last executing test programs: 2m29.291580432s ago: executing program 0 (id=116): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000001c0)={r1, 0x3}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1115, &(0x7f0000000040)={0x0, 0x6f51, 0x8000, 0x0, 0xc2, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(r2) getpid() open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r6, 0x8001000000000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x40000, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) landlock_restrict_self(r5, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x2404c001) 2m24.640886371s ago: executing program 0 (id=130): syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xd5, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x85, 0xc, 0xde06, 0xef50, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x3, 0x10000000, 0x1, 0x10001, 0xc6d, 0x78cb, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0xfffffffb, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x6, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0x200000d, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100100, 0x1ff, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x2, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x5ffffffe, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0x12, 0xc, 0x6, 0x5, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x8, 0x0, 0x8, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfffffc01, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x1, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0x3, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0xc, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x5, 0x1, 0x9, 0x6, 0x10000, 0xa, 0xcf9, 0xb, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x3, 0x7, 0x6, 0x3, 0x1, 0x7d71, 0x50, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe45a, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x4, 0xfffffb98, 0xfffffffb, 0x20000000, 0x20002, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x6}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m23.810490712s ago: executing program 0 (id=136): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x5c, 0xd5, 0xf1, 0x40, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x0, 0x24, "", [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x10, 0x5f, 0x43, 0x3}}]}}]}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf25030000000900010073797a32000000008d25aa32522c6987920ed7c7e1f1fc0ec7775acf0cec146d4e265af9efc4e4de8a"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4040) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x14001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x280048c6) 2m18.698697775s ago: executing program 0 (id=155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x56) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x400000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/213, 0xffffffffffffff98}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/14, 0xe}], 0x3}, 0xebc1}, {{&(0x7f0000000680)=@caif=@dbg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f00000007c0)=""/84, 0x4f}], 0x4}, 0x9}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/112, 0x70}, {&(0x7f0000002b40)=""/114, 0x72}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000002c40)=""/11, 0xb}], 0x5}, 0x2}, {{&(0x7f0000002d00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/211, 0xd3}], 0x2, &(0x7f0000002f40)=""/178, 0xb2}, 0x1}, {{&(0x7f0000003000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003080)=""/92, 0x5c}, {&(0x7f0000003100)=""/208, 0xd0}, {&(0x7f0000003200)=""/156, 0x9c}, {&(0x7f00000032c0)=""/73, 0x49}, {&(0x7f0000003340)=""/136, 0x88}], 0x5, &(0x7f0000003480)=""/76, 0x4c}, 0x800}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000004bc0)=[{&(0x7f00000036c0)=""/213}, {&(0x7f00000037c0)=""/190}, {&(0x7f0000004dc0)=""/4101}, {&(0x7f0000004880)=""/234}, {&(0x7f0000004980)=""/143}, {&(0x7f0000004a40)=""/96}, {&(0x7f0000004ac0)=""/8}, {&(0x7f0000004b00)=""/182}]}, 0xa}], 0x5, 0x20, &(0x7f0000003680)={r5, r6+60000000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) 2m17.39687829s ago: executing program 0 (id=157): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d", @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32=r0], 0x44}}, 0x0) pipe(&(0x7f0000000140)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) (async) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1004) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2010, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$binfmt_script(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x124, r7, 0x2, 0x9, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) socket$inet6(0x10, 0x3, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) 2m16.67028958s ago: executing program 0 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x3, 0x8001, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0xffa1}, 0x0) 2m1.442913627s ago: executing program 32 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x3, 0x8001, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0xffa1}, 0x0) 10.40296546s ago: executing program 2 (id=525): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r0, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 9.592599284s ago: executing program 2 (id=529): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0xaf6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$igmp(0x2, 0x3, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2212], 0x8a4) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f0000000340)}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x100, @vifc_lcl_addr=@rand_addr=0x64010100, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004006}, 0x4040844) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0x48) r9 = socket(0x2, 0x3, 0x6) bind$inet(r9, &(0x7f0000000080)={0x2, 0xfffa, @broadcast}, 0x10) sendto$packet(r6, &(0x7f0000000640)="e8b77052", 0x4, 0x40, 0x0, 0x0) connect$can_bcm(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x6, 0xfffffcdc, &(0x7f00000002c0)="49fa8834ffff", &(0x7f0000000180), 0x80a00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.949664787s ago: executing program 5 (id=535): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x1000, 0x2000, 0x0, 0x0}], 0x1}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x804) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r6, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 5.108845996s ago: executing program 3 (id=542): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r0, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.027015678s ago: executing program 4 (id=543): r0 = syz_open_dev$video(&(0x7f0000000180), 0x89f, 0x300) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9, @capture={0x1000, 0x0, {0x0, 0x6a574e8}, 0xfffffffb, 0x3606}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x4a080, 0x204) r1 = syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x35c, 0x0) gettid() unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x0) semtimedop(r4, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) unshare(0x8000000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) 5.026641879s ago: executing program 2 (id=544): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYRESDEC=r2, @ANYRES32=r6, @ANYRES16=r3, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r9, 0xc0185879, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000440)="22bf8b43e5") 4.73514884s ago: executing program 5 (id=545): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x4, 0x29, 0x34, 0x4}}], 0x18}, 0x440e0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0010010900010073797a31000000002400048020000180070001006374000014000280080001400000000108000240000000080900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000002c0)) 3.820469587s ago: executing program 2 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) 3.627360791s ago: executing program 3 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000280)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0xee}, 0x1, 0x6, 0x8, 0x3, 0xc, 'syz1\x00', "8a3b9ccdeb5b06886b9598c52f82dace69006afb89dd3287a1e8bc4c4af6b2a6", "b5153bfa68b8774021a2d2b9fa1135879b362ca5b305767e0d6c68adf5d55282", [{0x3ff, 0x2, {0x1, 0x3}}, {0x100, 0x3, {0x1, 0x12b446f0}}, {0x2, 0x4, {0x1, 0x7}}, {0x58a, 0x1, {0x2, 0xe}}, {0xfffe, 0x26, {0x3, 0xfffffffa}}, {0x3ff, 0x1, {0x2, 0x5}}, {0x8, 0x401, {0x0, 0xb7c}}, {0x23, 0x8, {0x3, 0x40}}, {0x8000, 0x400, {0x0, 0x8}}, {0x8001, 0xe, {0x2, 0x9}}, {0x5, 0x9, {0x1, 0x6b}}, {0x31c7, 0xfffa, {0x2, 0x9}}, {0x60, 0x6, {0x3}}, {0x0, 0x1, {0x2, 0x81}}, {0x0, 0xf6eb, {0x1, 0x9}}, {0x8, 0x8000, {0x2, 0x4}}, {0x28, 0xe99d, {0x2, 0x1ff}}, {0xfffa, 0x4e, {0x2, 0xa}}, {0x87, 0x1, {0x2, 0x2}}, {0x6, 0x400, {0x0, 0x10a}}, {0x8001, 0x8, {0x0, 0x89f5}}, {0x1, 0x1ff, {0x3}}, {0x81, 0x1, {0x0, 0xfffffffe}}, {0x8001, 0xb48e, {0x2, 0x180000}}, {0x81, 0x4, {0x3}}, {0x8, 0x100, {0x1, 0x5}}, {0x8, 0x9, {0x3, 0x2}}, {0x8001, 0x2, {0x3, 0x8}}, {0x7, 0x100, {0x2, 0x3}}, {0x9, 0x16, {0x1, 0xf4}}, {0xff, 0x4, {0x0, 0x8000}}, {0x87, 0x5, {0x1}}, {0x3, 0x80, {0x2, 0xb}}, {0x3, 0xf906, {0x1, 0x8}}, {0x9, 0x7f, {0x0, 0x7}}, {0xe, 0xfff, {0x3, 0x5}}, {0x0, 0x6, {0x1, 0x4d8022f6}}, {0x8000, 0x81, {0x0, 0x7fff}}, {0x7, 0x101, {0x2, 0x709b}}, {0x10, 0x0, {0x1, 0x7f}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) 3.559586845s ago: executing program 5 (id=548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf05}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) 3.026460264s ago: executing program 3 (id=549): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000010) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x1b}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x4040800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf00) 2.793317053s ago: executing program 2 (id=550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2a, &(0x7f00000001c0), 0xc7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0xfffffffffffffcd4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r3, &(0x7f0000000640)='\x00', 0x81101) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGSND(r4, 0x8040451a, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r6, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x18, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0xffe0, 0xfffb}, {0x9, 0x3}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c0, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x190, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1ed}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x9, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0xbaa, 0x8, 0x9, 0xb988, 0x0, 0x1, 0xe149, 0xb, 0xc, 0xa, 0xb, 0xf, 0x63, 0x9, 0x32}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2.26542013s ago: executing program 5 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(0x0, r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)={0x14, r7, 0x0, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008000) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0xfffd}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/49, 0x31) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.130343575s ago: executing program 4 (id=553): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e30000008000000feff0000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 2.129064794s ago: executing program 1 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() r1 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000006c0)={r1, 0xffffffffffffffff, 0x8}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000000)=0x1) unlink(&(0x7f0000000140)='./cgroup\x00') 1.960960834s ago: executing program 3 (id=555): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200a6f48bd45c4e7fdbcfe903d47888fa", 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) prlimit64(r2, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000000c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x108) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000180)={0x5, 0x24, 0x93e0, 0x7, 0x11, "8869773c17a73f0b79452b940c9cb2da4c0b20"}) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) 1.866895789s ago: executing program 4 (id=556): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYRESDEC=r2, @ANYRES32=r7, @ANYRES16=r3, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r10, 0xc0185879, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000440)="22bf8b43e5") 1.86662721s ago: executing program 2 (id=557): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000008300)={0x2020}, 0x2020) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0xffff1c92, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x8, 0x10, 0x0, 0x1}, &(0x7f0000000140)=0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00031d0000000003"], 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) 1.551573315s ago: executing program 1 (id=558): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x4, 0x29, 0x34, 0x4}}], 0x18}, 0x440e0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0010010900010073797a31000000002400048020000180070001006374000014000280080001400000000108000240000000080900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000002c0)) 1.249518234s ago: executing program 5 (id=559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x56) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x400000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/213, 0xffffffffffffff98}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/14, 0xe}], 0x3}, 0xebc1}, {{&(0x7f0000000680)=@caif=@dbg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f00000007c0)=""/84, 0x4f}], 0x4}, 0x9}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/112, 0x70}, {&(0x7f0000002b40)=""/114, 0x72}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000002c40)=""/11, 0xb}], 0x5}, 0x2}, {{&(0x7f0000002d00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/211, 0xd3}], 0x2, &(0x7f0000002f40)=""/178, 0xb2}, 0x1}, {{&(0x7f0000003000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003080)=""/92, 0x5c}, {&(0x7f0000003100)=""/208, 0xd0}, {&(0x7f0000003200)=""/156, 0x9c}, {&(0x7f00000032c0)=""/73, 0x49}, {&(0x7f0000003340)=""/136, 0x88}], 0x5, &(0x7f0000003480)=""/76, 0x4c}, 0x800}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000004bc0)=[{&(0x7f00000036c0)=""/213}, {&(0x7f00000037c0)=""/190}, {&(0x7f0000004dc0)=""/4101}, {&(0x7f0000004880)=""/234}, {&(0x7f0000004980)=""/143}, {&(0x7f0000004a40)=""/96}, {&(0x7f0000004ac0)=""/8}, {&(0x7f0000004b00)=""/182}]}, 0xa}], 0x5, 0x20, &(0x7f0000003680)={r6, r7+60000000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) 1.013683367s ago: executing program 1 (id=560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x88, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 966.440836ms ago: executing program 3 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x2, 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) 835.194014ms ago: executing program 4 (id=562): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000390000001f000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003"], 0x40}}, 0x0) 782.94645ms ago: executing program 1 (id=563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x3000000, 0x10000000, 0x2, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0xa}]}, 0x10c}}, 0x0) 449.55737ms ago: executing program 1 (id=564): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) getpriority(0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xeae, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80000000}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x7}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) timer_create(0x1, &(0x7f0000000040)={0x0, 