last executing test programs: 7m55.336174989s ago: executing program 0 (id=129): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 7m54.827953742s ago: executing program 0 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "256fee7be7cd23f7dae2c6985dc1d3ed"}, 0x11, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x49, 0x1, 0x2, 0x8, 0xe8, 0x2}, 0x20) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4f28, 0x5, 0x4, 0x47, 0x2, 0xcc7, 0x71, 0x0, 0x0, 0x403, 0x7f, 0x15fe, 0x4, 0x8, 0x4000003, 0xe1cf, 0xff7fffc4, 0x9, 0x20002, 0x3f, 0x6, 0xfffffffb, 0x7, 0x7ff, 0x200000, 0x4003, 0x1003c, 0x5, 0x6, 0x8000000, 0x1fe]}) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000600)={'ipvlan0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x7f, 0x1, 0x37f, 0x74cd1a55, 0x8, 0x7, 0xfff, 0xfff}}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 7m49.871663938s ago: executing program 0 (id=143): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'dt2801\x00', [0x8001, 0x8, 0x1, 0x8, 0x3, 0xccb, 0x8, 0x0, 0xd, 0x100, 0x3, 0xbefa, 0x5, 0x1, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x20001e58, 0x5, 0x8, 0x3c, 0xa, 0xc, 0x4, 0xd]}) poll(&(0x7f0000000040)=[{r0, 0x3c0}], 0x1, 0xe) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$binfmt_elf64(r3, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x7, 0x0, 0x3, 0x5, 0x2, 0x3d, 0x46d, 0x29, 0x40, 0x150, 0x87e, 0x5, 0x38, 0x1, 0x0, 0xa076, 0x1}, [{0x70000000, 0x7, 0x7, 0x910, 0x3, 0x3, 0x4, 0x3}]}, 0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) unshare(0x2040400) r7 = socket(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x11000002) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x2dc, 0x30, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{0x2c8, 0x1, [@m_tunnel_key={0x70, 0x16, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x24, 0x6, "8736c5f2e531c19690196b451390bafd9f26984b93bf2e16fa59873d9b859474"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xf8, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x0, 0x1, 0xaea0, 0xfffffff9}}]}, {0xb1, 0x6, "86f82c88010109c24b993b14aa1c76892857cbf7f5517e2267602d80696c8d54d9d2b1d976bbcb369a309d20d86dd68141136d9acc15c9e4050e1ccfba1e247c02850446c534c8758277787889095e6796a179ef205c74ded78aae4876236652e095a9f0c7fd672a2778f2e09b9b4baaef2de09040d8a85942b0d1cb20760ed8331cd690d46a62deb43b740a96aef16959bc56b9b521a1b6b9601f68e022557c4bdd4c3921d71b25c0ecce7da0"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xec, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x8}}]}, {0xb8, 0x6, "c1cdf652629afc4b0b90da35ddd6515ea2085d81745391fb5ae147594af2d599c85446368796a10c3a731d0f051d59e9ddc9c1e83f5ca3e6e9380175515c3b9ee4b7dc49b7cef9b953a794d686d3e8b61ce2a3e8410e193034fa389b1dee4c777442aae54592a1c6d12b8735ccf29122ffc7d4d265661f25cb3f379b79fe3770aab31cfc9e8f846e564160dc6deda8800506122eb0fb2d1f47bffb91de0e348922cff8fe0bd2c41c3da363c56a4291b96be4b160"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x70, 0x16, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x400, 0x3ff, 0xc, 0x594f, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x21, 0x6, "754fba0bded5ca4939eddf51b652303eda471a9ff164632c3902b0a30a"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0xc00c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 7m49.538148264s ago: executing program 0 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x63, 0x0, 0xfffffffd}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@getchain={0x64, 0x66, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x10, 0xfff2}, {0xf, 0xd}}, [{0x8, 0xb, 0xd4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) fsmount(0xffffffffffffffff, 0x1, 0x80) 7m48.201917045s ago: executing program 0 (id=150): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=0x7ff, 0x4) r4 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) 7m46.523916263s ago: executing program 0 (id=155): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000280), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)=""/17, 0x11}], 0x1, &(0x7f0000000380)}, 0x40000040) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, 0xac}) (async) syz_open_dev$sndctrl(&(0x7f00000004c0), 0x119ccff4, 0x1) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000080)={[{@name={'name', 0x3d, '\xdd\x98\x90\x8b,\xbe\xe1\xc5'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000040)="c402412d3538000000c441ef196ec866400fe2de0fae41b108c421797ec7f2466ff00fc01ec4e1a5140f63df", 0xc000000, 0x0, {[0x80]}}, 0x0, 0x8, &(0x7f0000000300)) (async) ioperm(0x0, 0x9, 0xfffffffffffffff0) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000440)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c80000c462f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 64) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) (async) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) (async) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) (async) getdents(r3, &(0x7f0000000080)=""/73, 0xfe5e) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x41000004, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x44) 7m45.465390234s ago: executing program 32 (id=155): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000280), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)=""/17, 0x11}], 0x1, &(0x7f0000000380)}, 0x40000040) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, 0xac}) (async) syz_open_dev$sndctrl(&(0x7f00000004c0), 0x119ccff4, 0x1) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000080)={[{@name={'name', 0x3d, '\xdd\x98\x90\x8b,\xbe\xe1\xc5'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000040)="c402412d3538000000c441ef196ec866400fe2de0fae41b108c421797ec7f2466ff00fc01ec4e1a5140f63df", 0xc000000, 0x0, {[0x80]}}, 0x0, 0x8, &(0x7f0000000300)) (async) ioperm(0x0, 0x9, 0xfffffffffffffff0) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000440)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c80000c462f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 64) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) (async) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) (async) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) (async) getdents(r3, &(0x7f0000000080)=""/73, 0xfe5e) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x41000004, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x44) 4m56.163822698s ago: executing program 1 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b000100697036746e6c00000c00028006000f00bc4a0000"], 0x3c}}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'xfrm0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0201"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x8010) 4m56.103442127s ago: executing program 1 (id=687): socket$caif_seqpacket(0x25, 0x5, 0x1) syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0430f5c7c90034d9493ad3c6a2247a769bcc8203a462b70ef8f6102c57f4c6078eb7680df7ef6363d49068bdf124d44d66ea113597ab8730ea7a4c0f9b1346ea2556d7b8a7d238bfca953d17bf15fb2e0600000000000000cb9b002adb1213ceaebce539fd9a53263db49e0b47a8be0b10d6dae171728dcadef3e0c5"], 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x80000b) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x1008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_create(&(0x7f0000000040)='rootmode', 0x0) 4m55.128412533s ago: executing program 1 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000029004319473ee5db6c5d95520701"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c001}, 0x20000000) 4m54.429606058s ago: executing program 1 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x70, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x2a65, 0x1, 0x1, {0x22, 0x496}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0xc, 0xf}}}}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x5c, &(0x7f0000001600)=@string={0x5c, 0x3, "717d2e8929f1e38dafeb458107b9897cbab1c214c46fae76aaf0a3693fa903fa2d4e1dbc6120358b9edd999e54b4ab359baeb5855a08e11f287af6b5eaebd6ecb19713efaf57dc13e133c8169aab614c12dedd0fdcc42fbaee5f"}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x4, 0x5, 0x8, 0x7f}]}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc662218715be66704be83e9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2afb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952344056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c01002b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x400000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m51.099025494s ago: executing program 1 (id=707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="58000000010096876ddd00000000000066f74e34fd68335b"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001afffffffff8d677cb6aa23ef2c446e8ac08f0ede7c9fd7523e881a87087a99b85ca4e7142a49351525483247936b572028d6c459512"], 0x34}, 0x1, 0x0, 0x0, 0x1c}, 0x0) close(0x4) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x65) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000018c0)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000002dc0)=[{&(0x7f0000000340)={0x27, r8, 0x1, 0x1, 0x1, 0x3, "f1613779097e99d1459051ce8bcf4d33dd92fc6632dd6bc33d9d8a17c31fe0b663d3bcf70ebaa0184ad97bd960adf2fe7fb56f85b27a706e41f0b60e2667cc", 0xe}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000200)="37a302f513c874e39fed177801c28c61f76bd389", 0x14}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000003c0)="ec8b78248a0eaa890b3039284ceb7901264c29132de20748db892c3fc8e5ad4e69286fb579f1987f9c271c72a82e1efa18871756b96fc829015ddd074b68dced8e11cf48a5e2f26890ea388d4142d0e1419b789de0b27d6b0e160040ac5bd520ac04e32619b95c50a62537a800157426d4ac8029be8902d3c3455621593f32f917d45a402b63df0b5e56605e4b17c494605e11f173c43798d1a2d4cc29a38963b27bf268de39f3bb87f7e1a87c1e138dd0c3cf0853efba7e68613f382f27d8a21b393b5fd55fe190457dc430efaa88abe254af996f9d915dad065855f0f6", 0xde}, {&(0x7f00000004c0)="c1265e8e97cba8495f92288953eaa5b9cc7b0090fa3948de1d21f0a726d046d6eeeaf5baa3da68cd1f8cb15dabacb7fd50f5524c576cc0281a162c3a8cb6540f2db9738e44a968eb97f473de8686df1a308722cb8aec2528021367fc523c09d0b8becd310a21d3bc89415f974e5924ab3c5b0d7b995e038a0d95c9b6b6702f5ef5b7407e134bb3526033e0ce85bf19e430e6d3763cc0db7bb042ab087015f1f5d9a96c0f83cbe8fa9eb7324b96ad", 0xae}], 0x4, 0x0, 0x0, 0x4010}, {&(0x7f0000000600)={0x27, r9, 0xffffffffffffffff, 0x1, 0x7, 0x36, "2626af33855428254d2dff42ebfa9333658205d548acdb8b5155de850713b8056589430312107aac811c80870acecdc17d32521718e9ea312ff710f4155009", 0xe}, 0x60, &(0x7f0000001880)=[{&(0x7f0000001700)="973fd5b923f5b8b648ad3fe8c5c6a6b100561ea057d780e2cff69fa446a40d9610796658305343b62f9ddcec6b02e32922e2fa57818c0488da10bb0a70b27529a1192d45b02361e61b25236a34c336e2b52fb7967b8708e523855b263d7fa0fcc57cd3294154e660c40ebc5c039822ead9276a2e790c2f63dbd7adcd45d8a5039b28843c0cb7afbf0193fc93b9910110c24ce05487", 0x95}, {&(0x7f0000000680)="55509892efa51f96c6ce2d259f52db3ba5eb61dbcc4e7ed6507dbd55f6494edf27a5f3d2808a4907718395edfb8067db97655f", 0x33}, {&(0x7f00000017c0)="8b4b59af8ef4927773789a7f45ad2e2521072990776b8058f2223d06cc01a462c5fca51d5c9d844c3aa507d26852936e2f3f1beef224cf2a1689092df87896d2b1b73f1febb70ed28f2853d90bedee1d1b96a82728cd627e360e7a9b9fe904d9cd97e9fa1e1f24ac53d3b169e5bb0a8cf28b4ff328d0466c82bf2cb479882afd63d3d44ed02b96a576ae3d88e64b844aef716f6b84c7c335fa9629cdee47bd31f27f824c5bee5ac977b1ebb133", 0xad}], 0x3, 0x0, 0x0, 0x20000000}, {&(0x7f0000001900)={0x27, r10, 0x1, 0x3, 0x9, 0x58, "fa8746666fb32fa0b55e63f38dee7138bc959d1f7e7d54169f086f9a34b9fb4a2e074a6d9be855e51a46a41e59ea8c18901915a22be620a244813271ade3d7", 0x3c}, 0x60, &(0x7f0000002d40)=[{&(0x7f0000001980)="0d9b7a40a180dbf216184b7e5d9cdd315345a696159c", 0x16}, {&(0x7f00000019c0)="503a14a8d7d52f655c42cda322aa602c8e56a682491ff44720068460d765b7bb9c5177c36cbd9b9a15b21a8008db59881788fa16cf275fcd8709f392fa12aa08f3214f5cbe5c7d70ab122afcf0c78e0cdc9f4418ca8dc87235eccbc702f8e8a48c419d80a64ec89d9ee7423f2201376eb3c7ebc1b47129071b1bccb0d9567f3afd53db4de1507ccacb4ad73210e87fc9f7c652243604a2c7416a941f4c6aefaf2a673ce7ea5f34c2ca75aef9d4aeb094e9c05e04903610c1d2c6163b58bd225b8a3504d5a19b6b2eee4afc5af0542bc223bc54196f973db04990acaf57e843c7cb39fbdee96c934d7a325551ee4b517b5e6e11851282b9e98d26c447120471e01198b35af5013db8cff231e16f4b3fc7e5c7ae8c42571adc938163d4ccb321ccace648c8bf4febf6ec82cb8106f5c25440e88c1cca3e25ee2d84e25a9cf7ce7e58419f8320fd1fd8645abaaad21afd6216c6b078b098676b5fc92ec1a417f05b6e5bd55392652cb1760fb962b1fd1708c938957131103483a72ad9ce8f152a07b41f49abed69ebb232197f9f852726aad1a3c9898b6a37c84e153948a17c6c468d2cc1e84d04f2ea85725c13a298c5dd09f3deedd29c931921e075ce37eadfeb7b219abf718de1791759fe548d4d0b51d5f1fb2f2e0132f2cf3ea5b52224cf6a0c62cfd25f109b27a46d179acaddd0551d515f4c564f3370d9892cdc9755ba05aafe2370e80610a75ac6e259e53183ef352738bbc98f36f6b31921392cdde6281dcae2f43161b10569ac127dea6ede08ec4f2bc9fb30fdcecd661f99152d5ce717e6d36ae2e04bc1696e2562368e0de6c9d69f3b615250647efa6f565ca66d4e9c2a6e884ddffec3ae2c6c516c05447fb215dd1e7287ad4cb7fb7090c868b8b35a40fb012ecdaa4936c2abe2aae89e418fae3618d24d3772bb26ab79b22f2f1acb20ff88e509dae3da791129102f8849e6d1448b75167628d6503a5f0c8b3c511fa774853c9a393100631f97d06e5893b267e34f319a95fd95e30ad7aa0c8808a5b03fdc80abccfd3ca770b69da1eec7305e8706d602d8dc92388d6304ba8dfabd5a394aac8a12fde68883008b48eaa4c50902b4a6f8c7e26d71013b17078d0d2439fdd95634bd2441b074118d579f0ae572e3528c6e12fb95155b69662d36a941e82e14368f7e770122b80ee566a8bb55296be6ed9bcad9e72db63767a76e1f7f7c31943c9f0a1f57b0dbdea19c6e53164bb7b1df67bb9244120139048ed1f165fade9c6e5d7d99ce837d76858abdf89ce75cc63f53bbd8ce181c47d97866f6822e315616f1259bcd75d07e94b09246e07b98b0214c753aac083bb641018bf7a4bb24d7f0a2c8ec3790b2ec5c23930589b418a595701de15cd931afadfa750db3fc12d0b91c4cc81615838fffd1b759ac6f3acb46b7731b1276f0123209e77bf3f247d50bc9ed5d4eee4b2ffbca9796ee9b480be63fa433de5b57baeb6b3465c560c974428872df3c6cc58e88225962ff20692cdb88278d62e76596365dc1ac6cb44543622796b668acb02647378354fba0358464690057002dff5063a06c52b9789953ecfd43249fca879b69ea96a347b737fa247296bd3978e908bb88c58c1df840e812916c253f5790eba7e296be4190c4d9cd6b2c4a00ee1c92a3e271d5de6f513fa78b142446f37b53d5e75e30cd226993a86656a3963ccb2d2501fe2e714e04e58f200f2367195aa7bb86803d0c82da975e9eee80e8a8207a5515d7ee4685b546723fba53a308bcdb974c3b05bbe915e41df08f08eec28f35bf2feb8379acf81fd4219a4e9424a00141ba53ce4d377dbdeb81f2c4ad894e58ba381bb63e632084a51f71a496fef3272844fee7cda8b0fa0fd78608c346446f9b102bff133ffde9d7a7866335d39d02372425f20af4bb1b463a0328eff50fb4e1d43240ae34eae10f7667e7e0832e8a984d44315cbc2d404cb4e0b195a1059ea3f6f8bbdc44918e2fe297d76dad8a775f5b92aafe014acc57258d023a9bc1f719de8bd7a66fa5fa694ce22d6cb8fd01f94c9dc7fe4a563edb7165fb51fd2be2fb4306ddacfeb6a632b386ae53711b6dc99354157a29ffe34d4bb2543669525e368d78e638eb1f48f4db37bc03651fa604120e73d5a34cf5992e18886cc04f9554fe43be34ed402bd6438b5c7dbf4123e55175cbff115c196c495c4756d0dbe202cdb2f789720e6e5fb46e2a545f76ab7b4e3ea56b5609b6f5c301ce7ec8ada1219e51b1e3df7969175ca09d1d46d643405269d76e4d0a43a14ac298da26e5cf0c1f9f18e452c9c6e5339852173b250b7e796b21dcf73fd020b3a94643373d19f5cdb3099225306fc9be931c1d5a2f8ec0fc59f8db45706c16566ffabed343c0d52107ff5f4345adf3eedbf5afebc1082e9c328678dcf40a646aa4e35b6b0860a1659f5740989d433b1e9605c5d89995cd91e74e94e4f9db19c870bf263d7ad7f68e1f720dba121275ba70f1acc755fa40cc4bb977fcc4ecb3202537ab1ff8c28976e7ede327e2f381ae525f7ce714257db22e11e19d80e9922ce6219948ec6724e480e71a03f7eb397b6dc460b1789668820abf7a64096c0c4d3456d275dacbc0523d842b219c7cf6b016a5d63aa445ee5da40c9bf9c49759a7648f60ac7b95722cd5e384666dde653b9857bd7a27278a5feded50620fb548d7f745db6593df439a30a984fd7be5f092584044365e665ef3b481b243203f4750c7566361cacb9eecfc6d37d82f48149cbaa5cd5cd57ae4fa1412f41a5f8be8f616cbebbf9fa2dc61dde0bb63bd0480cc51846789f6a1aee697fb136dd8e9f71cd02ba7cb763c8cc64dc493257229bdb0a0de6cb1b5d93288381e745886693702bcab8c6dbe6ed8cca4f2281cf72e39964d92f0a821f10f273de6373965bd65e7a9a35ca8ca0f688490db109744b39d19db3a93b5b6b6fa79f9fa101ae74536ecd0a32db20fae23e06842aa99acfe48440a37bcf11cdfdecfc61227781736aa0e39826626d0f843311cd8fadc259bdae504e14fa1d060e6e8f8d5f5e080d928c282ef28995c29f43c5777605ed16e69b6024ca552100e2e82409bff8db371a8f160d609f2d88005afa598612cac379ce7ede49d3aa50b1d08c46abb421cd092d73594cbb22be29a8413f964bde144bf80482d0610ca1e1c4782bad7fa34deb72a1294bba4a3eb6e62f02a2044dca2a88b39ee86d6593739e5be290a049289802caa5fb1b0728bfb3a889761b906795713f86b964e75ed0b0a531dce1d275b98dd79a8fef809c357ae7f7d7ed47ca1dcfbed6f7cf53d97a150d224bf09725d7c0ed802780d8cac441aeb06b4222c5cffa7de7c6b82ad507b6f9adf3e6f86601e6d7bb557b4b4a655c6bca93a0a6c98e4fc6db56a7a4b4dab7242fd757bc6b7c8c1079d2a3b08f44467d012d8edccba559586e3a0a02fc5acfefbd1db69cbdebc9d0dd4c17f1dd1616b066cbc9b09a922bf973610ad38c6dda9bc409126c306df00764d9118cf1838f3eb48d12820820c2b2ef30ff2d9b5418772635c74722a1cb6c6249399f00eb94cf106b753df2570106a57cb1a0b01df23e4a26d408423f26fe29c4f51a1f8243553f601394ca6263ad277bb872a57860f4c7cb2c045ef706edee42a36f1524ee9eb0e818c21a728e961e032f49ab7a9eeaa92eb57be74bdad27943bf331c95eee14654a3232300e1dec45b32ee7bf357d385f5f3a8c645fbc526ae929f1851c1f62c3fc369dbff76cff6c5d79a6c3cd93acf4e29fc7d1808ea0c95e348ab4d13b4d5395ba2e63d0a3fc9b52e0f1036d3d61e02dbf3202a62539b496b04f53a51541a66b88671422c6d5cac5dd5efca1277e2ee4d3d1b3b85b42fd5ce0a67cf8fa81b61db6c19eece3e1c5ef6279b60030c8e028520148458f1b578c6b1ccdf299ffd2c22de2dce01e036b76a4a81e90fae7f0946bc58817d0e6734aa39a10b184bb45cf1a78200bdf547fd7f55cbf00e8a00e381e0ade7e5ccf9d2ae669c4dc9908b13a94050470b89be4f5f5550d9ad0a3c309b56ad9d23a7e1d85d5df091a9918cad7c7fa66fff69bae6a942a6baf1c171e69ddbbb25db97c9ef526b9e2fabe149a1966b4e3775828e8b95f16fc90703c30e02391369c7115fe65663cfd724d112bc95f41a4cd6dfe1cbf9bcc2b04a3600c5c0818ab71a9a574a9df8d361e594415035a1c32aa84a2a4374300cac340f58015f1e986819e7c2d7f7984b4c25dd1b838506cb6b02511ac77a72d51ee3bf7f631e36e8960f4810c01f856bd1dd043a1cdf40c56decb72bbf8bc31c9ccee6bda3c8e0c9f7aeef3c4ea94760a8a9766a48c9e14e847ae07f621826a78b96dc54d6b93205720812de698a60d94b3ec30713659a1160aac50df90039cab4c4efc6425acbe22bb36dd2f7ee5030e598bd75a17e9dbdbe93c92493790d7be2dfe3c860b5bebecd6e293eaff0c8c4fa002131957b584e2ed2f303826207d3ff2463ac75b5e552452563c521faab164e67c7ebdbd01cbba20fd5147f2ff1ee6ec1ce0fc8387d3ff51f401390ff0642a1a1809ab3f8f3826c85eee59a2909fc2b357b9a4508fbe7ceefcef8ccd28c81cea2503f1b6b3b0e0f2810ad9a6253d51476f52b4580022ed4450ef6fe1025bff8d3b8e8cb160463e2d5c8fd4edf3fcc4fb7eb1706000f7b37c1780086b4710d6de0d94d663a4a22f664fb8b8a24991173208c54a785e51cd4489ab64d7c7fe62733a23e2042d320d3b02471d48115d0dc57bcd58c338a2e6a52503dd4bacd18e454b21bf9208889f41bea154d327049408417c6bc5dd71f2abcfb0dcedd2a18842e8440ba0847bf6cc2a616ae05ccc8d3740104b386194023ebdcc5b1f90e55ad9fbf8755c6162c5ddee3b314874b84b35893f887327da9df49e1bd71dd109398004e7b7c47deed2f5eca26ccd3a5c134732367288fb4295df45fce47f5c739980c8f1d20a047336d416e5a8ebe425598d2756e31548ea4d51087f7040e323af9f599b1b139aa4ef5a426cae0bad2d60a3ed48eb94c90bb8e8d3d139b37a291a1e4094b5cb7d32a1381ebcb74b6b12d316d38da9c74c2a23cee27d373226fd537503c1fd9ae51401f35636230b0419ec9e6a3154c672b79201bd0e49159fce7ade081c9b4dd08e80b217e1fc997c759e7cb0265d4d9fa7038d34828ce949318f2b6fe50809dac5b9a0b3c6d25e574b5af50836b09fc0dc9c78f910f911edf17f7a67b247a4da789faf8f9c5c5fbb3c32a8d6601d221a831efbba1db9174b8211d70ce457714e03c4da87e85368f5903638bc8af312af69c4b489d7a2795a89fc155a4c8e280cdd30c4107d2304fd9c66dfbb8f4d305f28c58d116904539d490bd50be513e5e1020a4ba34f72705ec90fcc7f561ea3e699f6e35c7b7c9f6fd84878ac98877acdefd416d62c74ca523cdd72d7e4e44489f9219e28ab8ae01488fcf81ac5445d782d1da5d9bc235d707845c3c7b719febcd25852e2c617256704a6282df7e2b50cb0e4ef9191fb3d1263caf990797d9c44840b9832204c43aa5354ac11878901efce0e5246ed25d57a616397f1b95d675ba809424c179d9a5dbabe9519eb3addd1cd189ebf17580a6efbb6fb48c0767f46c01dc4b36ce809314a817dca95f225abbac4dc9d0ff1e01cdf8b525378aa34e341ae938b63d525097ed31f7cc82a778ea536ef16f4b7fe45e8c03d26a685f0bc0e1ced916b9cb3ea577561d730ebae932405b3c843b1780be97f951594583bc07ef7a9667b6d4379974914b3361a", 