last executing test programs: 20.818123974s ago: executing program 0 (id=2166): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7264, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 14.685129504s ago: executing program 0 (id=2178): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x68, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=""/258, &(0x7f00000001c0)="2832b72a027b678d8831e354e5c656e5011302899d8f30c91c8f2bb9504636", &(0x7f00000000c0)="d42cdcac28b8bf1161bb05abc3ad5157ea438194bc76d192a3f0206536d10cdcb777bd339b2324ee3a6a814a6191e5ef64840a897d69bad229155e298d4ebac6c95b7701a23856e72ff7ee3fc9f8c4575788d40be2f5602aadfbb35f4cbe0788053eb571aaefac34aac2d14d992dff96fabc7523836e79f81681023b75e12814d980e8dd1e751422b82640186fd14697e58b33616989954de4c2d4bb9ad236adb4b781ffc50517e446869ca60eff9974c2fe5900335d4bb8fb968a93d11b41271366884f70615bce950f5c41bd87f32dd61a72417938e879e7f2600cf85388923cd47b4128b5441595b2bd7a", 0x4, r5}, 0x38) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000200)) 12.155441035s ago: executing program 0 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) set_mempolicy(0x8006, &(0x7f0000000040)=0x1, 0x8) pipe(&(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) poll(0x0, 0x0, 0xffffffe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120150028f0e204009021200010440e00c097ef90200ff016a014fc2a58c1f4e1f9c7f7f0900d652d13729fb1abd23dc74619da0c789fae328ff2e4ae5e43374fd74ac7b733bbff3671bbc96b3ee5a1214f17da9b435b4b6200e388f4c627f613da8ddfe5d0ee50d35cac5d952a29130219d730aab71ec71bae1366505bcfbb12717065fd1aa68b946b353a6e054ed2c245c8c40a06749805ba8fa0939718873a90e8611e8516f99e7b177ae11a64e351a0764a5867df5a05777e981d3d99ca282a6c107b64a9b1c594f4f2b5c013cda8a4c375ea40c5dcb9cca4281ca88dc1bddddf494969249656b5e209e4dbcfda310729aa298dddc"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x1, 0x16b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x1, 0x1, 0x8, 0x10, 0xa4, "", [{{0x9, 0x4, 0x0, 0x59, 0x3, 0x2, 0x6, 0x0, 0xf9, {{0x7, 0x24, 0x6, 0x0, 0x0, "830b"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x4000, 0x5, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0xfa, 0x24, 0x13, 0x8b, "f93be032e8372c624a214576cfeaa283c7bd8edac88b10c8a27bbd5db5602a23744eb476f3ca63b32066a63ed3cc5e3f61142002e8d855567a499ebe87fb9dac0745956dafcd0c239c6dfe5f16debf7befdc5a3cc10fd8c44beb6311bb78fb2c8cd0c5a44b5ffe9ecb5b047200f81c2488d0f8c43890d2a4ab69c93967b95cb2f0876f9d23e27072874b73fa41f37555935f951fdde27851feab2deb7a0b0ca614a908c166663d9e28973d502c4211d76900c185cc424c83138300db4b1724bf9fa394a3fcec91522d9054a59e63ecfb4868b7aad794f948a7b6f36a0bbba081efedc30b21a7fc7d9768279f13ba4f307462896e9ca8"}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x38}, @dmm={0x7, 0x24, 0x14, 0x5, 0x3ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x47, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xc0, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x1, 0x4, 0x5, 0xff, 0x5}, 0x32, &(0x7f0000000440)={0x5, 0xf, 0x32, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x1, 0xf00, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x6, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x3, 0xfffb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xf6, 0x5}]}, 0x2, [{0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "058c48802d48c758630b514ebefce94b431383944a7366b31cc46c5c54d45ab19376c46703ef81f770113493c135d752e693a3fbd25fdb6c07a6ced67a0598262bab6bc5233ab21a2c188d61bd56fcc3d3ec9441876e122d0022a3ca4f52b3a2a4789663b99424972bdd3f318a6dddd9bf21d9cd0a44b2b53ee0d94761d403e2f083f5f3928bc70904fb944c933adccafe955a366db70a882e1a12f498"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}]}) getpid() 12.011154915s ago: executing program 4 (id=2185): socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 11.069901662s ago: executing program 4 (id=2193): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="deaf90c3", @ANYRES16=r5, @ANYBLOB="0d0b26bd7000ff"], 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) socket$inet6(0xa, 0x5, 0x0) 9.950640952s ago: executing program 4 (id=2194): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) 9.595914414s ago: executing program 2 (id=2197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/disksize\x00', 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x84, r2, 0x101, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10008001}, 0x200400a0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x40001000}], 0x3e0000) kexec_load(0x9, 0x0, 0x0, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write(r0, &(0x7f0000000280)='10485760', 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x44801, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x10001) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000140)="9a68f20fbdae6db1cf13f2ebab12c47f0ff703e5f27d1f6010befd65b26fc75667e9da9719d42e17369fea62a8944f933d54db196bea30bc880bfee5d29f8f4bbdfd4ff8c24221e1fd034b89f8820157a8e800fd433cb24998910c32f50bff779bd88699185a3805c5d321d24434af985c8276be3340cb5ddd815a9c060a75589ad27a5c") 9.23163774s ago: executing program 2 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) io_uring_setup(0x2ed0, &(0x7f0000000080)={0x0, 0xbb1c, 0x4, 0x1, 0x22d}) 9.230979555s ago: executing program 1 (id=2199): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.001948002s ago: executing program 1 (id=2200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x8000000000000003, {0x0, 0xf0, 0x2}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xb, 0x10}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)='^\'', 0x2}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) dup(r0) 7.668081785s ago: executing program 4 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000100001e026bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="884e0600c16a010060001280110001006272696467655f736c617665000000004800058005001c00000000000500200000000000050005000000000005001900"], 0x80}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 7.224394225s ago: executing program 0 (id=2202): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x84, 0x18, 0xfffffffffffffffe, &(0x7f0000000040)) mq_open(&(0x7f0000000140)='\x00', 0x1082, 0x1b1, &(0x7f0000000180)={0x5, 0x1, 0x8000000000000000, 0x7}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r2, 0x79a69000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000440)=0x80008) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x58000, 0xeeee0002, 0x4, 0x1, 0x7f, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x50000, 0x5000, 0x3, 0xfe, 0x8, 0x0, 0x0, 0x80, 0xe, 0x0, 0x5, 0x7c}, {0x3000, 0x10000, 0x8, 0x0, 0x0, 0x4, 0x1, 0x2, 0x6, 0x1, 0x7, 0x2}, {0x2, 0xffff1000, 0x0, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfb, 0xff, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x54000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x3, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x9, 0x0, 0x7, 0xfb, 0x0, 0x8, 0x1a, 0x2, 0x2, 0x2}, {0x0, 0x25000, 0x10, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3}, {0x2000, 0xb}, {0xc000}, 0x9df9ffdf, 0x0, 0x41000, 0x3020c0, 0x3, 0x8000, 0x60000, [0xdd41, 0x0, 0x2]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="8000379bfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0xe20, 0xffffdffe, @local, 0x4}, 0x1c) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r11, 0x79f, &(0x7f0000000080)=0x10000) 4.221269334s ago: executing program 2 (id=2203): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write(r0, &(0x7f0000000040)="05000000020000", 0x7) 4.115451379s ago: executing program 4 (id=2204): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="deaf90c3", @ANYRES16=r5, @ANYBLOB="0d0b26bd7000ff"], 0x14}}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x6, 0x8, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x7}, &(0x7f00000001c0)=0x10001, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x24, 0xffffffffffffffff}}], 0x58, 0x800}, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) socket$inet6(0xa, 0x5, 0x0) 4.115052638s ago: executing program 1 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101200, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d0004002bbd7000fedb01800400dd80b504060fa4b6068908000180040003800000000000000000"], 0x24}}, 0x4008030) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@any, 0xfff}, {@hyper, 0x5}, 0x400, "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"}, 0x418, 0x8}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c1, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000240)={@local, 0x4}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 4.032670958s ago: executing program 0 (id=2206): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="06000045", @ANYRES16=0x0, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080037000000000020006e8004000200040001000400020004000200040002000400010004000200050008000300000010006e8004000200040001000400010011000700eeb9405799b564af0b7897bf0400000014006e800400010004000200040002000400020020006e800400020004000200040001000400010004000100040002000400010028006e8004000100040001"], 0xf4}, 0x1, 0x0, 0x0, 0x20040040}, 0x4800) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xca, &(0x7f00000035c0)=ANY=[], 0x0) listen(r4, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000e5", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r10 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) landlock_restrict_self(r2, 0xa) 3.197283468s ago: executing program 2 (id=2207): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1080020, &(0x7f0000000280)=ANY=[@ANYBLOB="09003da08943049b7b771f9caac971a595c72bc64466ef8a83eb0fdbfe131f6eef801b3ac53d1ff2f38d0675d9b300000d2ed9a6a70831dd0a543051cb6c", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00']) (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1080020, &(0x7f0000000280)=ANY=[@ANYBLOB="09003da08943049b7b771f9caac971a595c72bc64466ef8a83eb0fdbfe131f6eef801b3ac53d1ff2f38d0675d9b300000d2ed9a6a70831dd0a543051cb6c", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00']) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r3, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4}}, 0x40) socket$inet6(0xa, 0x800, 0x9) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f00000002800200", 0x2c}], 0x1}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 3.178901993s ago: executing program 3 (id=2208): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000002540)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xc, 'veth0_to_bond\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x400, 0x1cc) write(r5, 0x0, 0x2b) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x14d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x320, 0x288, 0x0, 0x98, 0x98, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0xffffffff, 0xff000000, 'veth0_macvtap\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x69}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x3, 0x2}, {{0x2}, 0xb}, {{0x2}, 0x2}, 0x5}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x3], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2e}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x81}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xa, 0xffe0}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}}, 0x20000055) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_ublk_setup_queues(r8, r6, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000024c0)={0x50, 0x0, r10, {0x7, 0x2d, 0x81, 0x10000000, 0x6, 0x8, 0xffff, 0x2, 0x0, 0x0, 0x40, 0x2}}, 0x50) 3.178131444s ago: executing program 4 (id=2209): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/433], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 2.907767797s ago: executing program 3 (id=2210): syz_ublk_setup_io_uring(0x20, &(0x7f0000000540), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005ec0)=@newtaction={0xea8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x3, 0x7, 0x6, 0x1}, 0x3, 0x1}, [{0xab8, 0x3, 0x3, 0x1ff, 0x2, 0x4}, {0x3, 0xff, 0x2, 0x401, 0x8, 0xe9d}, {0x3, 0x5, 0x6, 0xe5, 0xffffff0d, 0x6}, {0x0, 0x7, 0x10000, 0x9, 0x3, 0x1c000}, {0x9, 0x86, 0x3000000, 0x4, 0xd, 0xff}, {0x62b1, 0x1, 0x7f, 0xc, 0x101, 0xfffffffb}, {0x1, 0x3, 0xfffffffb, 0x4, 0x2, 0x2}, {0x0, 0x2, 0xd, 0x6, 0x2, 0x3}, {0x9, 0xfffffff8, 0x3, 0x4233, 0x3, 0x8}, {0x7, 0x7fff, 0x0, 0x80000001, 0x387, 0x7}, {0x0, 0x8, 0x7, 0x8, 0x4, 0xfffffff7}, {0x5, 0x4, 0x9, 0x9, 0x1000, 0xffff}, {0x7, 0xd8, 0x6, 0x0, 0x4, 0xacd4}, {0x7, 0x0, 0x2, 0x1, 0x200, 0x2c378a9f}, {0xffff, 0x7, 0x4, 0x6, 0xc0000000, 0x1}, {0x7fffffff, 0xad, 0x0, 0x4, 0x2}, {0x6, 0xfe, 0x8, 0x9, 0x9, 0x401}, {0xfffffff9, 0x4, 0x8, 0x40, 0x8}, {0x8, 0x8f, 0x8001, 0xc2e, 0xf52f, 0xffff3b50}, {0xffffff00, 0xffffffff, 0x8, 0x9, 0xff, 0xb1}, {0x8, 0x18000000, 0x2a, 0xc6f, 0x7, 0x6}, {0x0, 0x7, 0x7b, 0x4, 0x9, 0x8d}, {0x200, 0x1, 0x7, 0x1, 0x6, 0xfffffffa}, {0x0, 0x44, 0x6, 0x0, 0x9, 0x2}, {0xfffffff8, 0x8, 0x4, 0x3, 0x5, 0x7d}, {0x3ff, 0xffff091e, 0x8925, 0x33e8, 0x3, 0x4}, {0x7, 0xd1, 0x8, 0x1, 0xe, 0xcc}, {0x200, 0x1, 0x84e, 0x4, 0x3e6, 0x9}, {0x6, 0xeb09, 0x2a082b7e, 0x1, 0x9, 0x7}, {0x10000, 0xb8, 0x3, 0x9, 0x9, 0xe9d}, {0x3, 0x3, 0x6, 0x0, 0x3, 0x8333}, {0x8000, 0x2539, 0x5, 0x6, 0x4, 0x3}, {0x5, 0x2, 0x2, 0x1, 0x4, 0x2}, {0x5, 0x4, 0xffffffd0, 0x4, 0x12000000, 0x4}, {0x1812, 0x8, 0x9c, 0x2, 0xf, 0x101}, {0xffffff71, 0x9c7e, 0x0, 0x7, 0xa17a, 0xde}, {0x9, 0x3, 0xa3b, 0x7fff, 0x5, 0xffffff08}, {0x0, 0x7, 0x0, 0x7, 0x3ff}, {0xb47, 0x7, 0x9, 0x86f7, 0x9, 0x4}, {0x3, 0x7, 0x2, 0xe3, 0x7, 0x4}, {0xffffffff, 0x6, 0x1, 0x35d, 0x29200000, 0x6}, {0x0, 0xf11, 0x5, 0x6, 0x4, 0x3}, {0x4, 0x100, 0x0, 0x79f, 0xfffff1c8, 0x70}, {0x0, 0x400, 0x7, 0x9, 0x4, 0x10000}, {0x5, 0x1, 0x5, 0x9, 0x8000, 0xad934800}, {0x4b, 0xf2, 0x7, 0xe563, 0x4, 0x7}, {0x5, 0x6, 0x7fff, 0x9, 0x365, 0x2}, {0x5, 0x5, 0x2, 0x3, 0x43, 0x1}, {0x2, 0x6, 0x80, 0x3, 0x7fff, 0x7}, {0x3, 0xffffffff, 0xfffffff7, 0x9, 0x40, 0xf}, {0x5, 0x800, 0xb03c, 0xf, 0x8, 0x8}, {0x6, 0x2, 0x1, 0x8, 0x6, 0xa4}, {0x1, 0x4, 0x6, 0x4, 0x8001, 0x1}, {0x6, 0x40, 0xe4, 0x5e, 0x6, 0x754}, {0x9, 0x5, 0x8, 0x4, 0x0, 0xfffffffb}, {0xdb3, 0x9, 0x2, 0x5, 0xb, 0xff}, {0x9, 0xffffffff, 0xd7, 0x2, 0xfd5, 0xfbd}, {0x200, 0x8, 0x10000, 0x24, 0x101, 0x3}, {0x2000000, 0x7e99, 0x0, 0x7ff, 0x0, 0x6}, {0x100, 0x0, 0xa0, 0x8, 0x0, 0x7}, {0x3, 0x2, 0x5, 0x7, 0x10, 0x9}, {0x7, 0x9, 0x265d, 0x7, 0x3, 0x4}, {0x6, 0x1000, 0x6, 0x1, 0x5, 0x6}, {0x80, 0x7, 0x4, 0x9, 0xc2, 0x2}, {0x9, 0x7, 0x4, 0x80000000, 0xfffff238, 0xffff7c49}, {0xc, 0x10001, 0x6, 0x2, 0xfffff5a6, 0x8}, {0x8001, 0x81, 0x7, 0x6, 0x4, 0x4}, {0x2, 0x2, 0x39a3, 0x7, 0x5, 0x9}, {0xfffffff9, 0x4, 0x0, 0x1a, 0x200, 0x4}, {0x1, 0x9, 0xb0, 0x7, 0x400, 0x2}, {0x4, 0x7, 0x40, 0x905, 0x5, 0x4}, {0x61, 0x0, 0x4, 0x9, 0x2, 0x6}, {0xd0, 0x1, 0x2, 0x4, 0x9, 0x3}, {0x6, 0x80000000, 0xfff, 0x0, 0x43cd, 0x138a2e31}, {0x26, 0x3, 0x5, 0xd01, 0x9, 0xe7}, {0x7, 0x2, 0xed0e, 0x6, 0x2000, 0x800}, {0x400, 0xff, 0x1a6d, 0x64, 0x2, 0x7}, {0x239, 0x71, 0x5, 0x8, 0x9, 0x3}, {0x101, 0xfffffff8, 0xf4, 0x5, 0xe, 0x1000}, {0xfffffff8, 0x1000, 0x0, 0xff, 0x2, 0xfffffffa}, {0x80000000, 0x10000, 0x1, 0xe51e, 0x8, 0xfffffffd}, {0x0, 0x1, 0x1, 0x29, 0x5, 0x200}, {0x3, 0x400, 0x0, 0xe, 0x9, 0x7f}, {0x3, 0x0, 0x0, 0x9, 0x9, 0x4}, {0x10, 0x0, 0x7, 0x2, 0x8, 0x4}, {0x3, 0x40, 0x7fff, 0x46, 0x5, 0x7ea}, {0x5, 0x86d6, 0x3, 0xf, 0x401, 0x3ff}, {0x7, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x9, 0x155a, 0x4, 0x3, 0x5}, {0x2, 0x7, 0x9, 0xffffffff, 0x6bd, 0x800}, {0x3d13, 0x5, 0x118, 0xfff, 0xff, 0x1}, {0x28, 0x4, 0x0, 0x7, 0x7, 0xad}, {0x8, 0x0, 0x5, 0x0, 0x8, 0x800}, {0x1, 0x400, 0x7, 0x4, 0x1, 0x8}, {0xfffffd18, 0x9, 0x401, 0x4, 0x4, 0x14}, {0x800, 0xa8f, 0x2, 0xfff, 0x2, 0x3}, {0x3, 0xff, 0x2, 0x7, 0xfffffffa, 0x9}, {0x401, 0x0, 0x5, 0x4, 0x7ff, 0x1}, {0x4, 0xffff8001, 0x3, 0x9, 0x3, 0xb}, {0x1, 0x1, 0x3bbb, 0x0, 0x9, 0x83}, {0x8, 0x2, 0x6, 0x8001, 0x40, 0x5}, {0x5, 0x7, 0x1000, 0x8, 0x3, 0x7}, {0x3ffffffd, 0x1, 0x2, 0x4, 0x7, 0x4}, {0x7fffffff, 0x3, 0x7f, 0x3, 0x0, 0xe}, {0x3, 0x515, 0x1, 0x23b2, 0x2, 0x9}, {0x17, 0xfffffffb, 0x10000, 0x1ff, 0x10, 0x8000}, {0x8e, 0x8, 0xcc, 0x0, 0x7, 0x4}, {0x2, 0x6, 0xbbe, 0x9, 0xffff7fff, 0x8000}, {0x9, 0xfffffff0, 0x0, 0x7f, 0x3444bb35}, {0x9, 0x1ff, 0x3, 0x4544, 0x1, 0x1}, {0x385, 0x5, 0x9, 0xefffffff, 0x1000, 0x6}, {0xccef, 0x6, 0x8, 0x101, 0x4}, {0x180000, 0x8ae1, 0x7, 0x6, 0xff, 0xfff}, {0x400, 0x1, 0x400, 0xc, 0x1, 0x8}, {0x30, 0x6, 0xfffffffa, 0x400, 0x401, 0xbd65}, {0x1, 0x0, 0xd031, 0x4, 0x6, 0x1000}, {0x8b, 0x10000, 0x0, 0x2, 0x8, 0x9}, {0x5, 0xfffffff9, 0xd, 0x10, 0x37e8, 0x4}, {0xffff5bb1, 0x36ec, 0x7d, 0x8, 0x2, 0x7fff}, {0x7, 0x1, 0x5, 0x4, 0x3, 0xf6535ff5}, {0x80, 0x2, 0x7, 0x6, 0x5, 0x81}, {0x2, 0x3, 0x8, 0x4, 0x1, 0x1000}, {0x10000, 0x3ff, 0x4, 0x101, 0xfff, 0xc5}, {0x10001, 0x7, 0x10000, 0x8, 0x8d4, 0x2618}, {0x6, 0x2, 0x0, 0x7f, 0x8, 0x1}, {0xd3a1, 0x9, 0x7, 0x80000000, 0x8, 0x80000000}, {0x9, 0x200, 0xdfca, 0x5, 0x94d, 0xa}, {0x35f, 0xaa, 0x9, 0x40, 0x66c, 0x9}], [{0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x78c0603c8fa1a1b4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x7a479a5d4662f5b3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x6}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x21, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x18}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xea8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x3, 0x80000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000060000000000000014000000110001"], 0xa4}}, 0x0) io_pgetevents(r2, 0x1, 0x0, 0x0, 0x0, 