last executing test programs: 8m54.556844687s ago: executing program 0 (id=897): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x1, 0xe225, 0x2, {0x5, @vbi={0x2, 0x9, 0x101, 0x34343459, [0xa, 0x302], [0x8003, 0x1], 0x108}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x8020008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000033a40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) close(0x3) recvmsg(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) r10 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067e89900"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) 8m51.984513771s ago: executing program 0 (id=907): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x9}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 8m48.65070723s ago: executing program 0 (id=919): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xcd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20004030) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 8m47.044045246s ago: executing program 0 (id=927): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) unshare(0x22020400) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) (fail_nth: 1) 8m46.206823823s ago: executing program 0 (id=930): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') move_mount(0xffffffffffffffff, &(0x7f0000000880)='./mnt\x00', r0, 0x0, 0x240) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0x4143, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) 8m45.971581437s ago: executing program 0 (id=931): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x200101, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0xa) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000060000000000000000d5d5688b006e626d81c77d6a7b186fc25e9ad9b823798b0a5e4156880dd0d1740c0a9c25e8a413586962d3bd051204b44dea"], 0x48) 8m45.874897086s ago: executing program 32 (id=931): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x200101, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = socket$netlink(0x10, 0x3, 0xa) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000060000000000000000d5d5688b006e626d81c77d6a7b186fc25e9ad9b823798b0a5e4156880dd0d1740c0a9c25e8a413586962d3bd051204b44dea"], 0x48) 4m36.493339824s ago: executing program 5 (id=1658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r6 = socket$inet6(0xa, 0x3, 0x7) pread64(r1, &(0x7f00000002c0)=""/66, 0x42, 0x1) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x2, 0x1}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1e5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 4m34.187692249s ago: executing program 5 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42000) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) 4m34.006187314s ago: executing program 5 (id=1669): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}}, 0x40000) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x250) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x3f) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = semget(0x2, 0x1, 0x2) semop(r6, &(0x7f0000000140)=[{0x4, 0x5}, {0x4, 0xf}, {0x4, 0x800, 0x1000}, {0x2, 0x5d0, 0x1000}, {0x1, 0xa8f, 0x1000}, {0x1, 0x2, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x3af, 0x1000}, {0x4, 0x0, 0x800}], 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[]) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a7172918811020301090224"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m31.332851175s ago: executing program 5 (id=1677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a83c0081000b0008004500001c00000002001190784c5b07ea91069714ad497adef674053b00000000000000000020000000089092703eb0c2dc438c85bac5f760d7f562bf2be19bbbe01408e609c63492a2d33290ba8846beb0fff64fa7f589ba81bd24b18627c77772dd28308e628f8ea6122cdd0417ba39f533875217f95244cc6b56e985956e5f079d6d43b6df30"], 