denied { setopt } for pid=9792 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 428.511725][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 428.511860][ T4919] Bluetooth: hci1: command tx timeout [ 428.512526][ T5805] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 428.513479][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.554917][ T5805] pvrusb2: Hardware description: Terratec Grabster AV400 [ 428.554936][ T5805] pvrusb2: ********** [ 428.554942][ T5805] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 428.554953][ T5805] pvrusb2: Important functionality might not be entirely working. [ 428.554961][ T5805] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 428.554971][ T5805] pvrusb2: ********** [ 428.567980][ T9793] netlink: 'syz.2.1094': attribute type 10 has an invalid length. [ 428.573766][ T989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.573800][ T989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.573827][ T989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 428.764536][ T2345] pvrusb2: Invalid write control endpoint [ 428.810294][ T9803] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 428.994896][ T2345] pvrusb2: Invalid write control endpoint [ 428.994907][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 428.994912][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 428.994916][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 428.994921][ T2345] pvrusb2: Device being rendered inoperable [ 429.001330][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 429.001385][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 429.010439][ T2345] pvrusb2: Attached sub-driver cx25840 [ 429.010454][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 429.010462][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 429.221661][ T31] audit: type=1400 audit(1791680950.579:695): avc: denied { create } for pid=9782 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 429.229387][ T989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.229411][ T989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.229426][ T989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 429.348112][ T9811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 429.908270][ T8133] usb 6-1: USB disconnect, device number 11 [ 430.149571][ T989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.149608][ T989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.149634][ T989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 430.227127][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 430.540910][ T9825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 430.594382][ T989] bridge_slave_1: left allmulticast mode [ 430.594408][ T989] bridge_slave_1: left promiscuous mode [ 430.594590][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.602263][ T4919] Bluetooth: hci1: command tx timeout [ 430.630796][ T989] bridge_slave_0: left allmulticast mode [ 430.630823][ T989] bridge_slave_0: left promiscuous mode [ 430.632456][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.712564][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 430.712629][ T9839] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1101'. [ 430.712647][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 430.877809][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.924503][ T989] bond1 (unregistering): (slave geneve2): Releasing active interface [ 430.981382][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.982358][ T8129] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 430.998612][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.999636][ T989] bond0 (unregistering): Released all slaves [ 431.019418][ T989] bond1 (unregistering): Released all slaves [ 431.041207][ T9840] syz.1.1101 (9840) used obsolete PPPIOCDETACH ioctl [ 431.188778][ T989] tipc: Left network mode [ 431.192432][ T8133] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 431.315701][ T9756] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.316671][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.316810][ T9756] bridge_slave_0: entered allmulticast mode [ 431.318097][ T9853] netlink: 'syz.1.1111': attribute type 12 has an invalid length. [ 431.325322][ T8133] usb 3-1: device descriptor read/64, error -71 [ 431.336783][ T9756] bridge_slave_0: entered promiscuous mode [ 431.347459][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.349078][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.351706][ T9756] bridge_slave_1: entered allmulticast mode [ 431.357996][ T9756] bridge_slave_1: entered promiscuous mode [ 431.561671][ T8133] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 431.694506][ T8133] usb 3-1: device descriptor read/64, error -71 [ 431.744010][ T9862] FAULT_INJECTION: forcing a failure. [ 431.744010][ T9862] name failslab, interval 1, probability 0, space 0, times 0 [ 431.744051][ T9862] CPU: 1 UID: 0 PID: 9862 Comm: syz.5.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.744082][ T9862] Tainted: [L]=SOFTLOCKUP [ 431.744091][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 431.744105][ T9862] Call Trace: [ 431.744113][ T9862] [ 431.744121][ T9862] dump_stack_lvl+0x100/0x190 [ 431.744158][ T9862] should_fail_ex.cold+0x5/0xa [ 431.744191][ T9862] should_failslab+0xc2/0x120 [ 431.744222][ T9862] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 431.744251][ T9862] ? __alloc_skb+0x140/0x710 [ 431.744278][ T9862] __alloc_skb+0x140/0x710 [ 431.744295][ T9862] ? __alloc_skb+0x5b7/0x710 [ 431.744313][ T9862] ? __pfx___alloc_skb+0x10/0x10 [ 431.744333][ T9862] ? skb_zerocopy_clone+0x2d4/0x6c0 [ 431.744354][ T9862] ? __asan_memcpy+0x3c/0x60 [ 431.744383][ T9862] skb_segment+0x9ab/0x4270 [ 431.744441][ T9862] __udp_gso_segment+0x14e0/0x2a50 [ 431.744470][ T9862] ? __pfx_sock_wfree+0x10/0x10 [ 431.744510][ T9862] udp4_ufo_fragment+0x52a/0x710 [ 431.744544][ T9862] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 431.744576][ T9862] inet_gso_segment+0x622/0x1260 [ 431.744617][ T9862] skb_mac_gso_segment+0x2a5/0x640 [ 431.744646][ T9862] ? __pfx_inet_gso_segment+0x10/0x10 [ 431.744674][ T9862] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 431.744701][ T9862] ? __ip_finish_output.part.0+0x444/0x6f0 [ 431.744727][ T9862] ? ip_mc_output+0x466/0xd70 [ 431.744752][ T9862] ? __pfx_netif_skb_features+0x10/0x10 [ 431.744786][ T9862] __skb_gso_segment+0x3f8/0x7a0 [ 431.744818][ T9862] validate_xmit_skb+0x9ab/0x16b0 [ 431.744850][ T9862] ? __lock_acquire+0x5c0/0x1f40 [ 431.744878][ T9862] validate_xmit_skb_list+0xcd/0x160 [ 431.744911][ T9862] sch_direct_xmit+0x480/0xc70 [ 431.744939][ T9862] ? lock_acquire+0x1d1/0x380 [ 431.744961][ T9862] ? __pfx_sch_direct_xmit+0x10/0x10 [ 431.744986][ T9862] ? do_raw_spin_lock+0x1b0/0x260 [ 431.745022][ T9862] __dev_queue_xmit+0x2812/0x4a40 [ 431.745063][ T9862] ? __pfx___dev_queue_xmit+0x10/0x10 [ 431.745097][ T9862] ? preempt_schedule_irq+0x79/0x90 [ 431.745128][ T9862] ? irqentry_exit+0x24d/0xa10 [ 431.745154][ T9862] ? lockdep_hardirqs_on+0x7d/0x110 [ 431.745182][ T9862] ? irqentry_exit+0x24d/0xa10 [ 431.745220][ T9862] ? __asan_memcpy+0x3c/0x60 [ 431.745244][ T9862] ? eth_header+0x120/0x1f0 [ 431.745274][ T9862] neigh_resolve_output+0x51f/0x8f0 [ 431.745310][ T9862] ip_finish_output2+0x851/0x2400 [ 431.745340][ T9862] ? skb_gso_transport_seglen+0x12/0x3b0 [ 431.745367][ T9862] ? __pfx_ip_finish_output2+0x10/0x10 [ 431.745391][ T9862] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 431.745427][ T9862] __ip_finish_output.part.0+0x444/0x6f0 [ 431.745456][ T9862] ip_mc_output+0x466/0xd70 [ 431.745492][ T9862] ? __pfx_ip_mc_output+0x10/0x10 [ 431.745525][ T9862] ? __pfx_ip_finish_output+0x10/0x10 [ 431.745558][ T9862] ? __pfx_ip_mc_output+0x10/0x10 [ 431.745588][ T9862] ip_send_skb+0x24c/0x2a0 [ 431.745620][ T9862] udp_send_skb+0xa38/0xfc0 [ 431.745656][ T9862] udp_sendmsg+0x1760/0x2710 [ 431.745689][ T9862] ? __pfx_sched_free_group_rcu+0x10/0x10 [ 431.745712][ T9862] ? __pfx_udp_sendmsg+0x10/0x10 [ 431.745734][ T9862] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 431.745759][ T9862] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 431.745792][ T9862] ? __perf_event_task_sched_in+0xdd/0xa30 [ 431.745848][ T9862] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 431.745875][ T9862] ? rcu_is_watching+0x13/0xc0 [ 