0x0) io_getevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x200102, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='10 2\n\x00', 0x5) close(r6) write$tun(r6, &(0x7f0000000680)={@val={0x0, 0x8848}, @val={0x3, 0x80, 0x1, 0xfff, 0x6, 0x83}, @llc={@snap={0x0, 0xaa, 'q', "f5d7a9", 0x16, "24729b78a9cdc3f8362563e7ee09357a85bfcafb92cda08e0d909ff4989c601594a6ab916153787af532dae46edf31aa3a55f2a414d3a89b607e0acb41b9056e81a9c248bc6a8e044f03349f1004a57d53ade8c6af1a0af0147e0f005f6beabfc158cf49e326d72add5b781f10b2d5eed7cc6a5ad75ffa3a926ee85251b9460a4fda8326b65e2c80"}}}, 0x9e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 2.485248569s ago: executing program 1 (id=2211): openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) 2.248650927s ago: executing program 2 (id=2212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3801000010003306000096708b047129c02500001644000000000000000800aaac1e0001000000000000000000001f0000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000000000000000000000000000032000000fc0200000000000000000000000000002703000000000000090000000000000000000000000000000400000000000000000000000000200000000000000000000100000000000000070000000000000000000000000000000000000000000000020000000000000000000000000000008f000000000000000800000029bd700002350000020001000000000000000000480002"], 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = syz_socket_connect_nvme_tcp() recvmmsg(r1, &(0x7f0000007d40)=[{{&(0x7f0000000040)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000001c0)=""/98, 0x62}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/170, 0xaa}, {&(0x7f0000001dc0)=""/182, 0xb6}, {&(0x7f0000001e80)=""/179, 0xb3}, {&(0x7f0000001f40)=""/33, 0x21}, {&(0x7f0000001f80)=""/131, 0x83}], 0x7, &(0x7f00000020c0)=""/255, 0xff}, 0x80}, {{&(0x7f00000021c0)=@alg, 0x80, &(0x7f0000003940)=[{&(0x7f0000002240)=""/240, 0xf0}, {&(0x7f0000002340)=""/171, 0xab}, {&(0x7f0000002400)=""/242, 0xf2}, {&(0x7f0000002500)=""/210, 0xd2}, {&(0x7f0000002600)=""/169, 0xa9}, {&(0x7f00000026c0)=""/102, 0x66}, {&(0x7f0000002740)=""/166, 0xa6}, {&(0x7f0000002800)=""/248, 0xf8}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/39, 0x27}], 0xa, &(0x7f0000003a00)}}, {{&(0x7f0000003a40)=@xdp, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/249, 0xf9}, {&(0x7f0000003cc0)=""/31, 0x1f}], 0x3, &(0x7f0000003d40)=""/239, 0xef}, 0x6}, {{&(0x7f0000003e40)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003ec0)=""/70, 0x46}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/200, 0xc8}, {&(0x7f0000005040)=""/84, 0x54}, {&(0x7f00000050c0)=""/232, 0xe8}], 0x5}, 0x4}, {{&(0x7f0000005240)=@nl, 0x80, &(0x7f0000005500)=[{&(0x7f00000052c0)}, {&(0x7f0000005300)=""/108, 0x6c}, {&(0x7f0000005380)=""/100, 0x64}, {&(0x7f0000005400)=""/255, 0xff}], 0x4, &(0x7f0000005540)}, 0x8}, {{&(0x7f0000005580)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005600)=""/175, 0xaf}], 0x1}, 0x7}, {{&(0x7f0000005700)=@nfc, 0x80, &(0x7f0000005940)=[{&(0x7f0000005780)=""/42, 0x2a}, {&(0x7f00000057c0)=""/50, 0x32}, {&(0x7f0000005800)=""/202, 0xca}, {&(0x7f0000005900)=""/48, 0x30}], 0x4, &(0x7f0000005980)=""/4096, 0x1000}, 0x2a9}, {{0x0, 0x0, &(0x7f0000007c40)=[{&(0x7f0000006980)=""/228, 0xe4}, {&(0x7f0000006a80)=""/60, 0x3c}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000006bc0)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/88, 0x58}], 0x5, &(0x7f0000007cc0)=""/119, 0x77}, 0x9}], 0x9, 0x0, &(0x7f0000007f80)={0x0, 0x3938700}) 1.820200292s ago: executing program 2 (id=2213): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x4208, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r4, 0x2141}, {r4, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c", 0x2d}], 0x1}, 0x0) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x200, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0x4, 0x5, 0x1, 0x2000, 0x4, 0x9, 0xa5, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x1a, 0x8, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}]}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d956f2dab03deba6a0274ad219f6fec7b2ffe3fc5a042d55df2f964c5e65552dbdbf049edfca3a460d8ba146ea9151578fc291bb2285bb168f964fbe2fc8c8f77ac6e40d00503d8f79d97dbe91e613d13cead82e82a12b1b3d846efd1ac2b3e08f92272aa83c6f3392b843fadc25e0365bf7f353bec9c285a96754ecb7191aa67be678689730fd4f59cb54cc16843e521b193d67c1f47c327b3a5ada9ebee4008197849a42c03efa34d137ef0c89ea1695c05"], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x4f5ade62d64c6ba1) socket$nl_route(0x10, 0x3, 0x0) 1.509239427s ago: executing program 1 (id=2214): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r3, 0x0, 0x3, 0x4) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000000000)={0x1, 0x1, 0x8000000000000001, 0x1ff, 0x80000000, 0xfcd}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 1.3893366s ago: executing program 3 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001700090025bd700001dcdf25060000000800010003000000a188f21c4d317d48e5cbf31de90a18df64de54f6a40fe15f2d033c50fae6161a230fcdf29936d110a97e962db379645f3f18bffca80c314686a3741b96f679d4f77263"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1.276158739s ago: executing program 3 (id=2216): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0c01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x0, r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0xe, 0x0, 0x56291, r1, 0x3, '\x00', 0x0, r1, 0x0, 0x3, 0x4, 0x0, @void, @value, @value=r1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'veth0_to_bridge\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x21, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xe, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff7}, @alu={0x7, 0x0, 0x0, 0xb, 0x1, 0xc, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x4, 0x2, 0x0, r2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @generic={0x4, 0x1, 0x3, 0x4, 0x59}, @call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000840)='GPL\x00', 0xfff, 0x37, &(0x7f0000000880)=""/55, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r4, r1, r2, r5, r6], &(0x7f0000000a80)=[{0x4, 0x4, 0x2, 0x6}, {0x1, 0x1, 0x9, 0xa}], 0x10, 0x2ea}, 0x94) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x102000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r8, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c8535157c27d4671cae3d792f52c070b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5bb1cfe1b6f375d91eeee1225b40c360"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9e24c2f1b18b5dafe5e43b253f6f4394"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004040}, 0x87) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r9, r10, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0x1, 0xfc4, 0x124, 0x4749, 0x6, 0x8, 0x9, 0x8000, 0x800, r9, r10, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e5d9e374148867c1682294386261621b70cc672843325c24e4a379c2d5be879be31dde29f043632fc7499f96c27cedbdc94b1829b55d3370419f4293c34b4eb6a95c7933f13ca9ef2391a2047c950b27090a2b6003e379e0098f5aa15dde51f1b86706f289c5b42451256e226544b822dac", @ANYRESHEX=r0, @ANYBLOB=',fowner<', @ANYRESDEC=r9, @ANYBLOB=',audit,subj_type=rfdno,\x00']) 1.275765327s ago: executing program 1 (id=2217): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x410c01) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000040)) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x8b, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x2c, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x5, 0x2, 0x10, 0x2}, 0x100, &(0x7f0000000180)={0x5, 0xf, 0x100, 0x1, [@generic={0xfb, 0x10, 0x2, "a3b46d2cb4606bf2696aea1bb63c3545c3041890a15ff8a1f96a413b0e5ca022457c911ec99245bde61968a71ed333b3f1c3ac0e609d1ea41ff2cd540d58ef8d3a644bc44a8efb2694334500206f2fd6b109fb567fce40231dc87b9ffe86a36749c37ca3f5c63df0e414dc1fcc18be41a1ee2169bbbd88619e3ee2c2041782bc948f5c9d059f23b44d33c7a71263c4f5465b45b2ff66472478c23eed813292a7ec39856b39783e52fd977b71fb9bbc226c72fbc85c6f12b513e2dbf962f3bee0a41bbe377b206050e08edbb0bca3f5e9a6c8e5389a5c04bc830e6d5d1f35349d00e6359eec6ac75ec0090817b755798a50e09d29d3106de0"}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) 1.174325241s ago: executing program 3 (id=2218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r10, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x3}}, 0xe, 0x4, 0x7, 0x4, 0x80, 0x4, 0x5}, 0x9c) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r3, &(0x7f0000000040)={0xc0002009}) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)) 64.302466ms ago: executing program 3 (id=2219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000000000000003000000000200000002000000120000000000000000000009", @ANYRES64], 0x0, 0x5a}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4830) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x134, 0x15, 0xa, 0x603, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xfe, 0x8, "bd7509d7cc7de269dcca497031f46398f0747364d09e2c4c550b2490f5839f30ee88ab4cf8fa05d5b7832563783ddcbd5f0b2c882ecfefbda020c12f91dd82d98ccd478649d34412b1571d6b460eba6b5b3c50c75920b673500adb87fcc3389535be0fc2f4f5816f88d7d2dd0a4f48f09e75d6936398b2e805f066928da5d1b642edf49c336e582ee635f73fd24823be18aa6f3379ba10a35c6d6d9c80a5dea88296882f29682982b4a1ada3d7388f938bbc4d44b68cb1db4f0bd3149457c7e5d676b9a2e1d9fdd792369f3133a807e4ac9ec3d26ce3def7e7d86c819c6b00a44a46c17f893db67166811635754c39854b5b4aca9c870b0359d2"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x200c8080}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101200, 0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r4 = timerfd_create(0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0x4, 0x8, 0x8, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x6, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) sendfile(r2, r1, 0x0, 0x40000f2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x40440d0) 0s ago: executing program 0 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000600)='4', 0x1}], 0x1, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0x6, 0x0, 0x2, 0x0, 0x4, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0x3, 0x401}, {0x4, 0x5, 0x40, 0x5, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0xf, 0x2c, 0xc}], 0x6}) write(r4, &(0x7f0000000340)="c402af548abe0d1584e669b9bb5bf1ae153bd207c9fc4359980816f8981b7b2b3a8dcb455c7788831e8a82d131970081095e2365a837cc946447e9a2f58ee80759d1acb2bacac5c699a9f50d4bfa4273319c59b65209678bc7ae717a9d6c3bbb07beca0f881cb70d40d993e106d12fb95fde4d73b60efdeac6417d2f63997d7c25f5180ec648675aa3f9656972d5501982fb10909a2387c1ee26b64f4950219b399e3128254c6c", 0xa7) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000400)={0x1, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x3ff, 0x3, 0x3, 0xfffffffffffffffc, 0x33, 0xf, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x109, 0x0, 0x2080, {0x26000, 0xd000, {}, 0x1, 0x20000009a2}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674aeda53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d80000517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c33430000fffff318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847c96740f54d8fe9838823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90fffff6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74b0400000000000000dc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9df6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a36882dd250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632523a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b030000007d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70c8a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000160000/0x400000)=nil) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e22"], 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): rking HSR network [ 647.047141][T12802] overlayfs: failed to resolve './file1/file0': -2 [ 647.095732][T12796] veth1_vlan: left promiscuous mode [ 647.124068][T12796] veth0_vlan: entered promiscuous mode [ 647.129268][T12809] FAULT_INJECTION: forcing a failure. [ 647.129268][T12809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.146736][T12796] veth1_vlan: entered promiscuous mode [ 647.147300][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.4.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.147325][T12809] Tainted: [L]=SOFTLOCKUP [ 647.147331][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 647.147341][T12809] Call Trace: [ 647.147347][T12809] [ 647.147353][T12809] dump_stack_lvl+0x100/0x190 [ 647.147379][T12809] should_fail_ex.cold+0x5/0xa [ 647.147399][T12809] _copy_from_user+0x2e/0xd0 [ 647.147421][T12809] dvb_usercopy+0x27e/0x340 [ 647.147444][T12809] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 647.147467][T12809] ? __pfx_dvb_usercopy+0x10/0x10 [ 647.147496][T12809] ? selinux_file_ioctl+0x13b/0x290 [ 647.147520][T12809] ? selinux_file_ioctl+0xb6/0x290 [ 647.147546][T12809] dvb_frontend_ioctl+0x50/0x80 [ 647.147565][T12809] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 647.147584][T12809] __x64_sys_ioctl+0x18e/0x210 [ 647.147609][T12809] do_syscall_64+0x115/0x870 [ 647.147627][T12809] ? clear_bhb_loop+0x40/0x90 [ 647.147647][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.147664][T12809] RIP: 0033:0x7fd4e799de99 [ 647.147680][T12809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.147696][T12809] RSP: 002b:00007fd4e87d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.147712][T12809] RAX: ffffffffffffffda RBX: 00007fd4e7c25fa0 RCX: 00007fd4e799de99 [ 647.147723][T12809] RDX: 0000200000000080 RSI: 0000000040246f4c RDI: 0000000000000003 [ 647.147733][T12809] RBP: 00007fd4e87d7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.147743][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.147752][T12809] R13: 00007fd4e7c26038 R14: 00007fd4e7c25fa0 R15: 00007fff57c3e568 [ 647.147773][T12809] [ 647.482720][T12796] veth1_macvtap: left promiscuous mode [ 647.490038][T12796] veth0_macvtap: left promiscuous mode [ 647.496823][T12796] veth0_macvtap: entered promiscuous mode [ 647.507749][T12796] veth1_macvtap: entered promiscuous mode [ 647.521830][T12796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.545230][ T30] audit: type=1326 audit(1785301614.126:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12811 comm="syz.4.1704" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4e799de99 code=0x0 [ 648.729138][T12796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.783513][T12796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.817446][T12796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.940346][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.959968][T12796] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 648.984570][T12637] team0: Port device team_slave_1 added [ 649.016332][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.023511][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.039026][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.046237][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.118570][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.157863][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.327911][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.374906][T12637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.396826][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.429472][T12637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.449912][T12838] gretap1: entered promiscuous mode [ 649.460571][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.471865][T12637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.480400][T12637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.507357][T12637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.545770][T12843] futex_wake_op: syz.0.1708 tries to shift op by -1; fix this program [ 649.708995][T12637] hsr_slave_0: entered promiscuous mode [ 649.734772][T12637] hsr_slave_1: entered promiscuous mode [ 649.779714][T12637] debugfs: 'hsr0' already exists in 'hsr' [ 649.815968][T12637] Cannot create hsr debugfs directory [ 650.781861][ T30] audit: type=1400 audit(1785301617.365:893): avc: denied { write } for pid=12839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.334986][ T30] audit: type=1400 audit(1785301617.915:894): avc: denied { write } for pid=12865 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.497142][T10709] wlan0: Trigger new scan to find an IBSS to join [ 651.624185][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 651.692516][ T30] audit: type=1400 audit(1785301618.275:895): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 651.956635][ T30] audit: type=1400 audit(1785301618.515:896): avc: denied { accept } for pid=12862 comm="syz.0.1713" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.775320][ T30] audit: type=1400 audit(1785301619.355:897): avc: denied { write } for pid=12885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.788321][ T5721] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 652.871747][ T30] audit: type=1400 audit(1785301619.425:898): avc: denied { write } for pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.179616][T12928] 9p: Bad value for 'rfdno' [ 653.197931][ T30] audit: type=1400 audit(1785301619.775:899): avc: denied { write } for pid=12915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.865225][ T30] audit: type=1400 audit(1785301620.445:900): avc: denied { write } for pid=12932 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.109932][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 654.129365][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 