last executing test programs: 21.16884744s ago: executing program 3 (id=828): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000406a054ffe00000000000109022400010000200b090400000203000100092107007c012228000905810328", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64=0x0], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x45, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ebb8a5637669"}, {0x5, 0x24, 0x0, 0xcfe5}, {0xd, 0x24, 0xf, 0x1, 0xda6a, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@dmm={0x7, 0x24, 0x14, 0xd72, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xbd, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x630, 0x72, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0xa, 0x6}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x15, 0x5, 0x3, 0x40, 0x6}, 0x34, &(0x7f0000000240)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "764af5280ba98a84569c68c2ed6142fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fd8ebe9accf9cf95ca0098231049c9c4"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0xd, 0x5}]}, 0x1, [{0x68, &(0x7f00000002c0)=@string={0x68, 0x3, "b9af2d4a669d2b228639fb62e7d0884d6037fd56dcfe897ddfffd89e111c2d077c5c7d95eb66d976b079e4a424bfe88787101d7b0629d8ce3c17bd49f3e1d1252b54602e7727b3e146dd3c693af7cd08cb16bacf6a4b86f662d2c66c16051987010d569f3e6d"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000020c0)={0xf000000, 0x4, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002080)={0x990afe, 0xb508, '\x00', @p_u16=0x0}}) syz_usb_connect(0x2, 0x64, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x80) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000340)={0x0, 0x8006605, 0x10000, 0x1, 0x30}, &(0x7f0000000440)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="203128000000280af17d3816fbbc787a4d4cdbb387f10127ba47b53db3"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19.030381401s ago: executing program 3 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xc, 0x8f, 0xd, 0x2, 0x7, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x5, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xe, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, 0x0, &(0x7f00000000c0)) 18.777080473s ago: executing program 3 (id=837): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'veth1_to_hsr\x00', &(0x7f0000000a40)=@ethtool_eeprom={0xc, 0x5, 0x8}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="b50b00000000000000000000000000000000b4797c17734aa45349be26efc00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)={0x50, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x38, 0x1, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xab, 0x0, 0x0, @fd}, @typed={0x8, 0x43, 0x0, 0x0, @pid}, @nested={0x1c, 0x10a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x78, 0x0, 0x0, @str='[@(\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0xc6, "2525076db3fe0e356374c8e978e532c91ca090aae7e881af7cd8fc7485a94bfb54bd6763e01f9e77531eb280c8bc84129b2dcfc46970806185a51c6fc632cb06522a108b9e3f7c69f7b12d4912f94bd3434da5155f629ada1a6fc539bb541f0c094897c66ddf7a43e824e2d13c85c9b03e0e2003b82fece64a0bb322422875f52d2f0ddf04ab99cc017749be43f7e0a430083ab931461b6059aca759e38ca564062d61f47ba5ca15e7b2d1306d165ea7e57f196b14fd52b29a0768c3227f54812cf28ebd55fc"}, &(0x7f0000000780)=0xea) 18.322148802s ago: executing program 4 (id=840): r0 = socket$inet6(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17.401775186s ago: executing program 4 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="640f22100f00070fc719660f383ce10f330f090f01c566baf80cb878bf2e88ef66bafc0cb80b000000efb8010000000f01c10f79dc", 0x35}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r4 = msgget(0x2, 0x200) msgctl$IPC_RMID(r4, 0x0) msgget(0x0, 0x710) socket$inet6_tcp(0xa, 0x1, 0x0) msgget(0x2, 0x624) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000002640)=@vmx={0x10a, 0x0, 0x2080, {0x54000, 0xdddd1000, {0x2}, 0x0, 0x800}, {"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", "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"}}) msgget(0x1, 0x240) msgget(0x3, 0x606) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x40200, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000380)="61643838081eed900c0e7280ffbd8b248a9c1d80cddf598b1fe5fb504124d48cae7a209aca330cc798b75817018fa1b4eb925dd7712886ea5e1ae17ec64fcb2c82a703fa03aee60c7ab5d1a8e16d1f7520198ad884b1a8f028c8656cec063fe1ddb92dd2252f99b2c0a07bf4890e4aa4b233c85c92ac62cac80e3abb709822fe5006d6078b1dcfbbe8f7aa2613f918922c4906ddad56e40b4bcba1ee1559865a930079aa0349") r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x0, 0x1, 0x1c7c901124b15cf4}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, 0x0, 0x0) 16.829495851s ago: executing program 3 (id=847): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01020000000000000000670000000800", @ANYRES32=r1, @ANYBLOB="0800c3"], 0x30}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mlockall(0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x12, 0x8a, 0x9f, 0x10, 0x506, 0xdf, 0x53f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6e, 0x7, 0xa0, 0x2, "", [{{0x9, 0x4, 0x62, 0x8a, 0x0, 0xe, 0x7, 0x96, 0x6}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) msgget$private(0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x12, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16.13395239s ago: executing program 4 (id=849): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 15.937277898s ago: executing program 0 (id=851): r0 = socket$inet6(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 15.518956522s ago: executing program 4 (id=853): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a64763cce32ed0893e9d9e60763941b2780d27e8b72508ef72f267405fbe1c3a0901", 0x71}, {&(0x7f0000000480)="4dae2b061d1d82805117a13976b458415ed14a266dd1861c10d742c5d400455410f359ba50b447b02adaf73b35227f6d3a8104ce922d843a7b591ec2fb429a19bff81ec63e95bc7991d584b72d06dd8c794733bd38e1d8cfdbbe86ba2ff8d81e03c7b6c8e0269b0e307c530752cc42e8f26afd7a1277d5b1c49f2f78252d9639f85878af887cc83f10e283a1082c77e79bffd1d72fb5022b0a301dfbc204864f2e635950b9890ef3dcdf1aff3b5f11d8f36adaa2c3bbcadd542bcb138e9691a9d6bfcb608bec2d96fa101857991103b4df4702fc3c6a1481b24a1b4c807cf763f95282059ae91a74faa23bdd2f5beaa8d7dc8f3f"}], 0x4e}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0e090600000025bd7000fedbdf25040003130400000005000000000000000f000000000000000100000000001009"], 0x30}}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000280)=0xc) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffffb, 0x202000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) recvfrom$inet_nvme(r0, &(0x7f0000000580)=""/214, 0xd6, 0x10000, &(0x7f0000000680)=@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0xb0ffffff}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0x19, {0x19, 0x2, "83755023b58510f24e90ad09014f0bebfa73c0cb7e3971"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15.060972001s ago: executing program 3 (id=854): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x36080, 0x0) r1 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1bc6, 0x3, 0x59032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000001200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e00000000000000003000000000000000200000000000000030000000000000005000000000000000000000000000400010000007fe6000001000000000000000010000000000000080000000000000002000000000000000800000000000000010000000000000002000000ff070000810000000010000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="010001003f440000000000000600000000000000030000000000000031000000080000802e26f838ceacd3f7cda5582161a204010000000000000055b3d3238cc707b6ae3be9a7efdf3d18af086c5431b1ce65674a00000000000000bb"], 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0xc) socket(0x2, 0x80006, 0x8) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 15.052740309s ago: executing program 0 (id=855): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40f, 0x0, 0xa7}]}) syz_clone3(&(0x7f00000003c0)={0xac021080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) 14.834444499s ago: executing program 1 (id=857): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'veth1_to_hsr\x00', &(0x7f0000000a40)=@ethtool_eeprom={0xc, 0x5, 0x8}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="b50b00000000000000000000000000000000b4797c17734aa45349be26efc00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)={0x50, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x38, 0x1, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xab, 0x0, 0x0, @fd}, @typed={0x8, 0x43, 0x0, 0x0, @pid}, @nested={0x1c, 0x10a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x78, 0x0, 0x0, @str='[@(\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0xc6, "2525076db3fe0e356374c8e978e532c91ca090aae7e881af7cd8fc7485a94bfb54bd6763e01f9e77531eb280c8bc84129b2dcfc46970806185a51c6fc632cb06522a108b9e3f7c69f7b12d4912f94bd3434da5155f629ada1a6fc539bb541f0c094897c66ddf7a43e824e2d13c85c9b03e0e2003b82fece64a0bb322422875f52d2f0ddf04ab99cc017749be43f7e0a430083ab931461b6059aca759e38ca564062d61f47ba5ca15e7b2d1306d165ea7e57f196b14fd52b29a0768c3227f54812cf28ebd55fc"}, &(0x7f0000000780)=0xea) 14.133858763s ago: executing program 3 (id=859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6a4) 13.90077268s ago: executing program 0 (id=861): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000010000800000000000000000000000005ef100000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000c0900000000000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d33c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x700}, 0x3e8) 13.745065552s ago: executing program 0 (id=862): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) (async, rerun: 32) r2 = socket(0x2, 0x5, 0x0) (async) r3 = socket(0x23, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async, rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) (async, rerun: 64) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a0003a16000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_off}], [], 0x2c}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 64) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 64) 13.654687523s ago: executing program 1 (id=863): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xb0, &(0x7f00000003c0)='smaps\x00') r3 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x6, 0x2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYRESHEX, @ANYRES64=r6], 0x1518}, 0x1, 0x0, 0x0, 0x20044810}, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000002f00)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000380), 0x1, 0x0, 0x9}}], 0x1, 0x0) 13.635619122s ago: executing program 2 (id=864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @private0, 0x4}, 0x1c) listen(r0, 0x5) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x7, [0xe, 0x8000, 0x4, 0x2, 0x81, 0x7, 0xe]}, &(0x7f0000000040)=0x12) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xbb7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) (rerun: 64) 12.011059038s ago: executing program 2 (id=865): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x8, 0x0, &(0x7f0000000040)=[{0x3, 0x10}, {0x80, 0xc09}, {0x4, 0x2}, {0x5, 0x4f}, {0x230b, 0xe3}, {0x3, 0x4}, {0x4, 0x6}, {0x5}]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) 12.006870318s ago: executing program 4 (id=866): r0 = socket$inet6(0xa, 0x1, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x8}, 0x52) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x700}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 11.906641808s ago: executing program 1 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001200970200000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bad4f943162486dd6000737b00283a01fe040000000000000000000000000001fc0100000000000000000000000000008904907800000000000000000026fe80000000000000000000000000002900"/94], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1420002002060500000000000000000007000000bf0615b27bdb8cce1f2c1607f7802bce25a562b11cb5a6ed7412c6f7087183f3c59b6e7dcae18064f720752a9c01311c00b432af58fc4069e0d50a23b45200"/98], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xdc}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) 11.789022445s ago: executing program 2 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef7056ed03ebd71583c1760aeb7965d8bec30c099a1c3985c49c9d2ae08ed5b36d643c66746a7e415ef3a3d8c870350825011452a6479d5b572139cc98c1dd496f85fa676e3e738c8a8a3890000017954047836382025c69969d22de25a0474075dad0c1646ebccb5b7eb19bf1c19a25fd6cf7ced0b512adb3f169"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000080)=']', &(0x7f0000000740)=""/171, &(0x7f0000000040)="c5ff0000000000000098021b200bc336cd3578a38d2ebd16d3a09e05373c", &(0x7f0000000680)="f5cf67c5aff2d7502e64579345759e81fcd15b03e66c63c88a16c0018fb5ff794d4da465f6105323ae78c66f264f32443aa2ca08a828b55bdf90e4dc3dfd55e3f8970a8fa0def09d2ed4ac2b3a6deba128a88f5cdce55eed66a518512d8a8e3d62c1bc1b6e542cd9e475d7d14c88f743f9d1612d05cdccf42bfeefe1860314c245f5", 0x7, r4}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e1c, @multicast1}, 'wg1\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FIONREAD(r8, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0x15, 0x1, 0x0, 0xffffffff}, {0x54, 0xfe}, {0x6, 0x0, 0x0, 0xfff}]}) timerfd_create(0x0, 0x100000) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000500)={0x5, 0x0, [{0x0, 0x7, 0x0, 0x16d4, 0x2, 0xfffffffd, 0x7fffffff}, {0xa, 0x1000, 0x5, 0x100800, 0xfb, 0x2, 0xa}, {0x6, 0x3, 0x0, 0xffffffc0, 0xf6, 0x80000001, 0x8}, {0x40000000, 0xcce, 0x1, 0x1c000, 0x400, 0xe6, 0x8001}, {0x80000008, 0x3, 0x4, 0x9, 0x8001, 0x6d, 0x6}]}) 10.784974661s ago: executing program 4 (id=869): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x120, &(0x7f0000000600)=ANY=[@ANYBLOB="bc00004e4459a77a1409312feaaa5f70a214cafe1abb02f8eadff153fb64228e7267adf2a38f4fc3d8c9d7b45f0556ab50c567c8595bd0be7d923f9892fca3695420411726fa5c85735360473eb32a622c60b6a8f5f4d7e4e2ed98a28defe162f79f0e8b308b9afb9f972a23cc8fb23417bf7033e76032832f4bb8bee757a8d3c43fee5518ffdfb8e6ffc7d45c83aa9ebb99f7ebb3e7e3b4b6a87d8a73dda490b8bd38b234a49cba0190e89621df2234a196259917ca27587c0836073d82ae875900004e709549ddccd966342c097f868a303bc93973cceff8719ac241c4fae24afde6651fa490a1e3e190b8bae8f1a96d2201f395d47b49d3aa8120e415792caef9b031e3ac768aff854e524aed06939b7568995e17a064a0ffb6eb0800000046430ada97911509f4020b0ed5df338bb439b50db31357ed4de353acb4801468a8801eb7d2"]) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$pppl2tp(0x18, 0x1, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 10.504565811s ago: executing program 2 (id=870): io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) 10.445272072s ago: executing program 0 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000300000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 10.365502121s ago: executing program 2 (id=872): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, &(0x7f0000000500)=0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="432e5d2e61dd7c0f3535bc458e7db8b02f54a8dc45d77360fd678b103d4715ed3c9438419ac8613f2fd7d6ff2d8de584289fa37ee008958736fc38a8681a5c3956a87248e78f2dca43cfb7ace1", 0x4d}) r2 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x280000000000, &(0x7f0000000180)="4f9745fe9369804ff9c29a370b0394c216470e9532c1fdb611963471d34fd024463837a7ecc7b6d34ecabc3607bfdb888cb46b8f127915c22396ec5cc8e187da2be431269042152a18ab2ab8c602a0aae04f57f9897e7ae66197276f9eebf48091655f73233c00a6d85c17f0febeb7c8603b22a195f627c204ebeff6da14d90ceb9393d332f47324a91450bf461c89e441709519164b3d387c1c9f720c34cbf2770f9d838c27b1232fa51cb9b0a3d20f74361df9ed50aa519a07") ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x20000001) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x118, 0x30, 0xb, 0x0, 0x0, {}, [{0x104, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xb8, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x20000, 0x4, 0x400, 0x9}, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x15}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5a233e0e, 0x200, 0x2, 0x0, 0x4}, @broadcast, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x7, 0x7fffffff}, @rand_addr=0x64010101, @local, 0xff000000, 0x1}}]}, {0x17, 0x6, "037b02d7339b2c3d1fd7c0c93a38772f1f8c25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x118}}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x102) setns(r6, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f0007012bbd70000400000800000000000000800c00017dff130600", @ANYRES32=0x0, @ANYBLOB="0900028089e6261441000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x89, 0x0, 0x0, r0, 0x0}]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) 10.305608791s ago: executing program 0 