last executing test programs: 3m47.308119931s ago: executing program 1 (id=398): socket(0x2d, 0x2, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, &(0x7f0000002080)=""/4096) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x242242) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000", @ANYRES32], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 3m46.153047836s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48}]}) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='\x00', &(0x7f0000000140)='romfs\x00', 0x208009, 0x0) 3m43.940124494s ago: executing program 1 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3m43.761944697s ago: executing program 1 (id=407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x800000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x109050, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="1a5952cd61d81a69c94b34e8250c1cbadd325ea1e239ba677048c70c6613283c0a29d5d2a778e973d1bfea8faac29e881ad033526e73875967530382505509a5ffdc19e1e00fcfbf8f3d53359ade4db08dd2f0462031bc63b8d83bfc", 0x5c}], 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0), 0x10) close_range(0xffffffffffffffff, r0, 0x2) (async) close_range(0xffffffffffffffff, r0, 0x2) syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffee6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2080, 0x0) 3m42.569699114s ago: executing program 1 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x10020c3, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) (async) socket$netlink(0x10, 0x3, 0x5) 3m42.154254765s ago: executing program 1 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getpid() read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m41.901287842s ago: executing program 32 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getpid() read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m18.588085128s ago: executing program 4 (id=492): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x260140, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10, r1, 'id1\x00'}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000380)={0x0, 0x20000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@initdev}, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) read$msr(0xffffffffffffffff, &(0x7f0000019340)=""/116, 0x74) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) 3m15.674352581s ago: executing program 4 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00168008000f", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc048019}, 0x0) 3m15.608666467s ago: executing program 4 (id=512): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12018b0130f56920ac05190272f0010262c2223b0aa52fcb0010000904550700034902008660363e5064a45f05d74eecd66a8f66423b4691bbb0c960fbc985b31c"], 0x0) r0 = syz_clone(0x1800980, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) (async) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 3m11.719830931s ago: executing program 4 (id=522): r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100"], 0x48, 0xfffffffffffffffe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='illinois', 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='illinois', 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x9, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0xc8d], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1, 0x4, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r5, r6, 0x0) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) r7 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0xd0, 0xfffffffffffffffe) (async) ptrace$pokeuser(0x6, r7, 0xd0, 0xfffffffffffffffe) 3m11.359865495s ago: executing program 4 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, r1, 0x50d, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcb, 0x3, "7d0c1672116b8b6e1a20dc4b90bce1230cd26dd69862ab7b07e245d38430f8f1df9215dad47069500cd081d1e086589198f3588a4d70623fcd3fd7e2c968b09ee1ced2e2b595f8a6a85a3818eba7a0133fa66b21d0084de264ae52f50893cce66bb88a5c7bfabdb61b12c40d8943d7069e57235ed296856ceaf6be6a558991d35350c6d4be1d3ca4d699ef1cfdda3273fcd59428b0d4f452daea896e7d9d981b693243fddf1fbc693bf7ab606e9c49a5e0bee0140ba936dd43ffa6f823480c486f703cddf3bfd8"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) splice(r0, &(0x7f0000000240)=0x2, r0, &(0x7f0000000280)=0x83cf, 0x7, 0x0) readahead(r0, 0xffffffffffffffb5, 0x9) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000002c0)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe30}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf1ff32bae771a30a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x1, 0x3, 0xa, 0x7}, {0x3, 0x1, 0x10}, {0x3, 0x1, 0x0, 0x6}, {0x4, 0x1, 0xa, 0x9}, {0x2, 0x5, 0xd, 0x6}, {0x3, 0x2, 0x6, 0x2}, {0x5, 0x4, 0x7}], 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000580)=r2, 0x4) syz_emit_ethernet(0x1dd, &(0x7f00000005c0)={@broadcast, @broadcast, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0x6}, {0x4, 0x0, 0x1}, {0x100}], @ipv6=@dccp_packet={0x4, 0x6, "170f26", 0x17f, 0x21, 0xff, @loopback, @mcast2, {[@srh={0x88, 0x12, 0x4, 0x9, 0x4c, 0x50, 0xfffe, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x25}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @mcast1, @private0]}, @dstopts={0xff, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x6, 0x2, "a1df75", 0x2, "a96e93"}, "d38ce929cda7c09b1ea780c358a557913df16a46f4b2d3d08bf1e5f4629e2e4d88c7bf454c7f781c6afe8d1b6caaf214181d48f44fca848385e87bb4cecfdca3e59ed90892a6e539db029705d1e87de3b2d84462a66912a4ab4c60c9c3186a001f79b3e461eb12e00ea16ba6d52dbea58d5fb9eec763f8f2578e88c07cad108c4b3e5c38834ea992109501777187098b9ffb22fb941175029dc886de5e3ee34ed6e848f283f334ae7f21032c9e2c2e6ec8c7575be1943c6905c9f5071c675d"}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f00000007c0)={0x4, 0x2000}) mknod$loop(&(0x7f0000000800)='./file0\x00', 0x20, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x2}, [{0x2, 0x1, 0xee00}, {0x2, 0x5, r4}, {0x2, 0x4, r5}], {0x4, 0x4}, [{0x8, 0x5}, {0x8, 0x5}], {0x10, 0x4}, {0x20, 0x3}}, 0x4c, 0x1) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000c00)=@s={0x5, @generic=0x7, 0xb, 0x5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000c40)={0x4, r2, 0x80000}) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000c80)={0x202a, 0x1, 0x7f, 0x2}) syz_genetlink_get_family_id$fou(&(0x7f0000000cc0), r0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000d00)=@nullb, r4, 0x0) mount$9p_rdma(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x10, &(0x7f0000000e00)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4aa5}}, {@rq={'rq', 0x3d, 0xfffffffffffffffe}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffa}}, {@rq={'rq', 0x3d, 0xfa00000000000000}}, {@common=@access_user}, {@timeout={'timeout', 0x3d, 0xa}}, {@timeout={'timeout', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x7f}}], [{@subj_role={'subj_role', 0x3d, '\x00'}}]}}) sendto$inet6(r6, &(0x7f0000000f00)="df4bfed55c", 0x5, 0x40011, &(0x7f0000000f40)={0xa, 0x4e22, 0xd, @mcast2, 0x7ff}, 0x1c) mq_notify(r6, &(0x7f00000010c0)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000f80)="d7a46945cb27c6eeb4088ebd", &(0x7f0000000fc0)="49eda41c7f13f7c33ff9ce499bacabc0c25a11b3ab2d2eb9c451c2193162a04d45147a14005d802fb69f7402655498de6530eaf83d261f56f1ce2d765e125b277382202cccb5be1fbf596b4c87a823db2b4f7479a080e03e2383a665510cb753ae572e50aaa6f508d0e39268163865de80c02998c772194dcc9196f427a77b9cb341967fe8eb7abeeceb20b75a8df795c41e57242e4a3fe75dcf50ba8ae3f8e95ef2a6ab12454c3db3e65d3723a736cee2cda7eec8fdb4920eb501609a75d7ac456d8e73"}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001100)={0x2, '\x00', {0x1}, 0x6}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x1b8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf7d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x1b8}}, 0x8000) syz_open_dev$MSR(&(0x7f00000013c0), 0x4, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001400), 0x800c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000001440)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) 3m10.407740105s ago: executing program 4 (id=529): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2c81, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) (async, rerun: 32) r2 = inotify_init() (rerun: 32) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x104000015) (async) inotify_add_watch(r2, &(0x7f0000000000)='./file0/bus\x00', 0x44000142) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x137}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 3m9.029991372s ago: executing program 33 (id=529): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2c81, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) (async, rerun: 32) r2 = inotify_init() (rerun: 32) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x104000015) (async) inotify_add_watch(r2, &(0x7f0000000000)='./file0/bus\x00', 0x44000142) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x137}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 12.868448475s ago: executing program 3 (id=1175): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x440040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0xfffffffd, 0x0, 0x0, 0x9, 0xfb, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x1ffffc, 0x7}) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000140)=0xffffffff, 0x4) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESDEC=r3, @ANYRESOCT, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4c89c}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x0, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 11.920415453s ago: executing program 3 (id=1179): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000004680)=0x80, 0x4) r2 = socket$inet6(0xa, 0x3, 0xff) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x90}, 0x0) futex_waitv(&(0x7f0000000200)=[{0x5, 0x0, 0x80}], 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000080)) write$khugepaged_scan(r6, &(0x7f0000000040), 0x8) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket(0x10, 0xa, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bind$alg(r7, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0d296cd189c2f9126603007a0289340000000000"], 0x14}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 10.740053103s ago: executing program 2 (id=1185): r0 = socket(0x18, 0x3, 0x1) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVdx:D0', 0x0) mount$9p_unix(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x10000, 0x0) statx(r5, 0x0, 0x4000, 0x20, &(0x7f0000000080)) socket(0x15, 0x5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) ptrace$poke(0xffffffffffffffff, r6, &(0x7f0000000200), 0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0) 10.306901653s ago: executing program 3 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x101, 0xa, 0x4, 0xffff, 0x2, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x80010, r4, 0x5000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 9.179333764s ago: executing program 3 (id=1192): get_robust_list(0xffffffffffffffff, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x18) set_robust_list(&(0x7f0000000240)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, &(0x7f0000000200)}, 0x18) r0 = syz_clone(0x8000, &(0x7f0000000280)="06f6c6bbcd1b59087424eada07d5dc33dfaa22426d67b1bd571dbe8d0cfc4404811d0666b23b80d15db2c4e021cad2656c10f8f22551065c1cbbe09b1261c4d2b2df79532ed05130869ddda50e8349a507c910714a88a3726d70a1e96d7943c223063df8634b9ad8058d012dd7ae63415a9a3525c083ad7539c0411b37a10e3d7cbf97c51e0fc923e76e451e297af5293ccbb3a254cf743cfd2f2f259de57c8ab023149b1b3f5ecb5f80c43b003a67a80a7e52cbeb79b92a08ab466db48550f95617018d8cd5bf3216fa9d95a930372c21a8d077643dcd", 0xd7, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) get_robust_list(r0, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20002084}, 0x880) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xfff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x81}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xf5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8030}, 0xd0) set_robust_list(&(0x7f0000000900)={&(0x7f0000000880)={&(0x7f0000000840)}, 0x8, &(0x7f00000008c0)}, 0x18) set_robust_list(&(0x7f0000000a00)={&(0x7f0000000980)={&(0x7f0000000940)}, 0x5, &(0x7f00000009c0)}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) get_robust_list(r0, &(0x7f0000000c80)=&(0x7f0000000c40)={&(0x7f0000000b80), 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)}}, &(0x7f0000000cc0)=0x18) set_robust_list(&(0x7f0000000e00)={&(0x7f0000000d40)={&(0x7f0000000d00)}, 0x6, &(0x7f0000000dc0)={&(0x7f0000000d80)}}, 0x18) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x152, &(0x7f0000000e80)={{0x12, 0x1, 0x310, 0x4b, 0xcf, 0x64, 0x40, 0xbda, 0x139, 0xcd1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x140, 0x1, 0xa, 0xac, 0xd0, 0xe8, [{{0x9, 0x4, 0xf3, 0xfc, 0x2, 0x25, 0xa0, 0xb8, 0x8, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf9, 0x8, 'x'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2e, 0x4, 0x1, 0x4, "29df51"}]}], [{{0x9, 0x5, 0x2, 0x1, 0x200, 0x3, 0x2, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x5, 0xc, [@generic={0xe9, 0x23, "27b9b16d5eec31af0610dab5e3d4d7336bfe61a13f6b9c599690b930b911a4541ca8bb438275a85e44ad746e9459ae859357caef88abdb092474f8d25fdb815c5b330c912b6c58d9859ef128c66295038c589db0beaa994ac59979539f8313b741d1aa6f500343dfc30596064c7b31916bc8bcb1ede74f28c199c172cb0865e607407d951006ba5f5112b289ce753579633d8d30337ea1d1517e383fca06bb6368c6f0ddfa900c70dc42bc0c0421707bcb0480242215a1a7b2bd2f7990533b125518bce2ea2cfdd8ffd99ceb2b27db32b150705b05a011c88f8318e44af3bcadd2f96121804d2e"}, @generic={0x1f, 0x6, "fb6f0c6f7e33057ddf4e1d894a5307b81db0c8cf6d51312fac1aa98b1d"}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x250, 0x4, 0x5, 0xf, 0x10, 0x80}, 0x150, &(0x7f0000001040)={0x5, 0xf, 0x150, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0xd, 0xf000, 0x5, [0xc00f, 0xffff3f, 0x3f00, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x7, 0x3, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x40, 0xf000, 0x6, [0xff00c0]}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x9, 0xf00f, 0x8}, @generic={0xfe, 0x10, 0xa, "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"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2b, 0x4, 0x7, 0x7, 0x4}]}, 0x9, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x240a}}, {0xf9, &(0x7f0000001240)=@string={0xf9, 0x3, "72e4261d25ebd354db2528d59a64690c54838c948d1734a2c6a48ebea153c047e1cdd8d5a25eec40cdf4fa77107cd22ebb0dfc69d54421742f4b6ef9b7e285a3c7180dff69d1915e744e9be038a281972650f430d376f0daee86713839fc1725edb8957c45e868abc152af780425c19552e358ce5ab708349a4c962a463620ba694c9d0d35a376d293a107320f2b454280c7c128b60535a67a73cecfe107a4ca3da44d7ee4020da036597c72c9c2f3e49258d90235769595aa5c020fa47b4c17c408c8ad55a4896f7da71cb1844e8af491a360261d566ab7ffeb3bdd10907ef0aa2b2f7f3e793800c15de23d421722137cb679277a5fc3"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0xc0c}}, {0xbf, &(0x7f0000001380)=@string={0xbf, 0x3, "5bb8f276cdca265a9482b9b17609c10edd59d95ff7a21b4f6ed559ac24ca4364021c15896ffc63dbdad7b2033282f66319d89711663f6c807d9c1d0648f87a5150c018eb3a1eb30b039158beb97f9ebd62c6206d3c5b82a9d637bac1de20d9c6225e927cda74e95ffae2840dd55bf7acabf8f87846de7233e64bfc1557833eb4ff7e3f0617e65062d4cc953f721bcb1de70a79f45fd04ecc5c4fa2874ee2df679f4139ff475255b2f7efb05dcbd6e1f2e0d1972e0ba01bde381bf2bfb1"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x800}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x860}}]}) move_pages(r0, 0x2, &(0x7f0000001600)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001640)=[0x9, 0x8, 0x52, 0xc6, 0xffffffff, 0x5, 0x6], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001700)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000003b80)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003b40)={&(0x7f0000003780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x13c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x72}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x37d01e75}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xc, 0xc, "ffd9cdf3cb573d41"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc4b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_NEWTABLE={0x240, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x71, 0x6, "b404dd26f30f2e4663e74147925fcd6a03bf6039411eb5e7a996de66ef81d81dc1ee1097a7827039e5c3827cf34fd09f68c74b1b42a71960bc2425935009c8fd11c7bd65e1fb36c0fd7f2e523550b44a679a81f895a03dbf1766d57df5216856d045f73c55322bef929ec395d2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x76, 0x6, "31e747264e2c08b517d26dc23abc5ab7c4ddb05c02b2b5113d336f28b30430bdc526e285a1017d7d79f6df64649eba1e75fed78c5d63864e0aeb33b22be984fefd55d3c41497c369883d7d61d11a2f77156d1d13be2cc4bf38f43937b01c62edfd47b9cb7e4b2b6b7a603f70861c8be7fb67"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "3df36f8b2ff3a50e705096998929a6fcd1594c25aebe3938f3a747d5075bde595512e3916f849d64a3fe10e052463719f52217fc3ce5acdae1dcf8f03eb7566014a0b19153daea7c0b66eedd6aea93fe46d31d5231822ee781fc66be8c2303ea5d9705a8f20e33b73bb36edeb4927a4c4ae789c54c5714b0baabd0df2295acc8ced6b36f4de82e85aec09ce94dca815a28495a90222541e0236aefa9e8fc258fd64a29c9670ea5017aef60a98da99b141870a33779d0ad572ff5f7602a53dc6b8b11ed1f788a35ee99852cd309d8e2e5bf34a0767a296d5f383b86d98f9067298e30f8e60e518b707d312b05ac07c8692b2d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3a4}}, 0x8000) r5 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000003bc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0x8, 0x6}, {0x9, 0x5, 0x4, 0x2, 0x20, 0x2, 0x8, 0x4}, {0x9, 0x5, 0x86, 0x3, 0x3ff, 0x8, 0x5}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000003d00)={0x14, &(0x7f0000003c00)={0x40, 0x23, 0x30, {0x30, 0x30, "830e467bdd958ef200e982707da801c373cef0ea5211aac90d736dcc1681bbff74e751e84c79efc88719a888fabf"}}, &(0x7f0000003c40)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "2ef361e50975185b05d13bd3235f9e6cb124014e88d74238571caf31464949f962e7944938fe5a07cc7a9affd4b7131a30260eee744c72e43c642ab9f0006389ec9219df9f6d2b55370590a13bf751e831a9c9e7a8a6e91fa10c9eaca815c9e6184c11d976763d2074be6386ff5e0256f84e72a4a3d2530ef27138bec8684a0671f8a6b359a18be8cd0fb11802e341e973a68e5260932bd849f6ad3fcffc29"}}}, &(0x7f0000004280)={0x1c, &(0x7f0000003d40)={0x20, 