654.194313][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 654.235214][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 654.351468][T12938] netlink: 'syz.1.1725': attribute type 2 has an invalid length. [ 654.360937][T12938] netlink: 'syz.1.1725': attribute type 2 has an invalid length. [ 654.543797][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 654.565771][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 118, changing to 10 [ 654.587614][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.603459][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24940, setting to 1024 [ 654.616278][ T10] usb 1-1: Product: syz [ 654.620469][ T10] usb 1-1: Manufacturer: syz [ 654.625072][ T10] usb 1-1: SerialNumber: syz [ 654.631460][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.645017][T12637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 654.751054][ T9047] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 654.752662][T12637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.780560][T12637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 654.796748][T12637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.815347][T12637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 654.835986][T12637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.856643][T12637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.008640][ T5721] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 655.088328][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.176542][ T9047] usb 2-1: Using ep0 maxpacket: 16 [ 655.180021][T12637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.188475][ T5721] usb 5-1: Product: syz [ 655.301526][ T9047] usb 2-1: unable to get BOS descriptor or descriptor too short [ 655.310834][ T5721] usb 5-1: Manufacturer: syz [ 655.323908][ T5721] usb 5-1: SerialNumber: syz [ 655.331424][ T9047] usb 2-1: config 16 has an invalid interface number: 44 but max is 0 [ 655.355407][ T9047] usb 2-1: config 16 has no interface number 0 [ 655.374681][ T5721] usb 5-1: can't set config #1, error -71 [ 655.386598][ T9047] usb 2-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 655.414829][T12939] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 655.425925][ T5721] usb 5-1: USB disconnect, device number 50 [ 655.448542][ T9047] usb 2-1: config 16 interface 44 has no altsetting 0 [ 655.650242][ T9047] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 655.696246][ T991] usb 1-1: USB disconnect, device number 46 [ 655.709327][ T30] audit: type=1400 audit(1785301622.285:901): avc: denied { write } for pid=12937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.722444][T12637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.734904][ T9047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.803552][ T9047] usb 2-1: Product: syz [ 655.821963][ T9047] usb 2-1: Manufacturer: syz [ 655.846049][ T9047] usb 2-1: SerialNumber: syz [ 655.896957][T12938] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 655.912683][ T30] audit: type=1400 audit(1785301622.495:902): avc: denied { write } for pid=12965 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.937479][T12912] netlink: 'syz.0.1722': attribute type 18 has an invalid length. [ 655.968798][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 656.065469][T12637] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.106418][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 656.138525][T12912] netlink: 'syz.0.1722': attribute type 18 has an invalid length. [ 656.184180][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 656.253983][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.264248][T10702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.450317][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.458132][T10702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.501934][ T48] wlan0: Trigger new scan to find an IBSS to join [ 656.739101][T12939] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 656.757036][T12939] ath9k_htc: Failed to initialize the device [ 656.823707][ T991] usb 1-1: ath9k_htc: USB layer deinitialized [ 657.301871][ T991] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 657.318257][ T30] audit: type=1400 audit(1785301623.895:903): avc: denied { write } for pid=12974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.419791][ T30] audit: type=1400 audit(1785301624.005:904): avc: denied { read write } for pid=12999 comm="syz.1.1732" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 657.420656][ T9047] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now attached [ 657.456808][T13000] binder: 12999:13000 ioctl aece 0 returned -22 [ 657.491918][ T30] audit: type=1400 audit(1785301624.035:905): avc: denied { open } for pid=12999 comm="syz.1.1732" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 657.553489][ T9047] usb 2-1: USB disconnect, device number 48 [ 657.607580][ T9047] cypress_cy7c63 2-1:16.44: Cypress CY7C63xxx device now disconnected [ 657.633702][ T30] audit: type=1400 audit(1785301624.185:906): avc: denied { write } for pid=13002 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.765107][ T12] wlan0: Creating new IBSS network, BSSID 36:f9:86:f1:85:4c [ 657.787527][ T30] audit: type=1400 audit(1785301624.265:907): avc: denied { map } for pid=12993 comm="syz.0.1730" path="/dev/usbmon8" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 658.165765][T12637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.769760][T12637] veth0_vlan: entered promiscuous mode [ 658.844914][T12637] veth1_vlan: entered promiscuous mode [ 659.004303][T12637] veth0_macvtap: entered promiscuous mode [ 659.644584][ T30] audit: type=1400 audit(1785301626.215:908): avc: denied { write } for pid=13011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.026693][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 660.377943][T12637] veth1_macvtap: entered promiscuous mode [ 661.558050][ T30] audit: type=1400 audit(1785301628.135:909): avc: denied { write } for pid=13042 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.625519][T12637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.703893][T13050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1740'. [ 661.736300][T12637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.805582][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.855483][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.273324][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.331102][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.398138][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 663.445810][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.499668][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.741079][T13073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1744'. [ 663.778037][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.808595][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.469310][ T30] audit: type=1400 audit(1785301630.644:910): avc: denied { read } for pid=13075 comm="syz.0.1745" lport=40254 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 664.942335][ T30] audit: type=1400 audit(1785301631.434:911): avc: denied { mounton } for pid=12637 comm="syz-executor" path="/root/syzkaller.q9Qy8u/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 664.973599][T13085] xt_hashlimit: size too large, truncated to 1048576 [ 665.052612][ T30] audit: type=1400 audit(1785301631.434:912): avc: denied { mounton } for pid=12637 comm="syz-executor" path="/root/syzkaller.q9Qy8u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 665.152277][ T30] audit: type=1400 audit(1785301631.434:913): avc: denied { mounton } for pid=12637 comm="syz-executor" path="/root/syzkaller.q9Qy8u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 665.305957][ T30] audit: type=1400 audit(1785301631.724:914): avc: denied { mounton } for pid=12637 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 666.605343][T13097] overlayfs: failed to resolve './file1/file0': -2 [ 667.070995][T12939] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 667.363575][T12939] usb 1-1: Using ep0 maxpacket: 8 [ 667.565312][ T9047] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 667.586473][T12939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 667.647168][T12939] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 667.695829][T12939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 118, changing to 10 [ 667.724152][T12939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24940, setting to 1024 [ 667.759653][T12939] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.035767][ T9047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.050782][T12939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 668.070570][T12939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.080368][ T9047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.113589][T12939] usb 1-1: Product: syz [ 668.118383][ T9047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.147025][T12939] usb 1-1: Manufacturer: syz [ 668.157569][T12939] usb 1-1: SerialNumber: syz [ 668.185437][ T9047] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.211271][T13104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.224460][T12939] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 668.234740][ T9047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.251057][T12939] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 668.271854][ T9047] usb 2-1: config 0 descriptor?? [ 668.288070][T12939] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 668.702432][ T5722] usb 1-1: USB disconnect, device number 48 [ 668.744530][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.784998][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.824587][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.854223][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.884065][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.917652][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.950502][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 668.995618][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 669.018234][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 669.042354][ T9047] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 669.123231][ T9047] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 669.205453][ T9047] usb 2-1: USB disconnect, device number 49 [ 669.325453][T13137] fido_id[13137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 670.882995][ T30] audit: type=1400 audit(1785301637.454:915): avc: denied { create } for pid=13147 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 670.956398][ T30] audit: type=1326 audit(1785301637.494:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.1.1759" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42879de99 code=0x0 [ 670.964968][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 671.085079][T13153] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 671.153914][T13155] 9p: Bad value for 'rfdno' [ 671.926176][ T30] audit: type=1400 audit(1785301638.514:917): avc: denied { connect } for pid=13147 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 673.270028][ T5722] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 673.500031][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 673.593737][ T5722] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 673.793010][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 673.825477][ T5722] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 673.859385][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.895529][ T5722] usb 2-1: Product: syz [ 673.916941][ T5722] usb 2-1: Manufacturer: syz [ 673.936298][ T5722] usb 2-1: SerialNumber: syz [ 673.967676][ T5722] usb 2-1: config 0 descriptor?? [ 673.998867][ T5722] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 674.031038][ T5722] usb 2-1: setting power ON [ 674.044152][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 674.067867][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.092723][ T5722] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 674.119121][ T5722] usb 2-1: media controller created [ 674.186775][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.210186][T13163] dvb-usb: bulk message failed: -22 (3/0) [ 674.275096][ T5722] usb 2-1: selecting invalid altsetting 6 [ 674.301372][ T5722] usb 2-1: digital interface selection failed (-22) [ 674.323998][ T5722] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 674.376122][ T5722] usb 2-1: setting power OFF [ 674.405752][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 674.433815][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 674.600133][ T5722] (NULL device *): no alternate interface [ 674.727862][ T30] audit: type=1400 audit(1785301641.314:918): avc: denied { write } for pid=13162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.778901][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 674.812855][ T5722] usb 2-1: USB disconnect, device number 50 [ 675.078006][T13198] netlink: 'syz.4.1768': attribute type 28 has an invalid length. [ 675.178933][ T30] audit: type=1400 audit(1785301641.764:919): avc: denied { write } for pid=13199 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.502151][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 675.663317][T13210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 675.860136][T13218] pim6reg: entered allmulticast mode [ 675.905149][T13218] pim6reg: left allmulticast mode [ 676.827147][T13223] overlayfs: failed to resolve './file1/file0': -2 [ 676.917603][T13218] ./file0: Can't open blockdev [ 677.488965][T13241] blkio.reset_stats is deprecated [ 677.799894][T13250] FAULT_INJECTION: forcing a failure. [ 677.799894][T13250] name failslab, interval 1, probability 0, space 0, times 0 [ 677.815805][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.0.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.815836][T13250] Tainted: [L]=SOFTLOCKUP [ 677.815843][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 677.815854][T13250] Call Trace: [ 677.815862][T13250] [ 677.815871][T13250] dump_stack_lvl+0x100/0x190 [ 677.815900][T13250] should_fail_ex.cold+0x5/0xa [ 677.815924][T13250] should_failslab+0xc2/0x120 [ 677.815949][T13250] __kmalloc_noprof+0xfc/0x820 [ 677.815970][T13250] ? __list_lru_init+0xd9/0x4b0 [ 677.816003][T13250] __list_lru_init+0xd9/0x4b0 [ 677.816033][T13250] sget_fc+0xa6f/0x1d80 [ 677.816065][T13250] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 677.816095][T13250] ? __pfx_set_anon_super_fc+0x10/0x10 [ 677.816121][T13250] ? __pfx_sget_fc+0x10/0x10 [ 677.816149][T13250] ? vfs_parse_monolithic_sep+0x1a0/0x210 [ 677.816178][T13250] ? rcu_is_watching+0x12/0xc0 [ 677.816205][T13250] ? cap_capable+0x107/0x430 [ 677.816231][T13250] ? __pfx_shmem_fill_super+0x10/0x10 [ 677.816255][T13250] get_tree_nodev+0x28/0x190 [ 677.816283][T13250] vfs_get_tree+0x92/0x320 [ 677.816308][T13250] path_mount+0x7d0/0x23d0 [ 677.816335][T13250] ? __pfx_path_mount+0x10/0x10 [ 677.816356][T13250] ? lockdep_hardirqs_on+0x78/0x100 [ 677.816380][T13250] ? putname+0xb1/0x110 [ 677.816398][T13250] ? kmem_cache_free+0x127/0x6b0 [ 677.816424][T13250] ? __x64_sys_mount+0x293/0x310 [ 677.816446][T13250] __x64_sys_mount+0x293/0x310 [ 677.816469][T13250] ? __pfx___x64_sys_mount+0x10/0x10 [ 677.816505][T13250] do_syscall_64+0x115/0x870 [ 677.816524][T13250] ? clear_bhb_loop+0x40/0x90 [ 677.816546][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.816565][T13250] RIP: 0033:0x7fd33bd9de99 [ 677.816591][T13250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.816607][T13250] RSP: 002b:00007fd33cbc1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.816624][T13250] RAX: ffffffffffffffda RBX: 00007fd33c026180 RCX: 00007fd33bd9de99 [ 677.816636][T13250] RDX: 0000200000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 677.816647][T13250] RBP: 00007fd33cbc1090 R08: 0000200000000300 R09: 0000000000000000 [ 677.816659][T13250] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 677.816669][T13250] R13: 00007fd33c026218 R14: 00007fd33c026180 R15: 00007ffc40d8a028 [ 677.816701][T13250] [ 679.554335][ T30] audit: type=1400 audit(1785301646.144:920): avc: denied { ioctl } for pid=13253 comm="syz.1.1780" path="socket:[37998]" dev="sockfs" ino=37998 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 679.606269][ T30] audit: type=1400 audit(1785301646.194:921): avc: denied { getopt } for pid=13256 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 679.770162][ T5722] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 679.779076][T13266] FAT-fs (nbd3): unable to read boot sector [ 679.990789][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 681.247304][T13274] /dev/nullb0: Can't open blockdev [ 681.270273][T13272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 681.407451][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.416648][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.869490][ T5722] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 681.878732][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.887073][ T5722] usb 1-1: Product: syz [ 681.891449][ T5722] usb 1-1: Manufacturer: syz [ 681.896165][ T5722] usb 1-1: SerialNumber: syz [ 681.903328][ T5722] usb 1-1: config 0 descriptor?? [ 682.116549][T13257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.156476][T13257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.244913][T13285] FAULT_INJECTION: forcing a failure. [ 682.244913][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 682.251535][ T5722] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 682.260560][T13285] CPU: 0 UID: 0 PID: 13285 Comm: syz.3.