last executing test programs: 14.491821527s ago: executing program 1 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)={0x8, 0x0, [{0x5000, 0x0, 0x0}, {0xd000, 0x0, 0x0}, {0x1, 0x8a, &(0x7f0000000700)=""/138}, {0x4000, 0xf2, &(0x7f0000000840)=""/242}, {0x6000, 0x81, &(0x7f0000000940)=""/129}, {0xeeee0000, 0x55, &(0x7f0000000680)=""/85}, {0x8000000, 0xb6, &(0x7f0000000a00)=""/182}, {0x8080000, 0x9c, &(0x7f0000000ac0)=""/156}]}) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff0100000000000000000000000000010500030001000000280000"], 0x174}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100"/56, @ANYBLOB], 0x54}}, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) prctl$PR_SET_IO_FLUSHER(0x59616d61, 0x1) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 13.296748677s ago: executing program 1 (id=3704): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0xf3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0x1, 0x1}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a00ac1414bb000000000000000000000000ff010000"], 0x38}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) listen(r8, 0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd0100"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@local=@item_012={0x1, 0x2, 0x4, "e9"}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x4, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @local=@item_012={0x2, 0x2, 0x8, "f53a"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0xb, "31654111"}]}}, 0x0}, 0x0) 10.494586075s ago: executing program 4 (id=3712): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='d\x9f\xcc\'K\x97s\xd6\x1b\x94\xc5\xc8\xee\xedS\x9a\x9a\xec\xf6W-\x0e\xfa\xd48`_\'\x00\x80\xb4\xb2\xe1\x9a\\!\x86\x10R\xf3oz\\\xb3+m\xb47\x14\x99\x0f\xd6\x9cYn*~\xdf~\x99x\x98\x9f\x89\x8c\x86\x13\xf7\xc6\xa4\xa9\xfe\x06d+\xd57\x1a\x8e\xc3GM\x11\x8c4w\x1e\xc5\xea\xf2\xc7#\xffuq\x82\xebr\xc6\x16\x99\xc35_\xbe29K\xad\xc2\xb5+2\xfe\x88\xb0\x9e\xc6P\xc5\xd9\xb5M^\x81\xdf\x00\x00\xf8\xb3@p\xa3y\xbd\'\xd5\xea\xed\xdc\xc2\x12Zu\f\x98=\xc3\n\x93\xf3Y\xc0\x02\x98\xe4Y\x91t\xf4\xf2\xae|\xb7\xb8\x81o\xd5\xb2^\xdf+m\xddJ\xc8\xac\xbe\xd6\x02\xb7|]\x9a\\ \xa0a=\x92X\a\x99\xc0l\x17I\x02i\xa4A\x8a\x1d\xb5Xt\xbck\xc1nU\x9f\xd3\\_\x80\xa7\xc7\xa2\xae\xe3\x95l]\x91\n}\x12\x93k\xf8DN\x0fGeN\x00\xb8\xc9\xabO\xd7\xfc\xa5u\xcf\x1c\x87\x06\x03\xc2\x9a2\x83\xaf\xd5\xee\xc8_\xbe\xfb\xb6\xa2\xe6\xad;\xfbC\x11\xb9\x84{\x9fr\x9b\x14\xf9\x00\x10\x1e\xcd\'%\x1d\x06\xdbe\xcd\xb8\xb1\x7f\xd2r\x1b\x84\xd6\'\x13\x9e>\x938\x0ef7\x8btv\bO\xe0$C\x95\x02\xb0\x91\xfewY\x1b\x05^\x85L\v\xd7]\xc8\xb3\x9d2g\xfc\x1b*\x02\x8d\xde\xeb\x06H\x1f/\xd2,\rR\x83L\xf3\x99\xc0\x11\x00\xd4\xbf*\xe6q\xa8\x9c\xf7\x1dh\x88\xf9\xb7\xf8x\x1bG\x90\x91rPK\xdeOX\x87', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = creat(0x0, 0x8) read$FUSE(r3, &(0x7f000000c400)={0x2020}, 0xfffffffffffffce1) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2f0, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x244, 0xfc, 0x0, 0x1, [@nested={0x240, 0x8, 0x0, 0x1, [@generic="afca5ff5d515226501d9fac3908ff02f8d09509c26adb6b5d864484d04d69b4da5d7a52bfaaaad3a5c25aa473a0456cf81bd4d74603377984679d221e2a018985f995b9c1787285a3068593180b924ed8d0940610e751d4177f4fdaa3b647713ec058a87aa46f52171df898c7a05121abccd3e66c0d455d5497f9b88f86e97ac669b2ac8acdde2137a259ace56f95c5e39e7db5a34433901da46f369d9dd5ca3e90600b07d4664e1d96191edfaa947604e2f1f75db04", @generic="9bd8923e183ceaf32e67fb16888c806403ecd4458012965b4bf87d769bf5e030474a90f0f8b743003256111a88037a5489878dc68d48348280c55d31a3ea6fc747a0cf299e10637fbc9a618a6bcadf0f6caf923a1dfbd1f2ba8fa08ddffc28b9a387e3b2b35d8a4ac3ea722e6f6089", @generic="cc683eecda71ba25b3f72797dc417fca84d9d8f8baa94057192947b92000ba5770c7b084403a03adc1a2f42acd35c86093d2150d1d0a70f422e4f73eac96a9de66ddc93cb95cbfce68d52b80505ad2cb11893f86e6c26ea10f484762e841ee827d794612312cd37ad973b2ab2986bb65f84b670790bad3776ef66f76955009f71065c51850d6b375827b6e3666e469312a118278044cc8c60724f9c11c75aee12f40a3f53f995cc20d3fef674b2e46dfdf9d48685be6be74cf4374ae2c3627d82fb3523b86a6b5eecc7c852e62b45b72141293a9e3fb1096a448ff5bce3586b50be5d12cbf9a80bca166", @generic="f0e79ebd68b11bafb7f0fcc690fd1895afce6ae42d8ab38b9ebbfedf6d80c37c89ead9c8af0ec8b3f4a81f88d0"]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x81, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="97f0972655b21cc2f3546e633e140f95053c8719270e42da2b3a8d9228b34d5eccb0ff657f11904b17cdff08039627a48e77b3b9b8c2fb92396917888a0fbcd5b067c0e23eb9cd6d0a367ea3a6989f453bc0a6907410de82e1038ff2891cf948ce3f26e5d74bba8eb2e13ce93ca6deeb695e0a89dcd08ac1d5"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x2f0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 9.568837811s ago: executing program 2 (id=3716): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e40), 0x40040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000ec0)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x24000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x400000, 0x48) unlinkat(r3, &(0x7f00000005c0)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="727244a145817936e1f77d0966d19e33ff04d3d4dca7e6cc89959753790faddf224ca73ff6a1cd0f9efd0e48f743b0df125356b77148cc5924fb7d927ad1b018c5976120e49f27f683ec2a948ee882ec04d7931b123db7415f6417f37c9a35e915c3b71b75a7308d6c39ec4efe068bdfbd013eef5306da050012000000000008007b00e08004007a800400ce8008001600", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES64, @ANYRESOCT=r5, @ANYBLOB="00340029007830a65dbe4215d1ffea1ff0d0899c38f424357085225d78ff9a2f7e725bf5192039171cfd164f15b95828f22c1eb0dd08004900ffffffff05104b80b483b9ac1a1072a07cd671a301e8ec854f144951501fcb74d84f3caa9cb8fb1d475f1386a3cb043b5e1743772686dbaa65a1a66cf5741534f0f8261ed3d3e555ad3b3ce4517c66252b6f4e79b0d1bee79dc937fbfd6916221d501b1f995b5fbdafd4b3a6680d6eaf0f4a8ed8a54e5d6bcd67e88a53f58cf46fd58b29c3ac5e64295b3a38dc7f7fff104059699fc9d9b94f1c3c98c49f2efeda4c01a9c41c80099aa0c020e5afd9417c4c444a1b619cd2f71096ab2c5350499bb9938b27b2267333814314e91a38c3bbd63832d6bfe4b07d5cc9589c5ce21de9e6bc04da9e88fa2565b4d2794b42a9b3f3c4ac9ea935e8e000f03ddc561e891b4d385099defb3e337987c2a445f0e768ccf5b769230f3464aea6a37b6596690adcfefd13b7fa198cc6efcd81e9a1bd0a3efab6baa7c3204d008153273f639f46d7175ed3907c7e9c898bd3efb981c2690333473ac68249d82399d8b4bed69b3d7b7649362938c5282d6bdef8f30275134e71dbe98e16512df55e17b303564d3968623138181f303fbc8eccd72c92ab6e978573551354e49f15de26bd014d3a312e75e978556500ad55d714d0473fe948688ac5a6efe1f0bdc6ec9386c4157bd565eaac668289e45d2b15ab58b4fb9d9bb32980a4d62f10d9a08b478052b409abc8596b01d6ea6c6afbdcf9fb12740a8e34017dcf5c888feb2323b2fcf1bc847d2650a8c511256275c5abb261c99f255809541a44c8122bb66320e580e65bc1e753ebe587f2bf472989e417299dc20e68a50b7c706fac1339c5dd0ccb9839b7776267ede2d957a1a0d07ae7ee22c2c02ca831b5feda13377fa6a510361a397ee9b0d72e5b113237cc92cfb4e8275f5271af1f773223af87da717fbcfec468dbc550f80d94e4ac5db1407c01e3b73fb5647de088b813c384d2e5288440ec6082a394b558473a690120dcf92fa2242779aa80a726bb363d02cae450d57ee6695d3a6487232105ac91c5706d55a0f47325c5643d8ffbc4ee564b45b568a0e5a86a7226dced2d033a596b13d967c60052c4490432f835da8f3a88a794a09929104e568fddc6994f662330ab440961d63339d0c1706c0a62e41c720c71d705b1133bdfec947ccc6a3b46acfa780900b9aa16972085c2a56ca33ca4f2e280730bbaacf424a9e61bf96ad279ed9857580d41ecab3b0f059718c238a2910d573d0cabde0e64f9ca94f91846b1076849552702a14bdf6840526a4597e673364b197e90692f70ac332f2c3c3c4ec93f00a59f81731ac006b3b45805f95e3394a3414657868c7cdbb31934925f0d5db9173ec1afca86d7dbef1fc9844125b9b5aeee78bf65f420cade50f3fc652f35c349c8805c7dabab4071b13757da8624882058f742ad8d289676a81bf42d12da118d9432901602f89a320081e8da6e49399669143b84f3bfeeaa4e9adb3d8f60bc65e8d81359b7e15583b57a4023ea1c3fcacd7751099ebb6ed6ee9347414887b7c98b004faeef086c3952fc7b15e63841f95cb4c255dff18b87998fd90e3880ebdd92e71649e0f6a17842a38855f69ca095491491be12fbe4d517bc7a37fd4d436f20dd3204e8637f3e92a625cfaad1ede930b1e8eaf537c5ef3311b26e20ca8a5fe8dc8df80f3bed1ca2dc3f75022cd50a98de57f8d581ade98c0cfaa6c9d91a82c60407832fbd31da8e2d6c1106b36def3177409950d4f46d9ed54ecb31141498fc01007bd6d7aef1c10d315c22cda4b8d4565d95081b03266bd898aca72a6db14e896ca0c6133a5e5279f5b534abb751e26d698308b66879dcba918de5049ae6a9e18b9da522e0353a4c51354dbd3f047689620c05935772e0bf419c176ddc4b6a9bdcea9387fdf058ae346bc2d5ccf59a3d8c55e728bfa008f9ae790c5a11e9c16129ca61b5cc218507a2366dd8bebc3ac8a8c7b9013ba5016b7c4d62808267ee37fcd9ed446e254921331911f07cdf4ca9ceedd2c923dbeda2dbc7800a7bf96a5cd64e5761034afd6ba388821db82108160caeb8639b832d18daca0234e58744014e459c37d730588f71e315e82987c5d3a7741e196ffdc31634198c78e29e58a246e8e7c30b40861d66b8faa1c047c7283e3dc9a016af96608fa476e2d3576d2d5b57f43cafa667b2301e38230621ca821bccae24cc529c1429bf3c0b87a670acf1aba8c16c1668547af68206ce79379dddf0ccdbe529fdbba8cfe0f8fdb0b6ade03c93291c78fd6d998a848a3f4b6dba6ffef61b2566c4316256091c34326dcc49bc385c3c6659c27132095d1afced4e2e4272b508ccb1d640067378bc85ec1dee5955827f3e2174fb38b14a70e2081a5db6314824e3d40a0b1c37a26531a771960292fa35e586d74de1dce582ec6979be3164ac9e62a5550430cc42a999dcfd18ba9f017c8642e97b465136c176cb7868671a6cf9761ef006582d74ff1e0ec33dd2d26955b509b14e6b2863ab5ec7358eddeaa367b43ff576214874b8887af890bde37a270221cd56326c6cb9b44df655e0b0f8ef2dd26192bc841455c23a9a11bfa7c1ad42809d2f0aecb620ab0a969fca7b3718b4c77bcca6372f17cb9c84b1d2071443e958964f87516383a91997f151db6025561d38cceb047a4074f6250b516b5f9f2d1d2daa3e119baa1a3608b3f39dc3f9e28839f7ac7e5a9267b92d52a4cbd5c10d60094820c6b414d4f3c86858f4326d12c51e6453e7e5b532b7d40ff7f3bd9d0b0c93aa1316e61c728bb85b5763bbc4979a53f9d2e87f1cefc52736f9fa0d735763e0fb059b49900c195f6506f29bda69cab10ec468854fd3664858b410e85acb4042cbf4fb093c7f2989bda82ea9b8ac160dfb4bd6ccec2d7b805697f3f6522018db79a339223fbabc5f7fd5bf32bfc339f9feafc1de4fcf9c767d1bb4576c0d47415e56d3b82de13a1d396962eeaa94068bddb628526f1a4ccade66f3b975e254de2a6306c7d48ead70dc1fff626c3725073cb73a8182bbcd20b9bcd4f72cd37aea8a69ff2e397d807ecc7bfe5d0b47ef894313938b912c200581ea907bb4c6bd6d63f467272a7360b6dd0952ac1154377c8114f7c8a33e14f61a5cde833d6a805ea9e9de273023ec27d305131924623c6eeab4304b188a3fd47493b4a0221e590c86022f037b0a3df369a8af02d9252da3e66e7e58cf7c2908b8ba8971d9fbdec6eac00ed86757edc4fe89fc34cc2ed54c5e0397613ae3f1bf8c4fa3638e3f8463eed83158b855a73ab2ba449258f8761c0b46e6e3bb1cb8d5191fd63bb802adb5404fe582541b4805dd9888adcd8bfd4e9a8ccbd2d73ca578ef0bd3b7a4b34554f60619d3b1364fdba8c80a5b6db5d8ca0072d8bf4f4e863e2dc09927658d047c39a923f335d0b1230069b4c425fe340da60e7e55f07317913d733dab9f8be51e9430cab3369bc3bfd0fc22a92f7c418a139a247ef2c6f81189e41d959669eb8704d2777a72bdd60548f6bc03da5ba24c4aae641f9b2748f8793f65b246418fe7adfb4fda654f92f2c71257ad83aa5750b8045dc26a35379098357d7010392e76c3ac22932cc2449261acedf6849e1a4319d1a5c40a1e2cfcbbf2479a40d8c2805f75e9b4d3c59c4c17ef0b68fa29937d35d7584e477e7cdd34acc7b8eabcd87122a78f76efd57b1ddc0cbab0a583b3bc79a8d43455bb63a0b9ed80e2780ecdc9429595075200c662201eb48c64bac041a0cdd205012db6a6729bbf5d7b8590526e399518790cad0613ecf259ea9e86022bfa8873c3d2462f3eb4c120d26c3f936379c7ac362b9151fb9f62e73fa616c3d5bc8239ce8366a126c3b5978c845a6cee1a62f80c9f37d431894789cdbb71283e3e53fa363fdd8fc21deee8d755452db64adc9d9c1ba51473779c70fa36cbd3fa4186e107855413dd588d0b734017bb451f2b8735cbec1599eae18fc547b6b08aba75c5d241b95fef3f302b6004fdc42df8f8d5e7f745ff02ce0b6cfc7c46ac3590c0023e129a11dfcb902e865435198065dad4588571e686e3aea1dd175fbfdfa0005ff219dd34d8657e93ac84499d7c88803b8c437f622ab5224c114e5a2bcddaf6cfeb43c053b2c38242cbe81eaf1ad2258b5aa8676961b72e1855f1a19c98541d503432e1c725e928ab5b9854c752117ddc8f0bd724c7c7628fabcfbbd91f2e4c9ee8dba3805ccf57069a85fa0dcaee90346f1e5e0e6a311e234c644f5adfc6d9b14793de6594cab0ac17d138abd1623289cae762ddf976e113e70c62ec3c349fcd11b4ade388b0223cfbdf555f03c4f5bd7cca44250fff02bd88b5cb2b55699e1d4e2edc75f9b78077f9b0ceba820235e783a8460255ab430b8603514872911793fc30efbe3e688052ad8c63f4a7856b2552d0056223377913d8dea4ee1ddd2745099016091b0454bedb0b8e226c02342d2237ac3ee0c55b0232c6c7636f214c8b5ab8403a5471506225d3cfbaa1b78eca95888fd842be2c7d6c5f66548672206d0ad7869c15286f18d42e63c34428cb0d26af4fbdd4df9acd2e0f54cd6f2645d398f2ac901248aadb9d7999fd6fb4369e9faf3ec49f115bbbc15bc79ada9df3916126c4d1aa298e9aa9ddb7be9474de53bdf599f15287239b4b9ed464a65ad6f55b1017a192ba97b380269fc66503e0d6f8a205a983eb9761e212a32a1c86fdc340e36c6ae8c5978e41e222b945b762abbd85020dfe41414d336bd80df9d6fc6b276038081f44941a60cc3107924f2fb3afa2456335dbd87a88795f5e352e6672aaa6e3e2bab042ed54f099e90e49645c10f5a5aff4fd941a0691bb18dde1c8076edb969b7d11f1bc06308af55b67f73482a0b842095fdd4cdf6c7f054a61b9ccdd2f996fa3d3ecb2d1a178e6b9614679f37bbd0c7fc4ca4c3033ee42644487bd2703e327225273465277acd056ef62d2161754d6463495bb2af8a566d7668322e16002f088225427a4df0be16d00294e3ac98f2689d942e48c4b794f13b2c513859ebdbedb7a327f339f652675233665013235df69f44a43833b00bef5b2a2c9b29b236178daf132e7dd206d19acba6de19ff2d79c07e9e4f3913d01801e69a93e9bea97d8aeee581f6c16aa6f2c5fc6538a3e317f01577b27c3b96d3c311c40675d86ce145718d45aded863232aebe33defccf3e2bd6dcaa2201bef52ad67b38bed6b9e6775748ecad44c3e1a13c94bafb5deec47c11d78c05778fd8672fbf465725ef7aa89b18bd84360278bb5860b9ce292bca61ce7c490759096c4e0a650090985d911d482a558be565a449972a9f4d342c4ed7e54a60d1adb1cf2a37bbc8b5651a8479697ba8ef9b2461e663019aa713845aeb49fc0860a3491548d6d3326c065a54ef8f11613ef0fbe77debfebc3d45b919e7648608e876dd54cbbf7ce57adc3472813d0e7bc1d3970732b504279f060c372d496b38eae78fa0b0d3d1c93a6719d012ba193c1aa4fd2765f71269fd78d3d1efc4939f7f3d0bc044622bbd76a2bd1ec17b5d8a2c68a1f711c0814e36c0609baacb9fbe7fe08f5e920ee2cc7aa5ab4b9794cafadc5da60a7b55825388dfa6ae0a8c2a8f9a3e24615177ef0ace8befe30dbdb7d44f15f0a4cb626ab96abd594d283043a0438a19656f12831b280c54d6ce90a3cb42a5e9fdf293db646aeb97ad6a5ee893613d6343c0da0e0858b6fc0d6de3a5bd6970f3684e9d8fe5c43995a0825e376260efffda7d7320d4943e0db199a667162fff1edf39b0661afe3cde5691844214a01327303ff9be6efa6fc7de311bd9ad83b580000000000000000000000000800bb00e0000002000000"], 0x1428}}, 0x20000092) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 8.012005412s ago: executing program 2 (id=3718): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) fcntl$lock(r3, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf5b}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x80000, 0x401}) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0xd0, 0x0) 7.88592522s ago: executing program 1 (id=3719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) write$UHID_INPUT(r6, &(0x7f0000001780)={0x8, {"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", 0x1000}}, 0x1006) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, 0x0, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x3bf, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0xc24f, 0x4, 0x0, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r12, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 7.052913879s ago: executing program 4 (id=3723): unshare(0x22020600) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r1) inotify_init1(0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="77a1a5ab8225000605000000053146ff44"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x9}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, &(0x7f0000000000)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socket(0x1d, 0x2, 0x6) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r9, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) read$FUSE(r7, &(0x7f0000006340)={0x2020}, 0x2058) fallocate(r6, 0x0, 0x9, 0x7) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, 0x0, &(0x7f0000000040)) 6.91058524s ago: executing program 1 (id=3724): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1890c2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000b00)={0x0, 0x21, 0x5, {0x5, 0x1, "9665f5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x9, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xc1}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x3, 0x3, [0x1, 0x8, 0x1], 0x10}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x1, 0x6, "c622e4"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x4, 0x1, "cb"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x40, "8c9d42db17"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x4, "8121"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1ff, 0xdcd, 0x8, "91"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd6, 0x40, 0xc5, {0x7, 0x25, 0x1, 0x100, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x875f50728c333e8a, 0xa, 0x2, 0xd5, {0x7, 0x25, 0x1, 0x80, 0x9, 0x1a80}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x4, 0x7, 0xff, 0x3}, 0x58, &(0x7f0000000240)={0x5, 0xf, 0x58, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "11e4db41727ee873274691e2b8ec8532"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x26, 0x1, 0x8, 0xf00, 0x7, [0xff0030]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "45e41491264ae90cf4f7fae2064d4b37"}, @ssp_cap={0x18, 0x10, 0xa, 0x29, 0x3, 0x5, 0xf00, 0x8, [0x30, 0x3f0f, 0x30]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x69, &(0x7f0000000300)=@string={0x69, 0x3, "f8b1d7fbc07a63c4fe3729707621712c0d3e43e2dddfb003c2f369736b6171272143379aba1450fce503f70bc31ac1b2636b8797db041f6e6d0c516aa9241bc26d9b306061255981fe327fe67ec58b6e3f690fd015f318687d588e368018f0064bf7db734b9fde"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x810}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "7d05f82570d5f57f9157eae281a7ca3d79f13b95d033538297c179f27d50468e882133a1438fe306e92e0a3ead946e9e0663a93b2b5961666bcd7a5ae1a3f5dfe0794ee1623cc15802cb1c6745e6dea0988dd12516a4b70b5b1cd90b76a39a9d20ae593a7dd97e0922260d9b90c15aed43c2368a724a1fb3ee74e98f469a5823b4e1115330368abfb4125a943de192151cebcb2c858e014ec51f9627e26dbac83434c20d42571242c1abe5c63d35534acd7ba314a8bfc465b6e967d6f225b65ecc80a88aeaccfcf59ac343428b340b"}}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) 6.852252854s ago: executing program 3 (id=3725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x28, 0x12, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) (fail_nth: 6) 6.560172085s ago: executing program 3 (id=3726): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') bpf$ITER_CREATE(0x22, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x73bc80, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 