0x1000}, {&(0x7f00000029c0)="8fe386c849b6fb83207aaf1e2082bd62cf1912bbacd13decbda564a9eee9b8c0ce3883d0976e056d15234efddb8c47c57f262549fc068020179f5fe2cbb4a3ac2d9bbe91d1c553c8a79470188cabc0c598b7c1ca4575672d820a8e4544fbcee6bc2a54ea6cb8567d6a283abb4fd62c139cf1cf7d204cd3ced66759ef54427b5d9b5f797023a2b34a5929c66eb1ac9463cfd5ad092cf7d9e9dabf17e30d470ec77335a5af06647fcfc732a427e292cdae47f95f29f93b12ab0b", 0xb9}, {&(0x7f0000002a80)="8285fa9ce261595dc22c716474db552d67eb542a1d30ff1005a5efc56328ef6e4a5f685cbdab8aeecb58ef1c004cc1f5530632b120c0d1825bfdfb1dc08c796c05a73e84597e91b9e362d4afd0069fa649ca06566e18ba2841a440f8", 0x5c}, {&(0x7f0000002b00)="3d472d60ed27df9735c0a96da4cb7935b1da4e117e4de0a1882434b81142210862e2bc8e5210237697b95bd090ec96f57d85b14d999089163b30409e9b40532cf793599b95db6fe4359498b2449f59ee728acef4f084e4d5deca8041527684ee7e18c7044ab975adf3db90c419929d1e73ed1115d4af7d2591968ba65a728620a823be5d79536067a9463f5ba3e26a38957f52cb195fa556f2f2b0b7d37bd8b92d29d260db008de685ff739c7543fcb495c3de2d04df2f78f6f71fe730f98dc68f0a39b96cc9", 0xc6}, {&(0x7f0000002c00)="1b73a0a6c0abe866ed911f8620701772f7fca2709acae1b41afec0f78ebdd0c26377dd8670130424a1e9e8ed18e4e166dfede0a7cf4cceca1dd7703c45850c7227878d0135bf204b2d043c7cdbb84b34e9aa01e305a3aa21", 0x58}, {&(0x7f0000002c80)="163216235300301d37a757b6619da33b85fb769ee3db32f319a49fcd101a176adc7c165260f22cc4be16ef724d7a50bb6aaeed2a9007d28470e90303dd5b438fc32808b56c4dd0ee5776c581c90a608d8370debfaaf95bb0dcb8f17fea2790be42706e0ef656ea534deee29ead54e483f63114", 0x73}, {&(0x7f0000002d00)="ae6cddae70b07d904e388743b390c2ab482e21fcb593080456e6fdccd00b06", 0x1f}], 0x8, 0x0, 0x0, 0x8040084}], 0x3, 0x40008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x89) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) 4m41.521591113s ago: executing program 1 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x3, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x115) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f0000000240)={0x5}) 4m41.318094871s ago: executing program 33 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x3, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x115) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_CREATE_PIT2(r1, 0xc048aec8, &(0x7f0000000240)={0x5}) 3.833899705s ago: executing program 2 (id=1622): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x8000002, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x19) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 3.593469368s ago: executing program 2 (id=1627): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x1) 3.562929658s ago: executing program 2 (id=1628): syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000007c00)='AA`', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f00000021c0)='.', 0x1}], 0x1}}], 0x2, 0x4400c800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083090000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000001886c46216175bdd46a86a8dadb8cd38c91098ab4675da17b919e03956f665a1ccd4e4ab2b8fe0756bf26f7f0c667b0a54"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) ftruncate(0xffffffffffffffff, 0x2007ffc) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x7, 0x2, 0x5, 0x4, r1}) get_robust_list(r10, &(0x7f0000000280)=&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2.864142187s ago: executing program 6 (id=1648): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 2.789895906s ago: executing program 5 (id=1650): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000280)={0xf0, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="cb1ccc1c25f958f81db3ea8401dd4e9054bde9e4d4e82b2acc651459f08f092bc1afca34b5b209c8832115000e4ff2d48916df73f8", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x100, 0x0, 0x0, @uid}, @generic="51a62f14388e6c773dc5e392631b1543da3aa8181bbf7f04241296b8a02498f7f538e1d1f36ad79ee4e6922d25b943f7c2d0ab2841e500c3f660b204fffffe11c78394019dd89750ecfa32f979119a7f047d19061e3f9bd2682c6b607e11f061b3ba14c97b08eb6bde54fe3966c810d888ecff8415fab29440cd0829097606d0ac1ae585bb268a4ddb6e4ab8427441d2c9afbb064925b44e"]}, 0xf0}], 0x2}, 0x0) 2.776951881s ago: executing program 5 (id=1652): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.754663966s ago: executing program 6 (id=1653): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500680601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e221550681ebf806d66ca"], 0x0) 2.657059014s ago: executing program 6 (id=1654): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0x1, "135825f1a6c51de48aaf7b2ce6252f0b5add77"}) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 2.598965408s ago: executing program 2 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 2.558685907s ago: executing program 2 (id=1657): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000200)=""/70, 0x46}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x403102, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000800000008", @ANYRESDEC=r1, @ANYBLOB="9a410ed4f19b3396b42f0a8f929459dc141a7eb3c5e86765bd7a8d70c36e0abe5d91197e241d880c47a8535b29366ae1b741d015f10d6eb8e4c5ad5f266bbfe5999b76dac7fe8c5fe6999bdb4a731fc2e5946f558f0355ade2320524d00d76855050ef151e9d289a2f5a826b0cde002471f4c6e363936852fb59460536ba3497ed3e9fe7d5ed248ce7431a6dbe406546c2d832830fcc008f6bd830c4feb702884b2ae5371dcae86b5dabec7fd2d39c42fee2530471a0e5", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYBLOB="d77738bee0e4f0c3d6e576b237313ad48fccd7b29f6d4bf1946ac65f8a0b29b0be4331181b2e5d38e3cb2a9488060ea1da59e96fd08929745735b405f9b064cda709edf454d060e514b852d96f2b4d5749975b43d8dcb122a75d42d0ea19d0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000000500000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x97}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.351375363s ago: executing program 5 (id=1662): r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) close(r0) 2.337073633s ago: executing program 4 (id=1664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) finit_module(r0, 0x0, 0x7) 2.221786178s ago: executing program 4 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 2.221550978s ago: executing program 5 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) process_mrelease(0xffffffffffffffff, 0x0) 2.161925311s ago: executing program 4 (id=1668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018", @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"}) 2.154531648s ago: executing program 5 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r3, 0x0) 2.060984055s ago: executing program 4 (id=1671): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c00000000000690780a010101ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x44) socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a", 0x8a, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x5f) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, 'queue0\x00'}}, {@uid_eq}]}}) openat$dir(0xffffffffffffff9c, 0x0, 0x40440, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.821822741s ago: executing program 5 (id=1673): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r1, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r2, 0x0, 0x0, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1.82093961s ago: executing program 2 (id=1674): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x350, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x304, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x350}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x404000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000\x00\x0000001,\x00']) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = eventfd2(0x7e, 0x80800) r9 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r8, 0x5, 0x2, r9}) 1.127607765s ago: executing program 6 (id=1675): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="89d678ce056c6ec3a758a18badbd3f1e8e69623f3a521c407ec0d5f1a2755b4249a56d0b131c3bb9f38c99db3a276c94a27e6f85360ab92b31216fad2398a44e7cd39359af752369a27c1852725ddbf74a2b5dec2e27c4dcefd2ddc9b5a41af61293026e8ef680188f6ad68f8f85264053b003a1a119ff6bca14fbb9238a3d699738efaef34f6cf94a487157402c5c4a27dcdf687365710b68b4d89cb38359f3e57aee5d8c4bd49a421acc3eb0f92fc9dd28df931d97a80f4f0dbe59b0778f2cc02fe8d0ce1a96b578b4546abc5122ef4f94f79816abfa2e0555043ccf0b1e4ac1febe6a6a7e0f19ffc02c1d925f9236382928a5ea08be32cb8ca2571b6c94c5dc893541472b70d102c1a36219f4fb9f0690284b7d4cf8f99ab014688db7c7b0d1cfe978b9275a8269870ba255e17282fa697100b6cf1756a521e22b7411836b6a20d6e74b689d31e0f34c061d42fd4730ca843e86a09945d45a55ac0b5f7d003afdc2c6654a59dc8820d86c7dbee17f35142c6c20a1ac6afe27a4b862373e62609908ecb8f752a9359c09af8700a366c5838b03832b184feaee01c8f7fb55eae5ffd05e33b66d8547c48f258da49186f2b8f36ec8d1191f70637c194e2ba5576e98d78bdf617ae2bb8253318b869459d4abc16160fc35d55bfc7520c021aa66f424522215e7a11f36df3433d321b8578ad5e5340d594321f9e40de502539a910c6f7483fdf7194d59765b987c2a938683aa05c29d1c851d1ac03b2c261c1e027cee876d0c192272eb5504714bccf86d8eca4448dc905c3d99e4fc40297f56c90e9e845e40f9573899e308f7bda4137c4088e0ad0bc1583104094f5820dbe4861ea8988aaaf564419d75e602694a7e0b6a9d3dfd19818bd79d5d117be2d9002b24a21f40885b5aa0f79702dfe0cfcce0e0d01f3ff6712283cba5492c482c4f1f3959dc3a79a695bbcc03407325d2f29f1643ebfe85f8935c58248e44c9a79ba419f426816548e9a88a47f20b9e746cf908723a79a5decd44f6", 0x2d9}], 0x2}}], 0x3, 0x8008800) 1.105397506s ago: executing program 3 (id=1676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) finit_module(r0, 0x0, 0x7) 1.009834871s ago: executing program 4 (id=1677): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 793.396812ms ago: executing program 6 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000240), &(0x7f0000000640)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 767.112871ms ago: executing program 3 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) utime(0x0, 0x0) 657.799142ms ago: executing program 4 (id=1680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 450.041227ms ago: executing program 3 (id=1681): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 339.979328ms ago: executing program 3 (id=1682): mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1040010, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e7364656c65676174652c6d656d6f72795f72656375727369766570726f742c7063723d30303030307030b03030303030303030303034362c646f6e745f686173682c736d61636b6673666c6f6f723dd12c7375626a5f726f6c653d002c00"]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r1}, 0x18) ioprio_set$uid(0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 259.284263ms ago: executing program 6 (id=1683): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x602600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x31}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 145.906018ms ago: executing program 3 (id=1684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 3 (id=1685): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) write$P9_RGETATTR(r0, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70f, 0x9800000000000000, 0x101, 0x3, 0x80000000003, 0x0, 0x185, 0x40, 0x3ff, 0x4, 0x100, 0x800f, 0xb, 0x405, 0x9}}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) close(r2) kernel console output (not intermixed with test programs): [ 415.457368][ T9893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1008'. [ 415.466432][ T9893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1008'. [ 415.475520][ T9893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1008'. [ 415.517244][ T5882] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 415.577459][ T5809] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 415.578833][ T5882] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 415.746505][ T5882] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 415.846257][ T5882] usb 6-1: config 129 has no interface number 0 [ 415.887377][ T5809] usb 5-1: device descriptor read/64, error -71 [ 416.005086][ T5809] usb usb5-port1: attempt power cycle [ 416.777732][ T5882] usb 6-1: config 129 has no interface number 1 [ 416.787421][ T5882] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 416.822515][ T5882] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 416.855944][ T5882] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 416.901599][ T5882] usb 6-1: config 129 interface 135 has no altsetting 0 [ 416.919220][ T5882] usb 6-1: config 129 interface 5 has no altsetting 0 [ 416.964738][ T5882] usb 6-1: string descriptor 0 read error: -22 [ 416.974859][ T5882] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 417.008088][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.067422][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.085845][ T9908] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 417.142563][ T5882] usb 6-1: MIDIStreaming interface descriptor not found [ 417.280140][ T9880] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1004'. [ 417.330652][ T55] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 417.458044][ T9913] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.588188][ T55] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 417.842248][ T55] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 417.867947][ T55] usb 4-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 417.895061][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 417.926877][ T55] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 417.939820][ T5882] usb 6-1: USB disconnect, device number 14 [ 418.047817][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.060761][ T55] usb 4-1: config 0 descriptor?? [ 418.146418][ T9907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.571632][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 418.571646][ T30] audit: type=1400 audit(1762429375.796:972): avc: denied { write } for pid=9931 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.736365][ T9935] netlink: 'syz.6.1013': attribute type 1 has an invalid length. [ 418.905930][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.987773][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.483189][ T9943] kAFS: No cell specified [ 420.673681][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 420.723164][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 420.780179][ T55] usb 4-1: USB disconnect, device number 29 [ 421.298309][ T30] audit: type=1400 audit(1762429378.341:973): avc: denied { setopt } for pid=9953 comm="syz.6.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 421.405163][ T30] audit: type=1400 audit(1762429378.341:974): avc: denied { read } for pid=9953 comm="syz.6.