431.745910][ T9862] udpv6_sendmsg+0x1420/0x2c20 [ 431.745940][ T9862] ? rcu_is_watching+0x13/0xc0 [ 431.745978][ T9862] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 431.746025][ T9862] ? preempt_schedule_irq+0x79/0x90 [ 431.746055][ T9862] ? irqentry_exit+0x24d/0xa10 [ 431.746106][ T9862] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 431.746136][ T9862] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 431.746167][ T9862] ? inet6_sendmsg+0x105/0x140 [ 431.746196][ T9862] inet6_sendmsg+0x105/0x140 [ 431.746227][ T9862] sock_write_iter+0x41a/0x5b0 [ 431.746255][ T9862] ? __pfx_sock_write_iter+0x10/0x10 [ 431.746291][ T9862] ? bpf_lsm_file_permission+0x9/0x10 [ 431.746317][ T9862] ? security_file_permission+0x76/0x210 [ 431.746349][ T9862] ? rw_verify_area+0xce/0x6d0 [ 431.746376][ T9862] vfs_write+0x6af/0x1050 [ 431.746402][ T9862] ? __pfx_sock_write_iter+0x10/0x10 [ 431.746430][ T9862] ? __pfx_vfs_write+0x10/0x10 [ 431.746453][ T9862] ? find_held_lock+0x2b/0x80 [ 431.746512][ T9862] ksys_write+0x1f8/0x250 [ 431.746540][ T9862] ? __pfx_ksys_write+0x10/0x10 [ 431.746579][ T9862] do_syscall_64+0x123/0x790 [ 431.746613][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.746636][ T9862] RIP: 0033:0x7f595179e1d9 [ 431.746658][ T9862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.746677][ T9862] RSP: 002b:00007f59525ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.746700][ T9862] RAX: ffffffffffffffda RBX: 00007f5951a26180 RCX: 00007f595179e1d9 [ 431.746715][ T9862] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 431.746729][ T9862] RBP: 00007f5951835888 R08: 0000000000000000 R09: 0000000000000000 [ 431.746743][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.746757][ T9862] R13: 00007f5951a26218 R14: 00007f5951a26180 R15: 00007ffe9a1c0658 [ 431.746791][ T9862] [ 431.827199][ T31] audit: type=1400 audit(1791680953.199:696): avc: denied { mounton } for pid=9857 comm="syz.5.1113" path="/107/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 431.913069][ T8133] usb usb3-port1: attempt power cycle [ 432.157868][ T9756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.200563][ T9756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.432437][ T4919] Bluetooth: hci0: command 0x0406 tx timeout [ 432.498370][ T9756] team0: Port device team_slave_0 added [ 432.530924][ T9756] team0: Port device team_slave_1 added [ 432.537543][ T8133] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 432.552526][ T8133] usb 3-1: device descriptor read/8, error -71 [ 432.668334][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1115'. [ 432.668370][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 432.671989][ T4919] Bluetooth: hci1: command tx timeout [ 432.677381][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.677413][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.677436][ T9756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.742809][ T9876] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1114'. [ 432.800766][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.800783][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.800807][ T9756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.838751][ T8133] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 432.860151][ T8133] usb 3-1: device descriptor read/8, error -71 [ 432.906316][ T31] audit: type=1400 audit(1791680954.279:697): avc: denied { write } for pid=9861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.907852][ T9879] FAULT_INJECTION: forcing a failure. [ 432.907852][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 432.907878][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.5.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.907897][ T9879] Tainted: [L]=SOFTLOCKUP [ 432.907901][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 432.907909][ T9879] Call Trace: [ 432.907914][ T9879] [ 432.907920][ T9879] dump_stack_lvl+0x100/0x190 [ 432.907943][ T9879] should_fail_ex.cold+0x5/0xa [ 432.907963][ T9879] should_failslab+0xc2/0x120 [ 432.907981][ T9879] __kmalloc_noprof+0xfc/0x840 [ 432.907996][ T9879] ? rcu_is_watching+0x13/0xc0 [ 432.908014][ T9879] ? tomoyo_realpath_from_path+0xb6/0x690 [ 432.908039][ T9879] tomoyo_realpath_from_path+0xb6/0x690 [ 432.908061][ T9879] tomoyo_check_open_permission+0x2af/0x3c0 [ 432.908077][ T9879] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 432.908094][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.908111][ T9879] ? hook_file_open+0x248/0x8e0 [ 432.908140][ T9879] tomoyo_file_open+0x6b/0x90 [ 432.908152][ T9879] security_file_open+0xb5/0x1e0 [ 432.908171][ T9879] do_dentry_open+0x588/0x14d0 [ 432.908190][ T9879] vfs_open+0x82/0x3f0 [ 432.908209][ T9879] dentry_open+0x71/0xd0 [ 432.908227][ T9879] acct_on+0x181/0xa00 [ 432.908240][ T9879] ? __pfx_acct_on+0x10/0x10 [ 432.908252][ T9879] ? bpf_lsm_capable+0x9/0x10 [ 432.908267][ T9879] __x64_sys_acct+0x81/0x1e0 [ 432.908278][ T9879] ? lockdep_hardirqs_on+0x7d/0x110 [ 432.908295][ T9879] do_syscall_64+0x123/0x790 [ 432.908313][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.908325][ T9879] RIP: 0033:0x7f595179e1d9 [ 432.908335][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.908347][ T9879] RSP: 002b:00007f595260c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 432.908359][ T9879] RAX: ffffffffffffffda RBX: 00007f5951a25fa0 RCX: 00007f595179e1d9 [ 432.908366][ T9879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 432.908373][ T9879] RBP: 00007f5951835888 R08: 0000000000000000 R09: 0000000000000000 [ 432.908380][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.908388][ T9879] R13: 00007f5951a26038 R14: 00007f5951a25fa0 R15: 00007ffe9a1c0658 [ 432.908406][ T9879] [ 432.908411][ T9879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.977011][ T8133] usb usb3-port1: unable to enumerate USB device [ 433.247372][ T31] audit: type=1400 audit(1791680954.619:698): avc: denied { write } for pid=9883 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.255317][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 433.255354][ T9884] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1117'. [ 433.255371][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 433.258644][ T9756] hsr_slave_0: entered promiscuous mode [ 433.264763][ T9756] hsr_slave_1: entered promiscuous mode [ 433.266195][ T9756] debugfs: 'hsr0' already exists in 'hsr' [ 433.266223][ T9756] Cannot create hsr debugfs directory [ 433.272649][ T9887] binder: 9886:9887 ioctl c0306201 200000000680 returned -14 [ 433.281032][ T9887] binder: 9886:9887 ioctl c0306201 2000000007c0 returned -14 [ 433.427379][ T989] hsr_slave_0: left promiscuous mode [ 433.431519][ T989] hsr_slave_1: left promiscuous mode [ 433.452599][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.452623][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.459371][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.459392][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.534441][ T989] veth1_macvtap: left promiscuous mode [ 433.534483][ T989] veth0_macvtap: left promiscuous mode [ 433.537522][ T989] veth1_vlan: left promiscuous mode [ 433.537603][ T989] veth0_vlan: left promiscuous mode [ 433.728074][ T9892] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 434.010473][ T9917] Bluetooth: MGMT ver 1.23 [ 434.010525][ T9917] Bluetooth: hci1: too big key_count value 29096 [ 434.710133][ T31] audit: type=1326 audit(1791680956.059:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.0.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 434.710189][ T31] audit: type=1326 audit(1791680956.059:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.0.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 434.710231][ T31] audit: type=1326 audit(1791680956.059:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.0.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 434.710274][ T31] audit: type=1326 audit(1791680956.059:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.0.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 434.710311][ T31] audit: type=1326 audit(1791680956.059:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.0.