last executing test programs: 8m42.286449486s ago: executing program 3 (id=474): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000071, 0x8, 0x0, 0x0}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x53, 0x7, 0x7fffffff}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r5, 0x1, 0x80000}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"\x00\x00\x00'], 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000080)={0x13, 0x10, 0x8, {0x0, r8}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7], 0xc8) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="b8", 0x1}], 0x1) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r10, 0xffffffffffffffff, 0x0) unshare(0x64000600) 8m39.449297949s ago: executing program 3 (id=482): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r1, 0x4, 0x24400) fsync(r1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2e, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x1c}}, 0x4000) dup(r5) 8m37.258342442s ago: executing program 3 (id=486): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x3) r2 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r4, r4) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x6, "db1bda4817327faca1aa32f56f658a40cf5b321e5f03ebdb4011c458d41f325d"}) r5 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 8m35.343471959s ago: executing program 3 (id=490): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r3, 0x25, 0x0, @val=@netkit}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x311880, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unshare(0x8000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x4ee1, &(0x7f00000002c0)={0x0, 0x3594, 0x800, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000440), &(0x7f0000000000)) syz_io_uring_submit(r10, r8, r9, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000540)='N', 0x1, 0x80, 0x1}) io_uring_enter(r7, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r11 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r11, 0x0, 0x0) 8m34.480576972s ago: executing program 3 (id=493): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010102, @empty, 0x0, "07d577be361d4324f5eb1391e20a54144a0345c570d1dad679f7e2c9455dc66d", 0x9, 0x5, 0x1, 0xfffffff7}, 0x3c) io_uring_setup(0x40b3, &(0x7f0000000400)={0x0, 0xf6b8, 0x40, 0x2, 0x6f}) r3 = getpgrp(0x0) timerfd_create(0x5, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r3, r4) 8m33.363550085s ago: executing program 3 (id=494): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x2, 0xc, @loopback, @mcast2, 0x10, 0x8060, 0xe7}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0xc00) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$9p(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m18.196515409s ago: executing program 32 (id=494): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x2, 0xc, @loopback, @mcast2, 0x10, 0x8060, 0xe7}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0xc00) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$9p(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.569630269s ago: executing program 4 (id=2060): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x12b202) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000060000000000000002000000850000003000000000000000000000005b09fe29fde7243705bf2dabd78504afb4ce4a69c29acced62e40d8a512db56fbcfb6a70449eed9c55df0231b33595f44de8a510c1e29b9df2e0b6405091f3e61d36d378e6554319f473949baa72532e559a4ed5c9e7092c3c273f219790d68b74a70b5a7d37bc821b2ef924cebc0083e40682a63925fe9314d56e1fa988a61e77ceb680f6a8796a50a6d51ff5d6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0xfc40a000) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x1, 0xd, 0x0, 0x2, 0x2, 0x53ecfbd8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc04c885, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x3cf2, 0xf181, 0x9, 0x11, 0x8, 0x81}, &(0x7f00000001c0)=0x9c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x5, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r7 = dup(r1) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @rand_addr=' \x01\x00', 0x80000001}, {0xa, 0x4e22, 0x4, @mcast1, 0x9}, 0xffffffffffffffff, 0x7}}, 0x48) 6.599481861s ago: executing program 4 (id=2068): socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x5, 0xedbee61c307273fa) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000000000000000800450000571da7bbd3b06c240000000000739078e0000002e000000100000000001090780200000000000000"], 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0x2850, 0x80, 0x0, 0x24c}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x137d00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x5, r5, r4}) 5.288585358s ago: executing program 4 (id=2081): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x88}}, 0x20000811) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16=r7, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0x9c, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r8, @ANYRES8=r6, @ANYBLOB="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"], 0x38}}, 0x8000) 5.074338774s ago: executing program 4 (id=2082): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) (fail_nth: 3) 4.583044835s ago: executing program 4 (id=2086): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x18, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) 4.411660779s ago: executing program 0 (id=2090): syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r0 = io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r2, 0x12) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xcc) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x4, @thr={&(0x7f0000000040)="372c676a104729699c15d485d79d32", &(0x7f0000000680)="cf715ae79ab85a28d2cb65857a79aa5927e5f1e3fd1884aa7060ff49f65a39becde575e44558030a7d56be9331ccbfde71045cb0e91f0e55bff41a0f4326c7723949b0959e481f098d34691de9c6f3917b0522fff339cffa18b992acc03b1f4c3e0c0b8b1be3781f778aa8ea7a9a4cf7628d9c0e8efdc56f81da114fd84bd4321c19ee81450f3096d8721d17af93897d5e46003d099c632134260300f1c3d3bd1223d02af9ccbf5e756e1f34cf740c7f6310df3ef47ee01518b5a00d930eaed2ffe3fa949c9b849561dd80f57b783eeb1ab60138ae8cd85d51285295e658e50efbac16a20ec90796137b1a87fc5cdc1f0580e4a2da268e5a3e61e3e5"}}, &(0x7f0000000340)) syz_io_uring_setup(0x2685, &(0x7f0000000200)={0x0, 0xe411, 0x400, 0x3, 0x1c8, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r3 = io_uring_setup(0x518, &(0x7f0000000400)={0x0, 0xddab, 0x0, 0x8503fe, 0x8100014d}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0xd) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r6, 0x0, 0x0) close_range(r3, r6, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) openat2(0xffffffffffffff9c, &(0x7f000001bd80)='./file0\x00', &(0x7f000001bdc0)={0xe0100, 0x80, 0x2}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 3.316091678s ago: executing program 1 (id=2092): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xf51) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="3a6440b4", 0x4}], 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) r3 = accept4$alg(r1, 0x0, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2b2}}, './file0\x00'}) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0f1900000000fcffffff0c00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0xc0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100fcffffff10000000ffffffff00000000000000000000000000000000000000000000ffffac1414aa00000000f7fb20020a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000040000000000000002010203000000000401050064010102000000000000000000000000000004d43200000000000000200100000000000000000000000000000635000000000200000000000000000000000000fe8000000000000000000000000000aa000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000007000000ac141428000000000000000000000000000004d332000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000604b5039465f7e8bc6dc000100"], 0x1bc}}, 0x4080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001a80)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={0x0, 0x6, 0xc}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000a80)={{r5}, r9, 0x1a, @unused=[0x665d5542, 0x7ff, 0x7f, 0x9], @devid=r10}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001700)={{r4}, r9, 0x14, @unused=[0x5, 0x1, 0x0, 0x6], @name="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"}) 3.308166837s ago: executing program 4 (id=2093): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) clock_getres(0x7, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000c80)={{&(0x7f0000000c00)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x8}, {&(0x7f0000000300)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}, {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x8}}}}}}}, {&(0x7f0000000b80)={'Accelerator\x00', {&(0x7f0000000480)=@adf_hex={@normal='NumberCyInstances\x00', {0x5}}}, {&(0x7f0000000b00)={'KERNEL\x00'}}}}}}, 0x2f}) listen(r1, 0xf) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x3, 0x4a}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0xf, 0x3}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x80, 0x1, 0x63, 0x10, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x2b, &(0x7f0000000140)=@string={0x2b, 0x3, "16ec5ff793d0d9a0eb30c8621e476686b3e372125dcdd99993e608fdcec07ddc256bd2b41fe14bc17d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x4b, &(0x7f00000001c0)=@string={0x4b, 0x3, "0217bfa5dd11f60b870b22f1a034473798946efc66b2cf7423ef763715a45f132104ef0ac9c951ca03c425034c08a110cff9343340f5b35f6d853c0b5b8cef2033b2b88f4d722f5c02"}}]}) 2.795409645s ago: executing program 1 (id=2094): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="1931ab5cab8ab678bf", 0x9}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 2.787989838s ago: executing program 1 (id=2096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df"], 0xc) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x89, 0x0, 0x1, 0x12}}}], 0x18}, 0x40440c0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) mprotect(&(0x7f0000001000/0x11000)=nil, 0x11000, 0x6000000) getsockopt$inet_buf(r7, 0x0, 0x30, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000080)=[0x7615cb14, 0x101]) 2.545733211s ago: executing program 0 (id=2098): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x0, 0x110002, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000340)={'veth1\x00', {0x2, 0x4e21, @local}}) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x26) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) ioctl$PPPIOCGL2TPSTATS(r6, 0x80047453, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 2.462923356s ago: executing program 0 (id=2100): uname(&(0x7f0000000080)=""/209) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x39}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[], [], 0x2f}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$BLKROSET(r1, 0x125d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB="3e0a048a02f9bd1d7eb8"], 0x24}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_writev(r7, &(0x7f0000001180)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000f00)=""/90, 0x5a}, {&(0x7f0000000f80)=""/167, 0xa7}, {&(0x7f0000001040)=""/119, 0x77}, {&(0x7f00000010c0)=""/32, 0x20}, {&(0x7f0000001100)=""/120, 0x78}], 0x6, &(0x7f00000038c0)=[{&(0x7f0000001200)=""/173, 0xad}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/142, 0x8e}, {&(0x7f0000002380)=""/115, 0x73}, {&(0x7f0000002400)=""/204, 0xcc}, {&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f0000002600)=""/243, 0xf3}, {&(0x7f0000002700)=""/103, 0x67}, {&(0x7f0000003800)=""/89, 0x59}, {&(0x7f0000002800)=""/4096, 0x1000}], 0xa, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r6, &(0x7f0000002780)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x42, 0x107, 0x70bd25, 0x25dfdbfa, {0x4, 0x7c}, [@typed={0x4, 0x80, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4094}, 0xc000) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x3) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r2, &(0x7f0000000e80)=[{&(0x7f00000002c0)="61d07a468c42d79520815d315fb42a1107d2a4bf3584ebc09e2bf0443d7f8a457b5e6651b0eb436edbfbeb3335e49e37386711f4be3ec20ff283e1dd29b656fa9f37d24d4086705b3afc105e95f5144263009a381111", 0x56}, {&(0x7f0000000340)="b4517188d2663c70ccb7405c1686a1462294a4c3ff80dd449190706bb7f2f6ae922ace3adcc73fa599fc5a953f5f4b5a82f81dd30d81a6463272f5ab7660bbd6d13a05cd84f5fd579fe80e7c2d8f5e3d3e4108e10841ed393d9cb857b2e94d7c2c961022b96d5e684c1b88e1cc76a4ad72cdd42d76ea0b853db5cbb574457bdbe9a139837e18922e4f1ac4904c8cab1581b7197a0b6ce72dfb97b70ba95fb9597edfd755816e12e69646b635410f4f715da8f63ff4afff1465363c4fc4b7c682f0504073dbdd7b02fd77492ad425656739caa27bac1159a09b", 0xd9}, {&(0x7f0000000500)="f00bc50f0d134a2805e5e7726a801e1dfec868a55d8b8f0b745e3830dd865f73664693c1c1244b060f11ad941cf0b8fba392379f8ae2770146923a33358831678e0ef5c771d52f095f95005a51320c7fe33a0ef6fd4f7a294413a235ca74b55e2332d942e8bf8981c78b698269249bed5a7fe7dd67afbef12c910b402cbf33ec486ffb3c4503ced8b0e2fa6bada7afd31d12de886b6db209a1d68232c8db34a6de33d4df314cfec306a1ef8788c952ebda58dbe8ca98222cf38a9c2b", 0xbc}, {&(0x7f00000005c0)="be8e7d1fb06c4ba76fad8dafe7bcba8b412fa21c20963bb97783d4e3712cf18fa72d1b59f6812c9f3ae21bbac2bff9d204284686a436517e749d8d4d53dab09f812ebf4ffe7404df58c8b9eb392c0ffb315a93a462507dfe6c6d788c0e6c080ac341e5f920affd2158d9cbc009aa2312a24bfb66141ef384ff3020188038db263de763306290ce20f78c8c0d989a86381caafceaf0b3a40b14a897cd686b46f04a42f32c91d7da78317f3eb2da0817b43bce7f6cd65347557f9509ef691ca236ac3eeb589c2ed9", 0xc7}, {&(0x7f00000006c0)="6902d8f86c1b4973e9b61dd0e9c7cd598d278cfc1e1266c514c071b339a78fd1e07b1b2e237173062a8e56d74f1f0c45ade722f97e74c84c962ead23cf66a721f0e13c13557af44eecba5ef1752cafb19ac6ed8374123e2b", 0x58}, {&(0x7f0000000740)="b6a65d73e5e23c308cb5d25c1dd1c9cbc4565a1625eea1f8778baf464aa3226f4670d5fd8d30bb9d6e9f40ec0ed9d4d0b68d7eebc5afe6e7d1e31aa49013ec234128d280db7f5e2354", 0x49}, {&(0x7f0000000d80)="d2905757c9a53c1608d8df253fe773d75a117e57655f675fddab2315f78205fa634cca6a2d324acc09e52da915c7432927700cf704fecd10fa8f0938e88a63ee13aa988a1d67e5ed90b86f", 0x4b}, {&(0x7f0000000e00)="8b1b8162402efa9e4e6490439e0b5ad59dd93f768ae27fa6db7e23929d386029d3a95768b128f3fff3276359e878be089df6a1d40abdc12d62eba27316458fe38194a5df6d761661d0e698ae2f5046956ccf473373955ce1c193382d310dfb4741c36449280062bf", 0x68}], 0x8) 2.247443983s ago: executing program 0 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x44}}, 0x40048a4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010044bd7000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="18005e8008000200000000010c000100ff"], 0x34}}, 0x0) ptrace(0x4206, r3) tkill(r3, 0x2f) socket$netlink(0x10, 0x3, 0xc) ptrace(0x4208, r3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@acquire={0x1ec, 0x17, 0x100, 0x70bd25, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {@in6=@mcast1, @in6=@loopback, 0x4e22, 0x0, 0x4e20, 0xfff9, 0xa, 0x80, 0x20, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@empty, 0x4e24, 0x8, 0x4e21, 0x200, 0x2, 0x0, 0x100}, {0x9, 0x14d, 0x13b8, 0xfffffffffffffff7, 0x8, 0x95, 0x69, 0x2}, {0x5, 0x1, 0x10000, 0x9}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x1, 0x2}, 0x3, 0xa, 0x2, 0x70bd2c}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd26, 0x70bd21, 0x70bd26, 0x2, [0x776, 0x3]}}, @sec_ctx={0x65, 0x8, {0x61, 0x8, 0x0, 0x81, 0x59, "286388de5715132c285aad2a73df1c67d050d7924cb5cdf0596d3699d4f0106c6e18001843b3d46fb719b9a40d0d20650c1fc71b01620c9f30e059d7233c428c92019776137d62bdc6b24085d940a114b37d70180647e8215c"}}, @lifetime_val={0x24, 0x9, {0xb6f, 0x5, 0x1, 0x40}}, @etimer_thresh={0x8, 0xc, 0xe}, @mark={0xc, 0x15, {0x35075d, 0x7}}]}, 0x1ec}}, 0x4080010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x0, 0xfffffffb, 0x10000001, 0xcc7, 0x8, 0x7, 0x7, 0x100, 0x2, 0x1, 0x1, 0x1, 0x2, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x1002, 0xf28, 0x20001e5b, 0xb, 0x6, 0x3c, 0x8, 0x6, 0x0, 0xfffefff8, 0xffffffff]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, 0x0, 0x0) 2.175853348s ago: executing program 5 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) mmap$dsp(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x3000009, 0x11, r2, 0x0) r3 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800270002a7135be3175dd8aaaa11500f41ac000000050019010f000020"], 