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 421.448730][ T30] audit: type=1400 audit(1762429378.471:975): avc: denied { ioctl } for pid=9959 comm="syz.4.1024" path="socket:[29188]" dev="sockfs" ino=29188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.677461][ T9972] vlan0: entered promiscuous mode [ 421.724641][ T5809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 421.959637][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 421.971689][ T5809] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 421.991734][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.107049][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 422.120002][ T5809] pvrusb2: ********** [ 422.124001][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 422.136738][ T5809] pvrusb2: Important functionality might not be entirely working. [ 422.144782][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 422.157108][ T5809] pvrusb2: ********** [ 422.398098][ T2341] pvrusb2: Invalid write control endpoint [ 422.460970][ T9991] FAULT_INJECTION: forcing a failure. [ 422.460970][ T9991] name failslab, interval 1, probability 0, space 0, times 0 [ 422.473613][ T9991] CPU: 1 UID: 0 PID: 9991 Comm: syz.3.1030 Not tainted syzkaller #0 PREEMPT(full) [ 422.473633][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.473643][ T9991] Call Trace: [ 422.473649][ T9991] [ 422.473656][ T9991] dump_stack_lvl+0x16c/0x1f0 [ 422.473685][ T9991] should_fail_ex+0x512/0x640 [ 422.473705][ T9991] ? fs_reclaim_acquire+0xae/0x150 [ 422.473727][ T9991] should_failslab+0xc2/0x120 [ 422.473748][ T9991] __kmalloc_noprof+0xdd/0x880 [ 422.473772][ T9991] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.473797][ T9991] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.473815][ T9991] tomoyo_realpath_from_path+0xc2/0x6e0 [ 422.473837][ T9991] ? tomoyo_profile+0x47/0x60 [ 422.473862][ T9991] tomoyo_path_number_perm+0x245/0x580 [ 422.473888][ T9991] ? tomoyo_path_number_perm+0x237/0x580 [ 422.473917][ T9991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.473944][ T9991] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.473994][ T9991] ? find_held_lock+0x2b/0x80 [ 422.474016][ T9991] ? hook_file_ioctl_common+0x145/0x410 [ 422.474043][ T9991] ? __fget_files+0x20e/0x3c0 [ 422.474065][ T9991] security_file_ioctl+0x9b/0x240 [ 422.474086][ T9991] __x64_sys_ioctl+0xb7/0x210 [ 422.474112][ T9991] do_syscall_64+0xcd/0xfa0 [ 422.474139][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.474156][ T9991] RIP: 0033:0x7fc31758f6c9 [ 422.474170][ T9991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.474186][ T9991] RSP: 002b:00007fc318458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.474202][ T9991] RAX: ffffffffffffffda RBX: 00007fc3177e6180 RCX: 00007fc31758f6c9 [ 422.474213][ T9991] RDX: 0000200000000040 RSI: 00000000800448d2 RDI: 0000000000000008 [ 422.474223][ T9991] RBP: 00007fc318458090 R08: 0000000000000000 R09: 0000000000000000 [ 422.474233][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.474243][ T9991] R13: 00007fc3177e6218 R14: 00007fc3177e6180 R15: 00007fff204228e8 [ 422.474268][ T9991] [ 422.474306][ T9991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.688056][ T9992] netlink: zone id is out of range [ 422.718687][ T9992] netlink: zone id is out of range [ 422.724003][ T9992] netlink: zone id is out of range [ 422.733060][ T9992] netlink: zone id is out of range [ 422.738366][ T9992] netlink: zone id is out of range [ 423.074344][ T30] audit: type=1400 audit(1762429380.006:976): avc: granted { setsecparam } for pid=9985 comm="syz.5.1029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 424.068868][ T2341] pvrusb2: Invalid write control endpoint [ 424.132127][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 424.169220][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 424.205921][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 424.311560][ T2341] pvrusb2: Device being rendered inoperable [ 424.317756][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 424.324847][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 424.342009][ T2341] pvrusb2: Attached sub-driver cx25840 [ 424.375775][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 424.756613][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 424.799929][ T5882] usb 3-1: USB disconnect, device number 18 [ 424.823564][T10016] fuse: Bad value for 'user_id' [ 424.828764][T10016] fuse: Bad value for 'user_id' [ 424.837838][T10016] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1035'. [ 425.219224][ T30] audit: type=1400 audit(1762429382.007:977): avc: denied { setopt } for pid=10019 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.348953][ T30] audit: type=1400 audit(1762429382.138:978): avc: denied { watch } for pid=10021 comm="syz.6.1037" path="/49/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.710072][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 428.838954][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1044'. [ 428.849162][T10062] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.858465][ T5809] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 429.058190][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 429.473132][ T5809] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 429.547231][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.668013][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 429.675050][ T5809] pvrusb2: ********** [ 429.735450][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 429.753063][ T5809] pvrusb2: Important functionality might not be entirely working. [ 429.760866][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 429.791017][ T30] audit: type=1400 audit(1762429386.291:979): avc: denied { ioctl } for pid=10065 comm="syz.6.1049" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 429.816291][ T5809] pvrusb2: ********** [ 429.880401][ T2341] pvrusb2: Invalid write control endpoint [ 429.908066][ T30] audit: type=1400 audit(1762429386.291:980): avc: denied { set_context_mgr } for pid=10065 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 429.967541][ T30] audit: type=1400 audit(1762429386.338:981): avc: denied { setattr } for pid=10065 comm="syz.6.1049" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 430.035195][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 430.063860][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 430.089842][T10073] ceph: No mds server is up or the cluster is laggy [ 430.095053][ T30] audit: type=1400 audit(1762429386.385:982): avc: denied { accept } for pid=10067 comm="syz.5.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.109345][ T2341] pvrusb2: Invalid write control endpoint [ 430.240661][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 430.286430][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 430.332693][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 430.458248][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 430.464445][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 430.601248][ T2341] pvrusb2: Device being rendered inoperable [ 430.695363][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 430.716894][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 430.726562][ T2341] pvrusb2: Attached sub-driver cx25840 [ 430.756754][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 430.771299][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 430.837586][ T30] audit: type=1400 audit(1762429387.274:983): avc: denied { ioctl } for pid=10085 comm="syz.4.1053" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 431.720892][ T5809] usb 3-1: USB disconnect, device number 19 [ 432.860361][ T30] audit: type=1400 audit(1762429388.817:984): avc: denied { ioctl } for pid=10099 comm="syz.6.1057" path="socket:[30745]" dev="sockfs" ino=30745 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.756451][ T30] audit: type=1400 audit(1762429389.996:985): avc: denied { create } for pid=10115 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 433.870131][ T5882] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 434.447214][ T30] audit: type=1400 audit(1762429390.248:986): avc: denied { write } for pid=10115 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.863329][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 434.870044][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 434.879245][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.945395][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400 [ 434.964857][ T30] audit: type=1400 audit(1762429391.127:987): avc: denied { bind } for pid=10126 comm="syz.6.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 434.995643][ T5882] pvrusb2: ********** [ 435.005774][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 435.024325][ T30] audit: type=1400 audit(1762429391.155:988): avc: denied { name_bind } for pid=10126 comm="syz.6.1064" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 435.044969][ T5882] pvrusb2: Important functionality might not be entirely working. [ 435.084750][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 435.096257][ T30] audit: type=1400 audit(1762429391.155:989): avc: denied { node_bind } for pid=10126 comm="syz.6.1064" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 435.128884][ T5882] pvrusb2: ********** [ 435.410571][ T2341] pvrusb2: Invalid write control endpoint [ 435.851745][ T2341] pvrusb2: Invalid write control endpoint [ 435.904993][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 435.914451][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 436.063771][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 436.314613][ T24] usb 4-1: USB disconnect, device number 30 [ 436.320652][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 436.359128][ T2341] pvrusb2: Device being rendered inoperable [ 436.445558][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 436.550957][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 436.563970][ T2341] pvrusb2: Attached sub-driver cx25840 [ 436.569570][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 436.579927][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 437.156675][ T30] audit: type=1400 audit(1762429393.167:990): avc: denied { write } for pid=10142 comm="syz.5.1066" path="socket:[30799]" dev="sockfs" ino=30799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.374714][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'. [ 437.385212][T10149] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.641009][ T30] audit: type=1400 audit(1762429393.513:991): avc: denied { bind } for pid=10142 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 437.760266][ T30] audit: type=1400 audit(1762429393.513:992): avc: denied { connect } for pid=10142 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 441.630645][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1077'. [ 441.639679][ T30] audit: type=1400 audit(1762429397.357:993): avc: denied { read } for pid=10182 comm="syz.3.1077" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 441.747838][T10195] siw: device registration error -23 [ 442.168283][ T30] audit: type=1400 audit(1762429397.357:994): avc: denied { open } for pid=10182 comm="syz.3.1077" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 442.257881][T10193] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1077'. [ 442.364346][T10198] netlink: 'syz.4.1081': attribute type 21 has an invalid length. [ 442.379285][ T30] audit: type=1400 audit(1762429398.068:995): avc: denied { write } for pid=10197 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 442.667348][ T30] audit: type=1400 audit(1762429398.321:996): avc: denied { create } for pid=10205 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 442.707546][T10209] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.825175][ T30] audit: type=1400 audit(1762429398.330:997): avc: denied { setopt } for pid=10205 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 442.859781][ T5897] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 442.868984][T10212] FAULT_INJECTION: forcing a failure. [ 442.868984][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 442.881703][T10212] CPU: 0 UID: 0 PID: 10212 Comm: syz.2.1085 Not tainted syzkaller #0 PREEMPT(full) [ 442.881723][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.881739][T10212] Call Trace: [ 442.881743][T10212] [ 442.881747][T10212] dump_stack_lvl+0x16c/0x1f0 [ 442.881766][T10212] should_fail_ex+0x512/0x640 [ 442.881779][T10212] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 442.881797][T10212] should_failslab+0xc2/0x120 [ 442.881810][T10212] kmem_cache_alloc_noprof+0x75/0x6e0 [ 442.881825][T10212] ? hashtab_duplicate+0x220/0x5d0 [ 442.881839][T10212] ? hashtab_duplicate+0x220/0x5d0 [ 442.881849][T10212] hashtab_duplicate+0x220/0x5d0 [ 442.881860][T10212] ? __pfx_cond_bools_copy+0x10/0x10 [ 442.881877][T10212] ? __pfx_cond_bools_destroy+0x10/0x10 [ 442.881893][T10212] cond_policydb_dup+0x155/0x750 [ 442.881915][T10212] ? __asan_memcpy+0x3c/0x60 [ 442.881932][T10212] security_set_bools+0x13f/0x6c0 [ 442.881949][T10212] ? sel_commit_bools_write+0x25c/0x420 [ 442.881966][T10212] sel_commit_bools_write+0x36e/0x420 [ 442.881982][T10212] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 442.882003][T10212] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 442.882018][T10212] vfs_writev+0x5df/0xde0 [ 442.882038][T10212] ? __pfx_vfs_writev+0x10/0x10 [ 442.882052][T10212] ? __mutex_lock+0x1c5/0x1060 [ 442.882066][T10212] ? __pfx___mutex_lock+0x10/0x10 [ 442.882081][T10212] ? __fget_files+0x20e/0x3c0 [ 442.882090][T10212] ? __fget_files+0x110/0x3c0 [ 442.882103][T10212] ? do_writev+0x132/0x340 [ 442.882118][T10212] do_writev+0x132/0x340 [ 442.882133][T10212] ? __pfx_do_writev+0x10/0x10 [ 442.882149][T10212] ? fdget+0x187/0x210 [ 442.882163][T10212] do_syscall_64+0xcd/0xfa0 [ 442.882180][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.882190][T10212] RIP: 0033:0x7f59d8f8f6c9 [ 442.882199][T10212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.882209][T10212] RSP: 002b:00007f59d9e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 442.882219][T10212] RAX: ffffffffffffffda RBX: 00007f59d91e6090 RCX: 00007f59d8f8f6c9 [ 442.882225][T10212] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000008 [ 442.882231][T10212] RBP: 00007f59d9e15090 R08: 0000000000000000 R09: 0000000000000000 [ 442.882237][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.882243][T10212] R13: 00007f59d91e6128 R14: 00007f59d91e6090 R15: 00007ffee75404f8 [ 442.882257][T10212] [ 442.907497][ T30] audit: type=1400 audit(1762429398.367:998): avc: denied { write } for pid=10205 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 443.020129][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 443.164994][ T5897] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 443.173302][ T5897] usb 5-1: config 0 has no interface number 0 [ 443.185120][ T5897] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 443.200312][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.216965][ T5897] usb 5-1: Product: syz [ 443.221148][ T5897] usb 5-1: Manufacturer: syz [ 443.225767][ T5897] usb 5-1: SerialNumber: syz [ 443.239776][ T5897] usb 5-1: config 0 descriptor?? [ 443.569297][ T5897] usb 5-1: USB disconnect, device number 32 [ 443.777736][T10219] siw: device registration error -23 [ 444.217459][ C1] hrtimer: interrupt took 36095 ns [ 445.371590][ T30] audit: type=1400 audit(1762429400.856:999): avc: denied { write } for pid=10232 comm="syz.2.1091" path="socket:[31849]" dev="sockfs" ino=31849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.370456][ T5809] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 446.580301][ T30] audit: type=1400 audit(1762429401.800:1000): avc: denied { write } for pid=10242 comm="syz.6.1092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 446.713602][ T30] audit: type=1400 audit(1762429401.875:1001): avc: denied { create } for pid=10242 comm="syz.6.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 446.902404][ T30] audit: type=1400 audit(1762429402.062:1002): avc: denied { setopt } for pid=10242 comm="syz.6.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 446.924692][ T30] audit: type=1400 audit(1762429402.062:1003): avc: denied { bind } for pid=10242 comm="syz.6.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 446.949702][ T5809] usb 3-1: config index 0 descriptor too short (expected 2304, got 124) [ 447.460125][ T5809] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 447.472386][ T5809] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 447.485092][ T5809] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 447.494226][ T5809] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 447.506021][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.515620][ T5809] usb 3-1: config 0 descriptor?? [ 447.737702][T10262] binder: 10258:10262 ioctl c0306201 0 returned -14 [ 447.906075][T10266] binder: 10258:10266 ioctl c0306201 0 returned -14 [ 447.928999][ T30] audit: type=1400 audit(1762429403.250:1004): avc: denied { sqpoll } for pid=10258 comm="syz.6.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 448.005433][ T5809] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 448.228624][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 448.238097][ T5809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 448.404173][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.426971][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 448.434339][ T5809] pvrusb2: ********** [ 448.438578][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 448.454978][ T5809] pvrusb2: Important functionality might not be entirely working. [ 448.471572][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 448.522373][ T5809] pvrusb2: ********** [ 448.547997][ T30] audit: type=1400 audit(1762429403.821:1005): avc: denied { setopt } for pid=10278 comm="syz.6.