last executing test programs: 3m17.492777077s ago: executing program 1 (id=356): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80000000972, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e97000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x8913a000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) open(0x0, 0x74b880, 0x1de) 3m17.428534675s ago: executing program 1 (id=357): r0 = syz_open_dev$video(&(0x7f00000000c0), 0xda9, 0x2400) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r1, 0xffffffffffffffff, r3) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000240)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102058969405e047507a1d8010203010904000001790020a209048f0800bbaf9980"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 3m14.267653346s ago: executing program 1 (id=371): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x88) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200a00) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.046094826s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x84500, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000003c0)={0xa00, 0xf0, 0x550, 0x320, 0xffffffff, 0x0, 0x20, 0x0, {0x6, 0x5, 0x1}, {0x7, 0x9, 0x1}, {0x7ff, 0xd}, {0xe, 0x9, 0x1}, 0x3, 0x40, 0x200, 0x4, 0x0, 0xf, 0x6, 0x4, 0x958b, 0x8000, 0x1, 0x6, 0x38, 0x1, 0x2, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x0, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "959a5e722d47ff7035ad5f9ee1773e360f1d3678b5c92b4a"}]]}, 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0xc4e2}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r8}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) 3m12.371409404s ago: executing program 1 (id=378): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x7, &(0x7f0000000280)) connect$can_bcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket(0x10, 0x3, 0xd1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r6, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xde23, 0x8000, 0x1, 0x3b9}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 3m10.903478182s ago: executing program 1 (id=384): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe443b1b5e2a088137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m10.773547082s ago: executing program 32 (id=384): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddc8cdde75537d07007e0d0000bf2dfe443b1b5e2a088137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9.44927129s ago: executing program 5 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES64=0x0], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x2, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x2d) keyctl$set_timeout(0xf, r4, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0xe5e, 0x0, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0x0, 0x4e20, 0x8, 0x2, 0x120, 0xa0, 0x2f, 0x0, r6}, {0x7f, 0x10001, 0xa3, 0x3, 0x2, 0x10, 0x1, 0x8}, {0x31, 0x7f, 0xfffffffffffffd99, 0x7}, 0x2, 0x6e6bb9, 0x2, 0x0, 0x2}, {{@in6=@remote, 0x4d2, 0x25}, 0xa, @in=@local, 0x0, 0x3, 0x2, 0x5, 0xfff, 0xffffffff, 0x2}}, 0xe8) r8 = open_tree(0xffffffffffffffff, 0x0, 0x9901) r9 = msgget$private(0x0, 0xa4) msgctl$IPC_INFO(r9, 0x3, &(0x7f0000000040)=""/24) msgctl$MSG_STAT(r9, 0xb, &(0x7f0000000700)=""/145) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r13, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x1ff, {0x0, 0x0, 0x5, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4000, 0x0, r14, r15}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_clone3(&(0x7f0000000600)={0x220002000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/211, 0xd3, &(0x7f00000004c0)=""/226, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, r1, r1, r1], 0x8, {r8}}, 0x58) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000680)={{0x0, r10, r11, r12, r15, 0x140, 0x6}, 0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x300000000000, 0x8000000000000001, 0x0, 0x4, 0xffff, 0x6, r16, r1}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.272588002s ago: executing program 5 (id=990): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f10"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3000000, 0xffffffffffffffff, 0x6}, 0x94) 9.111244161s ago: executing program 3 (id=992): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0xa0, 0x90, 0x7e, 0x40, 0xbb4, 0xa66, 0xe65a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x40, 0xf7, "", [{{0x9, 0x4, 0xb4, 0x6, 0x0, 0x30, 0xce, 0xfd, 0x8}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000002400)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="af6a7d8ac12ace680dc12930b3f82db4cd8e047ed29e93e1b5f0aaa25beab5f3b2e90721ce72145d77d840f5ee14a25754ced007509ffbd1d99cc35da7e0d6db15e1b76f8b3c11bdebc743afe6e070de6f741cb7c08995eb7f26affb6c69ad453b23faa36314bda0837e272af0e9f2f787f19d2f3bd6df7e64aefa9fbd0e9e5ccc50a1116e71b17bb3e04b3783641f13afd24fc020aadb93f98ff3742a5c", @ANYRESHEX=r1, @ANYRES32=r1], 0x50) 8.971352981s ago: executing program 4 (id=994): openat$nullb(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$loop(0x0, 0xd79, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x50, 0x0, &(0x7f0000000080)=0xffffffffffffff33) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x2, 0xd69, 0x40, 0x1008, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0xe}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, 0x0, &(0x7f0000000140)=""/91, 0x4}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa8b8}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'dvmrp1\x00', 'geneve1\x00', {0xff}, {}, 0xc, 0x3, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x2, 0x2}, {0x7f, 0xffffffffffffa12e}, {0xf}, 0x9}}, @common=@ah={{0x30}, {[0x6, 0x8], 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0xd, 0x1, 0x2, 0x5, 0x1], 0x1, 0x158c3ab927babde5}, {0x4, [0x0, 0x3, 0x4, 0x2, 0x5, 0x2], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "efc5", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x1, 0x1ff, 0x257, 'syz1\x00', 'syz0\x00', {0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 8.018226944s ago: executing program 4 (id=995): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x541042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) openat$cgroup_type(r7, &(0x7f0000000180), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3000000000000000000000000800070000000000"], 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0xff0f0000, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, r4, 0x0, 0x0, 0xffffeffffffffffe}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 7.356916914s ago: executing program 0 (id=998): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400c3, 0x80) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) 6.01345746s ago: executing program 0 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r5, 0x0, r6}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x0) lseek(r7, 0xaeb, 0x1) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r8) r9 = socket$igmp(0x2, 0x3, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) 5.876486936s ago: executing program 5 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x210042) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x0, 0x8000, 0xb31}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010890}, 0x8000) 5.815364738s ago: executing program 3 (id=1003): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x4e, 0x0, 0x7, 0xfffffffd, 0x4, 0x2, 0x1}}) 5.443918674s ago: executing program 3 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x80, 0x4, 0x9, 0x9, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0xb, 0x0, 0x4, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5.209130807s ago: executing program 5 (id=1005): r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x40, 0x10, 0xe0, {0xe0, 0x8, "cb627dfe55232ddebd02d3f5fba34a966449493ed8e29a5a1f2a9edb41e4c0f91bc895dc33827c89017ed4851be098508d6eca263fc6b2b7b694d8e940f91fb6045a82f43b5c6631401a2c2864fd2dec620791659f6a8db92275ea0a496eabeaa1a7ad23b9f57d62d66d238bf6a73e53bfe91e7169dbe79e524168c055751cdba8e71085c011a702640916625b746254d8350c28f57eb4239a87ed5be0450d98de2a7a8052c26318e78e23e3a13615c5907e241f3a551dea028b7d24786ce89be2a9fc481e4cd7f50932ac927c684ba33692ef3928a773f14ce94e569707"}}, &(0x7f0000000680)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6427d139f69a039541203c"}}}, &(0x7f0000000880)={0x34, &(0x7f0000000700)={0x40, 0x16, 0x2c, "b14824b0b1de7f5303b1eac304cea4fe30e34c33de076a693f4e0119ffec0d6c9acf152a819759b28ce4a204"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xa4}, &(0x7f00000007c0)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000800)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000840)={0xc0, 0xa2, 0x2f, "ff062aa07af2938985af3ee82562c37663e33cc5f338363c68697344971699892f7f91366c2094985003fc1f521ef0"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='loginuid\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1c0000f50403090005000f0000000000000067991ba000403a00fc0200000000000000000000000000dd8d5b6ba910bc809d3084b3c5c5f6fcfe8000000000000000000000000001bb5e0404020670b600fe80000000000000000000000020002800000000000000000000ffffac1e0101830090780004c89bff"], 0xfdef) 5.189207075s ago: executing program 3 (id=1006): syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c) fcntl$setlease(r1, 0x400, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000040)=0xad59) ioctl$TCSETS(r3, 0x5402, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r5 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) syz_open_pts(r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003f80)={0x2020}, 0x1e04) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="140000000000000001001efc01000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000800}}], 0x2, 0x0) 5.144024907s ago: executing program 2 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r5, 0x0, r6}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x0) lseek(r7, 0xaeb, 0x1) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) 5.086967872s ago: executing program 0 (id=1008): memfd_create(&(0x7f0000000040)='\xac#]/-\xc0\x00', 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x2010}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) 4.696002894s ago: executing program 4 (id=1009): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e31000000000000000000"], 0x60}}, 0x0) 3.939072148s ago: executing program 4 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r5, 0x0, r6}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x0) lseek(r7, 0xaeb, 0x1) getdents64(r7, 0x0, 0x4f) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) close(r8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) 3.935912328s ago: executing program 2 (id=1011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) sendto$inet6(r0, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="c923c232254854e52189548fe5870a409f5885610d8e89cf", 0x18, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000240)='htcp', &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r0, 0x1) 3.116962756s ago: executing program 0 (id=1012): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3000000, 0xffffffffffffffff, 0x6}, 0x94) 2.717581346s ago: executing program 4 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x97) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00001c2000/0x4000)=nil, 0x4000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[], 0x118}}, 0x20008000) 2.686868324s ago: executing program 2 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640000001"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x7, 0xff, 0x2, 0xfffffffffffffffb, 0x7, 0x10]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019300)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e220000d7e51f5b1222a7800bd07e72fa9fb491cfc43398f2374cbdb5d35b69ca03dc465f323cf45f49d5dd88818a163881a0d02aa49b0ea66bb55fade786d9300b443e55aca07ebfe6c55e2217d1fe75acc36e004542fad5e11b99296e72d9b8d0a2dfd492c782b8c711fa49ca322731240fd7d594978a22"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.640754085s ago: executing program 3 (id=1015): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) dup(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141140, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000240)) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) syz_open_pts(r5, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1b, {0xa, 0x0, 0x8, @empty}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) 2.472206218s ago: executing program 5 (id=1016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000007080)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000002180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10010}}], 0x2, 0x8004) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x100000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r0, 0x40087101, 0x8000000000000001) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100144be00103512138240000102030109025e000101a14003090400000401030001"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 2.4621902s ago: executing program 3 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x100000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x46}, 0x94) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x8000000000000001) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100144be00103512138240000102030109025e000101a140030904000004010300010905098211399df7a50f11e63910ff0308060a0425010009050b0c4000031903092501"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac2150072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405", @ANYBLOB="12aa85"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0xfd9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2004) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0xe375, @rand_addr, 0xfffffffe}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 1.73800418s ago: executing program 2 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r5, 0x0, r6}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x0) lseek(r7, 0xaeb, 0x1) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r8) r9 = socket$igmp(0x2, 0x3, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) 1.143810284s ago: executing program 4 (id=1019): socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) 457.237501ms ago: executing program 2 (id=1020): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e31000000000000000000"], 0x60}}, 0x0) 382.915247ms ago: executing program 0 (id=1021): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x8}}, 0x100, 0x0, 0x0, 0x101, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 106.473167ms ago: executing program 5 (id=1022): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdb"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x2) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x264, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 105.633024ms ago: executing program 2 (id=1023): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x5, 0xfffffffe, 0xc, 0x11, 0x5, 0x79, 0x10001, 0x80008, 0x4, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0x83b, 0xca9f, 0x0, 0x8, 0xffffffff, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x13, 0x7, 0x9, 0xf2, 0x8, @local}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000180)={{r2}, "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"}) 0s ago: executing program 0 (id=1024): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x4, 0xe, 0xf7, 0x7, 0x20, @private1, @rand_addr=' \x01\x00', 0x700, 0x7, 0x7, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r6, &(0x7f00000004c0)=""/384, 0x180) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000280)={0x9, 0x7}) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/215, &(0x7f0000000100)=0xd7) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x1c0, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe8a49d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x406}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6df9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_BEARER={0x164, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @loopback, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9d, @loopback, 0x80}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffe, @remote, 0x4a}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0xc5a8}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bec}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24044880}, 0x48001) kernel console output (not intermixed with test programs): : denied { setopt } for pid=7771 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.779115][ T29] audit: type=1326 audit(1777795422.233:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.2.