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e619e1d9 code=0x7ffc0000 [ 434.981239][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 435.006983][ T9938] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 435.199576][ T9938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.257790][ T9940] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 435.493967][ T9949] FAULT_INJECTION: forcing a failure. [ 435.493967][ T9949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.494041][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.1.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.494069][ T9949] Tainted: [L]=SOFTLOCKUP [ 435.494076][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 435.494088][ T9949] Call Trace: [ 435.494095][ T9949] [ 435.494103][ T9949] dump_stack_lvl+0x100/0x190 [ 435.494138][ T9949] should_fail_ex.cold+0x5/0xa [ 435.494163][ T9949] ? prepare_alloc_pages+0x16d/0x5b0 [ 435.494195][ T9949] should_fail_alloc_page+0xeb/0x140 [ 435.494225][ T9949] prepare_alloc_pages+0x1f0/0x5b0 [ 435.494258][ T9949] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 435.494295][ T9949] ? lock_acquire+0x1d1/0x380 [ 435.494317][ T9949] ? finish_task_switch.isra.0+0x149/0x10d0 [ 435.494342][ T9949] ? find_held_lock+0x2b/0x80 [ 435.494369][ T9949] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 435.494396][ T9949] ? mark_held_locks+0x40/0x70 [ 435.494418][ T9949] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 435.494442][ T9949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 435.494470][ T9949] ? rcu_is_watching+0x13/0xc0 [ 435.494498][ T9949] ? trace_sched_exit_tp+0x120/0x160 [ 435.494525][ T9949] ? __schedule+0x126b/0x6920 [ 435.494549][ T9949] ? rcu_is_watching+0x13/0xc0 [ 435.494586][ T9949] ? __lock_acquire+0x5c0/0x1f40 [ 435.494613][ T9949] ? __pfx___schedule+0x10/0x10 [ 435.494637][ T9949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.494664][ T9949] ? policy_nodemask+0xed/0x4f0 [ 435.494696][ T9949] alloc_pages_mpol+0x201/0x550 [ 435.494726][ T9949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 435.494752][ T9949] ? mark_held_locks+0x40/0x70 [ 435.494774][ T9949] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 435.494800][ T9949] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.494831][ T9949] folio_alloc_mpol_noprof+0x36/0x260 [ 435.494855][ T9949] shmem_alloc_folio+0x135/0x160 [ 435.494885][ T9949] shmem_alloc_and_add_folio+0x371/0xd40 [ 435.494914][ T9949] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 435.494938][ T9949] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 435.494967][ T9949] shmem_get_folio_gfp+0x75b/0x1980 [ 435.494996][ T9949] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 435.495030][ T9949] shmem_write_begin+0x1a4/0x420 [ 435.495055][ T9949] ? __pfx_shmem_write_begin+0x10/0x10 [ 435.495078][ T9949] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 435.495108][ T9949] generic_perform_write+0x292/0xa40 [ 435.495145][ T9949] ? __pfx_generic_perform_write+0x10/0x10 [ 435.495174][ T9949] ? mnt_put_write_access_file+0x4e/0x100 [ 435.495203][ T9949] ? file_update_time_flags+0x38c/0x520 [ 435.495230][ T9949] shmem_file_write_iter+0x10e/0x140 [ 435.495256][ T9949] iter_file_splice_write+0x830/0x10b0 [ 435.495309][ T9949] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.495341][ T9949] ? irqentry_exit+0x24d/0xa10 [ 435.495367][ T9949] ? lockdep_hardirqs_on+0x7d/0x110 [ 435.495412][ T9949] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.495444][ T9949] do_splice+0x109c/0x1fa0 [ 435.495463][ T9949] ? __lock_acquire+0x5c0/0x1f40 [ 435.495488][ T9949] ? ksys_write+0x190/0x250 [ 435.495519][ T9949] ? __pfx_do_splice+0x10/0x10 [ 435.495536][ T9949] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 435.495563][ T9949] ? __fget_files+0x34/0x3d0 [ 435.495591][ T9949] ? find_held_lock+0x2b/0x80 [ 435.495622][ T9949] __do_splice+0x33b/0x370 [ 435.495644][ T9949] ? __pfx___do_splice+0x10/0x10 [ 435.495673][ T9949] __x64_sys_splice+0x187/0x250 [ 435.495697][ T9949] do_syscall_64+0x123/0x790 [ 435.495727][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.495748][ T9949] RIP: 0033:0x7f1c66d9e1d9 [ 435.495764][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.495781][ T9949] RSP: 002b:00007f1c67cc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 435.495800][ T9949] RAX: ffffffffffffffda RBX: 00007f1c67026180 RCX: 00007f1c66d9e1d9 [ 435.495813][ T9949] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 435.495825][ T9949] RBP: 00007f1c67cc2090 R08: 00000000088000cc R09: 0000000000000000 [ 435.495837][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.495848][ T9949] R13: 00007f1c67026218 R14: 00007f1c67026180 R15: 00007ffe4263ca88 [ 435.495879][ T9949] [ 436.863262][ T9959] program syz.2.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.978426][ T31] audit: type=1400 audit(1791680960.349:704): avc: denied { bind } for pid=9981 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.979096][ T31] audit: type=1400 audit(1791680960.349:705): avc: denied { listen } for pid=9981 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.981056][ T31] audit: type=1400 audit(1791680960.349:706): avc: denied { connect } for pid=9981 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.292896][ T9756] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.387864][ T31] audit: type=1400 audit(1791680960.759:707): avc: denied { write } for pid=9957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.393199][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.423183][ T9756] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.476313][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.483843][ T9756] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.540903][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.586341][ T9756] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.705024][T10000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1143'. [ 439.723809][ T9756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.795299][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.931032][T10000] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 439.992089][T10000] bond1 (unregistering): Released all slaves [ 440.043774][ T31] audit: type=1400 audit(1791680961.419:708): avc: denied { ioctl } for pid=10003 comm="syz.0.1144" path="socket:[31302]" dev="sockfs" ino=31302 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.086704][ T31] audit: type=1400 audit(1791680961.459:709): avc: denied { write } for pid=10002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.437882][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.466016][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 440.666054][ T9756] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.703019][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.703116][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.717376][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.717469][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.820414][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1136'. [ 443.391898][ T5723] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 443.471985][ T8128] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 443.474055][ T31] audit: type=1400 audit(1791680964.849:710): avc: denied { write } for pid=10023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.547452][ T5723] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 443.564520][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.564541][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.564563][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.566165][ T5723] usb 3-1: config 0 descriptor?? [ 443.704231][ T8128] usb 6-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 443.705312][ T8128] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 443.705353][ T8128] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 4 [ 443.705379][ T8128] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 443.708954][ T8128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.708981][ T8128] usb 6-1: Product: Ļ痢媙︩롱陒訉ᘾ멻䖏㎃ꓘᔾ刺Ｇ諺ㇻ㎘墓뤑⟐廎羦ᤵ⡃꭛‾켋ྋ꾙ṵ鯑렗缳旝쒚壾䦦噃ﰎᄫߚ໽בֿ醰Ἡመ㭺ᘚ쯹펂㫇瀇会ᗱ澝쁔椧ꆌ쑑숊ꯙ悷摢讋仜괭氜䓇맟ﻪᾺ붞ﬤꮓ㷍䪴ꀞヘ뤑ネ䒝ꯌ寄錄쁺漙큯 [ 443.709015][ T8128] usb 6-1: Manufacturer: Д [ 443.709030][ T8128] usb 6-1: SerialNumber: 、 [ 445.451975][ T31] audit: type=1400 audit(1791680966.819:711): avc: denied { write } for pid=10078 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.544528][ T8128] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 445.544616][ T8128] gspca_stv06xx: st6422 sensor detected [ 445.572400][ T5723] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 445.601737][ T5723] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input14 [ 445.692877][ T31] audit: type=1400 audit(1791680967.069:712): avc: denied { append } for pid=10082 comm="syz.1.1156" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 445.753417][ T31] audit: type=1400 audit(1791680967.129:713): avc: denied { create } for pid=10082 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.771405][ T31] audit: type=1400 audit(1791680967.139:714): avc: denied { sys_module } for pid=9756 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 445.786792][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.805408][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 445.834467][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.852419][ T31] audit: type=1400 audit(1791680967.229:715): avc: denied { write } for pid=10082 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 445.917976][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 446.036931][ T31] audit: type=1400 audit(1791680967.409:716): avc: denied { read } for pid=5600 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.036977][ T31] audit: type=1400 audit(1791680967.409:717): avc: denied { open } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.037016][ T31] audit: type=1400 audit(1791680967.409:718): avc: denied { ioctl } for pid=5600 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.207611][ T9756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.453219][T10093] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 447.391965][ T8128] STV06xx 6-1:1.0: probe with driver STV06xx failed with error -71 [ 447.393169][ T8128] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 447.395276][ T5723] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 447.638692][ T31] audit: type=1400 audit(1791680969.009:719): avc: denied { mount } for pid=10094 comm="syz.0.1151" name="/" dev="ramfs" ino=31399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 447.843918][ T4919] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 447.843938][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.843957][ T4919] Tainted: [L]=SOFTLOCKUP [ 447.843961][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 447.843974][ T4919] Workqueue: hci5 hci_rx_work [ 447.843994][ T4919] Call Trace: [ 447.843998][ T4919] [ 447.844004][ T4919] dump_stack_lvl+0x100/0x190 [ 447.844027][ T4919] sysfs_warn_dup.cold+0x1c/0x28 [ 447.844047][ T4919] sysfs_create_dir_ns+0x24b/0x2b0 [ 447.844060][ T4919] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 447.844072][ T4919] ? find_held_lock+0x2b/0x80 [ 447.844091][ T4919] ? kobject_add_internal+0x25f/0x930 [ 447.844103][ T4919] ? kobject_add_internal+0x25f/0x930 [ 447.844118][ T4919] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.844135][ T4919] kobject_add_internal+0x2c8/0x930 [ 447.844150][ T4919] kobject_add+0x16a/0x1e0 [ 447.844162][ T4919] ? __pfx_kobject_add+0x10/0x10 [ 447.844174][ T4919] ? class_to_subsys+0x10f/0x150 [ 447.844190][ T4919] ? kobject_put+0xb9/0x640 [ 447.844200][ T4919] ? _raw_spin_unlock+0x28/0x50 [ 447.844219][ T4919] device_add+0x294/0x1970 [ 447.844232][ T4919] ? __pfx_dev_set_name+0x10/0x10 [ 447.844248][ T4919] ? __pfx_device_add+0x10/0x10 [ 447.844262][ T4919] ? mgmt_send_event_skb+0x2fb/0x460 [ 447.844281][ T4919] hci_conn_add_sysfs+0x1a3/0x260 [ 447.844298][ T4919] le_conn_complete_evt+0x122f/0x2130 [ 447.844316][ T4919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 447.844329][ T4919] ? hci_event_packet+0x186/0xcd0 [ 447.844346][ T4919] hci_le_conn_complete_evt+0x23c/0x3a0 [ 447.844364][ T4919] ? skb_pull_data+0x15f/0x1e0 [ 447.844381][ T4919] hci_le_meta_evt+0x34a/0x5f0 [ 447.844395][ T4919] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 447.844411][ T4919] hci_event_packet+0x51c/0xcd0 [ 447.844425][ T4919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 447.844441][ T4919] ? __pfx_hci_event_packet+0x10/0x10 [ 447.844459][ T4919] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.844478][ T4919] hci_rx_work+0x451/0xfc0 [ 447.844494][ T4919] process_one_work+0xac7/0x1b10 [ 447.844520][ T4919] ? __pfx_process_one_work+0x10/0x10 [ 447.844539][ T4919] ? lock_acquire+0x1d1/0x380 [ 447.844557][ T4919] ? __pfx_hci_rx_work+0x10/0x10 [ 447.844571][ T4919] worker_thread+0x5ef/0xe50 [ 447.844588][ T4919] ? kthread+0x13a/0x450 [ 447.844604][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 447.844614][ T4919] kthread+0x373/0x450 [ 447.844629][ T4919] ? __pfx_kthread+0x10/0x10 [ 447.844646][ T4919] ret_from_fork+0x730/0xd60 [ 447.844661][ T4919] ? __pfx_ret_from_fork+0x10/0x10 [ 447.844675][ T4919] ? __switch_to+0x800/0x10f0 [ 447.844691][ T4919] ? __pfx_kthread+0x10/0x10 [ 447.844709][ T4919] ret_from_fork_asm+0x1a/0x30 [ 447.844730][ T4919] [ 447.844747][ T4919] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 447.844772][ T4919] Bluetooth: hci5: failed to register connection device [ 448.403241][ T8128] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 448.475839][ T8128] usb 6-1: USB disconnect, device number 12 [ 448.727987][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 448.728054][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'. [ 448.842111][ T8128] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 449.302497][T10087] udevd[10087]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.432190][ T8128] usb 6-1: Using ep0 maxpacket: 16 [ 449.491632][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 449.684194][ T8128] usb 6-1: unable to get BOS descriptor or descriptor too short [ 449.684228][ T8128] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=4f.77 [ 449.744816][ T8128] usb 6-1: config 2 has an invalid interface number: 4 but max is 1 [ 449.744846][ T8128] usb 6-1: config 2 has an invalid interface number: 200 but max is 1 [ 449.744866][ T8128] usb 6-1: config 2 has no interface number 0 [ 449.744885][ T8128] usb 6-1: config 2 has no interface number 1 [ 449.744930][ T8128] usb 6-1: config 2 interface 4 altsetting 9 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 449.744958][ T8128] usb 6-1: config 2 interface 4 has no altsetting 0 [ 449.744978][ T8128] usb 6-1: config 2 interface 200 has no altsetting 0 [ 449.831745][ T8128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.831765][ T8128] usb 6-1: Product: syz [ 449.831775][ T8128] usb 6-1: Manufacturer: syz [ 449.831783][ T8128] usb 6-1: SerialNumber: syz [ 449.881790][ T5723] usb 3-1: USB disconnect, device number 20 [ 449.943956][ T31] audit: type=1400 audit(1791680971.319:720): avc: denied { read } for pid=10124 comm="syz.2.1164" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 452.613839][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 452.613853][ T31] audit: type=1400 audit(1791680973.989:722): avc: denied { write } for pid=10095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.924027][ T31] audit: type=1400 audit(1791680974.259:723): avc: denied { create } for pid=10135 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.816666][ T8128] em28xx 6-1:2.4: New device syz syz @ 480 Mbps (eb1a:e357, interface 4, class 4) [ 453.816742][ T8128] em28xx 6-1:2.4: Audio interface 4 found (Vendor Class) [ 453.816799][ T8128] em28xx 6-1:2.4: em28xx: device seems to have vendor AND usb audio class interfaces ! [ 453.816799][ T8128] The vendor interface will be ignored. Please contact the developers [ 454.293297][ T8128] em28xx 6-1:2.4: unknown em28xx chip ID (0) [ 454.348513][ T8128] em28xx 6-1:2.4: Config register raw data: 0xfffffffb [ 454.355845][ T8128] em28xx 6-1:2.4: AC97 chip type couldn't be determined [ 454.355869][ T8128] em28xx 6-1:2.4: No AC97 audio processor [ 454.559154][ T8128] em28xx 6-1:2.200: audio device (eb1a:e357): interface 200, class 1 [ 454.590470][T10145] netlink: 'syz.1.1167': attribute type 23 has an invalid length. [ 454.595843][ T8128] usb 6-1: USB disconnect, device number 13 [ 454.597217][ T8128] em28xx 6-1:2.4: Disconnecting em28xx [ 454.691720][ T9756] veth0_vlan: entered promiscuous mode [ 454.708073][ T9756] veth1_vlan: entered promiscuous mode [ 454.849407][ T31] audit: type=1400 audit(1791680976.219:724): avc: denied { write } for pid=10147 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.914582][ T9756] veth0_macvtap: entered promiscuous mode [ 454.933045][ T9756] veth1_macvtap: entered promiscuous mode [ 454.992937][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.182081][ T8128] em28xx: Freeing device [ 456.053905][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.943053][ T5844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.943107][ T5844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.943141][ T5844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.943175][ T5844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.300273][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 458.205576][ T5844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.205598][ T5844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.510640][ T31] audit: type=1400 audit(1791680979.879:725): avc: denied { ioctl } for pid=10158 comm="syz.5.1172" path="socket:[32112]" dev="sockfs" ino=32112 ioctlcmd=0x5865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.558548][T10163] netlink: 'syz.0.1173': attribute type 3 has an invalid length. [ 458.559182][T10159] Unsupported ieee802154 address type: 0 [ 458.559922][ T4919] Bluetooth: hci5: unexpected event for opcode 0x2029 [ 458.610261][ T5843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.610285][ T5843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.787971][ T31] audit: type=1400 audit(1791680980.159:726): avc: denied { mounton } for pid=9756 comm="syz-executor" path="/root/syzkaller.K6rBWb/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 459.032868][ T5723] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 459.181724][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 459.185505][ T5723] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 459.187899][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 459.199945][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.199974][ T5723] usb 2-1: Product: syz [ 459.199989][ T5723] usb 2-1: Manufacturer: syz [ 459.200004][ T5723] usb 2-1: SerialNumber: syz [ 459.213227][ T5723] usb 2-1: config 0 descriptor?? [ 459.229299][ T5723] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.229337][ T5723] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 460.284904][ T5723] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 462.184144][ T5723] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.184185][ T5723] em28xx 2-1:0.0: board has no eeprom [ 462.286061][T10199] binder: 10197:10199 ioctl c0306201 200000000680 returned -14 [ 462.294667][T10199] binder: 10197:10199 ioctl c0306201 2000000007c0 returned -14 [ 462.313342][ T5723] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.313374][ T5723] em28xx 2-1:0.0: dvb set to bulk mode. [ 462.314184][ T8128] em28xx 2-1:0.0: Binding DVB extension [ 464.136927][ T9521] usb 2-1: USB disconnect, device number 28 [ 464.151263][ T9521] em28xx 2-1:0.0: Disconnecting em28xx [ 464.898841][ T8128] em28xx 2-1:0.0: Registering input extension [ 464.899427][ T9521] em28xx 2-1:0.0: Closing input extension [ 464.979382][ T9521] em28xx: Freeing device [ 465.449249][T10213] program syz.6.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.151683][ T8131] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 466.321911][ T8131] usb 1-1: Using ep0 maxpacket: 32 [ 466.329438][ T8131] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 466.347258][ T8131] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 466.347288][ T8131] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 466.347308][ T8131] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 466.347330][ T8131] usb 1-1: config 1 has no interface number 0 [ 466.347368][ T8131] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.347392][ T8131] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 466.347433][ T8131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.391068][ T8131] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 467.054236][T10224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=10224 comm=syz.2.1187 [ 467.181905][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 467.442035][ T31] audit: type=1400 audit(1791680988.809:727): avc: denied { bind } for pid=10208 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.966605][ T8131] snd_usb_pod 1-1:1.1: set_interface failed [ 467.966785][ T8131] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 467.966958][ T8131] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 467.981403][ T8131] usb 1-1: USB disconnect, device number 30 [ 468.231781][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 468.560289][T10242] ip_tables: iptables: counters copy to user failed while replacing table [ 468.581348][T10242] ip_tables: iptables: counters copy to user failed while replacing table [ 468.826648][ T31] audit: type=1400 audit(1791680990.199:728): avc: denied { write } for pid=10247 comm="syz.1.1192" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 468.827999][T10248] netlink: 'syz.5.1179': attribute type 23 has an invalid length. [ 468.851753][ T31] audit: type=1400 audit(1791680990.219:729): avc: denied { map } for pid=10247 comm="syz.1.1192" path="socket:[32853]" dev="sockfs" ino=32853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 469.517740][T10256] program syz.0.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.352224][ T31] audit: type=1400 audit(1791680991.689:730): avc: denied { write } for pid=10231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.430634][ T9521] libceph: connect (1)0.0.0.0:6789 error -22 [ 470.444049][ T9521] libceph: mon0 (1)0.0.0.0:6789 connect error [ 470.445987][ T5723] libceph: connect (1)127.0.0.1:6789 error -101 [ 470.446722][ T5723] libceph: mon0 (1)127.0.0.1:6789 connect error [ 470.458839][T10250] ceph: No mds server is up or the cluster is laggy [ 470.466780][T10252] ceph: No mds server is up or the cluster is laggy [ 470.762733][ T10] libceph: connect (1)0.0.0.0:6789 error -22 [ 470.762908][ T10] libceph: mon0 (1)0.0.0.0:6789 connect error [ 471.822834][ T10] libceph: connect (1)0.0.0.0:6789 error -22 [ 471.823007][ T10] libceph: mon0 (1)0.0.0.0:6789 connect error [ 471.878133][ T8131] libceph: connect (1)127.0.0.1:6789 error -101 [ 471.878910][ T8131] libceph: mon0 (1)127.0.0.1:6789 connect error [ 472.033516][ T31] audit: type=1400 audit(1791680993.389:731): avc: denied { write } for pid=10271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.867454][T10290] ip_tables: iptables: counters copy to user failed while replacing table [ 473.882703][T10290] ip_tables: iptables: counters copy to user failed while replacing table [ 474.653860][T10307] program syz.6.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.014237][ T8131] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 476.231637][ T31] audit: type=1400 audit(1791680997.589:732): avc: denied { write } for pid=10283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.302642][ T8131] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 476.308107][ T8131] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.308153][ T8131] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.308177][ T8131] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 476.308203][ T8131] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.308244][ T8131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.449055][ T31] audit: type=1400 audit(1791680997.819:733): avc: denied { write } for pid=10328 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.501848][ T8131] gud 1-1:1.0: Failed to add properties (error=-71) [ 478.501886][ T8131] gud 1-1:1.0: probe with driver gud failed with error -71 [ 478.658668][ T8131] usb 1-1: USB disconnect, device number 31 [ 478.994980][T10358] netlink: 'syz.0.1215': attribute type 11 has an invalid length. [ 479.265141][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 479.265174][T10365] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1217'. [ 479.265185][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 479.366145][ T31] audit: type=1400 audit(1791681000.739:734): avc: denied { write } for pid=10335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.366950][T10366] FAULT_INJECTION: forcing a failure. [ 479.366950][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 479.366976][T10366] CPU: 1 UID: 0 PID: 10366 Comm: syz.5.