6.380112034s ago: executing program 3 (id=3728): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200010000000009"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 6.153771621s ago: executing program 2 (id=3729): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 5.725548014s ago: executing program 2 (id=3731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0xb0, 0xfffb, 0xd, 0x800}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x800000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x5}, {0x0, 0x2}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) sync() ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2804, 0xd59f83, 0x19f2, 0x42, 0xdd7, 0x3, 0x9, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x10, {0x7f, 0xffffffff}, 0xd0, 0x9}}) 4.93751066s ago: executing program 0 (id=3733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x8cff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.833177159s ago: executing program 0 (id=3734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002280), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) preadv2(r3, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/248, 0xf8}, {0x0}, {&(0x7f0000000600)=""/97, 0x61}], 0x4, 0x0, 0x5, 0x16) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00", 0x49433553}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) 4.475801675s ago: executing program 2 (id=3735): syz_open_dev$usbfs(0x0, 0x75, 0x121301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000640)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x130}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.155764043s ago: executing program 1 (id=3736): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)={0x8, 0x0, [{0x5000, 0xe1, &(0x7f0000000580)=""/225}, {0xd000, 0x0, 0x0}, {0x1, 0x8a, &(0x7f0000000700)=""/138}, {0x4000, 0xf2, &(0x7f0000000840)=""/242}, {0x6000, 0x81, &(0x7f0000000940)=""/129}, {0xeeee0000, 0x55, &(0x7f0000000680)=""/85}, {0x8000000, 0xb6, &(0x7f0000000a00)=""/182}, {0x8080000, 0x9c, &(0x7f0000000ac0)=""/156}]}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x501483, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100"/56, @ANYBLOB], 0x54}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) prctl$PR_SET_IO_FLUSHER(0x59616d61, 0x1) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) 4.126118122s ago: executing program 2 (id=3737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0xf3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0x1, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x7, 0x3, 0x1a, 0x10, 0xfc}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x55ad5a774d2e39f9}}, {0x4, &(0x7f00000003c0)=@string={0x4, 0x3, 'q\t'}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x449}}, {0x68, &(0x7f0000000480)=@string={0x68, 0x3, "7e74bb590f5bfed1c4211c064fd935d36c9790e7058f00a9b29e4ee2e8ac45fa186c2d393d5279beb047efb2ed299ecaec81d01266a2d308c35aaa9e414ee08280671a35577042441586f203325ba8ec4a456f1f382eb38e540a0c2eeecd7a136caf1d6dc313"}}]}) syz_usb_disconnect(r2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a00ac1414bb000000000000000000000000ff010000"], 0x38}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) listen(r8, 0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd0100"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@local=@item_012={0x1, 0x2, 0x4, "e9"}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x4, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @local=@item_012={0x2, 0x2, 0x8, "f53a"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0xb, "31654111"}]}}, 0x0}, 0x0) 3.986154794s ago: executing program 4 (id=3738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x7ff, 0x0, 0xff}, 0x20) (fail_nth: 2) 3.860170351s ago: executing program 0 (id=3739): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x18) readahead(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000fff400000000000500010007000000"], 0x1c}}, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 3.568578576s ago: executing program 4 (id=3740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f000055e000/0x4000)=nil, 0x4000, 0x300000b, 0x11, r3, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r5, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x5, 0x0, 0x3, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0xa8af, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x43, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xfffc, 0x7785, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000, 0x0, 0x2, 0x4000000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x8000000000000001, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5c, 0x0, 0xfffffffffffffffc]}) r8 = socket$inet(0x2, 0xa, 0x6beb) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x24, 0x0, 0x41046140, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9d5e236cac7a57c6}}, 0x50) 2.706348218s ago: executing program 3 (id=3741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 2.505025268s ago: executing program 0 (id=3742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) r2 = socket(0x25, 0x801, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x4000090) recvfrom$l2tp6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x6322, &(0x7f00000000c0)={0x0, 0xd992, 0x0, 0x2, 0x238}, 0x0, &(0x7f0000000340)) fsmount(0xffffffffffffffff, 0x0, 0xa) syz_io_uring_setup(0x43e5, &(0x7f0000000140)={0x0, 0xcf30, 0x10, 0x3, 0x81}, &(0x7f0000000280), &(0x7f0000000440)) read$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) pselect6(0x40, &(0x7f0000000500)={0x0, 0x3, 0x9, 0x10000000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x6}, &(0x7f0000000540)={0x8e3f, 0x6, 0x8, 0x3ff, 0x8001, 0x7, 0x6, 0x2}, &(0x7f0000000580)={0x8000000000000001, 0x38, 0x2, 0x400, 0xfffffffffffffffd, 0x4, 0xc7b, 0x5}, &(0x7f0000000680), &(0x7f00000007c0)={&(0x7f0000000780)={[0x2]}, 0x8}) 2.503682357s ago: executing program 4 (id=3743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0x8}, 0x0) eventfd(0xfffffffc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 2.016656854s ago: executing program 0 (id=3744): madvise(&(0x7f00003c7000/0x4000)=nil, 0x4000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc0205647, &(0x7f0000000040)={0xf010000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40900) ioprio_set$uid(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000000c0), 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f000009a000/0x3000)=nil, &(0x7f0000658000/0x4000)=nil, &(0x7f000091c000/0x3000)=nil, &(0x7f0000350000/0x4000)=nil, &(0x7f00009ac000/0x4000)=nil, &(0x7f0000d91000/0x3000)=nil, &(0x7f0000584000/0x4000)=nil, &(0x7f00003cb000/0x2000)=nil, &(0x7f000041a000/0x3000)=nil, &(0x7f0000af8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="9f4bc9f7b68368b7755925e1680a0bdb1bb56a69efc989fd88118bd3c4b1b29b706551dc18ad03c4a840248e89de47285b4109579f6f63481a7550f5cec428136ec45054e644dba6b4dff09dfcb32c2cf7bc492eeb4740eee32419d7d4facfebf8d1b846aaa06aaad180b280e0f07601e4d9d0d04401ea8314360ceabff040560bdc2ffcd73837599d2184682baeadb9834740aa7d9322a3081313f5b34f537b4def56b7a55975c86de64009a4ba41e19eefac5a96c3b28920b53ca20f", 0xbd, r5}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r9, 0x20, 0x1, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4048891}, 0x0) 2.015747732s ago: executing program 3 (id=3745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = fanotify_init(0x40, 0x800) r3 = mq_open(&(0x7f0000000000)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|?\x82\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xf0-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*\xfe\x8c\xdf\x83d\x01\xec\xc5\xd3\x9aE\xab\x9eH\xd4\xda\xf3X\x19\xbbG\xf5|\x89\xd5\xc2K\xfcXBK#\xdb\xc0\'\xf2\xd8\xfe`u\x89\xe7\f\x84\xa5\x1b\xfb\x03?\\\xf8(\xb41\xe1\x84\xf1\xa5\x1a\xa7i\x9f\xbda\x9c\x1b\x94\x16td-*', 0x40, 0x1dd, 0x0) mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1, 0x20000}, 0x0) fanotify_mark(r2, 0x21, 0x8000000, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='sched_switch\x00', r8}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730124000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800f2ff0d067200000000000000000000006b3600120003380083b3ff11703a69702c6d6163000000050001000700004000000000000000"], 0x38}}, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r11], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1.900712241s ago: executing program 1 (id=3746): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='d\x9f\xcc\'K\x97s\xd6\x1b\x94\xc5\xc8\xee\xedS\x9a\x9a\xec\xf6W-\x0e\xfa\xd48`_\'\x00\x80\xb4\xb2\xe1\x9a\\!\x86\x10R\xf3oz\\\xb3+m\xb47\x14\x99\x0f\xd6\x9cYn*~\xdf~\x99x\x98\x9f\x89\x8c\x86\x13\xf7\xc6\xa4\xa9\xfe\x06d+\xd57\x1a\x8e\xc3GM\x11\x8c4w\x1e\xc5\xea\xf2\xc7#\xffuq\x82\xebr\xc6\x16\x99\xc35_\xbe29K\xad\xc2\xb5+2\xfe\x88\xb0\x9e\xc6P\xc5\xd9\xb5M^\x81\xdf\x00\x00\xf8\xb3@p\xa3y\xbd\'\xd5\xea\xed\xdc\xc2\x12Zu\f\x98=\xc3\n\x93\xf3Y\xc0\x02\x98\xe4Y\x91t\xf4\xf2\xae|\xb7\xb8\x81o\xd5\xb2^\xdf+m\xddJ\xc8\xac\xbe\xd6\x02\xb7|]\x9a\\ \xa0a=\x92X\a\x99\xc0l\x17I\x02i\xa4A\x8a\x1d\xb5Xt\xbck\xc1nU\x9f\xd3\\_\x80\xa7\xc7\xa2\xae\xe3\x95l]\x91\n}\x12\x93k\xf8DN\x0fGeN\x00\xb8\xc9\xabO\xd7\xfc\xa5u\xcf\x1c\x87\x06\x03\xc2\x9a2\x83\xaf\xd5\xee\xc8_\xbe\xfb\xb6\xa2\xe6\xad;\xfbC\x11\xb9\x84{\x9fr\x9b\x14\xf9\x00\x10\x1e\xcd\'%\x1d\x06\xdbe\xcd\xb8\xb1\x7f\xd2r\x1b\x84\xd6\'\x13\x9e>\x938\x0ef7\x8btv\bO\xe0$C\x95\x02\xb0\x91\xfewY\x1b\x05^\x85L\v\xd7]\xc8\xb3\x9d2g\xfc\x1b*\x02\x8d\xde\xeb\x06H\x1f/\xd2,\rR\x83L\xf3\x99\xc0\x11\x00\xd4\xbf*\xe6q\xa8\x9c\xf7\x1dh\x88\xf9\xb7\xf8x\x1bG\x90\x91rPK\xdeOX\x87', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) read$FUSE(r3, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2f0, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x244, 0xfc, 0x0, 0x1, [@nested={0x240, 0x8, 0x0, 0x1, [@generic="afca5ff5d515226501d9fac3908ff02f8d09509c26adb6b5d864484d04d69b4da5d7a52bfaaaad3a5c25aa473a0456cf81bd4d74603377984679d221e2a018985f995b9c1787285a3068593180b924ed8d0940610e751d4177f4fdaa3b647713ec058a87aa46f52171df898c7a05121abccd3e66c0d455d5497f9b88f86e97ac669b2ac8acdde2137a259ace56f95c5e39e7db5a34433901da46f369d9dd5ca3e90600b07d4664e1d96191edfaa947604e2f1f75db04", @generic="9bd8923e183ceaf32e67fb16888c806403ecd4458012965b4bf87d769bf5e030474a90f0f8b743003256111a88037a5489878dc68d48348280c55d31a3ea6fc747a0cf299e10637fbc9a618a6bcadf0f6caf923a1dfbd1f2ba8fa08ddffc28b9a387e3b2b35d8a4ac3ea722e6f6089", @generic="cc683eecda71ba25b3f72797dc417fca84d9d8f8baa94057192947b92000ba5770c7b084403a03adc1a2f42acd35c86093d2150d1d0a70f422e4f73eac96a9de66ddc93cb95cbfce68d52b80505ad2cb11893f86e6c26ea10f484762e841ee827d794612312cd37ad973b2ab2986bb65f84b670790bad3776ef66f76955009f71065c51850d6b375827b6e3666e469312a118278044cc8c60724f9c11c75aee12f40a3f53f995cc20d3fef674b2e46dfdf9d48685be6be74cf4374ae2c3627d82fb3523b86a6b5eecc7c852e62b45b72141293a9e3fb1096a448ff5bce3586b50be5d12cbf9a80bca166", @generic="f0e79ebd68b11bafb7f0fcc690fd1895afce6ae42d8ab38b9ebbfedf6d80c37c89ead9c8af0ec8b3f4a81f88d0"]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x81, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="97f0972655b21cc2f3546e633e140f95053c8719270e42da2b3a8d9228b34d5eccb0ff657f11904b17cdff08039627a48e77b3b9b8c2fb92396917888a0fbcd5b067c0e23eb9cd6d0a367ea3a6989f453bc0a6907410de82e1038ff2891cf948ce3f26e5d74bba8eb2e13ce93ca6deeb695e0a89dcd08ac1d5"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x2f0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.855731969s ago: executing program 4 (id=3747): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1890c2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000b00)={0x0, 0x21, 0x5, {0x5, 0x1, "9665f5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x9, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xc1}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x3, 0x3, [0x1, 0x8, 0x1], 0x10}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x1, 0x6, "c622e4"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x4, 0x1, "cb"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x40, "8c9d42db17"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x4, "8121"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1ff, 0xdcd, 0x8, "91"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd6, 0x40, 0xc5, {0x7, 0x25, 0x1, 0x100, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x875f50728c333e8a, 0xa, 0x2, 0xd5, {0x7, 0x25, 0x1, 0x80, 0x9, 0x1a80}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x4, 0x7, 0xff, 0x3}, 0x58, &(0x7f0000000240)={0x5, 0xf, 0x58, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "11e4db41727ee873274691e2b8ec8532"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x26, 0x1, 0x8, 0xf00, 0x7, [0xff0030]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "45e41491264ae90cf4f7fae2064d4b37"}, @ssp_cap={0x18, 0x10, 0xa, 0x29, 0x3, 0x5, 0xf00, 0x8, [0x30, 0x3f0f, 0x30]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x69, &(0x7f0000000300)=@string={0x69, 0x3, "f8b1d7fbc07a63c4fe3729707621712c0d3e43e2dddfb003c2f369736b6171272143379aba1450fce503f70bc31ac1b2636b8797db041f6e6d0c516aa9241bc26d9b306061255981fe327fe67ec58b6e3f690fd015f318687d588e368018f0064bf7db734b9fde"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x810}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "7d05f82570d5f57f9157eae281a7ca3d79f13b95d033538297c179f27d50468e882133a1438fe306e92e0a3ead946e9e0663a93b2b5961666bcd7a5ae1a3f5dfe0794ee1623cc15802cb1c6745e6dea0988dd12516a4b70b5b1cd90b76a39a9d20ae593a7dd97e0922260d9b90c15aed43c2368a724a1fb3ee74e98f469a5823b4e1115330368abfb4125a943de192151cebcb2c858e014ec51f9627e26dbac83434c20d42571242c1abe5c63d35534acd7ba314a8bfc465b6e967d6f225b65ecc80a88aeaccfcf59ac343428b340b"}}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040000) 493.812805ms ago: executing program 3 (id=3748): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x5, 0x5, 0xaac6, 0x2, 0x1ff, 0x4, 0x856f, 0x1, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$EVIOCGMASK(r5, 0x80015b12, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0xc0844123, &(0x7f0000000080)=0x5) 0s ago: executing program 0 (id=3749): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(&(0x7f00000003c0)=@sr0, &(0x7f0000000400)='.\x00', &(0x7f0000000440)='cifs\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x280) semctl$SEM_STAT_ANY(r1, 0x3, 0x14, &(0x7f0000000540)=""/250) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0xb, &(0x7f00000001c0)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x0, 0x0) lseek(r3, 0x10001, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76164}, 0x0) kernel console output (not intermixed with test programs): context=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.668903][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.569696][ T5972] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 869.632804][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.639182][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.684621][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'. [ 869.756888][ T5972] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 869.783010][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.807489][ T5972] usb 1-1: Product: syz [ 869.815616][ T5972] usb 1-1: Manufacturer: syz [ 869.829460][ T5972] usb 1-1: SerialNumber: syz [ 869.858286][ T5972] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 869.884092][ T977] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 870.403572][T11561] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 870.532224][ T5972] usb 1-1: USB disconnect, device number 26 [ 870.629621][T11561] usb 2-1: Using ep0 maxpacket: 8 [ 871.400684][ T30] audit: type=1400 audit(1750520216.401:539): avc: denied { listen } for pid=17121 comm="syz.3.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 871.830161][ T977] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 871.837182][ T977] ath9k_htc: Failed to initialize the device [ 871.844891][T11561] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 871.853138][T11561] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.863539][ T5972] usb 1-1: ath9k_htc: USB layer deinitialized [ 871.871067][T11561] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.886317][T11561] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 871.896312][T11561] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.909346][T11561] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 871.918425][T11561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.949817][ T30] audit: type=1400 audit(1750520217.251:540): avc: denied { ioctl } for pid=17127 comm="syz.4.3427" path="socket:[51573]" dev="sockfs" ino=51573 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 872.181846][T11561] usb 2-1: usb_control_msg returned -32 [ 872.604560][T11561] usbtmc 2-1:16.0: can't read capabilities [ 872.732499][T17139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.741398][T17139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.769743][ T30] audit: type=1400 audit(1750520218.111:541): avc: denied { read write } for pid=17108 comm="syz.1.3422" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.086932][ T30] audit: type=1400 audit(1750520218.111:542): avc: denied { open } for pid=17108 comm="syz.1.3422" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.121306][ T30] audit: type=1400 audit(1750520218.111:543): avc: denied { ioctl } for pid=17108 comm="syz.1.3422" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.149634][T17136] nvme_fabrics: missing parameter 'transport=%s' [ 873.162124][ T30] audit: type=1400 audit(1750520218.141:544): avc: denied { read write } for pid=14896 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 873.166429][T17136] nvme_fabrics: missing parameter 'nqn=%s' [ 873.283488][ T30] audit: type=1400 audit(1750520218.141:545): avc: denied { open } for pid=14896 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 873.330128][T17144] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 873.344581][ T30] audit: type=1400 audit(1750520218.141:546): avc: denied { ioctl } for pid=14896 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 873.370127][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.790754][ T30] audit: type=1400 audit(1750520218.151:547): avc: denied { module_request } for pid=17133 comm="syz.2.3429" kmod="nvme-(null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 873.812675][ T30] audit: type=1400 audit(1750520218.221:549): avc: denied { prog_load } for pid=17138 comm="syz.0.