0x11, 0xa9, "d4c5535f6b7ed370c3affeeb9b498c82a504be8287271b268c8a38c335ff543d1dd7dbdf5ed589ad757177c42b1a34aeba6bd6547e95d2b8a5ee3dcf2e4b5e84f9b4b286474a66b25b5b614d574922e7a9dcdfd1e4e7934d0d1bb89bd7707cbc3c035f697d1851f9eab168278fbc0dee42011330e6fd6ee9d84d24994c07d65a02266cdfa52bb66afda84c423652295a9cbd04de9b8a4e5848056f97261d8795a899e95fae7c696408"}, &(0x7f0000003e00)={0xa1, 0x1, 0x400, "38808002e585fb8445c2398be020b9cdf93c94a4083f1dc283d822c696efc8566358e8b2d267da38de0da7451a4c7d7c51aa7444a1f8db6e9b86d7ab3fafdd743e8ce243089049b1ddd1bc459fd0d4d83b7f4d0bdd881818be029ee0f38875c7f21dddac57f98e3b4cb81c8754409f092a9ade5f8f62f8fc75c184bc3b209757eb143a364d7f022285c9a3780f4ae754df023570ff00bec03b7b9a5bf101bbff0fc9dfa58459f51cc49e8a8152519c6989588d1c02bc0a1cb127f8d612177ffc6c467e90c183da9e18aa31002a3e1eb83f67987250488f0d7c8b61eac1cf9416f4089aced0175631b7d5807771151959b70d28cf840eed2a157a17df62adf892e6f3cd68ee141753106172da21c4da0c350ba3dfa051361f85944a11cd1877d57c2a83deee02a10556cd1120209dbc42f0622c9fc6ed970147cc81f4b8ff89e1a60a9b75a82ae46d887a2545d795e6e204dfc8da95f0c1f37bc57a632ebf72e176e82762d4c3a1652a9779141d13fc342b791d3baeaef2dcaef15cefdb62321142e86347aa96d4f0a3281a264824eea60803171e7836f3a8b1d82936a3e794dd021fd231996a6c99f2c981603e3ff3d87c0f9da5f9e3c473ef356239803eece6f50cfe91da84433137d7b4830fd54d7e50a963566ca1e2af28c51fa378ee6939ecee220349a5c624e034314f2891fddf7479024f81575fa1986931dbd9be6d627b9fb704ae56f2d4bd62873297fe85680ea230d0c7589130a5094c244248549719244ea5f2d037348e6f6c983566657eacd72daa4acda7cdbbc1cbba6d63d40e6b4bffe9a4a58921509f1486635025a6693cb3345e07d960d7ec838e1a118f1e6284e1ad60907506b5b5505a83e78d6b1d0b8c2fa2f285253d4c5e1004e569608c132cefa288e7d0ea5536773b58df83bcb72d043f85046f767bd45ad525982c33eb4620afc1e8d07a6d1dc90778c0cf5c4f2aafbab2832a9b90a975e9b407e6f65abbf59e871e112c0cbcb77a1f481681d36c8df3d281b9f3bc94efa4a62c38938be0b1d56ec46878cb3d2eed5f43493b215e2104076502a07a902351e3910da8541e86a87673233f23ea842d7527f7bb08bbb9c1b872a3fbb639994917faf1ae8d32f154a1f6aadad60a7662610194feb1979fee81deb3c0ef592e67ca7d5a8747a6fec1a0ff5fa33b393cd086bc8b1c941a83f791d09e9b677f77345be30b9a36a4a148755be9c14ac6a453f41dc52a066382fe96b0fa9a00c71d73fabd0995a1e97a3143f7dcf34f6d7fadc0285ac3b8b3f3dd3a8a2f9c6b4aef76c439868d572cd62f23f38cea9cc0acefbc089c0cfbc6db1070b46495f4d04c89795937b783b2ff735b17adc215a5c788e6e8325f139569a49164cc0289fb971aac318affe41a1623c8c324e20ee2dc13924d353babaa59e7c8177540a202e116823c45"}, &(0x7f0000004240)={0x21, 0x0, 0x2, "8b70"}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004380)={'syztnl0\x00', &(0x7f0000004300)={'gretap0\x00', 0x0, 0x7, 0x40, 0x360fae34, 0x6, {{0x13, 0x4, 0x2, 0x9, 0x4c, 0x68, 0x0, 0xf, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0xbdce00}, {@multicast1, 0xffffffff}, {@local, 0xab}, {@broadcast, 0x257}, {@local, 0x1}]}, @end, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000043c0)={0x0, @initdev, @multicast1}, &(0x7f0000004400)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000044c0)={0x1, 0x58, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004580)={'ip6gre0\x00', &(0x7f0000004500)={'syztnl0\x00', 0x0, 0x4, 0xfa, 0x3b, 0xffffff00, 0x48, @loopback, @dev={0xfe, 0x80, '\x00', 0x40}, 0x10, 0x40, 0x5, 0xb40000}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000004880)={&(0x7f00000042c0), 0xc, &(0x7f0000004840)={&(0x7f00000045c0)={0x260, 0x0, 0x305, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '}$*^&{---\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "8a48ae162d16"}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "174ad639bec08a1f8550f6061adc659ee1cd1455d0e0d2ddafa63ae454844900275b122e7f1ddac3de875aeb1803dd899bc75d013e635f07bfa99c7232ad4181553869f3ccd0521747ce5689afac1a671266cb41fed0fae121025b2e91023a20d74f7469b9250dca62403a4e15d408df0b682a514dd09a8329ea16b77e7738ea12f2e2e316c837346b8b5177b9a0a19d6cb2a9d85bac6623938e6683585502ec5f2fbcf28da1daf07c1bb7af3ed8f6e9163cb68211a07184ddc5c5ecf9ffdbcbe101d4c768d5daa9022a9f9bb27deea9268dc331a8a568e7891e4a5c18b05c71c64aee92c3471c8da63127f9a2a2b96091b4daeb9fed"}, @ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "4b91ffaa45d8c53bf89a884cdf71979ab5e14b711a4cee17204b1b0c6b13b13b40d7c1940e8c3f93368c3b"}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000801}, 0x686cb912fa915dbf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000048c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$COMEDI_UNLOCK(r10, 0x6406) syz_open_procfs$userns(r0, &(0x7f0000004900)) 8.328754256s ago: executing program 2 (id=1195): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047452, &(0x7f0000001200)) 7.73190826s ago: executing program 2 (id=1197): socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000102c0)='i2c_read\x00', r3, 0x0, 0x8000000000000004}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 7.102049499s ago: executing program 0 (id=1199): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x8) sendfile(r0, r0, 0x0, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x4007, @fd, 0x0, 0x400000000000000, 0x1, 0x2, 0x0, {0x2}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 6.971636973s ago: executing program 6 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfffb}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) umount2(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300fffffffb00850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.838518854s ago: executing program 0 (id=1202): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202", @ANYBLOB="6ba859"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b", @ANYRESDEC=r5], 0x24}}, 0x20000080) 6.587843527s ago: executing program 5 (id=1204): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000200)=0x3, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 6.423333218s ago: executing program 5 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setuid(0xee00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x8, 0x0, [{0xb20, 0x0, 0xc}, {0x72a, 0x0, 0x1}, {0x89b, 0x0, 0xe0}, {0xac9, 0x0, 0x9}, {0x977, 0x0, 0x9}, {0x346, 0x0, 0x7}, {0xa63}, {0x957, 0x0, 0xfffffffffffffff6}]}) (async, rerun: 32) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6.203682217s ago: executing program 2 (id=1206): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f00000002c0)=[0x0]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0xa, 0x9a000000, 0x0, 0x0, 0x190, 0x1f0, 0x1f0, 0x190, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e21]}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xffffffff, 'vcan0\x00', 'geneve1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)=""/251, 0xfb}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/134, 0x86}], 0x4, &(0x7f00000007c0)=""/197, 0xc5}}, {{&(0x7f00000008c0)=@phonet, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/72, 0x48}, {&(0x7f0000000b40)=""/199, 0xc7}], 0x6, &(0x7f0000000cc0)=""/87, 0x57}, 0xfffffff8}, {{&(0x7f0000000d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000000e80)=""/241, 0xf1}, {&(0x7f0000000f80)=""/156, 0x9c}, {&(0x7f0000001040)=""/182, 0xb6}, {&(0x7f0000001100)=""/147, 0x93}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/229, 0xe5}, {&(0x7f00000032c0)=""/59, 0x3b}], 0x9}, 0x4}, {{&(0x7f0000003a40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003440)=""/80, 0x50}, {&(0x7f00000034c0)=""/117, 0x75}, {&(0x7f0000003540)=""/77, 0x4d}, {&(0x7f00000035c0)=""/133, 0x85}, {&(0x7f0000003680)=""/85, 0x55}, {&(0x7f0000003700)=""/145, 0x91}], 0x6, &(0x7f0000003840)=""/251, 0xfb}}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000002000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000010810000140012800b00010007217461648004000700"/36], 0x3c}}, 0x0) msgget$private(0x0, 0x0) landlock_restrict_self(r3, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r10], &(0x7f0000000040), 0x0, 0x300}) 6.203172211s ago: executing program 5 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect(0x0, 0x62, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000001c0)={0x2, 'veth1_macvtap\x00', {0xe6}, 0x4}) shutdown(r5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 5.463073557s ago: executing program 3 (id=1208): socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000180), 0x103, 0x2800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, 0x0) socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x2809}], 0x1, 0x0, 0x0, 0x9c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600000000055506a99b8fb95700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x800002}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 5.391506681s ago: executing program 2 (id=1209): syz_open_dev$loop(0x0, 0x8, 0x0) (async) syz_open_dev$loop(0x0, 0x8, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) tkill(0xffffffffffffffff, 0x2a) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="20040000", @ANYRES16=r9, @ANYBLOB="31830000000000000000190000000c0001800800030006000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="20040000", @ANYRES16=r9, @ANYBLOB="31830000000000000000190000000c0001800800030006000000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000035380)={0x1, 0x8, 0x10, 0x6, 0x20, 0x9, 0x2, 0x7, 0xffffffff, 0x7, 0x80, 0x9, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = getpid() syz_pidfd_open(r10, 0x0) (async) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x8020000) 5.296522609s ago: executing program 0 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00033c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 5.295991121s ago: executing program 6 (id=1211): r0 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x11d, 0x1c, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, &(0x7f0000002080)=""/4096) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x242242) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000", @ANYRES32], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 4.415874793s ago: executing program 6 (id=1212): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000193c0)={&(0x7f0000019340)=@deltaction={0x74, 0x31, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,{`b,\xfe\x1d\x1e\xd02\x04\xd3\xca\x80R\xf8@\xcd\xca\xfa\x9aI\b\x00VR\xf3\xde\xcfJ R\x1e\x86\x9b\xae\xfcD\xf3\x85\xf5\xc4\xe0\xab\xab%\xe2\xc7\xf2\x14\xd9\x1f?N\x00\x00\x80wr\xa7\xc3,=\x86\xd9\x7f\x9c@\xacP\xc8<\x7f\x1e\xeb\xe5Kz\x83\xfe\x94x\x16\xf3i\xdd\x05\xca\x86\xff\xab\x89\x8e\xfc\x90H0sE\x970\xa4\x85yq\b\xa3\r\xc4\x19\x1f\xaf=\xec\xa14\xc8C\xa8\x9c\xa5\x8c]Zu/\xae\xdei\xef*5\xe0\x14a\\J.v\t\x80g\xd2.\xe5\'\'\xf4\x1c;Y\x97\xdf>\xaf\xbd\x14\xe0\a'}, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019500)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2, @ANYRES16, @ANYRES8=r3], 0xfc}, 0x1, 0x0, 0x0, 0x48414}, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4/file6\x00', 0x142) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100fffe08000b400000000028000480240001800b0001007470726f7879000014000280080002400000001108000140000000120900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r9}, 0x0) 3.893919348s ago: executing program 6 (id=1213): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100000003", @ANYRES64], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.727428144s ago: executing program 6 (id=1214): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r4, 0x8004af70, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) read$ptp(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x206, 0x0, 0x0, 0x7ffc1ffb}]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000240)=0x2000000) 3.1504295s ago: executing program 5 (id=1215): mkdirat(0xffffffffffffffff, 0x0, 0x121) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xd85d094a492ee698, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x2}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x8, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x7fffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xed, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e23, 0x0, 0x800, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x2, 0x3}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x2562}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x8}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x11, r4, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, 0x0) 2.649089576s ago: executing program 5 (id=1216): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040890}, 0xc000810) write(r4, &(0x7f0000004200)='t', 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) open(0x0, 0x80140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 1.712378267s ago: executing program 6 (id=1217): socket$inet6(0xa, 0xa, 0x0) r0 = socket(0x1e, 0x805, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x1000000000000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000440)=[{0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) ioprio_get$uid(0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20008000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x2a, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x1dff) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r5, &(0x7f0000000140)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) io_setup(0x6, &(0x7f0000000540)) 1.711892622s ago: executing program 5 (id=1218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r6, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 1.61582415s ago: executing program 0 (id=1219): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.494109055s ago: executing program 0 (id=1220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a00010000080000000000001c000000f500000000000000140012000000fa9bc12ec7dd04968e8dc9d61ea9"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xfc, 0xfffffff8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x80, 0x8, 0x23, 0xe}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x41, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x8000, 0x40, 0x8, 0x1fd1}}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) 751.952574ms ago: executing program 3 (id=1221): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x15f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14d, 0x2, 0x1, 0xf3, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "e80bfd8b66"}, {0x5, 0x24, 0x0, 0xfc00}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xb, 0xfd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x8, 0xfb, 0xe, 0x3, 0xfe}, @mdlm_detail={0xdb, 0x24, 0x13, 0xf, "517e7f5423775a17a0ed8a4bb79dbef7bcedde569f30d0a993cf4859115e8bd3f4ee5d341d6776bbb0d78a22bee45612f3beb97e14c3cfd320acd9409c2190d515f22c85235c2cdffc4bd57165dd74d590d44a2621ac954e2eb0f1a64e17cb96280518ea33c6bfd51c0c5a709372ac814c8418b6c743d60d26275fa8df39a1fc9d14024a146f938cd9801585dca9810fa39576aad764572c556fb53dee6cb0c0afb37a4dce9a263ce7d4b61518db2e59920eb85dce71d9b41eab219e5464128d9d70beaa10a8344dc6affe3505eddfb5946fa1a0d2c488"}, @obex={0x5, 0x24, 0x15, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc0, 0x1, 0x9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x7, 0x80, 0x0, 0xff, 0x7f}, 0xfffffd42, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xdda7e6ecf782137e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "8753daca"}]}}, 0x0}, 0x0) 686.156874ms ago: executing program 2 (id=1222): r0 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x11d, 0x1c, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x4, &(0x7f0000002080)=""/4096) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x242242) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000", @ANYRES32], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 0s ago: executing program 0 (id=1223): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async, rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x0, 0xff, 0x7, 0x7fc00002}]}) (async, rerun: 64) memfd_create(0x0, 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) (async, rerun: 64) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20084814}, 0x4004) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) (async) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r5 = dup(0xffffffffffffffff) (rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaae181d30dec1497884c2ee448babb88a83a00810020000800450d00140068780400000000000000000000c856", @ANYRESDEC=r2], 0xfca7) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRES16=0x0, @ANYBLOB="4d4fd0a86e295b734447c64884f73db923ab75ceb745ac62d0d13451c55c63febe0be95438692536655196029342627aa389c917c91c3990a9a01c5e3b206fa591ecf688d739b6b6cec9cc728e364b313a33b6461c5c34e7396071d3d74fb8240a32babcd174f026c97466a61ef99e648b3470ddbc3eae263d601e243f862da8cf0e6b3c03168d15675d40cb261d62046e5aae47c7fac01fd9c9c83986e085275abd779eeaf9891ea4d60a659dcd6548fe0ad23cadba0eed57fb1f967ee35499e6af76522de420ffa729de01764af83951155044f9d7bc67a0f4dbf50a87e6fffc1bd4a31a6470df", @ANYRES64, @ANYRESOCT=r5, @ANYRES16, @ANYRESHEX], 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r6, 0x3) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a81004000080045000028006500000206907864010101ac1414aa00000e22f21a1b2f577ad194cd2dfcc4759fc932ab8873741ee88d5ec17c88455971da3812d73ec8f7e924928af1256f3887e651ba234c03061175c73568b885e79031de34e6a3a5e600e89a969a2fcf2cf0798b7d989e2993529c79ee55e83453013565effd8435d24a04c748b8a3bfbbeca7f60f0cd2435ed2d8235eb834557892cd428e6213ae70", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa89043e33b3b4f0563990055629396bc0b71caaaaaaaaaaaa000d010000a0a3f635344236c6a63c9287525a0f2a47075a90184a829e0dce2c76975950b5d5a59ec78dccf0cb29378100502d82ac53d36783e0b9"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000007"], 0x50) kernel console output (not intermixed with test programs): 300.289540][ T6071] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 300.302159][ T6071] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 300.316779][ T6071] usb 4-1: config 0 has no interface number 0 [ 300.322997][ T6071] usb 4-1: config 0 has no interface number 1 [ 300.766549][ T6071] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 300.778308][ T6071] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.819328][ T6071] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 300.879589][ T6071] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 301.025794][ T6071] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 301.050012][ T6071] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 301.062376][ T6071] usb 4-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 301.192284][ T6071] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 301.228055][ T6071] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 301.241921][ T6071] usb 4-1: config 0 interface 66 has no altsetting 0 [ 301.284949][ T6071] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 301.300568][ T6071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.315200][ T6071] usb 4-1: Product: syz [ 301.329847][ T6071] usb 4-1: Manufacturer: syz [ 301.334851][ T6071] usb 4-1: SerialNumber: syz [ 301.370646][ T6071] usb 4-1: config 0 descriptor?? [ 301.396407][ T6071] ljca 4-1:0.84: bulk endpoints not found [ 301.430010][ T7012] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 301.603928][ T6071] ljca 4-1:0.66: probe with driver ljca failed with error -71 [ 301.620112][ T7012] usb 3-1: Using ep0 maxpacket: 16 [ 301.629787][ T7012] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.642008][ T6071] usb 4-1: USB disconnect, device number 48 [ 301.696623][ T7012] usb 3-1: config 0 has no interfaces? [ 301.738487][ T7012] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 301.754242][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.838'. [ 301.764387][ T9772] ocfs2: Bad value for 'barrier' [ 301.786298][ T7012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.799978][ T6172] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 301.822369][ T7012] usb 3-1: config 0 descriptor?? [ 301.916569][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.836'. [ 302.008666][ T6172] usb 6-1: device descriptor read/64, error -71 [ 302.015028][ T30] audit: type=1400 audit(1766232005.844:575): avc: denied { getopt } for pid=9761 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.289998][ T6172] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 302.452833][ T6172] usb 6-1: device descriptor read/64, error -71 [ 302.571859][ T6172] usb usb6-port1: attempt power cycle [ 302.573791][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 302.720140][ T30] audit: type=1400 audit(1766232006.504:576): avc: denied { ioctl } for pid=9777 comm="syz.3.840" path="socket:[24449]" dev="sockfs" ino=24449 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 303.018550][ T30] audit: type=1400 audit(1766232006.944:577): avc: denied { sys_module } for pid=9782 comm="syz.3.842" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 303.177695][ T6172] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 303.510730][ T6172] usb 6-1: device descriptor read/8, error -71 [ 303.720243][ T1546] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 303.759068][ T9791] could not allocate digest TFM handle cryptd(blake2b-160) [ 303.766385][ T6172] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 303.794868][ T6172] usb 6-1: device descriptor read/8, error -71 [ 303.861005][ T7012] usb 3-1: USB disconnect, device number 35 [ 303.891257][ T1546] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 303.919238][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.942850][ T1546] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.943990][ T6172] usb usb6-port1: unable to enumerate USB device [ 303.962467][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.974895][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.994016][ T1546] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 304.001864][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 304.013211][ T1546] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.025689][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 304.037711][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 304.075679][ T9813] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.091964][ T1546] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 304.099697][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 304.111531][ T1546] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.130909][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 304.142690][ T1546] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 304.203696][ T1546] usb 7-1: string descriptor 0 read error: -22 [ 304.250004][ T1546] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 304.271466][ T1546] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.308904][ T1546] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 305.849110][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.857298][ T6186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.865617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.940215][ T5922] usb 7-1: USB disconnect, device number 9 [ 305.999690][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.851'. [ 306.045413][ T9847] ocfs2: Bad value for 'barrier' [ 306.168304][ T6172] libceph: connect (1)[c::]:6789 error -101 [ 306.240991][ T6172] libceph: mon0 (1)[c::]:6789 connect error [ 306.313328][ T9845] ceph: No mds server is up or the cluster is laggy [ 306.479989][ T6172] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 306.550248][ T6071] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 307.266954][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 307.274981][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 307.430505][ T6071] usb 1-1: Using ep0 maxpacket: 32 [ 307.439965][ T6172] usb 4-1: Using ep0 maxpacket: 8 [ 307.453183][ T6071] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.463847][ T6172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 307.913460][ T6172] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 307.945632][ T6172] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 307.958153][ T6071] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 307.970185][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.981980][ T6172] usb 4-1: config 4 has no interface number 0 [ 307.995497][ T6071] usb 1-1: Product: syz [ 308.007626][ T6071] usb 1-1: Manufacturer: syz [ 308.023105][ T6172] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 308.039944][ T6172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.058514][ T6071] usb 1-1: SerialNumber: syz [ 308.078672][ T6172] usb 4-1: Product: syz [ 308.167114][ T5937] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 308.181099][ T6071] usb 1-1: config 0 descriptor?? [ 308.191806][ T6172] usb 4-1: Manufacturer: syz [ 308.217832][ T6172] usb 4-1: SerialNumber: syz [ 308.357502][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.377402][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.405672][ T5937] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.415900][ T5937] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 308.448805][ T30] audit: type=1400 audit(1766232012.374:578): avc: denied { search } for pid=9844 comm="syz.0.849" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 308.497717][ T5937] usb 6-1: Manufacturer: syz [ 308.518817][ T5937] usb 6-1: config 0 descriptor?? [ 308.588929][ T6071] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 308.599978][ T6071] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 308.617312][ T30] audit: type=1400 audit(1766232012.384:579): avc: denied { search } for pid=9844 comm="syz.0.849" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 308.643605][ T6172] uvcvideo 4-1:4.147: Found UVC 0.00 device syz (04f2:b746) [ 308.657871][ T6071] usb 1-1: USB disconnect, device number 39 [ 308.664372][ T6172] uvcvideo 4-1:4.147: No valid video chain found. [ 308.680520][ T6172] usb 4-1: USB disconnect, device number 49 [ 308.696818][ T30] audit: type=1400 audit(1766232012.624:581): avc: denied { bind } for pid=9862 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.746383][ T30] audit: type=1400 audit(1766232012.624:580): avc: denied { bind } for pid=9862 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.847635][ T9868] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 309.415939][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.443725][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.461502][ T9877] binder: 9876:9877 ioctl 4068aea3 200000000200 returned -22 [ 309.625580][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.633844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.690357][ T5937] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0013/input/input27 [ 310.016184][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.019940][ T5937] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 310.051715][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.609008][ T1546] usb 6-1: USB disconnect, device number 15 [ 310.849511][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 310.866335][ T30] audit: type=1400 audit(1766232014.794:582): avc: denied { mounton } for pid=9903 comm="syz.0.863" path="/syzcgroup/unified/syz0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 310.890088][ T9904] ocfs2: Bad value for 'barrier' [ 311.121569][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 311.140191][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 311.181671][ T1546] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 311.201366][ T9912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 311.245996][ T9908] ceph: No mds server is up or the cluster is laggy [ 311.410171][ T1546] usb 6-1: Using ep0 maxpacket: 8 [ 311.419332][ T1546] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 311.433433][ T1546] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.484586][ T7012] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 311.496773][ T1546] usb 6-1: Product: syz [ 311.502254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.512748][ T9826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.520995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.571759][ T1546] usb 6-1: Manufacturer: syz [ 311.579637][ T1546] usb 6-1: SerialNumber: syz [ 311.605029][ T1546] usb 6-1: config 0 descriptor?? [ 311.649992][ T5937] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 311.679980][ T7012] usb 3-1: Using ep0 maxpacket: 32 [ 311.697568][ T7012] usb 3-1: config 0 interface 0 has no altsetting 0 [ 311.747167][ T7012] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 311.810008][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 311.855808][ T7012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.859756][ T5937] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 311.872252][ T5937] usb 7-1: config 0 has no interface number 0 [ 311.878676][ T5937] usb 7-1: config 0 interface 12 has no altsetting 0 [ 311.881901][ T7012] usb 3-1: Product: syz [ 311.887855][ T5937] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 311.916838][ T7012] usb 3-1: Manufacturer: syz [ 312.003360][ T7012] usb 3-1: SerialNumber: syz [ 312.029289][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.080119][ T5937] usb 7-1: Product: syz [ 312.085800][ T5937] usb 7-1: Manufacturer: syz [ 312.110851][ T7012] usb 3-1: config 0 descriptor?? [ 312.150714][ T5937] usb 7-1: SerialNumber: syz [ 312.205078][ T1546] usb 6-1: USB disconnect, device number 16 [ 312.266343][ T5937] usb 7-1: config 0 descriptor?? [ 312.500239][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.508774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.134116][ T9924] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 313.172381][ T9924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.191307][ T7012] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 313.198259][ T7012] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 313.224122][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 313.242037][ T9924] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 313.286941][ T5937] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 313.291905][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 313.337190][ T5937] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 313.360146][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 313.369291][ T5937] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 313.379837][ T5937] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 313.391456][ T5937] usb 7-1: USB disconnect, device number 10 [ 313.397982][ T9926] ceph: No mds server is up or the cluster is laggy [ 313.505954][ T6120] usb 3-1: USB disconnect, device number 36 [ 313.520515][ T9943] xt_hashlimit: max too large, truncated to 1048576 [ 313.584912][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 313.610154][ T6071] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 313.780095][ T6071] usb 6-1: Using ep0 maxpacket: 32 [ 313.796368][ T6071] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.803097][ T6172] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 313.838160][ T6071] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 313.857601][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.866234][ T6071] usb 6-1: Product: syz [ 313.870938][ T6071] usb 6-1: Manufacturer: syz [ 313.916717][ T6071] usb 6-1: SerialNumber: syz [ 314.030126][ T6172] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.047938][ T6172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.058888][ T6071] usb 6-1: config 0 descriptor?? [ 314.071086][ T6172] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 314.578708][ T30] audit: type=1400 audit(1766232018.504:583): avc: denied { read write } for pid=9951 comm="syz.6.876" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 314.580234][ T6172] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 314.651410][ T30] audit: type=1400 audit(1766232018.534:584): avc: denied { ioctl open } for pid=9951 comm="syz.6.876" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 314.787951][ T30] audit: type=1400 audit(1766232018.554:585): avc: denied { read } for pid=9951 comm="syz.6.876" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 314.825934][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 314.888741][ T9956] IPVS: stopping master sync thread 9868 ... [ 314.901762][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.876'. [ 314.945938][ T6172] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.946148][ T9960] ocfs2: Bad value for 'barrier' [ 314.964061][ T30] audit: type=1400 audit(1766232018.554:586): avc: denied { open } for pid=9951 comm="syz.6.876" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 314.987758][ T6172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.014469][ T30] audit: type=1400 audit(1766232018.564:587): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.017733][ T6172] usb 4-1: Product: syz [ 315.236999][ T9964] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.282648][ T30] audit: type=1400 audit(1766232018.564:588): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.344445][ T7012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.375476][ T6172] usb 4-1: Manufacturer: syz [ 315.390646][ T30] audit: type=1400 audit(1766232018.574:589): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.404052][ T6172] usb 4-1: SerialNumber: syz [ 315.564180][ T30] audit: type=1400 audit(1766232018.744:590): avc: denied { ioctl } for pid=9938 comm="syz.3.871" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.671202][ T6071] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 315.696140][ T6071] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 315.736221][ T30] audit: type=1400 audit(1766232018.754:591): avc: denied { create } for pid=9957 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.888302][ T7012] usb 6-1: USB disconnect, device number 17 [ 315.962078][ T30] audit: type=1400 audit(1766232018.754:592): avc: denied { write } for pid=9957 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 316.470698][ T9975] fuse: Bad value for 'user_id' [ 316.799681][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.806063][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.838774][ T9975] fuse: Bad value for 'user_id' [ 316.988885][ T6172] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 316.999473][ T6172] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 317.011673][ T6172] usb 4-1: found format II with max.bitrate = 128, frame size=0 [ 317.022229][ T6172] usb 4-1: 2:1: All rates were zero [ 317.050338][ T6172] usb 4-1: USB disconnect, device number 50 [ 317.265939][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.274253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.360245][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 318.411836][T10008] ocfs2: Bad value for 'barrier' [ 319.502654][ T80] libceph: connect (1)[c::]:6789 error -13 [ 319.508643][ T80] libceph: mon0 (1)[c::]:6789 connect error [ 319.603896][T10022] ceph: No mds server is up or the cluster is laggy [ 319.620981][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 319.620993][ T30] audit: type=1400 audit(1766232023.554:680): avc: denied { search } for pid=10021 comm="syz.0.893" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 319.771938][ T30] audit: type=1400 audit(1766232023.584:681): avc: denied { search } for pid=10021 comm="syz.0.893" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 319.872135][T10029] tipc: Enabling of bearer rejected, failed to enable media [ 319.908249][ T30] audit: type=1400 audit(1766232023.834:682): avc: denied { module_request } for pid=10027 comm="syz.3.894" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 320.024503][ T30] audit: type=1400 audit(1766232023.944:683): avc: denied { sys_module } for pid=10027 comm="syz.3.894" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 320.213095][ T30] audit: type=1400 audit(1766232024.144:684): avc: denied { write } for pid=10040 comm="syz.2.896" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 320.444821][ T30] audit: type=1400 audit(1766232024.374:685): avc: denied { ioctl } for pid=10046 comm="syz.0.898" path="socket:[25909]" dev="sockfs" ino=25909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.587612][ T30] audit: type=1400 audit(1766232024.514:686): avc: denied { write } for pid=10049 comm="syz.6.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.587807][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'. [ 320.713888][ T30] audit: type=1400 audit(1766232024.514:687): avc: denied { nlmsg_read } for pid=10049 comm="syz.6.