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 448.588828][ T30] audit: type=1400 audit(1762429403.830:1006): avc: denied { append } for pid=10278 comm="syz.6.1099" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 448.613866][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 448.650887][ T2341] pvrusb2: Invalid write control endpoint [ 448.805007][ T2341] pvrusb2: Invalid write control endpoint [ 448.818009][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 448.828631][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 448.905441][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 448.943200][ T2341] pvrusb2: Device being rendered inoperable [ 449.340750][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 449.361171][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 449.372744][ T2341] pvrusb2: Attached sub-driver cx25840 [ 449.391034][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 449.405712][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 449.678039][ T5809] usb 5-1: USB disconnect, device number 33 [ 450.078759][ T5897] usb 3-1: USB disconnect, device number 20 [ 450.118734][ T5874] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 450.300350][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 450.327261][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.365091][ T5874] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 450.410517][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.470782][ T5874] usb 6-1: Product: syz [ 450.493971][ T5874] usb 6-1: Manufacturer: syz [ 450.511359][ T5874] usb 6-1: SerialNumber: syz [ 450.765747][ T5874] usb 6-1: config 0 descriptor?? [ 450.792072][ T5874] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 451.024280][T10294] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1101'. [ 451.077988][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.088390][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.100151][ T5874] usb 6-1: qt2_attach - failed to power on unit: -71 [ 451.109007][ T5874] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 451.250315][ T5874] usb 6-1: USB disconnect, device number 15 [ 451.268384][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.276738][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.778551][T10319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1105'. [ 451.791298][ T30] audit: type=1400 audit(1762429406.861:1007): avc: denied { ioctl } for pid=10318 comm="syz.4.1105" path="socket:[31337]" dev="sockfs" ino=31337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.815642][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 453.295151][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 453.325071][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 453.338318][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.365171][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 453.495204][ T24] pvrusb2: ********** [ 453.518534][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 453.544472][ T24] pvrusb2: Important functionality might not be entirely working. [ 453.590328][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 453.964160][ T24] pvrusb2: ********** [ 454.042972][ T2341] pvrusb2: Invalid write control endpoint [ 454.110204][ T2341] pvrusb2: Invalid write control endpoint [ 454.116101][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 454.166893][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 454.185579][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 454.213189][ T2341] pvrusb2: Device being rendered inoperable [ 454.224227][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 454.248409][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 454.319657][ T2341] pvrusb2: Attached sub-driver cx25840 [ 454.443881][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 454.455309][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 455.761367][T10353] could not allocate digest TFM handle cryptd(blake2b-160) [ 455.915011][ T5874] usb 3-1: USB disconnect, device number 21 [ 456.010898][ T30] audit: type=1400 audit(1762429410.808:1008): avc: denied { map } for pid=10342 comm="syz.4.1113" path="socket:[32291]" dev="sockfs" ino=32291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 456.049815][ T30] audit: type=1400 audit(1762429410.808:1009): avc: denied { read } for pid=10342 comm="syz.4.1113" path="socket:[32291]" dev="sockfs" ino=32291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 456.078419][ T30] audit: type=1400 audit(1762429410.808:1010): avc: denied { listen } for pid=10342 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.994438][ T30] audit: type=1400 audit(1762429411.744:1011): avc: denied { write } for pid=10370 comm="syz.6.1118" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.048846][ T30] audit: type=1400 audit(1762429411.744:1012): avc: denied { open } for pid=10370 comm="syz.6.1118" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.072736][ T30] audit: type=1400 audit(1762429411.809:1013): avc: denied { ioctl } for pid=10373 comm="syz.4.1119" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31432 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.738563][ T5817] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 457.747597][ T5817] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 459.666087][T10403] FAULT_INJECTION: forcing a failure. [ 459.666087][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 459.678931][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.4.1126 Not tainted syzkaller #0 PREEMPT(full) [ 459.678959][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.678970][T10403] Call Trace: [ 459.678977][T10403] [ 459.678983][T10403] dump_stack_lvl+0x16c/0x1f0 [ 459.679018][T10403] should_fail_ex+0x512/0x640 [ 459.679040][T10403] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 459.679071][T10403] should_failslab+0xc2/0x120 [ 459.679093][T10403] kmem_cache_alloc_noprof+0x75/0x6e0 [ 459.679120][T10403] ? getname_flags.part.0+0x4c/0x550 [ 459.679151][T10403] ? getname_flags.part.0+0x4c/0x550 [ 459.679173][T10403] getname_flags.part.0+0x4c/0x550 [ 459.679201][T10403] getname_flags+0x93/0xf0 [ 459.679220][T10403] user_path_at+0x24/0x60 [ 459.679240][T10403] do_fchownat+0xf9/0x200 [ 459.679263][T10403] ? __pfx_do_fchownat+0x10/0x10 [ 459.679282][T10403] ? ksys_write+0x1ac/0x250 [ 459.679300][T10403] ? __pfx_ksys_write+0x10/0x10 [ 459.679324][T10403] __x64_sys_chown+0x7b/0xc0 [ 459.679345][T10403] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.679374][T10403] do_syscall_64+0xcd/0xfa0 [ 459.679405][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.679424][T10403] RIP: 0033:0x7fc62b98f6c9 [ 459.679441][T10403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.679460][T10403] RSP: 002b:00007fc62c7ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 459.679480][T10403] RAX: ffffffffffffffda RBX: 00007fc62bbe5fa0 RCX: 00007fc62b98f6c9 [ 459.679494][T10403] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000100 [ 459.679506][T10403] RBP: 00007fc62c7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 459.679519][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.679531][T10403] R13: 00007fc62bbe6038 R14: 00007fc62bbe5fa0 R15: 00007fff7ea42798 [ 459.679561][T10403] [ 459.875860][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.978673][ T30] audit: type=1326 audit(1762429416.383:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 462.050839][ T5817] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 462.059369][ T5817] Bluetooth: hci2: Injecting HCI hardware error event [ 462.068311][ T5817] Bluetooth: hci2: hardware error 0x00 [ 462.143322][T10424] usb usb8: usbfs: process 10424 (syz.2.1132) did not claim interface 0 before use [ 462.252975][ T30] audit: type=1326 audit(1762429416.383:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 463.054890][ T30] audit: type=1326 audit(1762429416.383:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 463.091002][ T30] audit: type=1326 audit(1762429416.383:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 463.124085][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1134'. [ 463.212117][T10430] ksmbd: Unknown IPC event: 0, ignore. [ 463.238274][ T30] audit: type=1326 audit(1762429416.383:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 463.458190][ T30] audit: type=1400 audit(1762429417.777:1019): avc: denied { write } for pid=10433 comm="syz.2.1135" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 464.369603][ T30] audit: type=1326 audit(1762429418.563:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.6.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7fc00000 [ 464.369625][ T5817] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 464.393119][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.510557][ T30] audit: type=1326 audit(1762429418.750:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.6.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7fc00000 [ 464.534395][ T30] audit: type=1326 audit(1762429418.750:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.6.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7fc00000 [ 464.604210][ T30] audit: type=1326 audit(1762429418.750:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.6.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7fc00000 [ 466.315334][ T5882] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 466.383114][ T6318] Bluetooth: hci5: Frame reassembly failed (-84) [ 466.393337][T10465] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 466.498758][ T5882] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 466.511363][ T5882] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 466.521875][ T5882] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 466.539555][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.796966][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 466.852951][T10465] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 468.538832][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 468.547166][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 469.756635][ T5882] usb 5-1: string descriptor 0 read error: -71 [ 469.764685][ T5882] hub 5-1:32.0: USB hub found [ 469.771139][ T5882] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 469.810880][ T5897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 469.865582][ T5882] usb 5-1: USB disconnect, device number 34 [ 470.060696][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 470.109032][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 470.119700][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.134625][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 470.166690][ T5897] pvrusb2: ********** [ 470.170813][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 470.183665][ T5897] pvrusb2: Important functionality might not be entirely working. [ 470.191954][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 470.313880][ T5897] pvrusb2: ********** [ 470.415369][T10493] siw: device registration error -23 [ 471.017666][ T2341] pvrusb2: Invalid write control endpoint [ 471.868117][ T2341] pvrusb2: Invalid write control endpoint [ 472.211836][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 472.270151][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 472.280371][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 472.280386][ T30] audit: type=1800 audit(1762429426.027:1087): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1151" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 472.386651][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 472.398815][ T5897] usb 3-1: USB disconnect, device number 22 [ 472.417733][ T2341] pvrusb2: Device being rendered inoperable [ 472.425598][ T30] audit: type=1400 audit(1762429426.037:1088): avc: denied { create } for pid=10501 comm="syz.3.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 472.451431][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 472.650534][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 472.842083][ T2341] pvrusb2: Attached sub-driver cx25840 [ 472.911105][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 472.977112][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 474.472001][ T5809] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 475.765636][ T5809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 475.778686][ T5809] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 475.808998][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.212660][ T5809] usb 7-1: config 0 descriptor?? [ 476.424715][ T30] audit: type=1400 audit(1762429429.769:1089): avc: denied { setopt } for pid=10540 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 476.551691][ T30] audit: type=1400 audit(1762429429.778:1090): avc: denied { mount } for pid=10540 comm="syz.4.1160" name="/" dev="hugetlbfs" ino=32936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 476.652658][ T30] audit: type=1400 audit(1762429429.788:1091): avc: denied { connect } for pid=10540 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 476.905244][ T5809] lenovo 0003:17EF:60A4.000B: unknown main item tag 0x0 [ 477.461820][ T5809] lenovo 0003:17EF:60A4.000B: hidraw0: USB HID vff.f8 Device [HID 17ef:60a4] on usb-dummy_hcd.6-1/input0 [ 477.511527][ T5882] usb 7-1: USB disconnect, device number 4 [ 477.519311][ T5946] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 477.598194][T10548] fido_id[10548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 477.690125][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 477.697941][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.709986][ T5946] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 477.733469][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.788711][ T5946] usb 5-1: config 0 descriptor?? [ 477.982609][T10554] delete_channel: no stack [ 478.095333][T10556] xt_time: unknown flags 0xc [ 478.224174][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.338494][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.439960][ T5946] usbhid 5-1:0.0: can't add hid device: -71 [ 478.448415][ T5946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 478.458931][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.461027][ T5946] usb 5-1: USB disconnect, device number 35 [ 478.545498][T10563] comedi: No check for data length of config insn id 1207959624 is implemented [ 478.555546][T10563] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 478.568156][T10563] comedi: Assuming n=419 is correct [ 478.570830][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.895211][ T30] audit: type=1400 audit(1762429432.220:1092): avc: denied { write } for pid=10567 comm="syz.4.1167" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 479.238473][ T30] audit: type=1400 audit(1762429432.220:1093): avc: denied { ioctl } for pid=10567 comm="syz.4.1167" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 481.955418][ T5946] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 482.115751][ T5897] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 482.123802][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 482.131953][ T5946] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 482.141738][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.846657][ T5946] pvrusb2: Hardware description: Terratec Grabster AV400 [ 482.857362][ T5946] pvrusb2: ********** [ 482.862824][ T5946] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 482.873815][ T5946] pvrusb2: Important functionality might not be entirely working. [ 482.884899][ T5946] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 482.897077][ T5946] pvrusb2: ********** [ 482.902383][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 482.914388][ T5897] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 482.925533][ T5897] usb 3-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 482.942851][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.949900][ T5897] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 482.959777][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.034310][ T5897] usb 3-1: config 0 descriptor?? [ 483.052403][T10600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 483.103708][ T2341] pvrusb2: Invalid write control endpoint [ 483.123394][T10613] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 483.139300][T10611] IPVS: stopping backup sync thread 10613 ... [ 483.219851][ T2341] pvrusb2: Invalid write control endpoint [ 483.225676][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 483.253503][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 483.265224][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 483.276347][ T2341] pvrusb2: Device being rendered inoperable [ 483.282775][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 483.290085][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 483.302942][ T2341] pvrusb2: Attached sub-driver cx25840 [ 483.308462][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 483.340671][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 483.626111][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.060594][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.434730][T10621] tipc: Started in network mode [ 484.439759][T10621] tipc: Node identity ac1414aa, cluster identity 4711 [ 484.448737][T10621] tipc: Enabled bearer , priority 10 [ 484.456678][T10621] tipc: Enabled bearer , priority 0 [ 484.492268][ T30] audit: type=1400 audit(1762429437.458:1094): avc: denied { mounton } for pid=10625 comm=272C7B7D24AC267E3A2E2D25252E path="/246/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 484.516881][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.525015][T10633] 9pnet_fd: Insufficient options for proto=fd [ 484.798646][ T24] usb 4-1: USB disconnect, device number 31 [ 484.850278][ T30] audit: type=1400 audit(1762429437.785:1095): avc: denied { mount } for pid=10638 comm="syz.5.1187" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 484.980576][T10641] trusted_key: encrypted_key: insufficient parameters specified [ 484.986189][ T30] audit: type=1400 audit(1762429437.888:1096): avc: denied { remount } for pid=10638 comm="syz.5.