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f931d796b57 code=0x0 [ 225.402888][ T29] audit: type=1400 audit(1777795423.863:492): avc: denied { write } for pid=7801 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 225.462481][ T29] audit: type=1400 audit(1777795423.903:493): avc: denied { map } for pid=7804 comm="syz.2.516" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 225.516155][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 225.586750][ T7808] net_ratelimit: 105 callbacks suppressed [ 225.586766][ T7808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.599520][ T7808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.606101][ T7808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.612551][ T7808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.618957][ T7808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.625372][ T7808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.631850][ T7808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.638236][ T7808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.644697][ T7808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.651115][ T7808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.861567][ T29] audit: type=1400 audit(1777795424.313:494): avc: denied { append } for pid=7819 comm="syz.0.521" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.866186][ T7820] loop5: detected capacity change from 0 to 7 [ 225.959546][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 226.238570][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.247788][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.274793][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.283960][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.296753][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.305903][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.321829][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.330971][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.339800][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.348934][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.357152][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.366300][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.374764][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.383931][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.392215][ T7820] ldm_validate_partition_table(): Disk read failed. [ 226.411437][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.420581][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.435940][ T5799] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 226.446159][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.455297][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.475429][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.484598][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 226.497031][ T7820] Dev loop5: unable to read RDB block 0 [ 226.513612][ T7820] loop5: unable to read partition table [ 226.521958][ T7820] loop5: partition table beyond EOD, truncated [ 226.528183][ T7820] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 226.617988][ T7828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7828 comm=syz.3.524 [ 226.657189][ T5799] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.657391][ T7830] ======================================================= [ 226.657391][ T7830] WARNING: The mand mount option has been deprecated and [ 226.657391][ T7830] and is ignored by this kernel. Remove the mand [ 226.657391][ T7830] option from the mount to silence this warning. [ 226.657391][ T7830] ======================================================= [ 226.914308][ T5799] usb 1-1: config 1 interface 0 has no altsetting 0 [ 226.937287][ T5799] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.40 [ 226.946872][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.973587][ T5799] usb 1-1: Product: syz [ 226.976144][ T7830] overlayfs: failed to resolve './file0': -2 [ 227.000958][ T5799] usb 1-1: Manufacturer: syz [ 227.022359][ T5799] usb 1-1: SerialNumber: syz [ 227.046456][ T7825] netlink: 'syz.3.524': attribute type 10 has an invalid length. [ 227.179567][ T4979] ldm_validate_partition_table(): Disk read failed. [ 227.186908][ T29] audit: type=1326 audit(1777795425.633:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7836 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4821996b57 code=0x0 [ 227.227594][ T4979] Dev loop5: unable to read RDB block 0 [ 227.233954][ T4979] loop5: unable to read partition table [ 227.241501][ T4979] loop5: partition table beyond EOD, truncated [ 227.250413][ T7841] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 227.256921][ T7841] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.271630][ T7841] vhci_hcd vhci_hcd.0: Device attached [ 227.299078][ T7842] vhci_hcd: connection closed [ 227.300235][ T12] vhci_hcd vhci_hcd.3: stop threads [ 227.324247][ T12] vhci_hcd vhci_hcd.3: release socket [ 227.340551][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 227.413365][ T29] audit: type=1400 audit(1777795425.873:496): avc: denied { ioctl } for pid=7847 comm="syz.2.529" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.519673][ T7820] netlink: 84 bytes leftover after parsing attributes in process `syz.0.521'. [ 227.879777][ T5799] usbhid 1-1:1.0: can't add hid device: -71 [ 227.919798][ T5799] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 228.211333][ T5799] usb 1-1: USB disconnect, device number 14 [ 228.464583][ T7858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7858 comm=syz.3.531 [ 228.548460][ T7858] netlink: 'syz.3.531': attribute type 10 has an invalid length. [ 228.785214][ T7854] syzkaller0: entered promiscuous mode [ 228.796639][ T7854] syzkaller0: entered allmulticast mode [ 228.902324][ T29] audit: type=1400 audit(1777795427.313:497): avc: denied { write } for pid=7859 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.208782][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.296850][ T7862] bridge_slave_0 (unregistering): left allmulticast mode [ 229.315974][ T29] audit: type=1400 audit(1777795427.763:498): avc: denied { listen } for pid=7866 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.337154][ T7862] bridge_slave_0 (unregistering): left promiscuous mode [ 229.348740][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.637965][ T7885] Bluetooth: MGMT ver 1.23 [ 229.643289][ T7885] usb usb9: usbfs: process 7885 (syz.2.540) did not claim interface 47 before use [ 230.421535][ T7896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7896 comm=syz.0.543 [ 230.491930][ T7896] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 230.820233][ T29] audit: type=1400 audit(1777795429.273:499): avc: denied { map } for pid=7902 comm="syz.2.545" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.690420][ T7920] FAULT_INJECTION: forcing a failure. [ 231.690420][ T7920] name failslab, interval 1, probability 0, space 0, times 0 [ 231.735815][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.2.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.735841][ T7920] Tainted: [L]=SOFTLOCKUP [ 231.735848][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.735858][ T7920] Call Trace: [ 231.735863][ T7920] [ 231.735870][ T7920] dump_stack_lvl+0x100/0x190 [ 231.735896][ T7920] should_fail_ex.cold+0x5/0xa [ 231.735922][ T7920] should_failslab+0xc2/0x120 [ 231.735941][ T7920] __kmalloc_cache_noprof+0x7a/0x6f0 [ 231.735965][ T7920] ? nft_netdev_hook_alloc+0x243/0x430 [ 231.735985][ T7920] ? __asan_memset+0x23/0x50 [ 231.736013][ T7920] nft_netdev_hook_alloc+0x243/0x430 [ 231.736038][ T7920] nf_tables_parse_netdev_hooks+0x16f/0x890 [ 231.736060][ T7920] ? __nla_parse+0x40/0x60 [ 231.736084][ T7920] nft_flowtable_parse_hook+0x2ea/0x920 [ 231.736110][ T7920] ? net_generic+0xea/0x2a0 [ 231.736129][ T7920] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 231.736159][ T7920] ? nla_strcmp+0xff/0x130 [ 231.736180][ T7920] nf_tables_delflowtable+0x90d/0x10e0 [ 231.736217][ T7920] ? __pfx_nf_tables_delflowtable+0x10/0x10 [ 231.736257][ T7920] ? __nla_parse+0x40/0x60 [ 231.736281][ T7920] nfnetlink_rcv_batch+0x1410/0x2880 [ 231.736324][ T7920] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 231.736368][ T7920] ? avc_has_perm_noaudit+0x145/0x3b0 [ 231.736422][ T7920] ? __nla_parse+0x40/0x60 [ 231.736445][ T7920] nfnetlink_rcv+0x3bd/0x440 [ 231.736472][ T7920] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 231.736506][ T7920] netlink_unicast+0x585/0x850 [ 231.736532][ T7920] ? __pfx_netlink_unicast+0x10/0x10 [ 231.736561][ T7920] netlink_sendmsg+0x8b0/0xda0 [ 231.736587][ T7920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.736607][ T7920] ? __might_fault+0x90/0x140 [ 231.736642][ T7920] ____sys_sendmsg+0x9e1/0xb70 [ 231.736661][ T7920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.736686][ T7920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.736719][ T7920] ___sys_sendmsg+0x190/0x1e0 [ 231.736743][ T7920] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.736796][ T7920] __sys_sendmsg+0x170/0x220 [ 231.736822][ T7920] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.736859][ T7920] ? rcu_is_watching+0x12/0xc0 [ 231.736890][ T7920] do_syscall_64+0x10b/0xf80 [ 231.736911][ T7920] ? clear_bhb_loop+0x40/0x90 [ 231.736933][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.736950][ T7920] RIP: 0033:0x7f931d79cdd9 [ 231.736965][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.736982][ T7920] RSP: 002b:00007f931e57b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.736998][ T7920] RAX: ffffffffffffffda RBX: 00007f931da15fa0 RCX: 00007f931d79cdd9 [ 231.737010][ T7920] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 231.737020][ T7920] RBP: 00007f931e57b090 R08: 0000000000000000 R09: 0000000000000000 [ 231.737029][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.737039][ T7920] R13: 00007f931da16038 R14: 00007f931da15fa0 R15: 00007ffd3ea52a78 [ 231.737064][ T7920] [ 232.203417][ T29] audit: type=1400 audit(1777795430.623:500): avc: denied { mount } for pid=7921 comm="syz.3.551" name="/" dev="autofs" ino=17529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.511003][ T5743] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 234.000521][ T5743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.023795][ T5743] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 234.033470][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.042416][ T5743] usb 1-1: Product: syz [ 234.046653][ T5743] usb 1-1: Manufacturer: syz [ 234.074924][ T5743] usb 1-1: SerialNumber: syz [ 234.101340][ T5743] usb 1-1: config 0 descriptor?? [ 234.109552][ T5743] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 234.116223][ T5743] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 234.567977][ T7953] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.560'. [ 234.661657][ T7955] kAFS: unable to lookup cell 'ÿ' [ 235.873678][ T29] audit: type=1326 audit(1777795434.333:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x0 [ 235.964033][ T7972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7972 comm=syz.0.553 [ 237.620008][ T46] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 238.117800][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.156867][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 238.213031][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 238.230996][ T5799] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 238.288076][ T46] usb 4-1: can't read configurations, error -61 [ 238.452494][ T46] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 238.460452][ T5799] usb 6-1: Using ep0 maxpacket: 8 [ 238.478908][ T5799] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 238.488203][ T29] audit: type=1400 audit(2000000002.520:502): avc: denied { getopt } for pid=7996 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.500927][ T5799] usb 6-1: config 0 has no interface number 0 [ 238.541186][ T5799] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.584121][ T5799] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 238.620584][ T5799] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 238.644367][ T5799] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 238.665858][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.677515][ T7999] vcan0: tx address claim with different name [ 238.677687][ T29] audit: type=1400 audit(2000000002.710:503): avc: denied { write } for pid=7998 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.687079][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 238.712870][ T5799] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.742357][ T5799] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 238.752585][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.764563][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 238.773701][ T46] usb 4-1: can't read configurations, error -61 [ 238.782993][ T5799] usb 6-1: Product: syz [ 238.790415][ T46] usb usb4-port1: attempt power cycle [ 238.797088][ T5799] usb 6-1: Manufacturer: syz [ 238.801746][ T5799] usb 6-1: SerialNumber: syz [ 238.810855][ T5799] usb 6-1: config 0 descriptor?? [ 239.035889][ T5799] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 239.074679][ T8006] netlink: 'syz.4.574': attribute type 4 has an invalid length. [ 239.080961][ T5743] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 239.099735][ T8006] netlink: 156 bytes leftover after parsing attributes in process `syz.4.574'. [ 239.141048][ T8006] net_ratelimit: 14 callbacks suppressed [ 239.141063][ T8006] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 239.170966][ T46] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 239.213005][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.221238][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 239.242797][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 239.252657][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.261988][ T46] usb 4-1: can't read configurations, error -61 [ 239.270410][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.297831][ T5743] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 239.325621][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.357814][ T5743] usb 3-1: config 0 descriptor?? [ 239.366507][ T8008] 9pnet_virtio: no channels available for device ./cgroup [ 239.377449][ T29] audit: type=1400 audit(2000000003.400:504): avc: denied { mounton } for pid=7988 comm="syz.5.570" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 239.425027][ T46] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 239.491094][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.520885][ T29] audit: type=1400 audit(2000000003.410:505): avc: denied { mount } for pid=7988 comm="syz.5.570" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 239.553789][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 239.603248][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 239.637296][ T46] usb 4-1: can't read configurations, error -61 [ 239.667707][ T46] usb usb4-port1: unable to enumerate USB device [ 239.785615][ T5743] konepure 0003:1E7D:2DBE.000A: unknown main item tag 0x0 [ 239.803735][ T5743] konepure 0003:1E7D:2DBE.