0xb, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000c5000000000300000000e88000410200", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000010000000e00"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4}, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x44844, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) close(r5) tkill(r8, 0x17) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000000000000054c4945b6eb41538811419b9d3da421a", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) 242.844425ms ago: executing program 4 (id=565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200a6f48bd45c4e7fdbcfe903d47888fa", 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) prlimit64(r2, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x108) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x5, 0x24, 0x93e0, 0x7, 0x11, "8869773c17a73f0b79452b940c9cb2da4c0b20"}) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) 228.12538ms ago: executing program 3 (id=566): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x3c93, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x4}) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) io_uring_enter(r0, 0x5, 0x7721, 0x51, 0x0, 0x700) 151.501287ms ago: executing program 5 (id=567): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) fanotify_init(0x200, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x3000000}], 0x4000000000003b9, 0x26022, 0x0) 2.431222ms ago: executing program 1 (id=568): r0 = socket(0x1000000000000010, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xfffffffc}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x101081) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) readv(r4, &(0x7f0000000200)=[{0x0}], 0x1) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x50, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x4000001) write(r0, &(0x7f0000000040)="240000004e0001000000f4f90023040800fd000007000000020100000800028001000000", 0x24) 0s ago: executing program 4 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x9, &(0x7f0000000100)) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x121200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) kernel console output (not intermixed with test programs): 0] usb 1-1: Product: syz [ 102.612634][ T10] usb 1-1: Manufacturer: syz [ 102.622048][ T10] usb 1-1: SerialNumber: syz [ 103.268423][ T805] usb 5-1: no configurations [ 103.288447][ T805] usb 5-1: can't read configurations, error -22 [ 103.884960][ T805] usb usb5-port1: attempt power cycle [ 103.902254][ T6334] process 'syz.2.146' launched './file0' with NULL argv: empty string added [ 104.127719][ T6352] FAULT_INJECTION: forcing a failure. [ 104.127719][ T6352] name failslab, interval 1, probability 0, space 0, times 0 [ 104.159917][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.4.149 Not tainted syzkaller #0 PREEMPT(full) [ 104.159945][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.159955][ T6352] Call Trace: [ 104.159961][ T6352] [ 104.159968][ T6352] dump_stack_lvl+0x100/0x190 [ 104.159999][ T6352] should_fail_ex.cold+0x5/0xa [ 104.160025][ T6352] should_failslab+0xc2/0x120 [ 104.160045][ T6352] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 104.160071][ T6352] ? skb_clone+0x190/0x400 [ 104.160102][ T6352] skb_clone+0x190/0x400 [ 104.160128][ T6352] netlink_deliver_tap+0xaed/0xcc0 [ 104.160155][ T6352] netlink_unicast+0x62b/0x850 [ 104.160180][ T6352] ? __pfx_netlink_unicast+0x10/0x10 [ 104.160209][ T6352] netlink_sendmsg+0x8b0/0xda0 [ 104.160234][ T6352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.160253][ T6352] ? __might_fault+0x90/0x140 [ 104.160288][ T6352] ____sys_sendmsg+0x9e1/0xb70 [ 104.160307][ T6352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.160329][ T6352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.160354][ T6352] ? __pfx__kstrtoull+0x10/0x10 [ 104.160379][ T6352] ___sys_sendmsg+0x190/0x1e0 [ 104.160401][ T6352] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.160434][ T6352] ? find_held_lock+0x2b/0x80 [ 104.160468][ T6352] __sys_sendmmsg+0x205/0x430 [ 104.160497][ T6352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.160533][ T6352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.160566][ T6352] ? fput+0x79/0x100 [ 104.160591][ T6352] ? ksys_write+0x1ac/0x250 [ 104.160609][ T6352] ? __pfx_ksys_write+0x10/0x10 [ 104.160631][ T6352] __x64_sys_sendmmsg+0x9c/0x100 [ 104.160656][ T6352] ? lockdep_hardirqs_on+0x78/0x100 [ 104.160681][ T6352] do_syscall_64+0x10b/0xf80 [ 104.160700][ T6352] ? clear_bhb_loop+0x40/0x90 [ 104.160722][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.160740][ T6352] RIP: 0033:0x7f595a39cdd9 [ 104.160755][ T6352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.160771][ T6352] RSP: 002b:00007f595b1cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.160788][ T6352] RAX: ffffffffffffffda RBX: 00007f595a615fa0 RCX: 00007f595a39cdd9 [ 104.160799][ T6352] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 104.160809][ T6352] RBP: 00007f595b1cb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.160819][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.160829][ T6352] R13: 00007f595a616038 R14: 00007f595a615fa0 R15: 00007ffd332bf468 [ 104.160852][ T6352] [ 104.161986][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.149'. [ 104.224416][ T5705] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.091380][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.091433][ T30] audit: type=1400 audit(1777669876.012:272): avc: denied { append } for pid=6356 comm="syz.4.150" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.214321][ T30] audit: type=1400 audit(1777669876.012:273): avc: denied { open } for pid=6356 comm="syz.4.150" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.238084][ T30] audit: type=1400 audit(1777669876.012:274): avc: denied { create } for pid=6356 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 105.309486][ T6364] netlink: 'syz.1.152': attribute type 30 has an invalid length. [ 105.835450][ T30] audit: type=1400 audit(1777669876.022:275): avc: denied { write } for pid=6356 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 105.856883][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.865473][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.876381][ T5705] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 105.896913][ T5705] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 105.911043][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.937407][ T6366] netlink: 'syz.1.152': attribute type 30 has an invalid length. [ 105.978444][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 105.987537][ T5705] usb 3-1: Product: syz [ 106.013768][ T5705] usb 3-1: Manufacturer: syz [ 106.045148][ T10] usb 1-1: USB disconnect, device number 11 [ 106.052513][ T5705] usb 3-1: SerialNumber: syz [ 106.072788][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 107.299846][ T5724] usb 3-1: USB disconnect, device number 10 [ 107.484548][ T30] audit: type=1400 audit(1777669878.412:276): avc: denied { setcurrent } for pid=6378 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 107.631812][ T6384] random: crng reseeded on system resumption [ 107.658043][ T30] audit: type=1400 audit(1777669878.562:277): avc: denied { write } for pid=6382 comm="syz.2.156" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.698093][ T30] audit: type=1400 audit(1777669878.562:278): avc: denied { open } for pid=6382 comm="syz.2.156" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.759614][ T30] audit: type=1400 audit(1777669878.682:279): avc: denied { map } for pid=6387 comm="syz.3.158" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.824272][ T30] audit: type=1400 audit(1777669878.682:280): avc: denied { read write } for pid=6387 comm="syz.3.158" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.058174][ T30] audit: type=1400 audit(1777669878.992:281): avc: denied { setattr } for pid=5607 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.558130][ T6396] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.843662][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 109.043024][ T10] IPVS: starting estimator thread 0... [ 109.164276][ T6416] IPVS: using max 55 ests per chain, 132000 per kthread [ 110.223997][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.634309][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 110.645616][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.922183][ T6430] netlink: 'syz.2.170': attribute type 29 has an invalid length. [ 110.931184][ T6430] netlink: 'syz.2.170': attribute type 29 has an invalid length. [ 110.940687][ T6430] netlink: 500 bytes leftover after parsing attributes in process `syz.2.170'. [ 111.025857][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.349998][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.387260][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.417352][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.447853][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 111.461413][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 111.461427][ T30] audit: type=1400 audit(1777669882.392:286): avc: denied { ioctl } for pid=6434 comm="syz.3.172" path="socket:[11411]" dev="sockfs" ino=11411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.497799][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.507636][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.516136][ T10] usb 2-1: Product: syz [ 111.524083][ T10] usb 2-1: Manufacturer: syz [ 111.538931][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 111.552623][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 111.560357][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 111.577427][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 111.602040][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 111.637021][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.172'. [ 111.674122][ T10] usb 2-1: USB disconnect, device number 9 [ 111.860761][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 111.904537][ T6294] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.133034][ T6294] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 112.237708][ T6294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.504132][ T6294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.550347][ T6294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 112.565307][ T6294] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.584410][ T6294] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.594069][ T6294] usb 5-1: Manufacturer: syz [ 112.611673][ T6294] usb 5-1: config 0 descriptor?? [ 112.915903][ T6294] usbhid 5-1:0.0: can't add hid device: -71 [ 112.923769][ T6294] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.941446][ T6294] usb 5-1: USB disconnect, device number 7 [ 113.004795][ T5705] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.634780][ T5705] usb 2-1: too many configurations: 122, using maximum allowed: 8 [ 113.655524][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 113.676427][ T5705] usb 2-1: can't read configurations, error -61 [ 113.845106][ T5705] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.049568][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.073955][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.137095][ T6473] pim6reg: entered allmulticast mode [ 114.143792][ T6473] pim6reg: left allmulticast mode [ 114.186667][ T5705] usb 2-1: too many configurations: 122, using maximum allowed: 8 [ 114.206313][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.225190][ T5705] usb 2-1: can't read configurations, error -61 [ 114.244577][ T5705] usb usb2-port1: attempt power cycle [ 114.255875][ T6473] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 114.281233][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.305467][ T6473] team0: Port device bond0 added [ 114.308256][ T30] audit: type=1400 audit(1777669885.242:287): avc: denied { write } for pid=6472 comm="syz.4.183" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.338699][ T6473] usb usb9: usbfs: process 6473 (syz.4.183) did not claim interface 0 before use [ 114.355549][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.497139][ T6482] xt_hashlimit: Unknown mode mask 40000, kernel too old? [ 114.517530][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 114.524297][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.533473][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.544003][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.568347][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.586426][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.596119][ T5705] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.599799][ T10] usb 4-1: Product: syz [ 114.608196][ T10] usb 4-1: Manufacturer: syz [ 114.618143][ T10] usb 4-1: SerialNumber: syz [ 114.625308][ T5705] usb 2-1: too many configurations: 122, using maximum allowed: 8 [ 114.645097][ T10] usb 4-1: 0:2 : does not exist [ 114.652547][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.660591][ T5705] usb 2-1: can't read configurations, error -61 [ 114.760454][ T30] audit: type=1400 audit(1777669885.692:288): avc: denied { ioctl } for pid=6483 comm="syz.4.187" path="socket:[11511]" dev="sockfs" ino=11511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.806429][ T5705] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.845227][ T5705] usb 2-1: too many configurations: 122, using maximum allowed: 8 [ 114.857158][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.877797][ T5705] usb 2-1: can't read configurations, error -61 [ 114.888148][ T5705] usb usb2-port1: unable to enumerate USB device [ 115.574577][ T6491] ======================================================= [ 115.574577][ T6491] WARNING: The mand mount option has been deprecated and [ 115.574577][ T6491] and is ignored by this kernel. Remove the mand [ 115.574577][ T6491] option from the mount to silence this warning. [ 115.574577][ T6491] ======================================================= [ 115.669694][ T30] audit: type=1400 audit(1777669886.552:289): avc: denied { mount } for pid=6488 comm="syz.4.188" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 115.975026][ T30] audit: type=1400 audit(1777669886.552:290): avc: denied { mounton } for pid=6488 comm="syz.4.188" path="/36/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 115.994564][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.072642][ T30] audit: type=1400 audit(1777669886.552:291): avc: denied { mount } for pid=6488 comm="syz.4.188" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.107968][ T30] audit: type=1400 audit(1777669886.552:292): avc: denied { read } for pid=6488 comm="syz.4.188" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.134738][ T30] audit: type=1400 audit(1777669886.552:293): avc: denied { read } for pid=6488 comm="syz.4.188" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.160987][ T30] audit: type=1400 audit(1777669886.552:294): avc: denied { open } for pid=6488 comm="syz.4.188" path="/36/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.184903][ T30] audit: type=1400 audit(1777669886.552:295): avc: denied { read } for pid=6488 comm="syz.4.188" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.244302][ T6294] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.410000][ T6294] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.428770][ T6294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.444331][ T5735] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 116.449660][ T6294] usb 5-1: config 0 descriptor?? [ 116.601446][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 116.601463][ T30] audit: type=1400 audit(1777669887.532:301): avc: denied { append } for pid=6498 comm="syz.2.190" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.646523][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 116.671350][ T6501] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 116.680254][ T6502] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 116.702912][ T5735] usb 2-1: config 5 has an invalid interface number: 252 but max is 0 [ 116.720340][ T5735] usb 2-1: config 5 has an invalid descriptor of length 183, skipping remainder of the config [ 116.726352][ T6501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.734641][ T5735] usb 2-1: config 5 has no interface number 0 [ 116.754044][ T5735] usb 2-1: config 5 interface 252 altsetting 13 bulk endpoint 0x7 has invalid maxpacket 32 [ 116.760213][ T6501] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 116.773446][ T5735] usb 2-1: config 5 interface 252 altsetting 13 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 116.785212][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 116.796813][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 116.808575][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 116.820671][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has a duplicate endpoint with address 0x8, skipping [ 116.832203][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 116.843532][ T5735] usb 2-1: config 5 interface 252 altsetting 13 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 116.858122][ T5735] usb 2-1: config 5 interface 252 has no altsetting 0 [ 116.867532][ T5735] usb 2-1: New USB device found, idVendor=19d2, idProduct=0602, bcdDevice=f5.14 [ 116.890177][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.908546][ T5735] usb 2-1: Product: syz [ 116.919283][ T5735] usb 2-1: Manufacturer: syz [ 116.927138][ T5735] usb 2-1: SerialNumber: syz [ 116.944479][ T6497] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.540067][ T5735] option 2-1:5.252: GSM modem (1-port) converter detected [ 117.580644][ T5735] usb 2-1: USB disconnect, device number 14 [ 117.629225][ T5735] option 2-1:5.252: device disconnected [ 117.639484][ T10] usb 4-1: USB disconnect, device number 10 [ 118.097599][ T6517] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.232917][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.295832][ T30] audit: type=1400 audit(1777669889.232:302): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.322018][ T6294] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 118.329923][ T6294] [drm:udl_init] *ERROR* Selecting channel failed [ 118.373436][ T30] audit: type=1400 audit(1777669889.302:303): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 118.425218][ T6294] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 118.443650][ T6294] [drm] Initialized udl on minor 2 [ 118.466050][ T6294] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.492259][ T6294] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 118.522605][ T6294] usb 5-1: USB disconnect, device number 8 [ 118.529407][ T5724] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 118.561324][ T5724] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 118.630571][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.159901][ T6534] Bluetooth: hci6: Frame reassembly failed (-84) [ 119.324069][ T6528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.331727][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 119.368847][ T6528] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 119.392011][ T5724] bond_slave_0: entered promiscuous mode [ 119.398634][ T5724] bond_slave_1: entered promiscuous mode [ 120.616498][ T5613] Bluetooth: hci5: command 0x1003 tx timeout [ 120.625750][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.195725][ T4928] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 121.195869][ T5615] Bluetooth: hci6: command 0x1003 tx timeout [ 121.484974][ T30] audit: type=1400 audit(1777669892.422:304): avc: denied { write } for pid=6549 comm="syz.1.205" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.511461][ T30] audit: type=1400 audit(1777669892.452:305): avc: denied { setopt } for pid=6549 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.910539][ T6557] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 121.914288][ T30] audit: type=1400 audit(1777669892.842:306): avc: denied { mounton } for pid=6555 comm="syz.1.207" path="/53/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.938450][ T6557] CIFS mount error: No usable UNC path provided in device string! [ 121.938450][ T6557] [ 122.101457][ T6557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.154389][ T5735] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 123.627291][ T5735] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 123.640337][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.651873][ T5735] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.678372][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.708240][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.747973][ T5735] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 123.794622][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.836757][ T5735] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.879337][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.913785][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.941188][ T5735] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 123.959410][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.989500][ T5735] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.011146][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.015800][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 124.185670][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.202352][ T5735] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 124.202633][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.299875][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.394553][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.402582][ T5735] usb 3-1: string descriptor 0 read error: -22 [ 124.412373][ T5735] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 124.421833][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.429600][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.469079][ T5735] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 124.778675][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.884620][ T30] audit: type=1400 audit(1777669895.812:307): avc: denied { read append } for pid=6596 comm="syz.1.217" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.912267][ T30] audit: type=1400 audit(1777669895.812:308): avc: denied { open } for pid=6596 comm="syz.1.217" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.138903][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.201564][ T30] audit: type=1400 audit(1777669897.132:309): avc: denied { setopt } for pid=6605 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.275310][ T30] audit: type=1400 audit(1777669897.162:310): avc: denied { accept } for pid=6605 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.311002][ T30] audit: type=1400 audit(1777669897.162:311): avc: denied { connect } for pid=6605 comm="syz.4.219" lport=46032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.333908][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.440416][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.459981][ T5735] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 126.474306][ T4928] Bluetooth: hci5: command tx timeout [ 126.651604][ T5735] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.689853][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.761215][ T5735] usb 2-1: config 0 descriptor?? [ 126.798965][ T5735] cp210x 2-1:0.0: cp210x converter detected [ 126.814336][ T30] audit: type=1400 audit(1777669897.732:312): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.847377][ T30] audit: type=1400 audit(1777669897.752:313): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.871661][ T30] audit: type=1400 audit(1777669897.752:314): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.934551][ T30] audit: type=1400 audit(1777669897.752:315): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=2409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.963044][ T30] audit: type=1400 audit(1777669897.752:316): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.004658][ T30] audit: type=1400 audit(1777669897.752:317): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.192690][ T30] audit: type=1400 audit(1777669898.122:318): avc: denied { read open } for pid=6626 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.219809][ T30] audit: type=1400 audit(1777669898.122:319): avc: denied { getattr } for pid=6626 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.296920][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.308364][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.367023][ T12] bridge_slave_1: left allmulticast mode [ 127.409209][ T12] bridge_slave_1: left promiscuous mode [ 127.425134][ T5735] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 127.449610][ T5735] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 127.466399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.500693][ T5735] usb 2-1: cp210x converter now attached to ttyUSB0 [ 127.526720][ T12] bridge_slave_0: left allmulticast mode [ 127.555934][ T5735] usb 2-1: USB disconnect, device number 15 [ 127.559714][ T12] bridge_slave_0: left promiscuous mode [ 127.588250][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.618225][ T5735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.661751][ T5735] cp210x 2-1:0.0: device disconnected [ 128.043308][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 128.062912][ T30] audit: type=1400 audit(1777669898.992:320): avc: denied { connect } for pid=6640 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.160198][ T5724] usb 3-1: USB disconnect, device number 11 [ 128.231127][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.305901][ T30] audit: type=1400 audit(1777669899.232:321): avc: denied { kexec_image_load } for pid=6640 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.382534][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.402033][ T30] audit: type=1400 audit(1777669899.292:322): avc: denied { add_name } for pid=6625 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.477031][ T12] bond0 (unregistering): Released all slaves [ 128.561522][ T30] audit: type=1400 audit(1777669899.292:323): avc: denied { create } for pid=6625 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.587977][ T4928] Bluetooth: hci5: command tx timeout [ 128.604378][ T30] audit: type=1400 audit(1777669899.292:324): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2437 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.048661][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.434234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 130.491836][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.634347][ T4928] Bluetooth: hci5: command tx timeout [ 131.675559][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 131.782316][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 131.863295][ T12] hsr_slave_0: left promiscuous mode [ 131.909546][ T12] hsr_slave_1: left promiscuous mode [ 132.023044][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.085199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.495085][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.563147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.600794][ T12] veth1_macvtap: left promiscuous mode [ 132.608431][ T12] veth0_macvtap: left promiscuous mode [ 132.614732][ T12] veth1_vlan: left promiscuous mode [ 132.620237][ T12] veth0_vlan: left promiscuous mode [ 132.714291][ T4928] Bluetooth: hci5: command tx timeout [ 133.073543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 133.092844][ T12] team0 (unregistering): Port device team_slave_0 removed [ 133.183910][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.218430][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.234406][ T6585] bridge_slave_0: entered allmulticast mode [ 133.242873][ T6585] bridge_slave_0: entered promiscuous mode [ 133.393211][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 133.401027][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 133.585238][ T6685] infiniband syz2: set active [ 133.590541][ T6685] infiniband syz2: added vxcan1 [ 133.601981][ T6685] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 133.608247][ T6685] infiniband syz2: Couldn't open port 1 [ 133.624142][ T6685] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 133.640550][ T6685] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 133.660023][ T6685] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 133.733629][ T6685] RDS/IB: syz2: added [ 133.739870][ T6685] smc: adding ib device syz2 with port count 1 [ 133.757214][ T6685] smc: ib device syz2 port 1 has no pnetid [ 133.771180][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 134.178746][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 134.267092][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 134.377132][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.529688][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.538438][ T6585] bridge_slave_1: entered allmulticast mode [ 134.548119][ T6585] bridge_slave_1: entered promiscuous mode [ 134.582722][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 134.601081][ T804] vxcan1 speed is unknown, defaulting to 1000 [ 134.610118][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.623239][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.775748][ T6585] team0: Port device team_slave_0 added [ 134.855060][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 134.974577][ T6685] vxcan1 speed is unknown, defaulting to 1000 [ 135.172593][ T6585] team0: Port device team_slave_1 added [ 135.359144][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 135.479260][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 135.597488][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.628710][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.684022][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.723391][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 135.734933][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.752738][ T6718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=6718 comm=syz.4.242 [ 135.767618][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.822313][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 135.822330][ T30] audit: type=1400 audit(1777669906.732:332): avc: denied { read append } for pid=6720 comm="syz.1.244" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.207992][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.351057][ T30] audit: type=1400 audit(1777669906.732:333): avc: denied { ioctl open } for pid=6720 comm="syz.1.244" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.444396][ T6727] vivid-000: disconnect [ 136.479723][ T6727] vivid-000: reconnect [ 136.668175][ T6585] hsr_slave_0: entered promiscuous mode [ 136.691922][ T6585] hsr_slave_1: entered promiscuous mode [ 136.701341][ T30] audit: type=1400 audit(1777669906.842:334): avc: denied { mounton } for pid=6717 comm="syz.4.242" path="/51/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.126060][ T30] audit: type=1400 audit(1777669908.062:335): avc: denied { append } for pid=6735 comm="syz.4.246" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.126450][ T6738] FAULT_INJECTION: forcing a failure. [ 137.126450][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.164232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.242666][ T6734] comedi comedi0: Minor 7 could not be opened [ 137.336668][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.4.246 Not tainted syzkaller #0 PREEMPT(full) [ 137.336697][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.336707][ T6738] Call Trace: [ 137.336713][ T6738] [ 137.336720][ T6738] dump_stack_lvl+0x100/0x190 [ 137.336747][ T6738] should_fail_ex.cold+0x5/0xa [ 137.336773][ T6738] _copy_from_user+0x2e/0xd0 [ 137.336799][ T6738] video_usercopy+0xe74/0x1700 [ 137.336825][ T6738] ? __pfx___video_do_ioctl+0x10/0x10 [ 137.336849][ T6738] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 137.336874][ T6738] ? __pfx_video_usercopy+0x10/0x10 [ 137.336900][ T6738] ? rcu_is_watching+0x12/0xc0 [ 137.336943][ T6738] v4l2_ioctl+0x1bd/0x250 [ 137.336967][ T6738] ? __pfx_v4l2_ioctl+0x10/0x10 [ 137.336991][ T6738] __x64_sys_ioctl+0x18e/0x210 [ 137.337011][ T6738] do_syscall_64+0x10b/0xf80 [ 137.337030][ T6738] ? clear_bhb_loop+0x40/0x90 [ 137.337052][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.337069][ T6738] RIP: 0033:0x7f595a39cdd9 [ 137.337084][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.337101][ T6738] RSP: 002b:00007f595b1cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.337118][ T6738] RAX: ffffffffffffffda RBX: 00007f595a615fa0 RCX: 00007f595a39cdd9 [ 137.337129][ T6738] RDX: 0000200000000180 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 137.337139][ T6738] RBP: 00007f595b1cb090 R08: 0000000000000000 R09: 0000000000000000 [ 137.337148][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.337158][ T6738] R13: 00007f595a616038 R14: 00007f595a615fa0 R15: 00007ffd332bf468 [ 137.337182][ T6738] [ 138.135634][ T6585] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.157947][ T6585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.172142][ T6585] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.189597][ T6585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.214441][ T6585] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.277415][ T6585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.311131][ T6585] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.356915][ T6585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.578882][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.658465][ T6585] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.699002][ T6769] syz.2.250 uses obsolete (PF_INET,SOCK_PACKET) [ 138.704681][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.712395][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.731718][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.837757][ T6585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.894995][ T6585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.916114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.923265][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.933078][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 141.724513][ T30] audit: type=1400 audit(1777669912.532:336): avc: denied { create } for pid=6793 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.476150][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.501955][ T30] audit: type=1400 audit(1777669914.432:337): avc: denied { mount } for pid=6830 comm="syz.4.261" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.555865][ T30] audit: type=1400 audit(1777669914.452:338): avc: denied { remount } for pid=6830 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.586858][ T6835] netlink: 'syz.2.262': attribute type 30 has an invalid length. [ 143.737828][ T6844] netlink: 'syz.2.262': attribute type 30 has an invalid length. [ 144.076701][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 144.092188][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 144.218084][ T6585] veth0_vlan: entered promiscuous mode [ 144.230143][ T6585] veth1_vlan: entered promiscuous mode [ 144.264953][ T6585] veth0_macvtap: entered promiscuous mode [ 144.314072][ T6585] veth1_macvtap: entered promiscuous mode [ 144.324976][ T5727] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 144.333439][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.358095][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.393663][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.424852][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.525953][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.561235][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.599963][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.609897][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 144.828897][ T5727] usb 5-1: config 4 has an invalid interface number: 7 but max is 1 [ 144.854301][ T5727] usb 5-1: config 4 has an invalid interface number: 243 but max is 1 [ 144.882604][ T5727] usb 5-1: config 4 has no interface number 0 [ 144.915672][ T5727] usb 5-1: config 4 has no interface number 1 [ 144.964533][ T5727] usb 5-1: config 4 interface 7 has no altsetting 0 [ 145.002451][ T5727] usb 5-1: config 4 interface 243 has no altsetting 0 [ 145.030015][ T5727] usb 5-1: string descriptor 0 read error: -22 [ 145.037438][ T5727] usb 5-1: New USB device found, idVendor=0341, idProduct=1b9e, bcdDevice=c9.af [ 145.100300][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.160559][ T30] audit: type=1400 audit(1777669916.082:339): avc: denied { create } for pid=6866 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.167896][ T5727] hub 5-1:4.7: Invalid hub with more than one config or interface [ 145.218291][ T6871] mmap: syz.1.266 (6871) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.612182][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.951333][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.957943][ T5727] hub 5-1:4.7: probe with driver hub failed with error -22 [ 145.967151][ T5727] hub 5-1:4.243: Invalid hub with more than one config or interface [ 145.975147][ T5727] hub 5-1:4.243: probe with driver hub failed with error -22 [ 145.989945][ T5727] usb 5-1: No union descriptors [ 146.061575][ T30] audit: type=1400 audit(1777669916.982:340): avc: denied { getopt } for pid=6866 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.115305][ T6876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.125753][ T30] audit: type=1400 audit(1777669917.022:341): avc: denied { search } for pid=6866 comm="syz.1.266" name="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.169348][ T6879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.181889][ T6885] Bluetooth: MGMT ver 1.23 [ 146.196645][ T6879] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 146.207481][ T30] audit: type=1400 audit(1777669917.022:342): avc: denied { search } for pid=6866 comm="syz.1.266" name="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.273004][ T804] bond_slave_0: entered promiscuous mode [ 146.278742][ T804] bond_slave_1: entered promiscuous mode [ 146.319123][ T30] audit: type=1400 audit(1777669917.022:343): avc: denied { search } for pid=6866 comm="syz.1.266" name="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.379642][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.404134][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.429086][ T30] audit: type=1400 audit(1777669917.022:344): avc: denied { search } for pid=6866 comm="syz.1.266" name="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.538086][ T30] audit: type=1400 audit(1777669917.022:345): avc: denied { read open } for pid=6866 comm="syz.1.266" path="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.738005][ T6906] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 146.751388][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 146.751404][ T30] audit: type=1326 audit(1777669917.682:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 146.787805][ T30] audit: type=1326 audit(1777669917.682:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 146.934508][ T30] audit: type=1326 audit(1777669917.682:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 147.113460][ T10] usb 5-1: USB disconnect, device number 9 [ 147.176257][ T30] audit: type=1326 audit(1777669917.682:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 147.414734][ T30] audit: type=1326 audit(1777669917.682:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 147.442081][ T30] audit: type=1326 audit(1777669917.682:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 147.873088][ T6918] netlink: 'syz.2.275': attribute type 21 has an invalid length. [ 147.972555][ T6918] netlink: 128 bytes leftover after parsing attributes in process `syz.2.275'. [ 148.027583][ T6918] netlink: 3 bytes leftover after parsing attributes in process `syz.2.275'. [ 148.103740][ T30] audit: type=1326 audit(1777669917.682:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 148.223655][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 148.308552][ T30] audit: type=1326 audit(1777669917.682:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 148.557172][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 148.754229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.818012][ T30] audit: type=1326 audit(1777669917.682:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 149.013906][ T30] audit: type=1326 audit(1777669917.682:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.3.270" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 149.334281][ T804] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 149.514512][ T6934] tipc: Enabling of bearer rejected, failed to enable media [ 151.321018][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.331167][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.516878][ T6942] vxcan1 speed is unknown, defaulting to 1000 [ 151.871088][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 151.871105][ T30] audit: type=1400 audit(1777669922.802:367): avc: denied { name_connect } for pid=6957 comm="syz.2.285" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 152.461730][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 152.468091][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 152.478181][ T6971] ceph: No mds server is up or the cluster is laggy [ 152.506710][ T10] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 152.535582][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 152.542488][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 152.564183][ T6294] IPVS: starting estimator thread 0... [ 152.575012][ T6959] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 152.682220][ T6978] IPVS: using max 45 ests per chain, 108000 per kthread [ 152.770434][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 152.777798][ T6959] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.834533][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 152.864306][ T30] audit: type=1400 audit(1777669923.792:368): avc: denied { create } for pid=6950 comm="syz.5.282" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 153.040391][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.290768][ T30] audit: type=1400 audit(1777669923.792:369): avc: denied { associate } for pid=6950 comm="syz.5.282" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 153.310001][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.437807][ T804] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 153.448538][ T804] usb 5-1: can't read configurations, error -71 [ 153.900040][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 153.959725][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.229075][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 154.259846][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.273702][ T7002] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 154.282923][ T30] audit: type=1326 audit(1777669925.212:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.325294][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.339676][ T30] audit: type=1326 audit(1777669925.212:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.370795][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.407143][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.574983][ T30] audit: type=1326 audit(1777669925.242:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.646295][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 154.660515][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.664690][ T30] audit: type=1326 audit(1777669925.242:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.697902][ T7004] netlink: 112 bytes leftover after parsing attributes in process `syz.5.295'. [ 154.705282][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.726678][ T7004] netlink: 'syz.5.295': attribute type 30 has an invalid length. [ 154.763185][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.799525][ T30] audit: type=1326 audit(1777669925.242:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.811225][ T7005] netlink: 'syz.5.295': attribute type 30 has an invalid length. [ 154.894300][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.295'. [ 154.911172][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.925475][ T30] audit: type=1326 audit(1777669925.242:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 154.963135][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.295'. [ 154.980875][ T30] audit: type=1326 audit(1777669925.242:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.3.291" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac7b9cdd9 code=0x7ffc0000 [ 155.141518][ T10] usb 2-1: string descriptor 0 read error: -71 [ 155.148265][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 155.157562][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.252180][ T10] usb 2-1: can't set config #168, error -71 [ 155.263002][ T10] usb 2-1: USB disconnect, device number 16 [ 155.485238][ T7027] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 155.581733][ T7027] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 156.003052][ T7038] comedi comedi2: pcl818: I/O base address or length out of range [ 156.297279][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 156.380323][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 157.363525][ T7046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 157.384979][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 157.385011][ T30] audit: type=1400 audit(1777669928.282:387): avc: denied { connect } for pid=7040 comm="syz.5.