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.260586][T13285] Tainted: [L]=SOFTLOCKUP [ 682.260592][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 682.260601][T13285] Call Trace: [ 682.260607][T13285] [ 682.260613][T13285] dump_stack_lvl+0x100/0x190 [ 682.260638][T13285] should_fail_ex.cold+0x5/0xa [ 682.260658][T13285] should_failslab+0xc2/0x120 [ 682.260679][T13285] kmem_cache_alloc_noprof+0x91/0x6a0 [ 682.260699][T13285] ? dst_alloc+0x99/0x1a0 [ 682.260720][T13285] dst_alloc+0x99/0x1a0 [ 682.260739][T13285] rt_dst_alloc+0x35/0x3a0 [ 682.260757][T13285] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 682.260787][T13285] ip_route_output_key_hash+0x118/0x2b0 [ 682.260809][T13285] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 682.260837][T13285] ? find_held_lock+0x2b/0x80 [ 682.260870][T13285] ip_route_output_flow+0x27/0x150 [ 682.260893][T13285] udp_sendmsg+0x198a/0x2720 [ 682.260916][T13285] ? __pfx_udp_sendmsg+0x10/0x10 [ 682.260943][T13285] ? reacquire_held_locks+0xce/0x1e0 [ 682.260962][T13285] ? release_sock+0x21/0x280 [ 682.260985][T13285] ? inet_autobind+0x145/0x1a0 [ 682.261001][T13285] ? find_held_lock+0x2b/0x80 [ 682.261028][T13285] ? lockdep_hardirqs_on+0x78/0x100 [ 682.261046][T13285] ? inet_autobind+0x145/0x1a0 [ 682.261061][T13285] ? __local_bh_enable_ip+0x9e/0x120 [ 682.261082][T13285] ? inet_autobind+0x14a/0x1a0 [ 682.261098][T13285] ? __pfx_udp_sendmsg+0x10/0x10 [ 682.261115][T13285] inet_sendmsg+0x105/0x140 [ 682.261135][T13285] __sys_sendto+0x453/0x4e0 [ 682.261152][T13285] ? __pfx_inet_sendmsg+0x10/0x10 [ 682.261172][T13285] ? __pfx___sys_sendto+0x10/0x10 [ 682.261212][T13285] __x64_sys_sendto+0xe0/0x1c0 [ 682.261228][T13285] ? do_syscall_64+0x90/0x870 [ 682.261245][T13285] ? lockdep_hardirqs_on+0x78/0x100 [ 682.261262][T13285] do_syscall_64+0x115/0x870 [ 682.261278][T13285] ? clear_bhb_loop+0x40/0x90 [ 682.261298][T13285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.261315][T13285] RIP: 0033:0x7fe79919de99 [ 682.261329][T13285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.261344][T13285] RSP: 002b:00007fe7973f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 682.261360][T13285] RAX: ffffffffffffffda RBX: 00007fe799425fa0 RCX: 00007fe79919de99 [ 682.261370][T13285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 682.261379][T13285] RBP: 00007fe7973f6090 R08: 0000200000000700 R09: 0000000000000010 [ 682.261389][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.261398][T13285] R13: 00007fe799426038 R14: 00007fe799425fa0 R15: 00007ffc05f1da18 [ 682.261419][T13285] [ 682.490896][ T9047] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 682.982753][ T9047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.618800][ T5722] usb 1-1: USB disconnect, device number 49 [ 683.627105][ T9047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 683.638278][ T9047] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 683.649833][ T9047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.710323][T12681] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 683.772784][ T9047] usb 2-1: config 0 descriptor?? [ 683.787202][ T9047] gspca_main: spca561-2.14.0 probing abcd:cdee [ 683.883374][T12681] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 683.892791][T12681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.031365][ T9047] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 684.055908][ T9047] usb 2-1: USB disconnect, device number 51 [ 684.065690][T12681] usb 4-1: Product: syz [ 684.074601][T12681] usb 4-1: Manufacturer: syz [ 684.106849][T12681] usb 4-1: SerialNumber: syz [ 684.128659][T12681] usb 4-1: config 0 descriptor?? [ 684.220722][T13309] use of bytesused == 0 is deprecated and will be removed in the future, [ 684.229604][T13309] use the actual size instead. [ 684.257049][T13309] netlink: 15678 bytes leftover after parsing attributes in process `syz.0.1793'. [ 684.415855][T12681] usb 4-1: Firmware version (0.0) predates our first public release. [ 684.427039][T12681] usb 4-1: Please update to version 0.2 or newer [ 685.417857][T12681] usb 4-1: USB disconnect, device number 49 [ 686.683347][ T30] audit: type=1400 audit(1785301653.243:922): avc: denied { ioctl } for pid=13322 comm="syz.3.1797" path="/383/file0" dev="tmpfs" ino=2085 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 686.792250][T13331] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd3": -EINTR [ 687.139514][T13345] siw: device registration error -23 [ 687.176704][T13319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.244833][T13319] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 688.660541][ T991] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 688.842388][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 688.899639][ T991] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.946185][ T991] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.979615][ T991] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 689.090101][ T991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.153285][ T991] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 689.261984][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.632771][ T991] usb 2-1: config 0 descriptor?? [ 690.969456][ T991] hid (null): nested delimiters [ 691.287190][T13385] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 691.418558][T13362] netlink: 'syz.1.1807': attribute type 11 has an invalid length. [ 691.723853][ T991] hid (null): nested delimiters [ 691.855883][ T991] hid (null): nested delimiters [ 691.861210][ T991] hid (null): report_id 24797 is invalid [ 691.867059][ T991] hid (null): bogus close delimiter [ 691.872350][ T991] hid (null): invalid report_size 1536 [ 691.934831][ T991] usb 2-1: USB disconnect, device number 52 [ 692.185370][T13388] siw: device registration error -23 [ 692.739135][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 693.825429][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 694.063204][T13413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.368629][T13404] netlink: 'syz.4.1817': attribute type 2 has an invalid length. [ 695.524076][T13400] atomic_op ffff8880544af998 conn xmit_atomic 0000000000000000 [ 695.536729][T12939] Process accounting resumed [ 695.606763][T13423] netlink: 'syz.1.1819': attribute type 2 has an invalid length. [ 695.616200][T13423] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 695.895682][T13427] FAULT_INJECTION: forcing a failure. [ 695.895682][T13427] name failslab, interval 1, probability 0, space 0, times 0 [ 695.908288][T13427] CPU: 0 UID: 0 PID: 13427 Comm: syz.3.1821 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.908306][T13427] Tainted: [L]=SOFTLOCKUP [ 695.908310][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 695.908318][T13427] Call Trace: [ 695.908322][T13427] [ 695.908327][T13427] dump_stack_lvl+0x100/0x190 [ 695.908346][T13427] should_fail_ex.cold+0x5/0xa [ 695.908362][T13427] should_failslab+0xc2/0x120 [ 695.908377][T13427] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 695.908392][T13427] ? __alloc_skb+0x5b7/0x710 [ 695.908406][T13427] ? __alloc_skb+0x140/0x710 [ 695.908421][T13427] __alloc_skb+0x140/0x710 [ 695.908433][T13427] ? __alloc_skb+0x5b7/0x710 [ 695.908445][T13427] ? __pfx___alloc_skb+0x10/0x10 [ 695.908458][T13427] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 695.908476][T13427] ? sock_has_perm+0x25a/0x2f0 [ 695.908491][T13427] ? __pfx_sock_has_perm+0x10/0x10 [ 695.908508][T13427] netlink_alloc_large_skb+0x69/0x150 [ 695.908521][T13427] netlink_sendmsg+0x680/0xda0 [ 695.908535][T13427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.908548][T13427] ? selinux_socket_sendmsg+0x198/0x2f0 [ 695.908567][T13427] ____sys_sendmsg+0xa4d/0xbe0 [ 695.908584][T13427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.908597][T13427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.908620][T13427] ___sys_sendmsg+0x190/0x1e0 [ 695.908639][T13427] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.908657][T13427] ? __lock_acquire+0x49f/0x1a40 [ 695.908671][T13427] ? get_pid_task+0x106/0x250 [ 695.908703][T13427] __sys_sendmsg+0x160/0x210 [ 695.908719][T13427] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.908740][T13427] do_syscall_64+0x115/0x870 [ 695.908753][T13427] ? clear_bhb_loop+0x40/0x90 [ 695.908767][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.908779][T13427] RIP: 0033:0x7fe79919de99 [ 695.908789][T13427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.908800][T13427] RSP: 002b:00007fe7973f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.908811][T13427] RAX: ffffffffffffffda RBX: 00007fe799425fa0 RCX: 00007fe79919de99 [ 695.908818][T13427] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 695.908825][T13427] RBP: 00007fe7973f6090 R08: 0000000000000000 R09: 0000000000000000 [ 695.908835][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.908842][T13427] R13: 00007fe799426038 R14: 00007fe799425fa0 R15: 00007ffc05f1da18 [ 695.908856][T13427] [ 696.543521][T13434] fuse: Bad value for 'fd' [ 697.507827][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 697.687572][ T30] audit: type=1400 audit(1785301664.263:923): avc: denied { write } for pid=13447 comm="syz.3.1828" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 697.854162][ T30] audit: type=1400 audit(1785301664.263:924): avc: denied { open } for pid=13447 comm="syz.3.1828" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 698.060263][ T30] audit: type=1400 audit(1785301664.623:925): avc: denied { bpf } for pid=13447 comm="syz.3.1828" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.184467][ T30] audit: type=1400 audit(1785301664.623:926): avc: denied { perfmon } for pid=13447 comm="syz.3.1828" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.227680][T13436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.282217][ T5721] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 698.339564][T13436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.632732][T13436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.632752][T13436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.641854][T13436] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 698.731592][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 698.746046][ T5721] usb 4-1: config 161 has an invalid interface number: 186 but max is 0 [ 698.746102][ T5721] usb 4-1: config 161 has no interface number 0 [ 698.746143][ T5721] usb 4-1: config 161 interface 186 has no altsetting 0 [ 698.748857][ T5721] usb 4-1: New USB device found, idVendor=045e, idProduct=0467, bcdDevice=4a.eb [ 698.748898][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.748934][ T5721] usb 4-1: Product: syz [ 698.748961][ T5721] usb 4-1: Manufacturer: syz [ 698.748991][ T5721] usb 4-1: SerialNumber: syz [ 700.637463][T13473] xt_hashlimit: size too large, truncated to 1048576 [ 700.875953][T13469] atomic_op ffff88807b022998 conn xmit_atomic 0000000000000000 [ 701.878881][ T30] audit: type=1400 audit(1785301668.463:927): avc: denied { setopt } for pid=13477 comm="syz.2.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 701.885383][ T30] audit: type=1400 audit(1785301668.463:928): avc: denied { connect } for pid=13477 comm="syz.2.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 702.995831][ T5721] usb 4-1: USB disconnect, device number 50 [ 704.374893][ T30] audit: type=1400 audit(1785301670.963:929): avc: denied { getopt } for pid=13483 comm="syz.1.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 704.634519][T13487] Invalid source name [ 704.691254][T13488] syz.0.1838 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 704.706796][T13487] UBIFS error (pid: 13487): cannot open "ubifs", error -22 [ 704.707826][T13484] /dev/nullb0: Can't open blockdev [ 706.630553][T13499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 708.939373][T13501] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 709.209811][T13510] syz_tun: entered allmulticast mode [ 709.219460][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 709.236651][ T30] audit: type=1400 audit(1785301675.822:930): avc: denied { create } for pid=13507 comm="syz.1.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 709.262638][T13507] syz_tun: left allmulticast mode [ 709.320224][ T30] audit: type=1400 audit(1785301675.822:931): avc: denied { write } for pid=13507 comm="syz.1.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 709.339504][T13513] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.1845'. [ 709.381327][ T30] audit: type=1400 audit(1785301675.892:932): avc: denied { read } for pid=13509 comm="syz.0.1843" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 709.448000][ T30] audit: type=1400 audit(1785301675.892:933): avc: denied { open } for pid=13509 comm="syz.0.1843" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 709.474138][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 709.973615][T13523] syz_tun: entered allmulticast mode [ 709.982273][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 710.009476][T13519] syz_tun: left allmulticast mode [ 712.112610][T13548] FAULT_INJECTION: forcing a failure. [ 712.112610][T13548] name failslab, interval 1, probability 0, space 0, times 0 [ 712.112637][T13548] CPU: 1 UID: 0 PID: 13548 Comm: syz.2.1853 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.112653][T13548] Tainted: [L]=SOFTLOCKUP [ 712.112657][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 712.112665][T13548] Call Trace: [ 712.112669][T13548] [ 712.112674][T13548] dump_stack_lvl+0x100/0x190 [ 712.112693][T13548] should_fail_ex.cold+0x5/0xa [ 712.112708][T13548] should_failslab+0xc2/0x120 [ 712.112729][T13548] __kmalloc_noprof+0xfc/0x820 [ 712.112744][T13548] ? io_cache_alloc_new+0x45/0xe0 [ 712.112760][T13548] io_cache_alloc_new+0x45/0xe0 [ 712.112774][T13548] io_arm_apoll+0x8a2/0xa60 [ 712.112792][T13548] ? __pfx_io_arm_apoll+0x10/0x10 [ 712.112813][T13548] ? __io_issue_sqe+0x14a/0x7a0 [ 712.112829][T13548] io_arm_poll_handler+0x21f/0x2b0 [ 712.112848][T13548] io_queue_async+0x159/0x290 [ 712.112865][T13548] io_submit_sqes+0x1808/0x2480 [ 712.112889][T13548] __do_sys_io_uring_enter+0xa88/0x1b10 [ 712.112909][T13548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.112924][T13548] ? __fget_files+0x21f/0x3d0 [ 712.112936][T13548] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 712.112956][T13548] ? fput+0x79/0x100 [ 712.112970][T13548] ? ksys_write+0x1ac/0x250 [ 712.112987][T13548] ? __pfx_ksys_write+0x10/0x10 [ 712.113009][T13548] do_syscall_64+0x115/0x870 [ 712.113023][T13548] ? clear_bhb_loop+0x40/0x90 [ 712.113037][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.113049][T13548] RIP: 0033:0x7f5167d9de99 [ 712.113060][T13548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.113071][T13548] RSP: 002b:00007f5168c16028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 712.113082][T13548] RAX: ffffffffffffffda RBX: 00007f5168026090 RCX: 00007f5167d9de99 [ 712.113090][T13548] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000009 [ 712.113096][T13548] RBP: 00007f5168c16090 R08: 0000000000000000 R09: 0000000000000000 [ 712.113103][T13548] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 712.113109][T13548] R13: 00007f5168026128 R14: 00007f5168026090 R15: 00007ffe891aa358 [ 712.113124][T13548] [ 713.536155][T13556] pim6reg: entered allmulticast mode [ 713.926456][T13559] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 713.958735][T13556] pim6reg: left allmulticast mode [ 714.435253][T13561] fuse: Bad value for 'fd' [ 715.253005][ T30] audit: type=1400 audit(1785301681.842:934): avc: denied { write } for pid=13539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.325056][T13572] siw: device registration error -23 [ 716.090709][T12681] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 716.234300][T13575] pim6reg: entered allmulticast mode [ 716.254862][T12681] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.254909][T12681] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 716.254930][T12681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.256985][T12681] usb 5-1: config 0 descriptor?? [ 716.280502][T13575] pim6reg: left allmulticast mode [ 716.581045][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 716.601134][ T30] audit: type=1400 audit(1785301683.182:935): avc: denied { create } for pid=13590 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 716.605831][ T30] audit: type=1400 audit(1785301683.192:936): avc: denied { write } for pid=13578 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.723282][T13580] ./file0: Can't open blockdev [ 718.638408][ T30] audit: type=1400 audit(1785301685.212:937): avc: denied { getopt } for pid=13576 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 718.638457][ T30] audit: type=1400 audit(1785301685.212:938): avc: denied { setopt } for pid=13576 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 718.650426][ T30] audit: type=1400 audit(1785301685.232:939): avc: denied { create } for pid=13576 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 719.025744][T12681] usb 5-1: string descriptor 0 read error: -71 [ 719.098913][T12681] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 719.137798][T12681] earthmate ttyUSB0: required endpoint