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r5, @ANYBLOB="040028bd7000ffdbdf250200000038000380060007004e2200000800030002000000060004000300000008000500e00000021400020076657468315f6d61637674617000000008000400080000002c00028005000d000000000006000b0002000000080004000f00000005000d000100000006000f0003000000080004000700000024000280060002004e230000060002004e220000000600060000000800090000000000080006000700000030000280080004000000010008000500090000000800040036d6000014000100fc0200000000000000000000000000012800018008000b007369700008000800fcffffff14000300"/262], 0x10c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}, 0x1, 0x0, 0x0, 0x604c000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000007c0), r4, 0x0, 0x1, 0x4}}, 0x20) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)={'dummy0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4m29.491106422s ago: executing program 5 (id=1684): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x98004, &(0x7f0000000140)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x0, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x969, 0x2, 0x4, 0x0, 0x9}) 4m29.106078391s ago: executing program 5 (id=1687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x4000}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0x7, 0xf4e0, 0x2}, 0x0, 0x0) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) 4m13.94354268s ago: executing program 33 (id=1687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x4000}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0x7, 0xf4e0, 0x2}, 0x0, 0x0) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) 3m53.019712599s ago: executing program 2 (id=1768): ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x8342) syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x5, 0x10000, 0x0, 0x3}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe873}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x80a0000, 0x30, &(0x7f0000001240)=""/48}, {0x3000, 0x23, &(0x7f0000001140)=""/35}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000580)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a302c004375b2e72761e3286036c09644348e652cfaa4670fc51cd9f5f782f5862efa52c7cce7167954616dbd194062c9f882e653926f51521ad749abdf90012b6b1afdfe08f0ca169ab5711f2e87ff0168d07986eb33fc83d42d3190fc18c3f12182e9a132453fd832da978a94ca2a65545a8edcd0b4c0ce2af42b5b18ea6bf1e1744c65f8e8732db4239a86d2ac1ebc75c50df06620a5d6944514a298626010461c14ac83be6659a5a1bec68e42e88089b89e7605"]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f0000000680)=ANY=[@ANYBLOB="6d706f6c3d696e746572f8bbd684decf3528495e060f6c65618f653d72656c61746976652ce2be1dad8a456a00"/54]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) 3m52.647748869s ago: executing program 2 (id=1769): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x680a80, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x1b, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @sliced={0x4, [0x1, 0x6, 0x3, 0x6, 0xb, 0x2, 0x6, 0x8, 0x6, 0x3ff, 0xa8a4, 0x3, 0x7, 0x800, 0x9, 0x4, 0x9, 0x1, 0x0, 0xff3, 0x7, 0x12, 0xffff, 0x100, 0xfff7, 0xf800, 0xffff, 0x9, 0x5, 0xf1, 0x4, 0x1003, 0x1d, 0x400, 0x0, 0x3, 0x9b, 0x3, 0x8, 0xff, 0x0, 0x2d, 0x1, 0xe, 0xb, 0xb40, 0x4, 0x1332], 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 3m51.739643487s ago: executing program 2 (id=1772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="ec99bd1ea27f6fd3910442e71ad55ce8670525e5fa407858170159a32f0b9435692b2932d68962489ab29124c4eb807814914a5eba88dd719f1a866ed56b4e4806bff675776e37b43ca4bd7d1d44ea42ed118cbc652a81e5ebd1136c721610f605c6f1b6f54e660985e2b55ee4d87eaa41c91f828e1ff424d0d6747774a9ab4638ec2101ff8259ff088a5b94633e1d7f331f8da8724805fd73815c422fb20352dc3c0a8730b852c73e43df50d8056250ffe51d3038878f11106f3a93af6b27f6994e8c53f3902713a69d0814905d5bbdde0863098109666a7203e67f4d22d0ef41a12cb6c2c2fa1bc11f563cb7546943381c1569693cd11cc359d876119f3e40473ca9a6d8feb9919a951330c3586be9fe2e670d", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESDEC=r2]) 3m48.519804527s ago: executing program 2 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a, '\x00', 0x0, @fallback=0x2}, 0x94) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@random={'system.', '\x00'}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) 