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.439699][ T5343] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.623700][ T30] audit: type=1400 audit(1777669928.362:388): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.824333][ T5343] usb 3-1: Using ep0 maxpacket: 16 [ 157.835776][ T5343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.847360][ T30] audit: type=1400 audit(1777669928.362:389): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.881473][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.919848][ T5343] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 158.031857][ T30] audit: type=1400 audit(1777669928.402:390): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2915 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.234277][ T5343] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.255409][ T5343] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.265414][ T5343] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.284233][ T5343] usb 3-1: Manufacturer: syz [ 158.293843][ T5343] usb 3-1: config 0 descriptor?? [ 158.467682][ T10] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 158.665695][ T7034] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 158.679637][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.681660][ T7034] bond3 (unregistering): Released all slaves [ 159.049267][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.309'. [ 159.778236][ T5343] usb 3-1: can't set config #0, error -71 [ 159.804389][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 159.913041][ T5343] usb 3-1: USB disconnect, device number 12 [ 159.918666][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.947884][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 159.974009][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 159.989312][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.039290][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.044287][ T30] audit: type=1400 audit(1777669930.972:391): avc: denied { write } for pid=7067 comm="syz.5.311" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.072991][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.073040][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.073095][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.074598][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 160.120629][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.131401][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.143084][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.154210][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 160.480819][ T10] usb 5-1: string descriptor 0 read error: -22 [ 160.497617][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.688152][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.752070][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 160.921993][ T7094] NILFS (nullb0): couldn't find nilfs on the device [ 161.859640][ T10] usb 5-1: can't set config #168, error -71 [ 161.910921][ T10] usb 5-1: USB disconnect, device number 12 [ 162.835328][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.856608][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7106 comm=syz.1.322 [ 163.101775][ T30] audit: type=1400 audit(1777669934.022:392): avc: denied { create } for pid=7109 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.737526][ T30] audit: type=1400 audit(1777669934.092:393): avc: denied { listen } for pid=7109 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.151196][ T30] audit: type=1400 audit(1777669934.102:394): avc: denied { accept } for pid=7109 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.554225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 164.670089][ T30] audit: type=1400 audit(1777669935.602:395): avc: denied { write } for pid=7128 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.054418][ T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 165.348513][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 165.399576][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.456647][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.524277][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.553325][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.730367][ T7145] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 165.740492][ T30] audit: type=1326 audit(1777669936.672:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a39cdd9 code=0x7ffc0000 [ 165.784534][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 165.803842][ T30] audit: type=1326 audit(1777669936.712:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7138 comm="syz.4.330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f595a39cdd9 code=0x7ffc0000 [ 165.869280][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.935247][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.993546][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.066022][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.129785][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 166.176130][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.226060][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.277514][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.313365][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.350852][ T10] usb 2-1: string descriptor 0 read error: -22 [ 166.368283][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.386237][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.438772][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 166.449351][ T30] audit: type=1400 audit(1777669937.382:398): avc: denied { module_request } for pid=7171 comm="syz.4.335" kmod="can-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 166.484810][ T113] Bluetooth: (null): Invalid header checksum [ 166.512352][ T7170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7170 comm=syz.3.334 [ 166.567330][ T7168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36830 sclass=netlink_route_socket pid=7168 comm=syz.3.334 [ 166.581417][ T547] Bluetooth: (null): Invalid header checksum [ 166.680999][ T7172] can: request_module (can-proto-4) failed. [ 166.774223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.954987][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.5.337'. [ 169.669137][ T30] audit: type=1400 audit(1777669940.602:399): avc: denied { write } for pid=7215 comm="syz.5.343" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.840394][ T5853] usb 2-1: USB disconnect, device number 17 [ 170.082141][ T30] audit: type=1400 audit(1777669941.012:400): avc: denied { ioctl } for pid=7221 comm="syz.1.344" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.118949][ T7223] binder: 7221:7223 unknown command 0 [ 170.129830][ T7223] binder: 7221:7223 ioctl c0306201 200000000080 returned -22 [ 170.140741][ T30] audit: type=1400 audit(1777669941.012:401): avc: denied { set_context_mgr } for pid=7221 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 170.246529][ T30] audit: type=1400 audit(1777669941.122:402): avc: denied { write } for pid=7221 comm="syz.1.344" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.350140][ T30] audit: type=1400 audit(1777669941.122:403): avc: denied { map } for pid=7221 comm="syz.1.344" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.469272][ T30] audit: type=1400 audit(1777669941.152:404): avc: denied { call } for pid=7221 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 170.495788][ T5615] Bluetooth: hci1: command 0x1003 tx timeout [ 170.503767][ T4928] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 171.231470][ T30] audit: type=1326 audit(1777669942.152:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ac7b9cdd9 code=0x0 [ 171.284494][ T5724] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.293607][ T30] audit: type=1400 audit(1777669942.212:406): avc: denied { write } for pid=7242 comm="syz.3.349" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.441809][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 171.460886][ T5724] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.473418][ T5724] usb 6-1: config 0 has no interface number 0 [ 171.484031][ T5724] usb 6-1: config 0 interface 184 has no altsetting 0 [ 171.499238][ T5724] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.514616][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.548707][ T5724] usb 6-1: Product: syz [ 171.562596][ T5724] usb 6-1: Manufacturer: syz [ 171.588185][ T5724] usb 6-1: SerialNumber: syz [ 171.616443][ T5724] usb 6-1: config 0 descriptor?? [ 171.734567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #44!!! [ 171.754223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 172.654648][ T7262] overlay: ./file0 is not a directory [ 172.843828][ T5724] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 172.880859][ T5724] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 172.892726][ T30] audit: type=1400 audit(1777669943.822:407): avc: denied { getopt } for pid=7265 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.006660][ T30] audit: type=1400 audit(1777669943.882:408): avc: denied { accept } for pid=7265 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 173.135722][ T5724] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 173.182205][ T5724] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 173.256798][ T5724] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 173.321404][ T5724] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 173.449404][ T5724] usb 6-1: USB disconnect, device number 2 [ 173.604229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.634230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.774237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 174.192338][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 175.503550][ T7292] xt_hashlimit: Unknown mode mask 7000000, kernel too old? [ 175.952957][ T5724] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 176.890815][ T5724] usb 3-1: string descriptor 0 read error: -22 [ 176.895416][ T7296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.913436][ T5724] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 176.935113][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.966221][ T5724] usb 3-1: config 0 descriptor?? [ 176.980631][ T5724] usbtest 3-1:0.0: FX2 device [ 176.988698][ T5724] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 176.997786][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 177.072476][ T30] audit: type=1400 audit(1777669947.982:409): avc: denied { read } for pid=7311 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.108325][ T30] audit: type=1400 audit(1777669947.992:410): avc: denied { read } for pid=7311 comm="syz.3.365" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.400543][ T7296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.910047][ T10] usb 3-1: USB disconnect, device number 13 [ 178.080354][ T7296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.524596][ T7340] NILFS (nullb0): couldn't find nilfs on the device [ 180.328815][ T30] audit: type=1400 audit(1777669951.262:411): avc: denied { ioctl } for pid=7334 comm="syz.3.372" path="socket:[16115]" dev="sockfs" ino=16115 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.359762][ T7296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.536473][ T30] audit: type=1400 audit(1777669951.322:412): avc: denied { getopt } for pid=7330 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.087994][ T7364] NILFS (nullb0): couldn't find nilfs on the device [ 182.616954][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 182.641825][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.800291][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.236596][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.341490][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.442185][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 183.478789][ T7371] Bluetooth: hci1: Frame reassembly failed (-84) [ 184.585544][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.707694][ T30] audit: type=1400 audit(1777669955.632:413): avc: denied { setopt } for pid=7399 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.768557][ T30] audit: type=1400 audit(1777669955.632:414): avc: denied { read } for pid=7399 comm="syz.4.389" path="socket:[16494]" dev="sockfs" ino=16494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.806408][ T30] audit: type=1400 audit(1777669955.692:415): avc: denied { append } for pid=7401 comm="syz.1.390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.937727][ T30] audit: type=1400 audit(1777669955.742:416): avc: denied { setopt } for pid=7401 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.990564][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 185.001053][ T30] audit: type=1400 audit(1777669955.742:417): avc: denied { ioctl } for pid=7401 comm="syz.1.390" path="socket:[16570]" dev="sockfs" ino=16570 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.385938][ T5724] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.416516][ T5724] usb 3-1: config 0 has no interface number 0 [ 185.476702][ T5724] usb 3-1: config 0 interface 184 has no altsetting 0 [ 185.507529][ T5724] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.517989][ T5621] Bluetooth: hci1: command 0x1003 tx timeout [ 185.519760][ T4928] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 185.553734][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.612597][ T5724] usb 3-1: Product: syz [ 185.633824][ T5724] usb 3-1: Manufacturer: syz [ 185.671001][ T5724] usb 3-1: SerialNumber: syz [ 185.729803][ T5724] usb 3-1: config 0 descriptor?? [ 185.772058][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 185.777002][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 185.784048][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 185.784096][ T4928] Bluetooth: hci2: command 0x0406 tx timeout [ 186.044347][ T805] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.217145][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.239047][ T805] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 186.257981][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.278632][ T805] usb 6-1: Product: syz [ 186.292225][ T805] usb 6-1: Manufacturer: syz [ 186.308927][ T805] usb 6-1: SerialNumber: syz [ 186.660769][ T30] audit: type=1400 audit(1777669957.502:418): avc: denied { shutdown } for pid=7418 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.777119][ T30] audit: type=1400 audit(1777669957.502:419): avc: denied { read } for pid=7418 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.816896][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 186.845008][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.031204][ T30] audit: type=1400 audit(1777669957.962:420): avc: denied { map } for pid=7418 comm="syz.1.395" path="socket:[17441]" dev="sockfs" ino=17441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.054373][ T30] audit: type=1400 audit(1777669957.962:421): avc: denied { read } for pid=7418 comm="syz.1.395" path="socket:[17441]" dev="sockfs" ino=17441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.059448][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 187.177636][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 187.203616][ T5724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 187.215050][ T5724] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 187.232722][ T5724] usb 3-1: USB disconnect, device number 14 [ 187.246111][ T805] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.286907][ T805] usb 6-1: USB disconnect, device number 3 [ 187.433084][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.400'. [ 187.519019][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.803600][ T805] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 188.094088][ T805] usb 6-1: Using ep0 maxpacket: 8 [ 188.180773][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 188.201375][ T805] usb 6-1: config 4 interface 0 has no altsetting 0 [ 188.227042][ T805] usb 6-1: string descriptor 0 read error: -22 [ 188.248080][ T805] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 188.258879][ T805] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 188.356230][ T7450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7450 