is missing [ 719.171685][T12681] usb 5-1: USB disconnect, device number 51 [ 719.202310][T12681] cypress_m8 5-1:0.0: device disconnected [ 719.209711][T13608] syzkaller0: entered promiscuous mode [ 719.296755][T13608] syzkaller0: entered allmulticast mode [ 720.513843][T13622] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 721.011356][T13630] pim6reg: entered allmulticast mode [ 721.028629][T13630] pim6reg: left allmulticast mode [ 721.240423][T13634] siw: device registration error -23 [ 722.254411][ T30] audit: type=1400 audit(1785301688.822:940): avc: denied { read append } for pid=13642 comm="syz.4.1873" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 722.405911][ T30] audit: type=1400 audit(1785301688.992:941): avc: denied { ioctl open } for pid=13642 comm="syz.4.1873" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 722.439959][T13633] ./file0: Can't open blockdev [ 723.787701][T13663] /dev/nullb0: Can't open blockdev [ 723.804003][T13663] /dev/nullb0: Can't open blockdev [ 723.827282][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 724.471446][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 726.536521][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 726.796864][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 726.870492][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 726.922676][T13686] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 726.938751][ T10] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 726.950572][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.981243][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 726.994582][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.004912][ T10] usb 2-1: Product: syz [ 727.010355][ T10] usb 2-1: Manufacturer: syz [ 727.016839][ T10] usb 2-1: SerialNumber: syz [ 727.175565][ T30] audit: type=1400 audit(1785301693.742:942): avc: denied { module_load } for pid=13699 comm="syz.4.1889" path="/sys/kernel/address_bits" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 727.360067][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 727.677112][ T10] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 727.699006][ T10] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 727.716002][ T30] audit: type=1400 audit(1785301694.302:943): avc: denied { block_suspend } for pid=13706 comm="syz.3.1891" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 727.799533][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 727.835158][ T10] usb 2-1: USB disconnect, device number 53 [ 727.837016][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.910419][T13712] pim6reg: entered allmulticast mode [ 727.925562][T13712] pim6reg: left allmulticast mode [ 728.233887][T13715] ./file0: Can't open blockdev [ 729.232317][T13724] /dev/nullb0: Can't open blockdev [ 729.242390][T13724] netlink: 'syz.4.1894': attribute type 4 has an invalid length. [ 729.649556][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 730.466617][T13745] macvtap0: Device is already in use. [ 730.708008][T13751] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 731.062028][ T30] audit: type=1400 audit(1785301697.642:944): avc: denied { lock } for pid=13752 comm="syz.3.1902" path="socket:[40188]" dev="sockfs" ino=40188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 731.211911][T13759] macvtap0: Device is already in use. [ 731.664693][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 731.822249][ T30] audit: type=1326 audit(1785301698.412:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13768 comm="syz.0.1907" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd33bd9de99 code=0x0 [ 731.911008][T13771] siw: device registration error -23 [ 733.346280][ T30] audit: type=1400 audit(1785301699.922:946): avc: denied { ioctl } for pid=13775 comm="syz.2.1909" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 733.515027][T13779] overlayfs: failed to resolve './file1/file0': -2 [ 733.779027][T13785] overlayfs: failed to resolve './file1/file0': -2 [ 734.077098][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 734.086028][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 734.094955][T13783] netlink: 'syz.3.1912': attribute type 13 has an invalid length. [ 734.103150][T13783] netlink: 'syz.3.1912': attribute type 12 has an invalid length. [ 734.431713][T13793] 9p: Bad value for 'rfdno' [ 734.502424][ T991] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 735.728825][T13800] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 735.870027][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 736.453858][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.466008][ T991] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 736.475642][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.483933][ T991] usb 5-1: Product: syz [ 736.785975][ T991] usb 5-1: Manufacturer: syz [ 736.790653][ T991] usb 5-1: SerialNumber: syz [ 736.797530][ T991] usb 5-1: config 0 descriptor?? [ 736.804530][ T991] usb 5-1: expecting 3 got 0 endpoints! Bailing out. [ 737.009367][ T5722] usb 5-1: USB disconnect, device number 52 [ 737.212270][ T991] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 737.403849][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 737.423774][ T991] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 737.446418][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.461826][ T991] usb 2-1: Product: syz [ 737.466120][ T991] usb 2-1: Manufacturer: syz [ 737.476250][ T991] usb 2-1: SerialNumber: syz [ 737.868402][ T991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.223626][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 738.287770][T13825] overlayfs: failed to resolve './file1/file0': -2 [ 738.367610][ T991] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 738.421649][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.425586][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 738.445757][ T991] usb 2-1: USB disconnect, device number 54 [ 738.484788][T13830] pim6reg: entered allmulticast mode [ 738.548014][T13830] pim6reg: left allmulticast mode [ 738.654786][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.692598][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.717729][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.809056][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 738.834947][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.846418][ T10] usb 5-1: config 0 descriptor?? [ 739.361837][T13830] ./file0: Can't open blockdev [ 739.499649][ T10] hid_parser_main: 5 callbacks suppressed [ 739.499674][ T10] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 739.534929][ T10] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 739.648412][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input26 [ 739.849372][ T10] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 739.961673][ T10] usb 5-1: USB disconnect, device number 53 [ 740.619005][T13856] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 740.700193][T13857] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 740.967813][T13860] netlink: 'syz.1.1932': attribute type 4 has an invalid length. [ 741.345335][T13849] fido_id[13849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 741.425976][T13857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.607984][T13863] openvswitch: netlink: IPv4 tunnel dst address is zero [ 741.884991][ T30] audit: type=1400 audit(1785301708.312:947): avc: denied { bind } for pid=13862 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 742.044761][T13859] netlink: 'syz.1.1932': attribute type 4 has an invalid length. [ 742.573012][T13872] FAULT_INJECTION: forcing a failure. [ 742.573012][T13872] name failslab, interval 1, probability 0, space 0, times 0 [ 742.585643][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.0.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.585663][T13872] Tainted: [L]=SOFTLOCKUP [ 742.585667][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 742.585674][T13872] Call Trace: [ 742.585679][T13872] [ 742.585684][T13872] dump_stack_lvl+0x100/0x190 [ 742.585703][T13872] should_fail_ex.cold+0x5/0xa [ 742.585718][T13872] should_failslab+0xc2/0x120 [ 742.585734][T13872] __kmalloc_noprof+0xfc/0x820 [ 742.585748][T13872] ? tomoyo_encode2+0xfb/0x3c0 [ 742.585762][T13872] tomoyo_encode2+0xfb/0x3c0 [ 742.585775][T13872] tomoyo_encode+0x29/0x50 [ 742.585785][T13872] tomoyo_realpath_from_path+0x18c/0x690 [ 742.585800][T13872] tomoyo_path_number_perm+0x23c/0x580 [ 742.585816][T13872] ? tomoyo_path_number_perm+0x22e/0x580 [ 742.585834][T13872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 742.585864][T13872] ? find_held_lock+0x2b/0x80 [ 742.585883][T13872] ? __fget_files+0x215/0x3d0 [ 742.585894][T13872] ? hook_file_ioctl_common+0x140/0x440 [ 742.585907][T13872] ? __fget_files+0x215/0x3d0 [ 742.585921][T13872] ? __fget_files+0x21f/0x3d0 [ 742.585935][T13872] security_file_ioctl+0xd3/0x230 [ 742.585954][T13872] __x64_sys_ioctl+0xb7/0x210 [ 742.585972][T13872] do_syscall_64+0x115/0x870 [ 742.585986][T13872] ? clear_bhb_loop+0x40/0x90 [ 742.586000][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.586012][T13872] RIP: 0033:0x7fd33bd9de99 [ 742.586023][T13872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.586034][T13872] RSP: 002b:00007fd33cc03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.586046][T13872] RAX: ffffffffffffffda RBX: 00007fd33c025fa0 RCX: 00007fd33bd9de99 [ 742.586054][T13872] RDX: 0000200000000080 RSI: 0000000080089203 RDI: 0000000000000004 [ 742.586061][T13872] RBP: 00007fd33cc03090 R08: 0000000000000000 R09: 0000000000000000 [ 742.586067][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.586074][T13872] R13: 00007fd33c026038 R14: 00007fd33c025fa0 R15: 00007ffc40d8a028 [ 742.586088][T13872] [ 742.586100][T13872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 743.293084][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.299468][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.309621][T13887] pim6reg: entered allmulticast mode [ 744.351519][T13890] pim6reg: left allmulticast mode [ 745.317267][ T30] audit: type=1400 audit(1785301711.882:948): avc: denied { setopt } for pid=13896 comm="syz.2.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 745.367340][T13887] ./file0: Can't open blockdev [ 747.826253][T13924] atomic_op ffff88807e609998 conn xmit_atomic 0000000000000000 [ 748.466360][T13936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'. [ 748.485072][T13921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'. [ 748.514029][T13921] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1949'. [ 748.567054][T13921] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1949'. [ 748.612245][T13921] syzkaller0: entered promiscuous mode [ 748.631903][T13921] syzkaller0: entered allmulticast mode [ 748.642942][T13938] overlayfs: failed to resolve './file1/file0': -2 [ 748.686958][T13921] batadv_slave_1: entered promiscuous mode [ 748.693353][T12682] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 748.803922][T13920] batadv_slave_1: left promiscuous mode [ 748.856364][T12682] usb 3-1: Using ep0 maxpacket: 8 [ 748.870044][T12682] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 748.878471][T12682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.889115][T12682] usb 3-1: config 0 has no interfaces? [ 748.897156][T12682] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 748.908419][T12682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.916559][T12682] usb 3-1: Product: syz [ 748.920964][T12682] usb 3-1: Manufacturer: syz [ 748.951397][T12682] usb 3-1: SerialNumber: syz [ 748.981664][T12682] usb 3-1: config 0 descriptor?? [ 749.032402][T13941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1954'. [ 749.042216][T13941] batadv_slave_0: Caught tx_queue_len zero misconfig [ 749.229254][T12682] kernel read not supported for file /dummy_udc (pid: 12682 comm: kworker/1:4) [ 749.259751][T12682] usb 3-1: USB disconnect, device number 35 [ 749.742883][ T9050] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 749.756070][T12682] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 749.973028][T12682] usb 4-1: Using ep0 maxpacket: 16 [ 749.980792][ T9050] usb 2-1: config 0 has no interfaces? [ 749.989619][T12682] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 749.999076][ T9050] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 750.003191][T12682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.018723][T12682] usb 4-1: Product: syz [ 750.023362][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.024426][T12682] usb 4-1: Manufacturer: syz [ 750.039626][T12682] usb 4-1: SerialNumber: syz [ 750.208758][T12682] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.217987][ T30] audit: type=1400 audit(1785301716.792:949): avc: denied { execmod } for pid=13960 comm="syz.2.1961" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 750.235867][ T9050] usb 2-1: config 0 descriptor?? [ 750.428823][T12682] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 750.459647][T12682] usb 4-1: USB disconnect, device number 51 [ 750.474938][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.675346][T13973] xt_hashlimit: size too large, truncated to 1048576 [ 750.695909][ T9050] usb 2-1: USB disconnect, device number 55 [ 750.812131][ T991] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 751.008851][ T991] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 751.018861][ T991] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 751.027494][ T991] usb 3-1: can't read configurations, error -22 [ 751.942267][ T991] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 752.045392][T13985] gre0: Caught tx_queue_len zero misconfig [ 752.055911][T13986] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 752.114286][ T991] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 752.153385][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 752.172452][ T991] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 752.894911][ T991] usb 3-1: can't read configurations, error -22 [ 752.901471][ T30] audit: type=1400 audit(1785301719.482:950): avc: denied { write } for pid=13981 comm="syz.4.1968" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 752.929639][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 752.951746][ T991] usb usb3-port1: attempt power cycle [ 753.420969][ T991] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 753.524792][ T991] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 753.535933][ T991] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 753.660493][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 753.669994][T13998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1971'. [ 753.789136][ T991] usb 3-1: can't read configurations, error -22 [ 756.712324][ T991] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 756.794907][ T30] audit: type=1400 audit(1785301723.351:951): avc: denied { write } for pid=14017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.021779][T14047] 9p: Bad value for 'rfdno' [ 757.042548][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 757.082620][ T991] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 757.163062][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.250416][ T991] usb 2-1: Product: syz [ 757.285105][ T991] usb 2-1: Manufacturer: syz [ 757.339151][ T991] usb 2-1: SerialNumber: syz [ 757.973741][ T30] audit: type=1400 audit(1785301724.521:952): avc: denied { write } for pid=14045 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.140985][ T991] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.340867][T14054] 9p: Bad value for 'rfdno' [ 759.273152][ T187] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 759.282993][ T30] audit: type=1400 audit(1785301725.851:953): avc: denied { getopt } for pid=14058 comm="syz.2.1984" lport=47942 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 760.202073][ T187] usb 4-1: device descriptor read/64, error -71 [ 760.427894][T14064] overlay: Unknown parameter 'func' [ 760.498001][ T30] audit: type=1400 audit(1785301725.861:954): avc: denied { connect } for pid=14058 comm="syz.2.1984" lport=47942 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 760.581058][ T991] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 760.656199][ T991] usb 2-1: USB disconnect, device number 56 [ 760.670969][ T30] audit: type=1400 audit(1785301725.861:955): avc: denied { name_connect } for pid=14058 comm="syz.2.1984" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 760.713600][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.717030][ T187] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 760.752374][ T30] audit: type=1400 audit(1785301727.091:956): avc: denied { write } for pid=14058 comm="syz.2.1984" lport=47942 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 760.920499][T14079] ipip1: entered promiscuous mode [ 760.926276][T14079] ipip1: entered allmulticast mode [ 760.973184][ T187] usb 4-1: device descriptor read/64, error -71 [ 761.086006][ T187] usb usb4-port1: attempt power cycle [ 761.600753][T12682] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 761.673790][ T187] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 761.979281][ T30] audit: type=1400 audit(1785301728.321:957): avc: denied { name_bind } for pid=14091 comm="syz.0.1989" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 762.048866][ T30] audit: type=1400 audit(1785301728.631:958): avc: denied { write } for pid=14062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.223129][ T187] usb 4-1: device not accepting address 54, error -71 [ 762.235423][T12682] usb 5-1: Using ep0 maxpacket: 16 [ 762.274736][T12682] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.307107][ T30] audit: type=1326 audit(1785301728.881:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.2.