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x260101, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e230003020000003d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000180)=0xffffffffffffffff) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x1d, 0x80000, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x7c75, 0x1}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x65, '\x00', r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xb}, {0xffff, 0x3}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0x1, 0x4000001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x9}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf8, 0xa, 0xfffffff7, 0x0, 0x3c, 0x1, 0x3}}, {0xa, 0x2, [0xfffc, 0x5d3f, 0x9]}}, {{0x1c, 0x1, {0x0, 0x7, 0x2, 0xfff, 0x1, 0xffffffb0, 0xa, 0x9}}, {0x16, 0x2, [0x4, 0x1000, 0x1, 0xff7f, 0x5, 0xe, 0xfffc, 0xd, 0x9]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8000, 0x3, 0x2, 0x0, 0x260c4968, 0x7}}, {0x12, 0x2, [0x12d, 0x4, 0xdc6, 0x8, 0x9, 0xf, 0x0]}}, {{0x1c, 0x1, {0x8, 0x9, 0x4, 0x3, 0x1, 0x795, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xb4, 0x2, 0x3, 0x0, 0x2, 0xe07d, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x2c7, 0x3]}}, {{0x1c, 0x1, {0x4, 0x8, 0x9, 0xffff, 0x0, 0x8, 0x400, 0x3}}, {0xa, 0x2, [0x5, 0x3, 0x6]}}, {{0x1c, 0x1, {0x0, 0x2, 0x3, 0xfffffffb, 0x2, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0xfff7, 0xf001, 0x1]}}, {{0x1c, 0x1, {0x2, 0x7, 0x4, 0x1, 0x2, 0x3, 0x9, 0x5}}, {0xe, 0x2, [0x3ff, 0x6, 0x9, 0x800, 0x7fff]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x240040a4}, 0x200040d0) socket$packet(0x11, 0x3, 0x300) 9.517927962s ago: executing program 2 (id=874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'veth1_to_hsr\x00', &(0x7f0000000a40)=@ethtool_eeprom={0xc, 0x5, 0x8}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="b50b00000000000000000000000000000000b4797c17734aa45349be26efc00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)={0x50, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x38, 0x1, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xab, 0x0, 0x0, @fd}, @typed={0x8, 0x43, 0x0, 0x0, @pid}, @nested={0x1c, 0x10a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x78, 0x0, 0x0, @str='[@(\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0xc6, "2525076db3fe0e356374c8e978e532c91ca090aae7e881af7cd8fc7485a94bfb54bd6763e01f9e77531eb280c8bc84129b2dcfc46970806185a51c6fc632cb06522a108b9e3f7c69f7b12d4912f94bd3434da5155f629ada1a6fc539bb541f0c094897c66ddf7a43e824e2d13c85c9b03e0e2003b82fece64a0bb322422875f52d2f0ddf04ab99cc017749be43f7e0a430083ab931461b6059aca759e38ca564062d61f47ba5ca15e7b2d1306d165ea7e57f196b14fd52b29a0768c3227f54812cf28ebd55fc"}, &(0x7f0000000780)=0xea) 8.800238873s ago: executing program 1 (id=875): socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r2, 0x406, r1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x51) utimensat(r3, &(0x7f0000000180)='\x00', &(0x7f0000000240), 0x100) chdir(&(0x7f0000000940)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) set_mempolicy(0x3, 0x0, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) sched_setattr(0x0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13", 0xd}], 0x1}}], 0x1, 0x20008000) recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r7, 0x1) 8.531645816s ago: executing program 1 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@empty, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00s{', 0x28, 0x3a, 0x1, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @private1, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0x29}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8d, 0xdea8, 0x400, 0x0, 0x0, "4acb8a41c8c563d00e1b2e88c485f5361dd0fdb7980aa6fdf78f8454301432aeec0b06169664d15fca9168207cb030c62d9b9dfec80600000000000000a100"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0xf) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r4, 0x0) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsetxattr$security_selinux(r1, &(0x7f00000001c0), 0x0, 0x0, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)="cf3a8ceff0cd687cd5aec3dd7a88a5f79b9208a9b1f11a278db4b3dfaa6e2b12e3e04bd3a214bed8cf0efbeb3464b2eb9f16e81d092bd479f0bde4e46feaa5a067d84f848fedb996c3ed7a904a8b852dfacebf07453b6eca1ad0039c0e7f62ac98765b3b739ff41a1f1cd9ee787d938ab35c46529891d594e8e517196f37e68c391bf4a014816d27c0fa54cbe90d2b44de5eb14e4cf9d7c005256d53ea70c21ee328a76ef61693c1a658eb3deb8b4135580877a0a0a95297acf9f1c1dbd9fec4fa1490e07db7f43cd93093804a96693a79b9a58765ca73c674b502bf4bbb8be46e", 0xe1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x7) 0s ago: executing program 1 (id=877): keyctl$link(0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220700, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0xcb}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "4a364ecd0ce257f218ca3145ca166fe65ad3c8d8"}, 0x15, 0x1) mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r4, 0x180000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000480)='syzkaller0\x00\xa40\xef\x96\xb4\xf9\x8b\xf64R\xb1X\x8a\x03\xbei\x06v\xaa\n\x8cn\v_e\xf3\xa6\x82\x15\xf0T\xee4\v\xe67,\xc0n\vw\x85L\xb6\xbc\x9c\v\x1d 3\xf7\x87\x95\xfe:n\xf8\xe5\xda\x1ex\th\x85\xa2\xc6\x04\xe7u\x95U\xff\xee!\x9e\x00\x90WrD,\xad\xf1$\xceB|\x8f', 0x800, &(0x7f0000000140)={@align=0x1ff, {0x0, 0x5, 0x5, 0x3}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x7}, {[0x2, 0xa9000000, 0x4, 0x5]}, 0x0, 0xc4, &(0x7f0000000200)=""/196}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1400 audit(1785056133.600:390): avc: denied { connect } for pid=6578 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.477886][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.523336][ T5713] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 128.554349][ T30] audit: type=1400 audit(1785056133.600:391): avc: denied { write } for pid=6578 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.978841][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 128.978912][ T30] audit: type=1400 audit(1785056134.170:393): avc: denied { ioctl } for pid=6584 comm="syz.1.183" path="socket:[11847]" dev="sockfs" ino=11847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.326360][ T30] audit: type=1400 audit(1785056134.550:394): avc: denied { bind } for pid=6584 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.418928][ T5713] snd_usb_pod 4-1:1.1: set_interface failed [ 129.487661][ T5713] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 129.545109][ T5713] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 129.619380][ T5713] usb 4-1: USB disconnect, device number 4 [ 130.835022][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.187'. [ 131.221208][ T6605] xt_hashlimit: size too large, truncated to 1048576 [ 133.218757][ T30] audit: type=1400 audit(1785056138.450:395): avc: denied { bind } for pid=6634 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.104363][ T30] audit: type=1400 audit(1785056139.320:396): avc: denied { read append } for pid=6634 comm="syz.0.198" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 134.210060][ T30] audit: type=1400 audit(1785056139.330:397): avc: denied { open } for pid=6634 comm="syz.0.198" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 134.285086][ T30] audit: type=1400 audit(1785056139.370:398): avc: denied { ioctl } for pid=6634 comm="syz.0.198" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 134.407436][ T30] audit: type=1400 audit(1785056139.630:399): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 136.067810][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 136.155187][ T6662] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 136.366864][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 136.599264][ T30] audit: type=1400 audit(1785056141.830:400): avc: denied { append } for pid=6663 comm="syz.2.199" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.926609][ T6674] xt_hashlimit: size too large, truncated to 1048576 [ 138.448341][ T30] audit: type=1400 audit(1785056143.670:401): avc: denied { write } for pid=6683 comm="syz.2.206" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 138.526721][ T30] audit: type=1400 audit(1785056143.670:402): avc: denied { open } for pid=6683 comm="syz.2.206" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 138.596775][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 140.187228][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.213'. [ 140.758433][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 141.376574][ T6724] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 143.093155][ T5714] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.611761][ T30] audit: type=1400 audit(1785056148.840:403): avc: denied { connect } for pid=6739 comm="syz.4.222" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.649731][ T30] audit: type=1400 audit(1785056148.870:404): avc: denied { write } for pid=6739 comm="syz.4.222" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.781292][ T5714] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 143.817985][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.864032][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.877434][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.897779][ T5714] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.997891][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.228548][ T5714] usb 4-1: config 0 descriptor?? [ 144.978063][ T5714] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 144.989673][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.066746][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.105827][ T5714] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 146.293146][ T5714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.425954][ T30] audit: type=1400 audit(1785056151.650:405): avc: denied { read } for pid=6776 comm="syz.2.231" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.471250][ T5714] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 146.487666][ T30] audit: type=1400 audit(1785056151.650:406): avc: denied { open } for pid=6776 comm="syz.2.231" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.520497][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.552966][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.574009][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.581369][ T30] audit: type=1400 audit(1785056151.750:407): avc: denied { create } for pid=6776 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.632803][ T5714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.637824][ T30] audit: type=1400 audit(1785056151.750:408): avc: denied { bind } for pid=6776 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.674792][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.679543][ T30] audit: type=1400 audit(1785056151.780:409): avc: denied { write } for pid=6776 comm="syz.2.231" path="socket:[12921]" dev="sockfs" ino=12921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.704876][ T5714] usb 2-1: config 0 descriptor?? [ 146.709208][ T30] audit: type=1400 audit(1785056151.780:410): avc: denied { ioctl } for pid=6776 comm="syz.2.231" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.867743][ T5744] usb 4-1: USB disconnect, device number 5 [ 147.603092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.889793][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 148.181557][ T5714] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 148.255212][ T5714] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.674688][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.715348][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.591184][ T5744] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 150.193137][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.207592][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 150.483238][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 150.490304][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.499463][ T5706] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 150.509381][ T5706] usb 3-1: config 9 has no interface number 0 [ 150.568608][ T5706] usb 3-1: config 9 interface 57 has no altsetting 0 [ 150.625702][ T5706] usb 3-1: string descriptor 0 read error: -22 [ 150.670278][ T5706] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 150.757475][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.792797][ T6825] 9pnet_virtio: no channels available for device syz [ 151.370280][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 152.016136][ T5714] usb 2-1: USB disconnect, device number 5 [ 152.199521][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 152.551820][ T5706] video4linux radio48: keene_cmd_set failed (-71) [ 152.558369][ T5706] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 152.579751][ T5706] usb 3-1: USB disconnect, device number 3 [ 153.049078][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 153.334218][ T6846] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 153.706583][ T30] audit: type=1400 audit(1785056158.930:411): avc: denied { create } for pid=6848 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.830848][ T30] audit: type=1400 audit(1785056159.060:412): avc: denied { read write } for pid=6856 comm="syz.1.251" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 153.861800][ T5706] kernel write not supported for file /uhid (pid: 5706 comm: kworker/0:3) [ 153.861813][ T5714] kernel read not supported for file /video9 (pid: 5714 comm: kworker/1:5) [ 153.880196][ T30] audit: type=1400 audit(1785056159.060:413): avc: denied { open } for pid=6856 comm="syz.1.251" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.083414][ T5744] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.131562][ T6863] No source specified [ 154.166262][ T30] audit: type=1400 audit(1785056159.400:414): avc: denied { ioctl } for pid=6862 comm="syz.1.253" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.810070][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 154.823791][ T5744] usb 5-1: Using ep0 maxpacket: 8 [ 154.834955][ T5744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.847182][ T5744] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.888867][ T5744] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 154.901601][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.918868][ T5744] usb 5-1: Product: syz [ 154.929434][ T5744] usb 5-1: Manufacturer: syz [ 154.940982][ T5744] usb 5-1: SerialNumber: syz [ 154.956125][ T5744] usb 5-1: config 0 descriptor?? [ 156.091249][ T30] audit: type=1400 audit(1785056161.290:415): avc: denied { bind } for pid=6848 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.404710][ T30] audit: type=1400 audit(1785056161.290:416): avc: denied { create } for pid=6848 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 157.499821][ T5736] usb 5-1: USB disconnect, device number 10 [ 158.684473][ T5722] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.271865][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 159.313213][ T5722] usb 2-1: device descriptor read/64, error -71 [ 159.583567][ T6913] hub 8-0:1.0: USB hub found [ 159.588964][ T6913] hub 8-0:1.0: 1 port detected [ 160.063423][ T30] audit: type=1400 audit(1785056164.790:417): avc: denied { write } for pid=6910 comm="syz.0.268" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 160.119765][ T5722] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.277975][ T5722] usb 2-1: device descriptor read/64, error -71 [ 160.448752][ T5722] usb usb2-port1: attempt power cycle [ 160.544557][ T6918] tmpfs: Bad value for 'size' [ 161.709548][ T30] audit: type=1400 audit(1785056166.030:418): avc: denied { ioctl } for pid=6917 comm="syz.2.263" path="socket:[14057]" dev="sockfs" ino=14057 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.743218][ T5722] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.817285][ T5722] usb 2-1: device not accepting address 8, error -71 [ 162.867640][ T30] audit: type=1400 audit(1785056167.270:419): avc: denied { create } for pid=6917 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.936897][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 163.211014][ T30] audit: type=1400 audit(1785056167.280:420): avc: denied { setopt } for pid=6917 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.325207][ T30] audit: type=1400 audit(1785056168.230:421): avc: denied { create } for pid=6925 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.350205][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 163.373186][ T30] audit: type=1400 audit(1785056168.580:422): avc: denied { bind } for pid=6925 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.440770][ T30] audit: type=1400 audit(1785056168.580:423): avc: denied { setopt } for pid=6925 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.483189][ T30] audit: type=1400 audit(1785056168.580:424): avc: denied { write } for pid=6925 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.518426][ T30] audit: type=1400 audit(1785056168.710:425): avc: denied { getopt } for pid=6930 comm="syz.0.274" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.688191][ T30] audit: type=1400 audit(1785056168.920:426): avc: denied { create } for pid=6935 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.638009][ T6956] macvlan0: entered promiscuous mode [ 164.843352][ T5722] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 165.024018][ T5722] usb 3-1: device descriptor read/64, error -71 [ 165.170683][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.279'. [ 165.493162][ T5722] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 166.613420][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 166.613452][ T30] audit: type=1400 audit(1785056171.780:430): avc: denied { unmount } for pid=6967 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.093155][ T5722] usb 3-1: device descriptor read/64, error -71 [ 167.228502][ T5722] usb usb3-port1: attempt power cycle [ 167.444734][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 167.951472][ T30] audit: type=1400 audit(1785056173.180:431): avc: denied { connect } for pid=6981 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.065609][ T30] audit: type=1400 audit(1785056173.300:432): avc: denied { read write } for pid=6989 comm="syz.2.286" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.205355][ T30] audit: type=1400 audit(1785056173.300:433): avc: denied { open } for pid=6989 comm="syz.2.286" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.766771][ T30] audit: type=1400 audit(1785056173.330:434): avc: denied { map } for pid=6989 comm="syz.2.286" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.856468][ T30] audit: type=1400 audit(1785056173.330:435): avc: denied { execute } for pid=6989 comm="syz.2.286" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.173822][ T5744] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.255242][ T30] audit: type=1400 audit(1785056174.370:436): avc: denied { connect } for pid=6996 comm="syz.3.289" lport=35735 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 169.393127][ T5744] usb 3-1: Using ep0 maxpacket: 8 [ 169.406300][ T5744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.439428][ T5744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.480945][ T5744] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 169.501723][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.533828][ T5744] usb 3-1: Product: syz [ 169.550085][ T5744] usb 3-1: Manufacturer: syz [ 169.572994][ T5744] usb 3-1: SerialNumber: syz [ 169.706474][ T7006] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.829659][ T30] audit: type=1400 audit(1785056175.060:437): avc: denied { connect } for pid=7004 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.835666][ T5744] usb 3-1: unit 6 not found! [ 169.942099][ T30] audit: type=1400 audit(1785056175.090:438): avc: denied { getopt } for pid=7004 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.117423][ T5744] usb 3-1: USB disconnect, device number 7 [ 170.151558][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 170.218435][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.280483][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 170.350306][ T30] audit: type=1400 audit(1785056175.580:439): avc: denied { connect } for pid=7016 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.962113][ T7038] xt_hashlimit: size too large, truncated to 1048576 [ 173.543371][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 174.344758][ T30] audit: type=1400 audit(1785056179.570:440): avc: denied { firmware_load } for pid=7049 comm="syz.3.304" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 175.141155][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 175.148305][ T7050] syz.3.304 (7050) used greatest stack depth: 19768 bytes left [ 175.168873][ T30] audit: type=1400 audit(1785056180.390:441): avc: denied { read write } for pid=7060 comm="syz.0.309" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.251563][ T30] audit: type=1400 audit(1785056180.390:442): avc: denied { open } for pid=7060 comm="syz.0.309" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.364915][ T7066] netlink: zone id is out of range [ 175.366425][ T30] audit: type=1400 audit(1785056180.400:443): avc: denied { ioctl } for pid=7060 comm="syz.0.309" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.409186][ T7066] netlink: zone id is out of range [ 175.542218][ T30] audit: type=1400 audit(1785056180.510:444): avc: denied { getopt } for pid=7060 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.570324][ T7066] netlink: zone id is out of range [ 175.787450][ T7066] netlink: del zone limit has 4 unknown bytes [ 175.795076][ T7071] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 175.824841][ T7071] netlink: 'syz.0.311': attribute type 13 has an invalid length. [ 175.860018][ T30] audit: type=1400 audit(1785056180.830:445): avc: denied { create } for pid=7070 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 175.903385][ T30] audit: type=1400 audit(1785056181.030:446): avc: denied { getopt } for pid=7070 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.463403][ T30] audit: type=1400 audit(1785056181.690:447): avc: denied { mounton } for pid=7078 comm="syz.4.312" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 176.490120][ T7079] Invalid source name [ 177.626325][ T30] audit: type=1400 audit(1785056182.860:448): avc: denied { name_bind } for pid=7083 comm="syz.3.313" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 177.952488][ T7092] xt_hashlimit: size too large, truncated to 1048576 [ 178.806628][ T30] audit: type=1400 audit(1785056184.040:449): avc: denied { read append } for pid=7099 comm="syz.0.317" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.418887][ T30] audit: type=1400 audit(1785056184.040:450): avc: denied { open } for pid=7099 comm="syz.0.317" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.563166][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.566685][ T7104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 179.762941][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 179.805339][ T24] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 179.837896][ T24] usb 1-1: Product: syz [ 179.867953][ T24] usb 1-1: SerialNumber: syz [ 179.910047][ T24] usb 1-1: config 0 descriptor?? [ 180.996455][ T24] hso 1-1:0.0: Failed to find BULK eps [ 181.074890][ T7119] netlink: zone id is out of range [ 181.113978][ T7119] netlink: zone id is out of range [ 181.148701][ T7119] netlink: zone id is out of range [ 181.224181][ T7119] netlink: del zone limit has 4 unknown bytes [ 181.283274][ T30] audit: type=1400 audit(1785056186.520:451): avc: denied { ioctl } for pid=7099 comm="syz.0.317" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.724161][ T5744] usb 1-1: USB disconnect, device number 3 [ 182.170883][ T7130] FAULT_INJECTION: forcing a failure. [ 182.170883][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.216905][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.2.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.216923][ T7130] Tainted: [L]=SOFTLOCKUP [ 182.216927][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.216933][ T7130] Call Trace: [ 182.216937][ T7130] [ 182.216941][ T7130] dump_stack_lvl+0x100/0x190 [ 182.216959][ T7130] should_fail_ex.cold+0x5/0xa [ 182.216973][ T7130] _copy_from_iter+0x1f4/0x1690 [ 182.216989][ T7130] ? __asan_memset+0x23/0x50 [ 182.217001][ T7130] ? __pfx__copy_from_iter+0x10/0x10 [ 182.217015][ T7130] ? alloc_pages_noprof+0xf9/0x160 [ 182.217031][ T7130] ? skb_page_frag_refill+0x309/0x4b0 [ 182.217043][ T7130] ? sk_page_frag_refill+0x6c/0x340 [ 182.217055][ T7130] tcp_sendmsg_locked+0xc8c/0x44d0 [ 182.217077][ T7130] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 182.217092][ T7130] ? do_raw_spin_lock+0x128/0x260 [ 182.217108][ T7130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.217125][ T7130] ? __local_bh_enable_ip+0x9e/0x120 [ 182.217141][ T7130] tcp_sendmsg+0x2e/0x50 [ 182.217154][ T7130] ? __pfx_tcp_sendmsg+0x10/0x10 [ 182.217167][ T7130] inet_sendmsg+0xb9/0x140 [ 182.217181][ T7130] __sys_sendto+0x453/0x4e0 [ 182.217191][ T7130] ? __pfx_inet_sendmsg+0x10/0x10 [ 182.217204][ T7130] ? __pfx___sys_sendto+0x10/0x10 [ 182.217219][ T7130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.217237][ T7130] ? ksys_write+0x1ac/0x250 [ 182.217253][ T7130] ? __pfx_ksys_write+0x10/0x10 [ 182.217270][ T7130] __x64_sys_sendto+0xe0/0x1c0 [ 182.217281][ T7130] ? do_syscall_64+0x90/0x870 [ 182.217293][ T7130] ? lockdep_hardirqs_on+0x78/0x100 [ 182.217303][ T7130] do_syscall_64+0x115/0x870 [ 182.217314][ T7130] ? clear_bhb_loop+0x40/0x90 [ 182.217326][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.217337][ T7130] RIP: 0033:0x7f568059de99 [ 182.217346][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.217356][ T7130] RSP: 002b:00007f5681383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 182.217367][ T7130] RAX: ffffffffffffffda RBX: 00007f5680825fa0 RCX: 00007f568059de99 [ 182.217373][ T7130] RDX: 0000000000000046 RSI: 0000200000000300 RDI: 0000000000000003 [ 182.217380][ T7130] RBP: 00007f5681383090 R08: 0000000000000000 R09: 0000000000000000 [ 182.217386][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.217392][ T7130] R13: 00007f5680826038 R14: 00007f5680825fa0 R15: 00007ffd61279498 [ 182.217405][ T7130] [ 182.705110][ T7134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.327'. [ 182.861167][ T30] audit: type=1400 audit(1785056188.090:452): avc: denied { create } for pid=7133 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.589250][ T7149] lo: Caught tx_queue_len zero misconfig [ 184.753178][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.063253][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 185.168169][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.248962][ T24] usb 4-1: config 0 has no interface number 0 [ 185.375128][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.425349][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.480308][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 185.527111][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.720956][ T24] usb 4-1: config 0 descriptor?? [ 186.174469][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 186.304188][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 186.432320][ T24] usb 4-1: USB disconnect, device number 6 [ 186.597436][ T30] audit: type=1400 audit(1785056191.730:453): avc: denied { connect } for pid=7164 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.920792][ T30] audit: type=1400 audit(1785056192.150:454): avc: denied { create } for pid=7181 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 186.973609][ T30] audit: type=1400 audit(1785056192.150:455): avc: denied { ioctl } for pid=7181 comm="syz.3.340" path="socket:[15582]" dev="sockfs" ino=15582 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.034481][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 187.826263][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.343'. [ 187.849687][ T30] audit: type=1400 audit(1785056193.080:456): avc: denied { ioctl } for pid=7195 comm="syz.1.343" path="socket:[15613]" dev="sockfs" ino=15613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.053170][ T30] audit: type=1400 audit(1785056193.140:457): avc: denied { mount } for pid=7197 comm="syz.4.344" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 188.658714][ T7198] smpboot: CPU 1 is now offline [ 188.669219][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.678867][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.735487][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 188.907375][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 188.990266][ T5736] IPVS: starting estimator thread 0... [ 189.019793][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.074912][ T7215] netlink: 164 bytes leftover after parsing attributes in process `syz.1.347'. [ 189.090083][ T7210] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 189.133359][ T7216] IPVS: using max 79 ests per chain, 189600 per kthread [ 189.165657][ T7215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'. [ 189.414471][ T30] audit: type=1326 audit(1785056194.650:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.2.352" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568059de99 code=0x0 [ 189.672439][ T7234] fuse: fd is not a fuse device [ 190.413247][ T5808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 190.477075][ T7243] FAULT_INJECTION: forcing a failure. [ 190.477075][ T7243] name failslab, interval 1, probability 0, space 0, times 1 [ 190.534803][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.0.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.534821][ T7243] Tainted: [L]=SOFTLOCKUP [ 190.534825][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.534831][ T7243] Call Trace: [ 190.534835][ T7243] [ 190.534839][ T7243] dump_stack_lvl+0x100/0x190 [ 190.534856][ T7243] should_fail_ex.cold+0x5/0xa [ 190.534870][ T7243] should_failslab+0xc2/0x120 [ 190.534884][ T7243] __kmalloc_noprof+0xfc/0x820 [ 190.534895][ T7243] ? rcu_is_watching+0x12/0xc0 [ 190.534911][ T7243] ? tomoyo_realpath_from_path+0xb6/0x690 [ 190.534924][ T7243] tomoyo_realpath_from_path+0xb6/0x690 [ 190.534937][ T7243] tomoyo_path_number_perm+0x23c/0x580 [ 190.534952][ T7243] ? tomoyo_path_number_perm+0x22e/0x580 [ 190.534967][ T7243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.534995][ T7243] ? find_held_lock+0x2b/0x80 [ 190.535011][ T7243] ? __fget_files+0x215/0x3d0 [ 190.535021][ T7243] ? hook_file_ioctl_common+0x140/0x440 [ 190.535032][ T7243] ? __fget_files+0x215/0x3d0 [ 190.535044][ T7243] ? __fget_files+0x21f/0x3d0 [ 190.535057][ T7243] security_file_ioctl+0xd3/0x230 [ 190.535074][ T7243] __x64_sys_ioctl+0xb7/0x210 [ 190.535090][ T7243] do_syscall_64+0x115/0x870 [ 190.535102][ T7243] ? clear_bhb_loop+0x40/0x90 [ 190.535114][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.535125][ T7243] RIP: 0033:0x7f197619de99 [ 190.535134][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.535144][ T7243] RSP: 002b:00007f197710a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.535155][ T7243] RAX: ffffffffffffffda RBX: 00007f1976425fa0 RCX: 00007f197619de99 [ 190.535162][ T7243] RDX: 0000200000000040 RSI: 00000000c048aeca RDI: 0000000000000005 [ 190.535168][ T7243] RBP: 00007f197710a090 R08: 0000000000000000 R09: 0000000000000000 [ 190.535174][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.535180][ T7243] R13: 00007f1976426038 R14: 00007f1976425fa0 R15: 00007ffd9c4fb748 [ 190.535193][ T7243] [ 190.535198][ T7243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.813893][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 190.830817][ T30] audit: type=1400 audit(1785056196.010:459): avc: denied { wake_alarm } for pid=7225 comm="syz.2.352" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.915431][ T5808] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.949269][ T5808] usb 4-1: config 0 has no interface number 0 [ 190.971660][ T5808] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.025123][ T5808] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.064651][ T5808] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 191.102661][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.171370][ T5808] usb 4-1: config 0 descriptor?? [ 192.187773][ T5808] usbhid 4-1:0.1: can't add hid device: -71 [ 192.193883][ T5808] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 192.208936][ T5808] usb 4-1: USB disconnect, device number 7 [ 193.013199][ T5736] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 193.264330][ T5736] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.271020][ T5736] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 193.285749][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.441659][ T5736] usb 1-1: config 0 descriptor?? [ 193.526797][ T30] audit: type=1400 audit(1785056198.760:460): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 193.665109][ T5736] hid-rmi 0003:0461:4E72.0009: unknown main item tag 0x2 [ 193.691018][ T5736] hid-rmi 0003:0461:4E72.0009: global environment stack underflow [ 193.727342][ T5736] hid-rmi 0003:0461:4E72.0009: item 0 2 1 11 parsing failed [ 193.757847][ T5736] hid-rmi 0003:0461:4E72.0009: parse failed [ 193.795666][ T5736] hid-rmi 0003:0461:4E72.0009: probe with driver hid-rmi failed with error -22 [ 193.859226][ T30] audit: type=1400 audit(1785056199.090:461): avc: denied { write } for pid=7282 comm="syz.3.367" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.894832][ T5736] usb 1-1: USB disconnect, device number 4 [ 194.159789][ T30] audit: type=1326 audit(1785056199.390:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.4.370" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff079de99 code=0x0 [ 195.029651][ T5722] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.225619][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 195.247730][ T5722] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 195.286824][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.367260][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.417068][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.548335][ T5722] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.239961][ T7324] netlink: 260 bytes leftover after parsing attributes in process `syz.1.379'. [ 196.253531][ T30] audit: type=1400 audit(1785056201.470:463): avc: denied { read } for pid=7320 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.297959][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.399283][ T5722] usb 4-1: config 0 descriptor?? [ 196.426932][ T30] audit: type=1400 audit(1785056201.470:464): avc: denied { remount } for pid=7320 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.652917][ T5722] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 198.643113][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.672536][ T5722] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 199.035172][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.441116][ T30] audit: type=1400 audit(1785056204.670:465): avc: denied { getopt } for pid=7336 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.844773][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 200.076530][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 200.406054][ T30] audit: type=1400 audit(1785056205.640:466): avc: denied { watch_reads } for pid=7367 comm="syz.1.392" path="/80" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.570399][ T5722] usb 4-1: USB disconnect, device number 8 [ 200.743304][ T5736] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.905135][ T5736] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 200.926468][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.965592][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.011325][ T5736] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.140671][ T5736] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.161867][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.181585][ T5736] usb 3-1: config 0 descriptor?? [ 201.816975][ T30] audit: type=1400 audit(1785056207.050:467): avc: denied { create } for pid=7388 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.985282][ T30] audit: type=1400 audit(1785056207.210:468): avc: denied { write } for pid=7388 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.147897][ T5736] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 203.057329][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.077226][ T5736] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.153795][ T7400] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 203.162795][ T7399] ubi0: attaching mtd0 [ 203.168142][ T7399] ubi0: scanning is finished [ 203.172712][ T7399] ubi0: empty MTD device detected [ 203.184372][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.231223][ T7399] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 203.238730][ T7399] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 203.245929][ T7399] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 203.252833][ T7399] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 203.260622][ T7399] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 203.267393][ T7399] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 203.275376][ T7399] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3473416032 [ 203.285465][ T7399] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 203.358544][ T7403] ubi0: background thread "ubi_bgt0d" started, PID 7403 [ 203.373956][ T7398] zonefs (nullb0) ERROR: Not a zoned block device [ 205.546751][ T5736] usb 3-1: USB disconnect, device number 8 [ 206.353134][ T5736] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.553310][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 206.588003][ T5736] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.690196][ T5736] usb 5-1: config 0 has no interface number 0 [ 206.702702][ T30] audit: type=1400 audit(1785056211.930:469): avc: denied { bind } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.859483][ T5736] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.892881][ T5736] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.910397][ T30] audit: type=1400 audit(1785056211.960:470): avc: denied { setopt } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.931445][ T5722] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.944258][ T5736] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 206.984554][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.003672][ T30] audit: type=1400 audit(1785056211.960:471): avc: denied { listen } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.037383][ T5736] usb 5-1: config 0 descriptor?? [ 207.103614][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 207.113729][ T30] audit: type=1400 audit(1785056211.960:472): avc: denied { connect } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.147833][ T5722] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 207.162835][ T5722] usb 3-1: config 0 has no interface number 0 [ 207.185744][ T5722] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.198090][ T30] audit: type=1400 audit(1785056212.110:473): avc: denied { accept } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.247711][ T5722] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.309033][ T30] audit: type=1400 audit(1785056212.110:474): avc: denied { write } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.339484][ T5722] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 207.382013][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 207.493555][ T5722] usb 3-1: Product: syz [ 207.502533][ T30] audit: type=1400 audit(1785056212.180:475): avc: denied { read } for pid=7435 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.534694][ T5722] usb 3-1: SerialNumber: syz [ 207.546510][ T7448] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 207.566771][ T5722] usb 3-1: config 0 descriptor?? [ 207.583674][ T5808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.595555][ T5722] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 207.622803][ T30] audit: type=1400 audit(1785056212.450:476): avc: denied { module_request } for pid=7442 comm="syz.0.414" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.647404][ T5722] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 207.678454][ T7448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.688021][ T5736] uclogic 0003:28BD:0094.000C: pen parameters not found [ 207.714243][ T5736] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 207.735330][ T30] audit: type=1400 audit(1785056212.780:477): avc: denied { ioctl } for pid=7447 comm="syz.3.415" path="socket:[16935]" dev="sockfs" ino=16935 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.787843][ T7453] Illegal XDP return value 4294967294 on prog (id 45) dev N/A, expect packet loss! [ 207.803814][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 207.810585][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 207.855711][ T5808] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.885331][ T5808] usb 1-1: config 0 has no interface number 0 [ 207.908021][ T30] audit: type=1400 audit(1785056212.940:478): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=2900 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.947037][ T5808] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.961875][ T5722] usb 5-1: USB disconnect, device number 11 [ 207.995395][ T7448] gretap1: entered promiscuous mode [ 208.012724][ T5808] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.025860][ T5721] usb 3-1: USB disconnect, device number 9 [ 208.057369][ T5721] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 208.070448][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.081584][ T7448] bond1: (slave gretap1): making interface the new active one [ 208.102252][ T5808] usb 1-1: config 0 descriptor?? [ 208.116555][ T7448] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 208.180986][ T5808] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 208.208174][ T7454] macvlan2: entered promiscuous mode [ 208.227715][ T7454] macvlan2: entered allmulticast mode [ 208.240208][ T7454] bond1: entered promiscuous mode [ 208.255800][ T7454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.272061][ T7454] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 208.307248][ T7454] bond1: left promiscuous mode [ 208.540376][ T5808] usb 1-1: USB disconnect, device number 5 [ 208.540416][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 208.739456][ T7463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.798080][ T7463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.885352][ T7463] bond0 (unregistering): Released all slaves [ 209.493463][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 209.709469][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 210.235225][ T7516] syzkaller0: entered promiscuous mode [ 210.274544][ T7516] syzkaller0: entered allmulticast mode [ 210.280964][ T7522] xt_hashlimit: size too large, truncated to 1048576 [ 210.306934][ T7517] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 211.894334][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 211.894347][ T30] audit: type=1400 audit(1785056216.990:487): avc: denied { listen } for pid=7533 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.928344][ T5722] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 213.105791][ T5722] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 213.134998][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.175668][ T5722] usb 4-1: config 0 has no interfaces? [ 213.197951][ T5722] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 213.236857][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.272324][ T5722] usb 4-1: config 0 descriptor?? [ 213.891600][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.164033][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 214.185256][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 214.357451][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 214.403419][ T30] audit: type=1400 audit(1785056219.640:488): avc: denied { mount } for pid=7563 comm="syz.2.445" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 214.549402][ T30] audit: type=1400 audit(1785056219.780:489): avc: denied { ioctl } for pid=7563 comm="syz.2.445" path="socket:[17377]" dev="sockfs" ino=17377 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.586206][ T7571] netlink: zone id is out of range [ 214.598995][ T7571] netlink: zone id is out of range [ 214.608862][ T7571] netlink: zone id is out of range [ 214.620118][ T7571] netlink: del zone limit has 4 unknown bytes [ 214.924422][ T5800] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.935939][ T7575] netlink: zone id is out of range [ 214.941208][ T7575] netlink: zone id is out of range [ 214.946823][ T7575] netlink: zone id is out of range [ 214.952418][ T7575] netlink: del zone limit has 4 unknown bytes [ 215.083270][ T5800] usb 5-1: Using ep0 maxpacket: 32 [ 215.092988][ T5800] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 215.111746][ T30] audit: type=1400 audit(1785056220.340:490): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 215.139187][ T5800] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 215.175780][ T5800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.653758][ T5721] usb 4-1: USB disconnect, device number 9 [ 216.090165][ T5800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 216.185099][ T5800] usb 5-1: config 1 has no interface number 0 [ 216.221241][ T5800] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 216.328644][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.357795][ T30] audit: type=1400 audit(1785056221.590:491): avc: denied { bind } for pid=7587 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.127983][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 217.266280][ T5800] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 217.281873][ T7588] Invalid source name [ 217.286617][ T7588] UBIFS error (pid: 7588): cannot open "/dev/sequencer", error -22 [ 217.399629][ T5800] snd_usb_pod 5-1:1.1: set_interface failed [ 217.413880][ T30] audit: type=1400 audit(1785056221.590:492): avc: denied { name_bind } for pid=7587 comm="syz.0.454" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 217.598724][ T5800] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 218.597903][ T30] audit: type=1400 audit(1785056221.590:493): avc: denied { node_bind } for pid=7587 comm="syz.0.454" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 218.623256][ T5800] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 218.708242][ T5800] usb 5-1: USB disconnect, device number 12 [ 218.810631][ T30] audit: type=1400 audit(1785056223.810:494): avc: denied { ioctl } for pid=7600 comm="syz.0.457" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x560a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 218.866685][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 219.099763][ T30] audit: type=1400 audit(1785056223.880:495): avc: denied { setopt } for pid=7600 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.128570][ T7620] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 219.268675][ T30] audit: type=1400 audit(1785056223.880:496): avc: denied { bind } for pid=7600 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.292507][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.404847][ T7629] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 219.442143][ T30] audit: type=1400 audit(1785056223.890:497): avc: denied { sqpoll } for pid=7600 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 219.604577][ T7629] bond1: entered allmulticast mode [ 219.610820][ T30] audit: type=1400 audit(1785056224.230:498): avc: denied { ioctl } for pid=7609 comm="syz.3.460" path="uts:[4026532789]" dev="nsfs" ino=4026532789 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 219.675421][ T7632] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 219.696002][ T30] audit: type=1400 audit(1785056224.280:499): avc: denied { read } for pid=7619 comm="syz.4.464" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 219.720844][ T7638] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 219.754088][ T7628] tipc: Started in network mode [ 219.759461][ T7628] tipc: Node identity ac14140f, cluster identity 4711 [ 219.766933][ T7628] tipc: New replicast peer: 172.30.0.1 [ 219.772592][ T7628] tipc: Enabled bearer , priority 10 [ 219.778839][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 219.843144][ T30] audit: type=1400 audit(1785056224.280:500): avc: denied { open } for pid=7619 comm="syz.4.464" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 219.929309][ T30] audit: type=1400 audit(1785056224.280:501): avc: denied { ioctl } for pid=7619 comm="syz.4.464" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.039159][ T7647] FAULT_INJECTION: forcing a failure. [ 220.039159][ T7647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.066876][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.4.