0x2c}}, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r3, 0x742f, 0x77ae, 0x0, 0x0, 0x0) 2.175202795s ago: executing program 1 (id=2106): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="1931ab5cab8ab678bf", 0x9}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 2.142184104s ago: executing program 1 (id=2107): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x1, 0x1}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) r1 = epoll_create1(0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x4, 0xffff, 0x6, 0x7fffffff}}, 0x2180c0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0xfffffffffffffffc, 0xfffc}) 1.523714603s ago: executing program 2 (id=2108): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) io_setup(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) getpid() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x305182, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xce, &(0x7f0000000180), &(0x7f0000000080)=0xfffffffffffffd9c) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r4, 0x80000000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r6, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000100)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x1ffffffc, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002f80)=""/213, &(0x7f0000003080)=0xd5) 1.290553454s ago: executing program 0 (id=2109): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000071, 0x8, 0x0, 0x0}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x53, 0x7, 0x7fffffff}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r5, 0x1, 0x80000}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"\x00\x00\x00'], 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000080)={0x13, 0x10, 0x8, {0x0, r8}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7], 0xc8) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="b8", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x64000600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.195490227s ago: executing program 2 (id=2110): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x100000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c6, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x2, 0x8d], 0x100000, 0x140}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 1.194376037s ago: executing program 5 (id=2111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002c00070100000000ffdbdf25027c0000180001"], 0x3c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.144215593s ago: executing program 2 (id=2112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x6, 0x800, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r6, 0x0, 0x500) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x4b67, &(0x7f0000000180)) ioctl$TCXONC(r8, 0x540a, 0x2) r9 = socket(0x22, 0x2, 0x2) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000040)={r7, 0x0, 0x0, 0x4, 0x3, 0x4, [0x8, 0x7, 0x8, 0x6, 0xf6, 0xfffffffffffffb40]}) ioctl$IMGETCOUNT(r9, 0x80044944, 0x0) 1.012198869s ago: executing program 5 (id=2113): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000001600), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa101000100000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f0000000580)={0x0, 0x3, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="aad3c3ec11a4b6044733534aa761bb813f06598edc3354bd5f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb2b}, 0x94) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x62}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x6}, 0x94) fchdir(r5) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x6}) 944.030751ms ago: executing program 2 (id=2114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd2c, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="00000000f99de68afba46c8e3c3317d063a82d7547664710362e94410ea2125bae6c98236a096e637979884feb41d494a1144b15f67ca1c100000000000000a4b286a6e1419f0cf7fff8690dd2a9f51cf8036e596b66492c8121d5196a49de1e98537e110000000000000000000000000000000000000000000000000000da70918ee9271f4881b513", 0x89) 943.326338ms ago: executing program 1 (id=2115): syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) prlimit64(r3, 0xb, &(0x7f0000000100)={0x4, 0x4}, &(0x7f0000001000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket(0x800000018, 0x1, 0x0) 905.461814ms ago: executing program 5 (id=2116): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d38a08400a113011760e0000000109022400017f00000009045f0002e35e2c0009050c37100084fa0509050702"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120110015ea38608480b08106e14010203010902988dec34096f709ac9d61e910919120001080410060904890000ceea9309"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x2, r7, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}) io_uring_enter(r3, 0x400003, 0xc39a, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 783.117928ms ago: executing program 2 (id=2117): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="1931ab5cab8ab678bf", 0x9}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 683.47871ms ago: executing program 2 (id=2118): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x3}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000004700)=""/4112, 0x1010}], 0x1, 0x4800, 0x0) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000400)={0x0, 0x36bd, 0x100, 0x3, 0x1b, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x7ffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872400dfafca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) 112.258704ms ago: executing program 5 (id=2119): ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) 99.72319ms ago: executing program 0 (id=2120): pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x800) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r1) io_setup(0x9, &(0x7f0000000240)=0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000300)) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1f9d}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x121000, 0x84) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x2, r9}]) 0s ago: executing program 5 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) kernel console output (not intermixed with test programs): changing to 7 [ 593.412431][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.422837][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.437574][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 593.447114][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.460288][ T10] usb 3-1: config 0 descriptor?? [ 593.964604][T11352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1413'. [ 594.342073][ T10] sony 0003:054C:0268.0023: unknown main item tag 0x2 [ 594.348957][ T10] sony 0003:054C:0268.0023: unknown main item tag 0x0 [ 594.359629][ T798] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 594.367300][ T10] sony 0003:054C:0268.0023: unknown main item tag 0x0 [ 594.378255][ T798] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 594.386218][ T10] sony 0003:054C:0268.0023: unknown main item tag 0x0 [ 594.399028][ T30] audit: type=1400 audit(2000000006.360:1079): avc: denied { ioctl } for pid=11351 comm="syz.0.1414" path="socket:[40004]" dev="sockfs" ino=40004 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 594.424226][ T798] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 594.424256][ T798] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 594.424276][ T798] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 594.427819][ T10] sony 0003:054C:0268.0023: unknown main item tag 0x0 [ 594.459124][ T798] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 594.572392][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.631726][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.663502][T11353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.693882][T11334] rdma_op ffff8880584e79f0 conn xmit_rdma 0000000000000000 [ 594.747758][ T10] sony 0003:054C:0268.0023: hiddev0,hidraw1: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 594.750295][T11353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.759637][ T10] sony 0003:054C:0268.0023: failed to claim input [ 594.804386][ T10] usb 3-1: USB disconnect, device number 40 [ 594.874971][ T798] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -110 [ 594.909451][ T798] usb 5-1: USB disconnect, device number 43 [ 594.920414][T11359] fido_id[11359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 594.945222][T11363] PKCS8: Unsupported PKCS#8 version [ 595.044698][T11367] PKCS8: Unsupported PKCS#8 version [ 595.097068][T11370] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 595.171292][T11370] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 595.192160][T11370] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 595.221454][ T30] audit: type=1400 audit(2000000007.180:1080): avc: denied { create } for pid=11368 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 595.276566][ T30] audit: type=1400 audit(2000000007.220:1081): avc: denied { write } for pid=11368 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 595.415019][ T30] audit: type=1400 audit(2000000007.380:1082): avc: denied { append } for pid=11376 comm="syz.2.1422" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 595.496477][ T30] audit: type=1400 audit(2000000007.460:1083): avc: denied { mounton } for pid=11380 comm="syz.2.1424" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 595.520808][T11381] Invalid source name [ 595.731360][ T798] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 596.272681][T11392] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 596.280548][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1428'. [ 596.345055][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 596.358357][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.369011][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.384270][ T798] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 596.398730][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.400548][T11397] PKCS8: Unsupported PKCS#8 version [ 596.429673][ T798] usb 5-1: config 0 descriptor?? [ 596.525115][T11403] overlayfs: failed to clone upperpath [ 596.771240][ T5914] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 596.847620][ T798] hid-multitouch 0003:0457:07DA.0025: item fetching failed at offset 30/34 [ 596.865424][ T798] hid-multitouch 0003:0457:07DA.0025: probe with driver hid-multitouch failed with error -22 [ 596.931376][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 596.942521][ T5914] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 596.963433][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 596.975521][ T5914] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 596.986181][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.997051][ T5914] usb 6-1: config 0 descriptor?? [ 597.072139][T11379] vxcan1 speed is unknown, defaulting to 1000 [ 597.299236][T11379] lo speed is unknown, defaulting to 1000 [ 597.428622][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 597.544318][ T30] audit: type=1400 audit(2000000009.510:1084): avc: denied { connect } for pid=11414 comm="syz.1.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 597.771635][ T5914] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 597.930832][ T29] usb 5-1: USB disconnect, device number 44 [ 598.043138][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 598.172001][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.197071][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.218590][ T5914] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -110 [ 598.360055][ T30] audit: type=1400 audit(2000000010.320:1085): avc: denied { setopt } for pid=11427 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 598.444903][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 598.528233][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 599.071262][T11440] PKCS8: Unsupported PKCS#8 version [ 599.196225][ T30] audit: type=1400 audit(2000000010.930:1086): avc: denied { listen } for pid=11441 comm="syz.2.1443" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 599.413926][T11449] fuse: Bad value for 'group_id' [ 599.429453][T11449] fuse: Bad value for 'group_id' [ 599.997648][ T5914] usb 6-1: USB disconnect, device number 21 [ 600.251242][ T5853] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 600.413887][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.437583][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.470022][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.504431][ T5853] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 600.531255][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.553805][ T5853] usb 5-1: config 0 descriptor?? [ 600.570746][ T30] audit: type=1400 audit(2000000012.530:1087): avc: denied { shutdown } for pid=11466 comm="syz.0.1451" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 600.677564][ T30] audit: type=1400 audit(2000000012.640:1088): avc: denied { bind } for pid=11472 comm="syz.2.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 600.752550][ T30] audit: type=1400 audit(2000000012.640:1089): avc: denied { name_bind } for pid=11472 comm="syz.2.1453" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 600.804688][ T30] audit: type=1400 audit(2000000012.640:1090): avc: denied { node_bind } for pid=11472 comm="syz.2.1453" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 601.042469][ T5853] hid_parser_main: 131 callbacks suppressed [ 601.042485][ T5853] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 601.060812][ T5853] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 601.077933][ T5853] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 601.102966][ T5853] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 601.103435][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 601.136870][ T5853] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x1 [ 601.155418][ T5853] hid-multitouch 0003:0457:07DA.0027: item fetching failed at offset 30/34 [ 601.178084][ T5853] hid-multitouch 0003:0457:07DA.0027: probe with driver hid-multitouch failed with error -22 [ 601.204388][T11483] gtp0: entered promiscuous mode [ 601.222740][T11483] gtp0: entered allmulticast mode [ 601.297405][T11459] vxcan1 speed is unknown, defaulting to 1000 [ 601.649378][T11459] lo speed is unknown, defaulting to 1000 [ 601.831353][T11503] binder: 11500:11503 ioctl 403c6f2b 2000000000c0 returned -22 [ 601.897548][T11506] netlink: 'syz.0.1459': attribute type 2 has an invalid length. [ 601.915608][T11506] tipc: Started in network mode [ 601.925086][T11506] tipc: Node identity 1340008, cluster identity 4711 [ 601.936317][T11506] tipc: Node number set to 20185096 [ 602.170293][T11510] syzkaller0: entered promiscuous mode [ 602.176060][T11510] syzkaller0: entered allmulticast mode [ 602.317860][ T5853] usb 5-1: USB disconnect, device number 45 [ 602.663806][ T30] audit: type=1400 audit(2000000014.580:1091): avc: denied { mounton } for pid=11513 comm="syz.5.1462" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 602.915237][ T5853] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 604.944352][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 604.965725][ T5853] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 605.927334][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 605.935735][ T5853] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 605.945020][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.958623][ T5853] usb 5-1: config 0 descriptor?? [ 605.966579][ T5853] usb 5-1: can't set config #0, error -71 [ 605.973926][ T5853] usb 5-1: USB disconnect, device number 46 [ 606.139653][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 606.155707][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 607.181937][ T30] audit: type=1400 audit(2000000019.140:1092): avc: denied { getopt } for pid=11540 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 607.659481][ T30] audit: type=1400 audit(2000000019.620:1093): avc: denied { write } for pid=11554 comm="syz.5.