comm=syz.3.403 [ 188.578754][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 188.653783][ T7454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 188.764898][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.771501][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.069330][ T30] audit: type=1400 audit(1777669960.992:422): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.615465][ T805] usb 6-1: can't set config #4, error -71 [ 190.626516][ T805] usb 6-1: USB disconnect, device number 4 [ 190.719477][ T30] audit: type=1400 audit(1777669961.652:423): avc: denied { write } for pid=7462 comm="syz.5.409" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.584301][ T5343] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 192.344330][ T5343] usb 6-1: Using ep0 maxpacket: 32 [ 192.381981][ T5343] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.392364][ T5343] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 192.405398][ T5343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.416645][ T5343] usb 6-1: config 0 has no interface number 0 [ 192.423549][ T5343] usb 6-1: config 0 interface 251 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.437880][ T5343] usb 6-1: config 0 interface 251 has no altsetting 0 [ 192.472542][ T5343] usb 6-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 192.493579][ T5343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.522174][ T5343] usb 6-1: Product: syz [ 192.536966][ T5343] usb 6-1: Manufacturer: syz [ 192.553230][ T5343] usb 6-1: SerialNumber: syz [ 192.590635][ T5343] usb 6-1: config 0 descriptor?? [ 192.704376][ T6294] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 192.867902][ T6294] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 192.902990][ T6294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.951531][ T5343] usb 6-1: USB disconnect, device number 5 [ 192.964089][ T6294] usb 2-1: config 0 has no interfaces? [ 192.983195][ T6294] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 193.045179][ T6294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.105328][ T6294] usb 2-1: config 0 descriptor?? [ 193.435462][ T5853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 193.464529][ T6294] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.595115][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 193.619400][ T5853] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.634595][ T6294] usb 4-1: Using ep0 maxpacket: 32 [ 193.645818][ T5853] usb 3-1: config 0 has no interface number 0 [ 193.651388][ T6294] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.660236][ T5853] usb 3-1: config 0 interface 184 has no altsetting 0 [ 193.673392][ T6294] usb 4-1: config 0 has no interface number 0 [ 193.682682][ T5853] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.685814][ T6294] usb 4-1: config 0 interface 184 has no altsetting 0 [ 193.701087][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.710199][ T5853] usb 3-1: Product: syz [ 193.716600][ T5853] usb 3-1: Manufacturer: syz [ 193.720147][ T6294] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.722101][ T5853] usb 3-1: SerialNumber: syz [ 193.737097][ T6294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.745711][ T6294] usb 4-1: Product: syz [ 193.747485][ T5853] usb 3-1: config 0 descriptor?? [ 193.749938][ T6294] usb 4-1: Manufacturer: syz [ 193.749956][ T6294] usb 4-1: SerialNumber: syz [ 193.752741][ T6294] usb 4-1: config 0 descriptor?? [ 193.943784][ T30] audit: type=1326 audit(1777669964.872:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.010007][ T30] audit: type=1326 audit(1777669964.872:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.061979][ T30] audit: type=1326 audit(1777669964.992:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.092682][ T30] audit: type=1326 audit(1777669965.032:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.119397][ T30] audit: type=1326 audit(1777669965.032:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.148337][ T30] audit: type=1326 audit(1777669965.032:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.186798][ T30] audit: type=1326 audit(1777669965.032:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.224295][ T30] audit: type=1326 audit(1777669965.032:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.415" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3110b9cdd9 code=0x7ffc0000 [ 194.793261][ T6294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 194.808444][ T6294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.939927][ T5853] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 194.966899][ T5853] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.044974][ T6294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 195.105207][ T6294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 195.205443][ T5705] usb 2-1: USB disconnect, device number 18 [ 195.217717][ T5853] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 195.255548][ T6294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.281915][ T5853] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 195.306441][ T7500] CUSE: info not properly terminated [ 195.348188][ T6294] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.357697][ T5853] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.421349][ T6294] usb 4-1: USB disconnect, device number 11 [ 195.423197][ T5853] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.463864][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 195.463895][ T30] audit: type=1400 audit(1777669966.392:475): avc: denied { setopt } for pid=7501 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.509295][ T5853] usb 3-1: USB disconnect, device number 15 [ 195.594287][ T30] audit: type=1400 audit(1777669966.482:476): avc: denied { getopt } for pid=7503 comm="syz.5.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.741291][ T7508] vxcan1 speed is unknown, defaulting to 1000 [ 198.254391][ T5724] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 198.283731][ T7509] 8021q: adding VLAN 0 to HW filter on device eth0 [ 198.334150][ T7509] 8021q: adding VLAN 0 to HW filter on device eth1 [ 198.373989][ T30] audit: type=1400 audit(1777669969.292:477): avc: denied { write } for pid=7531 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.798138][ T5724] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 198.798926][ T7509] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.817583][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 198.828433][ T5724] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.840203][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.851717][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 198.894945][ T5724] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 198.976542][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 199.072363][ T5724] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.159608][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.182648][ T30] audit: type=1400 audit(1777669970.112:478): avc: denied { getopt } for pid=7537 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.200381][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 199.217098][ T7509] 8021q: adding VLAN 0 to HW filter on device eth3 [ 199.359368][ T5724] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 199.454746][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 199.504332][ T5724] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.526590][ T30] audit: type=1400 audit(1777669970.462:479): avc: denied { ioctl } for pid=7545 comm="syz.3.431" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.556702][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 199.576533][ T5724] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 199.781262][ T5724] usb 5-1: string descriptor 0 read error: -22 [ 199.795927][ T5724] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.118226][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.239082][ T5724] usb 5-1: can't set config #168, error -71 [ 200.257150][ T5724] usb 5-1: USB disconnect, device number 13 [ 200.633320][ T7559] comedi comedi1: comedi_config --init_data is deprecated [ 201.595031][ T30] audit: type=1400 audit(1777669972.522:480): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.190 dest=54624 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.231336][ T7576] netlink: 112 bytes leftover after parsing attributes in process `syz.2.437'. [ 202.293374][ T7576] netlink: 'syz.2.437': attribute type 30 has an invalid length. [ 202.349253][ T7579] netlink: 'syz.2.437': attribute type 30 has an invalid length. [ 202.403393][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 202.436676][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 202.826625][ T7587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7587 comm=syz.5.440 [ 204.717565][ T30] audit: type=1400 audit(1777669975.652:481): avc: denied { egress } for pid=7591 comm="syz.4.441" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 204.867247][ T30] audit: type=1400 audit(1777669975.652:482): avc: denied { sendto } for pid=7591 comm="syz.4.441" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 206.595757][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.447'. [ 206.664491][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.446'. [ 206.675297][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.446'. [ 206.696678][ T30] audit: type=1400 audit(1777669977.622:483): avc: denied { bind } for pid=7610 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.718246][ T30] audit: type=1400 audit(1777669977.622:484): avc: denied { name_bind } for pid=7610 comm="syz.2.446" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 207.037425][ T5724] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.298816][ T30] audit: type=1400 audit(1777669977.622:485): avc: denied { node_bind } for pid=7610 comm="syz.2.446" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 207.322716][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 207.438935][ T7623] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 207.451589][ T30] audit: type=1326 audit(1777669978.382:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.478679][ T5724] usb 6-1: device descriptor read/64, error -32 [ 207.498111][ T30] audit: type=1326 audit(1777669978.382:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.553078][ T30] audit: type=1326 audit(1777669978.382:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.649814][ T30] audit: type=1326 audit(1777669978.382:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.690281][ T30] audit: type=1326 audit(1777669978.382:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.735285][ T5724] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 207.752222][ T30] audit: type=1326 audit(1777669978.382:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 207.784880][ T30] audit: type=1326 audit(1777669978.382:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.1.448" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffb19cdd9 code=0x7ffc0000 [ 208.047319][ T7632] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 209.058487][ T5724] usb 6-1: device descriptor read/64, error -71 [ 209.425174][ T5724] usb usb6-port1: attempt power cycle [ 209.798431][ T7641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7641 comm=syz.4.452 [ 210.852778][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7652 comm=syz.3.453 [ 212.426246][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.461'. [ 212.791766][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 212.791802][ T30] audit: type=1400 audit(1777669983.492:499): avc: denied { unlink } for pid=7662 comm="syz.2.458" name="#1" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 213.610916][ T30] audit: type=1400 audit(1777669984.532:500): avc: denied { read append } for pid=7680 comm="syz.2.463" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.278638][ T7681] vxcan1 speed is unknown, defaulting to 1000 [ 214.388999][ T7686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.405174][ T7686] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 214.592944][ T7686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.604372][ T7686] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.634446][ T7686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.653689][ T7686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.675037][ T7686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.694130][ T7686] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.776951][ T7686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 214.797286][ T7686] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 214.897201][ T7704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7704 comm=syz.4.467 [ 214.993523][ T7686] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 215.324280][ T6294] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 215.336884][ T804] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 215.660711][ T6294] usb 2-1: device descriptor read/64, error -71 [ 215.666173][ T7713] comedi comedi0: Minor 7 could not be opened [ 215.677303][ T804] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 215.685190][ T804] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.565596][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 216.644310][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 216.715473][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 216.715537][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 216.794243][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 216.824355][ T6294] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 216.890196][ T804] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.943486][ T804] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.964275][ T804] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.982022][ T804] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 217.060459][ T804] usb 4-1: can't read configurations, error -71 [ 217.270209][ T7718] m1Ie5n: entered promiscuous mode [ 217.431023][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 217.523597][ T30] audit: type=1400 audit(1777669988.452:501): avc: denied { create } for pid=7726 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.998576][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.396249][ T6294] usb usb2-port1: attempt power cycle [ 218.634265][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 218.795714][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 218.796145][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 218.801788][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 218.874564][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.326441][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.572808][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.656127][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.668727][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.678645][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.887171][ T7721] vxcan1 speed is unknown, defaulting to 1000 [ 219.918213][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.028309][ T6294] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 220.084799][ T7748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7748 comm=syz.5.478 [ 220.137040][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.618636][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.632429][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.862695][ T30] audit: type=1400 