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 239.880581][ T46] usb 6-1: USB disconnect, device number 4 [ 239.975426][ T5743] usb 1-1: USB disconnect, device number 15 [ 239.998230][ T9] usb 3-1: USB disconnect, device number 16 [ 240.245839][ T29] audit: type=1400 audit(2000000004.280:506): avc: denied { write } for pid=8011 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.975535][ T29] audit: type=1326 audit(2000000008.010:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.582" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482199cdd9 code=0x0 [ 245.217459][ T5799] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 245.432592][ T29] audit: type=1400 audit(2000000009.470:508): avc: denied { setopt } for pid=8046 comm="syz.5.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.582367][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.593418][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.603869][ T5799] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 245.616255][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.883106][ T5799] usb 1-1: config 0 descriptor?? [ 246.576736][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.730959][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 246.739080][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.752749][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.763497][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.772468][ T9] usb 4-1: Product: syz [ 246.776643][ T9] usb 4-1: Manufacturer: syz [ 246.783060][ T9] usb 4-1: SerialNumber: syz [ 246.792019][ T5799] usb 1-1: can't set config #0, error -71 [ 246.800590][ T9] usb 4-1: config 0 descriptor?? [ 246.818426][ T5799] usb 1-1: USB disconnect, device number 16 [ 246.828506][ T8045] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 246.870160][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 246.895492][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 246.974456][ T8062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8062 comm=syz.5.589 [ 247.017388][ T8062] netlink: 'syz.5.589': attribute type 10 has an invalid length. [ 247.048757][ T8062] team0: Port device vlan0 added [ 247.341068][ T8066] FAULT_INJECTION: forcing a failure. [ 247.341068][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 247.353919][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.2.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.353945][ T8066] Tainted: [L]=SOFTLOCKUP [ 247.353951][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.353967][ T8066] Call Trace: [ 247.353974][ T8066] [ 247.353980][ T8066] dump_stack_lvl+0x100/0x190 [ 247.354006][ T8066] should_fail_ex.cold+0x5/0xa [ 247.354032][ T8066] should_failslab+0xc2/0x120 [ 247.354051][ T8066] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 247.354079][ T8066] ? __d_alloc+0x34/0xa40 [ 247.354110][ T8066] __d_alloc+0x34/0xa40 [ 247.354138][ T8066] d_alloc_parallel+0x111/0x14e0 [ 247.354162][ T8066] ? look_up_lock_class+0x55/0x120 [ 247.354185][ T8066] ? register_lock_class+0x40/0x560 [ 247.354208][ T8066] ? set_nlink+0xb4/0x190 [ 247.354233][ T8066] ? __pfx_d_alloc_parallel+0x10/0x10 [ 247.354255][ T8066] ? lockdep_init_map_type+0x5c/0x250 [ 247.354280][ T8066] ? lockdep_init_map_type+0x5c/0x250 [ 247.354308][ T8066] __lookup_slow+0x193/0x460 [ 247.354337][ T8066] ? __pfx___lookup_slow+0x10/0x10 [ 247.354378][ T8066] ? __d_lookup+0x266/0x4a0 [ 247.354403][ T8066] lookup_slow+0x50/0x70 [ 247.354431][ T8066] link_path_walk+0x1377/0x1cc0 [ 247.354460][ T8066] path_openat+0x1be/0x31a0 [ 247.354482][ T8066] ? kasan_save_stack+0x3f/0x50 [ 247.354508][ T8066] ? kasan_save_stack+0x30/0x50 [ 247.354534][ T8066] ? kasan_save_track+0x14/0x30 [ 247.354549][ T8066] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 247.354581][ T8066] ? __pfx_path_openat+0x10/0x10 [ 247.354614][ T8066] do_file_open+0x20e/0x430 [ 247.354639][ T8066] ? __pfx_do_file_open+0x10/0x10 [ 247.354681][ T8066] ? alloc_fd+0x476/0x790 [ 247.354706][ T8066] ? do_getname+0x191/0x390 [ 247.354734][ T8066] do_sys_openat2+0x10d/0x1e0 [ 247.354760][ T8066] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.354784][ T8066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.354810][ T8066] ? __fget_files+0x21f/0x3d0 [ 247.354837][ T8066] __x64_sys_openat+0x12d/0x210 [ 247.354864][ T8066] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.354889][ T8066] ? ksys_write+0x1ac/0x250 [ 247.354912][ T8066] ? rcu_is_watching+0x12/0xc0 [ 247.354943][ T8066] do_syscall_64+0x10b/0xf80 [ 247.354971][ T8066] ? clear_bhb_loop+0x40/0x90 [ 247.354993][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.355012][ T8066] RIP: 0033:0x7f931d79cdd9 [ 247.355028][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.355044][ T8066] RSP: 002b:00007f931b9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.355062][ T8066] RAX: ffffffffffffffda RBX: 00007f931da16180 RCX: 00007f931d79cdd9 [ 247.355074][ T8066] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 247.355086][ T8066] RBP: 00007f931b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 247.355096][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.355106][ T8066] R13: 00007f931da16218 R14: 00007f931da16180 R15: 00007ffd3ea52a78 [ 247.355132][ T8066] [ 247.851523][ T29] audit: type=1400 audit(2000000011.880:509): avc: denied { write } for pid=8063 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 247.917274][ T8054] netlink: 'syz.4.587': attribute type 13 has an invalid length. [ 247.921692][ T9] usb 4-1: USB disconnect, device number 15 [ 247.955236][ T8069] lo speed is unknown, defaulting to 1000 [ 247.962911][ T8069] lo speed is unknown, defaulting to 1000 [ 247.987748][ T8054] gretap0: refused to change device tx_queue_len [ 247.994575][ T8054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 248.017905][ T8069] lo speed is unknown, defaulting to 1000 [ 248.557976][ T8080] FAULT_INJECTION: forcing a failure. [ 248.557976][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 248.570651][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.0.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.570674][ T8080] Tainted: [L]=SOFTLOCKUP [ 248.570680][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.570689][ T8080] Call Trace: [ 248.570695][ T8080] [ 248.570700][ T8080] dump_stack_lvl+0x100/0x190 [ 248.570724][ T8080] should_fail_ex.cold+0x5/0xa [ 248.570746][ T8080] should_failslab+0xc2/0x120 [ 248.570764][ T8080] __kvmalloc_node_noprof+0xfa/0xa00 [ 248.570787][ T8080] ? io_alloc_cache_init+0x38/0x170 [ 248.570809][ T8080] ? lockdep_init_map_type+0x10/0x250 [ 248.570834][ T8080] io_alloc_cache_init+0x38/0x170 [ 248.570855][ T8080] io_uring_setup.cold+0x427/0x1cde [ 248.570878][ T8080] ? __pfx_io_uring_setup+0x10/0x10 [ 248.570896][ T8080] ? find_held_lock+0x2b/0x80 [ 248.570913][ T8080] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 248.570937][ T8080] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 248.570980][ T8080] ? ksys_write+0x1ac/0x250 [ 248.570998][ T8080] ? __pfx_ksys_write+0x10/0x10 [ 248.571020][ T8080] __x64_sys_io_uring_setup+0xc2/0x170 [ 248.571036][ T8080] do_syscall_64+0x10b/0xf80 [ 248.571054][ T8080] ? clear_bhb_loop+0x40/0x90 [ 248.571074][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.571090][ T8080] RIP: 0033:0x7f1580b9cdd9 [ 248.571103][ T8080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.571117][ T8080] RSP: 002b:00007f158197dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 248.571134][ T8080] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f1580b9cdd9 [ 248.571144][ T8080] RDX: 0000200000000300 RSI: 0000200000000080 RDI: 0000000000003e88 [ 248.571153][ T8080] RBP: 00007f158197e090 R08: 0000000000000000 R09: 0000000000000101 [ 248.571163][ T8080] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000200000000300 [ 248.571172][ T8080] R13: 00002000000001c0 R14: 0000200000000040 R15: 00007ffcf2911238 [ 248.571193][ T8080] [ 249.161194][ T29] audit: type=1400 audit(2000000013.190:510): avc: denied { read } for pid=8094 comm="syz.3.600" dev="sockfs" ino=17263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.183945][ T9] lo speed is unknown, defaulting to 1000 [ 249.198151][ T8069] infiniband syz2: set active [ 249.209926][ T8069] infiniband syz2: added lo [ 249.211790][ T46] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 249.243419][ T8069] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 249.259441][ T8069] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 249.277581][ T8069] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 249.437056][ T8069] RDS/IB: syz2: added [ 249.450163][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.470860][ T8069] smc: adding ib device syz2 with port count 1 [ 249.502643][ T8069] smc: ib device syz2 port 1 has no pnetid [ 249.510729][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.531331][ T29] audit: type=1326 audit(2000000013.500:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.5.602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7feddcb96b57 code=0x0 [ 249.570080][ T804] lo speed is unknown, defaulting to 1000 [ 249.593211][ T46] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 249.622582][ T8069] lo speed is unknown, defaulting to 1000 [ 249.633107][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.704344][ T46] usb 3-1: config 0 descriptor?? [ 250.112320][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.118662][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.155398][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 250.208977][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.251783][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.758723][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 250.773519][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 250.789187][ T29] audit: type=1400 audit(2000000014.820:512): avc: denied { ioctl } for pid=8112 comm="syz.0.605" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 250.827060][ T46] usb 3-1: USB disconnect, device number 17 [ 250.836107][ T8113] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 250.849885][ T29] audit: type=1400 audit(2000000014.820:513): avc: denied { ioctl } for pid=8112 comm="syz.0.605" path="socket:[17383]" dev="sockfs" ino=17383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.881898][ T29] audit: type=1400 audit(2000000014.860:514): avc: denied { bind } for pid=8112 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.908417][ T8069] lo speed is unknown, defaulting to 1000 [ 250.958357][ T29] audit: type=1400 audit(2000000014.860:515): avc: denied { connect } for pid=8112 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.029596][ T29] audit: type=1400 audit(2000000015.030:516): avc: denied { connect } for pid=8114 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.265820][ T8123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.032636][ T29] audit: type=1400 audit(2000000016.070:517): avc: denied { unmount } for pid=7150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 252.255169][ T8132] netlink: 'syz.5.611': attribute type 3 has an invalid length. [ 252.327377][ T8107] netlink: 'syz.3.603': attribute type 2 has an invalid length. [ 252.360689][ T8069] lo speed is unknown, defaulting to 1000 [ 252.431039][ T991] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 252.591416][ T29] audit: type=1326 audit(2000000016.620:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.614" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2b79cdd9 code=0x0 [ 252.643230][ T991] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.653873][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.668434][ T8069] lo speed is unknown, defaulting to 1000 [ 252.669320][ T991] usb 1-1: config 0 descriptor?? [ 252.683809][ T991] cp210x 1-1:0.0: cp210x converter detected [ 252.984686][ T8069] lo speed is unknown, defaulting to 1000 [ 253.100769][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.123775][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.195093][ T29] audit: type=1400 audit(2000000017.230:519): avc: denied { open } for pid=8129 comm="syz.0.609" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 253.445942][ T991] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 253.467293][ T991] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 253.513287][ T991] usb 1-1: cp210x converter now attached to ttyUSB0 [ 253.556422][ T991] usb 1-1: USB disconnect, device number 17 [ 254.420266][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.445054][ T991] cp210x 1-1:0.0: device disconnected [ 254.579690][ T8157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.587485][ T8157] IPv6: NLM_F_CREATE should be set when creating new route [ 254.594781][ T8157] IPv6: NLM_F_CREATE should be set when creating new route [ 254.602013][ T8157] IPv6: NLM_F_CREATE should be set when creating new route [ 255.138573][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 255.138587][ T29] audit: type=1400 audit(2000000019.170:521): avc: denied { bind } for pid=8158 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 255.224069][ T29] audit: type=1400 audit(2000000019.250:522): avc: denied { getopt } for pid=8158 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.312934][ T8167] fuse: Bad value for 'fd' [ 255.754099][ T8177] netlink: 252 bytes leftover after parsing attributes in process `syz.2.622'. [ 255.763138][ T8177] netem: unknown loss type 5 [ 255.768218][ T8177] netem: change failed [ 255.783793][ T29] audit: type=1400 audit(2000000019.810:523): avc: denied { write } for pid=8161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.894235][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 255.915523][ T29] audit: type=1400 audit(2000000019.880:524): avc: denied { accept } for pid=8182 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.988281][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 256.159603][ T29] audit: type=1326 audit(2000000020.190:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8191 comm="syz.0.626" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1580b9cdd9 code=0x0 [ 256.211212][ T29] audit: type=1400 audit(2000000020.220:526): avc: denied { write } for pid=8190 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.084619][ T29] audit: type=1400 audit(2000000021.120:527): avc: denied { write } for pid=8198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.544223][ T8219] netlink: zone id is out of range [ 257.562754][ T8219] netlink: zone id is out of range [ 257.568333][ T8219] netlink: zone id is out of range [ 257.573572][ T8219] netlink: zone id is out of range [ 257.578687][ T8219] netlink: zone id is out of range [ 257.583855][ T8219] netlink: zone id is out of range [ 257.595361][ T8219] netlink: zone id is out of range [ 257.600650][ T8219] netlink: zone id is out of range [ 257.605999][ T8219] netlink: zone id is out of range [ 257.611172][ T8219] netlink: zone id is out of range [ 259.045378][ T29] audit: type=1400 audit(2000000023.020:528): avc: denied { write } for pid=8215 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.129412][ T29] audit: type=1400 audit(2000000023.160:529): avc: denied { bind } for pid=8228 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 259.405167][ T29] audit: type=1400 audit(2000000023.440:530): avc: denied { map } for pid=8241 comm="syz.2.634" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.497103][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 260.329737][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 260.329752][ T29] audit: type=1400 audit(2000000024.360:533): avc: denied { write } for pid=8256 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.506539][ T29] audit: type=1400 audit(2000000024.540:534): avc: denied { map } for pid=8263 comm="syz.2.638" path="socket:[18304]" dev="sockfs" ino=18304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.730221][ T29] audit: type=1400 audit(2000000024.760:535): avc: denied { read } for pid=8271 comm="syz.2.640" path="socket:[18323]" dev="sockfs" ino=18323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 260.775449][ T29] audit: type=1326 audit(2000000024.800:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2b79cdd9 code=0x0 [ 260.809676][ T29] audit: type=1400 audit(2000000024.840:537): avc: denied { write } for pid=8271 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 260.975893][ T5743] IPVS: starting estimator thread 0... [ 261.081015][ T8282] IPVS: using max 41 ests per chain, 98400 per kthread [ 261.142465][ T29] audit: type=1400 audit(2000000025.170:538): avc: denied { write } for pid=8262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.318440][ T29] audit: type=1400 audit(2000000025.350:539): avc: denied { write } for pid=8290 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.399046][ T8291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.642'. [ 263.173236][ T5729] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.362100][ T5729] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 263.399409][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.427073][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 263.445893][ T5729] usb 4-1: Product: syz [ 263.457218][ T5729] usb 4-1: Manufacturer: syz [ 263.462983][ T5729] usb 4-1: SerialNumber: syz [ 263.481024][ T29] audit: type=1400 audit(2000000027.510:540): avc: denied { write } for pid=8297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.625466][ T29] audit: type=1400 audit(2000000027.660:541): avc: denied { write } for pid=8324 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.650595][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 263.659292][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.670799][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.687787][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.698543][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.708306][ T9] usb 6-1: Product: syz [ 263.712653][ T9] usb 6-1: Manufacturer: syz [ 263.718633][ T9] usb 6-1: SerialNumber: syz [ 263.747048][ T9] usb 6-1: config 0 descriptor?? [ 263.764251][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.775211][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 263.825089][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.856092][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.874846][ T46] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 263.892112][ T46] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 263.920124][ T46] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 263.939498][ T5729] net_ratelimit: 104 callbacks suppressed [ 263.939516][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 263.951008][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 264.002844][ T46] usb 1-1: config 1 interface 1 has no altsetting 0 [ 264.027928][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 264.029355][ T46] usb 1-1: string descriptor 0 read error: -22 [ 264.079755][ T46] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 264.106838][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.307167][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.318320][ T29] audit: type=1400 audit(2000000028.330:542): avc: denied { write } for pid=8326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.351968][ T46] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 264.361176][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.376465][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (132) [ 264.399600][ T46] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 264.440622][ T46] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 264.518208][ T46] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 264.558254][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.650'. [ 264.575957][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 264.587478][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 264.638029][ T46] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 264.814736][ T46] usb 1-1: USB disconnect, device number 18 [ 264.815069][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.905647][ T8359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.653'. [ 265.958644][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.344591][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 266.358238][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 266.358776][ T8301] netlink: 176 bytes leftover after parsing attributes in process `syz.3.644'. [ 266.368315][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 266.401198][ T5729] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 266.467924][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 266.467936][ T29] audit: type=1326 audit(2000000030.500:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.4.655" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482199cdd9 code=0x0 [ 266.524070][ T9] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 266.560488][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 266.713772][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 266.864464][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 266.916271][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 266.926689][ T5729] usb 4-1: USB disconnect, device number 16 [ 266.947442][ T9] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 266.965046][ T9] usb 6-1: USB disconnect, device number 5 [ 267.491018][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.514813][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 267.530478][ T8379] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8379 comm=syz.5.660 [ 267.550862][ T8379] netlink: 'syz.5.660': attribute type 10 has an invalid length. [ 267.578230][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 267.602117][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 267.821009][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 267.837908][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 267.847055][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.855993][ T24] usb 3-1: Product: syz [ 268.590924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 268.833013][ T24] usb 3-1: Manufacturer: syz [ 268.859556][ T24] usb 3-1: SerialNumber: syz [ 268.914588][ T24] usb 3-1: config 0 descriptor?? [ 269.011048][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 269.064445][ T46] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.102040][ T46] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.229299][ T46] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 269.242516][ T46] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 269.255154][ T46] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.273598][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 269.341820][ T8401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.665'. [ 270.314730][ T8374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.334550][ T46] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.460073][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.492619][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 270.514338][ T46] usb 1-1: can't set config #16, error -71 [ 270.558833][ T46] usb 1-1: USB disconnect, device number 19 [ 270.636499][ T8405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=8405 comm=syz.4.667 [ 270.724134][ T8408] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 270.872058][ T29] audit: type=1400 audit(2000000034.910:548): avc: denied { shutdown } for pid=8417 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.896512][ T29] audit: type=1326 audit(2000000034.930:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.671" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feddcb9cdd9 code=0x0 [ 270.981489][ T8425] lo speed is unknown, defaulting to 1000 [ 270.987555][ T8425] lo speed is unknown, defaulting to 1000 [ 270.999105][ T8425] lo speed is unknown, defaulting to 1000 [ 271.010748][ T8425] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 271.024975][ T8425] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 271.041916][ T8425] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 271.066704][ T8425] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.114320][ T8425] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 271.268721][ T8425] lo speed is unknown, defaulting to 1000 [ 271.275277][ T8425] lo speed is unknown, defaulting to 1000 [ 271.282016][ T8425] lo speed is unknown, defaulting to 1000 [ 271.288352][ T8425] lo speed is unknown, defaulting to 1000 [ 271.294855][ T8425] lo speed is unknown, defaulting to 1000 [ 271.702028][ T24] usb 3-1: USB disconnect, device number 18 [ 271.858268][ T8436] netlink: 'syz.2.676': attribute type 12 has an invalid length. [ 271.947181][ T8431] lo speed is unknown, defaulting to 1000 [ 271.997419][ T8438] macsec1: entered promiscuous mode [ 272.031618][ T8438] bridge0: entered promiscuous mode [ 273.569733][ T8446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.678'. [ 274.220151][ T8431] lo speed is unknown, defaulting to 1000 [ 275.279930][ T29] audit: type=1326 audit(2000000039.310:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feddcb9cdd9 code=0x0 [ 275.406492][ T8476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8476 comm=syz.0.686 [ 275.441082][ T46] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 275.451067][ T5616] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.581006][ T46] usb 3-1: device descriptor read/64, error -71 [ 275.612024][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 275.622667][ T5616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.637783][ T5616] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 275.648276][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.661865][ T5616] usb 4-1: Product: syz [ 275.666179][ T5616] usb 4-1: Manufacturer: syz [ 275.671592][ T5616] usb 4-1: SerialNumber: syz [ 275.757266][ T5616] usb 4-1: config 0 descriptor?? [ 275.870951][ T46] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 275.966690][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.976741][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.990856][ T29] audit: type=1400 audit(2000000040.020:551): avc: denied { append } for pid=8464 comm="syz.3.682" name="sg0" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 276.018953][ T46] usb 3-1: device descriptor read/64, error -71 [ 276.039313][ T5616] usb 4-1: USB disconnect, device number 17 [ 276.241917][ T46] usb usb3-port1: attempt power cycle [ 277.310954][ T46] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 277.332104][ T46] usb 3-1: device descriptor read/8, error -71 [ 278.847718][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.691'. [ 279.116673][ T29] audit: type=1400 audit(2000000043.150:552): avc: denied { read } for pid=8505 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.154657][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 279.231234][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 279.311043][ T46] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.346408][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.368727][ T46] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 279.388983][ T46] usb 3-1: config 114 has an invalid descriptor of length 191, skipping remainder of the config [ 279.411033][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 279.416864][ T46] usb 3-1: config 114 has no interface number 0 [ 279.431109][ T46] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 279.433924][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.450936][ T46] usb 3-1: config 114 interface 240 altsetting 232 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.473035][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.478174][ T46] usb 3-1: config 114 interface 240 has no altsetting 0 [ 279.492981][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.506106][ T46] usb 3-1: string descriptor 0 read error: -22 [ 279.509098][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 279.512640][ T46] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 279.526801][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.546986][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.551669][ T9] usb 4-1: Product: syz [ 279.568056][ T8499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.569439][ T9] usb 4-1: Manufacturer: syz [ 279.587336][ T46] ir_usb 3-1:114.240: required endpoints missing [ 279.596072][ T9] usb 4-1: SerialNumber: syz [ 279.619433][ T9] usb 4-1: config 0 descriptor?? [ 280.036543][ T9] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 280.248373][ T9] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 280.266770][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 280.923498][ T8521] x_tables: duplicate underflow at hook 3 [ 281.319797][ T8523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8523 comm=syz.4.699 [ 281.424966][ T29] audit: type=1326 audit(2000000045.460:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.4.700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482199cdd9 code=0x0 [ 281.714035][ T8534] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 281.769409][ T8537] ipt_ECN: cannot use operation on non-tcp rule [ 281.945641][ T24] usb 3-1: USB disconnect, device number 22 [ 282.022512][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 282.038102][ T5616] usb 4-1: USB disconnect, device number 18 [ 282.181009][ T9] usb 1-1: device descriptor read/64, error -71 [ 282.385620][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.708'. [ 282.426812][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 282.821054][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 282.904544][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.043234][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 283.059861][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.076974][ T24] usb 3-1: Product: syz [ 283.085977][ T24] usb 3-1: Manufacturer: syz [ 283.095182][ T24] usb 3-1: SerialNumber: syz [ 283.108688][ T24] usb 3-1: config 0 descriptor?? [ 283.129914][ T8551] 9p: Bad value for 'rfdno' [ 283.338876][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 283.500534][ T8559] x_tables: duplicate underflow at hook 3 [ 283.506465][ T9] usb 1-1: device descriptor read/64, error -71 [ 284.035370][ T9] usb usb1-port1: attempt power cycle [ 284.173524][ T29] audit: type=1400 audit(2000000048.210:554): avc: denied { setopt } for pid=8538 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.248385][ T8568] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 284.309099][ T8573] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 284.454592][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 284.481530][ T9] usb 1-1: device descriptor read/8, error -71 [ 285.163119][ T29] audit: type=1326 audit(2000000049.200:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2b79cdd9 code=0x0 [ 285.452795][ T991] usb 3-1: USB disconnect, device number 23 [ 285.510548][ T29] audit: type=1400 audit(2000000049.540:556): avc: denied { setopt } for pid=8598 comm="syz.4.721" lport=46552 faddr=::ffff:172.30.0.5 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 285.621151][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 285.653814][ T9] usb 1-1: device descriptor read/8, error -71 [ 285.771238][ T9] usb usb1-port1: unable to enumerate USB device [ 286.063912][ T8609] netlink: 44 bytes leftover after parsing attributes in process `syz.2.723'. [ 286.425213][ T8612] x_tables: duplicate underflow at hook 3 [ 286.870582][ T8614] xt_hashlimit: size too large, truncated to 1048576 [ 287.377114][ T8625] random: crng reseeded on system resumption [ 287.496988][ T29] audit: type=1400 audit(2000000051.530:557): avc: denied { append } for pid=8623 comm="syz.3.727" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.563738][ T29] audit: type=1400 audit(2000000051.580:558): avc: denied { append } for pid=8626 comm="syz.2.728" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.693501][ T29] audit: type=1400 audit(2000000051.730:559): avc: denied { setopt } for pid=8626 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 289.383092][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 289.460958][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 289.643025][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.674843][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.728972][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.752155][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.784175][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.807528][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.811383][ T29] audit: type=1326 audit(2000000053.850:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.0.734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1580b9cdd9 code=0x0 [ 289.852938][ T9] usb 6-1: Product: syz [ 289.862399][ T9] usb 6-1: Manufacturer: syz [ 289.877516][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 289.883325][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 289.895001][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 289.902021][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 290.857406][ T8662] x_tables: duplicate underflow at hook 3 [ 291.282283][ T8669] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 291.291289][ T8669] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 291.308818][ T8670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.738'. [ 291.329498][ T29] audit: type=1400 audit(2000000055.360:561): avc: denied { firmware_load } for pid=8644 comm="syz.5.731" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 291.350036][ T8669] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 294.452018][ T9] usb 6-1: USB disconnect, device number 6 [ 295.164746][ T8680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.564553][ T8690] lo speed is unknown, defaulting to 1000 [ 296.247464][ T8690] lo speed is unknown, defaulting to 1000 [ 296.750984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 296.918056][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 297.083296][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.171451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.192440][ T5729] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 297.201942][ T9] usb 1-1: config 0 descriptor?? [ 298.260951][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 298.269009][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.280150][ T5729] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 298.289176][ T9] cp210x 1-1:0.0: cp210x converter detected [ 298.301903][ T5729] usb 4-1: config 4 has an invalid descriptor of length 20, skipping remainder of the config [ 298.363977][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 298.375004][ T5729] usb 4-1: config 4 has no interface number 0 [ 298.392275][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 298.401079][ T9] cp210x 1-1:0.0: querying part number failed [ 298.409075][ T5729] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 298.421763][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.441942][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 298.458764][ T5729] usb 4-1: Product: syz [ 298.557609][ T29] audit: type=1326 audit(2000000062.590:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.2.749" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x0 [ 298.583555][ T5729] usb 4-1: Manufacturer: syz [ 298.588236][ T9] usb 1-1: USB disconnect, device number 24 [ 298.718613][ T8717] x_tables: duplicate underflow at hook 3 [ 299.041423][ T5729] usb 4-1: SerialNumber: syz [ 299.119482][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.147121][ T9] cp210x 1-1:0.0: device disconnected [ 299.334291][ T8721] overlayfs: overlapping lowerdir path [ 299.644315][ T8731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.751'. [ 301.048078][ T5729] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 301.066879][ T5729] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 301.162866][ T5729] uvcvideo 4-1:4.147: No valid video chain found. [ 301.174976][ T5729] usb 4-1: USB disconnect, device number 19 [ 301.730261][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 301.759938][ T29] audit: type=1400 audit(2000000065.790:563): avc: denied { remount } for pid=8742 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 301.856183][ T5729] IPVS: starting estimator thread 0... [ 301.881882][ T8748] xt_connbytes: Forcing CT accounting to be enabled [ 301.888788][ T8748] set match dimension is over the limit! [ 302.005676][ T29] audit: type=1400 audit(2000000066.040:564): avc: denied { mount } for pid=8749 comm="syz.4.757" name="/" dev="rpc_pipefs" ino=20150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 302.041560][ T8747] IPVS: using max 42 ests per chain, 100800 per kthread [ 302.181452][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 303.533810][ T8765] x_tables: duplicate underflow at hook 3 [ 303.812571][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 303.892724][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.979647][ T29] audit: type=1326 audit(2000000068.010:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.5.762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feddcb9cdd9 code=0x0 [ 304.261607][ T8773] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'. [ 305.483393][ T8780] tmpfs: Bad value for 'mpol' [ 306.014026][ T8786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.543922][ T8781] Invalid source name [ 308.459148][ T8795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.489226][ T8796] syzkaller0: entered promiscuous mode [ 308.501409][ T8796] syzkaller0: entered allmulticast mode [ 309.943487][ T8806] netlink: 'syz.5.773': attribute type 1 has an invalid length. [ 310.050005][ T29] audit: type=1326 audit(2000000074.080:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.4.774" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482199cdd9 code=0x0 [ 310.288561][ T8815] kvm: pic: non byte write [ 310.308208][ T29] audit: type=1326 audit(2000000074.340:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.5.775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feddcb9cdd9 code=0x0 [ 311.605378][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.615121][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.290988][ T5729] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 313.652560][ T4931] Bluetooth: hci0: command 0x0406 tx timeout [ 313.898217][ T5729] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.919458][ T5729] usb 6-1: not running at top speed; connect to a high speed hub [ 313.948993][ T5729] usb 6-1: config 6 has an invalid interface number: 217 but max is 0 [ 313.970517][ T5729] usb 6-1: config 6 has no interface number 0 [ 314.052514][ T8852] random: crng reseeded on system resumption [ 314.074193][ T5729] usb 6-1: config 6 interface 217 has no altsetting 0 [ 314.286925][ T5729] usb 6-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 314.297163][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.326816][ T5729] usb 6-1: Product: syz [ 314.352397][ T5729] usb 6-1: Manufacturer: syz [ 314.361716][ T5729] usb 6-1: SerialNumber: syz [ 314.396078][ T29] audit: type=1400 audit(2000000078.420:568): avc: denied { watch_sb watch_reads } for pid=8856 comm="syz.4.787" path="/209" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 315.234245][ T5729] hub 6-1:6.217: bad descriptor, ignoring hub [ 315.284809][ T8873] usb usb7: usbfs: process 8873 (syz.2.788) did not claim interface 0 before use [ 315.402011][ T5729] hub 6-1:6.217: probe with driver hub failed with error -5 [ 315.410116][ T29] audit: type=1400 audit(2000000079.360:569): avc: denied { search } for pid=8863 comm="syz.2.788" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.582032][ T5729] keyspan 6-1:6.217: Keyspan - (without firmware) converter detected [ 315.632604][ T29] audit: type=1400 audit(2000000079.360:570): avc: denied { search } for pid=8863 comm="syz.2.788" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.658809][ T5729] usb 6-1: USB disconnect, device number 7 [ 315.680852][ T5729] keyspan 6-1:6.217: device disconnected [ 315.705980][ T29] audit: type=1400 audit(2000000079.360:571): avc: denied { search } for pid=8863 comm="syz.2.788" name="/" dev="configfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.538298][ T8882] netlink: zone id is out of range [ 316.554992][ T8882] netlink: zone id is out of range [ 316.560208][ T8882] netlink: zone id is out of range [ 316.565549][ T8882] netlink: zone id is out of range [ 316.570803][ T8882] netlink: zone id is out of range [ 316.576073][ T8882] netlink: zone id is out of range [ 316.587911][ T8882] netlink: zone id is out of range [ 316.593240][ T8882] netlink: zone id is out of range [ 316.598441][ T8882] netlink: zone id is out of range [ 316.664356][ T8882] netlink: zone id is out of range [ 321.113799][ T29] audit: type=1400 audit(2000000085.150:572): avc: denied { create } for pid=8908 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 321.156409][ T29] audit: type=1400 audit(2000000085.190:573): avc: denied { write } for pid=8908 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 321.340423][ T29] audit: type=1400 audit(2000000085.370:574): avc: denied { create } for pid=8917 comm="syz.2.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 321.443961][ T29] audit: type=1400 audit(2000000085.400:575): avc: denied { write } for pid=8917 comm="syz.2.803" path="socket:[20381]" dev="sockfs" ino=20381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 322.172813][ T8923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8923 comm=syz.4.804 [ 322.206701][ T8923] netlink: 'syz.4.804': attribute type 10 has an invalid length. [ 322.218545][ T8923] team0: Port device vlan0 added [ 322.298929][ T8925] usb usb9: usbfs: process 8925 (syz.0.805) did not claim interface 47 before use [ 322.759361][ T8941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.953869][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 323.320964][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 323.331665][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 323.341968][ T24] usb 4-1: config 0 has no interface number 0 [ 323.356424][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 323.389550][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.444474][ T24] usb 4-1: Product: syz [ 323.455044][ T24] usb 4-1: Manufacturer: syz [ 323.476405][ T24] usb 4-1: SerialNumber: syz [ 323.490827][ T24] usb 4-1: config 0 descriptor?? [ 323.513068][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 323.562428][ T8946] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 323.730587][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 323.777037][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 323.796982][ T29] audit: type=1400 audit(2000000087.820:576): avc: denied { audit_write } for pid=8945 comm="syz.0.812" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 324.146167][ T8961] fuse: fd is not a fuse device [ 325.118657][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 325.314142][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 325.670950][ T991] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 325.692309][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 325.699953][ T46] usb 4-1: USB disconnect, device number 20 [ 325.708938][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 325.734134][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 325.750621][ T46] quatech2 4-1:0.51: device disconnected [ 325.842905][ T991] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 325.853882][ T991] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.865353][ T991] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.875371][ T991] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 325.888484][ T5743] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 325.889047][ T991] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.903875][ T991] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 325.913216][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.935474][ T991] usb 3-1: config 0 descriptor?? [ 326.053666][ T5743] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 326.061921][ T5743] usb 1-1: config 0 has no interface number 0 [ 326.068106][ T5743] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.083499][ T5743] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 326.094289][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.102436][ T5743] usb 1-1: Product: syz [ 326.106778][ T5743] usb 1-1: Manufacturer: syz [ 326.111546][ T5743] usb 1-1: SerialNumber: syz [ 326.121901][ T5743] usb 1-1: config 0 descriptor?? [ 326.148358][ T5743] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 326.220076][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 326.534753][ T991] usbhid 3-1:0.0: can't add hid device: -71 [ 326.544983][ T991] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 326.690811][ T991] usb 3-1: USB disconnect, device number 24 [ 326.729223][ T24] usb 1-1: USB disconnect, device number 25 [ 326.743551][ T24] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 326.930391][ T8984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.097813][ T8986] x_tables: duplicate underflow at hook 3 [ 328.952106][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 329.437544][ T9010] overlay: ./file0 is not a directory [ 329.481444][ T9] usb 4-1: device descriptor read/64, error -71 [ 330.218359][ T9020] net_ratelimit: 104 callbacks suppressed [ 330.218399][ T9020] netlink: zone id is out of range [ 330.245476][ T9020] netlink: zone id is out of range [ 330.250731][ T9020] netlink: zone id is out of range [ 330.309185][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 330.326860][ T5616] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 330.421112][ T9020] netlink: zone id is out of range [ 330.426371][ T9020] netlink: zone id is out of range [ 330.431612][ T9020] netlink: zone id is out of range [ 330.448589][ T9020] netlink: zone id is out of range [ 330.453945][ T9020] netlink: zone id is out of range [ 330.459185][ T9020] netlink: zone id is out of range [ 330.464373][ T9020] netlink: zone id is out of range [ 332.058114][ T5616] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 332.067710][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.076143][ T5616] usb 6-1: Product: syz [ 332.090945][ T9] usb 4-1: device descriptor read/64, error -71 [ 332.099103][ T5616] usb 6-1: Manufacturer: syz [ 332.105863][ T5616] usb 6-1: SerialNumber: syz [ 332.123835][ T5616] usb 6-1: config 0 descriptor?? [ 332.211266][ T9] usb usb4-port1: attempt power cycle [ 332.425346][ T5616] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 332.468162][ T9038] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 332.480673][ T5616] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 332.497798][ T5616] usb 6-1: USB disconnect, device number 8 [ 332.561396][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 332.566420][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 332.593050][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.602459][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.610463][ T9] usb 4-1: Product: syz [ 332.615441][ T9] usb 4-1: Manufacturer: syz [ 332.620054][ T9] usb 4-1: SerialNumber: syz [ 332.666470][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.694726][ T5743] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 332.791095][ T5729] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 333.576890][ T9052] capability: warning: `syz.0.843' uses 32-bit capabilities (legacy support in use) [ 333.588327][ T9052] FAULT_INJECTION: forcing a failure. [ 333.588327][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 333.601037][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.0.