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167d9de99 code=0x7ffc0000 [ 762.350480][T12682] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 762.381163][T12682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.419329][T12682] usb 5-1: config 0 descriptor?? [ 762.437574][ T30] audit: type=1326 audit(1785301728.881:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.2.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167d9de99 code=0x7ffc0000 [ 762.532039][ T30] audit: type=1326 audit(1785301728.881:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.2.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167d9de99 code=0x7ffc0000 [ 762.656138][ T30] audit: type=1326 audit(1785301728.881:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.2.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5167d9de99 code=0x7ffc0000 [ 762.746254][T14107] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.757522][ T30] audit: type=1326 audit(1785301728.951:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14101 comm="syz.2.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167d9de99 code=0x7ffc0000 [ 762.793847][T14083] fuse: Unknown parameter '' [ 762.802953][T12682] usbhid 5-1:0.0: can't add hid device: -71 [ 762.813257][T12682] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 762.813464][T14107] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 762.844217][T12682] usb 5-1: USB disconnect, device number 54 [ 762.854954][T14107] audit: backlog limit exceeded [ 763.363302][ T9047] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 763.522401][ T9047] usb 3-1: Using ep0 maxpacket: 8 [ 763.558127][ T9047] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 763.619769][ T9047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.661834][ T9047] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.859170][ T9047] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 763.870963][ T9047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.882872][ T9047] usb 3-1: Product: syz [ 763.887363][ T9047] usb 3-1: Manufacturer: syz [ 763.894093][ T9047] usb 3-1: SerialNumber: syz [ 763.922221][T14118] 9p: Bad value for 'rfdno' [ 764.664054][ T9047] usb 3-1: config 0 descriptor?? [ 764.888110][T12681] kernel read not supported for file /dummy_udc (pid: 12681 comm: kworker/1:3) [ 764.926555][T12681] usb 3-1: USB disconnect, device number 40 [ 765.092486][ T5722] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 765.100155][T12682] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 765.292360][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 765.297682][T12682] usb 4-1: Using ep0 maxpacket: 16 [ 765.349290][T12682] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 765.360937][T12682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.363820][ T5722] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 765.387267][T12682] usb 4-1: Product: syz [ 765.391874][T12682] usb 4-1: Manufacturer: syz [ 765.398955][T12682] usb 4-1: SerialNumber: syz [ 765.405388][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.426689][ T5722] usb 2-1: Product: syz [ 765.484341][ T5722] usb 2-1: Manufacturer: syz [ 765.508428][ T5722] usb 2-1: SerialNumber: syz [ 765.533074][T12682] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.503625][T14135] /dev/nullb0: Can't open blockdev [ 766.667085][T14140] xt_hashlimit: size too large, truncated to 1048576 [ 766.699770][ T5722] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.707346][T12682] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -110 [ 766.887196][T12682] usb 4-1: USB disconnect, device number 56 [ 766.918098][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.935765][T14145] siw: device registration error -23 [ 766.940269][ T991] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 766.987356][ T5722] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 767.026229][ T5722] usb 2-1: USB disconnect, device number 57 [ 767.074763][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.132570][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 767.140228][ T991] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 767.157302][ T991] usb 3-1: config 0 has no interface number 0 [ 767.166418][ T991] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 767.191119][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.204670][ T991] usb 3-1: Product: syz [ 767.208933][ T991] usb 3-1: Manufacturer: syz [ 767.217538][ T991] usb 3-1: SerialNumber: syz [ 767.280132][ T991] usb 3-1: config 0 descriptor?? [ 767.317709][ T991] usb 3-1: selecting invalid altsetting 1 [ 767.375275][ T991] dvb_ttusb_budget: ttusb_init_controller: error [ 767.390871][ T991] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 768.950556][T14157] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 769.845021][ T991] DVB: Unable to find symbol stv0299_attach() [ 769.886664][ T991] DVB: Unable to find symbol tda8083_attach() [ 769.893272][ T991] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 769.907920][ T991] usb 3-1: USB disconnect, device number 41 [ 769.951107][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 769.951123][ T30] audit: type=1400 audit(1785301736.531:1032): avc: denied { append } for pid=14165 comm="syz.2.2008" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 770.642425][ T991] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 770.815159][ T991] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.945227][ T991] usb 3-1: config 0 has no interface number 0 [ 770.970583][ T991] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.011806][ T991] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.041781][ T991] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 771.087949][ T991] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 771.115596][ T991] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 771.132321][ T991] usb 3-1: Product: syz [ 771.144400][ T991] usb 3-1: config 0 descriptor?? [ 771.252538][ T5722] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 771.457938][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 771.522431][ T5722] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 771.570394][ T5722] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.631391][ T5722] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 771.656348][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.677567][ T5722] usb 5-1: Product: syz [ 771.688423][ T5722] usb 5-1: Manufacturer: syz [ 771.701461][ T5722] usb 5-1: SerialNumber: syz [ 771.723681][ T5722] usb 5-1: config 0 descriptor?? [ 771.954610][ T5722] kernel read not supported for file /dummy_udc (pid: 5722 comm: kworker/1:5) [ 772.913159][ T5722] usb 5-1: USB disconnect, device number 55 [ 773.037247][ T991] usbhid 3-1:0.1: can't add hid device: -71 [ 773.067201][ T991] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 773.133085][ T991] usb 3-1: USB disconnect, device number 42 [ 773.952427][T12681] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 774.472363][T12681] usb 4-1: Using ep0 maxpacket: 16 [ 774.502950][T12681] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 774.502980][T12681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.502999][T12681] usb 4-1: Product: syz [ 774.503014][T12681] usb 4-1: Manufacturer: syz [ 774.503029][T12681] usb 4-1: SerialNumber: syz [ 774.530182][T12681] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.177319][T12681] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 776.188835][T12681] usb 4-1: USB disconnect, device number 57 [ 776.310917][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.583813][T14211] overlayfs: failed to resolve './file1/file0': -2 [ 778.875345][T14230] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 779.960761][T14248] TCP: TCP_TX_DELAY enabled [ 779.990974][T14248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.287060][T14254] siw: device registration error -23 [ 781.604881][T12681] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 782.082535][T12681] usb 3-1: Using ep0 maxpacket: 16 [ 782.367857][T12939] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 782.400949][T12681] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 782.437343][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.486657][T12681] usb 3-1: Product: syz [ 782.498385][T12681] usb 3-1: Manufacturer: syz [ 782.509097][T12681] usb 3-1: SerialNumber: syz [ 782.524432][T12939] usb 4-1: Using ep0 maxpacket: 8 [ 782.538948][T12939] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 782.550076][T14286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2041'. [ 782.557429][T12939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 782.561693][T12681] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.572037][T12939] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 782.634736][T12939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.703411][T12939] usb 4-1: Product: syz [ 782.756916][T12939] usb 4-1: Manufacturer: syz [ 782.974776][T12939] usb 4-1: SerialNumber: syz [ 783.004104][T12939] usb 4-1: config 0 descriptor?? [ 783.068018][T14284] lo speed is unknown, defaulting to 1000 [ 783.430442][ T9047] kernel read not supported for file /dummy_udc (pid: 9047 comm: kworker/0:9) [ 783.446265][T12939] kernel write not supported for file /dummy_udc (pid: 12939 comm: kworker/0:0) [ 783.481873][T12939] usb 4-1: USB disconnect, device number 58 [ 783.536747][T14283] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 783.545132][T14283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2039'. [ 783.554341][T14283] bridge0: port 1(dummy0) entered blocking state [ 783.560802][T14283] bridge0: port 1(dummy0) entered disabled state [ 783.567284][T14283] dummy0: entered allmulticast mode [ 783.574289][T14283] dummy0: entered promiscuous mode [ 783.580007][T14283] bridge0: port 1(dummy0) entered blocking state [ 783.586447][T14283] bridge0: port 1(dummy0) entered forwarding state [ 783.645953][T12681] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 783.676547][T12681] usb 3-1: USB disconnect, device number 43 [ 783.759207][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.974841][T14301] bond6 (unregistering): Released all slaves [ 785.377231][T14312] tipc: Started in network mode [ 785.395764][T14312] tipc: Node identity ac14142f, cluster identity 4711 [ 785.614842][T14312] tipc: New replicast peer: 127.0.0.1 [ 785.746771][T14312] tipc: Enabled bearer , priority 10 [ 785.762274][T14318] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0003 [ 786.223231][T12681] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 786.446154][T12681] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 786.819891][T12681] usb 3-1: config 127 has no interface number 0 [ 786.848494][T12681] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 786.863437][ T9047] tipc: Node number set to 2886997039 [ 786.924655][T12681] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 786.961051][T12681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.997575][T12681] usb 3-1: Product: syz [ 787.016919][T14327] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 787.027591][T12681] usb 3-1: Manufacturer: syz [ 787.044240][T12681] usb 3-1: SerialNumber: syz [ 787.065310][T14312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 787.089488][T14331] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 787.103444][T14331] overlayfs: overlapping lowerdir path [ 787.259138][T14338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2055'. [ 787.301634][T14327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.314927][T12681] asix 3-1:127.57: probe with driver asix failed with error -71 [ 787.315152][T14338] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 787.325354][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.325904][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.334610][T12681] usb 3-1: USB disconnect, device number 44 [ 787.405895][T14334] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 787.556186][T14344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.566353][T14347] bridge0: port 3(syz_tun) entered blocking state [ 787.601096][T14347] bridge0: port 3(syz_tun) entered disabled state [ 787.663568][T14348] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 787.713743][T14344] overlayfs: missing 'lowerdir' [ 787.721018][T14347] syz_tun: entered promiscuous mode [ 788.213045][T14359] UDC core: g1: couldn't find an available UDC or it's busy [ 789.972795][T14357] hub 8-0:1.0: USB hub found [ 789.977696][T14357] hub 8-0:1.0: 1 port detected [ 791.358876][T14374] FAULT_INJECTION: forcing a failure. [ 791.358876][T14374] name failslab, interval 1, probability 0, space 0, times 0 [ 791.415498][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz.3.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.415529][T14374] Tainted: [L]=SOFTLOCKUP [ 791.415535][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 791.415545][T14374] Call Trace: [ 791.415552][T14374] [ 791.415559][T14374] dump_stack_lvl+0x100/0x190 [ 791.415588][T14374] should_fail_ex.cold+0x5/0xa [ 791.415612][T14374] should_failslab+0xc2/0x120 [ 791.415635][T14374] kmem_cache_alloc_noprof+0x91/0x6a0 [ 791.415656][T14374] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 791.415675][T14374] ? do_getname_kernel+0x5d/0x250 [ 791.415701][T14374] do_getname_kernel+0x5d/0x250 [ 791.415724][T14374] do_file_open_root+0x1a4/0x5a0 [ 791.415744][T14374] ? __kasan_slab_free+0x5f/0x80 [ 791.415767][T14374] ? __pfx_do_file_open_root+0x10/0x10 [ 791.415806][T14374] ? do_raw_spin_lock+0x128/0x260 [ 791.415830][T14374] ? find_held_lock+0x2b/0x80 [ 791.415858][T14374] file_open_root+0x1c6/0x3f0 [ 791.415874][T14374] ? __pfx_file_open_root+0x10/0x10 [ 791.415888][T14374] ? _raw_spin_unlock+0x28/0x50 [ 791.415921][T14374] do_handle_open+0xb4a/0xf20 [ 791.415947][T14374] ? __pfx_do_handle_open+0x10/0x10 [ 791.415976][T14374] ? native_tss_update_io_bitmap+0x28f/0x740 [ 791.416004][T14374] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 791.416029][T14374] ? ksys_write+0x1ac/0x250 [ 791.416063][T14374] ? do_syscall_64+0x115/0x870 [ 791.416082][T14374] do_syscall_64+0x115/0x870 [ 791.416100][T14374] ? clear_bhb_loop+0x40/0x90 [ 791.416122][T14374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.416140][T14374] RIP: 0033:0x7fe79919de99 [ 791.416156][T14374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.416173][T14374] RSP: 002b:00007fe7973f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 791.416191][T14374] RAX: ffffffffffffffda RBX: 00007fe799425fa0 RCX: 00007fe79919de99 [ 791.416202][T14374] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 791.416213][T14374] RBP: 00007fe7973f6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.416224][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.416234][T14374] R13: 00007fe799426038 R14: 00007fe799425fa0 R15: 00007ffc05f1da18 [ 791.416259][T14374] [ 793.991100][T12682] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 794.165506][T14400] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 794.289244][T12682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.340740][T12682] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.432301][T12682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.437797][T14402] vlan2: entered allmulticast mode [ 794.451126][T14402] bond0: entered allmulticast mode [ 794.491663][T12682] usb 3-1: Product: syz [ 794.524985][T12682] usb 3-1: Manufacturer: syz [ 794.543612][T12682] usb 3-1: SerialNumber: syz [ 795.076260][T14419] atomic_op ffff88804a5e7198 conn xmit_atomic 0000000000000000 [ 796.413140][T12681] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 796.572586][T12681] usb 5-1: Using ep0 maxpacket: 16 [ 796.598509][T12681] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 796.635252][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.688040][T12681] usb 5-1: Product: syz [ 796.694198][T12682] cdc_ncm 3-1:1.0: bind() failure [ 796.707012][T12681] usb 5-1: Manufacturer: syz [ 796.725775][T12682] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 796.735362][T12681] usb 5-1: SerialNumber: syz [ 796.758529][T12681] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 796.775676][T12682] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 796.809220][T12682] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 796.860008][T12682] usb 3-1: USB disconnect, device number 45 [ 797.612438][T14428] siw: device registration error -23 [ 798.352999][T14405] kexec: Could not allocate control_code_buffer [ 798.880166][T12681] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 799.217262][T12681] usb 5-1: USB disconnect, device number 56 [ 799.232125][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.432412][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 799.772592][T12681] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 799.865526][T12682] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 799.888981][T12682] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 800.024058][T12681] usb 5-1: Using ep0 maxpacket: 8 [ 800.036481][T12681] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 800.050570][T12681] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.094041][T12681] usb 5-1: config 0 has no interfaces? [ 800.113626][T12681] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 800.145561][T12681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.179213][T12681] usb 5-1: Product: syz [ 800.186365][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 800.189551][T12681] usb 5-1: Manufacturer: syz [ 800.195249][T14460] tipc: Enabling of bearer rejected, media not registered [ 800.250267][T12681] usb 5-1: SerialNumber: syz [ 800.307005][T12681] usb 5-1: config 0 descriptor?? [ 800.633742][T12939] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 801.073571][T12939] usb 3-1: Using ep0 maxpacket: 8 [ 801.082895][T12939] usb 3-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 801.094043][T12939] usb 3-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 801.105348][T12939] usb 3-1: config 218 has no interface number 0 [ 801.112554][T12939] usb 3-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 801.126308][T12939] usb 3-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 801.137422][T12939] usb 3-1: config 218 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.150661][T12939] usb 3-1: config 218 interface 95 has no altsetting 0 [ 801.169121][ T187] kernel read not supported for file /dummy_udc (pid: 187 comm: kworker/0:2) [ 801.191622][T12681] usb 5-1: USB disconnect, device number 57 [ 801.211975][T12939] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 801.352032][T12939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.388970][T12939] usb 3-1: Product: syz [ 801.416293][T12939] usb 3-1: Manufacturer: syz [ 801.454075][T12939] usb 3-1: SerialNumber: syz [ 801.875240][T12939] usb 3-1: USB disconnect, device number 46 [ 801.965151][T12682] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 802.119118][T14479] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 802.192775][T12682] usb 2-1: Using ep0 maxpacket: 16 [ 802.281428][T12682] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 802.307184][T12682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.071964][ T30] audit: type=1400 audit(1785301768.961:1033): avc: denied { bind } for pid=14478 comm="syz.4.