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 607.802995][ T30] audit: type=1400 audit(2000000019.760:1094): avc: denied { mount } for pid=11554 comm="syz.5.1470" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 607.827719][ T30] audit: type=1400 audit(2000000019.770:1095): avc: denied { mounton } for pid=11554 comm="syz.5.1470" path="/164/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 607.852317][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 608.062094][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 608.071027][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.093588][ T9] usb 5-1: config 0 has no interface number 0 [ 608.102259][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 608.111550][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.119600][ T9] usb 5-1: Product: syz [ 608.124515][ T9] usb 5-1: Manufacturer: syz [ 608.129173][ T9] usb 5-1: SerialNumber: syz [ 608.136708][ T9] usb 5-1: config 0 descriptor?? [ 608.147039][ T9] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 609.889840][ T5853] usb 5-1: USB disconnect, device number 47 [ 610.361315][ T798] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 610.996031][ T30] audit: type=1800 audit(2000000022.930:1096): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1475" name="bus" dev="ramfs" ino=39597 res=0 errno=0 [ 611.007671][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 611.065843][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.076307][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.089536][ T798] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 611.100105][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.124207][ T798] usb 5-1: config 0 descriptor?? [ 611.328480][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 611.348762][ T30] audit: type=1400 audit(2000000023.310:1097): avc: denied { getopt } for pid=11577 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.546324][ T798] hid-multitouch 0003:0457:07DA.0028: unknown main item tag 0x0 [ 611.553454][T11587] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1481'. [ 611.554349][ T798] hid-multitouch 0003:0457:07DA.0028: unknown main item tag 0x0 [ 611.573771][ T798] hid-multitouch 0003:0457:07DA.0028: unknown main item tag 0x0 [ 611.582260][ T798] hid-multitouch 0003:0457:07DA.0028: unknown main item tag 0x0 [ 611.583954][T11587] bridge_slave_1: default FDB implementation only supports local addresses [ 611.602046][ T798] hid-multitouch 0003:0457:07DA.0028: unknown main item tag 0x1 [ 611.611408][ T798] hid-multitouch 0003:0457:07DA.0028: item fetching failed at offset 30/34 [ 611.628079][ T798] hid-multitouch 0003:0457:07DA.0028: probe with driver hid-multitouch failed with error -22 [ 611.697800][ T30] audit: type=1400 audit(2000000023.660:1098): avc: denied { unmount } for pid=7911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 611.776429][T11558] vxcan1 speed is unknown, defaulting to 1000 [ 611.923863][T11558] lo speed is unknown, defaulting to 1000 [ 612.288545][T11582] ceph: No mds server is up or the cluster is laggy [ 612.528978][ T10] usb 5-1: USB disconnect, device number 48 [ 613.300585][T11584] kexec: Could not allocate control_code_buffer [ 614.035482][ T30] audit: type=1800 audit(2000000026.000:1099): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1489" name="bus" dev="ramfs" ino=40556 res=0 errno=0 [ 614.419787][T11628] FAULT_INJECTION: forcing a failure. [ 614.419787][T11628] name failslab, interval 1, probability 0, space 0, times 0 [ 614.481362][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.2.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.481392][T11628] Tainted: [L]=SOFTLOCKUP [ 614.481406][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 614.481416][T11628] Call Trace: [ 614.481422][T11628] [ 614.481429][T11628] dump_stack_lvl+0x100/0x190 [ 614.481456][T11628] should_fail_ex.cold+0x5/0xa [ 614.481481][T11628] should_failslab+0xc2/0x120 [ 614.481499][T11628] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 614.481524][T11628] ? __d_alloc+0x34/0xa80 [ 614.481551][T11628] __d_alloc+0x34/0xa80 [ 614.481575][T11628] d_alloc_pseudo+0x1c/0xc0 [ 614.481601][T11628] alloc_file_pseudo+0xcf/0x230 [ 614.481625][T11628] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 614.481648][T11628] ? _raw_spin_unlock+0x28/0x50 [ 614.481671][T11628] ? alloc_fd+0x476/0x790 [ 614.481692][T11628] __anon_inode_getfile+0xe8/0x280 [ 614.481723][T11628] __anon_inode_getfd+0x5c/0xe0 [ 614.481750][T11628] __x64_sys_fsopen+0x190/0x220 [ 614.481778][T11628] do_syscall_64+0x10b/0xf80 [ 614.481801][T11628] ? clear_bhb_loop+0x40/0x90 [ 614.481823][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.481841][T11628] RIP: 0033:0x7f436e99c819 [ 614.481856][T11628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.481873][T11628] RSP: 002b:00007f436f8ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 614.481891][T11628] RAX: ffffffffffffffda RBX: 00007f436ec15fa0 RCX: 00007f436e99c819 [ 614.481902][T11628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 614.481912][T11628] RBP: 00007f436f8ec090 R08: 0000000000000000 R09: 0000000000000000 [ 614.481923][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.481932][T11628] R13: 00007f436ec16038 R14: 00007f436ec15fa0 R15: 00007fff6009fe48 [ 614.481955][T11628] [ 614.746248][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 614.792511][T11638] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 614.899893][ T30] audit: type=1400 audit(2000000026.860:1100): avc: denied { append } for pid=11639 comm="syz.2.1497" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 615.021263][ T10] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 615.142892][T11644] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.209589][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.222830][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.233062][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.248390][T11644] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.274449][ T10] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 615.288419][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.303507][ T10] usb 5-1: config 0 descriptor?? [ 615.319594][T11644] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.379681][T11644] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.406276][T11647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1499'. [ 615.466976][ T472] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.489365][ T472] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.512834][ T472] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.546616][ T472] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.767031][ T10] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.783927][ T10] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.797401][ T10] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.855351][ T10] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.883004][ T10] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x1 [ 615.899921][ T10] hid-multitouch 0003:0457:07DA.0029: item fetching failed at offset 30/34 [ 615.923240][ T10] hid-multitouch 0003:0457:07DA.0029: probe with driver hid-multitouch failed with error -22 [ 615.970325][ T10] usb 5-1: USB disconnect, device number 49 [ 615.991584][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 616.151268][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 616.165677][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 616.186702][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 616.198354][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 616.216637][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.240378][ T9] usb 3-1: config 0 descriptor?? [ 616.592561][ T30] audit: type=1400 audit(2000000028.550:1101): avc: denied { create } for pid=11679 comm="syz.0.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 616.663109][ T30] audit: type=1400 audit(2000000028.550:1102): avc: denied { getopt } for pid=11679 comm="syz.0.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 617.053325][ T9] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 618.033384][ T9] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 618.051247][ T9] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 618.069619][ T9] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 618.111956][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.120702][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.184561][T11698] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.566807][ T9] corsair-cpro 0003:1B1C:0C10.002A: unknown main item tag 0x0 [ 618.580884][ T9] corsair-cpro 0003:1B1C:0C10.002A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 618.734678][T11725] fuse: fd is not a fuse device [ 618.741940][T11724] fuse: fd is not a fuse device [ 618.793741][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.796370][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1511'. [ 618.973394][ T9] corsair-cpro 0003:1B1C:0C10.002A: probe with driver corsair-cpro failed with error -110 [ 619.016864][ T9] usb 3-1: USB disconnect, device number 41 [ 619.075713][T11698] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.142751][T11698] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.229327][T11698] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.354572][T10643] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.377580][ T4838] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.420518][ T4838] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.492064][ T4838] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.239106][T11772] PKCS8: Unsupported PKCS#8 version [ 620.303930][T11774] mac80211_hwsim hwsim11 O3c: renamed from wlan1 (while UP) [ 620.478401][ T30] audit: type=1400 audit(2000000032.440:1103): avc: denied { read } for pid=11773 comm="syz.4.1520" path="socket:[40864]" dev="sockfs" ino=40864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 620.550722][T11782] overlayfs: failed to resolve './file2': -2 [ 620.571350][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 620.741494][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 620.752576][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 620.791913][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 620.817912][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 620.845983][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 620.869604][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 620.895864][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 620.920220][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.941046][ T9] usb 3-1: Product: syz [ 620.955079][ T9] usb 3-1: Manufacturer: syz [ 620.969859][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.977362][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.985626][ T9] usb 3-1: SerialNumber: syz [ 620.997490][ T9] usb 3-1: config 0 descriptor?? [ 621.862130][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 621.876321][ T9] input input23: Device does not respond to id packet M [ 621.899741][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 621.914313][ T9] input input23: Device does not respond to id packet P [ 621.933564][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 621.950959][ T9] input input23: Device does not respond to id packet B [ 621.972677][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 621.986702][ T9] input input23: Device does not respond to id packet N [ 622.007996][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 622.045187][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 622.059932][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 622.078035][ T9] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 622.098059][ T9] iforce 3-1:0.0: usb_submit_urb failed -90 [ 622.111785][ T9] iforce 3-1:0.0: usb_submit_urb failed -90 [ 622.127282][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 622.186431][T11782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.201812][ T9] usb 3-1: USB disconnect, device number 42 [ 622.259278][T11782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.190061][ T4838] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.218105][ T4838] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.261770][ T4838] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.270319][ T4838] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.446554][T11810] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.561492][ T5914] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 623.718757][T11810] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.729159][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.752597][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.771563][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.803964][ T5914] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 623.823274][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.842522][ T5914] usb 6-1: config 0 descriptor?? [ 623.946312][T11810] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.152573][T11810] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.212188][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 624.260178][ T5914] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 624.272831][ T5914] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 624.287275][ T5914] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 624.315354][ T5914] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x0 [ 624.333807][ T5914] hid-multitouch 0003:0457:07DA.002B: unknown main item tag 0x1 [ 624.352978][ T5914] hid-multitouch 0003:0457:07DA.002B: item fetching failed at offset 30/34 [ 624.371717][ T5914] hid-multitouch 0003:0457:07DA.002B: probe with driver hid-multitouch failed with error -22 [ 624.382332][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 624.392954][ T29] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 624.409841][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 624.419949][ T29] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 624.438788][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.464687][ T29] usb 3-1: config 0 descriptor?? [ 624.471927][ T9325] usb 6-1: USB disconnect, device number 22 [ 624.496977][ T30] audit: type=1326 audit(2000000036.460:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11820 comm="syz.0.1533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708d39c819 code=0x0 [ 624.793518][ T4838] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.846889][ T4838] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.875537][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.934896][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.166037][ T30] audit: type=1400 audit(2000000037.130:1105): avc: denied { listen } for pid=11832 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 625.564993][ T29] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 625.717568][ T29] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 625.732285][ T29] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 625.763187][ T29] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 625.786094][ T29] corsair-cpro 0003:1B1C:0C10.002C: unknown main item tag 0x0 [ 625.806767][T11834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.815566][T11834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.838080][ T29] corsair-cpro 0003:1B1C:0C10.002C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 625.942340][ T30] audit: type=1400 audit(2000000037.900:1106): avc: denied { map } for pid=11836 comm="syz.5.1538" path="socket:[41240]" dev="sockfs" ino=41240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 626.011379][ T30] audit: type=1400 audit(2000000037.900:1107): avc: denied { accept } for pid=11836 comm="syz.5.1538" path="socket:[41240]" dev="sockfs" ino=41240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 626.244009][ T29] corsair-cpro 0003:1B1C:0C10.002C: probe with driver corsair-cpro failed with error -110 [ 626.303674][ T29] usb 3-1: USB disconnect, device number 43 [ 626.496040][T11860] netlink: 'syz.0.1542': attribute type 23 has an invalid length. [ 626.503915][ T30] audit: type=1400 audit(2000000038.450:1108): avc: denied { read } for pid=11850 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 626.903903][ T30] audit: type=1400 audit(2000000038.870:1109): avc: denied { create } for pid=11861 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 