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 873.831702][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.050592][T12425] usb 2-1: USB disconnect, device number 73 [ 875.732473][T17178] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 875.760169][T17178] SELinux: failed to load policy [ 876.725756][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 876.725773][ T30] audit: type=1400 audit(1750520222.101:588): avc: denied { map_read map_write } for pid=17185 comm="syz.2.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 876.797777][T17181] nvme_fabrics: missing parameter 'transport=%s' [ 876.806628][T17181] nvme_fabrics: missing parameter 'nqn=%s' [ 876.953686][ T30] audit: type=1400 audit(1750520222.331:589): avc: denied { create } for pid=17189 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 877.023353][ T30] audit: type=1400 audit(1750520222.351:590): avc: denied { getopt } for pid=17189 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 877.404402][ T30] audit: type=1400 audit(1750520222.751:591): avc: denied { create } for pid=17187 comm="syz.1.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 877.686810][ T30] audit: type=1400 audit(1750520222.911:592): avc: denied { create } for pid=17192 comm="syz.3.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 877.714119][T17188] nvme_fabrics: missing parameter 'transport=%s' [ 877.720727][T17188] nvme_fabrics: missing parameter 'nqn=%s' [ 877.904889][T17194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.954951][ T30] audit: type=1400 audit(1750520223.331:593): avc: denied { create } for pid=17205 comm="syz.2.3447" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 878.005079][ T30] audit: type=1400 audit(1750520223.361:594): avc: denied { read } for pid=17205 comm="syz.2.3447" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 878.051571][ T30] audit: type=1400 audit(1750520223.361:595): avc: denied { open } for pid=17205 comm="syz.2.3447" path="/34/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 878.180131][ T30] audit: type=1400 audit(1750520223.361:596): avc: denied { name_bind } for pid=17205 comm="syz.2.3447" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 878.203359][ T30] audit: type=1400 audit(1750520223.361:597): avc: denied { node_bind } for pid=17205 comm="syz.2.3447" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 878.553293][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 880.549693][T11561] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 880.730141][T11561] usb 1-1: Using ep0 maxpacket: 8 [ 881.083868][T11561] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 881.102986][T11561] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 881.115932][T11561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.124335][T11561] usb 1-1: Product: syz [ 881.130060][T11561] usb 1-1: Manufacturer: syz [ 881.135981][T11561] usb 1-1: SerialNumber: syz [ 881.144716][T11561] usb 1-1: config 0 descriptor?? [ 881.201430][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 881.546812][ T5972] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 881.561141][T17233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.580085][T17233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.742229][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 881.742252][ T30] audit: type=1400 audit(1750520740.023:622): avc: denied { setopt } for pid=17254 comm="syz.4.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 881.809626][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 882.387081][ T30] audit: type=1400 audit(1750520740.163:623): avc: denied { map } for pid=17254 comm="syz.4.3463" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 882.419737][ T30] audit: type=1400 audit(1750520740.163:624): avc: denied { read write } for pid=17254 comm="syz.4.3463" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 882.450132][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.465675][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.476243][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 882.489339][ T5972] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 882.498485][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.510363][ T5972] usb 2-1: config 0 descriptor?? [ 882.883197][ T30] audit: type=1400 audit(1750520741.183:625): avc: denied { create } for pid=17231 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 882.948561][ T30] audit: type=1400 audit(1750520741.183:626): avc: denied { read } for pid=17231 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 883.016644][ T30] audit: type=1400 audit(1750520741.233:627): avc: denied { write } for pid=17231 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 883.131902][ T30] audit: type=1400 audit(1750520741.513:628): avc: denied { create } for pid=17271 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 883.335460][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 883.411880][ T30] audit: type=1400 audit(1750521254.796:629): avc: denied { create } for pid=17271 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 883.414849][T17272] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 883.431634][ T30] audit: type=1400 audit(1750521254.796:630): avc: denied { create } for pid=17271 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 883.431680][ T30] audit: type=1400 audit(1750521254.796:631): avc: denied { bind } for pid=17271 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 883.550451][T17277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.559304][T17277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.979667][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 883.988784][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 883.998139][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.023463][ T977] usb 1-1: USB disconnect, device number 27 [ 884.038635][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.051924][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.061455][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.071844][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.082922][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.141795][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.166719][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 884.208203][T17281] SELinux: ebitmap: map size 2147549188 does not match my size 64 (high bit was 0) [ 884.226143][T17281] SELinux: failed to load policy [ 884.649822][T12425] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 884.902656][T17295] netlink: 'syz.4.3474': attribute type 14 has an invalid length. [ 884.910575][T17295] netlink: 'syz.4.3474': attribute type 13 has an invalid length. [ 884.924222][T12425] usb 1-1: Using ep0 maxpacket: 8 [ 884.933139][T12425] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 884.941824][T12425] usb 1-1: config 179 has no interface number 0 [ 884.948246][T12425] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 884.963980][T12425] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 884.977236][T12425] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 884.989267][T12425] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 885.093582][T12425] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 885.249641][ T5972] usbhid 2-1:0.0: can't add hid device: -71 [ 885.268878][ T5972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 885.612965][T12425] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 885.624462][ T5972] usb 2-1: USB disconnect, device number 74 [ 885.649808][T12425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.767574][T17288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 886.049728][ T5972] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 886.066399][T17313] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 886.174503][T12425] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input92 [ 886.376796][ T5972] usb 2-1: Invalid ep0 maxpacket: 32 [ 886.681425][T17318] syz.2.3481: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 886.696259][T17318] CPU: 0 UID: 0 PID: 17318 Comm: syz.2.3481 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 886.696289][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.696301][T17318] Call Trace: [ 886.696309][T17318] [ 886.696317][T17318] dump_stack_lvl+0x16c/0x1f0 [ 886.696352][T17318] warn_alloc+0x248/0x3a0 [ 886.696379][T17318] ? __pfx_warn_alloc+0x10/0x10 [ 886.696402][T17318] ? __pfx_stack_trace_save+0x10/0x10 [ 886.696429][T17318] ? stack_depot_save_flags+0x28/0xa40 [ 886.696462][T17318] ? kasan_save_stack+0x42/0x60 [ 886.696485][T17318] ? kasan_save_stack+0x33/0x60 [ 886.696507][T17318] ? kasan_save_track+0x14/0x30 [ 886.696528][T17318] ? xskq_create+0x52/0x1d0 [ 886.696551][T17318] ? xsk_setsockopt+0x640/0x840 [ 886.696570][T17318] ? do_sock_setsockopt+0x221/0x470 [ 886.696592][T17318] ? xskq_create+0xfb/0x1d0 [ 886.696617][T17318] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 886.696647][T17318] ? xskq_create+0xfb/0x1d0 [ 886.696677][T17318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 886.696706][T17318] ? xskq_create+0xfb/0x1d0 [ 886.696729][T17318] vmalloc_user_noprof+0x9e/0xe0 [ 886.696748][T17318] ? xskq_create+0xfb/0x1d0 [ 886.696773][T17318] xskq_create+0xfb/0x1d0 [ 886.696800][T17318] xsk_setsockopt+0x640/0x840 [ 886.696824][T17318] ? __pfx_xsk_setsockopt+0x10/0x10 [ 886.696853][T17318] ? selinux_socket_setsockopt+0x6a/0x80 [ 886.696878][T17318] ? __pfx_xsk_setsockopt+0x10/0x10 [ 886.696901][T17318] do_sock_setsockopt+0x221/0x470 [ 886.696920][T17318] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 886.696955][T17318] __sys_setsockopt+0x1a0/0x230 [ 886.696993][T17318] __x64_sys_setsockopt+0xbd/0x160 [ 886.697016][T17318] ? do_syscall_64+0x91/0x4c0 [ 886.697044][T17318] ? lockdep_hardirqs_on+0x7c/0x110 [ 886.697072][T17318] do_syscall_64+0xcd/0x4c0 [ 886.697103][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.697123][T17318] RIP: 0033:0x7f9db618e929 [ 886.697140][T17318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.697159][T17318] RSP: 002b:00007f9db6f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 886.697178][T17318] RAX: ffffffffffffffda RBX: 00007f9db63b6160 RCX: 00007f9db618e929 [ 886.697189][T17318] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 886.697200][T17318] RBP: 00007f9db6210b39 R08: 0000000000000052 R09: 0000000000000000 [ 886.697211][T17318] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.697222][T17318] R13: 0000000000000000 R14: 00007f9db63b6160 R15: 00007ffc60f0d2c8 [ 886.697249][T17318] [ 886.697276][T17318] Mem-Info: [ 886.833862][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 886.833877][ T30] audit: type=1400 audit(1750521257.786:654): avc: denied { create } for pid=17314 comm="syz.2.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 886.838314][T17318] active_anon:16078 inactive_anon:0 isolated_anon:0 [ 886.838314][T17318] active_file:15542 inactive_file:41034 isolated_file:0 [ 886.838314][T17318] unevictable:768 dirty:447 writeback:0 [ 886.838314][T17318] slab_reclaimable:11710 slab_unreclaimable:104073 [ 886.838314][T17318] mapped:37137 shmem:8051 pagetables:1282 [ 886.838314][T17318] sec_pagetables:0 bounce:0 [ 886.838314][T17318] kernel_misc_reclaimable:0 [ 886.838314][T17318] free:1283972 free_pcp:12655 free_cma:0 [ 886.937529][ T30] audit: type=1400 audit(1750521258.066:655): avc: denied { setopt } for pid=17314 comm="syz.2.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 886.942999][T17318] Node 0 active_anon:64312kB inactive_anon:0kB active_file:61992kB inactive_file:163924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148480kB dirty:1776kB writeback:0kB shmem:30668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11896kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 886.972155][T17321] netlink: 'syz.3.3479': attribute type 2 has an invalid length. [ 886.990794][T17318] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 887.131410][T17318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.149823][ T30] audit: type=1400 audit(1750521258.306:656): avc: denied { create } for pid=17308 comm="syz.3.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 887.161053][T17318] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 887.185980][T17318] Node 0 DMA32 free:1207552kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64288kB inactive_anon:0kB active_file:61992kB inactive_file:162608kB unevictable:1536kB writepending:1776kB present:3129332kB managed:2540620kB mlocked:0kB bounce:0kB free_pcp:41976kB local_pcp:14664kB free_cma:0kB [ 887.218681][T17318] lowmem_reserve[]: 0 0 1 1 1 [ 887.223716][T17318] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 887.232280][ T30] audit: type=1400 audit(1750521258.316:657): avc: denied { bind } for pid=17308 comm="syz.3.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 887.254106][T17318] lowmem_reserve[]: 0 0 0 0 0 [ 887.277136][T17318] Node 1 Normal free:3912756kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8480kB local_pcp:3488kB free_cma:0kB [ 887.309241][T17318] lowmem_reserve[]: 0 0 0 0 0 [ 887.314028][T17318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 887.353826][T17318] Node 0 DMA32: 1009*4kB (UME) 798*8kB (UME) 274*16kB (UME) 295*32kB (UME) 175*64kB (UME) 168*128kB (UM) 63*256kB (UME) 43*512kB (UM) 30*1024kB (UM) 12*2048kB (UM) 258*4096kB (UM) = 1207156kB [ 887.356899][ T30] audit: type=1400 audit(1750521258.336:658): avc: denied { write } for pid=17308 comm="syz.3.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 887.373238][T17318] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 887.406603][T17318] Node 1 Normal: 181*4kB (UME) 42*8kB (UME) 45*16kB (UME) 228*32kB (UME) 105*64kB (UME) 27*128kB (UE) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3913012kB [ 887.426258][T17318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.437027][T17318] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.455918][T17318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.465633][ T5972] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 887.473676][T17318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 887.483313][T17318] 64640 total pagecache pages [ 887.488327][T17318] 0 pages in swap cache [ 887.494005][T17318] Free swap = 124996kB [ 887.498179][T17318] Total swap = 124996kB [ 887.506459][T17318] 2097051 pages RAM [ 887.512639][T17318] 0 pages HighMem/MovableOnly [ 887.517325][T17318] 429918 pages reserved [ 887.526394][T17318] 0 pages cma reserved [ 887.682249][ T5972] usb 2-1: Invalid ep0 maxpacket: 32 [ 887.696065][ T5972] usb usb2-port1: attempt power cycle [ 887.719055][T17326] FAULT_INJECTION: forcing a failure. [ 887.719055][T17326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.735551][T17326] CPU: 0 UID: 0 PID: 17326 Comm: syz.2.3482 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 887.735578][T17326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 887.735589][T17326] Call Trace: [ 887.735595][T17326] [ 887.735603][T17326] dump_stack_lvl+0x16c/0x1f0 [ 887.735634][T17326] should_fail_ex+0x512/0x640 [ 887.735675][T17326] _copy_to_user+0x32/0xd0 [ 887.735703][T17326] simple_read_from_buffer+0xcb/0x170 [ 887.735729][T17326] proc_fail_nth_read+0x197/0x270 [ 887.735753][T17326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.735777][T17326] ? rw_verify_area+0xcf/0x680 [ 887.735797][T17326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.735818][T17326] vfs_read+0x1e1/0xc60 [ 887.735845][T17326] ? __pfx___mutex_lock+0x10/0x10 [ 887.735872][T17326] ? __pfx_vfs_read+0x10/0x10 [ 887.735901][T17326] ? __fget_files+0x20e/0x3c0 [ 887.735932][T17326] ksys_read+0x12a/0x250 [ 887.735954][T17326] ? __pfx_ksys_read+0x10/0x10 [ 887.735983][T17326] do_syscall_64+0xcd/0x4c0 [ 887.736013][T17326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.736031][T17326] RIP: 0033:0x7f9db618d33c [ 887.736047][T17326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 887.736064][T17326] RSP: 002b:00007f9db6fd8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.736082][T17326] RAX: ffffffffffffffda RBX: 00007f9db63b5fa0 RCX: 00007f9db618d33c [ 887.736093][T17326] RDX: 000000000000000f RSI: 00007f9db6fd80a0 RDI: 0000000000000004 [ 887.736104][T17326] RBP: 00007f9db6fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 887.736114][T17326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.736125][T17326] R13: 0000000000000000 R14: 00007f9db63b5fa0 R15: 00007ffc60f0d2c8 [ 887.736150][T17326] [ 888.021757][T17328] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 888.190174][ T5972] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 888.211927][ T5972] usb 2-1: Invalid ep0 maxpacket: 32 [ 888.327283][ T24] usb 1-1: USB disconnect, device number 28 [ 888.333327][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 888.333367][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 888.339823][ T5972] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 888.344067][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 888.383508][ T5972] usb 2-1: Invalid ep0 maxpacket: 32 [ 888.406578][ T5972] usb usb2-port1: unable to enumerate USB device [ 888.422980][ T30] audit: type=1400 audit(1750521259.806:659): avc: denied { append } for pid=17331 comm="syz.0.3485" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 888.458683][ T30] audit: type=1400 audit(1750521259.836:660): avc: denied { create } for pid=17332 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 888.480709][ T30] audit: type=1400 audit(1750521259.866:661): avc: denied { read } for pid=17332 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 888.509843][ T30] audit: type=1400 audit(1750521259.886:662): avc: denied { write } for pid=17332 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 890.262554][T17350] __nla_validate_parse: 48 callbacks suppressed [ 890.262587][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 890.344944][ T30] audit: type=1400 audit(1750521261.716:663): avc: denied { write } for pid=17342 comm="syz.1.