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 803.113395][T12682] usb 2-1: Product: syz [ 803.136170][T12682] usb 2-1: Manufacturer: syz [ 803.169496][T12682] usb 2-1: SerialNumber: syz [ 803.239111][T12682] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.316737][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 803.360139][T14487] vcan0: tx drop: invalid sa for name 0x0010000000000000 [ 803.639533][T12682] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 803.660410][T12682] usb 2-1: USB disconnect, device number 58 [ 803.703919][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.745248][T12681] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 803.928858][T12681] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 803.939664][T12681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.950562][T12681] usb 5-1: config 0 descriptor?? [ 803.966550][T12681] cp210x 5-1:0.0: cp210x converter detected [ 804.188382][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.194812][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.441990][T14505] xt_hashlimit: size too large, truncated to 1048576 [ 804.455627][T12681] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 804.482891][T12681] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 804.491977][T14502] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 804.506531][T12681] usb 5-1: cp210x converter now attached to ttyUSB0 [ 804.535916][T12681] usb 5-1: USB disconnect, device number 58 [ 804.550442][T12681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 804.569601][ T30] audit: type=1326 audit(1785301771.151:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.4.2103" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4e799de99 code=0x0 [ 804.597354][T12681] cp210x 5-1:0.0: device disconnected [ 805.774149][T14522] lo speed is unknown, defaulting to 1000 [ 806.554735][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 807.065139][T14538] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 807.105484][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 807.245663][T14532] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 808.325621][T14543] syz.2.2110 (14543): drop_caches: 2 [ 808.512999][T14543] veth0_macvtap: Caught tx_queue_len zero misconfig [ 808.996272][ T187] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 809.151673][T14557] xt_hashlimit: size too large, truncated to 1048576 [ 809.190943][T14559] xt_hashlimit: size too large, truncated to 1048576 [ 809.199773][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 809.436025][ T187] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 809.459630][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.478469][ T187] usb 4-1: Product: syz [ 809.486206][ T187] usb 4-1: Manufacturer: syz [ 809.492923][ T187] usb 4-1: SerialNumber: syz [ 809.519170][ T187] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.815177][ T187] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 809.837975][ T187] usb 4-1: USB disconnect, device number 59 [ 809.881794][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.752436][T14586] lo speed is unknown, defaulting to 1000 [ 811.164863][T14584] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 811.447160][T14591] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 811.849805][ T30] audit: type=1400 audit(1785301778.401:1035): avc: denied { remount } for pid=14596 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 813.768449][T14613] atomic_op ffff888033b73198 conn xmit_atomic 0000000000000000 [ 814.270248][T14618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.451961][T12681] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 814.517065][ T187] Process accounting resumed [ 814.583373][T14623] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 814.591202][T14623] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 814.872716][T12682] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 815.302729][T12682] usb 2-1: Using ep0 maxpacket: 32 [ 815.311882][T12681] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 815.322067][T12682] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 815.339348][T12681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.350472][T12682] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 815.362949][T12682] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 815.373687][T12681] usb 5-1: config 0 descriptor?? [ 815.383824][T12682] usb 2-1: Product: syz [ 815.392975][T12681] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 815.407184][T12682] usb 2-1: Manufacturer: syz [ 815.418770][T12682] usb 2-1: SerialNumber: syz [ 815.435465][T12682] usb 2-1: config 0 descriptor?? [ 815.441296][T14619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 815.749735][T14619] lo speed is unknown, defaulting to 1000 [ 815.873149][T12682] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 815.906539][ T29] usb 2-1: USB disconnect, device number 59 [ 816.102826][T12682] usb 3-1: Using ep0 maxpacket: 16 [ 816.109622][T12682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 816.123113][T12682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.133504][T12682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.142423][T12682] usb 3-1: config 1 has no interface number 0 [ 816.150191][T12682] usb 3-1: too many endpoints for config 1 interface 1 altsetting 235: 111, using maximum allowed: 30 [ 816.180040][T12682] usb 3-1: config 1 interface 1 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 816.193647][T12682] usb 3-1: config 1 interface 1 has no altsetting 1 [ 816.216784][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 816.229982][T12682] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 816.241722][T12682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.250268][T12682] usb 3-1: Product: syz [ 816.254660][T12682] usb 3-1: Manufacturer: syz [ 816.259289][T12682] usb 3-1: SerialNumber: syz [ 816.732866][ T29] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 816.744982][T12681] usb 5-1: USB disconnect, device number 59 [ 816.773384][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.799249][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.885560][T12682] usb 3-1: USB disconnect, device number 47 [ 816.894046][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 816.905734][ T29] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 816.920262][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.922378][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.944829][ T29] usb 2-1: Product: syz [ 816.949023][ T29] usb 2-1: Manufacturer: syz [ 816.954487][ T29] usb 2-1: SerialNumber: syz [ 816.971865][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.057555][ T29] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -110 [ 818.076157][ T29] usb 2-1: USB disconnect, device number 60 [ 818.150640][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.177537][T14654] FAULT_INJECTION: forcing a failure. [ 818.177537][T14654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.266638][T14654] CPU: 0 UID: 0 PID: 14654 Comm: syz.4.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.266669][T14654] Tainted: [L]=SOFTLOCKUP [ 818.266675][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 818.266686][T14654] Call Trace: [ 818.266692][T14654] [ 818.266699][T14654] dump_stack_lvl+0x100/0x190 [ 818.266725][T14654] should_fail_ex.cold+0x5/0xa [ 818.266748][T14654] _copy_from_user+0x2e/0xd0 [ 818.266773][T14654] ____sys_sendmsg+0x1d1/0xbe0 [ 818.266803][T14654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.266847][T14654] ___sys_sendmsg+0x190/0x1e0 [ 818.266875][T14654] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.266901][T14654] ? __lock_acquire+0x49f/0x1a40 [ 818.266924][T14654] ? get_pid_task+0x106/0x250 [ 818.266978][T14654] __sys_sendmsg+0x160/0x210 [ 818.267001][T14654] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.267035][T14654] do_syscall_64+0x115/0x870 [ 818.267055][T14654] ? clear_bhb_loop+0x40/0x90 [ 818.267077][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.267095][T14654] RIP: 0033:0x7fd4e799de99 [ 818.267110][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.267127][T14654] RSP: 002b:00007fd4e87d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.267145][T14654] RAX: ffffffffffffffda RBX: 00007fd4e7c25fa0 RCX: 00007fd4e799de99 [ 818.267156][T14654] RDX: 000000000000fffe RSI: 0000200000000000 RDI: 0000000000000003 [ 818.267167][T14654] RBP: 00007fd4e87d7090 R08: 0000000000000000 R09: 0000000000000000 [ 818.267177][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.267188][T14654] R13: 00007fd4e7c26038 R14: 00007fd4e7c25fa0 R15: 00007fff57c3e568 [ 818.267212][T14654] [ 818.675981][T14661] atomic_op ffff888077ad0198 conn xmit_atomic 0000000000000000 [ 819.645086][T14671] tipc: Failed to remove unknown binding: 66,0,0/0:1703559797/1703559798 [ 819.854696][T14666] tipc: Failed to remove unknown binding: 66,0,0/0:1703559797/1703559798 [ 819.929008][T14666] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 821.768035][T14689] lo speed is unknown, defaulting to 1000 [ 822.232828][ T5722] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 823.082759][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 823.089466][ T5722] usb 5-1: config 73 has an invalid interface number: 24 but max is 0 [ 823.099898][ T5722] usb 5-1: config 73 has no interface number 0 [ 823.108590][ T5722] usb 5-1: config 73 interface 24 has no altsetting 0 [ 823.118589][ T5722] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 823.130783][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.139625][ T5722] usb 5-1: Product: syz [ 823.161420][ T5722] usb 5-1: Manufacturer: syz [ 823.174758][ T5722] usb 5-1: SerialNumber: syz [ 823.291895][T14711] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 823.564321][T14713] atomic_op ffff8880562d1998 conn xmit_atomic 0000000000000000 [ 824.626803][ T9050] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 824.699646][ T5722] go7007 5-1:73.24: probe with driver go7007 failed with error -12 [ 824.737492][ T5722] usb 5-1: USB disconnect, device number 60 [ 824.920487][ T9050] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.941770][ T9050] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 824.963702][ T9050] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.995458][ T9050] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 825.023808][ T9050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.267092][ T5722] usb 2-1: USB disconnect, device number 61 [ 825.356642][T14724] syz_tun (unregistering): left allmulticast mode [ 825.363104][T14724] syz_tun (unregistering): left promiscuous mode [ 825.369508][T14724] bridge0: port 3(syz_tun) entered disabled state [ 825.563532][T14729] kAFS: unable to lookup cell '(,c¾û/' [ 825.602966][ T29] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 825.699292][T14732] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2161'. [ 825.774493][ T29] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 825.791968][ T29] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 825.809858][T14732] lo speed is unknown, defaulting to 1000 [ 825.817223][ T29] usb 5-1: config 150 has no interface number 0 [ 825.829649][ T29] usb 5-1: config 150 interface 204 has no altsetting 0 [ 825.854999][ T29] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 825.880940][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.904351][ T29] usb 5-1: Product: syz [ 825.920289][ T29] usb 5-1: Manufacturer: syz [ 825.941673][ T29] usb 5-1: SerialNumber: syz [ 826.250136][ T29] xr_serial 5-1:150.204: skipping garbage [ 826.559112][ T29] xr_serial 5-1:150.204: xr_serial converter detected [ 827.362095][ T29] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 827.557078][T14732] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2161'. [ 827.965167][ T29] usb 5-1: USB disconnect, device number 61 [ 828.063182][ T29] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 828.362928][T14756] binder: 14750:14756 ioctl 4c06 6 returned -22 [ 828.976160][T14754] atomic_op ffff88807b0c5198 conn xmit_atomic 0000000000000000 [ 829.799265][ T29] xr_serial 5-1:150.204: device disconnected [ 830.192640][ T30] audit: type=1400 audit(1785301796.731:1036): avc: denied { read write } for pid=12637 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.272783][ T30] audit: type=1400 audit(1785301796.781:1037): avc: denied { open } for pid=12637 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.322769][ T30] audit: type=1400 audit(1785301796.781:1038): avc: denied { ioctl } for pid=12637 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 830.394174][ T30] audit: type=1400 audit(1785301796.781:1039): avc: denied { ioctl } for pid=14763 comm="syz.4.2169" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.414319][T12939] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 830.593061][ T30] audit: type=1400 audit(1785301796.781:1040): avc: denied { read } for pid=14768 comm="syz.2.2171" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.869073][ T30] audit: type=1400 audit(1785301796.781:1041): avc: denied { open } for pid=14768 comm="syz.2.2171" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 830.935606][ T30] audit: type=1400 audit(1785301796.781:1042): avc: denied { create } for pid=14768 comm="syz.2.2171" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 830.982762][ T30] audit: type=1400 audit(1785301796.781:1043): avc: denied { ioctl } for pid=14768 comm="syz.2.2171" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44195 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.042750][ T30] audit: type=1400 audit(1785301796.781:1044): avc: denied { execmem } for pid=14768 comm="syz.2.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 831.208818][ T30] audit: type=1400 audit(1785301796.781:1045): avc: denied { setopt } for pid=14761 comm="syz.3.