627.001259][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 627.061716][ T30] audit: type=1400 audit(2000000039.030:1110): avc: denied { ioctl } for pid=11861 comm="syz.4.1543" path="socket:[41272]" dev="sockfs" ino=41272 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 627.173201][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 627.183819][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 627.195950][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 627.216696][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 627.236469][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.256760][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.276529][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 627.291248][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 627.307321][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 627.317936][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 627.325914][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 627.337791][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 627.351005][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.364627][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.378103][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 627.389873][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 627.408443][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 627.442847][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 627.454974][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 627.471042][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 627.494501][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.495113][T11873] tipc: Started in network mode [ 627.523293][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.531295][T11873] tipc: Node identity fffffffb, cluster identity 4711 [ 627.551226][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 627.551326][T11873] tipc: Node number set to 4294967291 [ 627.572655][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 627.620172][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 627.721600][ T10] usb 3-1: string descriptor 0 read error: -22 [ 627.728913][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 627.738289][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.912293][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 627.951306][ T9325] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 628.092001][T11884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1549'. [ 628.516504][ T5914] usb 3-1: USB disconnect, device number 44 [ 628.542779][ T9325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.558301][ T9325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.586359][ T9325] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 628.601790][ T9325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 628.610633][ T9325] usb 6-1: SerialNumber: syz [ 628.724284][ T30] audit: type=1400 audit(2000000040.690:1111): avc: denied { accept } for pid=11891 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 628.948559][ T9325] usb 6-1: 0:2 : does not exist [ 628.984070][ T9325] usb 6-1: USB disconnect, device number 23 [ 629.082980][T11898] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.251691][T11898] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.387106][T11898] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.458440][ T9670] udevd[9670]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.547593][T11898] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.789137][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.814646][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.853549][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.886948][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.191235][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 630.361413][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 630.369897][ T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 630.383095][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.401907][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 630.429356][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.457912][ T9] usb 3-1: config 0 descriptor?? [ 630.600511][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 630.654868][ T9325] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 630.863376][ T9325] usb 6-1: Using ep0 maxpacket: 8 [ 630.996285][ T9325] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 631.007895][ T9325] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 631.016482][ T9325] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 631.025927][ T9325] usb 6-1: config 250 has no interface number 0 [ 631.032300][ T9325] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 631.044022][ T9325] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 631.054880][ T9325] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 631.131287][ T798] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 631.293486][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 631.304889][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.308479][ T9325] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 631.315320][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.325748][ T9325] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 631.325782][ T9325] usb 6-1: config 250 interface 228 has no altsetting 0 [ 631.327240][ T9325] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 631.327264][ T9325] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 631.327285][ T9325] usb 6-1: Product: syz [ 631.327299][ T9325] usb 6-1: SerialNumber: syz [ 631.331902][ T9325] hub 6-1:250.228: bad descriptor, ignoring hub [ 631.354138][ T9] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0 [ 631.362318][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 631.362731][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 631.373743][ T30] audit: type=1400 audit(2000000043.340:1112): avc: denied { listen } for pid=11916 comm="syz.1.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 631.389209][ T9325] hub 6-1:250.228: probe with driver hub failed with error -5 [ 631.441745][ T9] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0 [ 631.463105][ T798] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 631.472328][ T9] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0 [ 631.480620][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.485729][T11875] Set syz1 is full, maxelem 65536 reached [ 631.496972][ T9] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0 [ 631.506397][ T9] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0 [ 631.526855][ T798] usb 5-1: config 0 descriptor?? [ 631.545133][ T9325] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 631.643622][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 631.653873][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 631.677221][ T9] corsair-cpro 0003:1B1C:0C10.002D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 631.680254][T11918] ceph: No mds server is up or the cluster is laggy [ 631.704336][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.713231][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.745241][ T30] audit: type=1400 audit(2000000043.710:1113): avc: denied { write } for pid=11906 comm="syz.5.1556" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 631.865104][ T9325] usb 6-1: USB disconnect, device number 24 [ 631.900386][ T9325] usblp0: removed [ 631.913344][ T30] audit: type=1326 audit(2000000043.870:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b9c819 code=0x7ffc0000 [ 631.977197][ T30] audit: type=1326 audit(2000000043.870:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b9c819 code=0x7ffc0000 [ 631.988716][ T798] hid-multitouch 0003:0457:07DA.002E: unknown main item tag 0x0 [ 632.022817][ T798] hid-multitouch 0003:0457:07DA.002E: unknown main item tag 0x0 [ 632.038614][ T30] audit: type=1326 audit(2000000043.870:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b9c819 code=0x7ffc0000 [ 632.043935][ T798] hid-multitouch 0003:0457:07DA.002E: unknown main item tag 0x0 [ 632.068623][ T30] audit: type=1326 audit(2000000043.870:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1f94b9c819 code=0x7ffc0000 [ 632.071832][ T798] hid-multitouch 0003:0457:07DA.002E: unknown main item tag 0x0 [ 632.093885][ T30] audit: type=1326 audit(2000000043.940:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b9c819 code=0x7ffc0000 [ 632.101839][ T798] hid-multitouch 0003:0457:07DA.002E: unknown main item tag 0x1 [ 632.135447][ T798] hid-multitouch 0003:0457:07DA.002E: item fetching failed at offset 30/34 [ 632.147339][ T9] corsair-cpro 0003:1B1C:0C10.002D: probe with driver corsair-cpro failed with error -110 [ 632.149749][ T30] audit: type=1326 audit(2000000043.940:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f94b9c582 code=0x7ffc0000 [ 632.160674][ T9] usb 3-1: USB disconnect, device number 45 [ 632.183144][ T30] audit: type=1326 audit(2000000043.940:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1f94b9c617 code=0x7ffc0000 [ 632.194824][ T798] hid-multitouch 0003:0457:07DA.002E: probe with driver hid-multitouch failed with error -22 [ 632.212638][ T30] audit: type=1326 audit(2000000043.940:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f94b59511 code=0x7ffc0000 [ 632.263705][ T798] usb 5-1: USB disconnect, device number 50 [ 634.313444][T11961] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.323459][T11961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.478640][T11961] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.488578][T11961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.150235][T11961] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.160064][T11961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.176847][ T9325] libceph: connect (1)[c::]:6789 error -101 [ 635.203199][ T9325] libceph: mon0 (1)[c::]:6789 connect error [ 635.254537][ T9325] vxcan1 speed is unknown, defaulting to 1000 [ 635.304377][T11967] ceph: No mds server is up or the cluster is laggy [ 635.392615][T11961] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.402434][T11961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.601358][T10643] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.672731][T10643] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.713441][T10643] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.745013][T10643] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.774506][T11977] futex_wake_op: syz.0.1571 tries to shift op by 144; fix this program [ 635.804210][T10643] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.823247][T10643] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.851753][T10643] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.875727][T10643] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.705106][ T798] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 636.811761][T12004] netlink: 'syz.5.1575': attribute type 10 has an invalid length. [ 636.821961][T12004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1575'. [ 636.831760][T12004] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 637.050966][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.078963][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.130408][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.170926][ T798] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 637.223113][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.258804][T12008] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1580'. [ 637.304380][ T798] usb 5-1: config 0 descriptor?? [ 637.734050][ T798] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 637.766315][ T798] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 637.792558][ T798] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 637.818676][ T798] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x0 [ 637.844299][ T798] hid-multitouch 0003:0457:07DA.002F: unknown main item tag 0x1 [ 637.865170][ T798] hid-multitouch 0003:0457:07DA.002F: item fetching failed at offset 30/34 [ 637.977019][ T798] hid-multitouch 0003:0457:07DA.002F: probe with driver hid-multitouch failed with error -22 [ 638.226540][T12020] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.966011][ T798] usb 5-1: USB disconnect, device number 51 [ 639.023747][T12020] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.100718][T12020] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.161115][T12020] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.254014][T10452] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.306798][T10452] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.337056][T10452] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.388120][T10452] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.577086][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'. [ 639.592519][T12027] syz_tun: entered allmulticast mode [ 639.704944][T12026] syz_tun: left allmulticast mode [ 641.436465][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 641.436484][ T30] audit: type=1400 audit(2000000053.400:1285): avc: denied { map } for pid=12041 comm="syz.4.1589" path="socket:[43183]" dev="sockfs" ino=43183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 641.507712][ T30] audit: type=1400 audit(2000000053.440:1286): avc: denied { read } for pid=12041 comm="syz.4.1589" path="socket:[43183]" dev="sockfs" ino=43183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 642.464946][ T29] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 642.511252][T12061] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.312738][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.334663][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.357182][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.417156][T12061] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.444089][ T30] audit: type=1400 audit(2000000055.410:1287): avc: denied { getopt } for pid=12063 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 643.467724][ T29] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 643.488998][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.512339][ T29] usb 6-1: config 0 descriptor?? [ 643.534592][T12061] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.560515][T12067] overlayfs: failed to clone upperpath [ 643.590670][T12061] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.716249][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.740090][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.782924][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.823641][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.902948][T12074] syzkaller0: entered promiscuous mode [ 643.908560][T12074] syzkaller0: entered allmulticast mode [ 644.017304][ T29] hid-multitouch 0003:0457:07DA.0030: unknown main item tag 0x0 [ 644.034435][ T29] hid-multitouch 0003:0457:07DA.0030: unknown main item tag 0x0 [ 644.043036][ T29] hid-multitouch 0003:0457:07DA.0030: unknown main item tag 0x0 [ 644.053778][ T29] hid-multitouch 0003:0457:07DA.0030: unknown main item tag 0x0 [ 644.069849][ T29] hid-multitouch 0003:0457:07DA.0030: unknown main item tag 0x1 [ 644.078392][ T29] hid-multitouch 0003:0457:07DA.0030: item fetching failed at offset 30/34 [ 644.089825][ T29] hid-multitouch 0003:0457:07DA.0030: probe with driver hid-multitouch failed with error -22 [ 644.299938][ T29] usb 6-1: USB disconnect, device number 25 [ 645.589949][T12102] netlink: 'syz.5.1604': attribute type 1 has an invalid length. [ 645.603196][T12102] netlink: 'syz.5.1604': attribute type 4 has an invalid length. [ 645.611430][T12102] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1604'. [ 645.698257][T12102] netlink: 'syz.5.1604': attribute type 1 has an invalid length. [ 645.706308][T12102] netlink: 'syz.5.1604': attribute type 4 has an invalid length. [ 645.714962][T12102] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1604'. [ 646.675034][T12119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=12119 comm=syz.5.1611 [ 646.881405][ T30] audit: type=1400 audit(2000000058.840:1288): avc: denied { create } for pid=12120 comm="syz.0.