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 890.946087][T17356] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 890.956885][ T5972] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 891.123264][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 891.136333][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 891.147626][ T5972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 891.163679][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.173506][ T5972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 891.185112][ T5972] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 891.194231][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.202289][ T5972] usb 3-1: Product: syz [ 891.206426][ T5972] usb 3-1: Manufacturer: syz [ 891.211472][ T5972] usb 3-1: SerialNumber: syz [ 891.218540][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3495'. [ 891.223642][ T5972] usb 3-1: config 0 descriptor?? [ 891.247127][ T5972] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 891.253732][ T5972] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 891.289773][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 891.297445][T12425] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 891.312056][ T5972] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 891.349729][ T977] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 891.449711][T12425] usb 2-1: Using ep0 maxpacket: 32 [ 891.454927][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 891.462410][T12425] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.477676][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.487917][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 891.499639][T12425] usb 2-1: config 0 interface 0 has no altsetting 0 [ 891.506289][T12425] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 891.516081][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.529778][ T977] usb 1-1: Invalid ep0 maxpacket: 64 [ 891.533309][T12425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.541522][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3489'. [ 891.543594][ T24] usb 4-1: config 0 descriptor?? [ 891.559488][T12425] usb 2-1: config 0 descriptor?? [ 891.580986][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 891.602200][ T5972] usb 3-1: USB disconnect, device number 91 [ 891.659846][ T977] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 891.792071][T17362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.800802][T17362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.809702][ T977] usb 1-1: Invalid ep0 maxpacket: 64 [ 891.815254][ T977] usb usb1-port1: attempt power cycle [ 892.015988][T17362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.036309][T17362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.049159][T17362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.066443][T17362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.379729][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 892.379764][ T30] audit: type=1400 audit(1750522289.739:669): avc: denied { read write } for pid=17359 comm="syz.1.3493" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 892.425058][ T977] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 892.434386][ T30] audit: type=1400 audit(1750522289.739:670): avc: denied { open } for pid=17359 comm="syz.1.3493" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 892.491295][ T977] usb 1-1: Invalid ep0 maxpacket: 64 [ 892.539796][ T30] audit: type=1400 audit(1750522289.909:671): avc: denied { read } for pid=17361 comm="syz.3.3494" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 892.619970][ T977] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 892.629796][T17380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.723847][ T977] usb 1-1: Invalid ep0 maxpacket: 64 [ 892.958997][ T24] gspca_vc032x: reg_w err -71 [ 893.450992][ T977] usb usb1-port1: unable to enumerate USB device [ 893.472432][T17380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.495409][ T51] Bluetooth: hci1: adv larger than maximum supported [ 893.495462][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 893.520902][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 893.529248][ T30] audit: type=1400 audit(1750522289.909:672): avc: denied { open } for pid=17361 comm="syz.3.3494" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 893.556683][ T24] usb 4-1: USB disconnect, device number 74 [ 893.566933][ T30] audit: type=1400 audit(1750522290.879:673): avc: denied { ioctl } for pid=17359 comm="syz.1.3493" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52560 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 893.714280][ T30] audit: type=1400 audit(1750522290.879:674): avc: denied { write } for pid=17359 comm="syz.1.3493" path="socket:[52187]" dev="sockfs" ino=52187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 894.120949][ T30] audit: type=1400 audit(1750522291.119:675): avc: denied { connect } for pid=17386 comm="syz.4.3499" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 894.179273][ T30] audit: type=1400 audit(1750522291.329:676): avc: denied { read append } for pid=17386 comm=F4AA5C6B5B7343AED6989B590A497D name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 894.204902][ T30] audit: type=1400 audit(1750522291.329:677): avc: denied { open } for pid=17386 comm=F4AA5C6B5B7343AED6989B590A497D path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 894.248128][ T30] audit: type=1400 audit(1750522291.329:678): avc: denied { map } for pid=17386 comm=F4AA5C6B5B7343AED6989B590A497D path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 894.281135][T12425] usbhid 2-1:0.0: can't add hid device: -71 [ 894.436559][T12425] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 894.447019][T12425] usb 2-1: USB disconnect, device number 79 [ 895.764721][T17410] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 896.168683][T17418] xt_bpf: check failed: parse error [ 897.114876][T17424] netlink: 'syz.0.3504': attribute type 2 has an invalid length. [ 898.390175][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 898.559701][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 898.625101][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.649637][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 898.673296][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.702495][ T24] usb 2-1: config 0 descriptor?? [ 898.724477][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 898.929296][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.967595][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.980328][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 898.980343][ T30] audit: type=1400 audit(1750522296.359:693): avc: denied { read } for pid=17442 comm="syz.3.3515" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 899.011456][T17443] binder: 17442:17443 ioctl 4018620d 0 returned -22 [ 899.052788][ T30] audit: type=1400 audit(1750522296.359:694): avc: denied { open } for pid=17442 comm="syz.3.3515" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 899.117994][ T30] audit: type=1400 audit(1750522296.399:695): avc: denied { ioctl } for pid=17442 comm="syz.3.3515" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 899.306773][T17450] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 899.367962][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.393691][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.409167][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.426372][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.440869][ T30] audit: type=1400 audit(1750522296.819:696): avc: denied { append } for pid=17440 comm="syz.2.3514" name="v4l-subdev5" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 900.025565][ T24] gspca_vc032x: reg_r err -110 [ 900.079415][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 900.488801][ T30] audit: type=1400 audit(1750522297.869:697): avc: denied { bind } for pid=17467 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 900.551549][ T30] audit: type=1400 audit(1750522297.899:698): avc: denied { bind } for pid=17454 comm="syz.4.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 900.606526][ T30] audit: type=1400 audit(1750522297.899:699): avc: denied { name_bind } for pid=17454 comm="syz.4.3519" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 900.669175][ T30] audit: type=1400 audit(1750522297.899:700): avc: denied { node_bind } for pid=17454 comm="syz.4.3519" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 900.676727][T17475] SELinux: failed to load policy [ 900.700252][ T30] audit: type=1400 audit(1750522297.919:701): avc: denied { listen } for pid=17467 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 900.719876][ T30] audit: type=1400 audit(1750522297.919:702): avc: denied { setopt } for pid=17467 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 901.427675][T17489] syz.2.3523: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 901.442905][T17489] CPU: 0 UID: 0 PID: 17489 Comm: syz.2.3523 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 901.442934][T17489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.442947][T17489] Call Trace: [ 901.442954][T17489] [ 901.442962][T17489] dump_stack_lvl+0x16c/0x1f0 [ 901.442997][T17489] warn_alloc+0x248/0x3a0 [ 901.443024][T17489] ? __pfx_warn_alloc+0x10/0x10 [ 901.443047][T17489] ? __pfx_stack_trace_save+0x10/0x10 [ 901.443072][T17489] ? stack_depot_save_flags+0x28/0xa40 [ 901.443103][T17489] ? kasan_save_stack+0x42/0x60 [ 901.443122][T17489] ? kasan_save_stack+0x33/0x60 [ 901.443141][T17489] ? kasan_save_track+0x14/0x30 [ 901.443160][T17489] ? xskq_create+0x52/0x1d0 [ 901.443179][T17489] ? xsk_setsockopt+0x640/0x840 [ 901.443197][T17489] ? do_sock_setsockopt+0x221/0x470 [ 901.443217][T17489] ? xskq_create+0xfb/0x1d0 [ 901.443240][T17489] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 901.443265][T17489] ? xskq_create+0xfb/0x1d0 [ 901.443291][T17489] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 901.443319][T17489] ? xskq_create+0xfb/0x1d0 [ 901.443340][T17489] vmalloc_user_noprof+0x9e/0xe0 [ 901.443357][T17489] ? xskq_create+0xfb/0x1d0 [ 901.443378][T17489] xskq_create+0xfb/0x1d0 [ 901.443404][T17489] xsk_setsockopt+0x640/0x840 [ 901.443425][T17489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 901.443443][T17489] ? __lock_acquire+0x622/0x1c90 [ 901.443473][T17489] ? selinux_socket_setsockopt+0x6a/0x80 [ 901.443495][T17489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 901.443515][T17489] do_sock_setsockopt+0x221/0x470 [ 901.443531][T17489] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 901.443562][T17489] __sys_setsockopt+0x1a0/0x230 [ 901.443588][T17489] __x64_sys_setsockopt+0xbd/0x160 [ 901.443608][T17489] ? do_syscall_64+0x91/0x4c0 [ 901.443632][T17489] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.443655][T17489] do_syscall_64+0xcd/0x4c0 [ 901.443680][T17489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.443696][T17489] RIP: 0033:0x7f9db618e929 [ 901.443712][T17489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.443728][T17489] RSP: 002b:00007f9db6f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 901.443745][T17489] RAX: ffffffffffffffda RBX: 00007f9db63b6160 RCX: 00007f9db618e929 [ 901.443755][T17489] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 901.443771][T17489] RBP: 00007f9db6210b39 R08: 0000000000000052 R09: 0000000000000000 [ 901.443781][T17489] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.443790][T17489] R13: 0000000000000000 R14: 00007f9db63b6160 R15: 00007ffc60f0d2c8 [ 901.443813][T17489] [ 901.443841][T17489] Mem-Info: [ 901.544692][ T24] usb 2-1: USB disconnect, device number 80 [ 901.545341][T17489] active_anon:13321 inactive_anon:0 isolated_anon:0 [ 901.545341][T17489] active_file:15618 inactive_file:41041 isolated_file:0 [ 901.545341][T17489] unevictable:768 dirty:192 writeback:0 [ 901.545341][T17489] slab_reclaimable:11717 slab_unreclaimable:103451 [ 901.545341][T17489] mapped:34410 shmem:5193 pagetables:1320 [ 901.545341][T17489] sec_pagetables:0 bounce:0 [ 901.545341][T17489] kernel_misc_reclaimable:0 [ 901.545341][T17489] free:1290333 free_pcp:10418 free_cma:0 [ 901.592330][T12425] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 901.597485][T17489] Node 0 active_anon:53284kB inactive_anon:0kB active_file:62296kB inactive_file:163952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137464kB dirty:768kB writeback:0kB shmem:19236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11928kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 901.597536][T17489] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 901.846632][T17489] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.846689][T17489] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 901.846728][T17489] Node 0 DMA32 free:1232940kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53360kB inactive_anon:0kB active_file:62296kB inactive_file:162636kB unevictable:1536kB writepending:768kB present:3129332kB managed:2540620kB mlocked:0kB bounce:0kB free_pcp:33052kB local_pcp:17436kB free_cma:0kB [ 901.846789][T17489] lowmem_reserve[]: 0 0 1 1 1 [ 901.846827][T17489] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 901.846877][T17489] lowmem_reserve[]: 0 0 0 0 0 [ 901.846914][T17489] Node 1 Normal free:3913012kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8224kB local_pcp:3488kB free_cma:0kB [ 901.846966][T17489] lowmem_reserve[]: 0 0 0 0 0 [ 901.847002][T17489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 901.847123][T17489] Node 0 DMA32: 1645*4kB (UM) 1309*8kB (UME) 497*16kB (UM) 126*32kB (ME) 321*64kB (UME) 165*128kB (M) 64*256kB (ME) 42*512kB (UM) 30*1024kB (UM) 14*2048kB (UM) 260*4096kB (UM) = 1232940kB [ 901.847283][T17489] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 901.847389][T17489] Node 1 Normal: 181*4kB (UME) 42*8kB (UME) 45*16kB (UME) 228*32kB (UME) 105*64kB (UME) 27*128kB (UE) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3913012kB [ 901.847550][T17489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.847567][T17489] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 901.847582][T17489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.847597][T17489] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 901.847613][T17489] 61848 total pagecache pages [ 901.847621][T17489] 0 pages in swap cache [ 901.847628][T17489] Free swap = 124996kB [ 901.847634][T17489] Total swap = 124996kB [ 901.847642][T17489] 2097051 pages RAM [ 901.847650][T17489] 0 pages HighMem/MovableOnly [ 901.847656][T17489] 429918 pages reserved [ 901.847663][T17489] 0 pages cma reserved [ 901.962330][T12425] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 901.962357][T12425] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.962376][T12425] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 901.962396][T12425] usb 1-1: config 1 has no interface number 1 [ 901.962432][T12425] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.964180][T12425] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.964207][T12425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.964227][T12425] usb 1-1: Product: syz [ 901.964241][T12425] usb 1-1: Manufacturer: syz [ 901.964255][T12425] usb 1-1: SerialNumber: syz [ 902.033160][T17510] FAULT_INJECTION: forcing a failure. [ 902.033160][T17510] name failslab, interval 1, probability 0, space 0, times 0 [ 902.184781][T17483] input: syz0 as /devices/virtual/input/input93 [ 902.191279][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.3.3528 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 902.191311][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.191323][T17510] Call Trace: [ 902.191329][T17510] [ 902.191337][T17510] dump_stack_lvl+0x16c/0x1f0 [ 902.191368][T17510] should_fail_ex+0x512/0x640 [ 902.191391][T17510] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 902.191415][T17510] should_failslab+0xc2/0x120 [ 902.191437][T17510] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 902.191457][T17510] ? __alloc_skb+0x2b2/0x380 [ 902.191482][T17510] __alloc_skb+0x2b2/0x380 [ 902.191503][T17510] ? __pfx___alloc_skb+0x10/0x10 [ 902.191521][T17510] ? __pfx___mutex_trylock_common+0x10/0x10 [ 902.191550][T17510] ? rcu_is_watching+0x12/0xc0 [ 902.191572][T17510] netlink_dump+0x678/0xce0 [ 902.191588][T17510] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 902.191604][T17510] ? __netlink_dump_start+0x150/0x990 [ 902.191620][T17510] ? __pfx_netlink_dump+0x10/0x10 [ 902.191633][T17510] ? __pfx___mutex_lock+0x10/0x10 [ 902.191673][T17510] __netlink_dump_start+0x6d6/0x990 [ 902.191691][T17510] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 902.191709][T17510] rtnetlink_rcv_msg+0xb3e/0xe90 [ 902.191732][T17510] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 902.191756][T17510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.191779][T17510] ? __pfx_rtnl_dumpit+0x10/0x10 [ 902.191797][T17510] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 902.191817][T17510] ? ref_tracker_free+0x37c/0x830 [ 902.191841][T17510] netlink_rcv_skb+0x158/0x420 [ 902.191858][T17510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.191882][T17510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.191907][T17510] ? netlink_deliver_tap+0x1ae/0xd30 [ 902.191927][T17510] netlink_unicast+0x53a/0x7f0 [ 902.191946][T17510] ? __pfx_netlink_unicast+0x10/0x10 [ 