3m48.26400861s ago: executing program 2 (id=1781): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x4}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4048804) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x8084) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0xfffffffc, @private1, 0x20000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000b40)}], 0x1}}], 0x2, 0x814) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/200, 0x1d) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000480)={0x2, 0x5, 0x4, 0x40, 0x9, {0x77359400}, {0x1, 0x8, 0x57, 0x3, 0x2, 0x9, "18d3a00f"}, 0x6e876759, 0x4, {}, 0x3, 0x0, r3}) 3m47.387206956s ago: executing program 2 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x84}}, 0x0) 3m46.58687009s ago: executing program 34 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x84}}, 0x0) 7.282296279s ago: executing program 4 (id=2401): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x8f5, 0x0) write$binfmt_script(r5, 0x0, 0xd9) write(r2, 0x0, 0x0) 7.165260551s ago: executing program 3 (id=2402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 7.111830921s ago: executing program 3 (id=2404): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 6.888269206s ago: executing program 4 (id=2407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, r3, 0x2) sendmsg(r2, 0x0, 0x4000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000140009050000000000000000021088fe", @ANYRES32=r6, @ANYBLOB="08000800660400000c000200ac141441080001000000000008000a0000ac1414aa1400060006000000040000000500000004000000140006000900000004000000a0"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x48, 0xffffffffffffffff) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xce9, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) 5.866969813s ago: executing program 3 (id=2409): syz_usb_connect(0x0, 0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000365b58e20ac0501854285010203010902350001020160fa0904dd11000e0100"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x1a, &(0x7f0000000300)=@string={0x1a, 0x3, "6eaa91842e3dfa76674660a5a50b813e52c57e9ad46b35e9"}}]}) 5.095505679s ago: executing program 4 (id=2414): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f62415cd600ff01000000000000b3584cf606c267dc000070380d000000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (fail_nth: 2) 5.028245299s ago: executing program 6 (id=2415): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'vlan1\x00', {0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x7c, 0x1, {0x1e, 0x9, 0x78, 0x3, 0x7fffffff, 0xd, 0x2, 0x2, 0xca9e}}}}]}, 0x58}}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'sit0\x00', 0x0}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x8}, {0xc, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xe42adb80cfa7e7b7}, 0x0) 4.439754392s ago: executing program 4 (id=2417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) ioperm(0x0, 0x2, 0x7e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) gettid() r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) timer_create(0xb, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_proto_private(r5, 0x89eb, &(0x7f00000002c0)="d8287f62b207340078173905c6e22af91186ebeb7827bfdcdf5709c5ccbd5f6a70fa79e6dccfc913778d721998606b5a645ce579ea30ae3eef1e5801aea1437cb42cddb357cd445a5c29b80a5ae05b5de9b01f3de2589039d4eb5e6f55e2b25cb43fbaff69fd54c1") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 4.36428602s ago: executing program 6 (id=2418): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000004f40)=0xffffffffffffff53) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x240) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) ioctl$int_in(r6, 0x40000000af01, 0x0) syz_io_uring_setup(0x239c, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x20000}, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) dup(r5) 4.013133811s ago: executing program 7 (id=2422): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 3.788354911s ago: executing