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 647.388771][T12143] FAULT_INJECTION: forcing a failure. [ 647.388771][T12143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.418242][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.5.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.418274][T12143] Tainted: [L]=SOFTLOCKUP [ 647.418280][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.418290][T12143] Call Trace: [ 647.418296][T12143] [ 647.418302][T12143] dump_stack_lvl+0x100/0x190 [ 647.418325][T12143] should_fail_ex.cold+0x5/0xa [ 647.418341][T12143] _copy_from_user+0x2e/0xd0 [ 647.418354][T12143] copy_msghdr_from_user+0x9f/0x4f0 [ 647.418368][T12143] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 647.418386][T12143] ? __pfx__kstrtoull+0x10/0x10 [ 647.418402][T12143] ___sys_sendmsg+0x106/0x1e0 [ 647.418415][T12143] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.418434][T12143] ? find_held_lock+0x2b/0x80 [ 647.418458][T12143] __sys_sendmmsg+0x205/0x430 [ 647.418480][T12143] ? __pfx___sys_sendmmsg+0x10/0x10 [ 647.418506][T12143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 647.418528][T12143] ? fput+0x79/0x100 [ 647.418540][T12143] ? ksys_write+0x1ac/0x250 [ 647.418556][T12143] ? __pfx_ksys_write+0x10/0x10 [ 647.418574][T12143] __x64_sys_sendmmsg+0x9c/0x100 [ 647.418590][T12143] ? lockdep_hardirqs_on+0x78/0x100 [ 647.418605][T12143] do_syscall_64+0x10b/0xf80 [ 647.418619][T12143] ? clear_bhb_loop+0x40/0x90 [ 647.418632][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.418643][T12143] RIP: 0033:0x7fea4c19c819 [ 647.418653][T12143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.418665][T12143] RSP: 002b:00007fea4d088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 647.418676][T12143] RAX: ffffffffffffffda RBX: 00007fea4c415fa0 RCX: 00007fea4c19c819 [ 647.418683][T12143] RDX: 0000000000000002 RSI: 0000200000004d40 RDI: 0000000000000004 [ 647.418689][T12143] RBP: 00007fea4d088090 R08: 0000000000000000 R09: 0000000000000000 [ 647.418695][T12143] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 647.418701][T12143] R13: 00007fea4c416038 R14: 00007fea4c415fa0 R15: 00007ffce3cafbe8 [ 647.418714][T12143] [ 647.656945][ T30] audit: type=1400 audit(2000000059.620:1289): avc: denied { read } for pid=12144 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 647.707420][ T30] audit: type=1400 audit(2000000059.670:1290): avc: denied { setopt } for pid=12144 comm="syz.5.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 648.261379][ T30] audit: type=1800 audit(2000000060.130:1291): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1618" name="bus" dev="ramfs" ino=42702 res=0 errno=0 [ 649.196682][T12163] tipc: Started in network mode [ 649.208077][T12163] tipc: Node identity 2, cluster identity 4711 [ 649.216485][T12163] tipc: Node number set to 2 [ 649.537610][T12169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 649.546702][T12169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 649.900614][ T30] audit: type=1326 audit(2000000061.530:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 649.933365][ T30] audit: type=1326 audit(2000000061.530:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 650.042580][ T30] audit: type=1326 audit(2000000061.530:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 650.069807][ T30] audit: type=1326 audit(2000000061.530:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 650.098094][ T30] audit: type=1326 audit(2000000061.530:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 650.265924][ T30] audit: type=1326 audit(2000000061.540:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12164 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f708d39c819 code=0x7ffc0000 [ 651.080781][ T5880] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 651.261498][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 651.268412][ T5880] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 651.271275][T12187] 9p: Could not find request transport: f0xffffffffffffffff [ 651.276966][ T5880] usb 3-1: config 0 has no interface number 0 [ 651.292208][ T5880] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.303717][ T5880] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 651.315924][ T5880] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 12571, setting to 1024 [ 651.336892][ T5880] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 651.356047][ T5880] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.373966][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 651.383468][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.391998][ T5880] usb 3-1: Product: syz [ 651.396249][ T5880] usb 3-1: Manufacturer: syz [ 651.400961][ T5880] usb 3-1: SerialNumber: syz [ 651.436894][ T5880] usb 3-1: config 0 descriptor?? [ 651.446393][T12176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 651.456481][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input24 [ 651.470401][ T5166] usb 3-1: BOGUS urb xfer, pipe 1 != type 3 [ 651.497801][T12193] binder: binder_mmap: 12191 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 651.626742][ C1] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 652.081438][T12176] loop5: detected capacity change from 0 to 4095 [ 652.100877][ T5880] usb 3-1: USB disconnect, device number 46 [ 652.100914][ C1] bcm5974 3-1:0.119: trackpad urb failed: -19 [ 652.494475][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 652.494494][ T30] audit: type=1800 audit(2000000064.460:1313): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1632" name="bus" dev="ramfs" ino=42796 res=0 errno=0 [ 652.715298][T12214] overlayfs: failed to clone lowerpath [ 653.111259][ T5914] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 653.321438][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 653.338013][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 653.374245][ T5914] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 653.409419][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 653.435393][ T5914] usb 3-1: Product: syz [ 653.448723][ T5914] usb 3-1: Manufacturer: syz [ 653.460754][ T5914] usb 3-1: SerialNumber: syz [ 653.478803][ T5914] usb 3-1: config 0 descriptor?? [ 653.480910][T12242] binder: binder_mmap: 12240 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 653.504779][T12219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 653.727424][ T30] audit: type=1400 audit(2000000065.690:1314): avc: denied { read write } for pid=12218 comm="syz.2.1638" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 653.808919][ T798] hid-generic 0000:0000:0002.0031: unknown main item tag 0x0 [ 653.810200][ T30] audit: type=1400 audit(2000000065.690:1315): avc: denied { open } for pid=12218 comm="syz.2.1638" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 653.857741][ T30] audit: type=1800 audit(2000000065.810:1316): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1643" name="bus" dev="tmpfs" ino=1808 res=0 errno=0 [ 653.942778][T12247] 9p: Bad value for 'wfdno' [ 653.958947][ T798] hid-generic 0000:0000:0002.0031: unknown main item tag 0x0 [ 654.141896][ T798] hid-generic 0000:0000:0002.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 655.489990][T12265] PKCS8: Unsupported PKCS#8 version [ 655.530742][T12265] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1648'. [ 655.540325][T12265] openvswitch: netlink: Missing key (keys=40, expected=80) [ 655.610967][ T5880] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 655.903467][ T5880] usb 6-1: config 1 interface 0 has no altsetting 0 [ 655.914455][ T29] usb 3-1: USB disconnect, device number 47 [ 655.922695][ T5880] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 655.932243][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.979839][ T5880] usb 6-1: Product: ᜂꖿᇝ௶இ㒠㝇钘ﱮ뉦瓏㝶ꐕ፟С૯짉쩑쐃̥ࡌႡ紐㌴徳蕭଼豛⃯눳辸牍尯 [ 656.011636][ T5880] usb 6-1: Manufacturer: 㠊 [ 656.020965][ T5880] usb 6-1: SerialNumber: syz [ 656.106223][ C1] sd 0:0:1:0: [sda] tag#10107 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.116858][ C1] sd 0:0:1:0: [sda] tag#10107 CDB: Read(6) 08 00 00 00 00 00 [ 656.124666][ C1] sd 0:0:1:0: [sda] tag#10048 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.135154][ C1] sd 0:0:1:0: [sda] tag#10048 CDB: Read(6) 08 00 00 00 00 00 [ 656.142591][ C1] sd 0:0:1:0: [sda] tag#10049 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.153020][ C1] sd 0:0:1:0: [sda] tag#10049 CDB: Read(6) 08 00 00 00 00 00 [ 656.162076][ C1] sd 0:0:1:0: [sda] tag#10050 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.172621][ C1] sd 0:0:1:0: [sda] tag#10050 CDB: Read(6) 08 00 00 00 00 00 [ 656.180482][ C1] sd 0:0:1:0: [sda] tag#10051 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.191006][ C1] sd 0:0:1:0: [sda] tag#10051 CDB: Read(6) 08 00 00 00 00 00 [ 656.198492][ C1] sd 0:0:1:0: [sda] tag#10052 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.208993][ C1] sd 0:0:1:0: [sda] tag#10052 CDB: Read(6) 08 00 00 00 00 00 [ 656.216474][ C1] sd 0:0:1:0: [sda] tag#10053 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.226920][ C1] sd 0:0:1:0: [sda] tag#10053 CDB: Read(6) 08 00 00 00 00 00 [ 656.234363][ C1] sd 0:0:1:0: [sda] tag#10054 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.244798][ C1] sd 0:0:1:0: [sda] tag#10054 CDB: Read(6) 08 00 00 00 00 00 [ 656.252239][ C1] sd 0:0:1:0: [sda] tag#10055 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.262685][ C1] sd 0:0:1:0: [sda] tag#10055 CDB: Read(6) 08 00 00 00 00 00 [ 656.270087][ C1] sd 0:0:1:0: [sda] tag#10056 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 656.280605][ C1] sd 0:0:1:0: [sda] tag#10056 CDB: Read(6) 08 00 00 00 00 00 [ 657.211735][T12288] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 657.219679][T12288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1654'. [ 657.234416][T12288] batman_adv: batadv0: Adding interface: vlan1 [ 657.240716][T12288] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.266936][T12288] batman_adv: batadv0: Interface activated: vlan1 [ 657.523471][ T30] audit: type=1400 audit(2000000069.490:1317): avc: denied { connect } for pid=12289 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 657.621250][ T5880] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 64 proto 1 vid 0x04B8 pid 0x0202 [ 657.670452][ T5880] usb 6-1: USB disconnect, device number 26 [ 657.733577][ T5880] usblp0: removed [ 657.825732][T12297] binder: binder_mmap: 12295 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 658.226723][T12301] hma(sha224): entered promiscuous mode [ 658.270289][T12305] bridge_slave_1: invalid flags given to default FDB implementation [ 659.599995][T12325] fuse: fd is not a fuse device [ 660.129240][ T798] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 660.141733][ T30] audit: type=1400 audit(2000000072.080:1318): avc: denied { setopt } for pid=12332 comm="syz.4.1667" lport=40163 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 660.487354][ T30] audit: type=1400 audit(2000000072.080:1319): avc: denied { write } for pid=12332 comm="syz.4.1667" path="socket:[42981]" dev="sockfs" ino=42981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 660.496368][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1669'. [ 660.571341][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1669'. [ 660.580996][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 660.589095][ T798] usb 6-1: device descriptor read/64, error -71 [ 660.656558][T12345] overlayfs: failed to clone upperpath [ 660.751914][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 660.762280][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 660.792549][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 660.801749][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 660.814314][ T9] usb 5-1: Product: syz [ 660.820821][ T9] usb 5-1: Manufacturer: syz [ 660.833140][ T9] usb 5-1: SerialNumber: syz [ 660.841394][ T798] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 660.981325][ T798] usb 6-1: device descriptor read/64, error -71 [ 661.151970][ T9] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 661.160363][ T798] usb usb6-port1: attempt power cycle [ 661.168805][ T9] visor 5-1:1.0: probe with driver visor failed with error -110 [ 661.324020][T12349] netlink: 'syz.0.1672': attribute type 13 has an invalid length. [ 661.350710][T12349] netlink: 'syz.0.1672': attribute type 17 has an invalid length. [ 661.511532][ T798] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 661.553274][ T798] usb 6-1: device descriptor read/8, error -71 [ 661.625866][T12349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.666873][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'. [ 661.791252][ T798] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 661.811878][ T798] usb 6-1: device descriptor read/8, error -71 [ 661.901929][T11478] Bluetooth: hci5: command 0x0c1a tx timeout [ 661.932706][ T798] usb usb6-port1: unable to enumerate USB device [ 662.070023][ T30] audit: type=1400 audit(2000000074.030:1320): avc: denied { checkpoint_restore } for pid=12361 comm="syz.1.1676" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.813474][T12369] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1678'. [ 663.612721][ T29] usb 5-1: USB disconnect, device number 52 [ 663.740682][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 664.228393][T12384] PKCS8: Unsupported PKCS#8 version [ 664.329579][T12389] hma(sha224): entered promiscuous mode [ 664.362250][T12383] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1683'. [ 664.379301][T12383] openvswitch: netlink: Missing key (keys=40, expected=80) [ 664.669595][T12392] kAFS: unable to lookup cell '' [ 665.118149][T12406] kAFS: unable to lookup cell '(,c' [ 665.137291][T12395] xt_hashlimit: size too large, truncated to 1048576 [ 665.711280][ T29] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 665.871315][ T29] usb 6-1: device descriptor read/64, error -71 [ 666.009647][T12422] batman_adv: batadv0: Adding interface: dummy0 [ 666.030819][T12422] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.075430][ T30] audit: type=1400 audit(2000000078.040:1321): avc: denied { ioctl } for pid=12421 comm="syz.0.1693" path="socket:[44010]" dev="sockfs" ino=44010 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 666.100870][T12422] batman_adv: batadv0: Interface activated: dummy0 [ 666.122984][ T29] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 666.602788][ T29] usb 6-1: device descriptor read/64, error -71 [ 667.607304][ T29] usb usb6-port1: attempt power cycle [ 668.011496][ T29] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 668.054253][ T30] audit: type=1800 audit(2000000079.890:1322): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1699" name="bus" dev="ramfs" ino=45059 res=0 errno=0 [ 668.300967][T12463] mac80211_hwsim hwsim5 O3c: renamed from wlan1 (while UP) [ 668.311108][ T29] usb 6-1: device not accepting address 33, error -71 [ 668.542953][T12471] overlayfs: missing 'workdir' [ 669.371360][ T29] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 669.471756][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 669.487555][ T29] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 669.499098][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.507951][ T29] usb 6-1: Product: syz [ 669.513547][ T29] usb 6-1: Manufacturer: syz [ 669.518220][ T29] usb 6-1: SerialNumber: syz [ 669.531322][ T29] usb 6-1: config 0 descriptor?? [ 669.538512][T11478] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 669.551808][ T29] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 669.726602][T12499] netlink: 'syz.4.1717': attribute type 11 has an invalid length. [ 669.780012][ T30] audit: type=1400 audit(2000000081.740:1323): avc: denied { getopt } for pid=12500 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 670.118196][ T30] audit: type=1800 audit(2000000082.080:1324): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1716" name="bus" dev="ramfs" ino=44302 res=0 errno=0 [ 670.472508][T12514] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1708'. [ 670.714257][ T29] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5 [ 671.123756][ T30] audit: type=1400 audit(2000000083.090:1325): avc: denied { audit_write } for pid=12527 comm="syz.0.1727" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 