audit(1777669991.782:502): avc: denied { read write } for pid=7751 comm="syz.2.479" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 220.911033][ T7753] 9pnet_fd: Insufficient options for proto=fd [ 221.046679][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 221.056672][ T6294] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 221.143642][ T6294] usb 2-1: can't read configurations, error -71 [ 221.328797][ T7756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7756 comm=syz.2.479 [ 221.383782][ T30] audit: type=1400 audit(1777669991.792:503): avc: denied { open } for pid=7751 comm="syz.2.479" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 221.421573][ T30] audit: type=1400 audit(1777669992.062:504): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.404259][ T5343] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 222.574436][ T5343] usb 5-1: Using ep0 maxpacket: 8 [ 222.604410][ T5343] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 222.670306][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.721340][ T5343] usb 5-1: Product: syz [ 222.749663][ T5343] usb 5-1: Manufacturer: syz [ 222.776747][ T5343] usb 5-1: SerialNumber: syz [ 222.824704][ T5343] usb 5-1: config 0 descriptor?? [ 222.887214][ T5343] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 223.016760][ T7758] comedi comedi0: Minor 7 could not be opened [ 223.065545][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.483'. [ 223.141536][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.184373][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.216624][ T7773] netlink: 184 bytes leftover after parsing attributes in process `syz.1.485'. [ 223.235740][ T7771] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.484'. [ 223.246974][ T7774] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.484'. [ 223.256122][ T7771] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.484'. [ 223.259175][ T7774] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.484'. [ 223.365150][ T6294] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 223.391804][ T7779] net_ratelimit: 3 callbacks suppressed [ 223.391819][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.514557][ T6294] usb 6-1: device descriptor read/64, error -71 [ 223.774644][ T5724] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 223.782360][ T6294] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 224.006214][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.064318][ T5724] usb 3-1: device descriptor read/64, error -71 [ 224.089541][ T6294] usb 6-1: device descriptor read/64, error -71 [ 224.116332][ T7789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7789 comm=syz.3.490 [ 224.797642][ T6294] usb usb6-port1: attempt power cycle [ 224.819015][ T5343] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 224.842552][ T5343] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 224.856217][ T5343] usb 5-1: USB disconnect, device number 14 [ 224.964798][ T5724] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 224.971286][ T7798] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 225.307701][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.319858][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.339008][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.348017][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.487323][ T6294] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 225.496920][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.524653][ T6294] usb 6-1: device descriptor read/8, error -71 [ 225.603219][ T30] audit: type=1400 audit(1777669996.532:505): avc: denied { associate } for pid=7797 comm="syz.4.493" name="rdma.current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.780213][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.885862][ T5724] usb 3-1: device descriptor read/64, error -71 [ 225.905979][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.920160][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.056515][ T5724] usb usb3-port1: attempt power cycle [ 226.114793][ T6294] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 226.555870][ T6294] usb 6-1: device descriptor read/8, error -71 [ 226.724810][ T6294] usb usb6-port1: unable to enumerate USB device [ 226.791126][ T7810] comedi comedi0: Minor 7 could not be opened [ 227.354706][ T7829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=7829 comm=syz.2.502 [ 227.976575][ T5735] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 228.055145][ T6294] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 228.472063][ T5735] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 228.472081][ T7835] netlink: 'syz.3.505': attribute type 30 has an invalid length. [ 228.509227][ T5735] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 228.525551][ T7839] netlink: 'syz.3.505': attribute type 30 has an invalid length. [ 228.546916][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.564423][ T5735] usb 5-1: Product: syz [ 228.585334][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 228.606908][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 228.606913][ T5735] usb 5-1: Manufacturer: syz [ 228.629728][ T6294] usb 2-1: Using ep0 maxpacket: 8 [ 228.647293][ T5735] usb 5-1: SerialNumber: syz [ 228.648995][ T6294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.699808][ T5735] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 228.721043][ T5735] imon 5-1:155.0: unable to initialize intf0, err -19 [ 228.736709][ T6294] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 228.736961][ T5735] imon:imon_probe: failed to initialize context! [ 228.754549][ T5735] imon 5-1:155.0: unable to register, err -19 [ 228.770160][ T6294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.798070][ T6294] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 228.802045][ T30] audit: type=1400 audit(1777669999.722:506): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 228.811165][ T6294] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 228.965359][ T6294] usb 2-1: Product: syz [ 228.969864][ T6294] usb 2-1: Manufacturer: syz [ 228.977776][ T6294] usb 2-1: SerialNumber: syz [ 228.999195][ T6294] usb 2-1: config 0 descriptor?? [ 230.074866][ T5735] net_ratelimit: 3 callbacks suppressed [ 230.074889][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.094261][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.242718][ T5735] usb 5-1: USB disconnect, device number 15 [ 230.371335][ T7857] netem: change failed [ 230.675307][ T7859] comedi comedi0: Minor 7 could not be opened [ 230.757353][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.768491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.908247][ T6294] rc_core: IR keymap rc-imon-rsc not found [ 230.914619][ T6294] Registered IR keymap rc-empty [ 230.944788][ T6294] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 230.955920][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.964700][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.265539][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.273677][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.284968][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.287390][ T6294] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 231.439524][ T6294] usb 2-1: USB disconnect, device number 23 [ 231.698615][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 232.319221][ T7888] netlink: 'syz.3.519': attribute type 30 has an invalid length. [ 232.327648][ T6294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.370088][ T7891] netlink: 'syz.3.519': attribute type 30 has an invalid length. [ 232.430965][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 232.611421][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 233.803518][ T7912] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 233.826733][ T7912] ftl_cs: FTL header not found. [ 233.894950][ T30] audit: type=1400 audit(1777670004.722:507): avc: denied { ioctl } for pid=7908 comm="syz.1.521" path="/118/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 234.978744][ T7928] erofs (device nullb0): cannot find valid erofs superblock [ 235.153779][ T7917] [U]  [ 235.518417][ T6294] net_ratelimit: 4 callbacks suppressed [ 235.518435][ T6294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.988494][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.531'. [ 236.019288][ T5724] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.605890][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.661604][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.715280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.786590][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.798350][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.813798][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 236.816048][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.876684][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 236.959100][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 237.010243][ T5724] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 237.046251][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.081556][ T5724] usb 3-1: Product: syz [ 237.102043][ T5724] usb 3-1: Manufacturer: syz [ 237.115804][ T5724] usb 3-1: SerialNumber: syz [ 237.133810][ T5724] usb 3-1: config 0 descriptor?? [ 237.200470][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 237.210322][ T7965] FAULT_INJECTION: forcing a failure. [ 237.210322][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 237.229242][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.3.537 Not tainted syzkaller #0 PREEMPT(full) [ 237.229265][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.229275][ T7965] Call Trace: [ 237.229281][ T7965] [ 237.229288][ T7965] dump_stack_lvl+0x100/0x190 [ 237.229314][ T7965] should_fail_ex.cold+0x5/0xa [ 237.229342][ T7965] should_failslab+0xc2/0x120 [ 237.229363][ T7965] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 237.229388][ T7965] ? skb_clone+0x190/0x400 [ 237.229418][ T7965] skb_clone+0x190/0x400 [ 237.229445][ T7965] netlink_deliver_tap+0xaed/0xcc0 [ 237.229470][ T7965] netlink_unicast+0x6a5/0x850 [ 237.229494][ T7965] ? __pfx_netlink_unicast+0x10/0x10 [ 237.229521][ T7965] netlink_ack+0x655/0xb80 [ 237.229548][ T7965] netlink_rcv_skb+0x333/0x420 [ 237.229574][ T7965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.229603][ T7965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.229633][ T7965] ? netlink_deliver_tap+0x1ae/0xcc0 [ 237.229657][ T7965] netlink_unicast+0x585/0x850 [ 237.229680][ T7965] ? __pfx_netlink_unicast+0x10/0x10 [ 237.229706][ T7965] netlink_sendmsg+0x8b0/0xda0 [ 237.229731][ T7965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.229750][ T7965] ? __might_fault+0x90/0x140 [ 237.229783][ T7965] ____sys_sendmsg+0x9e1/0xb70 [ 237.229801][ T7965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.229823][ T7965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.229847][ T7965] ? __pfx__kstrtoull+0x10/0x10 [ 237.229870][ T7965] ___sys_sendmsg+0x190/0x1e0 [ 237.229892][ T7965] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.229924][ T7965] ? find_held_lock+0x2b/0x80 [ 237.229958][ T7965] __sys_sendmmsg+0x205/0x430 [ 237.229987][ T7965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.230021][ T7965] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.230053][ T7965] ? fput+0x79/0x100 [ 237.230076][ T7965] ? ksys_write+0x1ac/0x250 [ 237.230094][ T7965] ? __pfx_ksys_write+0x10/0x10 [ 237.230117][ T7965] __x64_sys_sendmmsg+0x9c/0x100 [ 237.230141][ T7965] ? lockdep_hardirqs_on+0x78/0x100 [ 237.230161][ T7965] do_syscall_64+0x10b/0xf80 [ 237.230179][ T7965] ? clear_bhb_loop+0x40/0x90 [ 237.230199][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.230218][ T7965] RIP: 0033:0x7f5ac7b9cdd9 [ 237.230233][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.230249][ T7965] RSP: 002b:00007f5ac8a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.230266][ T7965] RAX: ffffffffffffffda RBX: 00007f5ac7e15fa0 RCX: 00007f5ac7b9cdd9 [ 237.230277][ T7965] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 237.230287][ T7965] RBP: 00007f5ac8a61090 R08: 0000000000000000 R09: 0000000000000000 [ 237.230297][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.230307][ T7965] R13: 00007f5ac7e16038 R14: 00007f5ac7e15fa0 R15: 00007ffdcb238178 [ 237.230330][ T7965] [ 237.525958][ T5705] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 237.551661][ T30] audit: type=1400 audit(1777670008.482:508): avc: denied { bind } for pid=7935 comm="syz.2.529" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.582374][ T30] audit: type=1400 audit(1777670008.482:509): avc: denied { name_bind } for pid=7935 comm="syz.2.529" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 237.604710][ T30] audit: type=1400 audit(1777670008.482:510): avc: denied { node_bind } for pid=7935 comm="syz.2.529" saddr=255.255.255.255 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 237.629247][ T30] audit: type=1400 audit(1777670008.482:511): avc: denied { connect } for pid=7935 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.663859][ T30] audit: type=1400 audit(1777670008.592:512): avc: denied { setattr } for pid=7962 comm="syz.4.536" name="NETLINK" dev="sockfs" ino=18393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.702297][ T5705] usb 6-1: device descriptor read/64, error -71 [ 237.825185][ T30] audit: type=1400 audit(1777670008.762:513): avc: denied { create } for pid=7967 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.128305][ T5705] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.192821][ T30] audit: type=1400 audit(1777670009.122:514): avc: denied { mount } for pid=7967 comm="syz.3.538" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 238.219687][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.233332][ T7971] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 238.251752][ T7970] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 238.294790][ T5705] usb 6-1: device descriptor read/64, error -71 [ 238.341565][ T30] audit: type=1400 audit(1777670009.232:515): avc: denied { read } for pid=7967 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.427585][ T5705] usb usb6-port1: attempt power cycle [ 238.501510][ T7970] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 238.512308][ T7970] overlayfs: failed to look up (tracing) for ino (-66) [ 238.814658][ T5705] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 238.865033][ T5705] usb 6-1: device descriptor read/8, error -71 [ 238.958989][ T7977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7977 comm=syz.4.540 [ 238.981964][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 239.114428][ T5705] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 239.424096][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.469963][ T5705] usb 6-1: device descriptor read/8, error -71 [ 239.622584][ T5705] usb usb6-port1: unable to enumerate USB device [ 239.674657][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.700156][ T30] audit: type=1400 audit(1777670011.632:516): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 240.017164][ T7981] [U]  [ 240.750219][ T6294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.930722][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.466836][ T8010] netlink: 'syz.2.550': attribute type 12 has an invalid length. [ 242.484908][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.511597][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.519924][ T8010] netlink: 