program 3 (id=2423): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000043c0)=ANY=[@ANYBLOB="182300000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000ec220380e82200800800034000000002dc2201"], 0x2318}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x240, 0xff56) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_DELOBJ={0x204, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xd5, 0x8, "9b08d8017415334037a5cda1169e839b6036c09e3ba727462241f1f32e4a2e5f6fe102849c4f5923df40ad2f9c8a7b53dab06fe247ed441fbab2758d21dbfbd3235bf12799c2ef6489728251ba43c1e27c27795b70fa762ce8c3e64f96f6e551fe859bba15853f343e3d887f0dca5e8439ba223f0f311381a9ee5e3e8ea5084b602e6571cc20f7c927fb470b212528aa1f3e4c43a42dc5a0a8a3f67bdecd6c1b7a5007743c7901bd97e295c4e0941926a9e46100eec7ec76c91edf610ea04335c0cb1b1d4d6c9f4166fea88d59ebaf6b07"}, @NFTA_OBJ_USERDATA={0x13, 0x8, "de9433ef6a02b95f9a0eaae7ebdcd2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xd5, 0x8, "cf0383c78b799c661f1ab351ccba075f7038aace1f56e169b55890ebebc3922cebb0b235d46b87a34ddb1a45f1eac9b95e8bc66964eb41fb20374d9f6d8ce67130ca8997793cd2feb8a64177ce80df7a66fb06cb8d98afc579588f2119f1401a08ba57ddbae1d61fb248a74920106e4a6836cb271227fd8045851622d3a72f82aef06e312c9f0234c82632336ec19b996528bbb11a9b6db0141f7b5202a6c27dab9aed634416aba91286287b6edc1300b599b53c14ca810a6ce1640108cf8e3f4ec7b696bf2c1c104fd431e0f38bb630ca"}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x344}, 0x1, 0x0, 0x0, 0x8010}, 0x4854) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 2.939687557s ago: executing program 3 (id=2424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, r3, 0x2) sendmsg(r2, 0x0, 0x4000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000140009050000000000000000021088fe", @ANYRES32=r6, @ANYBLOB="08000800660400000c000200ac141441080001000000000008000a0000ac1414aa1400060006000000040000000500000004000000140006000900000004000000a0"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x48, 0xffffffffffffffff) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xce9, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) 2.871056674s ago: executing program 6 (id=2426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x481) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x3, 0x2000000, {0x1, 0x0, 0x2008, 0x9, 0xa, 0x0, 0x3, 0x3}}) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1260, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000100)=0x1) 2.574095053s ago: executing program 7 (id=2427): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f", @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x17}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000800)={0xb, {{0xa, 0x4e20, 0x8, @loopback, 0x5}}, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000000)=0xffffffed, 0x1d) fchdir(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) 2.055867755s ago: executing program 1 (id=2430): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x9, 0x7fffffff, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @loopback, {[@end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000800)={'syztnl1\x00', r0, 0x1, 0x8000, 0x9, 0x5, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x65, 0x0, 0xd, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end]}}}}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xa4, {0xa4, 0x1, "2617b29a6b9646f08530f6ccca389bc5cbfea6953179628c0f00be5126d3c30cb53f2b0a379d59708ad036a7a1da7dcfbe1d6c4d85570208094a5dabf3cfb336f53892348258c817119f7986ace71a32dc4a4a10a03b34fef3385555e1c732ee93bed1c2a09ff3a3305cbe8acafefd93ea26882628c2cc03bdf69dab6034b928068d7a43564880e71899b4ebb376ea79382921ab68a4d9d04f19600785fc31f882a5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "d8ebe96458716e2d395f083b043f7f74fe8c40a6c23ab41959a6102896d8627212b5f76adb227fc5365cf677118c1dce7ced3bad8a05599f496ce5042188a9214de9ab667e68caaa0a323d"}}, &(0x7f0000000140)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xd, 0x5, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x3, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x2, 