671.611919][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.632641][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.670123][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.776450][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.794449][T12514] binder: 12475:12514 ioctl c0306201 200000000040 returned -22 [ 671.909917][T12539] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.917089][T12539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.926001][T12539] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.933153][T12539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.943063][T12539] bridge0: left allmulticast mode [ 672.009747][T12539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.659527][ T30] audit: type=1400 audit(2000000084.620:1326): avc: denied { setopt } for pid=12550 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 672.702539][T12553] fuse: fd is not a fuse device [ 672.849570][ T9] usb 6-1: USB disconnect, device number 34 [ 672.982332][T12564] binder: binder_mmap: 12560 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 673.353258][T12567] bond0 (unregistering): Released all slaves [ 673.611053][ T30] audit: type=1400 audit(2000000085.570:1327): avc: denied { ioctl } for pid=12580 comm="syz.4.1745" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 673.735461][ T30] audit: type=1400 audit(2000000085.680:1328): avc: denied { create } for pid=12580 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 673.948459][ T30] audit: type=1400 audit(2000000085.700:1329): avc: denied { write } for pid=12580 comm="syz.4.1745" path="socket:[44673]" dev="sockfs" ino=44673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 674.095169][T12586] PKCS8: Unsupported PKCS#8 version [ 674.109145][T12586] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1747'. [ 674.118313][T12586] openvswitch: netlink: Missing key (keys=40, expected=80) [ 674.308012][T12591] vxcan1 speed is unknown, defaulting to 1000 [ 675.112991][T12592] 9p: Bad value for 'wfdno' [ 675.166159][T12591] lo speed is unknown, defaulting to 1000 [ 675.550600][ T30] audit: type=1400 audit(2000000087.510:1330): avc: denied { getopt } for pid=12588 comm="syz.5.1748" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.798243][ T30] audit: type=1400 audit(2000000087.760:1331): avc: denied { read } for pid=12601 comm="syz.4.1752" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 675.962090][T12605] vxcan1 speed is unknown, defaulting to 1000 [ 675.971358][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1754'. [ 676.239983][T12605] lo speed is unknown, defaulting to 1000 [ 677.886728][T12630] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.078619][T12636] fuse: Unknown parameter 'grou00000000000000000000' [ 678.122796][T12630] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.175649][T12641] overlay: Unknown parameter '!EJGU"F &63[7nsLzvTQ5&}U|J0:{9;CN^)' [ 678.198085][T12630] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.366486][T12644] bridge3: entered promiscuous mode [ 678.372336][T12644] bridge3: entered allmulticast mode [ 678.398655][T12630] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.748934][T12645] macvlan0: entered promiscuous mode [ 678.760381][T12645] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 678.768865][T12645] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 678.803315][ T7418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.819162][ T7418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.836492][ T7418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.928867][ T7418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.982980][T11478] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 679.118070][T12660] PKCS8: Unsupported PKCS#8 version [ 679.136208][T12660] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1767'. [ 679.145706][T12660] openvswitch: netlink: Missing key (keys=40, expected=80) [ 679.344153][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 679.617062][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 679.627114][T12673] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 679.950949][T12680] binder: binder_mmap: 12678 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 680.224586][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.575326][T12694] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.952681][T12694] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.973284][T12699] PKCS8: Unsupported PKCS#8 version [ 682.983962][T12699] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1779'. [ 682.993172][T12699] openvswitch: netlink: Missing key (keys=40, expected=80) [ 683.055559][T12694] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.103129][T12694] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.136106][ T30] audit: type=1400 audit(2000000095.100:1332): avc: denied { read } for pid=12706 comm="syz.5.1780" path="socket:[45658]" dev="sockfs" ino=45658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 683.186035][T10643] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.207429][ T6314] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.229154][ T6314] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.257905][ T6314] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.317310][T12719] fuse: fd is not a fuse device [ 683.341478][ T798] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 683.944414][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.956154][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.983746][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.025557][ T798] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 684.055727][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.175552][ T798] usb 5-1: config 0 descriptor?? [ 685.424350][ T798] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 685.435531][ T798] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 685.448793][T12729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1787'. [ 685.701845][ T798] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 685.713653][ T798] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 685.721938][ T798] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x1 [ 685.730844][ T798] hid-multitouch 0003:0457:07DA.0032: item fetching failed at offset 30/34 [ 685.741055][ T798] hid-multitouch 0003:0457:07DA.0032: probe with driver hid-multitouch failed with error -22 [ 685.773894][ T30] audit: type=1400 audit(2000000097.740:1333): avc: denied { name_connect } for pid=12731 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 685.800241][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.815420][ T798] usb 5-1: USB disconnect, device number 53 [ 685.827004][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.051328][ T29] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 686.205408][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.220601][ T29] usb 6-1: config 0 has no interfaces? [ 686.234196][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 686.244179][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.255333][ T29] usb 6-1: Product: syz [ 686.266313][ T29] usb 6-1: Manufacturer: syz [ 686.274896][ T29] usb 6-1: SerialNumber: syz [ 686.290393][ T29] usb 6-1: config 0 descriptor?? [ 686.385044][T12751] PKCS8: Unsupported PKCS#8 version [ 686.404754][T12751] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1793'. [ 686.414244][T12751] openvswitch: netlink: Missing key (keys=40, expected=80) [ 686.610645][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.645283][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.663264][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.694124][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.931601][T12762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.122566][T12762] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.236493][T12762] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.330197][T12762] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.563479][ T5880] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 688.741347][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 688.753546][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.765082][ T5880] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.775033][ T5880] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.788619][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.796256][ T5880] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 688.805914][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.824317][ T29] usb 6-1: USB disconnect, device number 35 [ 688.841042][ T5880] usb 5-1: config 0 descriptor?? [ 688.995962][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 689.265472][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 689.272113][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 689.282495][ T5880] usb 5-1: USB disconnect, device number 54 [ 689.322227][ T29] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 689.481342][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 689.488043][ T29] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 689.499605][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 689.506816][ T29] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 689.516112][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.525858][ T29] usb 6-1: config 0 descriptor?? [ 689.610702][ T472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.628265][ T472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.644055][ T472] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.718536][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.909533][ T30] audit: type=1400 audit(2000000101.870:1334): avc: denied { write } for pid=12788 comm="syz.4.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 689.932870][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 689.945145][ T29] corsair-cpro 0003:1B1C:0C10.0033: unknown main item tag 0x0 [ 689.954893][ T29] corsair-cpro 0003:1B1C:0C10.0033: unknown main item tag 0x0 [ 689.963648][ T29] corsair-cpro 0003:1B1C:0C10.0033: unknown main item tag 0x0 [ 689.971744][ T29] corsair-cpro 0003:1B1C:0C10.0033: unknown main item tag 0x0 [ 689.979797][ T30] audit: type=1400 audit(2000000101.940:1335): avc: denied { remount } for pid=12788 comm="syz.4.1806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 690.008993][ T29] corsair-cpro 0003:1B1C:0C10.0033: unknown main item tag 0x0 [ 690.037171][ T29] corsair-cpro 0003:1B1C:0C10.0033: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 690.049464][T12793] fuse: Bad value for 'fd' [ 690.054262][ T30] audit: type=1400 audit(2000000102.000:1336): avc: denied { accept } for pid=12791 comm="syz.2.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 690.319984][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.328680][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.051695][ T30] audit: type=1400 audit(2000000104.010:1337): avc: denied { ioctl } for pid=12834 comm="syz.2.1821" path="socket:[46153]" dev="sockfs" ino=46153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 692.103191][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 692.138114][T12840] --map-set only usable from mangle table [ 692.190907][ T30] audit: type=1400 audit(2000000104.120:1338): avc: denied { firmware_load } for pid=12830 comm="syz.0.1820" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 692.307482][ T29] corsair-cpro 0003:1B1C:0C10.0033: probe with driver corsair-cpro failed with error -71 [ 692.387457][T12839] syz.0.1820 (12839) used greatest stack depth: 18312 bytes left [ 692.399666][ T29] usb 6-1: USB disconnect, device number 36 [ 693.603516][T12852] FAULT_INJECTION: forcing a failure. [ 693.603516][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.617197][T12852] CPU: 1 UID: 0 PID: 12852 Comm: syz.5.1824 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.617227][T12852] Tainted: [L]=SOFTLOCKUP [ 693.617233][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 693.617244][T12852] Call Trace: [ 693.617249][T12852] [ 693.617256][T12852] dump_stack_lvl+0x100/0x190 [ 693.617284][T12852] should_fail_ex.cold+0x5/0xa [ 693.617309][T12852] strncpy_from_user+0x3b/0x2d0 [ 693.617332][T12852] __do_sys_add_key+0xd4/0x460 [ 693.617357][T12852] ? __pfx___do_sys_add_key+0x10/0x10 [ 693.617377][T12852] ? ksys_write+0x1ac/0x250 [ 693.617409][T12852] ? rcu_is_watching+0x12/0xc0 [ 693.617443][T12852] do_syscall_64+0x10b/0xf80 [ 693.617468][T12852] ? clear_bhb_loop+0x40/0x90 [ 693.617490][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.617507][T12852] RIP: 0033:0x7fea4c19c819 [ 693.617523][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.617540][T12852] RSP: 002b:00007fea4d088028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 693.617558][T12852] RAX: ffffffffffffffda RBX: 00007fea4c415fa0 RCX: 00007fea4c19c819 [ 693.617570][T12852] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000200000000280 [ 693.617581][T12852] RBP: 00007fea4d088090 R08: ffffffffffffffff R09: 0000000000000000 [ 693.617593][T12852] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 693.617603][T12852] R13: 00007fea4c416038 R14: 00007fea4c415fa0 R15: 00007ffce3cafbe8 [ 693.617628][T12852] [ 693.680050][T12843] vxcan1 speed is unknown, defaulting to 1000 [ 693.862712][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 694.184337][ T30] audit: type=1800 audit(2000000106.100:1339): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1828" name="bus" dev="ramfs" ino=47175 res=0 errno=0 [ 694.259763][T12843] lo speed is unknown, defaulting to 1000 [ 694.559293][ T30] audit: type=1400 audit(2000000106.520:1340): avc: denied { append } for pid=12872 comm="syz.4.1829" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 694.783976][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1830'. [ 694.854262][T12881] kAFS: No cell specified [ 697.148688][ T30] audit: type=1800 audit(2000000109.100:1341): pid=12897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1836" name="bus" dev="ramfs" ino=47248 res=0 errno=0 [ 697.156411][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 697.350882][T12905] IPVS: rr: FWM 3 0x00000003 - no destination available [ 697.359213][T12903] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 697.367133][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1837'. [ 697.376476][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 697.460504][ T9] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 697.488157][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.498538][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 697.508289][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.519681][ T9] usb 6-1: config 0 descriptor?? [ 698.320130][ T9] corsair-cpro 0003:1B1C:0C10.0034: unknown main item tag 0x0 [ 698.330677][ T9] corsair-cpro 0003:1B1C:0C10.0034: unknown main item tag 0x0 [ 698.338446][ T9] corsair-cpro 0003:1B1C:0C10.0034: unknown main item tag 0x0 [ 698.346098][ T9] corsair-cpro 0003:1B1C:0C10.0034: unknown main item tag 0x0 [ 698.353762][ T9] corsair-cpro 0003:1B1C:0C10.0034: unknown main item tag 0x0 [ 699.148823][ T9] corsair-cpro 0003:1B1C:0C10.0034: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 699.154936][T12923] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.308041][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.316730][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.370893][T12923] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.484378][ T30] audit: type=1400 audit(2000000111.450:1342): avc: denied { accept } for pid=12933 comm="syz.0.1846" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 699.524352][T12934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=12934 comm=syz.0.1846 [ 699.548425][T12923] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.608239][T12923] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.684046][ T81] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.804535][ T81] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.846513][ T81] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.949031][ T81] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.516725][ T9] corsair-cpro 