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 485.348885][ T30] audit: type=1400 audit(1762429437.888:1097): avc: denied { mounton } for pid=10638 comm="syz.5.1187" path="/188/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 485.372012][ T30] audit: type=1400 audit(1762429438.113:1098): avc: denied { unmount } for pid=6528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 485.659727][ T5809] tipc: Node number set to 2886997162 [ 485.943348][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 485.961640][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.013822][ T5897] usb 3-1: USB disconnect, device number 23 [ 486.234733][ T30] audit: type=1400 audit(1762429439.076:1099): avc: denied { mount } for pid=10649 comm="syz.3.1190" name="/" dev="autofs" ino=34294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 486.319185][ T30] audit: type=1400 audit(1762429439.132:1100): avc: denied { read write } for pid=10649 comm="syz.3.1190" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 486.465402][ T30] audit: type=1400 audit(1762429439.132:1101): avc: denied { open } for pid=10649 comm="syz.3.1190" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 486.507961][ T30] audit: type=1400 audit(1762429439.132:1102): avc: denied { ioctl } for pid=10649 comm="syz.3.1190" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 486.533438][ T30] audit: type=1400 audit(1762429439.142:1103): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 488.072307][ T5897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 488.232393][ T5897] usb 6-1: device descriptor read/64, error -71 [ 488.487399][ T5897] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 488.585506][T10666] netlink: zone id is out of range [ 488.596003][T10666] netlink: zone id is out of range [ 488.978419][T10666] netlink: zone id is out of range [ 488.984583][T10666] netlink: zone id is out of range [ 489.000572][T10666] netlink: zone id is out of range [ 489.107432][ T5897] usb 6-1: device descriptor read/64, error -71 [ 489.354329][ T5897] usb usb6-port1: attempt power cycle [ 492.361237][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 492.376000][T10692] binder: 10687:10692 ioctl c0306201 0 returned -14 [ 492.383154][ T30] audit: type=1400 audit(1762429444.819:1106): avc: denied { map } for pid=10687 comm="syz.2.1203" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 493.250064][ T5897] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 493.469247][ T5809] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 493.490788][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 493.497637][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 493.511618][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.512833][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 494.523688][ T5897] pvrusb2: ********** [ 494.527992][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 494.538071][ T5897] pvrusb2: Important functionality might not be entirely working. [ 494.546051][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 494.557841][ T5897] pvrusb2: ********** [ 494.690631][T10701] libceph: resolve '0' (ret=-3): failed [ 494.776877][ T2341] pvrusb2: Invalid write control endpoint [ 494.789025][ T5897] usb 6-1: USB disconnect, device number 19 [ 494.923345][ T5809] usb 4-1: device not accepting address 32, error -71 [ 494.992713][ T2341] pvrusb2: Invalid write control endpoint [ 495.014690][T10711] tmpfs: Bad value for 'huge' [ 495.103116][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 495.112783][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 495.114875][ T30] audit: type=1400 audit(1762429447.392:1107): avc: denied { write } for pid=10709 comm="syz.4.1208" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 495.166671][ T30] audit: type=1400 audit(1762429447.392:1108): avc: denied { open } for pid=10709 comm="syz.4.1208" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 495.174341][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 495.308999][ T2341] pvrusb2: Device being rendered inoperable [ 495.591087][ T30] audit: type=1400 audit(481.333:1109): avc: denied { getopt } for pid=10709 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 495.618192][ T5809] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 495.646629][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 495.662267][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 495.679934][ T2341] pvrusb2: Attached sub-driver cx25840 [ 496.109149][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 496.123071][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.173028][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 496.173382][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 496.217581][ T5809] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 496.313774][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.337194][ T5809] usb 4-1: config 0 descriptor?? [ 496.352354][ T5809] usbhid 4-1:0.0: can't add hid device: -22 [ 496.371454][ T5809] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 496.611667][ T30] audit: type=1400 audit(482.437:1110): avc: denied { read } for pid=10703 comm="syz.3.1206" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.611722][ T30] audit: type=1400 audit(482.437:1111): avc: denied { open } for pid=10703 comm="syz.3.1206" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.832579][ T30] audit: type=1400 audit(482.652:1112): avc: denied { ioctl } for pid=10703 comm="syz.3.1206" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.833877][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.836027][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.424913][ T5809] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 497.595954][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 497.597780][ T5809] usb 7-1: config index 0 descriptor too short (expected 48631, got 18) [ 497.597812][ T5809] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.597836][ T5809] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.597899][ T5809] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 497.597925][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.637289][ T5809] usb 7-1: config 0 descriptor?? [ 498.200312][ T5897] usb 4-1: USB disconnect, device number 33 [ 498.304403][T10746] siw: device registration error -23 [ 499.186182][T10748] 9pnet_fd: Insufficient options for proto=fd [ 499.863801][ T30] audit: type=1400 audit(485.486:1113): avc: denied { map } for pid=10755 comm="syz.3.1219" path="socket:[34463]" dev="sockfs" ino=34463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.174269][ T30] audit: type=1400 audit(485.486:1114): avc: denied { read accept } for pid=10755 comm="syz.3.1219" path="socket:[34463]" dev="sockfs" ino=34463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.514985][T10750] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 501.101578][ T24] usb 7-1: USB disconnect, device number 5 [ 501.960835][T10788] libceph: resolve '0' (ret=-3): failed [ 503.550499][ T5897] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 503.727773][T10807] delete_channel: no stack [ 503.833875][T10809] delete_channel: no stack [ 503.935906][T10811] xt_time: unknown flags 0xc [ 504.105079][T10810] xt_time: unknown flags 0xc [ 507.483333][T10854] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 507.571467][T10857] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1245'. [ 509.344852][ T30] audit: type=1400 audit(493.652:1115): avc: denied { map } for pid=10856 comm="syz.2.1246" path="/dev/video5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 512.448782][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 512.457901][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 512.467329][T10887] netlink: 'syz.3.1256': attribute type 11 has an invalid length. [ 512.475307][T10887] netlink: 'syz.3.1256': attribute type 7 has an invalid length. [ 515.244011][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 515.289813][ T30] audit: type=1400 audit(499.920:1116): avc: denied { append } for pid=10899 comm="syz.6.1258" name="nbd6" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 515.912793][T10910] veth0_to_team: entered promiscuous mode [ 515.918790][T10910] veth0_to_team: entered allmulticast mode [ 516.976725][T10923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.049347][T10922] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 517.057120][T10922] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1263'. [ 517.122652][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.129355][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.139030][ T30] audit: type=1400 audit(501.585:1117): avc: denied { create } for pid=10920 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 517.711150][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1264'. [ 517.900106][T10936] netlink: zone id is out of range [ 517.917384][T10936] netlink: zone id is out of range [ 517.926299][T10936] netlink: zone id is out of range [ 517.937803][T10936] netlink: zone id is out of range [ 517.950509][T10936] netlink: zone id is out of range [ 518.647097][T10944] libceph: resolve '0' (ret=-3): failed [ 519.849960][ T30] audit: type=1400 audit(504.185:1118): avc: denied { mount } for pid=10946 comm="syz.6.1271" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 520.242464][ T30] audit: type=1400 audit(504.344:1119): avc: denied { ioctl } for pid=10946 comm="syz.6.1271" path="socket:[35103]" dev="sockfs" ino=35103 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.295284][ T30] audit: type=1400 audit(504.353:1120): avc: denied { accept } for pid=10946 comm="syz.6.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.433060][T10952] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 520.462558][T10952] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 522.986124][ T5897] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 523.439254][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 523.459433][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 523.479526][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.535745][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 523.552549][ T5897] pvrusb2: ********** [ 523.562314][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 523.599322][ T5897] pvrusb2: Important functionality might not be entirely working. [ 523.609376][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 523.629830][ T5897] pvrusb2: ********** [ 523.755803][ T2341] pvrusb2: Invalid write control endpoint [ 523.806114][T10995] delete_channel: no stack [ 523.872765][ T2341] pvrusb2: Invalid write control endpoint [ 523.976847][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 523.986540][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 523.994073][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 524.004119][ T2341] pvrusb2: Device being rendered inoperable [ 524.010985][T10977] pvrusb2: Attempted to execute control transfer when device not ok [ 524.020291][T10977] pvrusb2: Attempted to execute control transfer when device not ok [ 524.045124][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 524.062196][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 524.118694][ T2341] pvrusb2: Attached sub-driver cx25840 [ 524.155784][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 524.233157][T11001] xt_time: unknown flags 0xc [ 524.382745][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 525.150569][T11002] nvme_fabrics: missing parameter 'transport=%s' [ 525.164543][T11002] nvme_fabrics: missing parameter 'nqn=%s' [ 525.925961][ T5882] usb 6-1: USB disconnect, device number 21 [ 526.070114][ T30] audit: type=1400 audit(510.003:1121): avc: denied { write } for pid=10998 comm="syz.3.1285" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 527.754757][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 528.833750][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 528.856475][ T24] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 528.864499][ T24] usb 3-1: config 0 has no interface number 0 [ 528.908343][ T24] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 529.411231][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.536167][ T24] usb 3-1: Product: syz [ 529.549933][ T24] usb 3-1: Manufacturer: syz [ 529.570345][ T24] usb 3-1: SerialNumber: syz [ 529.583991][ T24] usb 3-1: config 0 descriptor?? [ 529.611513][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 529.624862][ T5874] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 529.787996][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 529.808568][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 529.820428][ T5874] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 529.838598][ T5874] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 529.892679][ T5874] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 529.901911][ T5874] usb 6-1: config 128 has no interface number 0 [ 529.924371][ T5874] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.966779][ T5874] usb 6-1: config 128 interface 127 has no altsetting 0 [ 529.990059][ T5874] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 529.999411][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.999433][ T5874] usb 6-1: Product: syz [ 529.999446][ T5874] usb 6-1: Manufacturer: syz [ 529.999461][ T5874] usb 6-1: SerialNumber: syz [ 530.208814][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 530.466440][ T5874] usb 6-1: USB disconnect, device number 22 [ 531.400326][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -110) [ 531.861394][ T5874] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 532.023326][ T24] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 532.054767][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 532.644653][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 532.673898][ T24] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 532.685181][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.710380][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 532.735589][ T5874] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 532.754839][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.765645][ T5874] usb 7-1: config 0 descriptor?? [ 532.768960][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 532.841049][ T24] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 532.859336][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 532.871926][ T24] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 532.885001][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 532.904808][ T24] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 532.915824][T11082] FAULT_INJECTION: forcing a failure. [ 532.915824][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 533.014025][T11082] CPU: 1 UID: 0 PID: 11082 Comm: syz.2.1306 Not tainted syzkaller #0 PREEMPT(full) [ 533.014048][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.014058][T11082] Call Trace: [ 533.014064][T11082] [ 533.014071][T11082] dump_stack_lvl+0x16c/0x1f0 [ 533.014105][T11082] should_fail_ex+0x512/0x640 [ 533.014125][T11082] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 533.014154][T11082] should_failslab+0xc2/0x120 [ 533.014173][T11082] kmem_cache_alloc_noprof+0x75/0x6e0 [ 533.014202][T11082] ? ptlock_alloc+0x1f/0x70 [ 533.014230][T11082] ? ptlock_alloc+0x1f/0x70 [ 533.014250][T11082] ptlock_alloc+0x1f/0x70 [ 533.014270][T11082] pte_alloc_one+0x84/0x350 [ 533.014291][T11082] __pte_alloc+0x6d/0x380 [ 533.014307][T11082] ? __pfx___pte_alloc+0x10/0x10 [ 533.014324][T11082] ? mm_alloc_pmd+0x2c2/0x470 [ 533.014343][T11082] move_pages+0x322d/0x4d10 [ 533.014361][T11082] ? __lock_acquire+0xb8a/0x1c90 [ 533.014383][T11082] ? __pfx_move_pages+0x10/0x10 [ 533.014410][T11082] ? find_held_lock+0x2b/0x80 [ 533.014428][T11082] ? __might_fault+0xe3/0x190 [ 533.014449][T11082] ? __might_fault+0xe3/0x190 [ 533.014467][T11082] ? __might_fault+0x13b/0x190 [ 533.014487][T11082] userfaultfd_ioctl+0x607/0x3930 [ 533.014501][T11082] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 533.014511][T11082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 533.014539][T11082] ? hook_file_ioctl_common+0x145/0x410 [ 533.014569][T11082] ? selinux_file_ioctl+0x180/0x270 [ 533.014585][T11082] ? selinux_file_ioctl+0xb4/0x270 [ 533.014602][T11082] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 533.014614][T11082] ? __x64_sys_ioctl+0x18e/0x210 [ 533.014628][T11082] __x64_sys_ioctl+0x18e/0x210 [ 533.014643][T11082] do_syscall_64+0xcd/0xfa0 [ 533.014660][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.014672][T11082] RIP: 0033:0x7f59d8f8f6c9 [ 533.014686][T11082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.014701][T11082] RSP: 002b:00007f59d9e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.014716][T11082] RAX: ffffffffffffffda RBX: 00007f59d91e5fa0 RCX: 00007f59d8f8f6c9 [ 533.014726][T11082] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 533.014735][T11082] RBP: 00007f59d9e36090 R08: 0000000000000000 R09: 0000000000000000 [ 533.014744][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.014752][T11082] R13: 00007f59d91e6038 R14: 00007f59d91e5fa0 R15: 00007ffee75404f8 [ 533.014767][T11082] [ 533.018417][ T24] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 533.321253][ T5874] logitech 0003:046D:CA04.000C: item fetching