0x4, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0xaf, 0x4, 0x3, 0x7f, 0x36}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x80, 0x1b, 0xff}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x7, 0x8, "b8bd09ee", "5262b53f"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3e, 0x10, 0x2, 0xa7, 0xc, 0x2, 0x6}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8a}, &(0x7f0000000480)={0x40, 0xb, 0x2, "49f7"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "1150"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xdf}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x3, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x9, 0x7fffffff, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @loopback, {[@end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000800)={'syztnl1\x00', r0, 0x1, 0x8000, 0x9, 0x5, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x65, 0x0, 0xd, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end]}}}}}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xa4, {0xa4, 0x1, "2617b29a6b9646f08530f6ccca389bc5cbfea6953179628c0f00be5126d3c30cb53f2b0a379d59708ad036a7a1da7dcfbe1d6c4d85570208094a5dabf3cfb336f53892348258c817119f7986ace71a32dc4a4a10a03b34fef3385555e1c732ee93bed1c2a09ff3a3305cbe8acafefd93ea26882628c2cc03bdf69dab6034b928068d7a43564880e71899b4ebb376ea79382921ab68a4d9d04f19600785fc31f882a5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "d8ebe96458716e2d395f083b043f7f74fe8c40a6c23ab41959a6102896d8627212b5f76adb227fc5365cf677118c1dce7ced3bad8a05599f496ce5042188a9214de9ab667e68caaa0a323d"}}, &(0x7f0000000140)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xd, 0x5, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x3, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x2, 0x4, 0xf}, @wireless={0xb, 0x10, 0x1, 0x8, 0xaf, 0x4, 0x3, 0x7f, 0x36}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x80, 0x1b, 0xff}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x7, 0x8, "b8bd09ee", "5262b53f"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3e, 0x10, 0x2, 0xa7, 0xc, 0x2, 0x6}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8a}, &(0x7f0000000480)={0x40, 0xb, 0x2, "49f7"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "1150"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xdf}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x5}}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x3, 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) (async) 1.916807686s ago: executing program 4 (id=2431): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) 1.673252883s ago: executing program 6 (id=2432): mount$bpf(0x0, 0x0, 0x0, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c001f3096a3d6954a91"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.555347034s ago: executing program 6 (id=2433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r0 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001040), 0x101, 0xa000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001180)={0x4, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x80a0000, 0x30, &(0x7f0000001240)=""/48}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x0, 0x23, &(0x7f0000001140)=""/35}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f000000b280)=[{{&(0x7f0000001280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001300)="1cd3bcca6deda562a1521736835b43845a17d09f1bf1e582dbb0907cafb75fdb924f534aab143898ed3098a0b7c27173d2a14fe20b7d1f8280c05981f381d01136abb8e78c796778a04fb615fa19aa2296db73ddec14a44226edb595c74ac7f95021466b6f08ce96be45042a10d355e7cdf40bf3b94e38574fbe36094f2abbfca877b05c0e69a770243ad2173081616387c29ad7efd2b61d1ef157de398a0408afc10134b72438c8638b7a9535537fdfb27fcc37d8b69deafa3e5f488aba32f9fc7c4e3c8a3fbd914dda94eef8d973822b712ce877ae694488376c3e351965cb0b0e041a7500937469dd4c3e0993fe7456df", 