0003:1B1C:0C10.0034: probe with driver corsair-cpro failed with error -71 [ 700.638035][ T9] usb 6-1: USB disconnect, device number 37 [ 701.005266][ T30] audit: type=1400 audit(2000000112.970:1343): avc: denied { lock } for pid=12950 comm="syz.5.1851" path="socket:[46355]" dev="sockfs" ino=46355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 701.416753][ T30] audit: type=1400 audit(2000000113.380:1344): avc: denied { watch } for pid=12953 comm="syz.0.1852" path="/422/file0" dev="tmpfs" ino=2264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 701.483439][ T30] audit: type=1400 audit(2000000113.380:1345): avc: denied { watch_sb watch_reads } for pid=12953 comm="syz.0.1852" path="/422/file0" dev="tmpfs" ino=2264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 701.694655][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 707.558312][T12993] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.694719][T12993] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.766310][T12993] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.821523][T13016] ip6t_REJECT: ECHOREPLY is not supported [ 707.841996][T12993] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.983746][T10643] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.042220][T10643] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.170415][T10643] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.270916][T10643] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.818333][T13026] fuse: Bad value for 'fd' [ 709.564852][ T30] audit: type=1400 audit(2000000377.527:1346): avc: denied { mount } for pid=13050 comm="syz.2.1880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 709.594713][T13052] overlayfs: failed to clone lowerpath [ 709.614851][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 709.804508][ T30] audit: type=1400 audit(2000000377.767:1348): avc: denied { read } for pid=13051 comm="syz.4.1881" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 709.850537][ T30] audit: type=1400 audit(2000000377.767:1347): avc: denied { mounton } for pid=13051 comm="syz.4.1881" path="/372/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 709.911732][ T30] audit: type=1400 audit(2000000377.767:1349): avc: denied { open } for pid=13051 comm="syz.4.1881" path="/372/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 709.941698][ T30] audit: type=1400 audit(2000000377.837:1350): avc: denied { setopt } for pid=13056 comm="syz.0.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 709.974823][T13058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.461001][ T30] audit: type=1400 audit(2000000379.417:1351): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 711.820537][ T5928] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 711.903743][T13107] block device autoloading is deprecated and will be removed. [ 711.928348][ T30] audit: type=1400 audit(2000000379.847:1352): avc: denied { create } for pid=13105 comm="syz.0.1895" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 711.949852][ T30] audit: type=1400 audit(2000000379.847:1353): avc: denied { write } for pid=13105 comm="syz.0.1895" name="file0" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 711.973624][ T30] audit: type=1400 audit(2000000379.847:1354): avc: denied { open } for pid=13105 comm="syz.0.1895" path="/431/file0" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 712.017925][ T30] audit: type=1400 audit(2000000379.877:1355): avc: denied { ioctl } for pid=13105 comm="syz.0.1895" path="/431/file0" dev="tmpfs" ino=2311 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 712.077746][ T5928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 712.109565][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.138612][ T5928] usb 5-1: Product: syz [ 712.158687][ T5928] usb 5-1: Manufacturer: syz [ 712.196527][ T5928] usb 5-1: SerialNumber: syz [ 712.228102][ T5928] usb 5-1: config 0 descriptor?? [ 712.459557][ T5928] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 712.653119][T13100] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 712.764226][ T5928] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 712.947243][ T5928] usb 5-1: USB disconnect, device number 55 [ 713.248452][T13139] input: syz0 as /devices/virtual/input/input25 [ 713.539224][T13145] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 713.547239][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1905'. [ 714.805611][T13160] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1909'. [ 715.104295][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 715.302390][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.326753][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 715.352080][ T10] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 715.368871][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.387277][ T10] usb 5-1: Product: syz [ 715.407227][ T10] usb 5-1: Manufacturer: syz [ 715.416304][ T10] usb 5-1: SerialNumber: syz [ 715.696235][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.720994][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.835415][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 715.878217][ T10] usb 5-1: USB disconnect, device number 56 [ 716.249794][T13175] 9pnet_fd: Insufficient options for proto=fd [ 717.127030][T13189] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.136946][T13189] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.444862][T13188] IPVS: length: 227 != 24 [ 717.582851][T11478] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 718.280696][T13189] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.290549][T13189] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.409170][T13199] netlink: 'syz.5.1918': attribute type 10 has an invalid length. [ 718.419276][T13199] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1918'. [ 718.431231][T13199] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 718.596923][T13189] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.609221][T13189] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.718363][T13189] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.728719][T13189] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.867680][ T81] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.877856][ T81] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.082418][ T472] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.236016][ T472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.427378][ T472] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.455430][ T472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.479618][ T472] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.505564][ T472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.631915][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.986084][T13236] program syz.4.1930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.010136][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 720.010152][ T30] audit: type=1400 audit(2000000387.967:1361): avc: denied { write } for pid=13233 comm="syz.4.1930" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 720.340399][ T30] audit: type=1400 audit(2000000388.067:1362): avc: denied { mount } for pid=13233 comm="syz.4.1930" name="/" dev="hugetlbfs" ino=46865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 720.378489][T13239] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 720.386717][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1931'. [ 721.994337][T13274] 9p: Bad value for 'rfdno' [ 722.904929][T13297] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1951'. [ 722.914054][ T30] audit: type=1400 audit(2000000390.867:1363): avc: denied { nlmsg_read } for pid=13295 comm="syz.5.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 724.493420][T13344] xt_l2tp: v2 doesn't support IP mode [ 724.777090][T13355] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 725.534065][ T30] audit: type=1400 audit(2000000393.487:1364): avc: denied { mounton } for pid=13384 comm="syz.4.1978" path="/394/file0" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 725.935598][T13394] netlink: 'syz.5.1977': attribute type 83 has an invalid length. [ 727.460059][ T30] audit: type=1400 audit(2000000395.417:1365): avc: denied { ioctl } for pid=13412 comm="syz.1.1985" path="socket:[48580]" dev="sockfs" ino=48580 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 727.598535][T13416] netlink: 'syz.5.1986': attribute type 10 has an invalid length. [ 727.606433][T13416] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1986'. [ 727.615564][T13416] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 727.889872][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.001019][T13420] bridge_slave_0 (unregistering): left allmulticast mode [ 728.021395][T13420] bridge_slave_0 (unregistering): left promiscuous mode [ 728.027841][T13351] Set syz1 is full, maxelem 65536 reached [ 728.038458][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.171437][T13439] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 728.826002][ T30] audit: type=1800 audit(2000000396.767:1366): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1991" name="bus" dev="ramfs" ino=49354 res=0 errno=0 [ 729.677587][T13454] overlayfs: failed to clone upperpath [ 730.009955][ T24] IPVS: starting estimator thread 0... [ 730.221799][T13466] vlan0: entered allmulticast mode [ 730.231511][T13462] IPVS: using max 39 ests per chain, 93600 per kthread [ 730.245924][T13466] dummy0: entered allmulticast mode [ 730.262570][T13466] team0: Port device vlan0 added [ 730.323521][T13461] vxcan1 speed is unknown, defaulting to 1000 [ 731.419224][T13496] netlink: 'syz.4.2006': attribute type 11 has an invalid length. [ 731.434718][T13461] lo speed is unknown, defaulting to 1000 [ 731.616745][T13499] delete_channel: no stack [ 731.833162][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2009'. [ 732.699158][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2012'. [ 733.397435][T13531] fuse: Bad value for 'fd' [ 733.402395][ T30] audit: type=1400 audit(2000000401.357:1367): avc: denied { mounton } for pid=13530 comm="syz.0.2016" path="/457/file0" dev="tmpfs" ino=2448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 733.461235][ T30] audit: type=1400 audit(2000000401.397:1368): avc: denied { append } for pid=13530 comm="syz.0.2016" name="file0" dev="tmpfs" ino=2448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 734.094009][T13546] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 734.170956][T13546] team0 (unregistering): Port device team_slave_0 removed [ 734.260642][T13546] team0 (unregistering): Port device team_slave_1 removed [ 734.378345][ T30] audit: type=1400 audit(2000000402.327:1369): avc: denied { watch } for pid=13550 comm="syz.1.2022" path="/398/file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 734.435312][T13558] fuse: Bad value for 'fd' [ 734.592636][T13562] netlink: 'syz.5.2025': attribute type 1 has an invalid length. [ 734.708618][T13562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.886148][T13565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.926161][T13565] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 734.997175][T13565] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 735.143270][T13566] gretap1: entered promiscuous mode [ 735.156968][T13566] bond1: (slave gretap1): making interface the new active one [ 735.174454][T13566] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 735.183736][ T798] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 735.267037][T13562] macvlan2: entered promiscuous mode [ 735.300351][T13562] macvlan2: entered allmulticast mode [ 735.319582][T13562] bond1: entered promiscuous mode [ 735.341189][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 735.349915][T13562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 735.365026][ T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.389209][T13562] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 735.402573][ T798] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.433149][T13562] bond1: left promiscuous mode [ 735.448118][ T798] usb 5-1: config 0 interface 0 has no altsetting 0 [ 735.462747][ T798] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 735.492786][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.532947][ T798] usb 5-1: config 0 descriptor?? [ 735.852278][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 735.876375][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 735.895076][T13575] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2029'. [ 736.453405][ T798] corsair-cpro 0003:1B1C:0C10.0035: unknown main item tag 0x0 [ 736.460916][ T798] corsair-cpro 0003:1B1C:0C10.0035: unknown main item tag 0x0 [ 736.503870][ T798] corsair-cpro 0003:1B1C:0C10.0035: unknown main item tag 0x0 [ 736.569551][ T798] corsair-cpro 0003:1B1C:0C10.0035: unknown main item tag 0x0 [ 736.669000][ T798] corsair-cpro 0003:1B1C:0C10.0035: unknown main item tag 0x0 [ 736.698488][ T798] corsair-cpro 0003:1B1C:0C10.0035: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 736.803377][ T798] corsair-cpro 0003:1B1C:0C10.0035: probe with driver corsair-cpro failed with error -38 [ 737.302627][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.311478][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.862610][ T30] audit: type=1400 audit(2000000405.827:1370): avc: denied { setopt } for pid=13607 comm="syz.2.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 738.327472][ T30] audit: type=1326 audit(2000000406.287:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.359155][ T30] audit: type=1326 audit(2000000406.287:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.382959][ T30] audit: type=1326 audit(2000000406.287:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.457170][ T24] usb 5-1: USB disconnect, device number 57 [ 738.476739][ T30] audit: type=1326 audit(2000000406.287:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.500334][ T30] audit: type=1326 audit(2000000406.287:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.596933][ T30] audit: type=1326 audit(2000000406.287:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.661989][ T30] audit: type=1326 audit(2000000406.287:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.686305][ T30] audit: type=1326 audit(2000000406.287:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.773369][ T30] audit: type=1326 audit(2000000406.287:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.824701][ T30] audit: type=1326 audit(2000000406.287:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.848345][ T30] audit: type=1326 audit(2000000406.287:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.872079][ T30] audit: type=1326 audit(2000000406.287:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 738.881429][T13630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2045'. [ 738.895838][ T30] audit: type=1326 audit(2000000406.287:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13618 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 739.602537][T13640] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.798584][T13640] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.252367][T13640] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.550102][T13640] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.681501][ T9236] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.693579][ T9236] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.702443][ T9236] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.721639][ T9236] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.921365][ T29] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 741.121817][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.133221][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.143765][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 741.163339][ T29] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 741.173508][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.203435][ T29] usb 5-1: config 0 descriptor?? [ 