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.386851][ T30] audit: type=1400 audit(1766232025.314:688): avc: denied { create } for pid=10067 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.464661][ T30] audit: type=1400 audit(1766232025.344:689): avc: denied { setopt } for pid=10067 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.002615][T10092] xt_socket: unknown flags 0x4c [ 322.236696][T10094] netlink: 112 bytes leftover after parsing attributes in process `syz.5.910'. [ 322.259964][ T6172] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 322.840360][T10092] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 322.919948][ T6172] usb 1-1: Using ep0 maxpacket: 8 [ 322.932568][ T6172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.969548][ T6172] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.014901][ T6172] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 323.024453][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.032765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.039610][ T6172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.149437][ T6172] usb 1-1: config 0 descriptor?? [ 323.175600][ T6172] hso 1-1:0.0: Can't find BULK IN endpoint [ 323.429937][ T7012] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 323.543349][ T5881] usb 1-1: USB disconnect, device number 40 [ 323.601393][ T1546] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 323.661774][ T6172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.664289][ T7012] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.670327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.688025][ T9824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.696609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.713404][ T7012] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.725996][ T7012] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.735586][ T7012] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.751047][ T7012] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.760431][ T7012] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.768489][ T7012] usb 6-1: Product: syz [ 323.772782][ T7012] usb 6-1: Manufacturer: syz [ 323.781297][ T7012] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.890577][ T1546] usb 4-1: Using ep0 maxpacket: 8 [ 323.911523][ T1546] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 323.920196][ T1546] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 323.928870][ T1546] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 323.970052][ T1546] usb 4-1: config 3 has no interface number 0 [ 323.976136][ T1546] usb 4-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 323.988533][ T1546] usb 4-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 323.998771][ T1546] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.017290][ T1546] usb 4-1: config 3 interface 45 has no altsetting 0 [ 324.028909][ T1546] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 324.046649][ T1546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.067084][ T1546] usb 4-1: Product: syz [ 324.076924][ T1546] usb 4-1: Manufacturer: syz [ 324.086093][ T1546] usb 4-1: SerialNumber: syz [ 324.140043][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 325.018520][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'. [ 325.686421][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 325.686436][ T30] audit: type=1400 audit(1766232028.944:704): avc: denied { lock } for pid=10120 comm="syz.0.917" path="socket:[26779]" dev="sockfs" ino=26779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 325.902412][ T1546] usb 4-1: USB disconnect, device number 51 [ 325.965915][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.162247][ T30] audit: type=1400 audit(1766232030.094:705): avc: denied { create } for pid=10133 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.235753][ T7012] usb 6-1: USB disconnect, device number 18 [ 326.281352][ T30] audit: type=1400 audit(1766232030.094:706): avc: denied { ioctl } for pid=10133 comm="syz.2.921" path="socket:[26180]" dev="sockfs" ino=26180 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.360063][ T1546] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 326.415811][ T30] audit: type=1400 audit(1766232030.204:707): avc: denied { bind } for pid=10129 comm="syz.6.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.540173][ T1546] usb 4-1: Using ep0 maxpacket: 16 [ 326.619943][ T1546] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.636969][ T30] audit: type=1400 audit(1766232030.294:708): avc: denied { setopt } for pid=10129 comm="syz.6.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.701060][ T1546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.773421][ T1546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.784411][ T30] audit: type=1400 audit(1766232030.704:709): avc: denied { create } for pid=10142 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.827029][ T1546] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.927833][ T1546] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.948053][ T30] audit: type=1400 audit(1766232030.774:710): avc: denied { ioctl } for pid=10142 comm="syz.2.924" path="socket:[26802]" dev="sockfs" ino=26802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.995308][ T1546] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.007855][ T1546] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.016195][ T1546] usb 4-1: Manufacturer: syz [ 327.028231][ T1546] usb 4-1: config 0 descriptor?? [ 327.329982][ T1546] rc_core: IR keymap rc-hauppauge not found [ 327.342034][ T1546] Registered IR keymap rc-empty [ 327.355382][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.400147][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.428688][ T30] audit: type=1400 audit(1766232031.354:711): avc: denied { setopt } for pid=10151 comm="syz.6.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.468002][ T1546] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 327.530060][ T1546] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 327.560306][ T30] audit: type=1400 audit(1766232031.484:712): avc: denied { mount } for pid=10151 comm="syz.6.926" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 327.579490][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.685002][ T30] audit: type=1400 audit(1766232031.504:713): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=3317 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.760254][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.904740][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.919'. [ 327.923346][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 327.971221][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.226127][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.250385][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.270306][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.290234][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.505646][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.545023][ T1546] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 328.575435][ T1546] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 328.587696][ T1546] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.457160][T10177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.661967][ T1546] usb 4-1: USB disconnect, device number 52 [ 330.704300][ T5187] udevd[5187]: worker [5804] terminated by signal 33 (Unknown signal 33) [ 330.731560][ T5187] udevd[5187]: worker [5804] failed while handling '/devices/virtual/misc/kvm' [ 330.732127][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 330.767718][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 330.767733][ T30] audit: type=1400 audit(1766232034.694:721): avc: denied { read write } for pid=10193 comm="syz.2.934" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 330.800388][ T30] audit: type=1400 audit(1766232034.694:722): avc: denied { open } for pid=10193 comm="syz.2.934" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 330.829533][T10195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 330.838470][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 330.847923][T10195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 331.169632][T10195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 331.287920][T10203] loop9: detected capacity change from 0 to 7 [ 331.330831][ T5937] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 331.353936][T10203] Dev loop9: unable to read RDB block 7 [ 331.366806][T10203] loop9: unable to read partition table [ 331.388228][T10203] loop9: partition table beyond EOD, truncated [ 331.419455][T10203] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 331.479649][ T6071] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 331.510543][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 331.518140][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.538562][ T5937] usb 3-1: config 0 has no interfaces? [ 331.555564][ T5937] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 331.603635][T10210] trusted_key: syz.5.938 sent an empty control message without MSG_MORE. [ 331.619992][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.651175][ T5937] usb 3-1: config 0 descriptor?? [ 331.673482][ T6071] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.684695][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.716284][ T30] audit: type=1400 audit(1766232035.634:723): avc: denied { create } for pid=10204 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.742217][ T6071] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.751464][ T6071] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 331.759494][ T6071] usb 1-1: Manufacturer: syz [ 331.771602][ T30] audit: type=1400 audit(1766232035.664:724): avc: denied { setopt } for pid=10204 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 331.812503][ T6071] usb 1-1: config 0 descriptor?? [ 331.879994][ T1546] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 331.939988][ T6071] rc_core: IR keymap rc-hauppauge not found [ 331.945925][ T6071] Registered IR keymap rc-empty [ 331.953406][ T6071] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 331.998607][ T6071] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 332.062406][ T1546] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 332.079928][ T1546] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.091807][ T6071] usb 1-1: USB disconnect, device number 41 [ 332.098597][ T1546] usb 7-1: config 0 descriptor?? [ 332.615222][ T30] audit: type=1400 audit(1766232036.544:725): avc: denied { create } for pid=10219 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.662227][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 332.683549][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.692062][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.702194][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.705013][ T30] audit: type=1400 audit(1766232036.544:726): avc: denied { ioctl } for pid=10219 comm="syz.0.941" path="socket:[27163]" dev="sockfs" ino=27163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.709212][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.709234][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.709255][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.709274][ T1546] elecom 0003:056E:00FB.0014: unknown main item tag 0x0 [ 332.712002][ T1546] elecom 0003:056E:00FB.0014: hidraw0: USB HID v10.00 Device [HID 056e:00fb] on usb-dummy_hcd.6-1/input0 [ 332.840297][ T30] audit: type=1400 audit(1766232036.574:727): avc: denied { connect } for pid=10219 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.895309][ T6071] usb 7-1: USB disconnect, device number 11 [ 332.987427][T10230] xt_l2tp: wrong L2TP version: 0 [ 333.279941][ T1546] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 333.319957][ T6071] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 333.432155][ T1546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.448187][ T1546] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.463688][ T1546] usb 1-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 333.474479][ T1546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.489414][ T1546] usb 1-1: config 0 descriptor?? [ 333.500841][ T6071] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 333.511292][ T6071] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 333.519587][ T6071] usb 6-1: can't read configurations, error -61 [ 333.649982][ T6071] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 333.809015][ T6071] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 333.823157][ T6071] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 333.831637][ T6071] usb 6-1: can't read configurations, error -61 [ 333.838373][ T6071] usb usb6-port1: attempt power cycle [ 333.850883][ T5937] usb 3-1: USB disconnect, device number 37 [ 333.901165][ T30] audit: type=1400 audit(1766232037.824:728): avc: denied { bind } for pid=10239 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.905284][ T1546] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 333.937297][ T1546] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 333.938889][ T30] audit: type=1400 audit(1766232037.864:729): avc: denied { create } for pid=10239 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 333.945683][ T1546] ntrig 0003:1B96:0005.0015: unknown main item tag 0x0 [ 333.966560][ T30] audit: type=1400 audit(1766232037.894:730): avc: denied { write } for pid=10239 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 333.996171][ T1546] ntrig 0003:1B96:0005.0015: hidraw0: USB HID v0.00 Device [HID 1b96:0005] on usb-dummy_hcd.0-1/input0 [ 334.243132][ T6071] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 334.248325][ T1546] usb 1-1: USB disconnect, device number 42 [ 334.307100][ T6071] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 334.329943][ T6071] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 334.343940][ T6071] usb 6-1: can't read configurations, error -61 [ 334.444449][T10243] fido_id[10243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 334.504531][ T6071] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 334.547888][ T6071] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 334.560790][ T6071] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 334.612216][ T6071] usb 6-1: can't read configurations, error -61 [ 334.618956][ T6071] usb usb6-port1: unable to enumerate USB device [ 334.622322][ T1546] libceph: connect (1)[c::]:6789 error -101 [ 334.633795][ T1546] libceph: mon0 (1)[c::]:6789 connect error [ 334.715079][T10255] ceph: No mds server is up or the cluster is laggy [ 336.258910][T10296] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 336.277416][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 336.277433][ T30] audit: type=1400 audit(1766232040.204:740): avc: denied { nlmsg_write } for pid=10295 comm="syz.3.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.415611][ T30] audit: type=1400 audit(1766232040.324:741): avc: denied { read } for pid=10300 comm="syz.3.962" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 336.532213][ T30] audit: type=1400 audit(1766232040.324:742): avc: denied { open } for pid=10300 comm="syz.3.962" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 336.631974][ T30] audit: type=1400 audit(1766232040.324:743): avc: denied { ioctl } for pid=10300 comm="syz.3.962" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 336.811867][ T30] audit: type=1400 audit(1766232040.324:744): avc: denied { write } for pid=10300 comm="syz.3.962" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 336.851662][ T1546] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 337.011100][ T30] audit: type=1400 audit(1766232040.324:745): avc: denied { open } for pid=10300 comm="syz.3.962" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 337.012105][ T1546] usb 4-1: Using ep0 maxpacket: 16 [ 337.055885][ T1546] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 337.067858][ T1546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.069323][ T30] audit: type=1400 audit(1766232040.994:746): avc: denied { ioctl } for pid=10312 comm="syz.0.967" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 337.081164][ T1546] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 337.117345][ T1546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.127784][ T1546] usb 4-1: Product: syz [ 337.163090][ T30] audit: type=1400 audit(1766232041.054:747): avc: denied { write } for pid=10312 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 337.218122][ T1546] usb 4-1: Manufacturer: syz [ 337.229800][ T1546] usb 4-1: SerialNumber: syz [ 337.243385][T10319] netlink: 830 bytes leftover after parsing attributes in process `syz.0.967'. [ 337.268784][ T1546] usb 4-1: config 0 descriptor?? [ 337.302681][ T1546] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 337.312582][ T1546] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 337.831017][ T1546] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 337.837597][ T1546] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 337.854133][ T1546] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 337.861178][ T1546] em28xx 4-1:0.0: No AC97 audio processor [ 337.879477][ T1546] usb 4-1: USB disconnect, device number 53 [ 338.053601][ T1546] em28xx 4-1:0.0: Disconnecting em28xx [ 338.069818][ T30] audit: type=1400 audit(1766232041.994:748): avc: denied { getopt } for pid=10332 comm="syz.5.