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.601062][ T9052] Tainted: [L]=SOFTLOCKUP [ 333.601068][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.601079][ T9052] Call Trace: [ 333.601084][ T9052] [ 333.601091][ T9052] dump_stack_lvl+0x100/0x190 [ 333.601116][ T9052] should_fail_ex.cold+0x5/0xa [ 333.601141][ T9052] should_failslab+0xc2/0x120 [ 333.601159][ T9052] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 333.601186][ T9052] ? __alloc_skb+0x140/0x710 [ 333.601211][ T9052] ? __alloc_skb+0x5b7/0x710 [ 333.601238][ T9052] __alloc_skb+0x140/0x710 [ 333.601260][ T9052] ? __alloc_skb+0x5b7/0x710 [ 333.601279][ T9052] ? __pfx___alloc_skb+0x10/0x10 [ 333.601306][ T9052] ? lockdep_hardirqs_on+0x78/0x100 [ 333.601327][ T9052] ? irqentry_exit+0x246/0x790 [ 333.601346][ T9052] sock_omalloc+0xfc/0x1f0 [ 333.601368][ T9052] msg_zerocopy_realloc+0x1fb/0x8e0 [ 333.601382][ T9052] ? __ip6_append_data+0x6ab/0x4b40 [ 333.601401][ T9052] __ip6_append_data+0x21c2/0x4b40 [ 333.601422][ T9052] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 333.601437][ T9052] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 333.601463][ T9052] ? __pfx___ip6_append_data+0x10/0x10 [ 333.601486][ T9052] ? __pfx_ip6_mtu+0x10/0x10 [ 333.601501][ T9052] ? ip6_setup_cork+0x5be/0x14c0 [ 333.601520][ T9052] ip6_make_skb+0x2a3/0x3b0 [ 333.601539][ T9052] ? lockdep_hardirqs_on+0x78/0x100 [ 333.601555][ T9052] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 333.601571][ T9052] ? __pfx_ip6_make_skb+0x10/0x10 [ 333.601594][ T9052] ? find_held_lock+0x2b/0x80 [ 333.601607][ T9052] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 333.601626][ T9052] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 333.601651][ T9052] ? udpv6_sendmsg+0x2231/0x2c20 [ 333.601664][ T9052] udpv6_sendmsg+0x2231/0x2c20 [ 333.601677][ T9052] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 333.601697][ T9052] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 333.601721][ T9052] ? __pfx___schedule+0x10/0x10 [ 333.601747][ T9052] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 333.601761][ T9052] ? inet6_sendmsg+0x4e/0x140 [ 333.601774][ T9052] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 333.601791][ T9052] ? inet6_sendmsg+0x105/0x140 [ 333.601807][ T9052] inet6_sendmsg+0x105/0x140 [ 333.601821][ T9052] ____sys_sendmsg+0x704/0xb70 [ 333.601840][ T9052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.601859][ T9052] ? mark_held_locks+0x40/0x70 [ 333.601876][ T9052] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 333.601892][ T9052] ___sys_sendmsg+0x190/0x1e0 [ 333.601909][ T9052] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.601936][ T9052] ? find_held_lock+0x2b/0x80 [ 333.601968][ T9052] __sys_sendmmsg+0x205/0x430 [ 333.601992][ T9052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.602019][ T9052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.602043][ T9052] ? fput+0x79/0x100 [ 333.602062][ T9052] ? ksys_write+0x1ac/0x250 [ 333.602076][ T9052] ? __pfx_ksys_write+0x10/0x10 [ 333.602095][ T9052] __x64_sys_sendmmsg+0x9c/0x100 [ 333.602120][ T9052] ? lockdep_hardirqs_on+0x78/0x100 [ 333.602138][ T9052] do_syscall_64+0x10b/0xf80 [ 333.602152][ T9052] ? clear_bhb_loop+0x40/0x90 [ 333.602169][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.602182][ T9052] RIP: 0033:0x7f1580b9cdd9 [ 333.602194][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.602207][ T9052] RSP: 002b:00007f157edd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.602220][ T9052] RAX: ffffffffffffffda RBX: 00007f1580e16180 RCX: 00007f1580b9cdd9 [ 333.602228][ T9052] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 333.602237][ T9052] RBP: 00007f157edd5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.602244][ T9052] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 333.602252][ T9052] R13: 00007f1580e16218 R14: 00007f1580e16180 R15: 00007ffcf2911238 [ 333.602276][ T9052] [ 333.992764][ T5743] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 334.011585][ T5743] ath9k_htc: Failed to initialize the device [ 334.017684][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.032685][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.076165][ T5743] usb 4-1: ath9k_htc: USB layer deinitialized [ 334.086152][ T5729] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 334.102938][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.146674][ T9] usb 4-1: USB disconnect, device number 23 [ 334.165533][ T5729] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.268513][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.306060][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.346664][ T5729] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 334.368314][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.422726][ T5729] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.486808][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.501381][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.518598][ T5729] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 334.528965][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 334.540503][ T5729] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.554459][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 334.565837][ T5729] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 334.605391][ T5729] usb 3-1: string descriptor 0 read error: -22 [ 334.613644][ T5729] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 334.623697][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.659864][ T5729] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.907618][ T9043] @0Ù¨#: renamed from virt_wifi0 [ 334.952322][ T5799] usb 3-1: USB disconnect, device number 25 [ 334.958838][ T9083] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 335.145681][ T9059] ceph: No mds server is up or the cluster is laggy [ 336.011090][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.182584][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.195147][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 336.204524][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.214926][ T9] usb 4-1: Product: syz [ 336.219392][ T9] usb 4-1: Manufacturer: syz [ 336.226051][ T9] usb 4-1: SerialNumber: syz [ 336.421044][ T5799] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 336.781012][ T5799] usb 6-1: Using ep0 maxpacket: 32 [ 336.787723][ T5799] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.796293][ T5799] usb 6-1: config 0 has no interface number 0 [ 336.803088][ T5799] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.821671][ T5799] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.832965][ T5799] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 336.842077][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.878644][ T9107] netlink: 292 bytes leftover after parsing attributes in process `syz.4.860'. [ 336.890111][ T9107] netlink: 292 bytes leftover after parsing attributes in process `syz.4.860'. [ 336.909934][ T5799] usb 6-1: config 0 descriptor?? [ 337.273999][ T29] audit: type=1400 audit(2000000101.310:577): avc: denied { accept } for pid=9098 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 337.440052][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'. [ 337.449685][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'. [ 337.470034][ T9] usb 4-1: failed to read current rate; disabling the check [ 337.770733][ T29] audit: type=1400 audit(2000000101.800:578): avc: denied { create } for pid=9120 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 337.793763][ T29] audit: type=1400 audit(2000000101.830:579): avc: denied { bind } for pid=9120 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.190892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 338.227116][ T24] usb 4-1: USB disconnect, device number 24 [ 338.266043][ T29] audit: type=1400 audit(2000000101.830:580): avc: denied { connect } for pid=9120 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.304689][ T5799] uclogic 0003:28BD:0094.000B: failed retrieving string descriptor #100: -71 [ 338.322285][ T5799] uclogic 0003:28BD:0094.000B: failed retrieving pen parameters: -71 [ 338.344612][ T5799] uclogic 0003:28BD:0094.000B: pen probing failed: -71 [ 338.354616][ T5799] uclogic 0003:28BD:0094.000B: failed probing parameters: -71 [ 338.369015][ T5799] uclogic 0003:28BD:0094.000B: probe with driver uclogic failed with error -71 [ 338.420607][ T5799] usb 6-1: USB disconnect, device number 9 [ 338.473806][ T9126] FAULT_INJECTION: forcing a failure. [ 338.473806][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.488213][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.2.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.488237][ T9126] Tainted: [L]=SOFTLOCKUP [ 338.488243][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.488253][ T9126] Call Trace: [ 338.488259][ T9126] [ 338.488265][ T9126] dump_stack_lvl+0x100/0x190 [ 338.488284][ T9126] should_fail_ex.cold+0x5/0xa [ 338.488300][ T9126] _copy_from_user+0x2e/0xd0 [ 338.488320][ T9126] __sys_bpf+0x243/0x4b90 [ 338.488332][ T9126] ? __pfx___sys_bpf+0x10/0x10 [ 338.488340][ T9126] ? proc_fail_nth_write+0x9f/0x220 [ 338.488353][ T9126] ? find_held_lock+0x2b/0x80 [ 338.488366][ T9126] ? find_held_lock+0x2b/0x80 [ 338.488375][ T9126] ? ksys_write+0x190/0x250 [ 338.488387][ T9126] ? ksys_write+0x190/0x250 [ 338.488400][ T9126] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 338.488413][ T9126] ? kernel_write+0x613/0x6c0 [ 338.488424][ T9126] ? __fget_files+0x215/0x3d0 [ 338.488444][ T9126] ? fput+0x79/0x100 [ 338.488457][ T9126] ? ksys_write+0x1ac/0x250 [ 338.488468][ T9126] ? __pfx_ksys_write+0x10/0x10 [ 338.488482][ T9126] __x64_sys_bpf+0x7b/0xc0 [ 338.488492][ T9126] ? lockdep_hardirqs_on+0x78/0x100 [ 338.488505][ T9126] do_syscall_64+0x10b/0xf80 [ 338.488516][ T9126] ? clear_bhb_loop+0x40/0x90 [ 338.488530][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.488540][ T9126] RIP: 0033:0x7f931d79cdd9 [ 338.488549][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.488560][ T9126] RSP: 002b:00007f931e57b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.488570][ T9126] RAX: ffffffffffffffda RBX: 00007f931da15fa0 RCX: 00007f931d79cdd9 [ 338.488577][ T9126] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 338.488583][ T9126] RBP: 00007f931e57b090 R08: 0000000000000000 R09: 0000000000000000 [ 338.488589][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.488595][ T9126] R13: 00007f931da16038 R14: 00007f931da15fa0 R15: 00007ffd3ea52a78 [ 338.488609][ T9126] [ 338.708218][ T9128] net_ratelimit: 104 callbacks suppressed [ 338.708241][ T9128] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.728193][ T804] IPVS: starting estimator thread 0... [ 338.847987][ T9130] IPVS: using max 76 ests per chain, 182400 per kthread [ 339.280997][ T9148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.469943][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 339.831044][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 339.838954][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.855572][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 339.930838][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 339.940978][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.961336][ T9] usb 1-1: config 0 descriptor?? [ 340.159127][ T9156] bond1: ARP target 9.0.0.0 is already present [ 340.175325][ T9156] bond1: option arp_ip_target: invalid value (9) [ 340.212512][ T9156] bond1 (unregistering): Released all slaves [ 340.244398][ T9163] binfmt_misc: register: failed to install interpreter file ./file0 [ 340.284117][ T5799] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 340.307117][ T29] audit: type=1400 audit(2000000104.330:581): avc: denied { getopt } for pid=9165 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.337177][ T3286] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 340.354985][ T29] audit: type=1400 audit(2000000104.330:582): avc: denied { setattr } for pid=9165 comm="syz.4.878" name="" dev="pipefs" ino=21414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 340.574728][ T5799] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 340.606909][ T5799] usb 4-1: config 0 has no interface number 0 [ 340.629074][ T5799] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 340.645731][ T5799] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 340.657503][ T5799] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.669048][ T5799] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.678429][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.687696][ T5799] usb 4-1: Product: syz [ 340.692442][ T5799] usb 4-1: SerialNumber: syz [ 340.739718][ T5799] usb 4-1: config 0 descriptor?? [ 340.751152][ T5799] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 340.766630][ T5799] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input25 [ 340.792484][ T29] audit: type=1400 audit(2000000104.830:583): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3320 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.838002][ T29] audit: type=1400 audit(2000000104.830:584): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3320 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.895835][ T29] audit: type=1400 audit(2000000104.830:585): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3320 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.922341][ T9161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.953860][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 341.203824][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.219662][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.229156][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.237458][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.244591][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.251760][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.258896][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.266006][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.273141][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.280072][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 341.289287][ T804] usb 4-1: USB disconnect, device number 25 [ 341.319559][ T804] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 341.326679][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 341.334041][ T5729] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.341934][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 341.358745][ T9] usb 1-1: USB disconnect, device number 26 [ 341.500929][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 341.507210][ T5729] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 341.515514][ T5729] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.525353][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.535647][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.545624][ T5729] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.559012][ T5729] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.568144][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.681888][ T5616] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 341.718236][ T9183] kvm: MWAIT instruction emulated as NOP! [ 341.785032][ T5729] usb 3-1: usb_control_msg returned -32 [ 341.790605][ T5729] usbtmc 3-1:16.0: can't read capabilities [ 341.844061][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 341.866969][ T5616] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 341.877923][ T29] audit: type=1400 audit(2000000105.900:586): avc: denied { listen } for pid=9185 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.899315][ T5616] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 341.899341][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.933758][ T5616] usb 6-1: config 0 descriptor?? [ 341.948385][ T9180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.118775][ T9193] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 342.141903][ T9193] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 342.161101][ T804] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 342.165380][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.180606][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.311605][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 342.339265][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 342.376243][ T804] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.391801][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.426868][ T804] usb 4-1: Product: syz [ 342.445435][ T804] usb 4-1: Manufacturer: syz [ 342.471007][ T804] usb 4-1: SerialNumber: syz [ 342.509099][ T804] usb 4-1: config 0 descriptor?? [ 342.540792][ T804] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 342.574148][ T804] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 342.588174][ T9207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9207 comm=syz.4.891 [ 342.606232][ T9207] netlink: 'syz.4.891': attribute type 10 has an invalid length. [ 342.640848][ T9205] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 342.732841][ T5743] usb 3-1: USB disconnect, device number 26 [ 342.793255][ T5616] usbhid 6-1:0.0: can't add hid device: -71 [ 342.799860][ T5616] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 342.816438][ T5616] usb 6-1: USB disconnect, device number 10 [ 343.136787][ T804] em28xx 4-1:0.0: unknown em28xx chip ID (132) [ 343.197462][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.651037][ T804] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 344.580092][ T804] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 344.632080][ T804] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 344.857444][ T804] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 344.967453][ T804] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 344.990227][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 345.019008][ T804] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 345.036474][ T804] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 345.055809][ T9226] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 345.105809][ T804] usb 4-1: USB disconnect, device number 26 [ 345.196736][ T29] audit: type=1400 audit(2000000109.230:587): avc: denied { append } for pid=9230 comm="syz.0.897" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.242215][ T29] audit: type=1326 audit(2000000109.230:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.0.897" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1580b9cdd9 code=0x0 [ 345.370051][ T29] audit: type=1400 audit(2000000109.400:589): avc: denied { ioctl } for pid=9242 comm="syz.5.902" path="socket:[22233]" dev="sockfs" ino=22233 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.621929][ T9257] netlink: 'syz.3.906': attribute type 2 has an invalid length. [ 345.861028][ T804] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 345.920609][ T9261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.465077][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.489509][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.508437][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 346.547987][ T804] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.569222][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.664197][ T9269] netlink: 148 bytes leftover after parsing attributes in process `syz.0.910'. [ 346.785087][ T804] usb 6-1: config 0 descriptor?? [ 347.294964][ T9283] lo speed is unknown, defaulting to 1000 [ 347.301108][ T9283] lo speed is unknown, defaulting to 1000 [ 347.310911][ T9283] lo speed is unknown, defaulting to 1000 [ 347.321075][ T9283] smbdirect: ib_dev[sy0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 347.340212][ T9283] smbdirect: ib_dev[sy0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 347.357932][ T9283] smbdirect: ib_dev[sy0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 347.427887][ T9283] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 347.573660][ T9283] lo speed is unknown, defaulting to 1000 [ 347.580206][ T9283] lo speed is unknown, defaulting to 1000 [ 347.586672][ T9283] lo speed is unknown, defaulting to 1000 [ 347.611383][ T9283] lo speed is unknown, defaulting to 1000 [ 347.617819][ T9283] lo speed is unknown, defaulting to 1000 [ 347.783802][ T29] audit: type=1400 audit(2000000111.820:590): avc: denied { getopt } for pid=9273 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.928772][ T804] usb 6-1: string descriptor 0 read error: -22 [ 348.052116][ T9289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.360916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.377968][ T9297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 349.386479][ T9297] overlayfs: failed to set xattr on upper [ 349.392784][ T9297] overlayfs: ...falling back to redirect_dir=nofollow. [ 349.399637][ T9297] overlayfs: ...falling back to index=off. [ 349.405497][ T9297] overlayfs: ...falling back to uuid=null. [ 349.440147][ T9298] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 349.463935][ T29] audit: type=1400 audit(2000000113.400:591): avc: denied { mounton } for pid=9292 comm="syz.4.917" path="/file0" dev="ramfs" ino=22641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 349.860757][ T9302] hub 8-0:1.0: USB hub found [ 349.866176][ T9302] hub 8-0:1.0: 1 port detected [ 349.926109][ T9306] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 349.940249][ T9307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63679 sclass=netlink_route_socket pid=9307 comm=syz.2.920 [ 351.247500][ T29] audit: type=1326 audit(2000000115.280:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 351.278170][ T29] audit: type=1326 audit(2000000115.280:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 351.679032][ T804] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 351.726356][ T804] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 351.906214][ T804] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 352.268982][ T29] audit: type=1326 audit(2000000115.280:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 352.340999][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.387888][ T804] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 352.395926][ T804] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 352.432221][ T804] usb 6-1: USB disconnect, device number 11 [ 352.707127][ T29] audit: type=1326 audit(2000000115.280:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 352.733757][ T29] audit: type=1326 audit(2000000115.280:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 352.814071][ T29] audit: type=1326 audit(2000000115.280:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 352.912716][ T29] audit: type=1326 audit(2000000115.280:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 352.970241][ T29] audit: type=1326 audit(2000000115.280:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 353.079401][ T9332] netlink: 'syz.2.924': attribute type 4 has an invalid length. [ 353.144591][ T29] audit: type=1326 audit(2000000115.280:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 353.146174][ T9332] netlink: 156 bytes leftover after parsing attributes in process `syz.2.924'. [ 353.256319][ T29] audit: type=1326 audit(2000000115.280:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931d79cdd9 code=0x7fc00000 [ 353.274875][ T9332] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 353.308218][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 353.342838][ T9342] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 353.371815][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.929'. [ 355.352248][ T804] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 355.600978][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 356.549074][ T804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 356.557352][ T804] usb 6-1: can't read configurations, error -61 [ 356.595891][ T9369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.922861][ T804] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 356.925739][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 356.925752][ T29] audit: type=1400 audit(2000000120.960:609): avc: denied { ioctl } for pid=9371 comm="syz.4.938" path="socket:[22439]" dev="sockfs" ino=22439 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.081254][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 357.084390][ T9377] random: crng reseeded on system resumption [ 357.310714][ T29] audit: type=1400 audit(2000000121.340:610): avc: denied { bind } for pid=9378 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 357.369229][ T29] audit: type=1400 audit(2000000121.340:611): avc: denied { name_bind } for pid=9378 comm="syz.4.940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 357.369287][ T804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 357.401254][ T804] usb 6-1: can't read configurations, error -61 [ 357.412367][ T804] usb usb6-port1: attempt power cycle [ 357.448183][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 357.463272][ T29] audit: type=1400 audit(2000000121.340:612): avc: denied { node_bind } for pid=9378 comm="syz.4.940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 357.765039][ T29] audit: type=1400 audit(2000000121.780:613): avc: denied { read } for pid=9387 comm="syz.0.942" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 357.789419][ T29] audit: type=1400 audit(2000000121.780:614): avc: denied { open } for pid=9387 comm="syz.0.942" path="/186/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 358.408671][ T29] audit: type=1400 audit(2000000122.440:615): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 359.782044][ T9414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.514272][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 360.533883][ T9430] bridge0: port 3(netdevsim0) entered blocking state [ 360.541678][ T9430] bridge0: port 3(netdevsim0) entered disabled state [ 360.551513][ T9430] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 360.571552][ T9430] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 360.581565][ T9430] bridge0: port 3(netdevsim0) entered blocking state [ 360.588902][ T9430] bridge0: port 3(netdevsim0) entered forwarding state [ 360.632713][ T9430] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 360.640821][ T9430] bridge0: port 3(netdevsim0) entered disabled state [ 360.647658][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.655236][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.684282][ T9430] bridge0: port 3(netdevsim0) entered blocking state [ 360.691072][ T9430] bridge0: port 3(netdevsim0) entered forwarding state [ 360.698176][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.705303][ T9430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.712715][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.719829][ T9430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.948683][ T9430] bridge0: port 3(netdevsim0) entered disabled state [ 360.955605][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.962775][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.210368][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'. [ 361.289153][ T29] audit: type=1400 audit(2000000125.320:616): avc: denied { create } for pid=9435 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 361.347356][ T9434] xt_hashlimit: size too large, truncated to 1048576 [ 361.845824][ T9455] syz_tun: entered promiscuous mode [ 361.857316][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 362.410829][ T9453] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 362.418544][ T9453] netlink: 156 bytes leftover after parsing attributes in process `syz.4.961'. [ 362.427549][ T9453] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 362.448489][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'. [ 362.961067][ T5743] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 363.034750][ T9460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9460 comm=syz.5.964 [ 363.133646][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.495227][ T9460] netlink: 'syz.5.964': attribute type 10 has an invalid length. [ 363.570914][ T5743] usb 1-1: Using ep0 maxpacket: 16 [ 363.628439][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.657080][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.698554][ T5743] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.726666][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.771730][ T5743] usb 1-1: config 0 descriptor?? [ 363.916097][ T9488] loop2: detected capacity change from 0 to 7 [ 363.928284][ T9488] Dev loop2: unable to read RDB block 7 [ 363.947506][ T9488] loop2: unable to read partition table [ 363.953751][ T9488] loop2: partition table beyond EOD, truncated [ 363.965960][ T9488] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 363.980203][ T9490] QAT: Invalid ioctl 21531 [ 364.002400][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.034967][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.056637][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.088394][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.181238][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 364.190266][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.221255][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.281315][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.302493][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.346872][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.380990][ T5622] Bluetooth: hci0: unexpected event for opcode 0x202f [ 364.469549][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.710939][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 364.717250][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.725754][ T24] usb 4-1: config 179 has no interface number 0 [ 364.811394][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 364.840534][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 364.848804][ T5743] usbhid 1-1:0.0: can't add hid device: -71 [ 364.875022][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.884519][ T5743] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 364.911013][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 364.914736][ T5743] usb 1-1: USB disconnect, device number 27 [ 364.947067][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.992929][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 365.016222][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.054687][ T9489] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 365.201741][ T29] audit: type=1400 audit(2000000129.240:617): avc: denied { map } for pid=9503 comm="syz.5.978" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 365.271184][ T29] audit: type=1400 audit(2000000129.240:618): avc: denied { execute } for pid=9503 comm="syz.5.978" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 365.382365][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26 [ 365.514821][ T29] audit: type=1400 audit(2000000129.550:619): avc: denied { create } for pid=9486 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.544501][ T9511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9511 comm=syz.4.980 [ 365.566180][ T9511] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 365.591464][ T29] audit: type=1400 audit(2000000129.580:620): avc: denied { read } for pid=9486 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.610693][ T5743] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 365.615430][ T9513] fuse: fd is not a fuse device [ 365.638461][ T24] usb 4-1: USB disconnect, device number 27 [ 365.638775][ T29] audit: type=1400 audit(2000000129.660:621): avc: denied { write } for pid=9486 