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.066895][ T7647] Tainted: [L]=SOFTLOCKUP [ 220.066899][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.066905][ T7647] Call Trace: [ 220.066910][ T7647] [ 220.066914][ T7647] dump_stack_lvl+0x100/0x190 [ 220.066932][ T7647] should_fail_ex.cold+0x5/0xa [ 220.066946][ T7647] _copy_from_iter+0x1f4/0x1690 [ 220.066963][ T7647] ? _copy_from_iter+0x270/0x1690 [ 220.066977][ T7647] ? __pfx__copy_from_iter+0x10/0x10 [ 220.066993][ T7647] ? __pfx__copy_from_iter+0x10/0x10 [ 220.067020][ T7647] copy_page_from_iter+0x238/0x300 [ 220.067037][ T7647] skb_copy_datagram_from_iter+0x399/0x720 [ 220.067057][ T7647] tun_get_user+0x1889/0x3c20 [ 220.067073][ T7647] ? __pfx_tun_get_user+0x10/0x10 [ 220.067087][ T7647] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 220.067107][ T7647] ? find_held_lock+0x2b/0x80 [ 220.067123][ T7647] ? tun_get+0x191/0x370 [ 220.067138][ T7647] ? tun_get+0x191/0x370 [ 220.067157][ T7647] tun_chr_write_iter+0xdc/0x200 [ 220.067169][ T7647] vfs_write+0x6ac/0x1050 [ 220.067185][ T7647] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 220.067197][ T7647] ? __pfx_vfs_write+0x10/0x10 [ 220.067212][ T7647] ? find_held_lock+0x2b/0x80 [ 220.067237][ T7647] ksys_write+0x12a/0x250 [ 220.067253][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 220.067273][ T7647] do_syscall_64+0x115/0x870 [ 220.067284][ T7647] ? clear_bhb_loop+0x40/0x90 [ 220.067296][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.067307][ T7647] RIP: 0033:0x7f2ff075e6ce [ 220.067317][ T7647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.067328][ T7647] RSP: 002b:00007f2ff1596fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.067339][ T7647] RAX: ffffffffffffffda RBX: 00007f2ff15976c0 RCX: 00007f2ff075e6ce [ 220.067345][ T7647] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 220.067352][ T7647] RBP: 00007f2ff1597090 R08: 0000000000000000 R09: 0000000000000000 [ 220.067358][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.067364][ T7647] R13: 00007f2ff0a26038 R14: 00007f2ff0a25fa0 R15: 00007ffee18586e8 [ 220.067377][ T7647] [ 220.854660][ T5800] tipc: Node number set to 2886997007 [ 221.140953][ T7678] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 221.330125][ T7680] nvme_fabrics: missing parameter 'transport=%s' [ 221.336898][ T7680] nvme_fabrics: missing parameter 'nqn=%s' [ 222.932093][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 223.192385][ T7717] loop9: detected capacity change from 0 to 7 [ 223.213306][ T7717] Dev loop9: unable to read RDB block 7 [ 223.227340][ T7717] loop9: AHDI p1 [ 223.235466][ T7717] loop9: partition table partially beyond EOD, truncated [ 223.716241][ T7725] kvm: pic: non byte write [ 223.922535][ T7730] kAFS: unparsable volume name [ 224.608647][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 224.608658][ T30] audit: type=1400 audit(1785056229.840:507): avc: denied { write } for pid=7738 comm="syz.0.501" path="socket:[18322]" dev="sockfs" ino=18322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 224.892698][ T7741] block device autoloading is deprecated and will be removed. [ 224.910152][ T30] audit: type=1400 audit(1785056230.140:508): avc: denied { setopt } for pid=7756 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.064499][ T4928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.071145][ T5625] Bluetooth: hci5: command 0x1003 tx timeout [ 225.472118][ T7769] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 226.097612][ T30] audit: type=1400 audit(1785056231.330:509): avc: denied { map } for pid=7766 comm="syz.3.510" path="socket:[18551]" dev="sockfs" ino=18551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 227.120054][ T7797] binder: 7793:7797 ioctl c0306201 0 returned -14 [ 227.174902][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 227.212231][ T7795] syz.0.519 uses obsolete (PF_INET,SOCK_PACKET) [ 227.233832][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.518'. [ 228.519017][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 228.841953][ T30] audit: type=1400 audit(1785056234.070:510): avc: denied { create } for pid=7817 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 228.893917][ T7820] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ18446744073709551615H' [ 229.450406][ T7838] xt_hashlimit: size too large, truncated to 1048576 [ 230.233088][ T5722] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.246128][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.532'. [ 230.426067][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 230.445543][ T5722] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.477186][ T5722] usb 4-1: config 0 has no interface number 0 [ 230.501922][ T5722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 230.550713][ T30] audit: type=1400 audit(1785056235.780:511): avc: denied { read } for pid=7847 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.580692][ T5722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 230.621875][ T5722] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 230.662382][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.695488][ T5722] usb 4-1: config 0 descriptor?? [ 230.718008][ T7834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 231.029187][ T7858] xt_hashlimit: size too large, truncated to 1048576 [ 231.207964][ T30] audit: type=1400 audit(1785056236.440:512): avc: denied { connect } for pid=7862 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.343816][ T5722] uclogic 0003:28BD:0071.000D: pen parameters not found [ 231.386497][ T30] audit: type=1400 audit(1785056236.490:513): avc: denied { bind } for pid=7862 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.432823][ T5722] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 231.447182][ T7865] openvswitch: netlink: Key type 134 is out of range max 32 [ 232.531627][ T7882] geneve1: Caught tx_queue_len zero misconfig [ 232.646835][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.812001][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.345726][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 233.525975][ T7892] netlink: 'syz.4.544': attribute type 7 has an invalid length. [ 233.576524][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 233.620204][ T5721] usb 4-1: USB disconnect, device number 10 [ 233.650360][ T30] audit: type=1400 audit(1785056238.880:514): avc: denied { ioctl } for pid=7891 comm="syz.4.544" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.724351][ T63] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.758544][ T63] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.818976][ T63] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.859954][ T63] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.936436][ T30] audit: type=1400 audit(1785056239.170:515): avc: denied { mount } for pid=7897 comm="syz.4.547" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 233.968314][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 233.978975][ T7898] overlayfs: overlapping lowerdir path [ 234.154378][ T5808] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.174706][ T5808] usb 3-1: config 0 has no interface number 0 [ 234.192917][ T5808] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.239030][ T5808] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.277828][ T5808] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 234.341525][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.408693][ T5808] usb 3-1: config 0 descriptor?? [ 234.929559][ T5808] prodikeys 0003:041E:2801.000E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 234.996966][ T5808] hid_prodikeys: hid-prodikeys: failed to find output report [ 234.996966][ T5808] [ 235.088363][ T30] audit: type=1400 audit(1785056240.320:516): avc: denied { setopt } for pid=7916 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.128006][ T5808] usb 3-1: USB disconnect, device number 10 [ 235.277180][ T5721] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 235.336383][ T7922] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 235.370074][ T7922] bond2: entered promiscuous mode [ 235.381521][ T7922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.431748][ T7922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.438795][ T7922] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 235.449221][ T7922] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 235.459418][ T5721] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.473674][ T7922] bond2: (slave ipip0): making interface the new active one [ 235.492129][ T5721] usb 4-1: config 0 has no interface number 0 [ 235.510096][ T7922] ipip0: entered promiscuous mode [ 235.516964][ T5721] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.537430][ T7925] xt_hashlimit: size too large, truncated to 1048576 [ 235.562170][ T7922] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 235.672622][ T5721] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.752187][ T5721] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 235.800413][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.848346][ T5721] usb 4-1: config 0 descriptor?? [ 236.408895][ T5721] prodikeys 0003:041E:2801.000F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 236.455816][ T7938] tipc: Enabling not permitted [ 236.466098][ T5721] hid_prodikeys: hid-prodikeys: failed to find output report [ 236.466098][ T5721] [ 236.484527][ T7938] tipc: Enabling of bearer rejected, failed to enable media [ 236.604516][ T5721] usb 4-1: USB disconnect, device number 11 [ 236.903506][ T5706] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.921729][ T7949] comedi comedi3: pcmmio: I/O port conflict (0x80,32) [ 236.930763][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.039760][ T7952] FAULT_INJECTION: forcing a failure. [ 237.039760][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 237.055032][ T5706] usb 3-1: device descriptor read/64, error -71 [ 237.079591][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.4.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.079612][ T7952] Tainted: [L]=SOFTLOCKUP [ 237.079616][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.079622][ T7952] Call Trace: [ 237.079626][ T7952] [ 237.079630][ T7952] dump_stack_lvl+0x100/0x190 [ 237.079647][ T7952] should_fail_ex.cold+0x5/0xa [ 237.079662][ T7952] should_failslab+0xc2/0x120 [ 237.079675][ T7952] __kmalloc_noprof+0xfc/0x820 [ 237.079687][ T7952] ? trace_kmalloc+0xeb/0x110 [ 237.079701][ T7952] ? lsm_blob_alloc+0x68/0x90 [ 237.079715][ T7952] lsm_blob_alloc+0x68/0x90 [ 237.079727][ T7952] security_sk_alloc+0x2d/0x290 [ 237.079742][ T7952] sk_prot_alloc+0x12a/0x2a0 [ 237.079759][ T7952] sk_alloc+0x36/0xe80 [ 237.079777][ T7952] bpf_prog_test_run_skb+0x4db/0x3540 [ 237.079799][ T7952] ? find_held_lock+0x2b/0x80 [ 237.079816][ T7952] ? __fget_files+0x1c1/0x3d0 [ 237.079830][ T7952] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 237.079848][ T7952] ? fput+0x79/0x100 [ 237.079861][ T7952] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 237.079878][ T7952] __sys_bpf+0x2a12/0x4e80 [ 237.079893][ T7952] ? __pfx___sys_bpf+0x10/0x10 [ 237.079903][ T7952] ? find_held_lock+0x2b/0x80 [ 237.079919][ T7952] ? get_pid_task+0xfc/0x250 [ 237.079935][ T7952] ? get_pid_task+0xfc/0x250 [ 237.079955][ T7952] ? find_held_lock+0x2b/0x80 [ 237.079974][ T7952] ? rcu_read_lock_any_held+0x6a/0xa0 [ 237.079985][ T7952] ? find_held_lock+0x2b/0x80 [ 237.080000][ T7952] ? ksys_write+0x190/0x250 [ 237.080016][ T7952] ? ksys_write+0x190/0x250 [ 237.080041][ T7952] ? fput+0x79/0x100 [ 237.080056][ T7952] ? __x64_sys_bpf+0xce/0x140 [ 237.080066][ T7952] __x64_sys_bpf+0xce/0x140 [ 237.080076][ T7952] ? do_syscall_64+0x90/0x870 [ 237.080089][ T7952] do_syscall_64+0x115/0x870 [ 237.080099][ T7952] ? clear_bhb_loop+0x40/0x90 [ 237.080112][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.080123][ T7952] RIP: 0033:0x7f2ff079de99 [ 237.080132][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.080142][ T7952] RSP: 002b:00007f2ff1597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.080152][ T7952] RAX: ffffffffffffffda RBX: 00007f2ff0a25fa0 RCX: 00007f2ff079de99 [ 237.080159][ T7952] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 237.080166][ T7952] RBP: 00007f2ff1597090 R08: 0000000000000000 R09: 0000000000000000 [ 237.080172][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.080178][ T7952] R13: 00007f2ff0a26038 R14: 00007f2ff0a25fa0 R15: 00007ffee18586e8 [ 237.080192][ T7952] [ 237.524322][ T7957] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 237.687802][ T30] audit: type=1400 audit(1785056242.680:517): avc: denied { setopt } for pid=7954 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.340651][ T30] audit: type=1400 audit(1785056242.720:518): avc: denied { read write } for pid=7958 comm="syz.0.567" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 238.481816][ T30] audit: type=1400 audit(1785056242.720:519): avc: denied { open } for pid=7958 comm="syz.0.567" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 238.505464][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 239.506370][ T30] audit: type=1400 audit(1785056242.830:520): avc: denied { create } for pid=7962 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 239.646149][ T30] audit: type=1400 audit(1785056242.830:521): avc: denied { write } for pid=7962 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 240.528860][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.750501][ T7969] syz.3.570 (7969): drop_caches: 2 [ 240.772787][ T30] audit: type=1400 audit(1785056245.993:522): avc: denied { write } for pid=7991 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 240.881934][ T7992] bridge_slave_0: left allmulticast mode [ 240.975610][ T7992] bridge_slave_0: left promiscuous mode [ 240.990736][ T30] audit: type=1400 audit(1785056246.201:523): avc: denied { open } for pid=7998 comm="syz.3.581" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 241.058233][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.122859][ T7992] bridge_slave_1: left allmulticast mode [ 241.155277][ T30] audit: type=1400 audit(1785056246.270:524): avc: denied { ioctl } for pid=7998 comm="syz.3.581" path="/dev/ttyqb" dev="devtmpfs" ino=386 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 241.189797][ T7992] bridge_slave_1: left promiscuous mode [ 241.217437][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.295625][ T7992] bond0: (slave bond_slave_0): Releasing backup interface [ 241.355443][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 241.372243][ T30] audit: type=1400 audit(1785056246.528:525): avc: denied { mount } for pid=8013 comm="syz.4.584" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 241.415949][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 241.425572][ T7992] bond0: (slave bond_slave_1): Releasing backup interface [ 241.469673][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 241.491953][ T7992] team0: Port device team_slave_0 removed [ 241.534879][ T5706] usb 3-1: device descriptor read/64, error -71 [ 241.563637][ T30] audit: type=1400 audit(1785056246.538:526): avc: denied { append } for pid=8013 comm="syz.4.584" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 241.593983][ T7992] team0: Port device team_slave_1 removed [ 241.623273][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.646889][ T5706] usb usb3-port1: attempt power cycle [ 241.654293][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.677213][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 241.699323][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.727543][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.764228][ T7992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.018509][ T5706] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.048904][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 242.441959][ T8039] syz.0.591 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 242.685263][ T5706] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 242.727919][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 242.727929][ T30] audit: type=1400 audit(1785056247.918:531): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 242.783199][ T5706] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 242.803756][ T8043] vlan2: entered allmulticast mode [ 242.813254][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.864090][ T8046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.592'. [ 242.884876][ T5706] usb 3-1: Product: syz [ 242.900873][ T5706] usb 3-1: Manufacturer: syz [ 242.912297][ T8043] bond0: entered allmulticast mode [ 242.931688][ T30] audit: type=1400 audit(1785056248.077:532): avc: denied { setopt } for pid=8044 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 242.959406][ T5706] usb 3-1: SerialNumber: syz [ 242.968946][ T8043] bond_slave_0: entered allmulticast mode [ 242.999115][ T8043] bond_slave_1: entered allmulticast mode [ 243.009452][ T5706] usb 3-1: config 0 descriptor?? [ 243.024950][ T5706] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 243.069315][ T5706] usb 3-1: setting power ON [ 243.095887][ T5706] dvb-usb: bulk message failed: -22 (2/0) [ 243.183044][ T8046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.198842][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.250192][ T7992] dvb-usb: bulk message failed: -22 (3/0) [ 243.283120][ T8046] bond_slave_0: left allmulticast mode [ 243.288714][ T7992] cxusb: i2c wr: len=79 is too big! [ 243.288714][ T7992] [ 243.297678][ T5706] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 243.311176][ T8046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.338240][ T5706] usb 3-1: media controller created [ 243.348561][ T8046] bond_slave_1: left allmulticast mode [ 243.379914][ T8046] bond0 (unregistering): Released all slaves [ 243.399576][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.532089][ T5706] usb 3-1: selecting invalid altsetting 6 [ 243.581368][ T5706] usb 3-1: digital interface selection failed (-22) [ 243.620038][ T5706] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 243.711846][ T5706] usb 3-1: setting power OFF [ 243.754432][ T5706] dvb-usb: bulk message failed: -22 (2/0) [ 243.809598][ T5706] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 243.923818][ T5706] (NULL device *): no alternate interface [ 244.327865][ T8064] netlink: 72 bytes leftover after parsing attributes in process `syz.1.597'. [ 244.687567][ T5722] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 244.795300][ T5706] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 244.842587][ T5706] usb 3-1: USB disconnect, device number 13 [ 244.870481][ T5722] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.893284][ T5722] usb 4-1: config 0 has no interface number 0 [ 244.951662][ T5722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.986637][ T5722] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.019452][ T5722] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 245.063600][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.136239][ T5722] usb 4-1: config 0 descriptor?? [ 245.273688][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 245.585636][ T5722] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 245.645166][ T5722] hid_prodikeys: hid-prodikeys: failed to find output report [ 245.645166][ T5722] [ 245.942250][ T5722] usb 4-1: USB disconnect, device number 12 [ 246.297296][ T8061] Set syz1 is full, maxelem 65536 reached [ 246.376856][ T8090] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 246.426862][ T8090] bond3: entered promiscuous mode [ 246.442981][ T8090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.962387][ T30] audit: type=1400 audit(1785056252.128:533): avc: denied { create } for pid=8103 comm="syz.4.612" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.211085][ T30] audit: type=1400 audit(1785056252.247:534): avc: denied { read append } for pid=8103 comm="syz.4.612" name="file0" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.473662][ T30] audit: type=1400 audit(1785056252.247:535): avc: denied { ioctl open } for pid=8103 comm="syz.4.612" path="/124/file0" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.454000][ T5721] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 248.625317][ T5721] usb 4-1: device descriptor read/64, error -71 [ 248.779768][ T30] audit: type=1400 audit(1785056253.935:536): avc: denied { accept } for pid=8154 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.932252][ T5721] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 249.019390][ T30] audit: type=1400 audit(1785056254.183:537): avc: denied { append } for pid=8160 comm="syz.0.629" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.044983][ T8161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.629'. [ 249.150710][ T5721] usb 4-1: device descriptor read/64, error -71 [ 249.163310][ T8161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 249.820228][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 249.829055][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 249.837845][ T8165] netlink: 'syz.4.628': attribute type 13 has an invalid length. [ 249.845585][ T8165] netlink: 'syz.4.628': attribute type 12 has an invalid length. [ 249.855975][ T5721] usb usb4-port1: attempt power cycle [ 250.005876][ T5800] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.052771][ T8171] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 250.059366][ T8171] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.088137][ T8171] vhci_hcd vhci_hcd.0: Device attached [ 250.755296][ T5721] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 250.766330][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.773836][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.787280][ T5800] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 250.798679][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.807572][ T5721] usb 4-1: device descriptor read/8, error -71 [ 250.813981][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 250.847354][ T5800] usb 1-1: Product: syz [ 250.852449][ T5722] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 250.871886][ T5800] usb 1-1: Manufacturer: syz [ 250.886109][ T5800] usb 1-1: SerialNumber: syz [ 250.906772][ T5800] usb 1-1: config 0 descriptor?? [ 250.912121][ T5808] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 250.933312][ T5722] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 250.942662][ T5800] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 251.081321][ T5721] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 251.101793][ T5721] usb 4-1: device descriptor read/8, error -71 [ 251.112823][ T5808] usb 5-1: config 0 has no interfaces? [ 251.124862][ T5808] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 251.158010][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.187561][ T5808] usb 5-1: config 0 descriptor?? [ 251.232898][ T5721] usb usb4-port1: unable to enumerate USB device [ 251.349681][ T5800] (null): failure reading functionality [ 251.408761][ T5800] i2c i2c-1: connected i2c-tiny-usb device [ 251.443057][ T8172] vhci_hcd: cannot find the pending unlink 1025 [ 251.488536][ T8172] usbip_core: unknown command [ 251.514111][ T5722] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 251.537773][ T8172] vhci_hcd: unknown pdu 8 [ 251.569930][ T8172] usbip_core: unknown command [ 251.583206][ T5800] usb 1-1: USB disconnect, device number 6 [ 251.618502][ T13] vhci_hcd vhci_hcd.4: stop threads [ 251.626407][ T8192] syzkaller0: entered promiscuous mode [ 251.636663][ T5722] usb 41-1: device descriptor read/64, error -71 [ 251.674299][ T13] vhci_hcd vhci_hcd.4: release socket [ 251.687706][ T8192] syzkaller0: entered allmulticast mode [ 251.694092][ T5721] usb 5-1: USB disconnect, device number 13 [ 251.722781][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 251.916659][ T5722] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 252.300313][ T8198] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 252.364393][ T8198] netlink: 232 bytes leftover after parsing attributes in process `syz.0.638'. [ 252.555668][ T8198] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 252.913241][ T30] audit: type=1400 audit(1785056257.959:538): avc: denied { create } for pid=8205 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 253.803260][ T30] audit: type=1400 audit(1785056257.959:539): avc: denied { write } for pid=8205 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 253.992924][ T8196] kexec: Could not allocate control_code_buffer [ 254.196570][ T8220] syzkaller0: entered promiscuous mode [ 254.202504][ T8220] syzkaller0: entered allmulticast mode [ 254.246030][ T30] audit: type=1400 audit(1785056259.370:540): avc: denied { validate_trans } for pid=8221 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.067386][ T5721] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.228298][ T5721] usb 5-1: device descriptor read/64, error -71 [ 256.243191][ T8243] netlink: 666 bytes leftover after parsing attributes in process `syz.3.650'. [ 256.252744][ T5721] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.266711][ T30] audit: type=1400 audit(1785056261.378:541): avc: denied { map } for pid=8244 comm="syz.2.651" path="socket:[20693]" dev="sockfs" ino=20693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.577616][ T5721] usb 5-1: device descriptor read/64, error -71 [ 256.690457][ T5721] usb usb5-port1: attempt power cycle [ 257.058761][ T5721] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 257.099405][ T5721] usb 5-1: device descriptor read/8, error -71 [ 257.340389][ T30] audit: type=1400 audit(1785056262.441:542): avc: denied { connect } for pid=8265 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.419511][ T8268] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 257.523983][ T30] audit: type=1400 audit(1785056262.531:543): avc: denied { getopt } for pid=8265 comm="syz.0.657" laddr=fe80::547f:b6ff:fe30:d0d lport=48224 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.590695][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 257.830910][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 257.890050][ T8278] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 257.942148][ T8280] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 258.161646][ T30] audit: type=1400 audit(1785056263.256:544): avc: denied { read } for pid=8276 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.965453][ T8301] mmap: syz.4.669 (8301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.049990][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 259.212101][ T5721] usb 1-1: device descriptor read/64, error -71 [ 259.500255][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.674898][ T5721] usb 1-1: device descriptor read/64, error -71 [ 259.824642][ T5721] usb usb1-port1: attempt power cycle [ 259.839005][ T30] audit: type=1400 audit(1785056264.917:545): avc: denied { accept } for pid=8327 comm="syz.2.678" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.906670][ T8338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 259.913264][ T8338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 259.993414][ T8338] vhci_hcd vhci_hcd.0: Device attached [ 260.069156][ T8343] vhci_hcd vhci_hcd.0: port 0 already used [ 260.216617][ T5721] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 260.247238][ T5721] usb 1-1: device descriptor read/8, error -71 [ 260.277385][ T5722] usb 38-1: SetAddress Request (2) to port 0 [ 260.292190][ T5722] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 260.498523][ T5721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 260.538796][ T5721] usb 1-1: device descriptor read/8, error -71 [ 260.595907][ T8339] vhci_hcd: connection reset by peer [ 260.604156][ T30] audit: type=1400 audit(1785056265.692:546): avc: denied { read } for pid=8353 comm="syz.4.683" name="file0" dev="fuse" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 260.653374][ T3338] vhci_hcd vhci_hcd.2: stop threads [ 260.662659][ T5721] usb usb1-port1: unable to enumerate USB device [ 260.680167][ T3338] vhci_hcd vhci_hcd.2: release socket [ 260.703166][ T3338] vhci_hcd vhci_hcd.2: disconnect device [ 260.726974][ T30] audit: type=1400 audit(1785056265.692:547): avc: denied { open } for pid=8353 comm="syz.4.683" path="/137/file0/file0" dev="fuse" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 260.763025][ T8355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.805380][ T8355] block device autoloading is deprecated and will be removed. [ 261.002294][ T8362] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 262.986736][ T30] audit: type=1400 audit(1785056268.059:548): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.380870][ T30] audit: type=1400 audit(1785056268.447:549): avc: denied { connect } for pid=8379 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.420095][ T8404] netlink: 'syz.4.698': attribute type 9 has an invalid length. [ 263.885122][ T30] audit: type=1400 audit(1785056268.945:550): avc: denied { load_policy } for pid=8416 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 263.921789][ T8419] SELinux: policydb version 0 does not match my version range 15-35 [ 263.975392][ T8419] SELinux: failed to load policy [ 264.188247][ T5706] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 265.254180][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 265.314357][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 265.333352][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.393054][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.410458][ T5722] usb 38-1: device descriptor read/8, error -110 [ 265.488104][ T5706] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 265.511383][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.534927][ T5706] usb 5-1: config 0 descriptor?? [ 265.678363][ T8441] netlink: zone id is out of range [ 265.792247][ T8441] netlink: zone id is out of range [ 265.821024][ T8441] netlink: zone id is out of range [ 265.961653][ T5722] usb usb38-port1: attempt power cycle [ 266.010209][ T8441] netlink: del zone limit has 4 unknown bytes [ 266.018909][ T5706] usbhid 5-1:0.0: can't add hid device: -71 [ 266.048758][ T5706] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.115633][ T5706] usb 5-1: USB disconnect, device number 18 [ 266.148812][ T8438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.708'. [ 266.192866][ T30] audit: type=1400 audit(1785056271.252:551): avc: denied { write } for pid=8437 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.282595][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 266.309549][ T5800] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 266.324833][ T189] libceph: connect (1)[c::]:6789 error -101 [ 266.332532][ T189] libceph: mon0 (1)[c::]:6789 connect error [ 266.409825][ T30] audit: type=1400 audit(1785056271.471:552): avc: denied { getopt } for pid=8457 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.484364][ T8458] ceph: No mds server is up or the cluster is laggy [ 266.491550][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 266.507202][ T5800] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 266.572283][ T5722] usb usb38-port1: unable to enumerate USB device [ 266.598204][ T5800] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 266.621740][ T5722] libceph: connect (1)[c::]:6789 error -101 [ 267.197031][ T5722] libceph: mon0 (1)[c::]:6789 connect error [ 267.239076][ T5800] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.260737][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.714'. [ 267.314991][ T5800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 267.386517][ T5800] usb 3-1: config 1 has no interface number 0 [ 267.462253][ T5800] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 267.472250][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 267.558483][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.634449][ T5800] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 267.821335][ T5800] snd_usb_pod 3-1:1.1: set_interface failed [ 267.855828][ T5800] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 267.893852][ T5800] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 267.954021][ T5800] usb 3-1: USB disconnect, device number 15 [ 268.012215][ T30] audit: type=1326 audit(1785056273.063:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.4.724" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff079de99 code=0x0 [ 268.673560][ T8497] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 269.054091][ T30] audit: type=1400 audit(1785056274.088:554): avc: denied { call } for pid=8500 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 269.075436][ T8509] binder_alloc: 8500: binder_alloc_buf, no vma [ 269.109265][ T8511] FAULT_INJECTION: forcing a failure. [ 269.109265][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 269.159495][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.0.