0xf2}, {&(0x7f0000001400)="d578b6171b8ef12f0472a561f3971dd969981a841533d8f125c6f81f33d457e138e058a807b1e6a6df14e9a31a64a1116e48392f3be77db13bd789d636cdb6978b3342317d9768896347e870ce5056a4b0fc94db017ffa44d649a9f4883fa7c70f5e93fc49d046718916021ed53eec56c98f38da7486428fd06de813a0d062e1163137d535d9828d68bb81d0919f027e494b692e5b3e343f88a76eb66e4903d2fbe940ff233368d8f990ae547d768046bc7a38938447d93a78701e4a9bfc8e030aed9f1a08381ca765f64b890ac57a16b25c3961ef06abc1911a939dde79813563a5dd2e4c76", 0xe6}, {&(0x7f0000002600)="1216c14da40594d5b13c55f4d9b8972f656273b7ad348fe1979d1be613604d5902a1b64b75b14b71e9e4130631cd053ab360f2b21ab23477818720d9c8d8a12183098f497ddc9f4a164725ff9558722a4741ed485de3b54a81347c52aef722e9277761f68e1e22733e9a067d7d6dd17dff8d0c8dd95030861ce5b0766de94e48c8667db052ac946d71ffe5138053a1b50e711aee7559dd3c4b6ae96af036faeeab003866eb7b7719af1f686ed59144ffdb8e232073ab7f9dcbcc2987dc31b6109add196f55d67d39748990b6392d81821c2689c75b6394ebffa02648190e240172c04090076b96d2a0ace51e3348f0fc4cc33f94fe7ec94e09acf798f855d67d8dc20a4e3b87eadcd4ca170064a66966b79ad95b2493d84af3d02eadd212429b38142475ec6458c7aafa29967c49b3cc38b52082824d67e85be322724ebb883834afdd41efa4f1f109ce62b5c8c0b215a3af7abc32f58b098e9e7e923dcb72d7f65350f163d2e348bfea11c891b88b215d7d56434374f39a2a55b5956eac7143236180a4abb2bac8a0a0fae44e5f0f1541e89a510834e474c51a0697fa2633b59fb18c7f9087c826767ba6d0e7a271d1788236051d8307aa5ce19c00d75ff48ce84c5c7376185b7c31a6cda982200800ba8e6558161de5dbcd70d360fcabb697853afcc7b4b22d2323d915ad8ba9df91e9856110f3e882c80976e1bfa1c1b0ac7e1d55df977cc814b8380735cd38de7eec443054510d82d41dd4ed4b683ca0f9140b184fdc6b505283865475860c8ab2ba82b02103ef6f4667c40361b223afaa17c2bfe6fd99ffc422bdd2291e0f4da2cbd18e56c2250897ce371bd89dcd14c42b65fc1fc1c6ca3d45e493584ad5fad7396a0bfe25f2b47be5dad12528de118ec214c8ccf58fe5dc7f3d5be66373e724a415139a56df2a3b50c179c2bcf081921fd031172ea77efabbeb199cef6c517af78cfae96245d2495af2ce54c80a8b9949da79c4233ff64544625e1a6da8ddf419f5d936c4a79e7861e21c3b92d169d067373eb805aa8b57dbb28453b39e60c5099f29722192ee798e0c4305e385988b9222ec4c8c6a0231e771e5b751e6c18b3aa23dc88a171993e0e1c0e3678448785b05b3862ace47f75ead8b2678eabfbd209ed373b371564ff3a9cf6e84aa0efd72fa13b88c99c110f24de337a9a320fb6d5757be65c6e709701956cb7ff48ddb64d61fcaddad02dd61e638807f0634cc5f04c121b39910bd0d7391656b8d7032ec5edff7637eba5e750f714d6fdcab4a43e3964b195c7841c0a2afaaa2ebab1bd48157023f48d0330ab27641836e0524419a8d640db9b00c993a7d5767614348ce477e5dbc468d91346cbb600c542ce916a01dbc3817da209bfaf8ccc7deeb00559a9985e97e6f3f185cc66b9ba2e6aab9018946ece91e5071e2497e7ae6530076951ebaf9eab864f434dd2ba85557110ec8280acf94155e128472bc174672a9d79615b4e1e6934b3aae8a42046f840206c15ec9a410aa1467310d87d12f8144f81d668825e095792908565a18643cf882d30b06a10f62cb86d40c85f85a4f9e18c236ee3a2ddb9f42784f23045d72791f952b71d760821fb14f31a1bd1f0049d877549d8c03ec934462e91872f6402bb49d7fe2e7d2c42123797024711e86c30c03ca93e419219aff93cbceb9f08d77ed63d71a2748df9f6b258a140f9733318a3db94e2ad7f7f6f12c92c82c61397db2d946a44f70c1736c0591e43e1de3eefddf6c124c1ef4595df6e15b3fae0390166935f06413babf00921f835b1c34067beb19b8ee6ae4da3c8b7e39ebcb614b8d717f80ffcb331356c389a63534eea0eb878d4c49c6d959c1709edf64f43a8b9eb1cdda5b7f5ef52d56ea1d146d40eb3a457963732f6785c7ec85c12532f48be3228f881a145923866d0e3ae0b1efce1a6f209871a3414a3d6c8c5d6bbae68940568bc00554c0bb81025cb7a74cd6ce7fd31c553f1f57e1cc3c75aa8b7cdd20e8abeb070fe253df3d13d16ec381f3b325c7550c7ca8e2b66e07b11ac7911af41a63c12f5acc2392b4555f4ac347cbf24d0c2db4c829254185a3a6091a436493364b5e6ce83b95056a8392fd569d9325dc91d1a9220acf3782dd5300c0ea6827d2942a866fc45fb5fb0da08447ebcad7116d6b74383547c47277d4a2f2614176a0084f26729e777d14b9e2e69b2f142f920bcf3bc78d5c677f112395fb611d05410843c66323e67454b93c65bd50f490253837b659cbbe7751f4c285bffb18f9edc48b654d9280d967116affa779326b2002dc8972d3784d586498b69037c2fd974279f02c860253ceaf28a3a3dd63be20560a6ca6999ffa6a0c4560262c4fdc8fde9cc066e934bf13dac447da0dc1d53e4e3411e7a45c7de7946de9d2ff79768731cef61bdf74698b7b8ca974173033b75052fc5c356c650a047963a836c1eb88787d05144b49d790b74463291b8d3c0b8ae9eb70d5ced967549b05f496c848c25b74b87be62bf2b1f301c41f47ae742a9c280e9f915e5e48c6db5a74d562b73be88893bd18d4b2eafc8be33a2693cbb4595779fe699568aaa7810f48d5adc609d9b01eab8900