failed at offset 3/5 [ 533.698510][ T24] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 533.741595][ T5874] logitech 0003:046D:CA04.000C: parse failed [ 533.747753][ T5874] logitech 0003:046D:CA04.000C: probe with driver logitech failed with error -22 [ 533.786635][ T5874] usb 7-1: USB disconnect, device number 6 [ 533.791241][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 533.916973][ T24] usb 3-1: USB disconnect, device number 24 [ 534.144727][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 534.391260][ T30] audit: type=1400 audit(517.758:1122): avc: denied { listen } for pid=11089 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.425763][T11096] wireguard0: entered promiscuous mode [ 534.431267][T11096] wireguard0: entered allmulticast mode [ 534.915545][ T30] audit: type=1400 audit(518.272:1123): avc: denied { ioctl } for pid=11106 comm="syz.4.1312" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 534.946517][ T30] audit: type=1400 audit(518.300:1124): avc: denied { connect } for pid=11106 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 535.075079][ T5809] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 535.106947][T11115] libceph: resolve '0' (ret=-3): failed [ 535.327370][ T30] audit: type=1400 audit(518.628:1125): avc: denied { write } for pid=11106 comm="syz.4.1312" path="socket:[36381]" dev="sockfs" ino=36381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.272876][ T5809] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.282008][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.289990][ T5809] usb 4-1: Product: syz [ 536.294177][ T5809] usb 4-1: Manufacturer: syz [ 536.298769][ T5809] usb 4-1: SerialNumber: syz [ 536.305963][ T5809] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 536.377052][ T30] audit: type=1400 audit(519.638:1126): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 536.408494][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 537.076593][ T5874] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 537.199457][ T5897] usb 4-1: USB disconnect, device number 34 [ 537.343410][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 537.349054][ T5874] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 537.373847][ T5874] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 537.399149][ T5874] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 537.414849][ T5874] usb 5-1: Product: syz [ 537.425206][ T5874] usb 5-1: Manufacturer: syz [ 537.458206][ T5874] r8152-cfgselector 5-1: Unknown version 0x0000 [ 537.472764][ T5874] r8152-cfgselector 5-1: config 0 descriptor?? [ 537.491764][ T5874] cdc_acm 5-1:0.0: Zero length descriptor references [ 537.498506][ T5874] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 537.724763][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.733541][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.744465][ T5874] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 537.771018][ T5882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 537.771094][ T5928] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 537.814022][ T24] usb 4-1: Service connection timeout for: 256 [ 537.820231][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 537.829816][ T24] ath9k_htc: Failed to initialize the device [ 537.836034][ T5897] usb 4-1: ath9k_htc: USB layer deinitialized [ 537.931401][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 537.938331][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.949258][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.954200][ T5928] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 537.959014][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.980072][ T5882] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 537.982969][ T5928] usb 6-1: config 0 has an invalid interface number: 248 but max is 0 [ 537.989158][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.990926][ T5882] usb 3-1: config 0 descriptor?? [ 537.998222][ T5928] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 538.019632][ T5928] usb 6-1: config 0 has no interface number 0 [ 538.025747][ T5928] usb 6-1: config 0 has no interface number 1 [ 538.032177][ T5928] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 538.044404][ T5928] usb 6-1: config 0 interface 21 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.057600][ T5928] usb 6-1: too many endpoints for config 0 interface 248 altsetting 101: 178, using maximum allowed: 30 [ 538.068903][ T5928] usb 6-1: config 0 interface 248 altsetting 101 has an endpoint descriptor with address 0x74, changing to 0x4 [ 538.082942][ T5928] usb 6-1: config 0 interface 248 altsetting 101 endpoint 0x4 has an invalid bInterval 130, changing to 4 [ 538.094396][ T5928] usb 6-1: config 0 interface 248 altsetting 101 endpoint 0x4 has invalid maxpacket 57558, setting to 1023 [ 538.106548][ T5928] usb 6-1: config 0 interface 248 altsetting 101 has 2 endpoint descriptors, different from the interface descriptor's value: 178 [ 538.120010][ T5928] usb 6-1: config 0 interface 248 has no altsetting 0 [ 538.128585][ T5928] usb 6-1: New USB device found, idVendor=0403, idProduct=bfda, bcdDevice=3f.ca [ 538.137785][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.145820][ T5928] usb 6-1: Product: syz [ 538.150013][ T5928] usb 6-1: Manufacturer: syz [ 538.154620][ T5928] usb 6-1: SerialNumber: syz [ 538.162372][ T5928] usb 6-1: config 0 descriptor?? [ 538.167889][T11132] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 538.176159][ T5928] ftdi_sio 6-1:0.21: FTDI USB Serial Device converter detected [ 538.184409][ T5928] ftdi_sio ttyUSB0: unknown device type: 0x3fca [ 538.525432][ T30] audit: type=1400 audit(521.658:1127): avc: denied { read write } for pid=11129 comm="syz.2.1318" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 538.550259][ T30] audit: type=1400 audit(521.677:1128): avc: denied { ioctl open } for pid=11129 comm="syz.2.1318" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 538.550280][T11130] random: crng reseeded on system resumption [ 539.361047][T11149] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 539.402073][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 539.416235][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.425490][T11130] binder: 11129:11130 ioctl c0306201 2000000003c0 returned -14 [ 539.599863][ T30] audit: type=1400 audit(522.425:1129): avc: denied { mounton } for pid=11131 comm="syz.5.1319" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 539.637268][ T5882] usb 3-1: USB disconnect, device number 25 [ 541.219915][ T30] audit: type=1400 audit(524.175:1130): avc: denied { read write } for pid=11156 comm="syz.6.1325" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.243280][ T30] audit: type=1400 audit(524.175:1131): avc: denied { open } for pid=11156 comm="syz.6.1325" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 541.436890][ T5928] ftdi_sio 6-1:0.248: FTDI USB Serial Device converter detected [ 541.458066][ T5928] ftdi_sio ttyUSB1: unknown device type: 0x3fca [ 541.488966][ T5928] usb 6-1: USB disconnect, device number 23 [ 541.780600][ T5928] ftdi_sio 6-1:0.21: device disconnected [ 541.794997][ T5928] ftdi_sio 6-1:0.248: device disconnected [ 542.407754][T11179] syzkaller0: entered promiscuous mode [ 542.421518][T11181] tmpfs: Bad value for 'mpol' [ 542.429934][T11181] tmpfs: Unknown parameter 'q–¥€uota' [ 542.437180][T11179] syzkaller0: entered allmulticast mode [ 542.455794][T11179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1329'. [ 542.791093][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1332'. [ 542.864198][T11186] xt_hashlimit: max too large, truncated to 1048576 [ 542.897705][T11186] xt_limit: Overflow, try lower: 0/0 [ 543.373202][ T5882] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 543.565643][ T5882] usb 5-1: device descriptor read/64, error -71 [ 543.941321][ T5882] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 543.995779][ T30] audit: type=1400 audit(526.779:1132): avc: denied { accept } for pid=11201 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 544.162267][ T5882] usb 5-1: device descriptor read/64, error -71 [ 544.363179][ T5882] usb usb5-port1: attempt power cycle [ 544.773366][ T30] audit: type=1400 audit(527.480:1133): avc: denied { create } for pid=11206 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 544.796868][ T30] audit: type=1400 audit(527.527:1134): avc: denied { sys_admin } for pid=11206 comm="syz.5.1339" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 544.816150][ T5882] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 544.825982][T11213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11213 comm=syz.5.1339 [ 544.848719][ T5882] usb 5-1: device descriptor read/8, error -71 [ 545.372069][ T5882] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 545.379663][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 545.415334][ T5882] usb 5-1: device descriptor read/8, error -71 [ 545.532773][ T5882] usb usb5-port1: unable to enumerate USB device [ 546.195309][T11233] lo speed is unknown, defaulting to 1000 [ 546.221886][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 546.421940][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 546.436404][T11232] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 546.521717][ T24] usb 7-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 546.532442][ T24] usb 7-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 546.550927][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 546.573492][ T24] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 546.601463][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.616713][ T30] audit: type=1400 audit(529.211:1135): avc: denied { ioctl } for pid=11245 comm="syz.2.1350" path="socket:[36717]" dev="sockfs" ino=36717 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 546.838678][ T24] usb 7-1: config 0 descriptor?? [ 546.868613][T11228] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 547.189471][ T5882] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 547.340516][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 547.352530][ T5882] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 547.376988][ T5882] usb 5-1: config 1 has no interface number 0 [ 547.383273][ T5882] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 547.395694][ T5882] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 547.408028][ T5882] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.454039][ T5882] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 547.492471][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.529304][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.542413][ T5882] usb 5-1: Product: syz [ 547.554670][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.563854][ T5882] usb 5-1: Manufacturer: syz [ 547.568449][ T5882] usb 5-1: SerialNumber: syz [ 547.586459][T11238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.611420][T11265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.669321][ T30] audit: type=1400 audit(530.146:1136): avc: denied { create } for pid=11255 comm="syz.2.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 547.700645][ T30] audit: type=1400 audit(530.156:1137): avc: denied { read write } for pid=11255 comm="syz.2.1352" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 547.774354][ T30] audit: type=1400 audit(530.156:1138): avc: denied { open } for pid=11255 comm="syz.2.1352" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 547.944277][T11269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.985782][ T5882] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 549.103771][ T5809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 549.125489][ T5882] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 549.127842][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 549.151736][ T5882] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 549.152424][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 549.159168][ T5882] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 549.173427][ T5882] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 549.186898][ T5882] usb 5-1: USB disconnect, device number 41 [ 549.194947][ T5882] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 549.231626][ T24] usb 7-1: USB disconnect, device number 7 [ 549.254104][ T5882] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 549.274131][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 549.297741][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 549.306909][ T5928] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 549.325308][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.365250][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 549.372488][ T5809] pvrusb2: ********** [ 549.376512][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 549.387866][ T5809] pvrusb2: Important functionality might not be entirely working. [ 549.398075][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 549.410876][ T5809] pvrusb2: ********** [ 549.477406][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 549.496679][ T5928] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 549.514898][ T5928] usb 6-1: config 0 has no interface number 0 [ 549.549438][ T5928] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.601327][ T5928] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 549.792698][ T2341] pvrusb2: Invalid write control endpoint [ 549.799408][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.894475][ T5928] usb 6-1: Product: syz [ 549.898649][ T5928] usb 6-1: Manufacturer: syz [ 549.903273][ T5928] usb 6-1: SerialNumber: syz [ 549.916935][ T5928] usb 6-1: config 0 descriptor?? [ 549.928879][ T5928] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 550.066151][ T2341] pvrusb2: Invalid write control endpoint [ 550.072049][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 550.088033][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 550.116605][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 550.154916][ T2341] pvrusb2: Device being rendered inoperable [ 550.168886][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 550.178018][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 550.186333][ T2341] pvrusb2: Attached sub-driver cx25840 [ 550.191930][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 550.266644][T11289] siw: device registration error -23 [ 550.629438][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 550.687744][ T24] usb 4-1: USB disconnect, device number 35 [ 550.772224][T11292] FAULT_INJECTION: forcing a failure. [ 550.772224][T11292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.793777][T11292] CPU: 1 UID: 0 PID: 11292 Comm: syz.2.1362 Not tainted syzkaller #0 PREEMPT(full) [ 550.793800][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.793814][T11292] Call Trace: [ 550.793820][T11292] [ 550.793827][T11292] dump_stack_lvl+0x16c/0x1f0 [ 550.793858][T11292] should_fail_ex+0x512/0x640 [ 550.793883][T11292] _copy_from_user+0x2e/0xd0 [ 550.793906][T11292] copy_msghdr_from_user+0x98/0x160 [ 550.793931][T11292] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 550.793958][T11292] ? kfree+0x252/0x6d0 [ 550.793982][T11292] ? __lock_acquire+0x622/0x1c90 [ 550.794015][T11292] ___sys_recvmsg+0xdb/0x1a0 [ 550.794038][T11292] ? __pfx____sys_recvmsg+0x10/0x10 [ 550.794075][T11292] ? __pfx___might_resched+0x10/0x10 [ 550.794109][T11292] do_recvmmsg+0x2fe/0x750 [ 550.794137][T11292] ? __pfx_do_recvmmsg+0x10/0x10 [ 550.794165][T11292] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 550.794191][T11292] ? __fget_files+0x20e/0x3c0 [ 550.794215][T11292] __x64_sys_recvmmsg+0x22a/0x280 [ 550.794240][T11292] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 550.794272][T11292] do_syscall_64+0xcd/0xfa0 [ 550.794299][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.794316][T11292] RIP: 0033:0x7f59d8f8f6c9 [ 550.794330][T11292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.794343][T11292] RSP: 002b:00007f59d9df4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 550.794357][T11292] RAX: ffffffffffffffda RBX: 00007f59d91e6180 RCX: 00007f59d8f8f6c9 [ 550.794366][T11292] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000009 [ 550.794374][T11292] RBP: 00007f59d9df4090 R08: 0000000000000000 R09: 0000000000000000 [ 550.794382][T11292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.794389][T11292] R13: 00007f59d91e6218 R14: 00007f59d91e6180 R15: 00007ffee75404f8 [ 550.794409][T11292] [ 551.154260][T11296] vivid-003: ================= START STATUS ================= [ 551.162135][T11296] vivid-003: Radio HW Seek Mode: Bounded [ 551.168034][T11296] vivid-003: Radio Programmable HW Seek: false [ 551.174306][T11296] vivid-003: RDS Rx I/O Mode: Block I/O [ 551.179976][T11296] vivid-003: Generate RBDS Instead of RDS: false [ 551.186396][T11296] vivid-003: RDS Reception: true [ 551.191430][T11296] vivid-003: RDS Program Type: 0 inactive [ 551.197264][T11296] vivid-003: RDS PS Name: inactive [ 551.202634][T11296] vivid-003: RDS Radio Text: inactive [ 551.208371][T11296] vivid-003: RDS Traffic Announcement: false inactive [ 551.215429][T11296] vivid-003: RDS Traffic Program: false inactive [ 551.222229][T11296] vivid-003: RDS Music: false inactive [ 551.227865][T11296] vivid-003: ================== END STATUS ================== [ 551.421342][ T5928] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 551.441362][T11298] loop7: detected capacity change from 0 to 16383 [ 