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.072680][ T1546] em28xx 4-1:0.0: Freeing device [ 338.303211][ T30] audit: type=1400 audit(1766232042.234:749): avc: denied { block_suspend } for pid=10340 comm="syz.6.972" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.330035][ T6071] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 338.793449][ T6071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.814538][ T6071] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.830943][ T6071] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.940153][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.096417][T10347] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.973'. [ 339.143196][T10346] binder: 10345:10346 ioctl c0306201 200000000180 returned -14 [ 339.175791][ T6071] usb 6-1: usb_control_msg returned -32 [ 339.187303][ T6071] usbtmc 6-1:16.0: can't read capabilities [ 340.578730][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.668268][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.787235][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.796402][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.808903][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.819103][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.829584][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 340.839260][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 341.357852][ T6071] usb 6-1: USB disconnect, device number 23 [ 341.595423][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 341.595436][ T30] audit: type=1400 audit(1766232045.524:760): avc: denied { create } for pid=10391 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 341.670961][ T30] audit: type=1400 audit(1766232045.604:761): avc: denied { read } for pid=10391 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 341.850614][ T30] audit: type=1400 audit(1766232045.634:762): avc: denied { read write } for pid=10391 comm="syz.6.983" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 342.252326][ T30] audit: type=1400 audit(1766232045.634:763): avc: denied { open } for pid=10391 comm="syz.6.983" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 342.467484][ T30] audit: type=1400 audit(1766232046.394:764): avc: denied { read write } for pid=10397 comm="syz.6.984" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 342.502490][ T30] audit: type=1400 audit(1766232046.404:765): avc: denied { open } for pid=10397 comm="syz.6.984" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 342.810867][ T30] audit: type=1400 audit(1766232046.714:766): avc: denied { setopt } for pid=10408 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.849971][ T7012] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 343.388085][T10416] __nla_validate_parse: 43 callbacks suppressed [ 343.388172][T10416] netlink: 96 bytes leftover after parsing attributes in process `syz.5.988'. [ 343.470064][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 343.479154][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 343.620439][ T6071] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 343.835648][ T6071] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.855942][ T6071] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.867812][T10423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.874486][ T6071] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.879905][ T7012] usb 1-1: Using ep0 maxpacket: 16 [ 343.895312][ T7012] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 343.905620][ T6071] usb 6-1: config 0 interface 0 has no altsetting 0 [ 343.905652][ T6071] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 343.905671][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.930823][ T7012] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.930936][ T6071] usb 6-1: config 0 descriptor?? [ 343.948644][ T7012] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.961941][ T7012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.970272][ T7012] usb 1-1: Product: syz [ 343.974833][ T7012] usb 1-1: Manufacturer: syz [ 343.979487][ T7012] usb 1-1: SerialNumber: syz [ 343.980322][ T80] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 343.999959][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 344.140058][ T5881] usb 7-1: device descriptor read/64, error -71 [ 344.164116][ T80] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 344.175378][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.185801][ T30] audit: type=1400 audit(1766232304.114:767): avc: denied { map } for pid=10429 comm="syz.2.994" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.206341][T10404] netlink: 14 bytes leftover after parsing attributes in process `syz.0.985'. [ 344.214130][ T6071] usbhid 6-1:0.0: can't add hid device: -71 [ 344.224746][T10430] ptrace attach of "./syz-executor exec"[5815] was attempted by ""[10430] [ 344.226153][ T6071] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 344.237971][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.243787][ T80] usb 4-1: config 0 descriptor?? [ 344.251202][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.268399][ T80] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 344.272241][ T30] audit: type=1400 audit(1766232304.114:768): avc: denied { execute } for pid=10429 comm="syz.2.994" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.287434][ T6071] usb 6-1: USB disconnect, device number 24 [ 344.311731][ T5820] Bluetooth: hci1: command 0x0405 tx timeout [ 344.320284][ T30] audit: type=1400 audit(1766232304.164:769): avc: denied { accept } for pid=10429 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 344.342570][ T7012] usb 1-1: 0:2 : does not exist [ 344.353820][ T7012] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 344.364892][ T7012] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 344.377433][ T7012] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 344.389973][ T7012] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 344.410176][ T5881] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 344.437648][ T7012] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 344.539931][ T5881] usb 7-1: device descriptor read/64, error -71 [ 344.563786][ T7012] usb 1-1: USB disconnect, device number 43 [ 344.750592][ T5881] usb usb7-port1: attempt power cycle [ 345.120576][ T5881] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 345.149917][T10444] netlink: 64 bytes leftover after parsing attributes in process `syz.5.997'. [ 345.196186][ T80] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 345.229528][ T5881] usb 7-1: device descriptor read/8, error -71 [ 345.323147][T10446] IPv6: addrconf: prefix option has invalid lifetime [ 345.519973][ T5881] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 345.631199][ T5881] usb 7-1: device descriptor read/8, error -71 [ 345.881157][ T5881] usb usb7-port1: unable to enumerate USB device [ 345.929991][ T6071] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 346.091544][ T6071] usb 1-1: Using ep0 maxpacket: 16 [ 346.098581][ T6071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.112066][ T6071] usb 1-1: config 0 has no interfaces? [ 346.119975][ T6071] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 346.141461][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.172263][ T6071] usb 1-1: config 0 descriptor?? [ 346.329310][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d2d800: rx timeout, send abort [ 346.462144][ T80] gspca_cpia1: usb_control_msg 02, error -110 [ 346.470411][ T80] gspca_cpia1: usb_control_msg 05, error -32 [ 346.478382][ T80] gspca_cpia1: usb_control_msg 05, error -32 [ 346.485290][ T80] gspca_cpia1: usb_control_msg 05, error -32 [ 346.492463][ T80] gspca_cpia1: usb_control_msg 05, error -32 [ 346.498593][ T80] cpia1 4-1:0.0: unexpected systemstate: 00 [ 346.632654][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 346.632667][ T30] audit: type=1400 audit(1766232306.564:785): avc: denied { append } for pid=10478 comm="syz.2.1008" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 346.829946][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d2e400: rx timeout, send abort [ 346.838866][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d2d800: abort rx timeout. Force session deactivation [ 347.009387][ T6339] usb 4-1: USB disconnect, device number 54 [ 347.061232][ T30] audit: type=1400 audit(1766232306.984:786): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 347.149945][ T5881] IPVS: starting estimator thread 0... [ 347.245111][ T30] audit: type=1400 audit(1766232307.164:787): avc: denied { setopt } for pid=10485 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.267652][ T30] audit: type=1400 audit(1766232307.164:788): avc: denied { read } for pid=10485 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.338135][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d2e400: abort rx timeout. Force session deactivation [ 347.555557][T10491] IPVS: using max 75 ests per chain, 180000 per kthread [ 347.617948][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 347.629017][T10494] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 347.795611][ T5937] IPVS: starting estimator thread 0... [ 347.812388][ T30] audit: type=1400 audit(1766232307.364:789): avc: denied { execute } for pid=10486 comm="syz.5.1011" path="/128/blkio.bfq.io_service_bytes" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 347.856233][ T30] audit: type=1400 audit(1766232307.724:790): avc: denied { write } for pid=10485 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.994896][T10496] IPVS: using max 46 ests per chain, 110400 per kthread [ 348.075968][ T30] audit: type=1400 audit(1766232308.004:791): avc: denied { map } for pid=10504 comm="syz.6.1015" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 348.206378][ T30] audit: type=1400 audit(1766232308.134:792): avc: denied { mount } for pid=10506 comm="syz.5.1017" name="/" dev="ramfs" ino=28145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 348.254736][T10498] FAULT_INJECTION: forcing a failure. [ 348.254736][T10498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.379783][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.3.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.379812][T10498] Tainted: [L]=SOFTLOCKUP [ 348.379818][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.379828][T10498] Call Trace: [ 348.379834][T10498] [ 348.379840][T10498] dump_stack_lvl+0x16c/0x1f0 [ 348.379869][T10498] should_fail_ex+0x512/0x640 [ 348.379897][T10498] _copy_from_iter+0x2a4/0x16c0 [ 348.379923][T10498] ? __alloc_skb+0x220/0x410 [ 348.379944][T10498] ? __alloc_skb+0x35d/0x410 [ 348.379967][T10498] ? __pfx__copy_from_iter+0x10/0x10 [ 348.379990][T10498] ? netlink_autobind.isra.0+0x158/0x370 [ 348.380017][T10498] netlink_sendmsg+0x820/0xdd0 [ 348.380039][T10498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.380065][T10498] ____sys_sendmsg+0xa5d/0xc30 [ 348.380088][T10498] ? copy_msghdr_from_user+0x10a/0x160 [ 348.380104][T10498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.380128][T10498] ? __pfx__kstrtoull+0x10/0x10 [ 348.380151][T10498] ___sys_sendmsg+0x134/0x1d0 [ 348.380169][T10498] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.380198][T10498] ? find_held_lock+0x2b/0x80 [ 348.380238][T10498] __sys_sendmmsg+0x200/0x420 [ 348.380257][T10498] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.380282][T10498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.380315][T10498] ? fput+0x70/0xf0 [ 348.380330][T10498] ? ksys_write+0x1ac/0x250 [ 348.380350][T10498] ? __pfx_ksys_write+0x10/0x10 [ 348.380374][T10498] __x64_sys_sendmmsg+0x9c/0x100 [ 348.380390][T10498] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.380411][T10498] do_syscall_64+0xcd/0xf80 [ 348.380433][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.380450][T10498] RIP: 0033:0x7fa26c58f749 [ 348.380463][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.380479][T10498] RSP: 002b:00007fa26d41b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.380496][T10498] RAX: ffffffffffffffda RBX: 00007fa26c7e5fa0 RCX: 00007fa26c58f749 [ 348.380507][T10498] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 348.380540][T10498] RBP: 00007fa26d41b090 R08: 0000000000000000 R09: 0000000000000000 [ 348.380550][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.380559][T10498] R13: 00007fa26c7e6038 R14: 00007fa26c7e5fa0 R15: 00007ffffcf56688 [ 348.380581][T10498] [ 349.162121][ T5881] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 349.201521][ T7012] usb 1-1: USB disconnect, device number 44 [ 349.299982][ T5881] usb 6-1: device descriptor read/64, error -71 [ 349.306369][ T6339] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 349.559943][ T5881] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 349.699969][ T5881] usb 6-1: device descriptor read/64, error -71 [ 349.799939][ T6339] usb 3-1: device descriptor read/64, error -71 [ 349.820543][ T5881] usb usb6-port1: attempt power cycle [ 350.052246][ T6339] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 350.161711][ T5881] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 350.190461][ T5881] usb 6-1: device descriptor read/8, error -71 [ 350.209915][ T6339] usb 3-1: Using ep0 maxpacket: 16 [ 350.216302][ T6339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.229463][ T6339] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 350.238579][ T6339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.248024][ T6339] usb 3-1: config 0 descriptor?? [ 350.260137][ T5937] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 350.411321][ T5937] usb 1-1: config 0 has no interfaces? [ 350.418709][ T5937] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 350.428339][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.436754][ T5937] usb 1-1: Product: syz [ 350.441257][ T5937] usb 1-1: Manufacturer: syz [ 350.445894][ T5937] usb 1-1: SerialNumber: syz [ 350.451216][ T5881] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 350.454438][ T5937] usb 1-1: config 0 descriptor?? [ 350.620837][ T5881] usb 6-1: device descriptor read/8, error -71 [ 350.730567][ T5881] usb usb6-port1: unable to enumerate USB device [ 350.785353][ T30] audit: type=1400 audit(1766232310.714:793): avc: denied { read } for pid=10549 comm="syz.3.1030" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.810765][ T30] audit: type=1400 audit(1766232310.744:794): avc: denied { open } for pid=10549 comm="syz.3.1030" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.812357][ T6339] usbhid 3-1:0.0: can't add hid device: -71 [ 350.867345][ T6339] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.919942][ T5881] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 350.945577][ T6339] usb 3-1: USB disconnect, device number 39 [ 351.071348][ T5881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.081482][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.094313][ T5881] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.113097][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.127100][ T5881] usb 7-1: SerialNumber: syz [ 351.400383][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.630298][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.654201][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 351.654210][ T30] audit: type=1400 audit(1766232311.584:798): avc: denied { create } for pid=10562 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 351.840078][ T5937] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 351.840156][ T30] audit: type=1400 audit(1766232311.634:799): avc: denied { setopt } for pid=10562 comm="syz.2.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 351.853101][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.924742][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.064417][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.095727][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.117452][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.129925][ T30] audit: type=1400 audit(1766232312.054:800): avc: denied { setopt } for pid=10568 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.158056][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.178806][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.179942][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 352.210758][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.230633][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.266623][ T5937] usb 6-1: config 0 has no interfaces? [ 352.270793][ T5881] usb 7-1: 0:2 : does not exist [ 352.301251][ T5937] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 352.312015][ T5881] usb 7-1: USB disconnect, device number 16 [ 352.319918][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.355646][T10477] udevd[10477]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.357245][ T5937] usb 6-1: config 0 descriptor?? [ 352.402008][T10571] ALSA: mixer_oss: invalid OSS volume '' [ 352.412288][T10571] ALSA: mixer_oss: invalid OSS volume 'ALT' [ 352.470529][T10566] FAULT_INJECTION: forcing a failure. [ 352.470529][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 352.496343][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.0.