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.644552][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 365.672064][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 365.688258][ T46] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 365.692457][ T29] audit: type=1400 audit(2000000129.710:622): avc: denied { listen } for pid=9512 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.736625][ T9515] fuse: fd is not a fuse device [ 365.798319][ T5743] usb 6-1: unable to get BOS descriptor or descriptor too short [ 365.806802][ T5743] usb 6-1: config index 0 descriptor too short (expected 274, got 18) [ 365.820980][ T46] usb 1-1: device descriptor read/64, error -71 [ 365.821397][ T5743] usb 6-1: config 114 has an invalid interface number: 57 but max is 0 [ 365.848664][ T5743] usb 6-1: config 114 has no interface number 0 [ 365.860910][ T5743] usb 6-1: config 114 interface 57 has no altsetting 0 [ 365.876827][ T5743] usb 6-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=39.3f [ 365.896041][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.911166][ T5743] usb 6-1: Product: syz [ 365.920905][ T5743] usb 6-1: Manufacturer: syz [ 365.927739][ T5743] usb 6-1: SerialNumber: syz [ 366.070943][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 366.145385][ T29] audit: type=1400 audit(2000000130.180:623): avc: denied { connect } for pid=9507 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.207651][ T5743] ums-cypress 6-1:114.57: USB Mass Storage device detected [ 366.221364][ T46] usb 1-1: device descriptor read/64, error -71 [ 366.355021][ T46] usb usb1-port1: attempt power cycle [ 366.376628][ T9521] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9521 comm=syz.3.982 [ 366.419146][ T9521] netlink: 'syz.3.982': attribute type 10 has an invalid length. [ 366.608336][ T5743] usb 6-1: USB disconnect, device number 15 [ 366.778642][ T46] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 367.246332][ T46] usb 1-1: device descriptor read/8, error -71 [ 367.481964][ T46] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 367.522486][ T46] usb 1-1: device descriptor read/8, error -71 [ 367.591731][ T9532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9532 comm=syz.2.986 [ 367.642102][ T46] usb usb1-port1: unable to enumerate USB device [ 368.161058][ T9563] x_tables: duplicate underflow at hook 3 [ 368.500967][ T9564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.525169][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 368.954406][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.985416][ T9570] usb usb9: usbfs: process 9570 (syz.0.996) did not claim interface 47 before use [ 368.993259][ T24] usb 4-1: config 5 has an invalid interface number: 180 but max is 0 [ 369.019901][ T24] usb 4-1: config 5 has no interface number 0 [ 369.496351][ T24] usb 4-1: config 5 interface 180 has no altsetting 0 [ 369.505084][ T24] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a66, bcdDevice=e6.5a [ 369.519134][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 369.520902][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.546055][ T24] usb 4-1: Product: syz [ 369.556870][ T24] usb 4-1: Manufacturer: syz [ 369.561908][ T24] usb 4-1: SerialNumber: syz [ 369.730385][ T9581] binder: BINDER_SET_CONTEXT_MGR already set [ 369.736610][ T9581] binder: 9576:9581 ioctl 4018620d 200000004a80 returned -16 [ 370.061603][ T9553] bond2 (unregistering): Released all slaves [ 370.765155][ T24] usb 4-1: USB disconnect, device number 28 [ 371.082685][ T9595] 9p: Bad value for 'wfdno' [ 371.090274][ T9598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.279658][ T9595] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1002'. [ 372.151602][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.720251][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'. [ 373.220132][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.226676][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.979757][ T29] audit: type=1400 audit(2000000138.010:624): avc: denied { write } for pid=9604 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 374.016460][ T29] audit: type=1400 audit(2000000138.010:625): avc: denied { read } for pid=9604 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 374.650979][ T5743] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 374.760929][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 374.800901][ T5743] usb 6-1: Using ep0 maxpacket: 16 [ 374.809999][ T5743] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.826920][ T5743] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 374.850835][ T5743] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 374.868916][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.883527][ T5743] usb 6-1: Product: syz [ 374.890128][ T5743] usb 6-1: Manufacturer: syz [ 374.897636][ T5743] usb 6-1: SerialNumber: syz [ 374.930931][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 374.939887][ T46] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 374.952291][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.969124][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 374.992726][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 375.011123][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 375.035596][ T46] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 375.046275][ T9633] orangefs_mount: mount request failed with -4 [ 375.070889][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.080499][ T46] usb 4-1: Product: syz [ 375.086019][ T46] usb 4-1: Manufacturer: syz [ 375.096593][ T46] usb 4-1: SerialNumber: syz [ 375.112841][ T9644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 375.613080][ T5743] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.621855][ T5743] usb 6-1: MIDIStreaming interface descriptor not found [ 375.679690][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.708798][ T9655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.171413][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.227767][ T5743] usb 6-1: USB disconnect, device number 16 [ 376.237751][ T9644] xt_hashlimit: size too large, truncated to 1048576 [ 376.375442][ T7992] udevd[7992]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.534676][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 376.879503][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.899129][ T9666] siw: device registration error -23 [ 376.915767][ T46] usb 4-1: MIDIStreaming interface descriptor not found [ 376.928397][ T9666] smc: removing ib device syz2 [ 376.952043][ T9666] smbdirect: ib_dev[syz2] removed [ 377.415247][ T9666] ------------[ cut here ]------------ [ 377.421421][ T9666] !xa_empty(&pool->xa) [ 377.421428][ T9666] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.5.1022/9666 [ 377.436763][ T9666] Modules linked in: [ 377.440756][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.5.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.451799][ T9666] Tainted: [L]=SOFTLOCKUP [ 377.456115][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.466161][ T9666] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 377.471723][ T9666] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 66 b7 4f f9 5b c3 cc cc cc cc e8 5b b7 4f f9 90 <0f> 0b 90 e8 52 b7 4f f9 5b e9 4c 68 d4 02 e8 67 6f bd f9 eb d0 0f [ 377.491375][ T9666] RSP: 0018:ffffc90003fa7160 EFLAGS: 00010246 [ 377.497415][ T9666] RAX: 0000000000080000 RBX: ffff888074da1398 RCX: ffffc9001ce26000 [ 377.505397][ T9666] RDX: 0000000000080000 RSI: ffffffff88b8d2c5 RDI: ffff888074da1418 [ 377.513358][ T9666] RBP: ffffffff88b73020 R08: 0000000000000005 R09: 0000000000000001 [ 377.521409][ T9666] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888074da0698 [ 377.529393][ T9666] R13: ffff888074d9ffe0 R14: ffff888074d9ffe0 R15: ffff888074da10f8 [ 377.537364][ T9666] FS: 00007feddda896c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 377.546474][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.553055][ T9666] CR2: 00007f157edf6d58 CR3: 000000003a162000 CR4: 00000000003526f0 [ 377.561018][ T9666] Call Trace: [ 377.564274][ T9666] [ 377.567190][ T9666] rxe_dealloc+0x25/0xc0 [ 377.571486][ T9666] ib_dealloc_device+0x49/0x230 [ 377.576329][ T9666] __ib_unregister_device+0x396/0x480 [ 377.581697][ T9666] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 377.587491][ T9666] ib_unregister_device_and_put+0x5a/0x80 [ 377.593204][ T9666] nldev_dellink+0x2a7/0x3c0 [ 377.597774][ T9666] ? __pfx_nldev_dellink+0x10/0x10 [ 377.602920][ T9666] ? rcu_is_watching+0x12/0xc0 [ 377.607663][ T9666] ? cap_capable+0x10b/0x440 [ 377.612238][ T9666] ? bpf_lsm_capable+0x9/0x10 [ 377.616897][ T9666] ? security_capable+0x80/0x260 [ 377.621821][ T9666] ? ns_capable+0xd2/0xf0 [ 377.626126][ T9666] ? __pfx_nldev_dellink+0x10/0x10 [ 377.631253][ T9666] rdma_nl_rcv_msg+0x392/0x6f0 [ 377.636013][ T9666] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 377.641288][ T9666] ? __lock_acquire+0x4a5/0x2630 [ 377.646203][ T9666] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 377.652979][ T9666] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 377.659927][ T9666] ? netlink_deliver_tap+0x1ae/0xcc0 [ 377.665207][ T9666] netlink_unicast+0x585/0x850 [ 377.669959][ T9666] ? __pfx_netlink_unicast+0x10/0x10 [ 377.675241][ T9666] netlink_sendmsg+0x8b0/0xda0 [ 377.679982][ T9666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.685256][ T9666] ? __might_fault+0x90/0x140 [ 377.689916][ T9666] ____sys_sendmsg+0x9e1/0xb70 [ 377.694672][ T9666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.699941][ T9666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.705216][ T9666] ? __pfx_futex_wake_mark+0x10/0x10 [ 377.710475][ T9666] ___sys_sendmsg+0x190/0x1e0 [ 377.715141][ T9666] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.720340][ T9666] __sys_sendmsg+0x170/0x220 [ 377.724924][ T9666] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.730013][ T9666] ? __x64_sys_futex+0x34f/0x4d0 [ 377.734955][ T9666] ? rcu_is_watching+0x12/0xc0 [ 377.739698][ T9666] do_syscall_64+0x10b/0xf80 [ 377.744277][ T9666] ? clear_bhb_loop+0x40/0x90 [ 377.748930][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.754989][ T9666] RIP: 0033:0x7feddcb9cdd9 [ 377.759380][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.778997][ T9666] RSP: 002b:00007feddda89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.787403][ T9666] RAX: ffffffffffffffda RBX: 00007feddce15fa0 RCX: 00007feddcb9cdd9 [ 377.795370][ T9666] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 377.803334][ T9666] RBP: 00007feddcc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 377.811295][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.819248][ T9666] R13: 00007feddce16038 R14: 00007feddce15fa0 R15: 00007ffc4d18b188 [ 377.827216][ T9666] [ 377.830212][ T9666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 377.837464][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.5.1022 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.848281][ T9666] Tainted: [L]=SOFTLOCKUP [ 377.852576][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.862606][ T9666] Call Trace: [ 377.865861][ T9666] [ 377.868766][ T9666] dump_stack_lvl+0x100/0x190 [ 377.873419][ T9666] vpanic+0x552/0x970 [ 377.877372][ T9666] ? __pfx_vpanic+0x10/0x10 [ 377.881850][ T9666] panic+0xd1/0xe0 [ 377.885545][ T9666] ? __pfx_panic+0x10/0x10 [ 377.889941][ T9666] check_panic_on_warn.cold+0x19/0x34 [ 377.895287][ T9666] ? rxe_pool_cleanup+0x46/0x60 [ 377.900107][ T9666] __warn.cold+0x191/0x328 [ 377.904506][ T9666] __report_bug+0x296/0x3d0 [ 377.908982][ T9666] ? rxe_pool_cleanup+0x46/0x60 [ 377.913805][ T9666] ? __pfx___report_bug+0x10/0x10 [ 377.918800][ T9666] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.924580][ T9666] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 377.930365][ T9666] ? __flush_workqueue+0x426/0x1200 [ 377.935537][ T9666] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 377.941161][ T9666] ? rxe_pool_cleanup+0x46/0x60 [ 377.945983][ T9666] report_bug+0xb2/0x220 [ 377.950198][ T9666] ? rxe_pool_cleanup+0x46/0x60 [ 377.955021][ T9666] handle_bug+0x16a/0x2a0 [ 377.959327][ T9666] exc_invalid_op+0x17/0x50 [ 377.963804][ T9666] asm_exc_invalid_op+0x1a/0x20 [ 377.968625][ T9666] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 377.974056][ T9666] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 66 b7 4f f9 5b c3 cc cc cc cc e8 5b b7 4f f9 90 <0f> 0b 90 e8 52 b7 4f f9 5b e9 4c 68 d4 02 e8 67 6f bd f9 eb d0 0f [ 377.993636][ T9666] RSP: 0018:ffffc90003fa7160 EFLAGS: 00010246 [ 377.999672][ T9666] RAX: 0000000000080000 RBX: ffff888074da1398 RCX: ffffc9001ce26000 [ 378.007614][ T9666] RDX: 0000000000080000 RSI: ffffffff88b8d2c5 RDI: ffff888074da1418 [ 378.015561][ T9666] RBP: ffffffff88b73020 R08: 0000000000000005 R09: 0000000000000001 [ 378.023502][ T9666] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888074da0698 [ 378.031457][ T9666] R13: ffff888074d9ffe0 R14: ffff888074d9ffe0 R15: ffff888074da10f8 [ 378.039400][ T9666] ? __pfx_rxe_dealloc+0x10/0x10 [ 378.044317][ T9666] ? rxe_pool_cleanup+0x45/0x60 [ 378.049140][ T9666] rxe_dealloc+0x25/0xc0 [ 378.053357][ T9666] ib_dealloc_device+0x49/0x230 [ 378.058187][ T9666] __ib_unregister_device+0x396/0x480 [ 378.063535][ T9666] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 378.069331][ T9666] ib_unregister_device_and_put+0x5a/0x80 [ 378.075023][ T9666] nldev_dellink+0x2a7/0x3c0 [ 378.079589][ T9666] ? __pfx_nldev_dellink+0x10/0x10 [ 378.084711][ T9666] ? rcu_is_watching+0x12/0xc0 [ 378.089451][ T9666] ? cap_capable+0x10b/0x440 [ 378.094014][ T9666] ? bpf_lsm_capable+0x9/0x10 [ 378.098663][ T9666] ? security_capable+0x80/0x260 [ 378.103570][ T9666] ? ns_capable+0xd2/0xf0 [ 378.107878][ T9666] ? __pfx_nldev_dellink+0x10/0x10 [ 378.112967][ T9666] rdma_nl_rcv_msg+0x392/0x6f0 [ 378.117709][ T9666] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 378.122972][ T9666] ? __lock_acquire+0x4a5/0x2630 [ 378.127895][ T9666] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 378.134288][ T9666] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 378.141205][ T9666] ? netlink_deliver_tap+0x1ae/0xcc0 [ 378.146466][ T9666] netlink_unicast+0x585/0x850 [ 378.151206][ T9666] ? __pfx_netlink_unicast+0x10/0x10 [ 378.156468][ T9666] netlink_sendmsg+0x8b0/0xda0 [ 378.161208][ T9666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.166467][ T9666] ? __might_fault+0x90/0x140 [ 378.171124][ T9666] ____sys_sendmsg+0x9e1/0xb70 [ 378.175867][ T9666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.181127][ T9666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.186387][ T9666] ? __pfx_futex_wake_mark+0x10/0x10 [ 378.191656][ T9666] ___sys_sendmsg+0x190/0x1e0 [ 378.196310][ T9666] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.201498][ T9666] __sys_sendmsg+0x170/0x220 [ 378.206070][ T9666] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.211157][ T9666] ? __x64_sys_futex+0x34f/0x4d0 [ 378.216078][ T9666] ? rcu_is_watching+0x12/0xc0 [ 378.220819][ T9666] do_syscall_64+0x10b/0xf80 [ 378.225385][ T9666] ? clear_bhb_loop+0x40/0x90 [ 378.230043][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.235906][ T9666] RIP: 0033:0x7feddcb9cdd9 [ 378.240293][ T9666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.259870][ T9666] RSP: 002b:00007feddda89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.268255][ T9666] RAX: ffffffffffffffda RBX: 00007feddce15fa0 RCX: 00007feddcb9cdd9 [ 378.276199][ T9666] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 378.284140][ T9666] RBP: 00007feddcc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 378.292081][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.300025][ T9666] R13: 00007feddce16038 R14: 00007feddce15fa0 R15: 00007ffc4d18b188 [ 378.307976][ T9666] [ 378.311298][ T9666] Kernel Offset: disabled [ 378.315595][ T9666] Rebooting in 86400 seconds..