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.366994][T10366] Tainted: [L]=SOFTLOCKUP [ 479.366998][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.367006][T10366] Call Trace: [ 479.367011][T10366] [ 479.367016][T10366] dump_stack_lvl+0x100/0x190 [ 479.367038][T10366] should_fail_ex.cold+0x5/0xa [ 479.367059][T10366] should_failslab+0xc2/0x120 [ 479.367078][T10366] __kvmalloc_node_noprof+0x113/0x9b0 [ 479.367094][T10366] ? __pfx___mutex_lock+0x10/0x10 [ 479.367110][T10366] ? __mutex_lock+0x26c/0x1bd0 [ 479.367143][T10366] ? nf_hook_entries_grow+0x255/0x870 [ 479.367163][T10366] nf_hook_entries_grow+0x255/0x870 [ 479.367187][T10366] __nf_register_net_hook+0x112/0x780 [ 479.367206][T10366] nf_register_net_hook+0xdb/0x170 [ 479.367225][T10366] nf_register_net_hooks+0x5d/0xd0 [ 479.367245][T10366] nf_ct_netns_do_get+0x225/0x610 [ 479.367258][T10366] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 479.367271][T10366] ? xt_find_match+0x1dc/0x280 [ 479.367288][T10366] nf_ct_netns_get+0x3d/0x160 [ 479.367299][T10366] connmark_mt_check+0x60/0xd0 [ 479.367316][T10366] ? __pfx_connmark_mt_check+0x10/0x10 [ 479.367332][T10366] xt_check_match+0x117/0x1c0 [ 479.367347][T10366] find_check_entry.isra.0+0x356/0xa00 [ 479.367364][T10366] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 479.367383][T10366] ? kasan_quarantine_put+0x104/0x240 [ 479.367400][T10366] ? translate_table+0xbd8/0x1770 [ 479.367411][T10366] ? kfree+0x22b/0x6d0 [ 479.367422][T10366] ? xt_check_table_hooks+0x206/0x330 [ 479.367437][T10366] translate_table+0xcb9/0x1770 [ 479.367458][T10366] ? __pfx_translate_table+0x10/0x10 [ 479.367475][T10366] do_ip6t_set_ctl+0x689/0xd00 [ 479.367487][T10366] ? nf_sockopt_find.isra.0+0x222/0x290 [ 479.367499][T10366] ? nf_sockopt_find.isra.0+0x222/0x290 [ 479.367514][T10366] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 479.367529][T10366] ? __mutex_unlock_slowpath+0x35d/0x930 [ 479.367548][T10366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.367580][T10366] ? nf_sockopt_find.isra.0+0x222/0x290 [ 479.367595][T10366] nf_setsockopt+0x8d/0xf0 [ 479.367611][T10366] ipv6_setsockopt+0x135/0x170 [ 479.367627][T10366] rawv6_setsockopt+0xee/0x5a0 [ 479.367645][T10366] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 479.367664][T10366] ? selinux_socket_setsockopt+0x6a/0x80 [ 479.367680][T10366] ? sock_common_setsockopt+0x2e/0xf0 [ 479.367695][T10366] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 479.367710][T10366] do_sock_setsockopt+0xf3/0x1d0 [ 479.367725][T10366] __sys_setsockopt+0x195/0x220 [ 479.367740][T10366] __x64_sys_setsockopt+0xbd/0x160 [ 479.367750][T10366] ? do_syscall_64+0xae/0x790 [ 479.367766][T10366] ? lockdep_hardirqs_on+0x7d/0x110 [ 479.367782][T10366] do_syscall_64+0x123/0x790 [ 479.367800][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.367812][T10366] RIP: 0033:0x7f595179e1d9 [ 479.367824][T10366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.367835][T10366] RSP: 002b:00007f595260c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.367847][T10366] RAX: ffffffffffffffda RBX: 00007f5951a25fa0 RCX: 00007f595179e1d9 [ 479.367855][T10366] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 479.367863][T10366] RBP: 00007f5951835888 R08: 00000000000006d0 R09: 0000000000000000 [ 479.367870][T10366] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 479.367877][T10366] R13: 00007f5951a26038 R14: 00007f5951a25fa0 R15: 00007ffe9a1c0658 [ 479.367895][T10366] [ 479.368179][T10366] cannot load conntrack support for proto=10 [ 479.996813][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 479.996834][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 479.998327][T10378] FAULT_INJECTION: forcing a failure. [ 479.998327][T10378] name failslab, interval 1, probability 0, space 0, times 0 [ 479.998378][T10378] CPU: 0 UID: 0 PID: 10378 Comm: syz.0.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.998407][T10378] Tainted: [L]=SOFTLOCKUP [ 479.998413][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.998425][T10378] Call Trace: [ 479.998432][T10378] [ 479.998440][T10378] dump_stack_lvl+0x100/0x190 [ 479.998476][T10378] should_fail_ex.cold+0x5/0xa [ 479.998506][T10378] should_failslab+0xc2/0x120 [ 479.998536][T10378] __kmalloc_cache_noprof+0x91/0x6d0 [ 479.998560][T10378] ? alloc_netdev_mqs+0xe3c/0x15c0 [ 479.998587][T10378] alloc_netdev_mqs+0xe3c/0x15c0 [ 479.998615][T10378] rtnl_create_link+0xc13/0xf80 [ 479.998642][T10378] rtnl_newlink+0x15bc/0x2620 [ 479.998676][T10378] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.998704][T10378] ? avc_has_perm_noaudit+0x56/0x470 [ 479.998728][T10378] ? find_held_lock+0x2b/0x80 [ 479.998759][T10378] ? avc_has_perm_noaudit+0x11e/0x470 [ 479.998780][T10378] ? avc_has_perm_noaudit+0x11e/0x470 [ 479.998833][T10378] ? lock_acquire+0x1d1/0x380 [ 479.998855][T10378] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 479.998878][T10378] ? find_held_lock+0x2b/0x80 [ 479.998904][T10378] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 479.998926][T10378] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 479.998949][T10378] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.998973][T10378] rtnetlink_rcv_msg+0x95e/0xe90 [ 479.998998][T10378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.999030][T10378] ? ref_tracker_free+0x37e/0x6c0 [ 479.999056][T10378] netlink_rcv_skb+0x159/0x420 [ 479.999086][T10378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.999111][T10378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.999151][T10378] ? netlink_deliver_tap+0x1ae/0xcc0 [ 479.999186][T10378] netlink_unicast+0x585/0x850 [ 479.999218][T10378] ? __pfx_netlink_unicast+0x10/0x10 [ 479.999256][T10378] netlink_sendmsg+0x8b0/0xda0 [ 479.999290][T10378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.999323][T10378] ? selinux_socket_sendmsg+0x198/0x2f0 [ 479.999356][T10378] ____sys_sendmsg+0xa4d/0xbe0 [ 479.999379][T10378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.999407][T10378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.999432][T10378] ? _kstrtoull+0x144/0x200 [ 479.999453][T10378] ? __pfx__kstrtoull+0x10/0x10 [ 479.999480][T10378] ___sys_sendmsg+0x190/0x1e0 [ 479.999508][T10378] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.999547][T10378] ? __fget_files+0x34/0x3d0 [ 479.999598][T10378] __sys_sendmmsg+0x20c/0x440 [ 479.999624][T10378] ? __pfx___sys_sendmmsg+0x10/0x10 [ 479.999643][T10378] ? ksys_write+0x190/0x250 [ 479.999691][T10378] ? fput+0x7c/0x100 [ 479.999724][T10378] ? ksys_write+0x1ac/0x250 [ 479.999748][T10378] ? __pfx_ksys_write+0x10/0x10 [ 479.999778][T10378] __x64_sys_sendmmsg+0x9c/0x100 [ 479.999816][T10378] ? lockdep_hardirqs_on+0x7d/0x110 [ 479.999844][T10378] do_syscall_64+0x123/0x790 [ 479.999875][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.999897][T10378] RIP: 0033:0x7fc3e619e1d9 [ 479.999915][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.999934][T10378] RSP: 002b:00007fc3e709c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 479.999954][T10378] RAX: ffffffffffffffda RBX: 00007fc3e6425fa0 RCX: 00007fc3e619e1d9 [ 479.999968][T10378] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 479.999980][T10378] RBP: 00007fc3e709c090 R08: 0000000000000000 R09: 0000000000000000 [ 479.999992][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.000004][T10378] R13: 00007fc3e6426038 R14: 00007fc3e6425fa0 R15: 00007ffc92490698 [ 480.000035][T10378] [ 480.262959][ T31] audit: type=1400 audit(1791681001.629:735): avc: denied { remount } for pid=10379 comm="syz.6.