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.496371][T10566] Tainted: [L]=SOFTLOCKUP [ 352.496377][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.496386][T10566] Call Trace: [ 352.496391][T10566] [ 352.496398][T10566] dump_stack_lvl+0x16c/0x1f0 [ 352.496422][T10566] should_fail_ex+0x512/0x640 [ 352.496444][T10566] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 352.496470][T10566] should_failslab+0xc2/0x120 [ 352.496492][T10566] kmem_cache_alloc_noprof+0x83/0x770 [ 352.496508][T10566] ? skb_clone+0x190/0x3f0 [ 352.496529][T10566] ? skb_clone+0x190/0x3f0 [ 352.496544][T10566] skb_clone+0x190/0x3f0 [ 352.496561][T10566] netlink_deliver_tap+0xabd/0xd30 [ 352.496592][T10566] netlink_unicast+0x64c/0x870 [ 352.496614][T10566] ? __pfx_netlink_unicast+0x10/0x10 [ 352.496641][T10566] netlink_sendmsg+0x8c8/0xdd0 [ 352.496664][T10566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.496692][T10566] ____sys_sendmsg+0xa5d/0xc30 [ 352.496714][T10566] ? copy_msghdr_from_user+0x10a/0x160 [ 352.496730][T10566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.496754][T10566] ? __pfx__kstrtoull+0x10/0x10 [ 352.496778][T10566] ___sys_sendmsg+0x134/0x1d0 [ 352.496796][T10566] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.496822][T10566] ? find_held_lock+0x2b/0x80 [ 352.496861][T10566] __sys_sendmmsg+0x200/0x420 [ 352.496880][T10566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 352.496905][T10566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.496936][T10566] ? fput+0x70/0xf0 [ 352.496951][T10566] ? ksys_write+0x1ac/0x250 [ 352.496970][T10566] ? __pfx_ksys_write+0x10/0x10 [ 352.496993][T10566] __x64_sys_sendmmsg+0x9c/0x100 [ 352.497010][T10566] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.497028][T10566] do_syscall_64+0xcd/0xf80 [ 352.497049][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.497065][T10566] RIP: 0033:0x7fbdb0d8f749 [ 352.497078][T10566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.497092][T10566] RSP: 002b:00007fbdb1cf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.497108][T10566] RAX: ffffffffffffffda RBX: 00007fbdb0fe5fa0 RCX: 00007fbdb0d8f749 [ 352.497118][T10566] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 352.497128][T10566] RBP: 00007fbdb1cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.497137][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.497145][T10566] R13: 00007fbdb0fe6038 R14: 00007fbdb0fe5fa0 R15: 00007ffd2c620a98 [ 352.497169][T10566] [ 353.106790][ T5937] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 353.770208][ T5937] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 353.877271][ T5937] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 353.909142][ T5937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.928907][T10590] bridge0: entered promiscuous mode [ 353.936917][T10590] bridge0: left promiscuous mode [ 353.939088][ T5937] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.954529][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 353.972146][ T5937] usb 4-1: Product: syz [ 353.984219][ T5937] usb 4-1: Manufacturer: syz [ 353.992233][ T5937] usb 4-1: SerialNumber: syz [ 354.005789][ T5937] usb 4-1: config 0 descriptor?? [ 354.025345][ T5937] usb 4-1: selecting invalid altsetting 0 [ 354.089475][ T30] audit: type=1400 audit(1766232314.014:801): avc: denied { ioctl } for pid=10593 comm="syz.0.1042" path="socket:[29064]" dev="sockfs" ino=29064 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.123828][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 354.134897][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.143655][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.227229][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1037'. [ 354.238757][T10577] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 354.247508][ T5937] usb 4-1: USB disconnect, device number 55 [ 354.643019][ T5881] usb 6-1: USB disconnect, device number 29 [ 354.718252][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.767440][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.051252][T10617] kvm: kvm [10616]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x46 [ 355.091334][ T5881] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 355.115002][T10622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 355.128152][T10623] bridge0: entered promiscuous mode [ 355.133483][T10623] macvlan2: entered promiscuous mode [ 355.272168][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 355.286894][ T5881] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.297684][ T5881] usb 6-1: config 1 interface 0 has no altsetting 0 [ 355.307345][ T5881] usb 6-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 355.316537][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.350647][ T5881] usb 6-1: Product: 繣쵂ğ薮䄂䮆᜵䵝ḙ즆䫼妭䘆䮤憹鮈臝힢էꔽ砶뀆┏❡❘憰䚰톘롄풫轭쯸㿔汹盳頒씮띶찵LJᵎ惑벻뿷獚濃ꩫ擺☿﯆鶪칷ဨ麩⁏Ⴊ唧暀춘䳷⾔鍽臭韶縝擥ᛘ赇໩瘴糭鉞쟱⽖嫖ᵹ킀寽司쀀븋廖蛁뽗祲ᩉ痄跶춌핓暛셏督썑젞믬쏎ꀑ퀥妝ࠬ栭撐㳺ကߞ᠁ᬱ [ 355.385245][ T5881] usb 6-1: Manufacturer: Ъ [ 355.389989][ T5881] usb 6-1: SerialNumber: ᔘ莊㏧칩蹦ퟨ햇쪟⹘췡﫶ۍ䊤埐☕ႇ퍭퇂糈䝌퓫罛飯螶ㄮ遉憓␱岷ข숰쭐뻡㲹ȁ–⁉銿䪚᨟呧귰ꇢ눦嶨㸥룮┓ꁽ첐欝㼐龥䛆ꘒ楹䦫擯苀癣⪹뀗臹鎀㉘뾰䚎㐭戹嚿舐鞛ꙧᘵ⠞͆嫤熉 [ 355.624711][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.666360][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.668241][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.721067][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.732116][ T6071] libceph: connect (1)[c::]:6789 error -13 [ 355.753803][ T6071] libceph: mon0 (1)[c::]:6789 connect error [ 355.808553][ T5881] usbhid 6-1:1.0: can't add hid device: -71 [ 355.840196][ T5881] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 355.894733][ T5881] usb 6-1: USB disconnect, device number 30 [ 355.914320][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.968431][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.020459][ T6071] libceph: connect (1)[c::]:6789 error -13 [ 356.031465][ T6071] libceph: mon0 (1)[c::]:6789 connect error [ 356.511809][ T30] audit: type=1400 audit(1766232316.444:802): avc: denied { bind } for pid=10641 comm="syz.6.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.533885][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1054'. [ 356.566558][T10642] netlink: 31 bytes leftover after parsing attributes in process `syz.6.1054'. [ 356.581403][ T5937] libceph: connect (1)[c::]:6789 error -13 [ 356.584866][ T30] audit: type=1400 audit(1766232316.464:803): avc: denied { name_bind } for pid=10641 comm="syz.6.1054" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 356.587363][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 356.617542][T10642] netlink: 'syz.6.1054': attribute type 3 has an invalid length. [ 356.640075][ T6071] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 356.677144][T10642] netlink: 'syz.6.1054': attribute type 2 has an invalid length. [ 356.685178][T10642] netlink: 31 bytes leftover after parsing attributes in process `syz.6.1054'. [ 356.708360][ T30] audit: type=1400 audit(1766232316.464:804): avc: denied { node_bind } for pid=10641 comm="syz.6.1054" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 356.841871][ T6071] usb 4-1: Using ep0 maxpacket: 16 [ 356.871141][ T6071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.898288][ T6071] usb 4-1: config 0 has no interfaces? [ 356.914950][ T6071] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 356.937912][ T6071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.974103][ T6071] usb 4-1: config 0 descriptor?? [ 358.310794][ T6071] libceph: connect (1)[c::]:6789 error -13 [ 358.322320][ T6071] libceph: mon0 (1)[c::]:6789 connect error [ 358.340809][ T30] audit: type=1400 audit(1766232318.274:805): avc: denied { read append } for pid=10679 comm="syz.2.1060" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.384143][ T30] audit: type=1400 audit(1766232318.274:806): avc: denied { ioctl } for pid=10679 comm="syz.2.1060" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.408848][T10680] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 358.463716][ T30] audit: type=1400 audit(1766232318.374:807): avc: denied { append } for pid=10685 comm="syz.6.1062" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 358.559207][ T30] audit: type=1400 audit(1766232318.484:808): avc: denied { ioctl } for pid=10687 comm="syz.2.1063" path="socket:[29315]" dev="sockfs" ino=29315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.320029][ T30] audit: type=1400 audit(1766232319.244:809): avc: denied { map } for pid=10685 comm="syz.6.1062" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.360687][ T24] libceph: connect (1)[c::]:6789 error -13 [ 359.367928][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 359.446273][ T24] usb 4-1: USB disconnect, device number 56 [ 359.490178][T10700] netlink: 'syz.3.1066': attribute type 4 has an invalid length. [ 359.511519][T10699] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1066'. [ 359.689253][ T5937] libceph: connect (1)[c::]:6789 error -13 [ 359.696022][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 359.711475][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1067'. [ 359.717768][ T30] audit: type=1400 audit(1766232319.644:810): avc: denied { read } for pid=10706 comm="syz.3.1068" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 360.550941][ T24] libceph: connect (1)[c::]:6789 error -13 [ 360.551671][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 360.701227][ T30] audit: type=1400 audit(1766232319.674:811): avc: denied { open } for pid=10706 comm="syz.3.1068" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 360.701272][ T30] audit: type=1400 audit(1766232319.814:812): avc: denied { listen } for pid=10704 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.730374][T10628] ceph: No mds server is up or the cluster is laggy [ 360.873834][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1067'. [ 361.303836][T10726] kvm: apic: phys broadcast and lowest prio [ 361.653794][ T30] audit: type=1400 audit(1766232321.564:813): avc: denied { create } for pid=10719 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 361.973616][ T30] audit: type=1400 audit(1766232321.564:814): avc: denied { setopt } for pid=10719 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 362.024847][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.052290][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.069936][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 362.115370][ T30] audit: type=1400 audit(1766232321.874:815): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 362.228794][ T30] audit: type=1400 audit(1766232322.154:816): avc: denied { bind } for pid=10751 comm="syz.6.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.254246][ T24] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 362.269992][ T24] usb 6-1: config 0 has no interface number 0 [ 362.276144][ T24] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 362.300014][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 362.309168][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.394954][ T30] audit: type=1400 audit(1766232322.304:817): avc: denied { mount } for pid=10751 comm="syz.6.1078" name="/" dev="hugetlbfs" ino=29726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 362.451231][ T24] usb 6-1: config 0 descriptor?? [ 362.467921][T10740] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 362.469320][ T30] audit: type=1804 audit(1766232322.364:818): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1078" name="file0" dev="hugetlbfs" ino=29727 res=1 errno=0 [ 362.622827][ T24] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 362.666072][ T30] audit: type=1804 audit(1766232322.374:819): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1078" name="file0" dev="hugetlbfs" ino=29727 res=1 errno=0 [ 363.055862][T10760] netlink: 'syz.0.1079': attribute type 4 has an invalid length. [ 363.228536][ T30] audit: type=1400 audit(1766232323.074:820): avc: denied { bind } for pid=10755 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.519941][ T5937] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 364.649962][ T5937] usb 7-1: device descriptor read/64, error -71 [ 364.889985][ T5937] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 364.899991][ T5881] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 365.030074][ T5937] usb 7-1: device descriptor read/64, error -71 [ 365.070089][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 365.080194][ T5881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 365.089262][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.102109][ T5881] usb 4-1: Product: syz [ 365.106271][ T5881] usb 4-1: Manufacturer: syz [ 365.115610][ T5881] usb 4-1: SerialNumber: syz [ 365.132847][ T5881] usb 4-1: config 0 descriptor?? [ 365.142837][ T5937] usb usb7-port1: attempt power cycle [ 365.349577][ T5881] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.368627][ T5881] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 365.395272][ T5881] usb 4-1: USB disconnect, device number 57 [ 365.514138][ T5937] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 365.542890][ T24] usb 6-1: USB disconnect, device number 31 [ 365.561030][ T5937] usb 7-1: device descriptor read/8, error -71 [ 365.924100][ T5937] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 365.955859][ T5937] usb 7-1: device descriptor read/8, error -71 [ 365.975360][ T30] audit: type=1800 audit(1766232325.904:821): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1089" name="bus" dev="ramfs" ino=29800 res=0 errno=0 [ 366.000671][ T5881] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 366.070432][ T5937] usb usb7-port1: unable to enumerate USB device [ 366.117099][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.128819][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.163182][ T30] audit: type=1400 audit(1766232326.094:822): avc: denied { bind } for pid=10808 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.184192][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.192656][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 366.193140][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.205165][ T5881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 366.257070][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.266127][ T5881] usb 4-1: Product: Й [ 366.270787][ T5881] usb 4-1: Manufacturer: ៙婜᳇軭䔰䳪ᮧᷔ쭏濸헀ᭌ歱ട줙ݨ⋣꭯⦞ꢅ㖨켱⯈᙮띑⎶ꖊ䡕ߎ보㛲턓㪅凷鉦痙칖⚺鄹雧ꎷ遛钅┑⿹ꫥ䖀ꚟཫ╨䏋桒虤忨㳜ᘷᙤ⧿ܾ䒎ᢒ㻜ꃄ줉䙍쬫䒅뮠൐贍籺ӯ䁈锩ÿ؞햟둿䑆䵅峟䴂䔌욮穏뛖ꦴḻ≹뺙 [ 366.302586][ T5881] usb 4-1: SerialNumber: Ф [ 366.314841][ T5881] usb 4-1: config 0 descriptor?? [ 366.522812][ T5881] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 366.534679][ T5881] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 366.590465][ T5881] usb 4-1: USB disconnect, device number 58 [ 366.632448][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1095'. [ 366.643433][T10813] ocfs2: Bad value for 'barrier' [ 366.952162][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.961196][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.456818][T10836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.471095][T10836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.680036][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 369.700387][T10858] ocfs2: Bad value for 'barrier' [ 369.732425][ T30] audit: type=1400 audit(1766232329.664:823): avc: denied { ioctl } for pid=10859 comm="syz.0.1108" path="socket:[29919]" dev="sockfs" ino=29919 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.031322][ T30] audit: type=1400 audit(1766232329.954:824): avc: denied { execute_no_trans } for pid=10860 comm="syz.6.1109" path="/101/file2" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.078753][ T30] audit: type=1400 audit(1766232329.954:825): avc: denied { rename } for pid=10860 comm="syz.6.1109" name="file5" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.251285][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'. [ 370.273790][T10868] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 371.213943][T10874] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.232248][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.240387][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.947596][ T24] libceph: connect (1)[c::]:6789 error -13 [ 371.981888][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 372.052207][T10883] ceph: No mds server is up or the cluster is laggy [ 372.153654][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.167080][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.001817][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1121'. [ 375.157297][T10923] ocfs2: Bad value for 'barrier' [ 379.970223][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.989774][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.171607][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.201353][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.359931][ T6339] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 384.443051][T10943] netlink: 'syz.5.1125': attribute type 16 has an invalid length. [ 384.451050][T10943] netlink: 'syz.5.1125': attribute type 17 has an invalid length. [ 384.579953][ T6339] usb 4-1: Using ep0 maxpacket: 32 [ 384.586343][ T6339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.599940][ T6339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.609677][ T6339] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.697959][T10946] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 384.716199][ T6339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.787296][ T6339] usb 4-1: config 0 descriptor?? [ 384.817669][ T6339] hub 4-1:0.0: USB hub found [ 384.845545][T10943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.026796][ T6339] hub 4-1:0.0: 1 port detected [ 385.165443][ T30] audit: type=1400 audit(1766232345.094:826): avc: denied { mount } for pid=10957 comm="syz.5.1129" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 385.342108][T10967] netlink: zone id is out of range [ 385.347870][T10967] netlink: zone id is out of range [ 385.354711][T10967] netlink: zone id is out of range [ 385.360044][T10967] netlink: zone id is out of range [ 385.365569][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1132'. [ 385.365617][T10967] netlink: zone id is out of range [ 385.377254][T10971] ocfs2: Bad value for 'barrier' [ 385.380585][T10967] netlink: zone id is out of range [ 385.395603][T10967] netlink: zone id is out of range [ 385.400995][T10967] netlink: zone id is out of range [ 385.406165][T10967] netlink: zone id is out of range [ 385.675293][ T6339] hub 4-1:0.0: activate --> -90 [ 385.940174][ T30] audit: type=1400 audit(1766232345.874:827): avc: denied { unmount } for pid=7679 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 386.886849][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.895484][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.938667][ T6120] usb 4-1: USB disconnect, device number 59 [ 386.945318][ T6339] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 386.990493][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1136'. [ 387.009948][ T30] audit: type=1326 audit(1766232346.934:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.118085][ T30] audit: type=1326 audit(1766232346.934:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.310546][T10988] use of bytesused == 0 is deprecated and will be removed in the future, [ 387.318951][T10988] use the actual size instead. [ 387.329146][ T30] audit: type=1326 audit(1766232346.934:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.359986][ T30] audit: type=1326 audit(1766232346.934:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.520442][ T6339] libceph: connect (1)[c::]:6789 error -101 [ 387.570270][ T6339] libceph: mon0 (1)[c::]:6789 connect error [ 387.576336][ T30] audit: type=1326 audit(1766232346.934:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.601546][ T30] audit: type=1326 audit(1766232346.944:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.609933][T10998] ceph: No mds server is up or the cluster is laggy [ 387.739955][ T30] audit: type=1326 audit(1766232346.944:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 387.836786][ T6339] libceph: connect (1)[c::]:6789 error -101 [ 387.858694][ T6339] libceph: mon0 (1)[c::]:6789 connect error [ 387.866145][ T30] audit: type=1326 audit(1766232346.944:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc91b18f749 code=0x7ffc0000 [ 388.039958][ T5937] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 388.210700][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 388.221926][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 388.253404][ T5937] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 388.267025][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.346350][ T5937] usb 6-1: Product: syz [ 388.356584][ T5937] usb 6-1: Manufacturer: syz [ 388.381586][ T5937] usb 6-1: SerialNumber: syz [ 388.388439][ T5937] usb 6-1: config 0 descriptor?? [ 388.794167][T11022] GUP no longer grows the stack in syz.0.1142 (11022): 200000004000-200000008000 (200000002000) [ 389.007576][T11022] CPU: 1 UID: 0 PID: 11022 Comm: syz.0.