902.191969][T17510] netlink_sendmsg+0x8d1/0xdd0 [ 902.191990][T17510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.192016][T17510] ____sys_sendmsg+0xa95/0xc70 [ 902.192033][T17510] ? copy_msghdr_from_user+0x10a/0x160 [ 902.192055][T17510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.192083][T17510] ___sys_sendmsg+0x134/0x1d0 [ 902.192106][T17510] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.192127][T17510] ? __lock_acquire+0x622/0x1c90 [ 902.192178][T17510] __sys_sendmsg+0x16d/0x220 [ 902.192201][T17510] ? __pfx___sys_sendmsg+0x10/0x10 [ 902.192238][T17510] do_syscall_64+0xcd/0x4c0 [ 902.192262][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.192278][T17510] RIP: 0033:0x7f7510d8e929 [ 902.192292][T17510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.192307][T17510] RSP: 002b:00007f7511b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.192323][T17510] RAX: ffffffffffffffda RBX: 00007f7510fb5fa0 RCX: 00007f7510d8e929 [ 902.192333][T17510] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 902.192342][T17510] RBP: 00007f7511b79090 R08: 0000000000000000 R09: 0000000000000000 [ 902.192352][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.192361][T17510] R13: 0000000000000000 R14: 00007f7510fb5fa0 R15: 00007ffcbde648c8 [ 902.192384][T17510] [ 902.310084][T17516] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 902.773932][T17528] binder: 17527:17528 ioctl 4018620d 0 returned -22 [ 902.933101][T12425] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 903.658275][T17549] nvme_fabrics: missing parameter 'transport=%s' [ 903.676698][T12425] usb 1-1: MIDIStreaming interface descriptor not found [ 903.766228][T17549] nvme_fabrics: missing parameter 'nqn=%s' [ 903.965290][T17551] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 903.999144][T12425] usb 1-1: USB disconnect, device number 33 [ 904.042069][ T977] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 904.198390][T16067] udevd[16067]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.327453][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 904.331646][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 904.399295][ T977] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.412303][T11561] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 904.575609][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 904.585828][ T977] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 904.675929][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3537'. [ 905.059658][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.085552][ T977] usb 3-1: config 0 descriptor?? [ 905.093036][T17581] ALSA: seq fatal error: cannot create timer (-22) [ 905.133764][T11561] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.145994][T11561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.155606][T11561] usb 4-1: config 1 has no interface number 0 [ 905.162630][T11561] usb 4-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 905.197189][T11561] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 905.207447][T11561] usb 4-1: config 1 interface 2 has no altsetting 1 [ 905.216975][T11561] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.256476][T11561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.266975][T11561] usb 4-1: Product: syz [ 905.271988][T11561] usb 4-1: Manufacturer: syz [ 905.276632][T11561] usb 4-1: SerialNumber: syz [ 905.414131][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 905.414187][ T30] audit: type=1400 audit(1750522815.793:705): avc: denied { setopt } for pid=17621 comm="syz.1.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 905.451845][ T30] audit: type=1400 audit(1750522815.833:706): avc: denied { create } for pid=17621 comm="syz.1.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 905.483348][ T30] audit: type=1400 audit(1750522815.833:707): avc: denied { write } for pid=17621 comm="syz.1.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 905.574254][ T30] audit: type=1400 audit(1750522815.953:708): avc: denied { getopt } for pid=17621 comm="syz.1.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 905.688028][T11561] usb 4-1: USB disconnect, device number 75 [ 905.711626][ T30] audit: type=1400 audit(1750522816.053:709): avc: denied { connect } for pid=17553 comm="syz.3.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 905.822554][T17557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.845901][ T30] audit: type=1400 audit(1750522816.053:710): avc: denied { name_connect } for pid=17553 comm="syz.3.3533" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 905.877467][T17557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.888662][ T51] Bluetooth: hci2: adv larger than maximum supported [ 905.888716][ T51] Bluetooth: hci2: Malformed LE Event: 0x0d [ 906.477264][ T977] usbhid 3-1:0.0: can't add hid device: -71 [ 906.484023][ T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 906.512726][ T977] usb 3-1: USB disconnect, device number 92 [ 906.517728][T17652] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 906.652050][T17659] binder: 17658:17659 ioctl 4018620d 0 returned -22 [ 906.800144][T17661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3545'. [ 906.897084][T17672] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 908.000287][T17678] nvme_fabrics: missing parameter 'transport=%s' [ 908.073911][T17678] nvme_fabrics: missing parameter 'nqn=%s' [ 908.089699][T17679] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 908.122066][ T30] audit: type=1400 audit(1750522818.503:711): avc: denied { create } for pid=17682 comm="syz.1.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 908.146958][ T30] audit: type=1400 audit(1750522818.503:712): avc: denied { connect } for pid=17682 comm="syz.1.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 908.170157][ T30] audit: type=1400 audit(1750522818.503:713): avc: denied { read } for pid=17682 comm="syz.1.3548" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 908.218710][ T30] audit: type=1400 audit(1750522818.503:714): avc: denied { open } for pid=17682 comm="syz.1.3548" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 909.113239][T17714] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 909.961444][T17719] nvme_fabrics: missing parameter 'transport=%s' [ 909.986355][T17719] nvme_fabrics: missing parameter 'nqn=%s' [ 910.010663][T17733] binder: 17732:17733 ioctl 4018620d 0 returned -22 [ 910.369892][T11561] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 910.601524][T11561] usb 3-1: Using ep0 maxpacket: 16 [ 910.649186][T11561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.661934][T11561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.672392][T11561] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.687616][T11561] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 910.697201][T11561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.715351][T11561] usb 3-1: config 0 descriptor?? [ 910.803065][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 910.803082][ T30] audit: type=1400 audit(1750522821.183:717): avc: denied { create } for pid=17767 comm="syz.0.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 911.019322][ T30] audit: type=1400 audit(1750522821.183:718): avc: denied { getopt } for pid=17767 comm="syz.0.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 911.132319][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.144541][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.209438][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3566'. [ 911.383990][T17794] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 911.578054][T17798] netlink: 'syz.4.3567': attribute type 28 has an invalid length. [ 911.587521][T17798] netlink: 'syz.4.3567': attribute type 3 has an invalid length. [ 911.597919][T17798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3567'. [ 911.807437][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.816307][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.929984][T17806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 912.224927][T17813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.259700][ T30] audit: type=1400 audit(1750523335.605:719): avc: denied { setopt } for pid=17809 comm="syz.3.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 912.282914][T17819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.017354][T17837] binder: 17836:17837 ioctl 4018620d 0 returned -22 [ 913.419535][T17843] FAULT_INJECTION: forcing a failure. [ 913.419535][T17843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.584281][T17843] CPU: 0 UID: 0 PID: 17843 Comm: syz.3.3575 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 913.584312][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.584323][T17843] Call Trace: [ 913.584330][T17843] [ 913.584341][T17843] dump_stack_lvl+0x16c/0x1f0 [ 913.584379][T17843] should_fail_ex+0x512/0x640 [ 913.584407][T17843] _copy_from_user+0x2e/0xd0 [ 913.584434][T17843] kstrtouint_from_user+0xd6/0x1d0 [ 913.584454][T17843] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 913.584473][T17843] ? __lock_acquire+0xb8a/0x1c90 [ 913.584514][T17843] proc_fail_nth_write+0x83/0x250 [ 913.584538][T17843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 913.584568][T17843] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 913.584588][T17843] vfs_write+0x2a0/0x1150 [ 913.584615][T17843] ? __pfx___mutex_lock+0x10/0x10 [ 913.584642][T17843] ? __pfx_vfs_write+0x10/0x10 [ 913.584672][T17843] ? __fget_files+0x20e/0x3c0 [ 913.584704][T17843] ksys_write+0x12a/0x250 [ 913.584726][T17843] ? __pfx_ksys_write+0x10/0x10 [ 913.584750][T17843] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 913.584777][T17843] do_syscall_64+0xcd/0x4c0 [ 913.584807][T17843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.584825][T17843] RIP: 0033:0x7f7510d8d3df [ 913.584841][T17843] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 913.584858][T17843] RSP: 002b:00007f7511b37030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 913.584876][T17843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7510d8d3df [ 913.584888][T17843] RDX: 0000000000000001 RSI: 00007f7511b370a0 RDI: 0000000000000006 [ 913.584898][T17843] RBP: 00007f7511b37090 R08: 0000000000000000 R09: 0000000000000000 [ 913.584909][T17843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 913.584920][T17843] R13: 0000000000000001 R14: 00007f7510fb6160 R15: 00007ffcbde648c8 [ 913.584946][T17843] [ 913.782698][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.925403][ T30] audit: type=1400 audit(1750523337.305:720): avc: denied { write } for pid=17847 comm="syz.3.3576" name="igmp" dev="proc" ino=4026533121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 913.966766][T11561] usbhid 3-1:0.0: can't add hid device: -71 [ 913.973531][T11561] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 913.984362][T11561] usb 3-1: USB disconnect, device number 93 [ 914.098795][ T30] audit: type=1400 audit(1750523337.475:721): avc: denied { write } for pid=17865 comm="syz.2.3581" path="socket:[53813]" dev="sockfs" ino=53813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 914.098841][T17866] Bluetooth: MGMT ver 1.23 [ 914.299655][T12425] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 914.749986][T17870] syz.2.3582: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 914.765136][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.2.3582 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 914.765165][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.765177][T17870] Call Trace: [ 914.765185][T17870] [ 914.765193][T17870] dump_stack_lvl+0x16c/0x1f0 [ 914.765226][T17870] warn_alloc+0x248/0x3a0 [ 914.765254][T17870] ? __pfx_warn_alloc+0x10/0x10 [ 914.765277][T17870] ? __pfx_stack_trace_save+0x10/0x10 [ 914.765302][T17870] ? stack_depot_save_flags+0x28/0xa40 [ 914.765329][T17870] ? __pfx___schedule+0x10/0x10 [ 914.765358][T17870] ? kasan_save_stack+0x42/0x60 [ 914.765380][T17870] ? kasan_save_stack+0x33/0x60 [ 914.765402][T17870] ? kasan_save_track+0x14/0x30 [ 914.765425][T17870] ? xskq_create+0x52/0x1d0 [ 914.765448][T17870] ? xsk_setsockopt+0x640/0x840 [ 914.765469][T17870] ? do_sock_setsockopt+0x221/0x470 [ 914.765490][T17870] ? xskq_create+0xfb/0x1d0 [ 914.765515][T17870] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 914.765545][T17870] ? xskq_create+0xfb/0x1d0 [ 914.765576][T17870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 914.765610][T17870] ? xskq_create+0xfb/0x1d0 [ 914.765635][T17870] vmalloc_user_noprof+0x9e/0xe0 [ 914.765655][T17870] ? xskq_create+0xfb/0x1d0 [ 914.765680][T17870] xskq_create+0xfb/0x1d0 [ 914.765706][T17870] xsk_setsockopt+0x640/0x840 [ 914.765731][T17870] ? __pfx_xsk_setsockopt+0x10/0x10 [ 914.765753][T17870] ? selinux_socket_setsockopt+0x4c/0x80 [ 914.765776][T17870] ? selinux_socket_setsockopt+0x55/0x80 [ 914.765804][T17870] ? selinux_socket_setsockopt+0x6a/0x80 [ 914.765830][T17870] ? __pfx_xsk_setsockopt+0x10/0x10 [ 914.765870][T17870] do_sock_setsockopt+0x221/0x470 [ 914.765889][T17870] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 914.765927][T17870] __sys_setsockopt+0x1a0/0x230 [ 914.765959][T17870] __x64_sys_setsockopt+0xbd/0x160 [ 914.765985][T17870] ? do_syscall_64+0x91/0x4c0 [ 914.766014][T17870] ? lockdep_hardirqs_on+0x7c/0x110 [ 914.766042][T17870] do_syscall_64+0xcd/0x4c0 [ 914.766073][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.766094][T17870] RIP: 0033:0x7f9db618e929 [ 914.766111][T17870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.766129][T17870] RSP: 002b:00007f9db6f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 914.766148][T17870] RAX: ffffffffffffffda RBX: 00007f9db63b6160 RCX: 00007f9db618e929 [ 914.766160][T17870] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 914.766172][T17870] RBP: 00007f9db6210b39 R08: 0000000000000052 R09: 0000000000000000 [ 914.766183][T17870] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.766195][T17870] R13: 0000000000000000 R14: 00007f9db63b6160 R15: 00007ffc60f0d2c8 [ 914.766221][T17870] [ 914.766246][T17870] Mem-Info: [ 914.961152][T12425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.965940][T17870] active_anon:13553 inactive_anon:0 isolated_anon:0 [ 914.965940][T17870] active_file:15653 inactive_file:41047 isolated_file:0 [ 914.965940][T17870] unevictable:768 dirty:434 writeback:0 [ 914.965940][T17870] slab_reclaimable:11702 slab_unreclaimable:102661 [ 914.965940][T17870] mapped:34384 shmem:5212 pagetables:1343 [ 914.965940][T17870] sec_pagetables:0 bounce:0 [ 914.965940][T17870] kernel_misc_reclaimable:0 [ 914.965940][T17870] free:1288807 free_pcp:12159 free_cma:0 [ 915.108958][T17870] Node 0 active_anon:62412kB inactive_anon:0kB active_file:62436kB inactive_file:163976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145544kB dirty:1736kB writeback:0kB shmem:27312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11808kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 915.143796][T17870] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 915.175973][T17870] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.180167][T12425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.214956][T17870] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 915.220773][T17870] Node 0 DMA32 free:1226516kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65888kB inactive_anon:0kB active_file:62436kB inactive_file:162660kB unevictable:1536kB writepending:1736kB present:3129332kB managed:2540620kB mlocked:0kB bounce:0kB free_pcp:28728kB local_pcp:10104kB free_cma:0kB [ 915.253867][T17870] lowmem_reserve[]: 0 0 1 1 1 [ 915.258727][T17870] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 915.297335][T17870] lowmem_reserve[]: 0 0 0 0 0 [ 915.302165][T17870] Node 1 Normal free:3913268kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7968kB local_pcp:3488kB free_cma:0kB [ 915.336893][T17870] lowmem_reserve[]: 0 0 0 0 0 [ 915.346588][T17870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 915.368117][T17870] Node 0 DMA32: 239*4kB (UM) 344*8kB (UE) 125*16kB (UM) 408*32kB (UME) 338*64kB (UME) 164*128kB (UM) 64*256kB (ME) 35*512kB (UM) 31*1024kB (UM) 11*2048kB (M) 260*4096kB (UM) = 1214924kB [ 915.417979][T17870] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 915.436835][T17870] Node 1 Normal: 181*4kB (UME) 42*8kB (UME) 45*16kB (UME) 226*32kB (UME) 106*64kB (UME) 27*128kB (UE) 7*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3913268kB [ 915.473042][T17870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.491461][T17870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.504325][T17870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.514534][T17870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 915.524723][T17870] 67633 total pagecache pages [ 915.529734][T17870] 0 pages in swap cache [ 915.533925][T17870] Free swap = 124996kB [ 915.538105][T17870] Total swap = 124996kB [ 915.542426][T17870] 2097051 pages RAM [ 915.546260][T17870] 0 pages HighMem/MovableOnly [ 915.552500][T17870] 429918 pages reserved [ 915.556687][T17870] 0 pages cma reserved [ 915.566393][T17886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.726931][T12425] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 915.736203][T12425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.301048][T12425] usb 4-1: config 0 descriptor?? [ 916.814590][T17918] binder: 17917:17918 ioctl 4018620d 0 returned -22 [ 916.932184][T12425] corsair-psu 0003:1B1C:1C0C.0029: unexpected long global item [ 916.950277][T12425] corsair-psu 0003:1B1C:1C0C.0029: probe with driver corsair-psu failed with error -22 [ 917.311518][ T30] audit: type=1400 audit(1750523340.695:722): avc: denied { write } for pid=17860 comm="syz.3.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 917.336622][T17861] unsupported nlmsg_type 40 [ 917.408699][ T977] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 917.413459][ T24] usb 4-1: USB disconnect, device number 76 [ 917.444280][ T30] audit: type=1400 audit(1750523340.715:723): avc: denied { nlmsg_write } for pid=17860 comm="syz.3.