551.554131][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.561178][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.568252][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.576562][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.584912][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.593133][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.601261][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.609442][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.616724][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.623894][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.631164][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.638330][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.645478][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.652719][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.659896][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.667249][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.674421][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.681726][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.688862][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.695857][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.702903][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.709971][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.716956][ T5928] usb 6-1: USB disconnect, device number 24 [ 551.717026][ C1] gspca_pac7302 6-1:0.172: URB error -71, resubmitting [ 551.729737][ C1] gspca_main: Resubmit URB failed with error -19 [ 551.913449][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 552.111703][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 552.121025][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 552.130257][T11308] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1366'. [ 552.330382][T11308] netlink: 'syz.2.1366': attribute type 16 has an invalid length. [ 552.338559][T11308] netlink: 'syz.2.1366': attribute type 3 has an invalid length. [ 552.346539][T11308] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1366'. [ 552.608356][ T5882] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 552.731155][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 552.989973][ T5882] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 553.025398][ T5882] usb 7-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 553.036865][ T5882] usb 7-1: config 0 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 553.058197][ T5882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 553.065139][ T5882] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 553.076508][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.095972][ T5882] usb 7-1: config 0 descriptor?? [ 553.117070][T11304] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 553.919290][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 554.067405][T11304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.188305][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.192026][T11304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.201471][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.221790][T11333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.907793][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 557.062467][ T5882] usbhid 7-1:0.0: can't add hid device: -71 [ 557.069891][ T5882] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 557.122010][ T5882] usb 7-1: USB disconnect, device number 8 [ 557.348051][T11367] siw: device registration error -23 [ 557.912144][T11354] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 557.962362][ T30] audit: type=1400 audit(539.837:1139): avc: denied { getopt } for pid=11365 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.019041][ T5882] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 558.222549][ T5882] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 558.243568][ T5882] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 558.251908][ T5882] usb 7-1: Product: syz [ 558.259356][ T5882] usb 7-1: Manufacturer: syz [ 558.276118][ T5882] usb 7-1: SerialNumber: syz [ 558.284731][ T5882] usb 7-1: config 0 descriptor?? [ 558.294309][ T5882] ch341 7-1:0.0: ch341-uart converter detected [ 558.508428][ T5882] usb 7-1: failed to receive control message: -121 [ 558.515185][ T5882] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 559.109366][ T5882] usb 7-1: USB disconnect, device number 9 [ 559.116095][ T5882] ch341 7-1:0.0: device disconnected [ 561.450181][T11407] FAULT_INJECTION: forcing a failure. [ 561.450181][T11407] name failslab, interval 1, probability 0, space 0, times 0 [ 561.463050][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.6.1393 Not tainted syzkaller #0 PREEMPT(full) [ 561.463070][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.463079][T11407] Call Trace: [ 561.463085][T11407] [ 561.463092][T11407] dump_stack_lvl+0x16c/0x1f0 [ 561.463121][T11407] should_fail_ex+0x512/0x640 [ 561.463141][T11407] ? fs_reclaim_acquire+0xae/0x150 [ 561.463164][T11407] should_failslab+0xc2/0x120 [ 561.463185][T11407] __kmalloc_noprof+0xdd/0x880 [ 561.463209][T11407] ? tomoyo_encode2+0x100/0x3e0 [ 561.463233][T11407] ? tomoyo_encode2+0x100/0x3e0 [ 561.463252][T11407] tomoyo_encode2+0x100/0x3e0 [ 561.463280][T11407] tomoyo_encode+0x29/0x50 [ 561.463299][T11407] tomoyo_realpath_from_path+0x18f/0x6e0 [ 561.463327][T11407] tomoyo_path_number_perm+0x245/0x580 [ 561.463353][T11407] ? tomoyo_path_number_perm+0x237/0x580 [ 561.463382][T11407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.463411][T11407] ? find_held_lock+0x2b/0x80 [ 561.463456][T11407] ? find_held_lock+0x2b/0x80 [ 561.463477][T11407] ? hook_file_ioctl_common+0x145/0x410 [ 561.463506][T11407] ? __fget_files+0x20e/0x3c0 [ 561.463529][T11407] security_file_ioctl+0x9b/0x240 [ 561.463550][T11407] __x64_sys_ioctl+0xb7/0x210 [ 561.463576][T11407] do_syscall_64+0xcd/0xfa0 [ 561.463603][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.463619][T11407] RIP: 0033:0x7f566d98f6c9 [ 561.463633][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.463650][T11407] RSP: 002b:00007f566e887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.463666][T11407] RAX: ffffffffffffffda RBX: 00007f566dbe6090 RCX: 00007f566d98f6c9 [ 561.463678][T11407] RDX: 0000200000000280 RSI: 00000000c4c85512 RDI: 0000000000000007 [ 561.463688][T11407] RBP: 00007f566e887090 R08: 0000000000000000 R09: 0000000000000000 [ 561.463698][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.463708][T11407] R13: 00007f566dbe6128 R14: 00007f566dbe6090 R15: 00007ffef0744a48 [ 561.463734][T11407] [ 561.464000][T11407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.743063][T11406] syz.5.1392 (11406) used greatest stack depth: 19064 bytes left [ 562.160736][T11415] netlink: zone id is out of range [ 562.166240][T11415] netlink: zone id is out of range [ 562.172338][T11415] netlink: zone id is out of range [ 562.179651][T11415] netlink: zone id is out of range [ 562.184859][T11415] netlink: zone id is out of range [ 562.306039][ T5874] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 562.359459][ T5882] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 562.455738][ T5874] usb 7-1: device descriptor read/64, error -71 [ 562.595861][ T5882] usb 6-1: Invalid ep0 maxpacket: 32 [ 563.171930][ T5882] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 563.179480][ T5874] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 563.332280][ T5874] usb 7-1: device descriptor read/64, error -71 [ 563.343153][ T5882] usb 6-1: Invalid ep0 maxpacket: 32 [ 563.348653][ T5882] usb usb6-port1: attempt power cycle [ 563.692684][ T5874] usb usb7-port1: attempt power cycle [ 563.987625][ T5882] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 564.052640][ T5882] usb 6-1: Invalid ep0 maxpacket: 32 [ 564.187574][ T5882] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 564.351399][ T5897] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 564.377613][ T5882] usb 6-1: Invalid ep0 maxpacket: 32 [ 564.377826][ T5882] usb usb6-port1: unable to enumerate USB device [ 564.609401][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 564.617214][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 564.630942][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.667590][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 564.692887][ T30] audit: type=1400 audit(546.104:1140): avc: denied { mount } for pid=11432 comm="syz.6.1402" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 564.719509][ T5897] pvrusb2: ********** [ 564.730991][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 564.741220][ T5897] pvrusb2: Important functionality might not be entirely working. [ 564.749054][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 564.760676][ T5897] pvrusb2: ********** [ 564.886721][ T2341] pvrusb2: Invalid write control endpoint [ 565.069443][ T2341] pvrusb2: Invalid write control endpoint [ 565.080684][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 565.114839][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 565.125341][ T30] audit: type=1400 audit(546.544:1141): avc: denied { unmount } for pid=8778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 565.133330][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 565.175365][ T2341] pvrusb2: Device being rendered inoperable [ 565.183562][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 565.201908][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 565.215210][ T2341] pvrusb2: Attached sub-driver cx25840 [ 565.223728][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 565.241915][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 565.252748][T11448] overlayfs: conflicting lowerdir path [ 565.296944][ T5946] usb 4-1: USB disconnect, device number 36 [ 565.535022][ T30] audit: type=1400 audit(546.918:1142): avc: denied { getopt } for pid=11452 comm="syz.5.1405" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 566.784210][T11477] netlink: zone id is out of range [ 566.789508][T11477] netlink: zone id is out of range [ 566.794690][T11477] netlink: zone id is out of range [ 566.805279][T11477] netlink: zone id is out of range [ 566.811566][T11477] netlink: zone id is out of range [ 568.538595][ T5928] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 569.240056][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.644441][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.654443][ T5928] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 569.667301][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.688619][ T5928] usb 5-1: config 0 descriptor?? [ 570.654798][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 570.661366][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 570.793240][T11521] ceph: No mds server is up or the cluster is laggy [ 570.945598][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 570.968940][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 571.318426][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 571.577506][ T5928] semitek 0003:1EA7:0907.000D: unknown main item tag 0x0 [ 571.587386][ T5928] semitek 0003:1EA7:0907.000D: unknown main item tag 0x0 [ 571.594433][ T5928] semitek 0003:1EA7:0907.000D: unknown main item tag 0x0 [ 571.601536][ T5928] semitek 0003:1EA7:0907.000D: unknown main item tag 0x0 [ 571.612314][ T5928] semitek 0003:1EA7:0907.000D: unknown main item tag 0x0 [ 571.625754][ T30] audit: type=1400 audit(552.615:1143): avc: denied { create } for pid=11544 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 571.743290][ T5928] semitek 0003:1EA7:0907.000D: hidraw0: USB HID v66.1d Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0 [ 571.779645][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 571.857428][T11548] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 571.865154][T11548] audit: out of memory in audit_log_start [ 572.062167][ T30] audit: type=1400 audit(552.820:1144): avc: denied { bind } for pid=11544 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 572.089315][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 572.098409][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.129505][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 572.136580][ T24] pvrusb2: ********** [ 572.140531][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 572.283524][ T24] pvrusb2: Important functionality might not be entirely working. [ 572.310196][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 572.349253][ T24] pvrusb2: ********** [ 572.382142][ T2341] pvrusb2: Invalid write control endpoint [ 572.552712][ T30] audit: type=1400 audit(553.457:1145): avc: denied { name_bind } for pid=11551 comm="syz.3.1430" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 572.670870][ T24] usb 3-1: USB disconnect, device number 26 [ 572.820668][ T2341] pvrusb2: Invalid write control endpoint [ 572.827350][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 572.850192][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 572.857909][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 572.872338][ T2341] pvrusb2: Device being rendered inoperable [ 572.900254][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 572.907897][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 572.916348][ T2341] pvrusb2: Attached sub-driver cx25840 [ 572.922041][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 572.932728][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 573.125642][ T5928] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 573.350238][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 573.358223][ T5928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 573.379709][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.402202][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 573.409445][ T5928] pvrusb2: ********** [ 573.415049][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 573.465716][ T30] audit: type=1400 audit(554.326:1146): avc: denied { name_bind } for pid=11572 comm="syz.2.1436" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 573.468918][ T5928] pvrusb2: Important functionality might not be entirely working. [ 573.496232][T11573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 573.502805][T11573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.517403][ T24] usb 5-1: USB disconnect, device number 42 [ 573.619452][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 573.632235][ T5928] pvrusb2: ********** [ 573.638772][T11573] vhci_hcd vhci_hcd.0: Device attached [ 573.638880][T11572] mmap: syz.2.1436 (11572): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 573.692059][ T2341] pvrusb2: Invalid write control endpoint [ 573.884007][T11574] vhci_hcd: connection closed [ 573.904055][ T60] vhci_hcd: stop threads [ 573.930863][ T60] vhci_hcd: release socket [ 573.931502][ T2341] pvrusb2: Invalid write control endpoint [ 573.935503][ T60] vhci_hcd: disconnect device [ 573.946348][ T5897] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 573.954926][ T5897] usb 37-1: enqueue for inactive port 0 [ 573.981961][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 574.023899][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 574.045908][ T24] usb 7-1: USB disconnect, device number 13 [ 574.056743][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 574.074546][ T5897] vhci_hcd: vhci_device speed not set [ 574.088907][ T2341] pvrusb2: Device being rendered inoperable [ 574.112254][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 574.119695][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 574.130655][ T30] audit: type=1400 audit(554.953:1147): avc: denied { write } for pid=11580 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.132916][ T2341] pvrusb2: Attached sub-driver cx25840 [ 574.155314][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 574.182365][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 575.423384][ T30] audit: type=1326 audit(555.991:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 575.712894][ T30] audit: type=1326 audit(556.150:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 575.982070][ T30] audit: type=1326 audit(556.150:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566d98f6c9 code=0x7ffc0000 [ 576.170330][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1451'. [ 577.200925][T11636] lo speed is unknown, defaulting to 1000 [ 577.270092][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 577.270105][ T30] audit: type=1400 audit(557.890:1152): avc: denied { bind } for pid=11633 comm="syz.6.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 577.297963][ T30] audit: type=1400 audit(557.890:1153): avc: denied { setopt } for pid=11633 comm="syz.6.