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.007608][T11022] Tainted: [L]=SOFTLOCKUP [ 389.007615][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.007626][T11022] Call Trace: [ 389.007633][T11022] [ 389.007640][T11022] dump_stack_lvl+0x16c/0x1f0 [ 389.007673][T11022] gup_vma_lookup+0x1d2/0x220 [ 389.007697][T11022] __get_user_pages+0x241/0x3590 [ 389.007728][T11022] ? find_held_lock+0x2b/0x80 [ 389.007756][T11022] ? __pfx___get_user_pages+0x10/0x10 [ 389.007786][T11022] get_user_pages_remote+0x243/0xab0 [ 389.007809][T11022] ? mas_new_root+0x690/0x6e0 [ 389.007833][T11022] ? __pfx_get_user_pages_remote+0x10/0x10 [ 389.007859][T11022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.007885][T11022] __access_remote_vm+0x24d/0x850 [ 389.007911][T11022] ? do_raw_spin_lock+0x12c/0x2b0 [ 389.007934][T11022] ? __pfx___access_remote_vm+0x10/0x10 [ 389.007961][T11022] proc_pid_cmdline_read+0x4de/0x8e0 [ 389.007983][T11022] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 389.008005][T11022] ? rw_verify_area+0xcf/0x6c0 [ 389.008026][T11022] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 389.008043][T11022] vfs_readv+0x5c1/0x8b0 [ 389.008069][T11022] ? __pfx_vfs_readv+0x10/0x10 [ 389.008106][T11022] ? __fget_files+0x20e/0x3c0 [ 389.008138][T11022] ? do_preadv+0x1a6/0x270 [ 389.008156][T11022] do_preadv+0x1a6/0x270 [ 389.008177][T11022] ? __pfx_do_preadv+0x10/0x10 [ 389.008205][T11022] do_syscall_64+0xcd/0xf80 [ 389.008230][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.008248][T11022] RIP: 0033:0x7fbdb0d8f749 [ 389.008263][T11022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.008279][T11022] RSP: 002b:00007fbdb1cf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 389.008296][T11022] RAX: ffffffffffffffda RBX: 00007fbdb0fe5fa0 RCX: 00007fbdb0d8f749 [ 389.008308][T11022] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000008 [ 389.008318][T11022] RBP: 00007fbdb0e13f91 R08: 0000000000000200 R09: 0000000000000000 [ 389.008328][T11022] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 389.008344][T11022] R13: 00007fbdb0fe6038 R14: 00007fbdb0fe5fa0 R15: 00007ffd2c620a98 [ 389.008371][T11022] [ 389.818525][ T5937] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 389.840102][ T5937] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 390.354111][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 390.354126][ T30] audit: type=1400 audit(1766232350.284:862): avc: denied { append } for pid=11026 comm="syz.2.1143" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 390.480170][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 390.489509][ T30] audit: type=1400 audit(1766232350.294:863): avc: denied { ioctl } for pid=11026 comm="syz.2.1143" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 390.524459][T11033] ocfs2: Bad value for 'barrier' [ 390.620765][ T30] audit: type=1400 audit(1766232350.384:864): avc: denied { read } for pid=11012 comm="syz.6.1141" lport=58937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.223809][ T30] audit: type=1400 audit(1766232350.974:865): avc: denied { bind } for pid=11044 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.269515][ T30] audit: type=1400 audit(1766232350.974:866): avc: denied { listen } for pid=11044 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.294438][ T30] audit: type=1400 audit(1766232350.984:867): avc: denied { accept } for pid=11044 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.315205][ T30] audit: type=1400 audit(1766232350.984:868): avc: denied { write } for pid=11044 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.336545][ T30] audit: type=1400 audit(1766232350.984:869): avc: denied { read } for pid=11044 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.481790][ T30] audit: type=1400 audit(1766232351.414:870): avc: denied { setopt } for pid=11056 comm="syz.0.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.551231][ T5937] usb 6-1: USB disconnect, device number 32 [ 391.633057][ T6120] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 391.750970][ T30] audit: type=1400 audit(1766232351.684:871): avc: denied { getopt } for pid=11068 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 391.880584][ T6120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.205724][ T6120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.254084][ T6120] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 392.266983][T11077] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 392.288775][ T6120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.343693][ T6120] usb 3-1: config 0 descriptor?? [ 392.459911][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1159'. [ 392.470561][T11084] ocfs2: Bad value for 'barrier' [ 394.120111][ T6120] hid_parser_main: 4 callbacks suppressed [ 394.120131][ T6120] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 394.314591][ T6120] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 394.380364][ T6120] cp2112 0003:10C4:EA90.0016: error requesting version [ 394.400704][ T6120] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71 [ 394.422558][ T6120] usb 3-1: USB disconnect, device number 40 [ 394.435740][T11102] fido_id[11102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 394.487068][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.552956][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.458630][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 395.458644][ T30] audit: type=1400 audit(1766232355.384:889): avc: denied { unmount } for pid=8330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.628309][ T30] audit: type=1400 audit(1766232355.554:890): avc: denied { append } for pid=11124 comm="syz.6.1168" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.783914][T11177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.939952][ T5881] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 397.120249][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 397.387697][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.400033][ T5881] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 397.416200][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.428673][ T5881] usb 6-1: config 0 descriptor?? [ 397.441844][ T5881] hub 6-1:0.0: bad descriptor, ignoring hub [ 397.447924][ T5881] hub 6-1:0.0: probe with driver hub failed with error -5 [ 397.458560][ T5881] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 398.235943][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 398.355384][ T30] audit: type=1400 audit(1766232358.284:891): avc: denied { write } for pid=11205 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.599972][ T30] audit: type=1400 audit(1766232359.334:892): avc: denied { read } for pid=11223 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 399.881901][ T5937] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 399.912752][ T30] audit: type=1400 audit(1766232359.844:893): avc: denied { read } for pid=11228 comm="syz.6.1186" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.966354][ T30] audit: type=1400 audit(1766232359.844:894): avc: denied { open } for pid=11228 comm="syz.6.1186" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 400.128410][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 400.138546][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.244089][T11239] gfs2: gfs2 mount does not exist [ 400.549717][ T5937] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 400.558991][T11238] usb usb8: usbfs: process 11238 (syz.0.1189) did not claim interface 0 before use [ 400.568397][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.599376][ T30] audit: type=1400 audit(1766232360.184:895): avc: denied { map } for pid=11231 comm="syz.3.1187" path="/proc/872/net/pfkey" dev="proc" ino=4026533061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 400.612563][ T5937] usb 3-1: config 0 descriptor?? [ 400.626558][ T6339] usb 6-1: reset high-speed USB device number 33 using dummy_hcd [ 400.641484][ T6339] usb 6-1: device reset changed ep0 maxpacket size! [ 400.651777][ T6339] usb 6-1: USB disconnect, device number 33 [ 400.657697][ T30] audit: type=1400 audit(1766232360.214:896): avc: denied { connect } for pid=11231 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 400.709747][ T5937] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 400.738271][ T5937] usb 3-1: Detected SIO [ 400.811304][ T5937] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 400.956782][ T5937] usb 3-1: USB disconnect, device number 41 [ 400.970673][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 400.972141][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.982168][ T5937] ftdi_sio 3-1:0.0: device disconnected [ 401.004158][ T30] audit: type=1400 audit(1766232360.934:897): avc: denied { connect } for pid=11245 comm="syz.6.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 401.026103][ T6339] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 401.048339][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.189952][ T6339] usb 6-1: Using ep0 maxpacket: 16 [ 401.196817][ T6339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.211925][ T6339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.233670][ T6339] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 401.253713][ T6339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.279820][ T6339] usb 6-1: config 0 descriptor?? [ 401.309961][ T24] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 401.460044][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 401.602721][ T24] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 401.702278][ T6339] bigben 0003:146B:0902.0017: unexpected rdesc, please submit for review [ 401.761362][ T6339] bigben 0003:146B:0902.0017: item fetching failed at offset 3/5 [ 401.778451][ T6339] bigben 0003:146B:0902.0017: parse failed [ 401.784523][ T6339] bigben 0003:146B:0902.0017: probe with driver bigben failed with error -22 [ 401.793375][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 401.808750][ T24] usb usb4-port1: attempt power cycle [ 401.815522][ T30] audit: type=1400 audit(1766232361.744:898): avc: denied { read } for pid=11258 comm="syz.2.1195" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.857327][ T30] audit: type=1400 audit(1766232361.744:899): avc: denied { open } for pid=11258 comm="syz.2.1195" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 402.167350][ T5937] usb 6-1: USB disconnect, device number 34 [ 402.203474][ T24] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 402.243059][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 402.284473][ T30] audit: type=1400 audit(1766232362.214:900): avc: denied { read } for pid=11260 comm="syz.0.1196" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 402.380056][ T24] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 402.381468][ T30] audit: type=1400 audit(1766232362.214:901): avc: denied { open } for pid=11260 comm="syz.0.1196" path="/237/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 402.414022][T11268] FAULT_INJECTION: forcing a failure. [ 402.414022][T11268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.428879][T11268] CPU: 0 UID: 0 PID: 11268 Comm: syz.6.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.428904][T11268] Tainted: [L]=SOFTLOCKUP [ 402.428910][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.428920][T11268] Call Trace: [ 402.428926][T11268] [ 402.428932][T11268] dump_stack_lvl+0x16c/0x1f0 [ 402.428957][T11268] should_fail_ex+0x512/0x640 [ 402.428980][T11268] _copy_from_user+0x2e/0xd0 [ 402.429004][T11268] __sys_bpf+0x248/0x4980 [ 402.429029][T11268] ? __pfx___sys_bpf+0x10/0x10 [ 402.429048][T11268] ? find_held_lock+0x2b/0x80 [ 402.429077][T11268] ? find_held_lock+0x2b/0x80 [ 402.429107][T11268] ? __mutex_unlock_slowpath+0x161/0x790 [ 402.429154][T11268] __x64_sys_bpf+0x78/0xc0 [ 402.429176][T11268] do_syscall_64+0xcd/0xf80 [ 402.429197][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.429211][T11268] RIP: 0033:0x7f517378f749 [ 402.429230][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.429244][T11268] RSP: 002b:00007f51746cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.429260][T11268] RAX: ffffffffffffffda RBX: 00007f51739e6090 RCX: 00007f517378f749 [ 402.429271][T11268] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 402.429279][T11268] RBP: 00007f51746cd090 R08: 0000000000000000 R09: 0000000000000000 [ 402.429287][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.429296][T11268] R13: 00007f51739e6128 R14: 00007f51739e6090 R15: 00007ffd6ac71ed8 [ 402.429318][T11268] [ 402.860405][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 402.889602][ T24] usb usb4-port1: unable to enumerate USB device [ 403.210641][ T30] audit: type=1400 audit(1766232363.134:902): avc: denied { checkpoint_restore } for pid=11274 comm="syz.5.1201" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.245049][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.291330][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.424887][ T30] audit: type=1400 audit(1766232363.354:903): avc: denied { create } for pid=11287 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 403.447363][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1204'. [ 403.472694][ T30] audit: type=1400 audit(1766232363.394:904): avc: denied { write } for pid=11287 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 403.842237][T11301] SET target dimension over the limit! [ 405.043032][T11313] FAULT_INJECTION: forcing a failure. [ 405.043032][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 405.073283][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.0.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.073309][T11313] Tainted: [L]=SOFTLOCKUP [ 405.073314][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.073323][T11313] Call Trace: [ 405.073329][T11313] [ 405.073335][T11313] dump_stack_lvl+0x16c/0x1f0 [ 405.073358][T11313] should_fail_ex+0x512/0x640 [ 405.073380][T11313] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 405.073400][T11313] should_failslab+0xc2/0x120 [ 405.073420][T11313] __kmalloc_cache_node_noprof+0x83/0x830 [ 405.073437][T11313] ? __get_vm_area_node+0x101/0x330 [ 405.073459][T11313] ? __pfx___might_resched+0x10/0x10 [ 405.073476][T11313] ? __get_vm_area_node+0x101/0x330 [ 405.073495][T11313] __get_vm_area_node+0x101/0x330 [ 405.073518][T11313] __vmalloc_node_range_noprof+0x247/0x16b0 [ 405.073539][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.073563][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.073584][T11313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.073604][T11313] ? find_held_lock+0x2b/0x80 [ 405.073627][T11313] ? avc_has_perm_noaudit+0x117/0x3b0 [ 405.073653][T11313] ? avc_has_perm_noaudit+0x149/0x3b0 [ 405.073676][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.073692][T11313] __vmalloc_node_noprof+0xad/0xf0 [ 405.073712][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.073731][T11313] __vmalloc_noprof+0xa3/0x120 [ 405.073751][T11313] ? __pfx___vmalloc_noprof+0x10/0x10 [ 405.073774][T11313] ? rcu_is_watching+0x12/0xc0 [ 405.073788][T11313] ? cap_capable+0x10d/0x3f0 [ 405.073805][T11313] bpf_prog_alloc_no_stats+0x58/0x610 [ 405.073820][T11313] ? security_capable+0x7e/0x260 [ 405.073837][T11313] bpf_prog_alloc+0x3b/0x230 [ 405.073851][T11313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.073869][T11313] bpf_prog_load+0x1a57/0x2cc0 [ 405.073894][T11313] ? __pfx_bpf_prog_load+0x10/0x10 [ 405.073916][T11313] ? avc_has_perm_noaudit+0x149/0x3b0 [ 405.073941][T11313] ? avc_has_perm+0x144/0x1f0 [ 405.073974][T11313] ? selinux_bpf+0xdd/0x130 [ 405.073996][T11313] ? bpf_lsm_bpf+0x9/0x10 [ 405.074013][T11313] __sys_bpf+0x3e72/0x4980 [ 405.074037][T11313] ? __pfx___sys_bpf+0x10/0x10 [ 405.074056][T11313] ? find_held_lock+0x2b/0x80 [ 405.074082][T11313] ? find_held_lock+0x2b/0x80 [ 405.074109][T11313] ? __mutex_unlock_slowpath+0x161/0x790 [ 405.074142][T11313] ? fput+0x70/0xf0 [ 405.074155][T11313] ? ksys_write+0x1ac/0x250 [ 405.074179][T11313] ? __pfx_ksys_write+0x10/0x10 [ 405.074201][T11313] __x64_sys_bpf+0x78/0xc0 [ 405.074220][T11313] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.074239][T11313] do_syscall_64+0xcd/0xf80 [ 405.074263][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.074278][T11313] RIP: 0033:0x7fbdb0d8f749 [ 405.074292][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.074308][T11313] RSP: 002b:00007fbdb1cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.074326][T11313] RAX: ffffffffffffffda RBX: 00007fbdb0fe6090 RCX: 00007fbdb0d8f749 [ 405.074337][T11313] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 405.074347][T11313] RBP: 00007fbdb1cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 405.074356][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.074366][T11313] R13: 00007fbdb0fe6128 R14: 00007fbdb0fe6090 R15: 00007ffd2c620a98 [ 405.074391][T11313] [ 405.077629][T11313] syz.0.1210: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 405.577266][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.0.