741.535658][T13663] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.545577][T13663] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.713411][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.795021][T13663] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.805845][T13663] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.902733][T13663] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.912782][T13663] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.004890][T13663] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.014766][T13663] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.421996][ T29] hid-multitouch 0003:0457:07DA.0036: unknown main item tag 0x0 [ 742.434353][ T29] hid-multitouch 0003:0457:07DA.0036: unknown main item tag 0x0 [ 742.634980][ T29] hid-multitouch 0003:0457:07DA.0036: unknown main item tag 0x0 [ 742.642787][ T29] hid-multitouch 0003:0457:07DA.0036: unknown main item tag 0x0 [ 742.651907][ T29] hid-multitouch 0003:0457:07DA.0036: unknown main item tag 0x1 [ 742.691227][ T81] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.736295][ T29] hid-multitouch 0003:0457:07DA.0036: item fetching failed at offset 30/34 [ 742.762325][ T29] hid-multitouch 0003:0457:07DA.0036: probe with driver hid-multitouch failed with error -22 [ 742.793937][ T81] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.813508][ T81] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.828392][ T29] usb 5-1: USB disconnect, device number 58 [ 742.831689][ T81] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.867922][ T81] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.888769][ T81] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.910093][ T81] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.927223][ T81] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.919713][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 743.919730][ T30] audit: type=1326 audit(2000000411.877:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.005440][ T30] audit: type=1326 audit(2000000411.927:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.052228][ T30] audit: type=1326 audit(2000000411.927:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.080705][ T30] audit: type=1326 audit(2000000411.927:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.107200][ T30] audit: type=1326 audit(2000000411.927:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.134633][ T30] audit: type=1326 audit(2000000411.927:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.159090][ T30] audit: type=1326 audit(2000000411.927:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.186000][ T30] audit: type=1326 audit(2000000411.927:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.209794][ T30] audit: type=1326 audit(2000000411.927:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.233943][ T30] audit: type=1326 audit(2000000411.927:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.2.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436e99c819 code=0x7ffc0000 [ 744.374323][T11478] Bluetooth: hci4: Unknown advertising packet type: 0x3c [ 744.374342][T11478] Bluetooth: hci4: adv larger than maximum supported [ 744.381647][T11478] Bluetooth: hci4: Malformed LE Event: 0x0d [ 745.349158][T13727] fuse: fd is not a fuse device [ 746.440933][T13755] FAULT_INJECTION: forcing a failure. [ 746.440933][T13755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.481279][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.4.2082 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.481311][T13755] Tainted: [L]=SOFTLOCKUP [ 746.481317][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 746.481328][T13755] Call Trace: [ 746.481333][T13755] [ 746.481340][T13755] dump_stack_lvl+0x100/0x190 [ 746.481364][T13755] should_fail_ex.cold+0x5/0xa [ 746.481381][T13755] _copy_to_user+0x32/0xd0 [ 746.481394][T13755] simple_read_from_buffer+0xcb/0x170 [ 746.481407][T13755] proc_fail_nth_read+0x1af/0x230 [ 746.481424][T13755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.481440][T13755] ? rw_verify_area+0xce/0x6d0 [ 746.481454][T13755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.481470][T13755] vfs_read+0x1e4/0xb30 [ 746.481488][T13755] ? __pfx_vfs_read+0x10/0x10 [ 746.481504][T13755] ? __fget_files+0x215/0x3d0 [ 746.481518][T13755] ? __fget_files+0x21f/0x3d0 [ 746.481533][T13755] ksys_read+0x12a/0x250 [ 746.481549][T13755] ? __pfx_ksys_read+0x10/0x10 [ 746.481566][T13755] ? rcu_is_watching+0x12/0xc0 [ 746.481584][T13755] do_syscall_64+0x10b/0xf80 [ 746.481599][T13755] ? clear_bhb_loop+0x40/0x90 [ 746.481613][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.481624][T13755] RIP: 0033:0x7efd3d75d04e [ 746.481634][T13755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.481644][T13755] RSP: 002b:00007efd3e58afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.481656][T13755] RAX: ffffffffffffffda RBX: 00007efd3e58b6c0 RCX: 00007efd3d75d04e [ 746.481662][T13755] RDX: 000000000000000f RSI: 00007efd3e58b0a0 RDI: 0000000000000004 [ 746.481668][T13755] RBP: 00007efd3e58b090 R08: 0000000000000000 R09: 0000000000000000 [ 746.481674][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.481680][T13755] R13: 00007efd3da16038 R14: 00007efd3da15fa0 R15: 00007ffe9c733198 [ 746.481693][T13755] [ 746.721522][T13761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2084'. [ 746.926767][T13771] fuse: fd is not a fuse device [ 748.139175][T13788] PKCS8: Unsupported PKCS#8 version [ 748.641540][ T29] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 748.801262][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 748.808026][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.820722][ T29] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.849943][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 748.859545][ T29] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 748.869230][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.884938][ T29] usb 5-1: config 0 descriptor?? [ 748.901591][T13802] fuse: fd is not a fuse device [ 749.348566][ T29] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 749.380662][ T29] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 749.421068][ T29] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 749.448681][ T29] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 749.493603][ T29] corsair-cpro 0003:1B1C:0C10.0037: unknown main item tag 0x0 [ 749.886537][ T29] corsair-cpro 0003:1B1C:0C10.0037: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 749.992575][ T29] corsair-cpro 0003:1B1C:0C10.0037: probe with driver corsair-cpro failed with error -38 [ 750.008897][T13839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.017650][T13839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.307969][T13847] netlink: 'syz.5.2111': attribute type 1 has an invalid length. [ 750.325468][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2111'. [ 750.340009][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 750.340024][ T30] audit: type=1400 audit(2000000418.307:1506): avc: denied { ioctl } for pid=13848 comm="syz.2.2112" path="socket:[49970]" dev="sockfs" ino=49970 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 751.377848][T13863] smc: removing ib device syz2 [ 751.400174][T13863] smbdirect: ib_dev[syz2] removed [ 751.877254][T13863] ------------[ cut here ]------------ [ 751.882774][T13863] !xa_empty(&pool->xa) [ 751.882781][T13863] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.2.2118/13863 [ 751.899789][T13863] Modules linked in: [ 751.904530][T13863] CPU: 0 UID: 0 PID: 13863 Comm: syz.2.2118 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.915834][T13863] Tainted: [L]=SOFTLOCKUP [ 751.920144][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.930635][T13863] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 751.936125][T13863] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 b9 4b f9 5b c3 cc cc cc cc e8 2b b9 4b f9 90 <0f> 0b 90 e8 22 b9 4b f9 5b c3 cc cc cc cc e8 57 8f b8 f9 eb d0 0f [ 751.955756][T13863] RSP: 0000:ffffc9000472f1c0 EFLAGS: 00010246 [ 751.961816][T13863] RAX: 0000000000080000 RBX: ffff88802abf9390 RCX: ffffc90006ee3000 [ 751.970102][T13863] RDX: 0000000000080000 RSI: ffffffff88bdb035 RDI: ffff88802abf9410 [ 751.978227][T13863] RBP: ffffffff88bc12c0 R08: 0000000000000005 R09: 0000000000000001 [ 751.986277][T13863] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802abf86a0 [ 751.994244][T13863] R13: ffff88802abf7fe0 R14: ffff88802abf7fe0 R15: ffff88802abf90f8 [ 752.002204][T13863] FS: 00007f436f8ec6c0(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 752.011153][T13863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.018091][T13863] CR2: 00002000000015c0 CR3: 000000003ac73000 CR4: 00000000003526f0 [ 752.026073][T13863] Call Trace: [ 752.029339][T13863] [ 752.032267][T13863] rxe_dealloc+0x25/0xc0 [ 752.036487][T13863] ib_dealloc_device+0x49/0x230 [ 752.041324][T13863] __ib_unregister_device+0x396/0x480 [ 752.046673][T13863] ib_unregister_device_and_put+0x5a/0x80 [ 752.052383][T13863] nldev_dellink+0x226/0x320 [ 752.056949][T13863] ? __pfx_nldev_dellink+0x10/0x10 [ 752.062162][T13863] ? rcu_is_watching+0x12/0xc0 [ 752.066916][T13863] ? cap_capable+0x10b/0x440 [ 752.071779][T13863] ? bpf_lsm_capable+0x9/0x10 [ 752.076436][T13863] ? security_capable+0x80/0x260 [ 752.081384][T13863] ? ns_capable+0xd2/0xf0 [ 752.086129][T13863] ? __pfx_nldev_dellink+0x10/0x10 [ 752.091246][T13863] rdma_nl_rcv_msg+0x392/0x6f0 [ 752.095984][T13863] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 752.101260][T13863] ? __lock_acquire+0x4a5/0x2630 [ 752.106191][T13863] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 752.112632][T13863] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 752.120217][T13863] ? netlink_deliver_tap+0x1ae/0xcc0 [ 752.125518][T13863] netlink_unicast+0x585/0x850 [ 752.130267][T13863] ? __pfx_netlink_unicast+0x10/0x10 [ 752.135569][T13863] netlink_sendmsg+0x8b0/0xda0 [ 752.140311][T13863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.145597][T13863] ? __might_fault+0xc0/0x140 [ 752.150258][T13863] ____sys_sendmsg+0x9e1/0xb70 [ 752.155013][T13863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.160274][T13863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.165618][T13863] ? __pfx_futex_wake_mark+0x10/0x10 [ 752.170886][T13863] ___sys_sendmsg+0x190/0x1e0 [ 752.175843][T13863] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.181034][T13863] __sys_sendmsg+0x170/0x220 [ 752.185618][T13863] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.190709][T13863] ? __x64_sys_futex+0x34f/0x4d0 [ 752.195662][T13863] ? rcu_is_watching+0x12/0xc0 [ 752.200416][T13863] do_syscall_64+0x10b/0xf80 [ 752.204999][T13863] ? clear_bhb_loop+0x40/0x90 [ 752.209654][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.215541][T13863] RIP: 0033:0x7f436e99c819 [ 752.219941][T13863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.239918][T13863] RSP: 002b:00007f436f8ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.248332][T13863] RAX: ffffffffffffffda RBX: 00007f436ec15fa0 RCX: 00007f436e99c819 [ 752.256309][T13863] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 752.264276][T13863] RBP: 00007f436ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 752.272249][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.280481][T13863] R13: 00007f436ec16038 R14: 00007f436ec15fa0 R15: 00007fff6009fe48 [ 752.288455][T13863] [ 752.291474][T13863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 752.298731][T13863] CPU: 0 UID: 0 PID: 13863 Comm: syz.2.2118 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.309645][T13863] Tainted: [L]=SOFTLOCKUP [ 752.313940][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.323966][T13863] Call Trace: [ 752.327233][T13863] [ 752.330139][T13863] dump_stack_lvl+0x100/0x190 [ 752.334806][T13863] vpanic+0x552/0x970 [ 752.338772][T13863] ? __pfx_vpanic+0x10/0x10 [ 752.343250][T13863] panic+0xd1/0xe0 [ 752.346944][T13863] ? __pfx_panic+0x10/0x10 [ 752.351341][T13863] check_panic_on_warn.cold+0x19/0x34 [ 752.356685][T13863] ? rxe_pool_cleanup+0x46/0x60 [ 752.361519][T13863] __warn.cold+0x191/0x328 [ 752.365922][T13863] __report_bug+0x296/0x3d0 [ 752.370406][T13863] ? rxe_pool_cleanup+0x46/0x60 [ 752.375241][T13863] ? __pfx___report_bug+0x10/0x10 [ 752.380248][T13863] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 752.386044][T13863] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 752.391835][T13863] ? __flush_workqueue+0x426/0x1200 [ 752.397008][T13863] ? rxe_pool_cleanup+0x46/0x60 [ 752.401832][T13863] report_bug+0xb2/0x220 [ 752.406053][T13863] ? rxe_pool_cleanup+0x46/0x60 [ 752.410876][T13863] handle_bug+0x16a/0x2a0 [ 752.415193][T13863] exc_invalid_op+0x17/0x50 [ 752.419679][T13863] asm_exc_invalid_op+0x1a/0x20 [ 752.424503][T13863] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 752.429939][T13863] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 36 b9 4b f9 5b c3 cc cc cc cc e8 2b b9 4b f9 90 <0f> 0b 90 e8 22 b9 4b f9 5b c3 cc cc cc cc e8 57 8f b8 f9 eb d0 0f [ 752.449530][T13863] RSP: 0000:ffffc9000472f1c0 EFLAGS: 00010246 [ 752.455570][T13863] RAX: 0000000000080000 RBX: ffff88802abf9390 RCX: ffffc90006ee3000 [ 752.463522][T13863] RDX: 0000000000080000 RSI: ffffffff88bdb035 RDI: ffff88802abf9410 [ 752.471466][T13863] RBP: ffffffff88bc12c0 R08: 0000000000000005 R09: 0000000000000001 [ 752.479421][T13863] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802abf86a0 [ 752.487378][T13863] R13: ffff88802abf7fe0 R14: ffff88802abf7fe0 R15: ffff88802abf90f8 [ 752.495337][T13863] ? __pfx_rxe_dealloc+0x10/0x10 [ 752.500256][T13863] ? rxe_pool_cleanup+0x45/0x60 [ 752.505092][T13863] rxe_dealloc+0x25/0xc0 [ 752.509305][T13863] ib_dealloc_device+0x49/0x230 [ 752.514129][T13863] __ib_unregister_device+0x396/0x480 [ 752.519478][T13863] ib_unregister_device_and_put+0x5a/0x80 [ 752.525182][T13863] nldev_dellink+0x226/0x320 [ 752.529746][T13863] ? __pfx_nldev_dellink+0x10/0x10 [ 752.534862][T13863] ? rcu_is_watching+0x12/0xc0 [ 752.539602][T13863] ? cap_capable+0x10b/0x440 [ 752.544174][T13863] ? bpf_lsm_capable+0x9/0x10 [ 752.548822][T13863] ? security_capable+0x80/0x260 [ 752.553737][T13863] ? ns_capable+0xd2/0xf0 [ 752.558051][T13863] ? __pfx_nldev_dellink+0x10/0x10 [ 752.563141][T13863] rdma_nl_rcv_msg+0x392/0x6f0 [ 752.567890][T13863] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 752.573153][T13863] ? __lock_acquire+0x4a5/0x2630 [ 752.578080][T13863] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 752.584483][T13863] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 752.591397][T13863] ? netlink_deliver_tap+0x1ae/0xcc0 [ 752.596662][T13863] netlink_unicast+0x585/0x850 [ 752.601403][T13863] ? __pfx_netlink_unicast+0x10/0x10 [ 752.606663][T13863] netlink_sendmsg+0x8b0/0xda0 [ 752.611403][T13863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.616667][T13863] ? __might_fault+0xc0/0x140 [ 752.621333][T13863] ____sys_sendmsg+0x9e1/0xb70 [ 752.626070][T13863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.631330][T13863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.636593][T13863] ? __pfx_futex_wake_mark+0x10/0x10 [ 752.641868][T13863] ___sys_sendmsg+0x190/0x1e0 [ 752.646520][T13863] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.651717][T13863] __sys_sendmsg+0x170/0x220 [ 752.656283][T13863] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.661371][T13863] ? __x64_sys_futex+0x34f/0x4d0 [ 752.666299][T13863] ? rcu_is_watching+0x12/0xc0 [ 752.671042][T13863] do_syscall_64+0x10b/0xf80 [ 752.675608][T13863] ? clear_bhb_loop+0x40/0x90 [ 752.680259][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.686123][T13863] RIP: 0033:0x7f436e99c819 [ 752.690514][T13863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.710091][T13863] RSP: 002b:00007f436f8ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.718486][T13863] RAX: ffffffffffffffda RBX: 00007f436ec15fa0 RCX: 00007f436e99c819 [ 752.726428][T13863] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 752.734374][T13863] RBP: 00007f436ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 752.742333][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.750276][T13863] R13: 00007f436ec16038 R14: 00007f436ec15fa0 R15: 00007fff6009fe48 [ 752.758225][T13863] [ 752.761582][T13863] Kernel Offset: disabled [ 752.765881][T13863] Rebooting in 86400 seconds..