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 480.504290][ T31] audit: type=1400 audit(1791681001.879:736): avc: denied { write } for pid=10377 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.803328][ T9521] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 481.043367][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 481.071957][ T5605] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 481.090393][ T4919] Bluetooth: hci0: command 0x0406 tx timeout [ 481.482726][ T9521] usb 1-1: Using ep0 maxpacket: 8 [ 481.483511][ T9521] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 481.487744][ T9521] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 481.487782][ T9521] usb 1-1: config 0 interface 0 has no altsetting 0 [ 481.487815][ T9521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.497501][ T9521] usb 1-1: config 0 descriptor?? [ 483.078951][ T9521] usbhid 1-1:0.0: can't add hid device: -71 [ 483.079017][ T9521] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 483.112771][ T9521] usb 1-1: USB disconnect, device number 32 [ 483.510843][ T5605] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 485.004142][T10431] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 485.080971][T10434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1235'. [ 485.184550][ T31] audit: type=1400 audit(1791681006.559:737): avc: denied { write } for pid=10402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.314783][ T31] audit: type=1400 audit(1791681006.689:738): avc: denied { write } for pid=10442 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.372276][T10435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10435 comm=syz.1.1236 [ 485.421018][T10435] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 485.468253][T10434] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 485.471664][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 485.649926][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 485.651319][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 485.651370][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.683262][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 485.683291][ T10] usb 7-1: Manufacturer: syz [ 485.700481][ T10] usb 7-1: config 0 descriptor?? [ 485.772929][ T10] rc_core: IR keymap rc-hauppauge not found [ 485.772951][ T10] Registered IR keymap rc-empty [ 485.827437][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 485.854147][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 486.055816][T10434] bond2 (unregistering): Released all slaves [ 486.218716][ T8131] usb 7-1: USB disconnect, device number 2 [ 486.365252][T10435] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 486.706663][T10455] tipc: Enabling of bearer rejected, already enabled [ 486.823698][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 486.987409][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 486.987444][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 487.030750][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.030779][ T10] usb 3-1: Product: syz [ 487.030795][ T10] usb 3-1: Manufacturer: syz [ 487.030811][ T10] usb 3-1: SerialNumber: syz [ 487.067382][ T10] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 487.079728][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 487.094726][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 487.112007][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 487.132615][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 487.191476][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1242'. [ 487.222719][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 487.222743][T10467] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1244'. [ 487.276763][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.331821][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.380995][ C0] usb 3-1: malformed indat packet [ 487.381268][ C0] usb 3-1: malformed indat packet [ 487.381558][ C0] usb 3-1: malformed indat packet [ 487.381785][ C0] usb 3-1: malformed indat packet [ 487.382009][ C0] usb 3-1: malformed indat packet [ 487.382256][ C0] usb 3-1: malformed indat packet [ 487.382491][ C0] usb 3-1: malformed indat packet [ 487.382731][ C0] usb 3-1: malformed indat packet [ 487.630613][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1229'. [ 488.955481][ T8129] usb 3-1: USB disconnect, device number 21 [ 488.991332][ T8129] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 489.009945][ T8129] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 489.035417][ T8129] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 489.699032][ T8129] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 489.716468][ T8129] keyspan 3-1:1.0: device disconnected [ 490.689201][T10496] netlink: 'syz.6.1253': attribute type 4 has an invalid length. [ 491.578004][T10509] netlink: 'syz.1.1260': attribute type 39 has an invalid length. [ 491.706376][ T31] audit: type=1400 audit(1791681013.079:739): avc: denied { mounton } for pid=10510 comm="syz.2.1259" path="/" dev="tmpfs" ino=1409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 491.739024][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 491.979710][ T31] audit: type=1400 audit(1791681013.349:740): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979754][ T31] audit: type=1400 audit(1791681013.349:741): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979778][ T31] audit: type=1400 audit(1791681013.349:742): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979802][ T31] audit: type=1400 audit(1791681013.349:743): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979824][ T31] audit: type=1400 audit(1791681013.349:744): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979851][ T31] audit: type=1400 audit(1791681013.349:745): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.979878][ T31] audit: type=1400 audit(1791681013.349:746): avc: denied { search } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 492.041696][ T31] audit: type=1400 audit(1791681013.399:748): avc: denied { read } for pid=10515 comm="syz.5.1262" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 492.041757][ T31] audit: type=1400 audit(1791681013.399:749): avc: denied { read open } for pid=10515 comm="syz.5.1262" path="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 493.051800][T10532] binder: 10531:10532 ioctl c0306201 200000000680 returned -14 [ 493.082476][T10532] binder: 10531:10532 ioctl c0306201 2000000007c0 returned -14 [ 493.474386][ T9521] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 493.757313][ T9521] usb 2-1: Using ep0 maxpacket: 8 [ 493.758877][ T9521] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 493.759847][ T9521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.786936][ T9521] usb 2-1: config 0 descriptor?? [ 493.799099][ T9521] usb 2-1: probing VID:PID(0424:012C) [ 493.904913][T10550] binder: 10543:10550 ioctl c00c6211 0 returned -14 [ 494.206208][ T9521] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 494.206237][ T9521] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 494.206256][ T9521] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 494.206275][ T9521] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 494.206295][ T9521] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 494.252140][ T9521] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 494.259282][ T9521] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 494.938866][ T8131] Process accounting resumed [ 497.410907][ T10] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-110 [ 497.815896][ T9521] usb 2-1: USB disconnect, device number 29 [ 497.923280][T10580] binder: 10576:10580 ioctl c0306201 200000000680 returned -14 [ 497.937601][T10580] binder: 10576:10580 ioctl c0306201 2000000007c0 returned -14 [ 498.002074][ T31] kauditd_printk_skb: 155 callbacks suppressed [ 498.002092][ T31] audit: type=1400 audit(1791681019.379:904): avc: denied { ioctl } for pid=10581 comm="syz.1.1280" path="socket:[33281]" dev="sockfs" ino=33281 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 498.122659][ T31] audit: type=1400 audit(1791681019.489:905): avc: denied { getopt } for pid=10587 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.122704][ T31] audit: type=1400 audit(1791681019.489:906): avc: denied { setopt } for pid=10587 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.129341][ T9521] ------------[ cut here ]------------ [ 498.129360][ T9521] ODEBUG: free active (active state 0) object: ffff888055d5d270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x550 [ 498.129419][ T9521] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:2/9521 [ 498.200887][ T9521] Modules linked in: [ 498.205065][ T9521] CPU: 0 UID: 0 PID: 9521 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.217869][ T9521] Tainted: [L]=SOFTLOCKUP [ 498.222286][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.232468][ T9521] Workqueue: usb_hub_wq hub_event [ 498.237514][ T9521] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 498.243419][ T9521] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d8 bc 19 0d 41 56 48 8b 14 ed 40 67 