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.577293][T11313] Tainted: [L]=SOFTLOCKUP [ 405.577298][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.577306][T11313] Call Trace: [ 405.577312][T11313] [ 405.577318][T11313] dump_stack_lvl+0x16c/0x1f0 [ 405.577341][T11313] warn_alloc+0x248/0x3a0 [ 405.577358][T11313] ? __pfx_warn_alloc+0x10/0x10 [ 405.577371][T11313] ? trace_kmalloc+0x2b/0xb0 [ 405.577388][T11313] ? __kmalloc_cache_node_noprof+0x2ed/0x830 [ 405.577411][T11313] ? __kasan_kmalloc+0x8a/0xb0 [ 405.577429][T11313] ? __get_vm_area_node+0x208/0x330 [ 405.577454][T11313] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 405.577482][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.577504][T11313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.577524][T11313] ? find_held_lock+0x2b/0x80 [ 405.577547][T11313] ? avc_has_perm_noaudit+0x117/0x3b0 [ 405.577574][T11313] ? avc_has_perm_noaudit+0x149/0x3b0 [ 405.577598][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.577613][T11313] __vmalloc_node_noprof+0xad/0xf0 [ 405.577634][T11313] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 405.577652][T11313] __vmalloc_noprof+0xa3/0x120 [ 405.577672][T11313] ? __pfx___vmalloc_noprof+0x10/0x10 [ 405.577695][T11313] ? rcu_is_watching+0x12/0xc0 [ 405.577709][T11313] ? cap_capable+0x10d/0x3f0 [ 405.577726][T11313] bpf_prog_alloc_no_stats+0x58/0x610 [ 405.577741][T11313] ? security_capable+0x7e/0x260 [ 405.577758][T11313] bpf_prog_alloc+0x3b/0x230 [ 405.577772][T11313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.577790][T11313] bpf_prog_load+0x1a57/0x2cc0 [ 405.577816][T11313] ? __pfx_bpf_prog_load+0x10/0x10 [ 405.577837][T11313] ? avc_has_perm_noaudit+0x149/0x3b0 [ 405.577866][T11313] ? avc_has_perm+0x144/0x1f0 [ 405.577902][T11313] ? selinux_bpf+0xdd/0x130 [ 405.577929][T11313] ? bpf_lsm_bpf+0x9/0x10 [ 405.577947][T11313] __sys_bpf+0x3e72/0x4980 [ 405.577971][T11313] ? __pfx___sys_bpf+0x10/0x10 [ 405.577990][T11313] ? find_held_lock+0x2b/0x80 [ 405.578016][T11313] ? find_held_lock+0x2b/0x80 [ 405.578042][T11313] ? __mutex_unlock_slowpath+0x161/0x790 [ 405.578076][T11313] ? fput+0x70/0xf0 [ 405.578089][T11313] ? ksys_write+0x1ac/0x250 [ 405.578107][T11313] ? __pfx_ksys_write+0x10/0x10 [ 405.578129][T11313] __x64_sys_bpf+0x78/0xc0 [ 405.578149][T11313] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.578167][T11313] do_syscall_64+0xcd/0xf80 [ 405.578187][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.578202][T11313] RIP: 0033:0x7fbdb0d8f749 [ 405.578214][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.578229][T11313] RSP: 002b:00007fbdb1cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.578243][T11313] RAX: ffffffffffffffda RBX: 00007fbdb0fe6090 RCX: 00007fbdb0d8f749 [ 405.578253][T11313] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 405.578262][T11313] RBP: 00007fbdb1cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 405.578271][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.578280][T11313] R13: 00007fbdb0fe6128 R14: 00007fbdb0fe6090 R15: 00007ffd2c620a98 [ 405.578302][T11313] [ 405.579390][T11313] Mem-Info: [ 405.901502][T11313] active_anon:19586 inactive_anon:0 isolated_anon:0 [ 405.901502][T11313] active_file:21199 inactive_file:41301 isolated_file:0 [ 405.901502][T11313] unevictable:768 dirty:247 writeback:0 [ 405.901502][T11313] slab_reclaimable:11184 slab_unreclaimable:104955 [ 405.901502][T11313] mapped:37397 shmem:11021 pagetables:1833 [ 405.901502][T11313] sec_pagetables:0 bounce:0 [ 405.901502][T11313] kernel_misc_reclaimable:0 [ 405.901502][T11313] free:1257286 free_pcp:30239 free_cma:0 [ 405.951742][T11313] Node 0 active_anon:78444kB inactive_anon:0kB active_file:84796kB inactive_file:165000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149588kB dirty:984kB writeback:0kB shmem:42548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15608kB pagetables:7212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.002729][T11313] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.041971][T11313] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.084730][T11313] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 406.090630][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 406.108550][T11324] netlink: 'syz.6.1213': attribute type 1 has an invalid length. [ 406.109687][T11313] Node 0 DMA32 free:1126144kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78444kB inactive_anon:0kB active_file:84796kB inactive_file:165000kB unevictable:1536kB writepending:984kB zspages:0kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:95200kB local_pcp:62468kB free_cma:0kB [ 406.152870][T11313] lowmem_reserve[]: 0 0 1 1 1 [ 406.157620][T11313] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.238122][T11313] lowmem_reserve[]: 0 0 0 0 0 [ 406.251289][T11313] Node 1 Normal free:3887440kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26784kB local_pcp:6944kB free_cma:0kB [ 406.284759][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 406.296699][ T24] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.322359][ T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 406.367302][ T24] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.394830][T11313] lowmem_reserve[]: 0 0 0 0 0 [ 406.403324][T11313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.416024][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 406.435497][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 406.455069][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.467337][T11313] Node 0 DMA32: 3248*4kB (UM) 3204*8kB (UME) 1268*16kB (UME) 168*32kB (UME) 150*64kB (UME) 129*128kB (UME) 39*256kB (UME) 35*512kB (UME) 26*1024kB (UM) 19*2048kB (UM) 231*4096kB (UM) = 1130016kB [ 406.486829][ T24] usb 4-1: Product: syz [ 406.491128][ T24] usb 4-1: Manufacturer: syz [ 406.497808][ T24] usb 4-1: SerialNumber: syz [ 406.503605][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 406.503617][ T30] audit: type=1326 audit(1766232366.434:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11328 comm="syz.6.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517378f749 code=0x0 [ 406.557254][T11313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.571458][T11313] Node 1 Normal: 176*4kB (UME) 52*8kB (UME) 49*16kB (UME) 193*32kB (UME) 47*64kB (UME) 14*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3887696kB [ 406.615212][T11313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.643184][T11313] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 406.689917][T11313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.714053][T11313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 406.739717][T11313] 73495 total pagecache pages [ 406.752944][T11313] 0 pages in swap cache [ 406.758360][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 406.822750][T11313] Free swap = 124996kB [ 406.853046][T11313] Total swap = 124996kB [ 406.913539][T11313] 2097051 pages RAM [ 406.948926][T11313] 0 pages HighMem/MovableOnly [ 406.956434][ T30] audit: type=1400 audit(1766232366.884:908): avc: denied { map } for pid=11335 comm="syz.5.1215" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 406.968310][T11313] 429813 pages reserved [ 408.281357][ T24] usb 4-1: USB disconnect, device number 64 [ 408.303829][T11313] 0 pages cma reserved [ 408.326661][ T24] usblp0: removed [ 408.579935][ T5881] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 408.763578][ T5881] usb 7-1: Using ep0 maxpacket: 8 [ 408.857168][T11356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11356 comm=syz.0.1220 [ 409.060827][ T5881] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 409.090205][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 409.121429][ T5881] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.144996][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 409.181538][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 409.211295][ T5881] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 409.236436][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 409.267160][ T5881] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.289474][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 409.307189][ T5881] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 409.648392][T11368] lo speed is unknown, defaulting to 1000 [ 409.655120][T11368] lo speed is unknown, defaulting to 1000 [ 409.665701][T11368] lo speed is unknown, defaulting to 1000 [ 409.684554][T11368] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 409.720458][T11368] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 409.823599][T11368] lo speed is unknown, defaulting to 1000 [ 409.834616][T11368] lo speed is unknown, defaulting to 1000 [ 409.845200][T11368] lo speed is unknown, defaulting to 1000 [ 409.855716][T11368] lo speed is unknown, defaulting to 1000 [ 409.867885][T11368] lo speed is unknown, defaulting to 1000 [ 409.879318][T11368] lo speed is unknown, defaulting to 1000 [ 409.906226][T11369] smc: removing ib device syz! [ 410.535895][T11368] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 410.592718][T11369] ------------[ cut here ]------------ [ 410.598187][T11369] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x41/0x60, CPU#1: syz.5.1218/11369 [ 410.609594][T11369] Modules linked in: [ 410.613733][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.5.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.624716][T11369] Tainted: [L]=SOFTLOCKUP [ 410.629015][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.639085][T11369] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 410.645413][T11369] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 aa 27 f9 e8 c0 aa 27 f9 90 <0f> 0b 90 5b e9 b6 aa 27 f9 e8 b1 84 91 f9 eb da 66 66 2e 0f 1f 84 [ 410.665066][T11369] RSP: 0018:ffffc900034b71b8 EFLAGS: 00010246 [ 410.671155][T11369] RAX: 0000000000080000 RBX: ffff88804cf05358 RCX: ffffc9001e0ae000 [ 410.679123][T11369] RDX: 0000000000080000 RSI: ffffffff88973bd0 RDI: ffff88804cf053d8 [ 410.687152][T11369] RBP: ffffffff88959d50 R08: 0000000000000005 R09: 0000000000000001 [ 410.695469][T11369] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804cf04698 [ 410.703763][T11369] R13: ffff88804cf03fe0 R14: ffff88804cf03fe0 R15: ffff88804cf050b8 [ 410.711772][T11369] FS: 00007f77ba3816c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 410.720749][T11369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.727339][T11369] CR2: 00007fbdb1b156c0 CR3: 00000000493ef000 CR4: 00000000003526f0 [ 410.735359][T11369] Call Trace: [ 410.738642][T11369] [ 410.741609][T11369] rxe_dealloc+0x25/0xc0 [ 410.745854][T11369] ib_dealloc_device+0x49/0x230 [ 410.750894][T11369] __ib_unregister_device+0x396/0x480 [ 410.756268][T11369] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 410.762186][T11369] ib_unregister_device_and_put+0x5a/0x80 [ 410.767907][T11369] nldev_dellink+0x21f/0x320 [ 410.772508][T11369] ? __pfx_nldev_dellink+0x10/0x10 [ 410.777628][T11369] ? rcu_is_watching+0x12/0xc0 [ 410.782412][T11369] ? cap_capable+0x10d/0x3f0 [ 410.786976][T11369] ? bpf_lsm_capable+0x9/0x10 [ 410.791652][T11369] ? security_capable+0x7e/0x260 [ 410.796568][T11369] ? ns_capable+0xd7/0x110 [ 410.801000][T11369] ? __pfx_nldev_dellink+0x10/0x10 [ 410.806088][T11369] rdma_nl_rcv_msg+0x38a/0x6e0 [ 410.810984][T11369] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 410.816294][T11369] ? __lock_acquire+0x436/0x2890 [ 410.821292][T11369] ? __pfx___schedule+0x10/0x10 [ 410.826129][T11369] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 410.832581][T11369] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 410.839518][T11369] ? netlink_deliver_tap+0x1ae/0xd30 [ 410.844835][T11369] ? netlink_unicast+0x4a9/0x870 [ 410.849767][T11369] netlink_unicast+0x5aa/0x870 [ 410.854724][T11369] ? __pfx_netlink_unicast+0x10/0x10 [ 410.860130][T11369] netlink_sendmsg+0x8c8/0xdd0 [ 410.864898][T11369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.870206][T11369] ____sys_sendmsg+0xa5d/0xc30 [ 410.874964][T11369] ? copy_msghdr_from_user+0x10a/0x160 [ 410.880426][T11369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.885716][T11369] ___sys_sendmsg+0x134/0x1d0 [ 410.890401][T11369] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.895590][T11369] ? __schedule+0x1090/0x6150 [ 410.900270][T11369] __sys_sendmsg+0x16d/0x220 [ 410.904839][T11369] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.909993][T11369] do_syscall_64+0xcd/0xf80 [ 410.914482][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.920395][T11369] RIP: 0033:0x7f77b958f749 [ 410.924785][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.944403][T11369] RSP: 002b:00007f77ba381038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.952952][T11369] RAX: ffffffffffffffda RBX: 00007f77b97e6360 RCX: 00007f77b958f749 [ 410.960928][T11369] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 410.968886][T11369] RBP: 00007f77b9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.976888][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.984892][T11369] R13: 00007f77b97e63f8 R14: 00007f77b97e6360 R15: 00007ffc08bfade8 [ 410.992886][T11369] [ 410.995881][T11369] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.003138][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.5.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.014051][T11369] Tainted: [L]=SOFTLOCKUP [ 411.018354][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.028384][T11369] Call Trace: [ 411.031649][T11369] [ 411.034561][T11369] dump_stack_lvl+0x3d/0x1f0 [ 411.039168][T11369] vpanic+0x640/0x6f0 [ 411.043149][T11369] ? rxe_pool_cleanup+0x41/0x60 [ 411.048002][T11369] panic+0xca/0xd0 [ 411.051719][T11369] ? __pfx_panic+0x10/0x10 [ 411.056132][T11369] check_panic_on_warn+0xab/0xb0 [ 411.061063][T11369] __warn+0x108/0x3c0 [ 411.065030][T11369] __report_bug+0x2a0/0x520 [ 411.069519][T11369] ? rxe_pool_cleanup+0x41/0x60 [ 411.074358][T11369] ? __pfx___report_bug+0x10/0x10 [ 411.079360][T11369] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.084537][T11369] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 411.090332][T11369] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 411.096125][T11369] ? __flush_workqueue+0x410/0x1230 [ 411.101296][T11369] ? rxe_pool_cleanup+0x41/0x60 [ 411.106126][T11369] report_bug+0xb2/0x220 [ 411.110347][T11369] ? rxe_pool_cleanup+0x41/0x60 [ 411.115173][T11369] handle_bug+0x127/0x260 [ 411.119478][T11369] exc_invalid_op+0x17/0x50 [ 411.123967][T11369] asm_exc_invalid_op+0x1a/0x20 [ 411.128791][T11369] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 411.134223][T11369] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 aa 27 f9 e8 c0 aa 27 f9 90 <0f> 0b 90 5b e9 b6 aa 27 f9 e8 b1 84 91 f9 eb da 66 66 2e 0f 1f 84 [ 411.153810][T11369] RSP: 0018:ffffc900034b71b8 EFLAGS: 00010246 [ 411.159858][T11369] RAX: 0000000000080000 RBX: ffff88804cf05358 RCX: ffffc9001e0ae000 [ 411.167816][T11369] RDX: 0000000000080000 RSI: ffffffff88973bd0 RDI: ffff88804cf053d8 [ 411.175757][T11369] RBP: ffffffff88959d50 R08: 0000000000000005 R09: 0000000000000001 [ 411.183695][T11369] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804cf04698 [ 411.191637][T11369] R13: ffff88804cf03fe0 R14: ffff88804cf03fe0 R15: ffff88804cf050b8 [ 411.199579][T11369] ? __pfx_rxe_dealloc+0x10/0x10 [ 411.204498][T11369] ? rxe_pool_cleanup+0x40/0x60 [ 411.209342][T11369] ? rxe_pool_cleanup+0x40/0x60 [ 411.214195][T11369] rxe_dealloc+0x25/0xc0 [ 411.218431][T11369] ib_dealloc_device+0x49/0x230 [ 411.223362][T11369] __ib_unregister_device+0x396/0x480 [ 411.228716][T11369] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 411.234592][T11369] ib_unregister_device_and_put+0x5a/0x80 [ 411.240298][T11369] nldev_dellink+0x21f/0x320 [ 411.244879][T11369] ? __pfx_nldev_dellink+0x10/0x10 [ 411.250010][T11369] ? rcu_is_watching+0x12/0xc0 [ 411.254748][T11369] ? cap_capable+0x10d/0x3f0 [ 411.259320][T11369] ? bpf_lsm_capable+0x9/0x10 [ 411.263969][T11369] ? security_capable+0x7e/0x260 [ 411.268884][T11369] ? ns_capable+0xd7/0x110 [ 411.273286][T11369] ? __pfx_nldev_dellink+0x10/0x10 [ 411.278376][T11369] rdma_nl_rcv_msg+0x38a/0x6e0 [ 411.283120][T11369] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 411.288383][T11369] ? __lock_acquire+0x436/0x2890 [ 411.293296][T11369] ? __pfx___schedule+0x10/0x10 [ 411.298126][T11369] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 411.304528][T11369] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 411.311454][T11369] ? netlink_deliver_tap+0x1ae/0xd30 [ 411.316726][T11369] ? netlink_unicast+0x4a9/0x870 [ 411.321651][T11369] netlink_unicast+0x5aa/0x870 [ 411.326397][T11369] ? __pfx_netlink_unicast+0x10/0x10 [ 411.331674][T11369] netlink_sendmsg+0x8c8/0xdd0 [ 411.336417][T11369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.341690][T11369] ____sys_sendmsg+0xa5d/0xc30 [ 411.346444][T11369] ? copy_msghdr_from_user+0x10a/0x160 [ 411.351879][T11369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.357156][T11369] ___sys_sendmsg+0x134/0x1d0 [ 411.361812][T11369] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.367002][T11369] ? __schedule+0x1090/0x6150 [ 411.371668][T11369] __sys_sendmsg+0x16d/0x220 [ 411.376238][T11369] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.381338][T11369] do_syscall_64+0xcd/0xf80 [ 411.385826][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.391698][T11369] RIP: 0033:0x7f77b958f749 [ 411.396091][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.415680][T11369] RSP: 002b:00007f77ba381038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.424070][T11369] RAX: ffffffffffffffda RBX: 00007f77b97e6360 RCX: 00007f77b958f749 [ 411.432017][T11369] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 411.439964][T11369] RBP: 00007f77b9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.447911][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.455864][T11369] R13: 00007f77b97e63f8 R14: 00007f77b97e6360 R15: 00007ffc08bfade8 [ 411.463826][T11369] [ 411.467089][T11369] Kernel Offset: disabled [ 411.471390][T11369] Rebooting in 86400 seconds..