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 917.470066][ T5883] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 917.581259][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.594145][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.604463][ T977] usb 2-1: config 1 has no interface number 0 [ 917.613568][ T977] usb 2-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 917.643983][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 917.717422][ T977] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 917.727040][ T977] usb 2-1: config 1 interface 2 has no altsetting 1 [ 917.734419][ T5883] usb 1-1: not running at top speed; connect to a high speed hub [ 917.746152][ T5883] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 917.757419][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.767547][ T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.777088][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.785500][ T977] usb 2-1: Product: syz [ 917.790313][ T977] usb 2-1: Manufacturer: syz [ 917.795215][ T977] usb 2-1: SerialNumber: syz [ 917.801711][ T5883] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.811515][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.821697][ T5883] usb 1-1: Product: syz [ 917.828345][ T5883] usb 1-1: Manufacturer: syz [ 917.834167][ T5883] usb 1-1: SerialNumber: syz [ 917.949742][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 917.970176][T17954] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3594'. [ 917.983170][T17954] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3594'. [ 918.040357][ T5920] usb 2-1: USB disconnect, device number 81 [ 918.212460][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.218617][ T5883] usb 1-1: 0:2 : does not exist [ 918.226477][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 43520, setting to 1024 [ 918.246717][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 918.521693][ T30] audit: type=1400 audit(1750523341.695:724): avc: denied { map } for pid=17955 comm="syz.3.3595" path="socket:[53900]" dev="sockfs" ino=53900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 918.675082][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 918.690768][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.699453][ T24] usb 3-1: Product: syz [ 918.704243][ T24] usb 3-1: Manufacturer: syz [ 918.716984][ T5883] usb 1-1: USB disconnect, device number 34 [ 918.725423][ T24] usb 3-1: SerialNumber: syz [ 918.731731][ T30] audit: type=1400 audit(1750523341.735:725): avc: denied { bind } for pid=17955 comm="syz.3.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 918.789025][ T24] cdc_ncm 3-1:1.0: skipping garbage [ 919.348204][ T30] audit: type=1400 audit(1750523342.675:726): avc: denied { name_bind } for pid=17991 comm="syz.3.3597" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 919.695895][ T30] audit: type=1400 audit(1750523342.885:727): avc: denied { bind } for pid=17991 comm="syz.3.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 920.032092][T17993] nvme_fabrics: missing parameter 'transport=%s' [ 920.079641][ T30] audit: type=1400 audit(1750523342.885:728): avc: denied { read } for pid=17991 comm="syz.3.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 920.159658][ T30] audit: type=1400 audit(1750523342.995:729): avc: denied { write } for pid=17991 comm="syz.3.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 920.201461][ T24] cdc_ncm 3-1:1.0: bind() failure [ 920.210297][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 920.217219][ T24] cdc_ncm 3-1:1.1: bind() failure [ 920.231276][T17993] nvme_fabrics: missing parameter 'nqn=%s' [ 920.807532][T17995] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 920.823951][ T24] usb 3-1: USB disconnect, device number 94 [ 921.468234][ T30] audit: type=1400 audit(1750523344.735:730): avc: denied { getopt } for pid=18030 comm="syz.0.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 921.748302][ T30] audit: type=1400 audit(1750523344.825:731): avc: denied { setattr } for pid=18030 comm="syz.0.3603" path="socket:[54511]" dev="sockfs" ino=54511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 922.562703][T18042] binder: 18037:18042 ioctl c018620c 200000000000 returned -22 [ 924.069979][ T5920] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 924.361248][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.379600][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 924.388500][ T5920] usb 3-1: config 1 has no interface number 0 [ 924.429427][ T5920] usb 3-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 924.456973][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 924.558062][ T5920] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 924.681052][ T5920] usb 3-1: config 1 interface 2 has no altsetting 1 [ 924.840148][ T977] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 924.871585][ T5920] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 924.890172][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.908634][ T5920] usb 3-1: Product: syz [ 924.917244][ T5920] usb 3-1: Manufacturer: syz [ 924.927166][ T5920] usb 3-1: SerialNumber: syz [ 925.092847][ T977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.119849][ T977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.148110][ T977] usb 1-1: config 1 has no interface number 0 [ 925.156079][ T5972] usb 3-1: USB disconnect, device number 95 [ 925.174800][ T977] usb 1-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 925.196635][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3614'. [ 925.208394][ T977] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 925.219380][ T977] usb 1-1: config 1 interface 2 has no altsetting 1 [ 925.326817][T18103] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 925.532909][ T977] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.544341][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.553383][ T977] usb 1-1: Product: syz [ 925.557618][ T977] usb 1-1: Manufacturer: syz [ 925.563001][ T977] usb 1-1: SerialNumber: syz [ 926.255596][ T977] usb 1-1: USB disconnect, device number 35 [ 928.047229][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 928.113122][T18155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 928.187411][T18155] SELinux: failed to load policy [ 928.999613][ T977] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 929.223468][T18174] nvme_fabrics: missing parameter 'transport=%s' [ 929.243019][T18174] nvme_fabrics: missing parameter 'nqn=%s' [ 929.249570][T18175] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 929.949958][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 930.156765][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.169837][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 930.179070][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.192832][ T977] usb 3-1: config 0 descriptor?? [ 930.205091][T18180] kthread_run failed with err -4 [ 930.213355][ T977] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 930.359417][T18191] FAULT_INJECTION: forcing a failure. [ 930.359417][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 930.392238][T18191] CPU: 1 UID: 0 PID: 18191 Comm: syz.4.3627 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 930.392267][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.392277][T18191] Call Trace: [ 930.392285][T18191] [ 930.392293][T18191] dump_stack_lvl+0x16c/0x1f0 [ 930.392324][T18191] should_fail_ex+0x512/0x640 [ 930.392346][T18191] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 930.392371][T18191] should_failslab+0xc2/0x120 [ 930.392395][T18191] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 930.392416][T18191] ? __alloc_skb+0x2b2/0x380 [ 930.392442][T18191] __alloc_skb+0x2b2/0x380 [ 930.392464][T18191] ? __pfx___alloc_skb+0x10/0x10 [ 930.392484][T18191] ? __pfx___mutex_trylock_common+0x10/0x10 [ 930.392514][T18191] ? rcu_is_watching+0x12/0xc0 [ 930.392538][T18191] netlink_dump+0x678/0xce0 [ 930.392555][T18191] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 930.392572][T18191] ? __netlink_dump_start+0x150/0x990 [ 930.392590][T18191] ? __pfx_netlink_dump+0x10/0x10 [ 930.392605][T18191] ? __pfx___mutex_lock+0x10/0x10 [ 930.392649][T18191] __netlink_dump_start+0x6d6/0x990 [ 930.392670][T18191] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 930.392688][T18191] rtnetlink_rcv_msg+0xb3e/0xe90 [ 930.392713][T18191] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 930.392733][T18191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 930.392758][T18191] ? __pfx_rtnl_dumpit+0x10/0x10 [ 930.392777][T18191] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 930.392799][T18191] ? ref_tracker_free+0x37c/0x830 [ 930.392825][T18191] netlink_rcv_skb+0x158/0x420 [ 930.392842][T18191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 930.392870][T18191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 930.392897][T18191] ? netlink_deliver_tap+0x1ae/0xd30 [ 930.392920][T18191] netlink_unicast+0x53a/0x7f0 [ 930.392942][T18191] ? __pfx_netlink_unicast+0x10/0x10 [ 930.392967][T18191] netlink_sendmsg+0x8d1/0xdd0 [ 930.392991][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.393019][T18191] ____sys_sendmsg+0xa95/0xc70 [ 930.393040][T18191] ? copy_msghdr_from_user+0x10a/0x160 [ 930.393065][T18191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.393096][T18191] ___sys_sendmsg+0x134/0x1d0 [ 930.393122][T18191] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.393144][T18191] ? __lock_acquire+0x622/0x1c90 [ 930.393211][T18191] __sys_sendmsg+0x16d/0x220 [ 930.393235][T18191] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.393276][T18191] do_syscall_64+0xcd/0x4c0 [ 930.393301][T18191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.393319][T18191] RIP: 0033:0x7f5af498e929 [ 930.393333][T18191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.393351][T18191] RSP: 002b:00007f5af577f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.393368][T18191] RAX: ffffffffffffffda RBX: 00007f5af4bb5fa0 RCX: 00007f5af498e929 [ 930.393380][T18191] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 930.393390][T18191] RBP: 00007f5af577f090 R08: 0000000000000000 R09: 0000000000000000 [ 930.393401][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.393411][T18191] R13: 0000000000000000 R14: 00007f5af4bb5fa0 R15: 00007fff576e3c38 [ 930.393435][T18191] [ 930.418247][T18161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.750924][T18161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.764594][T18202] FAULT_INJECTION: forcing a failure. [ 930.764594][T18202] name failslab, interval 1, probability 0, space 0, times 0 [ 930.777612][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.0.3630 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 930.777641][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.777652][T18202] Call Trace: [ 930.777659][T18202] [ 930.777667][T18202] dump_stack_lvl+0x16c/0x1f0 [ 930.777700][T18202] should_fail_ex+0x512/0x640 [ 930.777732][T18202] should_failslab+0xc2/0x120 [ 930.777760][T18202] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 930.777786][T18202] ? skb_clone+0x190/0x3f0 [ 930.777818][T18202] skb_clone+0x190/0x3f0 [ 930.777846][T18202] dev_queue_xmit_nit+0x3e7/0xca0 [ 930.777883][T18202] dev_hard_start_xmit+0x5c3/0x740 [ 930.777907][T18202] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 930.777933][T18202] __dev_queue_xmit+0x7eb/0x43e0 [ 930.777968][T18202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 930.778012][T18202] ? __asan_memcpy+0x3c/0x60 [ 930.778035][T18202] ? __asan_memcpy+0x3c/0x60 [ 930.778055][T18202] ? __skb_clone+0x570/0x760 [ 930.778084][T18202] netlink_deliver_tap+0xa87/0xd30 [ 930.778110][T18202] netlink_unicast+0x5df/0x7f0 [ 930.778134][T18202] ? __pfx_netlink_unicast+0x10/0x10 [ 930.778161][T18202] netlink_sendmsg+0x8d1/0xdd0 [ 930.778187][T18202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.778215][T18202] ____sys_sendmsg+0xa95/0xc70 [ 930.778237][T18202] ? copy_msghdr_from_user+0x10a/0x160 [ 930.778263][T18202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.778296][T18202] ___sys_sendmsg+0x134/0x1d0 [ 930.778325][T18202] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.778347][T18202] ? __lock_acquire+0x622/0x1c90 [ 930.778408][T18202] __sys_sendmsg+0x16d/0x220 [ 930.778435][T18202] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.778487][T18202] do_syscall_64+0xcd/0x4c0 [ 930.778517][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.778537][T18202] RIP: 0033:0x7f8ee458e929 [ 930.778553][T18202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.778572][T18202] RSP: 002b:00007f8ee53c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.778590][T18202] RAX: ffffffffffffffda RBX: 00007f8ee47b5fa0 RCX: 00007f8ee458e929 [ 930.778602][T18202] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 930.778613][T18202] RBP: 00007f8ee53c4090 R08: 0000000000000000 R09: 0000000000000000 [ 930.778623][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.778634][T18202] R13: 0000000000000000 R14: 00007f8ee47b5fa0 R15: 00007fff3e50bbe8 [ 930.778659][T18202] [ 930.908411][ T977] gspca_vc032x: reg_r err -110 [ 931.037086][ T5972] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 931.046342][ T977] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 931.083025][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.091254][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.280014][ T5972] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.815402][ T5972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.839005][ T5972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 931.848900][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.861483][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.863317][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.878635][ T5972] usb 2-1: Product: syz [ 931.900979][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.208017][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.216722][ T5972] usb 2-1: Manufacturer: syz [ 932.226198][ T5972] usb 2-1: SerialNumber: syz [ 933.355416][ T30] audit: type=1400 audit(1750524382.734:732): avc: denied { set_context_mgr } for pid=18192 comm="syz.1.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 933.425244][ T5920] usb 3-1: USB disconnect, device number 96 [ 934.369021][T18261] nvme_fabrics: missing parameter 'transport=%s' [ 934.375515][T18261] nvme_fabrics: missing parameter 'nqn=%s' [ 934.392127][T18261] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 934.711753][ T5972] usb 2-1: 0:2 : does not exist [ 934.776404][ T5972] usb 2-1: USB disconnect, device number 82 [ 934.792741][ T30] audit: type=1400 audit(1750524897.174:733): avc: denied { create } for pid=18280 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.812294][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.865053][T16070] udevd[16070]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.901143][ T30] audit: type=1400 audit(1750524897.284:734): avc: denied { bind } for pid=18280 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.945721][ T30] audit: type=1400 audit(1750524897.284:735): avc: denied { listen } for pid=18280 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.976835][ T30] audit: type=1400 audit(1750524897.284:736): avc: denied { connect } for pid=18280 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.997587][ T30] audit: type=1400 audit(1750524897.324:737): avc: denied { write } for pid=18280 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 935.519639][T11561] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 935.678924][T18314] netlink: 'syz.1.3647': attribute type 2 has an invalid length. [ 936.600816][T18327] warn_alloc: 2 callbacks suppressed [ 936.600846][T18327] syz.2.3648: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 936.621018][T18327] CPU: 1 UID: 0 PID: 18327 Comm: syz.2.3648 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 936.621046][T18327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.621058][T18327] Call Trace: [ 936.621068][T18327] [ 936.621076][T18327] dump_stack_lvl+0x16c/0x1f0 [ 936.621110][T18327] warn_alloc+0x248/0x3a0 [ 936.621137][T18327] ? __pfx_warn_alloc+0x10/0x10 [ 936.621160][T18327] ? __pfx_stack_trace_save+0x10/0x10 [ 936.621185][T18327] ? stack_depot_save_flags+0x28/0xa40 [ 936.621218][T18327] ? kasan_save_stack+0x42/0x60 [ 936.621240][T18327] ? kasan_save_stack+0x33/0x60 [ 936.621263][T18327] ? kasan_save_track+0x14/0x30 [ 936.621286][T18327] ? xskq_create+0x52/0x1d0 [ 936.621309][T18327] ? xsk_setsockopt+0x640/0x840 [ 936.621329][T18327] ? do_sock_setsockopt+0x221/0x470 [ 936.621356][T18327] ? xskq_create+0xfb/0x1d0 [ 936.621381][T18327] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 936.621411][T18327] ? xskq_create+0xfb/0x1d0 [ 936.621443][T18327] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 936.621473][T18327] ? xskq_create+0xfb/0x1d0 [ 936.621497][T18327] vmalloc_user_noprof+0x9e/0xe0 [ 936.621517][T18327] ? xskq_create+0xfb/0x1d0 [ 936.621542][T18327] xskq_create+0xfb/0x1d0 [ 936.621568][T18327] xsk_setsockopt+0x640/0x840 [ 936.621593][T18327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 936.621614][T18327] ? __lock_acquire+0x622/0x1c90 [ 936.621649][T18327] ? selinux_socket_setsockopt+0x6a/0x80 [ 936.621674][T18327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 936.621699][T18327] do_sock_setsockopt+0x221/0x470 [ 936.621718][T18327] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 936.621755][T18327] __sys_setsockopt+0x1a0/0x230 [ 936.621785][T18327] __x64_sys_setsockopt+0xbd/0x160 [ 936.621810][T18327] ? do_syscall_64+0x91/0x4c0 [ 936.621838][T18327] ? lockdep_hardirqs_on+0x7c/0x110 [ 936.621865][T18327] do_syscall_64+0xcd/0x4c0 [ 936.621897][T18327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.621917][T18327] RIP: 0033:0x7f9db618e929 [ 936.621933][T18327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.621951][T18327] RSP: 