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.159514][ T8511] Tainted: [L]=SOFTLOCKUP [ 269.159518][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 269.159525][ T8511] Call Trace: [ 269.159529][ T8511] [ 269.159533][ T8511] dump_stack_lvl+0x100/0x190 [ 269.159549][ T8511] should_fail_ex.cold+0x5/0xa [ 269.159563][ T8511] should_failslab+0xc2/0x120 [ 269.159577][ T8511] __kmalloc_cache_noprof+0x91/0x6c0 [ 269.159594][ T8511] ? l2tp_tunnel_get+0x20c/0x490 [ 269.159609][ T8511] ? __local_bh_enable_ip+0x9e/0x120 [ 269.159623][ T8511] ? l2tp_tunnel_get+0x20c/0x490 [ 269.159638][ T8511] ? l2tp_tunnel_create+0x96/0x460 [ 269.159654][ T8511] l2tp_tunnel_create+0x96/0x460 [ 269.159670][ T8511] pppol2tp_tunnel_get.constprop.0+0x358/0x540 [ 269.159681][ T8511] ? register_lock_class+0x40/0x560 [ 269.159695][ T8511] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 269.159714][ T8511] ? __lock_acquire+0x49f/0x1a40 [ 269.159728][ T8511] ? selinux_socket_connect_helper+0x1b3/0x520 [ 269.159747][ T8511] pppol2tp_connect+0xaf0/0x1c20 [ 269.159759][ T8511] ? __pfx_pppol2tp_connect+0x10/0x10 [ 269.159768][ T8511] ? print_kernel_ident+0x10/0x40 [ 269.159786][ T8511] ? __local_bh_enable_ip+0x9e/0x120 [ 269.159802][ T8511] ? selinux_netlbl_socket_connect+0x30/0x40 [ 269.159818][ T8511] ? selinux_socket_connect+0x6b/0x80 [ 269.159834][ T8511] ? __pfx_pppol2tp_connect+0x10/0x10 [ 269.159843][ T8511] __sys_connect_file+0x141/0x1a0 [ 269.159856][ T8511] __sys_connect+0x141/0x170 [ 269.159866][ T8511] ? __pfx___sys_connect+0x10/0x10 [ 269.159878][ T8511] ? __fget_files+0x21f/0x3d0 [ 269.159894][ T8511] ? __pfx_ksys_write+0x10/0x10 [ 269.159913][ T8511] __x64_sys_connect+0x72/0xb0 [ 269.159923][ T8511] ? lockdep_hardirqs_on+0x78/0x100 [ 269.159935][ T8511] do_syscall_64+0x115/0x870 [ 269.159945][ T8511] ? clear_bhb_loop+0x40/0x90 [ 269.159958][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.159969][ T8511] RIP: 0033:0x7f197619de99 [ 269.159979][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.159989][ T8511] RSP: 002b:00007f197710a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 269.160000][ T8511] RAX: ffffffffffffffda RBX: 00007f1976425fa0 RCX: 00007f197619de99 [ 269.160007][ T8511] RDX: 0000000000000032 RSI: 0000200000000980 RDI: 0000000000000003 [ 269.160013][ T8511] RBP: 00007f197710a090 R08: 0000000000000000 R09: 0000000000000000 [ 269.160019][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.160025][ T8511] R13: 00007f1976426038 R14: 00007f1976425fa0 R15: 00007ffd9c4fb748 [ 269.160039][ T8511] [ 269.887719][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 269.942742][ T8516] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 270.515800][ T5800] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 270.535372][ T8521] overlayfs: failed to resolve './file2': -2 [ 270.552967][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 270.702207][ T5800] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.710343][ T5800] usb 3-1: config 0 has no interface number 0 [ 270.718788][ T5800] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.775089][ T5800] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.884461][ T5800] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 270.903417][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.049417][ T189] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.060921][ T5800] usb 3-1: config 0 descriptor?? [ 271.204591][ T189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.216513][ T189] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 271.225895][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.238251][ T189] usb 5-1: Product: syz [ 271.247562][ T189] usb 5-1: Manufacturer: syz [ 271.257547][ T189] usb 5-1: SerialNumber: syz [ 271.278107][ T189] usb 5-1: config 0 descriptor?? [ 271.464160][ T8532] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 271.476063][ T8514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.496635][ T189] usb 5-1: USB disconnect, device number 19 [ 271.515584][ T5800] usbhid 3-1:0.1: can't add hid device: -71 [ 271.521604][ T5800] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 271.573160][ T5800] usb 3-1: USB disconnect, device number 16 [ 271.626795][ T8535] netlink: zone id is out of range [ 271.746852][ T8535] netlink: zone id is out of range [ 271.795136][ T8535] netlink: zone id is out of range [ 271.831197][ T8535] netlink: del zone limit has 4 unknown bytes [ 272.128254][ T5800] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.158012][ T189] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 272.310225][ T8549] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 272.320858][ T5800] usb 1-1: Using ep0 maxpacket: 8 [ 272.325905][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 272.342993][ T5800] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 272.359057][ T189] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.372779][ T5800] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.394207][ T189] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.434169][ T5800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.447863][ T189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.487890][ T5800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.503513][ T189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 272.537449][ T5800] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.555368][ T189] usb 4-1: config 1 has no interface number 0 [ 272.579420][ T189] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 272.608264][ T5800] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.627075][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.661896][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.686882][ T189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 272.838429][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 272.866167][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 272.930187][ T5800] usb 1-1: usb_control_msg returned -32 [ 272.962039][ T5800] usbtmc 1-1:16.0: can't read capabilities [ 272.987214][ T189] snd_usb_pod 4-1:1.1: set_interface failed [ 273.021144][ T189] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 273.049282][ T30] audit: type=1400 audit(1785056278.069:555): avc: denied { create } for pid=8557 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 273.079061][ T189] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 273.097621][ T30] audit: type=1400 audit(1785056278.099:556): avc: denied { ioctl } for pid=8557 comm="syz.2.746" path="socket:[22356]" dev="sockfs" ino=22356 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 273.146082][ T189] usb 4-1: USB disconnect, device number 17 [ 273.202264][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 273.264633][ T8541] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 273.290245][ T5722] usb 1-1: USB disconnect, device number 11 [ 273.745177][ T5722] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 274.510540][ T8575] netlink: zone id is out of range [ 274.537777][ T8575] netlink: zone id is out of range [ 274.552098][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 274.601671][ T5722] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 274.634507][ T8575] netlink: zone id is out of range [ 274.643654][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.678575][ T8575] netlink: del zone limit has 4 unknown bytes [ 274.693094][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.748603][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.826231][ T5722] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.887041][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.946201][ T5722] usb 5-1: config 0 descriptor?? [ 275.136947][ T30] audit: type=1400 audit(1785056280.150:557): avc: denied { read } for pid=8591 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.198739][ T30] audit: type=1400 audit(1785056280.150:558): avc: denied { write } for pid=8591 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.228293][ T189] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.236439][ T8592] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 275.386274][ T5722] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 275.405285][ T8592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.413341][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 275.431020][ T5722] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 275.446955][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.470045][ T8592] UDF-fs: Scanning with blocksize 512 failed [ 275.484486][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.512907][ T8592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.530651][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.546272][ T8592] UDF-fs: Scanning with blocksize 1024 failed [ 275.576352][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.598158][ T8592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.628855][ T189] usb 3-1: config 0 descriptor?? [ 275.641853][ T8592] UDF-fs: Scanning with blocksize 2048 failed [ 275.654910][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.670320][ T189] hub 3-1:0.0: USB hub found [ 275.701296][ T8592] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.724790][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.749380][ T8592] UDF-fs: Scanning with blocksize 4096 failed [ 275.870153][ T5721] usb 5-1: USB disconnect, device number 20 [ 275.880321][ T189] hub 3-1:0.0: 1 port detected [ 276.082677][ T8590] trusted_key: syz.2.756 sent an empty control message without MSG_MORE. [ 276.128364][ T189] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 276.172151][ T189] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 276.236857][ T189] usbhid 3-1:0.0: can't add hid device: -71 [ 276.249204][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 276.308631][ T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.470218][ T189] usb 3-1: USB disconnect, device number 17 [ 277.133201][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 277.532925][ T5706] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.550530][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 279.564322][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 280.265232][ T8622] netlink: 4664 bytes leftover after parsing attributes in process `syz.1.770'. [ 280.316245][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.462508][ T5706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.505672][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 280.531743][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 280.543281][ T30] audit: type=1400 audit(1785056285.517:559): avc: denied { ioctl } for pid=8627 comm="syz.0.772" path="socket:[22694]" dev="sockfs" ino=22694 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.574647][ T5706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 236 [ 280.595310][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 280.639541][ T5706] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 280.710132][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.781136][ T5706] usb 1-1: config 0 descriptor?? [ 280.820787][ T5706] usb 1-1: can't set config #0, error -71 [ 280.849083][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 280.870847][ T5706] usb 1-1: USB disconnect, device number 12 [ 281.131824][ T8645] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 281.230046][ T8645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.425892][ T8651] bond1: (slave geneve2): making interface the new active one [ 281.466284][ T8651] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 281.668913][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 282.528527][ T30] audit: type=1400 audit(1785056287.509:560): avc: denied { create } for pid=8671 comm="syz.0.784" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.688457][ T30] audit: type=1400 audit(1785056287.538:561): avc: denied { write } for pid=8671 comm="syz.0.784" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 282.718688][ T8681] openvswitch: netlink: IPv4 tun info is not correct [ 282.830708][ T30] audit: type=1400 audit(1785056287.538:562): avc: denied { open } for pid=8671 comm="syz.0.784" path="/178/file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.041077][ T30] audit: type=1400 audit(1785056287.538:563): avc: denied { ioctl } for pid=8671 comm="syz.0.784" path="/178/file0" dev="tmpfs" ino=956 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.946549][ T30] audit: type=1400 audit(1785056287.578:564): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.054928][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 284.669527][ T8703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 286.294398][ T30] audit: type=1400 audit(1785056291.264:565): avc: denied { checkpoint_restore } for pid=8725 comm="syz.1.804" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.943533][ T8744] overlayfs: missing 'lowerdir' [ 286.950937][ T5722] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 287.131289][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 287.162214][ T5722] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 287.205715][ T5722] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 287.258387][ T5722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 287.318494][ T5722] usb 1-1: config 1 has no interface number 0 [ 287.337503][ T8752] netlink: 'syz.4.812': attribute type 39 has an invalid length. [ 287.354826][ T5722] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.366360][ T8751] tipc: Started in network mode [ 287.397337][ T8751] tipc: Node identity ac14140f, cluster identity 4711 [ 287.407274][ T5722] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 287.454891][ T5722] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 287.466938][ T8751] tipc: New replicast peer: 255.255.255.255 [ 287.495294][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.516524][ T8751] tipc: Enabled bearer , priority 10 [ 287.540643][ T5722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 287.749397][ T5722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 288.303994][ T5722] usb 1-1: USB disconnect, device number 13 [ 288.346243][ T5722] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 289.289701][ T5706] tipc: Node number set to 2886997007 [ 290.231531][ T8779] xt_hashlimit: size too large, truncated to 1048576 [ 290.493101][ T8783] binder: 8782:8783 ioctl c0306201 200000000240 returned -11 [ 290.782035][ T8790] binder: 8788:8790 ioctl c0306201 200000000240 returned -11 [ 291.473962][ T5721] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.497211][ T8809] fuse: fd is not a fuse device [ 291.677247][ T30] audit: type=1326 audit(1785056296.625:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.1.831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ae59de99 code=0x0 [ 291.736420][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 291.796457][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8232, setting to 1024 [ 291.848114][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.870767][ T8816] option changes via remount are deprecated (pid=8815 comm=syz.4.832) [ 291.879494][ T30] audit: type=1400 audit(1785056296.814:567): avc: denied { remount } for pid=8815 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 291.923511][ T5721] usb 4-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 291.955097][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.964417][ T30] audit: type=1400 audit(1785056296.894:568): avc: denied { read } for pid=8815 comm="syz.4.832" laddr=172.20.20.170 lport=34692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.010037][ T5721] usb 4-1: config 0 descriptor?? [ 292.119312][ T8820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.830'. [ 292.231369][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.250732][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.489702][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.503158][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.517849][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.532418][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.547903][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.581314][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.617226][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.644226][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.666167][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.692518][ T5721] wacom 0003:056A:FE4F.0012: unknown main item tag 0x0 [ 292.737596][ T5721] usb 4-1: USB disconnect, device number 18 [ 292.962909][ T30] audit: type=1400 audit(1785056297.910:569): avc: denied { map } for pid=8823 comm="syz.4.833" path="socket:[23687]" dev="sockfs" ino=23687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.359940][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 293.404141][ T30] audit: type=1400 audit(1785056298.349:570): avc: denied { getopt } for pid=8835 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.538347][ T8838] netlink: zone id is out of range [ 293.554742][ T8838] netlink: zone id is out of range [ 293.570330][ T8838] netlink: zone id is out of range [ 293.585740][ T8838] netlink: del zone limit has 4 unknown bytes [ 293.914454][ T5721] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 294.105539][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 294.121707][ T5721] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.148583][ T5721] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.179605][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.192123][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.227071][ T5721] usb 4-1: config 1 has no interface number 0 [ 294.248464][ T5721] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.264354][ T8850] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 294.279542][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.314089][ T5721] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 294.343281][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.382214][ T8852] bond0: (slave geneve2): making interface the new active one [ 294.447373][ T8852] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 294.513655][ T5721] snd_usb_pod 4-1:1.1: set_interface failed [ 294.528780][ T5721] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 294.676424][ T5706] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 295.427572][ T5721] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 295.495561][ T5721] usb 4-1: USB disconnect, device number 19 [ 295.671110][ T5706] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.707800][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.758214][ T5706] usb 3-1: config 0 descriptor?? [ 295.791432][ T8858] veth0_macvtap: Caught tx_queue_len zero misconfig [ 295.803480][ T5706] cp210x 3-1:0.0: cp210x converter detected [ 295.950716][ T5721] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 296.123748][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 296.149654][ T5721] usb 4-1: config 110 has an invalid interface number: 98 but max is 0 [ 296.165570][ T8859] syz.0.844 (8859): drop_caches: 2 [ 296.185153][ T5721] usb 4-1: config 110 has no interface number 0 [ 296.207001][ T5706] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 296.218773][ T5721] usb 4-1: config 110 interface 98 has no altsetting 0 [ 296.252815][ T5721] usb 4-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=53.f4 [ 296.283459][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.308927][ T5721] usb 4-1: Product: syz [ 296.333885][ T5721] usb 4-1: Manufacturer: syz [ 296.352714][ T5721] usb 4-1: SerialNumber: syz [ 296.479526][ T5706] usb 3-1: cp210x converter now attached to ttyUSB0 [ 296.581490][ T8864] gfs2: error -5 reading superblock [ 296.598068][ T5721] gspca_main: spca501-2.14.0 probing 0506:00df [ 296.620250][ T5721] gspca_spca501: reg write: error -71 [ 296.639079][ T5721] spca501 4-1:110.98: Reg write failed for 0x00,0xaa,0x00 [ 296.661953][ T5721] spca501 4-1:110.98: probe with driver spca501 failed with error -22 [ 296.782905][ T5721] usb 4-1: USB disconnect, device number 20 [ 297.085693][ T5706] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.271370][ T5706] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.316663][ T5706] usb 5-1: config 0 has no interface number 0 [ 297.351258][ T5706] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.399501][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 297.430896][ T5706] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.489815][ T5706] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 297.513497][ T8889] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 297.570550][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.585996][ T8897] netlink: zone id is out of range [ 297.611779][ T8897] netlink: zone id is out of range [ 297.621784][ T5706] usb 5-1: config 0 descriptor?? [ 297.639293][ T8897] netlink: zone id is out of range [ 297.691105][ T8897] netlink: del zone limit has 4 unknown bytes [ 297.715941][ T8899] fuse: Unknown parameter 'alôq5uother' [ 297.743367][ T8889] CIFS: Unable to determine destination address [ 297.790196][ T30] audit: type=1400 audit(1785056302.715:571): avc: denied { mounton } for pid=8886 comm="syz.3.854" path="/136/sys/kernel/debug" dev="sysfs" ino=1442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 298.039519][ T189] usb 3-1: USB disconnect, device number 18 [ 298.084541][ T189] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.120352][ T5706] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 298.186230][ T189] cp210x 3-1:0.0: device disconnected [ 298.222661][ T5706] hid_prodikeys: hid-prodikeys: failed to find output report [ 298.222661][ T5706] [ 298.483323][ T5706] usb 5-1: USB disconnect, device number 21 [ 299.808624][ T30] audit: type=1400 audit(1785056304.080:572): avc: denied { module_load } for pid=8913 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 299.827990][ T189] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 300.405508][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.449804][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.592259][ T189] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 300.730601][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.869485][ T30] audit: type=1326 audit(1785056305.735:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8926 comm="syz.2.868" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f568059de99 code=0x0 [ 301.712105][ T189] usb 1-1: config 0 descriptor?? [ 301.812259][ T189] usb 1-1: can't set config #0, error -71 [ 301.873283][ T189] usb 1-1: USB disconnect, device number 14 [ 302.741302][ T5721] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 302.899553][ T8948] netlink: zone id is out of range [ 302.934577][ T8948] netlink: zone id is out of range [ 302.968711][ T8948] netlink: zone id is out of range [ 302.986808][ T5721] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.035718][ T8948] netlink: del zone limit has 4 unknown bytes [ 303.049560][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.101647][ T5721] usb 5-1: Product: syz [ 303.134268][ T5721] usb 5-1: Manufacturer: syz [ 303.164380][ T5721] usb 5-1: SerialNumber: syz [ 303.319360][ T5706] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 303.335673][ T189] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.433793][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 303.534035][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 303.565430][ T8943] can: request_module (can-proto-0) failed. [ 303.579038][ T189] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 303.611893][ T189] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 303.651849][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.691584][ T189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 303.711036][ T8941] syzkaller0: entered promiscuous mode [ 303.736719][ T189] usb 3-1: config 1 has no interface number 0 [ 303.744651][ T8937] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 303.753302][ T8941] syzkaller0: entered allmulticast mode [ 303.782952][ T189] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 303.837219][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.951770][ T8966] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 303.967919][ T8937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.768015][ T5706] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 304.783339][ T189] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 311.130042][ C0] sched: DL replenish lagged too much [ 312.174718][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.808311][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.064074][ T5706] ath9k_htc: Failed to initialize the device [ 376.247157][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 412.512753][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 412.519700][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5631/1:b..l [ 412.527914][ C0] rcu: (detected by 0, t=10502 jiffies, g=51309, q=821 ncpus=1) [ 412.535604][ C0] task:udevd state:R running task stack:26024 pid:5631 tgid:5631 ppid:4977 task_flags:0x400140 flags:0x00080000 [ 412.549482][ C0] Call Trace: [ 412.552747][ C0] [ 412.555664][ C0] __schedule+0x125c/0x6730 [ 412.560152][ C0] ? __lock_acquire+0x49f/0x1a40 [ 412.565106][ C0] ? __pfx___schedule+0x10/0x10 [ 412.569935][ C0] ? mark_held_locks+0x40/0x70 [ 412.574672][ C0] preempt_schedule_irq+0x50/0x90 [ 412.579668][ C0] irqentry_exit+0x205/0xa00 [ 412.584238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.590202][ C0] RIP: 0010:unwind_next_frame+0xd46/0x2090 [ 412.595976][ C0] Code: 03 4c 8b 44 24 18 80 3c 16 00 0f 85 b2 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 e8 0d 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff [ 412.615566][ C0] RSP: 0018:ffffc9000388f598 EFLAGS: 00000246 [ 412.621622][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91d46d70 [ 412.629569][ C0] RDX: 1ffff92000711ec8 RSI: 1ffff92000711eca RDI: ffffc9000388f880 [ 412.637513][ C0] RBP: ffffc9000388f650 R08: ffffffff91d46d74 R09: 0000000000000007 [ 412.645460][ C0] R10: 0000000000000200 R11: 0000000000018594 R12: ffffc9000388f658 [ 412.653403][ C0] R13: ffffc9000388f608 R14: ffffc9000388f888 R15: ffffc9000388f63c [ 412.661356][ C0] ? unwind_next_frame+0xd07/0x2090 [ 412.666524][ C0] ? __reset_page_owner+0x84/0x190 [ 412.671606][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.677734][ C0] arch_stack_walk+0x94/0xf0 [ 412.682297][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 412.687661][ C0] stack_trace_save+0x8e/0xc0 [ 412.692322][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 412.697670][ C0] ? __lock_acquire+0x49f/0x1a40 [ 412.702577][ C0] ? __lock_acquire+0x49f/0x1a40 [ 412.707483][ C0] save_stack+0x162/0x1e0 [ 412.711780][ C0] ? __pfx_save_stack+0x10/0x10 [ 412.716627][ C0] ? page_ext_put+0x3e/0xd0 [ 412.721135][ C0] __reset_page_owner+0x84/0x190 [ 412.726074][ C0] __free_frozen_pages+0x79f/0x1090 [ 412.731255][ C0] qlist_free_all+0x47/0xf0 [ 412.735741][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 412.741175][ C0] __kasan_slab_alloc+0x69/0x90 [ 412.746002][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 412.751438][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 412.756878][ C0] ? security_file_alloc+0x34/0x2c0 [ 412.762063][ C0] security_file_alloc+0x34/0x2c0 [ 412.767062][ C0] init_file+0x95/0x480 [ 412.771194][ C0] alloc_empty_file+0x79/0x1c0 [ 412.775927][ C0] path_openat+0xe7/0x4280 [ 412.780310][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 412.785302][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 412.790900][ C0] ? do_getname+0x35/0x390 [ 412.795285][ C0] ? do_sys_openat2+0xc7/0x1e0 [ 412.800023][ C0] ? __x64_sys_openat+0x12d/0x210 [ 412.805029][ C0] ? do_syscall_64+0x115/0x870 [ 412.809774][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.815816][ C0] ? __pfx_path_openat+0x10/0x10 [ 412.820727][ C0] do_file_open+0x20e/0x430 [ 412.825202][ C0] ? __pfx_do_file_open+0x10/0x10 [ 412.830214][ C0] ? alloc_fd+0x471/0x7a0 [ 412.834518][ C0] ? do_getname+0x191/0x390 [ 412.838992][ C0] do_sys_openat2+0x10f/0x1e0 [ 412.843639][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.848810][ C0] ? __fput+0x692/0xb50 [ 412.852938][ C0] __x64_sys_openat+0x12d/0x210 [ 412.857761][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 412.863108][ C0] do_syscall_64+0x115/0x870 [ 412.867666][ C0] ? clear_bhb_loop+0x40/0x90 [ 412.872312][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.878172][ C0] RIP: 0033:0x7f6e1dca7407 [ 412.882560][ C0] RSP: 002b:00007ffe8dad1d90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 412.890940][ C0] RAX: ffffffffffffffda RBX: 00007f6e1e377880 RCX: 00007f6e1dca7407 [ 412.898879][ C0] RDX: 0000000000080000 RSI: 00007ffe8dad1f00 RDI: ffffffffffffff9c [ 412.906818][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 412.914756][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cda50117f5 [ 412.922694][ C0] R13: 000055cda50117f5 R14: 0000000000000001 R15: 000055cda502c140 [ 412.930639][ C0] [ 412.933627][ C0] rcu: rcu_preempt kthread starved for 8403 jiffies! g51309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 412.944698][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 412.954633][ C0] rcu: RCU grace-period kthread stack dump: [ 412.960486][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 412.973917][ C0] Call Trace: [ 412.977165][ C0] [ 412.980073][ C0] __schedule+0x125c/0x6730 [ 412.984551][ C0] ? __pfx___schedule+0x10/0x10 [ 412.989366][ C0] ? find_held_lock+0x2b/0x80 [ 412.994014][ C0] ? schedule+0x225/0x2c0 [ 412.998319][ C0] schedule+0xdd/0x2c0 [ 413.002355][ C0] schedule_timeout+0x127/0x280 [ 413.007182][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 413.012525][ C0] ? __pfx_process_timeout+0x10/0x10 [ 413.017777][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 413.023555][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 413.028981][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 413.033713][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 413.038967][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 413.043879][ C0] ? rcu_is_watching+0x12/0xc0 [ 413.048621][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 413.054400][ C0] rcu_gp_kthread+0x179/0x230 [ 413.059043][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 413.064207][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 413.069985][ C0] ? __kthread_parkme+0x18c/0x230 [ 413.074982][ C0] ? kthread+0x13a/0x450 [ 413.079190][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 413.084354][ C0] kthread+0x370/0x450 [ 413.088390][ C0] ? __pfx_kthread+0x10/0x10 [ 413.092947][ C0] ret_from_fork+0x72b/0xd50 [ 413.097508][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 413.102590][ C0] ? __switch_to+0x800/0x10f0 [ 413.107234][ C0] ? __pfx_kthread+0x10/0x10 [ 413.111791][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.116530][ C0] [ 413.119522][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 413.125817][ C0] CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 413.137062][ C0] Tainted: [L]=SOFTLOCKUP [ 413.141352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 413.151397][ C0] Workqueue: bat_events batadv_tt_purge [ 413.156928][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 413.163318][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 20 28 f6 48 89 df e8 de 6f 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 7f 17 f6 65 8b 05 ee 48 a6 08 85 c0 74 16 5b [ 413.182899][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000246 [ 413.188938][ C0] RAX: 0000000000000002 RBX: ffff88802ade4000 RCX: 0000000000000004 [ 413.196878][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a55a5 RDI: ffffffff8c401580 [ 413.204830][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 413.212799][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881ac340910 [ 413.220750][ C0] R13: ffff8881ac340908 R14: ffff88802a7294a3 R15: ffff88802a729410 [ 413.228693][ C0] FS: 0000000000000000(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000 [ 413.237594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.244147][ C0] CR2: 00007f93a908dcfe CR3: 00000000601d4000 CR4: 00000000003526f0 [ 413.252096][ C0] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.260037][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 413.267985][ C0] Call Trace: [ 413.271250][ C0] [ 413.274067][ C0] dummy_timer+0x1db5/0x36c0 [ 413.278640][ C0] ? find_held_lock+0x2b/0x80 [ 413.283291][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 413.289068][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 413.294674][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 413.300629][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 413.305541][ C0] ? mark_held_locks+0x40/0x70 [ 413.310273][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 413.316064][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 413.320977][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 413.326149][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 413.331231][ C0] handle_softirqs+0x1ea/0x9b0 [ 413.335973][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 413.341225][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 413.346478][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 413.352077][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 413.357510][ C0] do_softirq+0xac/0xe0 [ 413.361637][ C0] [ 413.364546][ C0] [ 413.367445][ C0] __local_bh_enable_ip+0xf8/0x120 [ 413.372528][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 413.377786][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 413.383564][ C0] batadv_tt_purge+0x8b/0xbd0 [ 413.388213][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 413.393991][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 413.399260][ C0] ? rcu_is_watching+0x12/0xc0 [ 413.404009][ C0] process_one_work+0xa23/0x1940 [ 413.408931][ C0] ? __pfx_process_one_work+0x10/0x10 [ 413.414283][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 413.419548][ C0] rescuer_thread+0x905/0x14a0 [ 413.424286][ C0] ? rescuer_thread+0x240/0x14a0 [ 413.429197][ C0] ? rescuer_thread+0x118/0x14a0 [ 413.434112][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 413.439284][ C0] ? __kthread_parkme+0x18c/0x230 [ 413.444279][ C0] ? kthread+0x13a/0x450 [ 413.448490][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 413.453653][ C0] kthread+0x370/0x450 [ 413.457687][ C0] ? __pfx_kthread+0x10/0x10 [ 413.462244][ C0] ret_from_fork+0x72b/0xd50 [ 413.466804][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 413.471884][ C0] ? __switch_to+0x800/0x10f0 [ 413.476527][ C0] ? __pfx_kthread+0x10/0x10 [ 413.481093][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.485831][ C0] [ 413.491870][ T1311] ieee802154 phy1 wpan1: encryption failed: -22