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 831.270808][T12939] usb 5-1: device descriptor read/64, error -71 [ 832.479306][T12939] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 832.661672][T12939] usb 5-1: device descriptor read/64, error -71 [ 832.869911][T12939] usb usb5-port1: attempt power cycle [ 833.740523][ T5722] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 833.747072][ T9050] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 833.909717][T14802] atomic_op ffff8880544a8198 conn xmit_atomic 0000000000000000 [ 834.143716][ T9050] usb 3-1: Using ep0 maxpacket: 32 [ 834.154881][ T9050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.168421][ T9050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.180242][ T9050] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 834.189798][ T9050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.247516][ T9050] usb 3-1: config 0 descriptor?? [ 834.282913][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 834.313856][ T5722] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 834.332755][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.351357][ T5722] usb 4-1: Product: syz [ 834.357243][ T5722] usb 4-1: Manufacturer: syz [ 834.373015][ T5722] usb 4-1: SerialNumber: syz [ 834.418345][ T5722] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.485066][ T187] libceph: connect (1)[c::]:6789 error -101 [ 834.549273][T14812] binder: 14805:14812 ioctl 2203 200000000200 returned -22 [ 834.559448][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 834.592564][ T187] libceph: connect (1)[c::]:6789 error -101 [ 834.602607][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 834.686744][T14814] ceph: No mds server is up or the cluster is laggy [ 834.714745][T14796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.751064][ T5722] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 834.764022][T14796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.797767][ T5722] usb 4-1: USB disconnect, device number 60 [ 834.863975][ T187] libceph: connect (1)[c::]:6789 error -101 [ 834.875928][ T7918] udevd[7918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.894846][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 834.907921][T14796] 9pnet: p9_errstr2errno: server reported unknown error  [ 835.301332][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 835.301346][ T30] audit: type=1400 audit(1785301801.871:1127): avc: denied { mount } for pid=14821 comm="syz.1.2180" name="/" dev="ramfs" ino=44280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 835.434230][ T9050] ft260 0003:0403:6030.0015: item fetching failed at offset 0/2 [ 835.461265][ T9050] ft260 0003:0403:6030.0015: failed to parse HID [ 835.617704][ T9050] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -22 [ 836.308447][ T9050] usb 3-1: USB disconnect, device number 48 [ 836.750552][ T30] audit: type=1804 audit(1785301801.941:1128): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2180" name="bus" dev="ramfs" ino=44281 res=1 errno=0 [ 836.771956][ T30] audit: type=1804 audit(1785301801.941:1129): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2180" name="bus" dev="ramfs" ino=44281 res=1 errno=0 [ 836.792822][ T30] audit: type=1400 audit(1785301802.241:1130): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 836.812874][ T30] audit: type=1400 audit(1785301802.461:1131): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 837.027425][ T30] audit: type=1400 audit(1785301803.611:1132): avc: denied { map } for pid=14826 comm="syz.3.2183" path="/dev/net/tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 837.308013][ T30] audit: type=1400 audit(1785301803.891:1133): avc: denied { read write } for pid=14832 comm="syz.2.2186" name="video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 837.385361][ T30] audit: type=1400 audit(1785301803.891:1134): avc: denied { open } for pid=14832 comm="syz.2.2186" path="/dev/video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 837.521663][ T30] audit: type=1400 audit(1785301803.891:1135): avc: denied { create } for pid=14832 comm="syz.2.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 837.609639][ T30] audit: type=1400 audit(1785301803.901:1136): avc: denied { read } for pid=14832 comm="syz.2.2186" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 837.643714][T12939] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 837.695362][T12939] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 838.076817][T14851] atomic_op ffff88807ddac198 conn xmit_atomic 0000000000000000 [ 839.735827][T14846] syzkaller0: entered promiscuous mode [ 839.765038][T14846] syzkaller0: entered allmulticast mode [ 840.482753][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 840.482769][ T30] audit: type=1400 audit(1785301807.061:1168): avc: denied { listen } for pid=14877 comm="syz.4.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.252661][ T30] audit: type=1400 audit(1785301807.061:1169): avc: denied { accept } for pid=14877 comm="syz.4.2194" lport=40557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.921038][ T30] audit: type=1400 audit(1785301808.501:1170): avc: denied { getopt } for pid=14885 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.979721][ T30] audit: type=1400 audit(1785301808.561:1171): avc: denied { create } for pid=14885 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 842.001217][ T30] audit: type=1400 audit(1785301808.561:1172): avc: denied { map } for pid=14885 comm="syz.0.2202" path="socket:[45154]" dev="sockfs" ino=45154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 842.027311][ T30] audit: type=1400 audit(1785301808.561:1173): avc: denied { read } for pid=14885 comm="syz.0.2202" path="socket:[45154]" dev="sockfs" ino=45154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 842.057135][ T30] audit: type=1400 audit(1785301808.641:1174): avc: denied { ioctl } for pid=14885 comm="syz.0.2202" path="socket:[44400]" dev="sockfs" ino=44400 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 842.195896][ T30] audit: type=1400 audit(1785301808.771:1175): avc: denied { write } for pid=14885 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 844.579275][T14872] tipc: Enabling of bearer rejected, failed to enable media [ 844.588495][T14886] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 844.597350][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2201'. [ 844.597982][T14886] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2202'. [ 844.619702][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.620887][T14886] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 844.768800][ T30] audit: type=1400 audit(1785301811.351:1176): avc: denied { read append } for pid=14892 comm="syz.2.2203" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 844.864746][ T30] audit: type=1400 audit(1785301811.351:1177): avc: denied { open } for pid=14892 comm="syz.2.2203" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 845.114973][T14899] atomic_op ffff888046664998 conn xmit_atomic 0000000000000000 [ 845.770037][ T30] audit: type=1400 audit(1785301812.221:1178): avc: denied { read write } for pid=14896 comm="syz.1.2205" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 845.780416][T14909] ipt_ECN: cannot use operation on non-tcp rule [ 845.819239][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 845.828338][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 845.837216][T14909] netlink: 'syz.3.2208': attribute type 7 has an invalid length. [ 845.876201][ T30] audit: type=1400 audit(1785301812.221:1179): avc: denied { open } for pid=14896 comm="syz.1.2205" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 845.954380][ T30] audit: type=1400 audit(1785301812.331:1180): avc: denied { create } for pid=14908 comm="syz.3.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.012888][ T30] audit: type=1400 audit(1785301812.331:1181): avc: denied { bind } for pid=14908 comm="syz.3.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.040446][T14917] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2210'. [ 846.081364][ T30] audit: type=1400 audit(1785301812.331:1182): avc: denied { accept } for pid=14908 comm="syz.3.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.132861][ T30] audit: type=1400 audit(1785301812.331:1183): avc: denied { ioctl } for pid=14908 comm="syz.3.2208" path="socket:[44440]" dev="sockfs" ino=44440 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.136952][T14917] lo speed is unknown, defaulting to 1000 [ 846.187262][ T30] audit: type=1400 audit(1785301812.331:1184): avc: denied { mount } for pid=14908 comm="syz.3.2208" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 846.252158][ T30] audit: type=1400 audit(1785301812.431:1185): avc: denied { mmap_zero } for pid=14911 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 846.301087][ T30] audit: type=1400 audit(1785301812.431:1186): avc: denied { mounton } for pid=14911 comm="syz.2.2207" path="/98/file0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 846.342819][ T30] audit: type=1400 audit(1785301812.431:1187): avc: denied { mount } for pid=14911 comm="syz.2.2207" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 846.677316][T14917] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2210'. [ 847.413639][T12939] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 847.666441][T14945] 9pnet_fd: Insufficient options for proto=fd [ 847.850844][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 848.756344][T12939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 848.766526][T12939] usb 5-1: config 4 has an invalid interface number: 67 but max is 0 [ 848.805404][T12939] usb 5-1: config 4 has no interface number 0 [ 848.823741][T12939] usb 5-1: config 4 interface 67 has no altsetting 0 [ 848.857397][ T10] usb 2-1: device descriptor read/64, error -71 [ 848.877263][T12939] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 848.905871][T12939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.922030][T12939] usb 5-1: Product: syz [ 848.938762][T12939] usb 5-1: Manufacturer: syz [ 848.949870][T12939] usb 5-1: SerialNumber: syz [ 849.133946][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 849.178432][T12939] usb-storage 5-1:4.67: USB Mass Storage device detected [ 849.264915][T12939] usb 5-1: USB disconnect, device number 65 [ 849.274002][ T10] usb 2-1: device descriptor read/64, error -71 [ 954.432710][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 954.439696][ C1] rcu: 0-...!: (1 GPs behind) idle=55a4/0/0x1 softirq=77188/77190 fqs=0 [ 954.449188][ C1] rcu: (detected by 1, t=10506 jiffies, g=80321, q=250 ncpus=2) [ 954.456908][ C1] Sending NMI from CPU 1 to CPUs 0: [ 954.456936][ C0] NMI backtrace for cpu 0 [ 954.456952][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.456970][ C0] Tainted: [L]=SOFTLOCKUP [ 954.456975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 954.456983][ C0] RIP: 0010:kasan_check_range+0x17d/0x1e0 [ 954.457007][ C0] Code: da e9 32 ff ff ff 48 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 c0 01 48 39 d0 0f 84 79 ff ff ff <80> 38 00 74 ee e9 57 ff ff ff b8 01 00 00 00 e9 bf 6f 43 09 48 29 [ 954.457020][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00000086 [ 954.457033][ C0] RAX: fffffbfff37350d6 RBX: fffffbfff37350d7 RCX: ffffffff81e64419 [ 954.457042][ C0] RDX: fffffbfff37350d7 RSI: 0000000000000004 RDI: ffffffff9b9a86b0 [ 954.457051][ C0] RBP: fffffbfff37350d6 R08: 0000000000000001 R09: fffffbfff37350d6 [ 954.457060][ C0] R10: ffffffff9b9a86b3 R11: 0000000000000000 R12: 1ffff92000000f98 [ 954.457068][ C0] R13: ffffffff9b9a86c0 R14: 0000000000000001 R15: 1ffff92000000fb2 [ 954.457077][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 954.457092][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.457102][ C0] CR2: 000000110c43fe3a CR3: 000000005b454000 CR4: 00000000003526f0 [ 954.457111][ C0] Call Trace: [ 954.457122][ C0] [ 954.457129][ C0] do_raw_spin_lock+0x119/0x260 [ 954.457149][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 954.457167][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 954.457187][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 954.457208][ C0] ? debug_object_activate+0x144/0x4b0 [ 954.457224][ C0] debug_object_activate+0x144/0x4b0 [ 954.457242][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 954.457262][ C0] ? do_raw_spin_lock+0x128/0x260 [ 954.457282][ C0] enqueue_hrtimer+0x75/0x2f0 [ 954.457302][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 954.457324][ C0] hrtimer_interrupt+0x3e5/0x940 [ 954.457341][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 954.457362][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 954.457378][ C0] [ 954.457383][ C0] [ 954.457388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 954.457403][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 954.457418][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 954.457430][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 954.457440][ C0] RAX: 0000000004442f65 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 954.457450][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5f23 RDI: ffffffff8c401680 [ 954.457458][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 954.457467][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 954.457475][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 954.457487][ C0] ? ct_kernel_exit+0x125/0x180 [ 954.457503][ C0] default_idle+0x9/0x10 [ 954.457519][ C0] default_idle_call+0x6c/0xb0 [ 954.457535][ C0] do_idle+0x3a7/0x5b0 [ 954.457553][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 954.457571][ C0] ? __pfx_do_idle+0x10/0x10 [ 954.457589][ C0] ? do_idle+0x12/0x5b0 [ 954.457607][ C0] cpu_startup_entry+0x4f/0x60 [ 954.457626][ C0] rest_init+0x251/0x260 [ 954.457642][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 954.457661][ C0] start_kernel+0x48e/0x490 [ 954.457678][ C0] x86_64_start_reservations+0x24/0x30 [ 954.457696][ C0] x86_64_start_kernel+0x12b/0x130 [ 954.457713][ C0] common_startup_64+0x13e/0x158 [ 954.457738][ C0] [ 954.457930][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g80321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 954.825280][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 954.835234][ C1] rcu: RCU grace-period kthread stack dump: [ 954.841103][ C1] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 954.854584][ C1] Call Trace: [ 954.857856][ C1] [ 954.860780][ C1] __schedule+0x125c/0x6730 [ 954.865292][ C1] ? __pfx___schedule+0x10/0x10 [ 954.870129][ C1] ? find_held_lock+0x2b/0x80 [ 954.874803][ C1] ? schedule+0x225/0x2c0 [ 954.879124][ C1] schedule+0xdd/0x2c0 [ 954.883186][ C1] schedule_timeout+0x127/0x280 [ 954.888036][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 954.893401][ C1] ? __pfx_process_timeout+0x10/0x10 [ 954.898681][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 954.904475][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 954.909930][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 954.914696][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 954.919974][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 954.924906][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 954.930093][ C1] ? rcu_is_watching+0x12/0xc0 [ 954.934850][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 954.940645][ C1] rcu_gp_kthread+0x179/0x230 [ 954.945313][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 954.950499][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 954.956315][ C1] ? __kthread_parkme+0x18c/0x230 [ 954.961339][ C1] ? kthread+0x13a/0x450 [ 954.965575][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 954.970765][ C1] kthread+0x370/0x450 [ 954.974825][ C1] ? __pfx_kthread+0x10/0x10 [ 954.979404][ C1] ret_from_fork+0x72b/0xd50 [ 954.983992][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 954.989099][ C1] ? __switch_to+0x800/0x10f0 [ 954.993767][ C1] ? __pfx_kthread+0x10/0x10 [ 954.998349][ C1] ret_from_fork_asm+0x1a/0x30 [ 955.003124][ C1] [ 955.006129][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 955.012439][ C1] CPU: 1 UID: 0 PID: 14963 Comm: syz.3.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.023362][ C1] Tainted: [L]=SOFTLOCKUP [ 955.027669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 955.037707][ C1] RIP: 0010:smp_call_function_many_cond+0x5a8/0x1870 [ 955.044376][ C1] Code: e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 <41> 89 c6 89 c6 e8 ae 93 0c 00 45 85 f6 75 d0 e8 34 99 0c 00 e8 2f [ 955.064492][ C1] RSP: 0018:ffffc90005b8f9e0 EFLAGS: 00000202 [ 955.070588][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffc9000fd3e000 [ 955.078560][ C1] RDX: 0000000000080000 RSI: ffffffff81fdc6dc RDI: 0000000000000000 [ 955.086541][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 955.094499][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 955.102463][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 955.110452][ C1] FS: 00007fe7973b46c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 955.119391][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.125970][ C1] CR2: 00007fe7973b3ff8 CR3: 000000007ed1c000 CR4: 00000000003526f0 [ 955.134017][ C1] Call Trace: [ 955.137284][ C1] [ 955.140206][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 955.145938][ C1] ? clock_was_set+0x1c3/0x850 [ 955.150697][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 955.157021][ C1] ? mark_held_locks+0x40/0x70 [ 955.161777][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 955.167575][ C1] clock_was_set+0x61c/0x850 [ 955.172170][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 955.177282][ C1] ? __lock_acquire+0x49f/0x1a40 [ 955.182219][ C1] do_adjtimex+0x302/0x370 [ 955.186629][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 955.191571][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 955.197644][ C1] __do_sys_clock_adjtime+0x177/0x290 [ 955.203012][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 955.208920][ C1] ? kcov_ioctl+0x17a/0x750 [ 955.213422][ C1] do_syscall_64+0x115/0x870 [ 955.218000][ C1] ? clear_bhb_loop+0x40/0x90 [ 955.222673][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.228553][ C1] RIP: 0033:0x7fe79919de99 [ 955.232955][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.252550][ C1] RSP: 002b:00007fe7973b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 955.260953][ C1] RAX: ffffffffffffffda RBX: 00007fe799426180 RCX: 00007fe79919de99 [ 955.268910][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 955.276865][ C1] RBP: 00007fe799233eaf R08: 0000000000000000 R09: 0000000000000000 [ 955.284820][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.292779][ C1] R13: 00007fe799426218 R14: 00007fe799426180 R15: 00007ffc05f1da18 [ 955.300749][ C1]