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 577.399166][ T30] audit: type=1326 audit(558.012:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc317586567 code=0x7ffc0000 [ 577.499528][ T30] audit: type=1326 audit(558.012:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc31752b779 code=0x7ffc0000 [ 577.572155][ T30] audit: type=1326 audit(558.049:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 577.628452][ T30] audit: type=1326 audit(558.049:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc317586567 code=0x7ffc0000 [ 577.651287][ T30] audit: type=1326 audit(558.049:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc31752b779 code=0x7ffc0000 [ 577.674982][ T30] audit: type=1326 audit(558.049:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc317586567 code=0x7ffc0000 [ 577.723152][ T30] audit: type=1326 audit(558.049:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc31752b779 code=0x7ffc0000 [ 577.756967][ T30] audit: type=1326 audit(558.049:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc317586567 code=0x7ffc0000 [ 577.793018][T11669] netlink: 'syz.6.1467': attribute type 10 has an invalid length. [ 577.823616][T11669] macvlan1: entered allmulticast mode [ 577.833474][T11669] veth1_vlan: entered allmulticast mode [ 577.845275][T11669] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 578.334434][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 578.408428][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 578.587950][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 579.026374][T11708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1486'. [ 579.367499][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1492'. [ 579.388881][T11721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 580.676884][T11754] netlink: 'syz.6.1504': attribute type 3 has an invalid length. [ 580.890740][T11758] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 580.890740][T11758] program syz.2.1506 not setting count and/or reply_len properly [ 582.245471][T11792] lo speed is unknown, defaulting to 1000 [ 582.548065][T11809] macvlan0: entered allmulticast mode [ 582.555289][T11809] veth1_vlan: entered allmulticast mode [ 582.565840][T11809] team0: Port device macvlan0 added [ 582.633791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.640458][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.764818][T11821] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1532'. [ 582.814563][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 582.832478][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 583.131592][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 583.131607][ T30] audit: type=1400 audit(563.372:1274): avc: denied { load_policy } for pid=11831 comm="syz.6.1537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 583.244288][ T30] audit: type=1326 audit(563.484:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.292781][ T30] audit: type=1326 audit(563.503:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.360181][ T30] audit: type=1326 audit(563.512:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.410739][ T30] audit: type=1326 audit(563.512:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.436616][T11841] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 583.452235][T11841] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 583.484060][ T30] audit: type=1326 audit(563.512:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.524848][T11832] SELinux: failed to load policy [ 583.559444][ T30] audit: type=1326 audit(563.512:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.606177][ T30] audit: type=1326 audit(563.512:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.687915][ T30] audit: type=1326 audit(563.512:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 583.711249][ T30] audit: type=1326 audit(563.512:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.5.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f5f8f6c9 code=0x7ffc0000 [ 584.476377][T11692] Set syz1 is full, maxelem 65536 reached [ 584.658092][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 584.913884][T11876] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 585.038105][T11883] netlink: 'syz.5.1551': attribute type 13 has an invalid length. [ 585.142980][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 585.285741][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.293046][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.307183][T11883] bond_slave_0: left promiscuous mode [ 585.315332][T11883] bond_slave_1: left promiscuous mode [ 585.367223][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.378403][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.460771][ T5897] lo speed is unknown, defaulting to 1000 [ 585.475504][T11880] macsec1: entered allmulticast mode [ 585.480794][ T5897] syz0: Port: 1 Link DOWN [ 585.493916][T11880] bridge0: entered allmulticast mode [ 585.502213][T11880] bridge0: port 3(macsec1) entered blocking state [ 585.508965][T11880] bridge0: port 3(macsec1) entered disabled state [ 585.517205][T11880] bridge0: left allmulticast mode [ 585.534646][ T5882] syz2: Port: 1 Link DOWN [ 585.540361][ T7212] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.575494][ T7212] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.644792][ T7212] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.671417][ T7212] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.131444][T11915] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 587.325787][T11947] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 587.368571][T11947] team0: Port device dummy0 added [ 587.403164][T11947] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 587.812631][T11947] team0: Port device dummy0 removed [ 587.960459][T11947] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 588.124784][T11954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.252324][T11954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.487415][T11936] lo speed is unknown, defaulting to 1000 [ 588.524003][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 588.540103][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1592'. [ 588.794274][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 588.794289][ T30] audit: type=1400 audit(568.676:1383): avc: denied { ioctl } for pid=11985 comm="syz.6.1599" path="socket:[41033]" dev="sockfs" ino=41033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.834869][ T30] audit: type=1400 audit(568.676:1384): avc: denied { create } for pid=11985 comm="syz.6.1599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 588.876060][T11992] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1601'. [ 588.938356][T11995] program syz.5.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.114803][ T30] audit: type=1326 audit(568.975:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.148829][ T30] audit: type=1326 audit(568.975:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.171884][ T30] audit: type=1326 audit(568.975:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.196192][ T30] audit: type=1326 audit(568.975:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.275850][ T30] audit: type=1326 audit(568.975:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.303543][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 589.312424][ T30] audit: type=1326 audit(568.975:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.312465][ T30] audit: type=1326 audit(568.975:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 589.312504][ T30] audit: type=1326 audit(568.975:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 591.046341][T12043] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.129225][T12043] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.209007][T12043] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.398608][ T6318] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.414133][ T3038] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.415133][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1630'. [ 591.441038][ T6318] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.459740][ T60] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.851320][T12090] IPv6: Can't replace route, no match found [ 592.107154][T12106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1651'. [ 592.536207][T12133] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 592.673558][T12119] lo speed is unknown, defaulting to 1000 [ 592.709562][T12144] ÿ: renamed from bond_slave_0 (while UP) [ 593.256462][ T5928] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 593.671622][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 593.772559][ T5928] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 593.795412][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.840821][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 593.894314][ T5928] pvrusb2: ********** [ 593.902457][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.077708][ T5928] pvrusb2: Important functionality might not be entirely working. [ 594.146989][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.220956][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 594.220970][ T30] audit: type=1326 audit(573.756:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31758f6c9 code=0x7ffc0000 [ 594.266088][ T5928] pvrusb2: ********** [ 594.463864][ T2341] pvrusb2: Invalid write control endpoint [ 594.758778][ T5928] usb 6-1: USB disconnect, device number 29 [ 594.792762][ T2341] pvrusb2: Invalid write control endpoint [ 594.807090][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 595.374693][T12195] lo speed is unknown, defaulting to 1000 [ 595.383217][T12194] siw: device registration error -23 [ 595.390783][T12196] smc: removing ib device syz2 [ 595.893112][T12196] ------------[ cut here ]------------ [ 595.898596][T12196] WARNING: CPU: 0 PID: 12196 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 595.909363][T12196] Modules linked in: [ 595.913406][T12196] CPU: 0 UID: 0 PID: 12196 Comm: syz.6.1683 Not tainted syzkaller #0 PREEMPT(full) [ 595.922771][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.932817][T12196] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 595.938275][T12196] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 55 0a 38 f9 e8 50 0a 38 f9 90 <0f> 0b 90 5b e9 46 0a 38 f9 e8 01 97 a0 f9 eb da 66 66 2e 0f 1f 84 [ 595.957986][T12196] RSP: 0018:ffffc90002f271b8 EFLAGS: 00010246 [ 595.964095][T12196] RAX: 0000000000080000 RBX: ffff88807f039358 RCX: ffffc9001d201000 [ 595.972072][T12196] RDX: 0000000000080000 RSI: ffffffff88850350 RDI: ffff88807f0393d8 [ 595.980040][T12196] RBP: ffffffff888367f0 R08: 0000000000000005 R09: 0000000000000001 [ 595.987981][T12196] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f038698 [ 595.995962][T12196] R13: ffff88807f037fe0 R14: ffff88807f037fe0 R15: ffff88807f0390b8 [ 596.003994][T12196] FS: 00007f566e8456c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 596.012963][T12196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.019526][T12196] CR2: 0000001b342fdff8 CR3: 000000005e80a000 CR4: 00000000003526f0 [ 596.027500][T12196] Call Trace: [ 596.030753][T12196] [ 596.033677][T12196] rxe_dealloc+0x25/0xc0 [ 596.037897][T12196] ib_dealloc_device+0x49/0x230 [ 596.042718][T12196] __ib_unregister_device+0x396/0x480 [ 596.048083][T12196] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 596.053960][T12196] ib_unregister_device_and_put+0x5a/0x80 [ 596.059685][T12196] nldev_dellink+0x21f/0x320 [ 596.064251][T12196] ? __pfx_nldev_dellink+0x10/0x10 [ 596.069390][T12196] ? cap_capable+0xb3/0x250 [ 596.073873][T12196] ? bpf_lsm_capable+0x9/0x10 [ 596.078537][T12196] ? security_capable+0x7e/0x260 [ 596.083451][T12196] ? ns_capable+0xd7/0x110 [ 596.087860][T12196] ? __pfx_nldev_dellink+0x10/0x10 [ 596.092942][T12196] rdma_nl_rcv_msg+0x38a/0x6e0 [ 596.097701][T12196] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 596.102958][T12196] ? __lock_acquire+0x622/0x1c90 [ 596.107894][T12196] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 596.114281][T12196] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 596.121216][T12196] ? netlink_deliver_tap+0x1ae/0xd30 [ 596.126481][T12196] netlink_unicast+0x5aa/0x870 [ 596.131248][T12196] ? __pfx_netlink_unicast+0x10/0x10 [ 596.136513][T12196] netlink_sendmsg+0x8c8/0xdd0 [ 596.141292][T12196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.146571][T12196] ____sys_sendmsg+0xa98/0xc70 [ 596.151327][T12196] ? copy_msghdr_from_user+0x10a/0x160 [ 596.156762][T12196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.162042][T12196] ? __pfx_futex_wake_mark+0x10/0x10 [ 596.167315][T12196] ___sys_sendmsg+0x134/0x1d0 [ 596.171986][T12196] ? futex_private_hash_put+0x176/0x300 [ 596.177506][T12196] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.182711][T12196] ? __lock_acquire+0x622/0x1c90 [ 596.187641][T12196] __sys_sendmsg+0x16d/0x220 [ 596.192205][T12196] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.197312][T12196] ? sched_clock_cpu+0x6c/0x530 [ 596.202143][T12196] ? irq_work_single+0x13a/0x260 [ 596.207079][T12196] do_syscall_64+0xcd/0xfa0 [ 596.211562][T12196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.217449][T12196] RIP: 0033:0x7f566d98f6c9 [ 596.221838][T12196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.241460][T12196] RSP: 002b:00007f566e845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.249921][T12196] RAX: ffffffffffffffda RBX: 00007f566dbe6270 RCX: 00007f566d98f6c9 [ 596.257926][T12196] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 596.265892][T12196] RBP: 00007f566da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.273878][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.281842][T12196] R13: 00007f566dbe6308 R14: 00007f566dbe6270 R15: 00007ffef0744a48 [ 596.289818][T12196] [ 596.292815][T12196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 596.300066][T12196] CPU: 0 UID: 0 PID: 12196 Comm: syz.6.1683 Not tainted syzkaller #0 PREEMPT(full) [ 596.309421][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 596.319446][T12196] Call Trace: [ 596.322699][T12196] [ 596.325603][T12196] dump_stack_lvl+0x3d/0x1f0 [ 596.330173][T12196] vpanic+0x640/0x6f0 [ 596.334133][T12196] ? rxe_pool_cleanup+0x41/0x60 [ 596.338956][T12196] panic+0xca/0xd0 [ 596.342660][T12196] ? __pfx_panic+0x10/0x10 [ 596.347084][T12196] check_panic_on_warn+0xab/0xb0 [ 596.352006][T12196] __warn+0xf6/0x3c0 [ 596.355880][T12196] ? rxe_pool_cleanup+0x41/0x60 [ 596.360709][T12196] report_bug+0x3c3/0x580 [ 596.365026][T12196] ? rxe_pool_cleanup+0x41/0x60 [ 596.369858][T12196] handle_bug+0x184/0x210 [ 596.374170][T12196] exc_invalid_op+0x17/0x50 [ 596.378655][T12196] asm_exc_invalid_op+0x1a/0x20 [ 596.383486][T12196] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 596.388924][T12196] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 55 0a 38 f9 e8 50 0a 38 f9 90 <0f> 0b 90 5b e9 46 0a 38 f9 e8 01 97 a0 f9 eb da 66 66 2e 0f 1f 84 [ 596.408510][T12196] RSP: 0018:ffffc90002f271b8 EFLAGS: 00010246 [ 596.414570][T12196] RAX: 0000000000080000 RBX: ffff88807f039358 RCX: ffffc9001d201000 [ 596.422521][T12196] RDX: 0000000000080000 RSI: ffffffff88850350 RDI: ffff88807f0393d8 [ 596.430471][T12196] RBP: ffffffff888367f0 R08: 0000000000000005 R09: 0000000000000001 [ 596.438418][T12196] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f038698 [ 596.446369][T12196] R13: ffff88807f037fe0 R14: ffff88807f037fe0 R15: ffff88807f0390b8 [ 596.454322][T12196] ? __pfx_rxe_dealloc+0x10/0x10 [ 596.459242][T12196] ? rxe_pool_cleanup+0x40/0x60 [ 596.464078][T12196] ? rxe_pool_cleanup+0x40/0x60 [ 596.468908][T12196] rxe_dealloc+0x25/0xc0 [ 596.473137][T12196] ib_dealloc_device+0x49/0x230 [ 596.477982][T12196] __ib_unregister_device+0x396/0x480 [ 596.483349][T12196] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 596.489234][T12196] ib_unregister_device_and_put+0x5a/0x80 [ 596.494936][T12196] nldev_dellink+0x21f/0x320 [ 596.499505][T12196] ? __pfx_nldev_dellink+0x10/0x10 [ 596.504650][T12196] ? cap_capable+0xb3/0x250 [ 596.509144][T12196] ? bpf_lsm_capable+0x9/0x10 [ 596.513803][T12196] ? security_capable+0x7e/0x260 [ 596.518728][T12196] ? ns_capable+0xd7/0x110 [ 596.523126][T12196] ? __pfx_nldev_dellink+0x10/0x10 [ 596.528217][T12196] rdma_nl_rcv_msg+0x38a/0x6e0 [ 596.532962][T12196] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 596.538231][T12196] ? __lock_acquire+0x622/0x1c90 [ 596.543160][T12196] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 596.549556][T12196] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 596.556479][T12196] ? netlink_deliver_tap+0x1ae/0xd30 [ 596.561752][T12196] netlink_unicast+0x5aa/0x870 [ 596.566506][T12196] ? __pfx_netlink_unicast+0x10/0x10 [ 596.571784][T12196] netlink_sendmsg+0x8c8/0xdd0 [ 596.576537][T12196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.581816][T12196] ____sys_sendmsg+0xa98/0xc70 [ 596.586562][T12196] ? copy_msghdr_from_user+0x10a/0x160 [ 596.592002][T12196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.597271][T12196] ? __pfx_futex_wake_mark+0x10/0x10 [ 596.602539][T12196] ___sys_sendmsg+0x134/0x1d0 [ 596.607199][T12196] ? futex_private_hash_put+0x176/0x300 [ 596.612732][T12196] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.617912][T12196] ? __lock_acquire+0x622/0x1c90 [ 596.622863][T12196] __sys_sendmsg+0x16d/0x220 [ 596.627439][T12196] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.632535][T12196] ? sched_clock_cpu+0x6c/0x530 [ 596.637376][T12196] ? irq_work_single+0x13a/0x260 [ 596.642304][T12196] do_syscall_64+0xcd/0xfa0 [ 596.646795][T12196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.652667][T12196] RIP: 0033:0x7f566d98f6c9 [ 596.657067][T12196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.676652][T12196] RSP: 002b:00007f566e845038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.685048][T12196] RAX: ffffffffffffffda RBX: 00007f566dbe6270 RCX: 00007f566d98f6c9 [ 596.692999][T12196] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 596.700960][T12196] RBP: 00007f566da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.708908][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.716855][T12196] R13: 00007f566dbe6308 R14: 00007f566dbe6270 R15: 00007ffef0744a48 [ 596.724815][T12196] [ 596.728015][T12196] Kernel Offset: disabled [ 596.732312][T12196] Rebooting in 86400 seconds..