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 42 15 0f 0d 01 48 83 c4 18 5b 5d 41 5c 41 [ 498.263246][ T9521] RSP: 0018:ffffc900055973c8 EFLAGS: 00010246 [ 498.269334][ T9521] RAX: dffffc0000000000 RBX: ffffc900055974b0 RCX: 0000000000000000 [ 498.277486][ T9521] RDX: ffffffff8c626680 RSI: ffffffff8c626220 RDI: ffffffff92504190 [ 498.285564][ T9521] RBP: 0000000000000003 R08: ffff888055d5d270 R09: ffffffff8bf312a0 [ 498.293603][ T9521] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c626220 [ 498.302364][ T9521] R13: ffffffff8bf312e0 R14: ffffffff88cc29f0 R15: ffffc900055974c8 [ 498.310677][ T9521] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 498.319691][ T9521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.326326][ T9521] CR2: 0000200000001000 CR3: 0000000043813000 CR4: 00000000003526f0 [ 498.334430][ T9521] Call Trace: [ 498.337745][ T9521] [ 498.340681][ T9521] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 498.347428][ T9521] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.353376][ T9521] debug_check_no_obj_freed+0x4da/0x630 [ 498.358956][ T9521] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 498.365150][ T9521] ? ida_free+0x201/0x2f0 [ 498.369531][ T9521] ? wakeup_source_unregister.part.0+0x3e0/0x540 [ 498.376017][ T9521] ? device_release+0xd2/0x270 [ 498.380820][ T9521] ? device_release+0x30/0x270 [ 498.385646][ T9521] kfree+0x3d6/0x6d0 [ 498.389560][ T9521] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 498.395800][ T9521] device_release+0xd2/0x270 [ 498.400408][ T9521] kobject_put+0x1f7/0x640 [ 498.405520][ T9521] put_device+0x1f/0x30 [ 498.409704][ T9521] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 498.415876][ T9521] vub300_disconnect+0x136/0x170 [ 498.420851][ T9521] usb_unbind_interface+0x1dd/0x9e0 [ 498.426129][ T9521] ? __pfx_usb_unbind_interface+0x10/0x10 [ 498.432255][ T9521] device_remove+0x12a/0x180 [ 498.436912][ T9521] device_release_driver_internal+0x44e/0x620 [ 498.443038][ T9521] bus_remove_device+0x2bc/0x560 [ 498.447983][ T9521] ? __pfx_bus_remove_device+0x10/0x10 [ 498.453545][ T9521] ? __pfx_device_remove_attrs+0x10/0x10 [ 498.459218][ T9521] device_del+0x376/0x9b0 [ 498.463614][ T9521] ? __pfx_device_del+0x10/0x10 [ 498.468493][ T9521] ? kobject_put+0xb9/0x640 [ 498.473083][ T9521] usb_disable_device+0x367/0x810 [ 498.478156][ T9521] usb_disconnect+0x2e2/0x9a0 [ 498.482951][ T9521] hub_event+0x1bb1/0x4420 [ 498.487425][ T9521] ? __lock_acquire+0x5c0/0x1f40 [ 498.492423][ T9521] ? __pfx_hub_event+0x10/0x10 [ 498.497198][ T9521] ? print_lock+0x50/0x80 [ 498.501590][ T9521] ? lock_acquire+0x1d1/0x380 [ 498.506904][ T9521] ? process_one_work+0xa2c/0x1b10 [ 498.512416][ T9521] ? process_one_work+0x906/0x1b10 [ 498.517558][ T9521] ? process_one_work+0x906/0x1b10 [ 498.522743][ T9521] process_one_work+0xac7/0x1b10 [ 498.527732][ T9521] ? __pfx_process_one_work+0x10/0x10 [ 498.533141][ T9521] ? lock_acquire+0x1d1/0x380 [ 498.537841][ T9521] ? __pfx_hub_event+0x10/0x10 [ 498.542715][ T9521] worker_thread+0x5ef/0xe50 [ 498.547331][ T9521] ? kthread+0x214/0x450 [ 498.551608][ T9521] ? kthread+0x13a/0x450 [ 498.555862][ T9521] ? __pfx_worker_thread+0x10/0x10 [ 498.560992][ T9521] kthread+0x373/0x450 [ 498.565126][ T9521] ? __pfx_kthread+0x10/0x10 [ 498.569716][ T9521] ret_from_fork+0x730/0xd60 [ 498.574401][ T9521] ? __pfx_ret_from_fork+0x10/0x10 [ 498.579524][ T9521] ? __switch_to+0x800/0x10f0 [ 498.584256][ T9521] ? __pfx_kthread+0x10/0x10 [ 498.588854][ T9521] ret_from_fork_asm+0x1a/0x30 [ 498.594028][ T9521] [ 498.597043][ T9521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.604307][ T9521] CPU: 0 UID: 0 PID: 9521 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.615249][ T9521] Tainted: [L]=SOFTLOCKUP [ 498.619578][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.629638][ T9521] Workqueue: usb_hub_wq hub_event [ 498.634672][ T9521] Call Trace: [ 498.637947][ T9521] [ 498.640889][ T9521] dump_stack_lvl+0x100/0x190 [ 498.645597][ T9521] vpanic+0x553/0x970 [ 498.649583][ T9521] ? __pfx_vpanic+0x10/0x10 [ 498.654080][ T9521] panic+0xd1/0xe0 [ 498.657803][ T9521] ? __pfx_panic+0x10/0x10 [ 498.662233][ T9521] check_panic_on_warn.cold+0x19/0x34 [ 498.667613][ T9521] ? debug_print_object+0x198/0x2b0 [ 498.672807][ T9521] __warn.cold+0x191/0x318 [ 498.677235][ T9521] __report_bug+0x30f/0x440 [ 498.681734][ T9521] ? debug_print_object+0x198/0x2b0 [ 498.686958][ T9521] ? __pfx___report_bug+0x10/0x10 [ 498.692004][ T9521] ? stack_depot_save_flags+0x49a/0x9f0 [ 498.697548][ T9521] report_bug_entry+0xe2/0x290 [ 498.702314][ T9521] ? debug_print_object+0x1a5/0x2b0 [ 498.707511][ T9521] handle_bug+0x1cd/0x2a0 [ 498.711839][ T9521] exc_invalid_op+0x17/0x50 [ 498.716362][ T9521] asm_exc_invalid_op+0x1a/0x20 [ 498.721204][ T9521] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 498.727006][ T9521] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d8 bc 19 0d 41 56 48 8b 14 ed 40 67 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 42 15 0f 0d 01 48 83 c4 18 5b 5d 41 5c 41 [ 498.746618][ T9521] RSP: 0018:ffffc900055973c8 EFLAGS: 00010246 [ 498.752692][ T9521] RAX: dffffc0000000000 RBX: ffffc900055974b0 RCX: 0000000000000000 [ 498.760669][ T9521] RDX: ffffffff8c626680 RSI: ffffffff8c626220 RDI: ffffffff92504190 [ 498.768634][ T9521] RBP: 0000000000000003 R08: ffff888055d5d270 R09: ffffffff8bf312a0 [ 498.776620][ T9521] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c626220 [ 498.784579][ T9521] R13: ffffffff8bf312e0 R14: ffffffff88cc29f0 R15: ffffc900055974c8 [ 498.792576][ T9521] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 498.799259][ T9521] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 498.805938][ T9521] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 498.811786][ T9521] debug_check_no_obj_freed+0x4da/0x630 [ 498.817375][ T9521] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 498.823445][ T9521] ? ida_free+0x201/0x2f0 [ 498.827770][ T9521] ? wakeup_source_unregister.part.0+0x3e0/0x540 [ 498.834144][ T9521] ? device_release+0xd2/0x270 [ 498.838905][ T9521] ? device_release+0x30/0x270 [ 498.843668][ T9521] kfree+0x3d6/0x6d0 [ 498.847576][ T9521] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 498.853726][ T9521] device_release+0xd2/0x270 [ 498.858309][ T9521] kobject_put+0x1f7/0x640 [ 498.862716][ T9521] put_device+0x1f/0x30 [ 498.866895][ T9521] kref_put.constprop.0.isra.0+0x159/0x1d0 [ 498.872701][ T9521] vub300_disconnect+0x136/0x170 [ 498.877662][ T9521] usb_unbind_interface+0x1dd/0x9e0 [ 498.882869][ T9521] ? __pfx_usb_unbind_interface+0x10/0x10 [ 498.888590][ T9521] device_remove+0x12a/0x180 [ 498.893196][ T9521] device_release_driver_internal+0x44e/0x620 [ 498.899277][ T9521] bus_remove_device+0x2bc/0x560 [ 498.904207][ T9521] ? __pfx_bus_remove_device+0x10/0x10 [ 498.909651][ T9521] ? __pfx_device_remove_attrs+0x10/0x10 [ 498.915282][ T9521] device_del+0x376/0x9b0 [ 498.919613][ T9521] ? __pfx_device_del+0x10/0x10 [ 498.924457][ T9521] ? kobject_put+0xb9/0x640 [ 498.928954][ T9521] usb_disable_device+0x367/0x810 [ 498.933974][ T9521] usb_disconnect+0x2e2/0x9a0 [ 498.938642][ T9521] hub_event+0x1bb1/0x4420 [ 498.943054][ T9521] ? __lock_acquire+0x5c0/0x1f40 [ 498.947981][ T9521] ? __pfx_hub_event+0x10/0x10 [ 498.952747][ T9521] ? print_lock+0x50/0x80 [ 498.957084][ T9521] ? lock_acquire+0x1d1/0x380 [ 498.961748][ T9521] ? process_one_work+0xa2c/0x1b10 [ 498.966869][ T9521] ? process_one_work+0x906/0x1b10 [ 498.971993][ T9521] ? process_one_work+0x906/0x1b10 [ 498.977125][ T9521] process_one_work+0xac7/0x1b10 [ 498.982063][ T9521] ? __pfx_process_one_work+0x10/0x10 [ 498.987442][ T9521] ? lock_acquire+0x1d1/0x380 [ 498.992111][ T9521] ? __pfx_hub_event+0x10/0x10 [ 498.996879][ T9521] worker_thread+0x5ef/0xe50 [ 499.001477][ T9521] ? kthread+0x214/0x450 [ 499.005711][ T9521] ? kthread+0x13a/0x450 [ 499.009946][ T9521] ? __pfx_worker_thread+0x10/0x10 [ 499.015040][ T9521] kthread+0x373/0x450 [ 499.019102][ T9521] ? __pfx_kthread+0x10/0x10 [ 499.023686][ T9521] ret_from_fork+0x730/0xd60 [ 499.028282][ T9521] ? __pfx_ret_from_fork+0x10/0x10 [ 499.033408][ T9521] ? __switch_to+0x800/0x10f0 [ 499.038100][ T9521] ? __pfx_kthread+0x10/0x10 [ 499.042681][ T9521] ret_from_fork_asm+0x1a/0x30 [ 499.047442][ T9521] [ 499.050708][ T9521] Kernel Offset: disabled [ 499.055023][ T9521] Rebooting in 86400 seconds..