002b:00007f9db6f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 936.621970][T18327] RAX: ffffffffffffffda RBX: 00007f9db63b6320 RCX: 00007f9db618e929 [ 936.621983][T18327] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 936.621994][T18327] RBP: 00007f9db6210b39 R08: 0000000000000052 R09: 0000000000000000 [ 936.622005][T18327] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.622017][T18327] R13: 0000000000000000 R14: 00007f9db63b6320 R15: 00007ffc60f0d2c8 [ 936.622044][T18327] [ 936.622069][T18327] Mem-Info: [ 936.888971][T18327] active_anon:19434 inactive_anon:0 isolated_anon:0 [ 936.888971][T18327] active_file:15676 inactive_file:41058 isolated_file:0 [ 936.888971][T18327] unevictable:768 dirty:352 writeback:0 [ 936.888971][T18327] slab_reclaimable:11747 slab_unreclaimable:103119 [ 936.888971][T18327] mapped:42231 shmem:10931 pagetables:1356 [ 936.888971][T18327] sec_pagetables:0 bounce:0 [ 936.888971][T18327] kernel_misc_reclaimable:0 [ 936.888971][T18327] free:1283492 free_pcp:10402 free_cma:0 [ 936.934481][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.940509][T18327] Node 0 active_anon:77736kB inactive_anon:0kB active_file:62528kB inactive_file:164020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168772kB dirty:1400kB writeback:0kB shmem:42188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11964kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 936.973923][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.980324][T18327] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 937.012092][T18327] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 937.041445][T18327] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 937.047266][T18327] Node 0 DMA32 free:1202632kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77712kB inactive_anon:0kB active_file:62528kB inactive_file:162704kB unevictable:1536kB writepending:1400kB present:3129332kB managed:2540620kB mlocked:0kB bounce:0kB free_pcp:36616kB local_pcp:16376kB free_cma:0kB [ 937.079585][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.085716][T18327] lowmem_reserve[]: 0 0 1 1 1 [ 937.090462][T18327] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 937.119458][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.125483][T18327] lowmem_reserve[]: 0 0 0 0 0 [ 937.130195][T18327] Node 1 Normal free:3915956kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:212kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5280kB local_pcp:2048kB free_cma:0kB [ 937.161542][T18327] lowmem_reserve[]: 0 0 0 0 0 [ 937.166255][T18327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 937.178879][T18327] Node 0 DMA32: 0*4kB 3*8kB (UME) 1*16kB (M) 305*32kB (ME) 340*64kB (UME) 163*128kB (UM) 63*256kB (ME) 29*512kB (M) 31*1024kB (UM) 11*2048kB (M) 260*4096kB (UM) = 1202632kB [ 937.196178][T18327] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 937.208470][T18327] Node 1 Normal: 181*4kB (UME) 42*8kB (UME) 45*16kB (UME) 226*32kB (UME) 112*64kB (UME) 27*128kB (UE) 8*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 948*4096kB (M) = 3915956kB [ 937.227080][T18327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.236635][T18327] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 937.245923][T18327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.255457][T18327] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 937.264752][T18327] 67661 total pagecache pages [ 937.269414][T18327] 0 pages in swap cache [ 937.273568][T18327] Free swap = 124996kB [ 937.277706][T18327] Total swap = 124996kB [ 937.281849][T18327] 2097051 pages RAM [ 937.285634][T18327] 0 pages HighMem/MovableOnly [ 937.290318][T18327] 429918 pages reserved [ 937.294481][T18327] 0 pages cma reserved [ 937.304614][T11561] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.369496][T11561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.400827][T11561] usb 4-1: config 1 has no interface number 0 [ 937.427890][T11561] usb 4-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 937.455147][T11561] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 937.559612][T11561] usb 4-1: config 1 interface 2 has no altsetting 1 [ 937.628614][T11561] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.660867][T11561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.812513][T11561] usb 4-1: Product: syz [ 938.195359][T11561] usb 4-1: Manufacturer: syz [ 938.216868][T11561] usb 4-1: SerialNumber: syz [ 938.244063][T11561] usb 4-1: can't set config #1, error -71 [ 938.267025][T11561] usb 4-1: USB disconnect, device number 77 [ 938.294903][ T30] audit: type=1400 audit(1750525413.670:738): avc: denied { mounton } for pid=18356 comm="syz.3.3653" path="/136/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 938.376753][ T30] audit: type=1400 audit(1750525413.670:739): avc: denied { mount } for pid=18356 comm="syz.3.3653" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 938.441089][ T30] audit: type=1400 audit(1750525413.670:740): avc: denied { mounton } for pid=18356 comm="syz.3.3653" path="/136/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 938.463450][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.498142][T18366] tipc: Started in network mode [ 938.503496][T18366] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 938.572061][ T30] audit: type=1400 audit(1750525413.790:741): avc: denied { mount } for pid=18356 comm="syz.3.3653" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 938.597942][T18366] tipc: Enabled bearer , priority 10 [ 938.605029][ T30] audit: type=1400 audit(1750525413.790:742): avc: denied { read append } for pid=18356 comm="syz.3.3653" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 938.718905][ T30] audit: type=1400 audit(1750525413.790:743): avc: denied { open } for pid=18356 comm="syz.3.3653" path="/136/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 939.213453][ T30] audit: type=1400 audit(1750525414.060:744): avc: denied { unmount } for pid=14896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 939.233813][ T30] audit: type=1400 audit(1750525927.432:745): avc: denied { unmount } for pid=14896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 939.580342][T11556] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 939.611899][ T5920] tipc: Node number set to 15444650 [ 939.650019][T18404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.820811][T11556] usb 2-1: Using ep0 maxpacket: 32 [ 939.858862][T11556] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.906062][T11556] usb 2-1: config 0 interface 0 has no altsetting 0 [ 939.933620][T11556] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 939.946143][T11556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.964604][T11556] usb 2-1: config 0 descriptor?? [ 940.674534][T18380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.683356][T18380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.716478][ T51] Bluetooth: hci1: adv larger than maximum supported [ 940.716507][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 940.842273][T11556] usbhid 2-1:0.0: can't add hid device: -71 [ 940.848300][T11556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 940.864466][T11556] usb 2-1: USB disconnect, device number 83 [ 942.255461][ T30] audit: type=1400 audit(1750526443.637:746): avc: denied { setopt } for pid=18451 comm="syz.3.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 942.371468][T18454] netlink: 'syz.4.3666': attribute type 2 has an invalid length. [ 942.465537][ T30] audit: type=1400 audit(1750526443.847:747): avc: denied { bind } for pid=18451 comm="syz.3.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 943.280746][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 943.594892][T11556] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 944.192957][T11556] usb 3-1: Using ep0 maxpacket: 16 [ 944.207685][T11556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.233040][T11556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.256359][T11556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 944.286022][T11556] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 944.317728][T11556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.814268][T11556] usb 3-1: config 0 descriptor?? [ 945.371777][T18459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.397713][T18459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.368769][T18499] nvme_fabrics: missing parameter 'transport=%s' [ 946.420213][T18499] nvme_fabrics: missing parameter 'nqn=%s' [ 946.427319][T18503] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 946.453593][ T30] audit: type=1400 audit(1750527473.338:748): avc: denied { unmount } for pid=18501 comm="syz.0.3678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 946.529331][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.538233][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.667375][ T30] audit: type=1400 audit(1750527474.048:749): avc: denied { ioctl } for pid=18526 comm="syz.4.3680" path="socket:[55795]" dev="sockfs" ino=55795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 946.709954][T11561] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 946.722863][ T30] audit: type=1400 audit(1750527474.048:750): avc: denied { write } for pid=18526 comm="syz.4.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 946.949702][T11561] usb 4-1: Using ep0 maxpacket: 8 [ 946.958781][T11561] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.972196][T11561] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 947.131802][T11561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.731039][T11561] usb 4-1: config 0 descriptor?? [ 947.741344][T11561] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 947.917908][ T30] audit: type=1400 audit(1750527475.298:751): avc: denied { firmware_load } for pid=18536 comm="syz.1.3683" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 947.970551][T18516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.999792][T18516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.019868][T11556] usbhid 3-1:0.0: can't add hid device: -71 [ 948.028709][T11556] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 948.057425][T11556] usb 3-1: USB disconnect, device number 97 [ 948.142519][T18537] syz.1.3683 (18537) used greatest stack depth: 19720 bytes left [ 948.279438][T18516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.385323][T18516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.471524][T18516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.481855][T18516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.957329][ T30] audit: type=1400 audit(1750527476.338:752): avc: denied { ioctl } for pid=18515 comm="syz.3.3679" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 948.983588][T11561] gspca_vc032x: reg_w err -71 [ 948.990436][T11561] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 949.001054][T11561] usb 4-1: USB disconnect, device number 78 [ 950.493106][T18604] nvme_fabrics: missing parameter 'transport=%s' [ 951.974419][T18604] nvme_fabrics: missing parameter 'nqn=%s' [ 952.088782][T18605] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 952.168711][ T30] audit: type=1400 audit(1750527479.548:753): avc: denied { setopt } for pid=18629 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 952.174727][ T5825] hid (null): global environment stack underflow [ 952.195148][ T5825] hid (null): unknown global tag 0xd [ 952.201099][ T5825] hid (null): report_id 44184 is invalid [ 952.206764][ T5825] hid (null): unknown global tag 0xd [ 952.221156][T18634] tipc: Can't bind to reserved service type 2 [ 952.229404][ T30] audit: type=1400 audit(1750527479.558:754): avc: denied { setopt } for pid=18629 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 952.286929][ T30] audit: type=1400 audit(1750527479.558:755): avc: denied { bind } for pid=18629 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 952.301108][ T5825] hid (null): unknown global tag 0xd [ 952.311530][ T5825] hid (null): invalid report_count -912329843 [ 952.325829][ T5825] hid-generic 0001:0007:0009.002A: global environment stack underflow [ 952.334151][ T5825] hid-generic 0001:0007:0009.002A: item 0 0 1 11 parsing failed [ 952.342350][ T5825] hid-generic 0001:0007:0009.002A: probe with driver hid-generic failed with error -22 [ 952.374451][ T30] audit: type=1400 audit(1750527479.558:756): avc: denied { ioctl } for pid=18629 comm="syz.3.3698" path="socket:[55916]" dev="sockfs" ino=55916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 952.402904][ T30] audit: type=1400 audit(1750527479.558:757): avc: denied { read write } for pid=18629 comm="syz.3.3698" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 952.435950][ T30] audit: type=1400 audit(1750527479.558:758): avc: denied { open } for pid=18629 comm="syz.3.3698" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 952.462284][ T30] audit: type=1400 audit(1750527479.608:759): avc: denied { ioctl } for pid=18629 comm="syz.3.3698" path="/dev/uhid" dev="devtmpfs" ino=1274 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 952.489182][ T30] audit: type=1400 audit(1750527479.608:760): avc: denied { bind } for pid=18629 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 952.923223][T18649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3701'. [ 953.709318][T18668] binder: 18667:18668 ioctl 4018620d 0 returned -22 [ 953.792194][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 953.809744][T11561] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 954.170996][T11561] usb 2-1: Using ep0 maxpacket: 16 [ 954.429629][T11561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.444925][T11561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.465462][T11561] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.483687][T11561] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 954.680927][T11561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.780279][T11561] usb 2-1: config 0 descriptor?? [ 955.662877][T18698] nvme_fabrics: missing parameter 'transport=%s' [ 955.705212][T18698] nvme_fabrics: missing parameter 'nqn=%s' [ 955.734541][T18699] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 955.751263][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.764981][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.966284][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'. [ 956.549672][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.558592][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.021751][T18720] FAULT_INJECTION: forcing a failure. [ 957.021751][T18720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.038786][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.2.3714 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 957.038816][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.038827][T18720] Call Trace: [ 957.038833][T18720] [ 957.038840][T18720] dump_stack_lvl+0x16c/0x1f0 [ 957.038873][T18720] should_fail_ex+0x512/0x640 [ 957.038905][T18720] _copy_from_user+0x2e/0xd0 [ 957.038932][T18720] kstrtouint_from_user+0xd6/0x1d0 [ 957.038953][T18720] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 957.038973][T18720] ? __lock_acquire+0xb8a/0x1c90 [ 957.039014][T18720] proc_fail_nth_write+0x83/0x250 [ 957.039038][T18720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 957.039068][T18720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 957.039096][T18720] vfs_write+0x2a0/0x1150 [ 957.039124][T18720] ? __pfx___mutex_lock+0x10/0x10 [ 957.039152][T18720] ? __pfx_vfs_write+0x10/0x10 [ 957.039181][T18720] ? __fget_files+0x20e/0x3c0 [ 957.039214][T18720] ksys_write+0x12a/0x250 [ 957.039237][T18720] ? __pfx_ksys_write+0x10/0x10 [ 957.039268][T18720] do_syscall_64+0xcd/0x4c0 [ 957.039298][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.039316][T18720] RIP: 0033:0x7f9db618d3df [ 957.039332][T18720] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 957.039350][T18720] RSP: 002b:00007f9db6fd8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 957.039369][T18720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9db618d3df [ 957.039380][T18720] RDX: 0000000000000001 RSI: 00007f9db6fd80a0 RDI: 0000000000000004 [ 957.039391][T18720] RBP: 00007f9db6fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 957.039402][T18720] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000001 [ 957.039413][T18720] R13: 0000000000000000 R14: 00007f9db63b5fa0 R15: 00007ffc60f0d2c8 [ 957.039438][T18720] [ 957.126077][T18723] netlink: 'syz.4.3712': attribute type 2 has an invalid length. [ 957.175884][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.234378][T11561] usbhid 2-1:0.0: can't add hid device: -71 [ 958.779295][T18733] tipc: Started in network mode [ 958.784459][T11561] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 958.804033][T18733] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 958.822310][T11561] usb 2-1: USB disconnect, device number 84 [ 958.833755][T18733] tipc: Enabled bearer , priority 10 [ 958.860491][ T30] audit: type=1400 audit(1750527999.247:761): avc: denied { getopt } for pid=18731 comm="syz.3.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 959.473110][T18754] tipc: Enabling of bearer rejected, already enabled [ 959.814342][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3722'. [ 959.828974][ T30] audit: type=1400 audit(1750528000.207:762): avc: denied { create } for pid=18760 comm="syz.3.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 959.860417][ T30] audit: type=1400 audit(1750528000.237:763): avc: denied { setopt } for pid=18760 comm="syz.3.