'syz.2.550': attribute type 29 has an invalid length. [ 242.528955][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.551652][ T8010] netlink: 148 bytes leftover after parsing attributes in process `syz.2.550'. [ 242.590607][ T8015] netlink: 52 bytes leftover after parsing attributes in process `syz.5.552'. [ 242.601345][ T30] audit: type=1400 audit(1777670014.502:517): avc: denied { ioctl } for pid=8013 comm="syz.5.552" path="socket:[20505]" dev="sockfs" ino=20505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.634722][ T8010] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 242.643310][ T8019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8019 comm=syz.5.552 [ 242.655801][ T8010] netlink: 'syz.2.550': attribute type 2 has an invalid length. [ 242.790684][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.821915][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.830982][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.958445][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.834385][ T30] audit: type=1400 audit(1777670015.762:518): avc: denied { transfer } for pid=8053 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 243.994549][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.021331][ T8055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8055 comm=syz.5.559 [ 244.295511][ T8062] netlink: 'syz.4.562': attribute type 3 has an invalid length. [ 244.366212][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 244.397091][ T8059] [U]  [ 244.557168][ T30] audit: type=1400 audit(1777670016.492:519): avc: denied { connect } for pid=8063 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.628546][ T30] audit: type=1400 audit(1777670016.562:520): avc: denied { getopt } for pid=8063 comm="syz.1.564" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.818250][ T8081] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.567' sets config #2 [ 244.956241][ T8082] capability: warning: `syz.1.568' uses 32-bit capabilities (legacy support in use) [ 332.096450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.094139][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 350.101293][ C1] rcu: 0-...!: (2 GPs behind) idle=ec74/1/0x4000000000000000 softirq=26269/26270 fqs=22 [ 350.111860][ C1] rcu: (detected by 1, t=10506 jiffies, g=26513, q=442 ncpus=2) [ 350.119574][ C1] Sending NMI from CPU 1 to CPUs 0: [ 350.119602][ C0] NMI backtrace for cpu 0 [ 350.119615][ C0] CPU: 0 UID: 0 PID: 8080 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(full) [ 350.119632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.119640][ C0] RIP: 0010:preempt_count_sub+0x22/0x160 [ 350.119660][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c0 80 13 1a 9b 53 89 fb 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 <83> c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 d9 00 00 00 8b 0d 75 [ 350.119673][ C0] RSP: 0018:ffffc90000007d78 EFLAGS: 00000802 [ 350.119686][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffffffff3634270 [ 350.119695][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 350.119703][ C0] RBP: 0000000000000006 R08: 0000000000000000 R09: fffffbfff367bf25 [ 350.119711][ C0] R10: ffffffff9b3df92b R11: 0000000000000001 R12: 0000000000000001 [ 350.119720][ C0] R13: dffffc0000000000 R14: ffff88802db06300 R15: 1ffff92000000fb6 [ 350.119729][ C0] FS: 00007f1ffc0376c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 350.119743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.119752][ C0] CR2: 00002000000dd030 CR3: 0000000034cfa000 CR4: 00000000003526f0 [ 350.119761][ C0] Call Trace: [ 350.119766][ C0] [ 350.119772][ C0] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 350.119789][ C0] debug_object_deactivate+0x2e4/0x3b0 [ 350.119808][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 350.119827][ C0] ? timerqueue_linked_add+0x260/0x430 [ 350.119852][ C0] __hrtimer_run_queues+0x2f0/0xa00 [ 350.119874][ C0] ? rcu_is_watching+0x12/0xc0 [ 350.119895][ C0] hrtimer_interrupt+0x3e5/0x940 [ 350.119913][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 350.119933][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 350.119949][ C0] [ 350.119954][ C0] [ 350.119959][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.119974][ C0] RIP: 0010:prepare_alloc_pages+0x3e7/0x5f0 [ 350.119992][ C0] Code: 00 65 48 8b 0d f2 7d a3 11 65 66 f7 05 01 7e a3 11 01 ff 75 22 48 b8 00 00 00 00 00 fc ff df 4c 89 e6 48 c1 ee 03 80 3c 06 00 <0f> 85 e7 01 00 00 48 83 7b 08 00 74 35 48 b8 00 00 00 00 00 fc ff [ 350.120004][ C0] RSP: 0018:ffffc900078870d8 EFLAGS: 00000246 [ 350.120015][ C0] RAX: dffffc0000000000 RBX: ffffc90007887290 RCX: ffff8880338fca00 [ 350.120024][ C0] RDX: 0000000000000000 RSI: 1ffff92000f10e53 RDI: ffffc900078872a8 [ 350.120033][ C0] RBP: 0000000000140cca R08: ffffc90007887290 R09: ffffc90007887240 [ 350.120042][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90007887298 [ 350.120050][ C0] R13: ffffc900078872ac R14: 0000000000000008 R15: ffffc90007887230 [ 350.120067][ C0] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 350.120090][ C0] ? __lock_acquire+0x4a5/0x2630 [ 350.120108][ C0] ? __lock_acquire+0x4a5/0x2630 [ 350.120124][ C0] ? css_rstat_updated+0x1ce/0x5a0 [ 350.120142][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.120163][ C0] ? do_raw_spin_lock+0x128/0x260 [ 350.120182][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.120201][ C0] ? find_held_lock+0x2b/0x80 [ 350.120217][ C0] ? __lock_acquire+0x4a5/0x2630 [ 350.120234][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.120251][ C0] ? policy_nodemask+0xed/0x4f0 [ 350.120267][ C0] alloc_pages_mpol+0x1fb/0x540 [ 350.120283][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 350.120297][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 350.120320][ C0] folio_alloc_mpol_noprof+0x36/0x260 [ 350.120337][ C0] shmem_alloc_folio+0x135/0x160 [ 350.120355][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 350.120377][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 350.120398][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 350.120420][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 350.120441][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 350.120461][ C0] ? filemap_map_pages+0x9c1/0x2140 [ 350.120482][ C0] shmem_fault+0x1f9/0xa20 [ 350.120502][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 350.120523][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 350.120543][ C0] ? find_held_lock+0x2b/0x80 [ 350.120558][ C0] __do_fault+0x10b/0x440 [ 350.120571][ C0] do_fault+0xa99/0x1750 [ 350.120588][ C0] __handle_mm_fault+0x187d/0x2a00 [ 350.120609][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 350.120629][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 350.120647][ C0] ? pte_offset_map_lock+0x174/0x320 [ 350.120661][ C0] ? find_held_lock+0x2b/0x80 [ 350.120677][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 350.120694][ C0] handle_mm_fault+0x36d/0xa20 [ 350.120713][ C0] __get_user_pages+0x1178/0x32a0 [ 350.120732][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 350.120750][ C0] populate_vma_page_range+0x267/0x3f0 [ 350.120767][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 350.120783][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 350.120798][ C0] ? do_mmap+0x93f/0x12f0 [ 350.120814][ C0] __mm_populate+0x107/0x3a0 [ 350.120830][ C0] ? __pfx___mm_populate+0x10/0x10 [ 350.120851][ C0] ? up_write+0x28c/0x4f0 [ 350.120870][ C0] vm_mmap_pgoff+0x37f/0x470 [ 350.120888][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 350.120904][ C0] ? do_futex+0x192/0x350 [ 350.120923][ C0] ? __pfx_do_futex+0x10/0x10 [ 350.120943][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 350.120958][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 350.120977][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 350.120992][ C0] ? xfd_validate_state+0x129/0x190 [ 350.121007][ C0] ? ksys_write+0x1ac/0x250 [ 350.121023][ C0] __x64_sys_mmap+0x125/0x190 [ 350.121041][ C0] do_syscall_64+0x10b/0xf80 [ 350.121056][ C0] ? clear_bhb_loop+0x40/0x90 [ 350.121071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.121085][ C0] RIP: 0033:0x7f1ffb19cdd9 [ 350.121097][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.121109][ C0] RSP: 002b:00007f1ffc037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 350.121121][ C0] RAX: ffffffffffffffda RBX: 00007f1ffb415fa0 RCX: 00007f1ffb19cdd9 [ 350.121131][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 350.121139][ C0] RBP: 00007f1ffb232d69 R08: ffffffffffffffff R09: 0000000070f9a000 [ 350.121148][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 350.121157][ C0] R13: 00007f1ffb416038 R14: 00007f1ffb415fa0 R15: 00007ffe744bb358 [ 350.121171][ C0] [ 350.121600][ C1] rcu: rcu_preempt kthread starved for 10395 jiffies! g26513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 350.758790][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 350.768749][ C1] rcu: RCU grace-period kthread stack dump: [ 350.774620][ C1] task:rcu_preempt state:R running task stack:28904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 350.788110][ C1] Call Trace: [ 350.791374][ C1] [ 350.794299][ C1] __schedule+0x10e9/0x6820 [ 350.798812][ C1] ? __pfx___schedule+0x10/0x10 [ 350.803656][ C1] ? find_held_lock+0x2b/0x80 [ 350.808323][ C1] ? schedule+0x2bf/0x390 [ 350.812644][ C1] schedule+0xdd/0x390 [ 350.816714][ C1] schedule_timeout+0x127/0x280 [ 350.821558][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 350.826929][ C1] ? __pfx_process_timeout+0x10/0x10 [ 350.832206][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 350.838002][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 350.843459][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 350.848215][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 350.853494][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 350.858945][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 350.863881][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 350.869071][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 350.874871][ C1] rcu_gp_kthread+0x179/0x230 [ 350.879543][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 350.884729][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 350.890525][ C1] ? __kthread_parkme+0x18c/0x230 [ 350.895543][ C1] ? kthread+0x13a/0x450 [ 350.899776][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 350.904966][ C1] kthread+0x370/0x450 [ 350.909027][ C1] ? __pfx_kthread+0x10/0x10 [ 350.913610][ C1] ret_from_fork+0x72b/0xd50 [ 350.918195][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 350.923301][ C1] ? __switch_to+0x800/0x1100 [ 350.927976][ C1] ? __pfx_kthread+0x10/0x10 [ 350.932563][ C1] ret_from_fork_asm+0x1a/0x30 [ 350.937334][ C1] [ 350.940339][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 350.946647][ C1] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 350.956090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.966129][ C1] RIP: 0010:handle_softirqs+0x1ad/0xa00 [ 350.971669][ C1] Code: 30 44 88 74 24 23 45 89 ee 48 c7 c7 00 77 ad 8b e8 08 cb c1 09 31 d2 65 66 89 15 56 72 42 12 e8 c9 9f 48 00 fb bb ff ff ff ff <49> c7 c4 c0 a0 40 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 47 [ 350.991267][ C1] RSP: 0000:ffffc90000a08f20 EFLAGS: 00000206 [ 350.997319][ C1] RAX: 00000000007fe61e RBX: 00000000ffffffff RCX: 0000000000000004 [ 351.005275][ C1] RDX: 0000000000000000 RSI: ffffffff8df1f719 RDI: ffffffff8c1c3500 [ 351.013231][ C1] RBP: 0000000100001306 R08: 0000000000000001 R09: 0000000000000000 [ 351.021186][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 351.029143][ C1] R13: 0000000000000100 R14: 0000000000000100 R15: 1ffff920001411ec [ 351.037101][ C1] FS: 000055555ace3500(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 351.046022][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.052599][ C1] CR2: 000055555acfea48 CR3: 0000000059efa000 CR4: 00000000003526f0 [ 351.060559][ C1] Call Trace: [ 351.063833][ C1] [ 351.066665][ C1] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 351.072376][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 351.077657][ C1] ? _raw_spin_unlock+0x28/0x50 [ 351.082496][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 351.088121][ C1] __irq_exit_rcu+0x162/0x210 [ 351.092794][ C1] irq_exit_rcu+0x9/0x30 [ 351.097035][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 351.102658][ C1] [ 351.105577][ C1] [ 351.108498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.114470][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 351.121137][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 89 7c 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 351.140733][ C1] RSP: 0000:ffffc90003337888 EFLAGS: 00000293 [ 351.146787][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc0f3d [ 351.154749][ C1] RDX: ffff88807a402500 RSI: ffffffff81fc0f17 RDI: ffff88807a402500 [ 351.162710][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 351.170665][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 351.178622][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 351.186589][ C1] ? smp_call_function_many_cond+0x5ad/0x1700 [ 351.192649][ C1] ? smp_call_function_many_cond+0x587/0x1700 [ 351.198717][ C1] ? smp_call_function_many_cond+0x587/0x1700 [ 351.204776][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 351.210139][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 351.215338][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 351.221743][ C1] ? local_lock_release+0x99/0x130 [ 351.227283][ C1] ? lock_acquire+0x1b1/0x370 [ 351.231951][ C1] ? rcu_is_watching+0x12/0xc0 [ 351.236711][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 351.241898][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 351.247258][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 351.252361][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 351.257466][ C1] ? page_table_check_clear+0x47e/0x8f0 [ 351.263006][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 351.268977][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 351.274515][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 351.279442][ C1] ptep_clear_flush+0x148/0x170 [ 351.284282][ C1] do_wp_page+0x12a4/0x4350 [ 351.288788][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 351.293639][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.299012][ C1] __handle_mm_fault+0x1ab6/0x2a00 [ 351.304124][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 351.309403][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 351.314861][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 351.320073][ C1] handle_mm_fault+0x36d/0xa20 [ 351.324833][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 351.329947][ C1] exc_page_fault+0x6f/0xd0 [ 351.334442][ C1] asm_exc_page_fault+0x26/0x30 [ 351.339284][ C1] RIP: 0033:0x7f28fb561960 [ 351.343686][ C1] Code: c4 28 00 48 8d 0c 1e 49 39 d0 49 89 48 60 0f 95 c2 48 29 d8 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 56 08 <48> 89 41 08 48 8d 4e 10 eb b0 48 8d 0d 4f da 0c 00 ba 9e 10 00 00 [ 351.363281][ C1] RSP: 002b:00007ffd4f566bd0 EFLAGS: 00010206 [ 351.369336][ C1] RAX: 00000000000185c1 RBX: 0000000000008040 RCX: 000055555acfea40 [ 351.377292][ C1] RDX: 0000000000008041 RSI: 000055555acf6a00 RDI: 0000000000000004 [ 351.385248][ C1] RBP: 0000000000000802 R08: 00007f28fb7ede20 R09: 0000000000000001 [ 351.393204][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 351.401162][ C1] R13: 0000000000000000 R14: 00007f28fb7ede80 R15: 0000000000000000 [ 351.409132][ C1]