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 959.951636][T11561] tipc: Node number set to 15444650 [ 959.958419][T18775] FAULT_INJECTION: forcing a failure. [ 959.958419][T18775] name failslab, interval 1, probability 0, space 0, times 0 [ 959.971083][T18775] CPU: 0 UID: 0 PID: 18775 Comm: syz.3.3725 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 959.971109][T18775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 959.971120][T18775] Call Trace: [ 959.971127][T18775] [ 959.971134][T18775] dump_stack_lvl+0x16c/0x1f0 [ 959.971165][T18775] should_fail_ex+0x512/0x640 [ 959.971193][T18775] should_failslab+0xc2/0x120 [ 959.971220][T18775] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 959.971244][T18775] ? skb_clone+0x190/0x3f0 [ 959.971273][T18775] skb_clone+0x190/0x3f0 [ 959.971298][T18775] dev_queue_xmit_nit+0x3e7/0xca0 [ 959.971332][T18775] dev_hard_start_xmit+0x5c3/0x740 [ 959.971354][T18775] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 959.971379][T18775] __dev_queue_xmit+0x7eb/0x43e0 [ 959.971412][T18775] ? __pfx___dev_queue_xmit+0x10/0x10 [ 959.971455][T18775] ? __asan_memcpy+0x3c/0x60 [ 959.971476][T18775] ? __asan_memcpy+0x3c/0x60 [ 959.971495][T18775] ? __skb_clone+0x570/0x760 [ 959.971523][T18775] netlink_deliver_tap+0xa87/0xd30 [ 959.971547][T18775] netlink_unicast+0x5df/0x7f0 [ 959.971569][T18775] ? __pfx_netlink_unicast+0x10/0x10 [ 959.971595][T18775] netlink_sendmsg+0x8d1/0xdd0 [ 959.971618][T18775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.971647][T18775] ____sys_sendmsg+0xa95/0xc70 [ 959.971667][T18775] ? copy_msghdr_from_user+0x10a/0x160 [ 959.971692][T18775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.971723][T18775] ___sys_sendmsg+0x134/0x1d0 [ 959.971750][T18775] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.971772][T18775] ? __lock_acquire+0x622/0x1c90 [ 959.971832][T18775] __sys_sendmsg+0x16d/0x220 [ 959.971863][T18775] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.971899][T18775] ? fput+0x70/0xf0 [ 959.971929][T18775] do_syscall_64+0xcd/0x4c0 [ 959.971954][T18775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.971965][T18775] RIP: 0033:0x7f7510d8e929 [ 959.971975][T18775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.971985][T18775] RSP: 002b:00007f7511b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.971996][T18775] RAX: ffffffffffffffda RBX: 00007f7510fb5fa0 RCX: 00007f7510d8e929 [ 959.972003][T18775] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 959.972009][T18775] RBP: 00007f7511b79090 R08: 0000000000000000 R09: 0000000000000000 [ 959.972016][T18775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.972022][T18775] R13: 0000000000000000 R14: 00007f7510fb5fa0 R15: 00007ffcbde648c8 [ 959.972036][T18775] [ 960.169673][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 960.320327][ T30] audit: type=1400 audit(1750528000.697:764): avc: denied { mount } for pid=18777 comm="syz.3.3726" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 960.343264][ T30] audit: type=1400 audit(1750528000.717:765): avc: denied { unlink } for pid=18777 comm="syz.3.3726" name="#22" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 960.366500][ T30] audit: type=1400 audit(1750528000.717:766): avc: denied { mount } for pid=18777 comm="syz.3.3726" name="/" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 960.388913][ T30] audit: type=1400 audit(1750528000.717:767): avc: denied { create } for pid=18777 comm="syz.3.3726" name="#24" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 960.410217][ T30] audit: type=1400 audit(1750528000.777:768): avc: denied { unmount } for pid=14896 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 960.453956][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 960.468947][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 960.478733][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.490311][ T24] usb 2-1: config 0 descriptor?? [ 960.702646][T11561] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 960.959677][T11561] usb 4-1: Using ep0 maxpacket: 8 [ 961.046372][T11561] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 961.052417][ T24] lua 0003:1E7D:2C2E.002B: item fetching failed at offset 2/3 [ 961.086404][T11561] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 961.090305][ T24] lua 0003:1E7D:2C2E.002B: parse failed [ 961.105398][T11561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.116442][ T24] lua 0003:1E7D:2C2E.002B: probe with driver lua failed with error -22 [ 961.120198][T11561] usb 4-1: Product: syz [ 961.159420][T11561] usb 4-1: Manufacturer: syz [ 961.169600][T11561] usb 4-1: SerialNumber: syz [ 961.192703][T11561] usb 4-1: config 0 descriptor?? [ 961.284851][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.295112][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.516637][ T5825] usb 2-1: USB disconnect, device number 85 [ 961.735701][T18782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.817474][T18782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.854723][T18848] FAULT_INJECTION: forcing a failure. [ 962.854723][T18848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.871849][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.4.3738 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 962.871878][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.871889][T18848] Call Trace: [ 962.871896][T18848] [ 962.871904][T18848] dump_stack_lvl+0x16c/0x1f0 [ 962.871937][T18848] should_fail_ex+0x512/0x640 [ 962.871966][T18848] _copy_from_user+0x2e/0xd0 [ 962.871993][T18848] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 962.872016][T18848] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 962.872038][T18848] ? __local_bh_enable_ip+0xa4/0x120 [ 962.872060][T18848] ? lockdep_hardirqs_on+0x7c/0x110 [ 962.872088][T18848] do_ipv6_setsockopt+0x30a1/0x4400 [ 962.872115][T18848] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 962.872134][T18848] ? avc_has_perm_noaudit+0x117/0x3b0 [ 962.872156][T18848] ? avc_has_perm_noaudit+0x149/0x3b0 [ 962.872176][T18848] ? avc_has_perm+0x11a/0x1c0 [ 962.872193][T18848] ? __pfx_avc_has_perm+0x10/0x10 [ 962.872220][T18848] ? sock_has_perm+0x259/0x2f0 [ 962.872240][T18848] ? __pfx_sock_has_perm+0x10/0x10 [ 962.872260][T18848] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 962.872285][T18848] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 962.872308][T18848] ? proc_fail_nth_write+0x9f/0x250 [ 962.872337][T18848] ? ipv6_setsockopt+0xcb/0x170 [ 962.872354][T18848] ipv6_setsockopt+0xcb/0x170 [ 962.872377][T18848] tcp_setsockopt+0xa4/0x100 [ 962.872406][T18848] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 962.872426][T18848] do_sock_setsockopt+0x221/0x470 [ 962.872445][T18848] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 962.872479][T18848] __sys_setsockopt+0x1a0/0x230 [ 962.872508][T18848] __x64_sys_setsockopt+0xbd/0x160 [ 962.872531][T18848] ? do_syscall_64+0x91/0x4c0 [ 962.872557][T18848] ? lockdep_hardirqs_on+0x7c/0x110 [ 962.872581][T18848] do_syscall_64+0xcd/0x4c0 [ 962.872609][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.872627][T18848] RIP: 0033:0x7f5af498e929 [ 962.872643][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.872660][T18848] RSP: 002b:00007f5af577f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.872679][T18848] RAX: ffffffffffffffda RBX: 00007f5af4bb5fa0 RCX: 00007f5af498e929 [ 962.872691][T18848] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 962.872701][T18848] RBP: 00007f5af577f090 R08: 0000000000000020 R09: 0000000000000000 [ 962.872712][T18848] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 962.872723][T18848] R13: 0000000000000000 R14: 00007f5af4bb5fa0 R15: 00007fff576e3c38 [ 962.872748][T18848] [ 963.219693][ T976] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 963.443666][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 964.038593][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 964.070632][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.087979][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.100031][ T5920] usb 4-1: USB disconnect, device number 79 [ 964.123006][ T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.310932][ T976] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 964.320404][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.339504][ T976] usb 3-1: config 0 descriptor?? [ 964.851780][ T30] audit: type=1400 audit(1750528518.234:769): avc: denied { audit_write } for pid=18881 comm="syz.3.3745" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 965.001166][T18839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.055814][T18839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.222316][T18839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.231171][T18839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.481333][T18905] netlink: 'syz.1.3746': attribute type 2 has an invalid length. [ 966.493811][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 966.503382][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 966.532457][ T976] usb 3-1: USB disconnect, device number 98 [ 966.699652][ T5883] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 966.843986][T18919] Malformed UNC in devname [ 966.843986][T18919] [ 966.851137][T18919] CIFS: VFS: Malformed UNC in devname [ 966.860254][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 966.873143][ T5883] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 966.887384][ T5883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.898954][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.918721][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.929097][ T5883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.942598][T18919] siw: device registration error -23 [ 966.953358][T18919] smc: removing ib device syz2 [ 967.368347][T18919] ------------[ cut here ]------------ [ 967.373866][T18919] WARNING: CPU: 0 PID: 18919 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 967.384862][T18919] Modules linked in: [ 967.388929][T18919] CPU: 0 UID: 0 PID: 18919 Comm: syz.0.3749 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 967.401365][T18919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.411601][T18919] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 967.417052][T18919] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 0e 0b f9 e8 b0 0e 0b f9 90 <0f> 0b 90 5b e9 a6 0e 0b f9 e8 c1 e6 71 f9 eb da 66 66 2e 0f 1f 84 [ 967.437156][T18919] RSP: 0018:ffffc90004f6f1f0 EFLAGS: 00010246 [ 967.443228][T18919] RAX: 0000000000080000 RBX: ffff888036c3d320 RCX: ffffc9001d265000 [ 967.451211][T18919] RDX: 0000000000080000 RSI: ffffffff88b10d80 RDI: ffff888036c3d3a0 [ 967.459356][T18919] RBP: ffffffff88af7230 R08: 0000000000000005 R09: 0000000000000001 [ 967.467628][T18919] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888036c3c668 [ 967.475607][T18919] R13: ffff888036c3bfe0 R14: ffff888036c3bfe0 R15: ffff888036c3d080 [ 967.483736][T18919] FS: 00007f8ee53c46c0(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 967.492697][T18919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 967.499643][T18919] CR2: 0000001b32004ff8 CR3: 0000000060c39000 CR4: 00000000003526f0 [ 967.507600][T18919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 967.515757][T18919] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 967.524216][T18919] Call Trace: [ 967.527626][T18919] [ 967.530567][T18919] rxe_dealloc+0x25/0xc0 [ 967.534798][T18919] ib_dealloc_device+0x49/0x230 [ 967.539668][T18919] __ib_unregister_device+0x396/0x480 [ 967.545028][T18919] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 967.550950][T18919] ib_unregister_device_and_put+0x5a/0x80 [ 967.556839][T18919] nldev_dellink+0x21f/0x320 [ 967.561440][T18919] ? __pfx_nldev_dellink+0x10/0x10 [ 967.566567][T18919] ? cap_capable+0xb3/0x250 [ 967.571357][T18919] ? bpf_lsm_capable+0x9/0x10 [ 967.576017][T18919] ? security_capable+0x7e/0x260 [ 967.581127][T18919] ? ns_capable+0xd7/0x110 [ 967.585525][T18919] ? __pfx_nldev_dellink+0x10/0x10 [ 967.590648][T18919] rdma_nl_rcv_msg+0x38a/0x6e0 [ 967.595397][T18919] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 967.600987][T18919] ? __lock_acquire+0x622/0x1c90 [ 967.605917][T18919] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 967.612348][T18919] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 967.619450][T18919] ? netlink_deliver_tap+0x1ae/0xd30 [ 967.625035][T18919] ? is_vmalloc_addr+0x86/0xa0 [ 967.629962][T18919] netlink_unicast+0x53a/0x7f0 [ 967.634723][T18919] ? __pfx_netlink_unicast+0x10/0x10 [ 967.640047][T18919] netlink_sendmsg+0x8d1/0xdd0 [ 967.644808][T18919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.650113][T18919] ____sys_sendmsg+0xa95/0xc70 [ 967.654859][T18919] ? copy_msghdr_from_user+0x10a/0x160 [ 967.660506][T18919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.665777][T18919] ? __pfx_futex_wake_mark+0x10/0x10 [ 967.671611][T18919] ___sys_sendmsg+0x134/0x1d0 [ 967.676325][T18919] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.681588][T18919] ? __lock_acquire+0x622/0x1c90 [ 967.686958][T18919] __sys_sendmsg+0x16d/0x220 [ 967.691633][T18919] ? __pfx___sys_sendmsg+0x10/0x10 [ 967.696770][T18919] ? __x64_sys_futex+0x1e0/0x4c0 [ 967.702051][T18919] do_syscall_64+0xcd/0x4c0 [ 967.706542][T18919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.712444][T18919] RIP: 0033:0x7f8ee458e929 [ 967.716996][T18919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.737037][T18919] RSP: 002b:00007f8ee53c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.745450][T18919] RAX: ffffffffffffffda RBX: 00007f8ee47b5fa0 RCX: 00007f8ee458e929 [ 967.753423][T18919] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 967.761565][T18919] RBP: 00007f8ee4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 967.769569][T18919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.777798][T18919] R13: 0000000000000000 R14: 00007f8ee47b5fa0 R15: 00007fff3e50bbe8 [ 967.785944][T18919] [ 967.788955][T18919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 967.796210][T18919] CPU: 0 UID: 0 PID: 18919 Comm: syz.0.3749 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 967.808243][T18919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.818273][T18919] Call Trace: [ 967.821531][T18919] [ 967.824440][T18919] dump_stack_lvl+0x3d/0x1f0 [ 967.829015][T18919] panic+0x71c/0x800 [ 967.832890][T18919] ? __pfx_panic+0x10/0x10 [ 967.837300][T18919] ? show_trace_log_lvl+0x29b/0x3e0 [ 967.842498][T18919] ? rxe_pool_cleanup+0x41/0x60 [ 967.847328][T18919] check_panic_on_warn+0xab/0xb0 [ 967.852247][T18919] __warn+0xf6/0x3c0 [ 967.856125][T18919] ? rxe_pool_cleanup+0x41/0x60 [ 967.860965][T18919] report_bug+0x3c3/0x580 [ 967.865274][T18919] ? rxe_pool_cleanup+0x41/0x60 [ 967.870110][T18919] handle_bug+0x184/0x210 [ 967.874434][T18919] exc_invalid_op+0x17/0x50 [ 967.878923][T18919] asm_exc_invalid_op+0x1a/0x20 [ 967.883747][T18919] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 967.889185][T18919] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 0e 0b f9 e8 b0 0e 0b f9 90 <0f> 0b 90 5b e9 a6 0e 0b f9 e8 c1 e6 71 f9 eb da 66 66 2e 0f 1f 84 [ 967.908769][T18919] RSP: 0018:ffffc90004f6f1f0 EFLAGS: 00010246 [ 967.914812][T18919] RAX: 0000000000080000 RBX: ffff888036c3d320 RCX: ffffc9001d265000 [ 967.922763][T18919] RDX: 0000000000080000 RSI: ffffffff88b10d80 RDI: ffff888036c3d3a0 [ 967.930713][T18919] RBP: ffffffff88af7230 R08: 0000000000000005 R09: 0000000000000001 [ 967.938665][T18919] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888036c3c668 [ 967.946611][T18919] R13: ffff888036c3bfe0 R14: ffff888036c3bfe0 R15: ffff888036c3d080 [ 967.954561][T18919] ? __pfx_rxe_dealloc+0x10/0x10 [ 967.959480][T18919] ? rxe_pool_cleanup+0x40/0x60 [ 967.964334][T18919] rxe_dealloc+0x25/0xc0 [ 967.968555][T18919] ib_dealloc_device+0x49/0x230 [ 967.973387][T18919] __ib_unregister_device+0x396/0x480 [ 967.978747][T18919] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 967.984620][T18919] ib_unregister_device_and_put+0x5a/0x80 [ 967.990327][T18919] nldev_dellink+0x21f/0x320 [ 967.994898][T18919] ? __pfx_nldev_dellink+0x10/0x10 [ 968.000022][T18919] ? cap_capable+0xb3/0x250 [ 968.004502][T18919] ? bpf_lsm_capable+0x9/0x10 [ 968.009155][T18919] ? security_capable+0x7e/0x260 [ 968.014089][T18919] ? ns_capable+0xd7/0x110 [ 968.018496][T18919] ? __pfx_nldev_dellink+0x10/0x10 [ 968.023598][T18919] rdma_nl_rcv_msg+0x38a/0x6e0 [ 968.028349][T18919] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 968.033635][T18919] ? __lock_acquire+0x622/0x1c90 [ 968.038589][T18919] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 968.045009][T18919] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 968.051936][T18919] ? netlink_deliver_tap+0x1ae/0xd30 [ 968.057200][T18919] ? is_vmalloc_addr+0x86/0xa0 [ 968.061959][T18919] netlink_unicast+0x53a/0x7f0 [ 968.066704][T18919] ? __pfx_netlink_unicast+0x10/0x10 [ 968.071980][T18919] netlink_sendmsg+0x8d1/0xdd0 [ 968.076745][T18919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.082032][T18919] ____sys_sendmsg+0xa95/0xc70 [ 968.086781][T18919] ? copy_msghdr_from_user+0x10a/0x160 [ 968.092222][T18919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 968.097488][T18919] ? __pfx_futex_wake_mark+0x10/0x10 [ 968.102752][T18919] ___sys_sendmsg+0x134/0x1d0 [ 968.107412][T18919] ? __pfx____sys_sendmsg+0x10/0x10 [ 968.112590][T18919] ? __lock_acquire+0x622/0x1c90 [ 968.117526][T18919] __sys_sendmsg+0x16d/0x220 [ 968.122109][T18919] ? __pfx___sys_sendmsg+0x10/0x10 [ 968.127201][T18919] ? __x64_sys_futex+0x1e0/0x4c0 [ 968.132129][T18919] do_syscall_64+0xcd/0x4c0 [ 968.136615][T18919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.142486][T18919] RIP: 0033:0x7f8ee458e929 [ 968.146885][T18919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.166482][T18919] RSP: 002b:00007f8ee53c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.174963][T18919] RAX: ffffffffffffffda RBX: 00007f8ee47b5fa0 RCX: 00007f8ee458e929 [ 968.182911][T18919] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 968.190858][T18919] RBP: 00007f8ee4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 968.198804][T18919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.206751][T18919] R13: 0000000000000000 R14: 00007f8ee47b5fa0 R15: 00007fff3e50bbe8 [ 968.214729][T18919] [ 968.217948][T18919] Kernel Offset: disabled [ 968.222268][T18919] Rebooting in 86400 seconds..