c96d11f562b3de501be4ad1b8fe4587c446b35157c14c1e00af95a289bc9138bbf0970781da1f40194e4077c79cf326cbc64e54b56cb09c4bfdd9f83db54a6e7cf11e10aceeb7fd8ad84248fc3b606e0c4c46c8e8d97de69026fee3065ec058fcd51542959ce66188a22084210efce6efcab989bea7acf98a5f7cdd74f2540c7e3eaf6cf4d9bc2ce94e5a8c93f9a5c29b1d517d8f7645aa17189421158501df0ed6767bb20b07e0440bea4cebd246c2c16130561d0e0063c75e8f692f8cdc3b40cec39c25e86e749ee0f1867f1615d9d9af9620dc955393cc8d8eccb82dbc32313b4a7119ea240c7b0c4689d50bde3595a569006a6279eb9c91713c540b4936e00ec3ca4d7acdcfa8958da82d2297ac083a6c012b64c1b0523af0f348b54430d78510cba5c68de98f27864cf61d111d7fd37de136a7fe26ba19c332dee1847b0817647cce685df3957cbacda4a69b10e67e134770530088419b6c8eaf3e69d7a347e01d24cde8b6e8e3aa6a48a31ab7ce1c213dae954e660054ead6e8fa370a7d60e16974363ad3ab9a7d4574a239e8e204783ac5f855dc065d65f98f6c59db0f760feba7cd5c718c2c793afb8f1f0185bfaadc7e14dff5b931e5b6435a7592b3ff0d74d3cdda1dc7ac41c08799c2a409ca15922955eff5dd120dd0f83d0d5c62815860c82e1856cf3192ae828b747282e172d0bb9d4632b4f28426eb19b06bbe9119af42fc1b4dac55401fe3515836cd6548741996e7524bde4cd92fdb9546d7176a88431fefa8f30c0d71ed41cb2a2563e2d672e31ca95d4da01f88d79a5c3c2fac3c14d9012ad1ffaf4ad2b58aeb05a28f75714bc32a642307bcb86d3697a7b78d7962ae4812469c7d258ce4b63e2e66a937ee60dbf9667e963426e9dbc6a86523a317bde557a450dca273dc20f2c0cbb596c634d286d18582aafacf10a6d9f02525297de5d0b448a66224ffca5627464ee8b525a3eca88b0f8f99bbd81be6ab024069548658a7d9c606b54031655d6d78cc2c70b7646d3489b6b2eba640d2b9270a7be582c934379ea1caadffa869c3fee7d70dc82f6f5362b823946a8359095d24ebb37d9a3eaf4f700921ec81cceef736bd436fd2ac2bbe6faccf9c990580f17e6c780b86434d64cbff45b56ef67d48471da6b3ac3671d8c59f9973fc556fd50cc096ff97b5a3c7751b571d2001a520069e9ec4adcc533c03461bec6ae9c96cdcf04f0b6bbfe1db34ef40194ed213b8b8de245e9a4d379fb5dac1259db34f324f0e6c4a6b10fccb9c4137f75b9a26465a4b15e4af717783ab940857290a2548840f142867f38c43374195eff724fd4795882a06377c10d755909ed77dae076363a69dec8cc042f54822a463a62807e8a0d5b7ba96bd82b0af00ec4abec63ec6fd02575462feea79fe68ecc498554ae3fcf2d1b18926aa311e0e24890f1e79afa6b5237f544be89e5e3742a5e032f3d5db49bbb936dc245582ca7ec49070da63db048761278eedfc46097f63a6531b232ad44c7de898411e5cf90c9227e04ede0065260d72edd9206b41141c06edd830809a16c9a49a49caa29edbb2cbb12b546302b9ec70f30c631f649e52a9c0324d8663e7a1474a0ccb0b107486e0663c9c0bd8cddd51a64ab97cf795fb4af1a615a5321b05a7a8b10c4463db94337b36526b335c40c6af10c266611ee35ccb89aac9cfc24e9c9b0b48fba4883d97aeb266aa43c03c4cd3f936544a46dcf5d4574f41d47287430b66872c220e6b1c0b4bbaf05ecb1f6ee78a25248b21ef1b8a8bd58d21d4de25e8818574bd7993ae988a700d6ae8a265c1dd0c561dc88aa0556d5254cc590017ef4b78281a1f5e8c8b35344f2fd0045100923b1ad30be421fdf996805bbbebde6c08a4af21afc0365f7a159f005715a21026e2e8fae8a50bebef36a50e3d556cd6509143ffab9765004b0d1c4417a10853d9b9c3d47b6d8faab85201b6629c889cb17c0fdef137583ac1a0aa0e6f6de484bec8ba40c5e38d5dae83b9a28c7a13d37f0059167b9250aad6a2e63c21b2bb5b703627ab710b95d89b3cf0f9f80a1d19db2408725d89dd263856ab08cb3e0e8e6630383bcdc70fab676b44de926a898463bf01256fe4903506964dae2eed984fc6f2d854295a053241960616336a80e67b35b93cd25af940c30fd4a15a3cd1b22bc8d71aad60b8abd02ff83771202e86a9229cf4e53628a7b8c108f2a8e5d06ad483aadc7db5769473d61a06ea66c1d3b1414c072dbaaa60c4e698e7a02edab8e6070d9bf648158143671870c1d04c5c4144e11d83e7b3758b85ebd88d81915564bec896a59bca68e61646c7fd4e8d3ca96c8442a90bde6a1e836689179a1b668907757f42a78a635dec84e67c480625a30bb1b6e2fdc3cc3baee8efa00f57fcf3ea516d22727028db673cfd05d64cf51622c5036e3cccb12d0e4faad6790d198cfa88a6d5075a0f63ceba92aa12880b496140acc2ae3d4c47734402bbf410d44dd0b6a710bad6365aabd858b3d686595c1b56a3f85cc53b94bcd96256fa09a1a8d196d8103f1682fb9ccfa6ffe6d7ecfb276d5f48351f6b027a63c873cdf427cd0d6ce3d1eb0a7fe70aa58b89fbe136f1f0b5a94799b0c25f6434d526594e4c08e5dc7de63935363652187dc5c6076c3e6ac4873fa4d0aff150d2012327a21958a762a998243d10d7e04244d8a560ecdd9cc8d7f532270f9d353616dc4e4f1f67c43f8026cb09c7f0aedf1274f606240b3829253f79070488fcfcdc0c2e683d089c06aa5beed9b302d0bd16351ce5a88e47da0d049772cb25f7ab54ae1e2a16beea074060ede775132ec4b2376f05ce958cd989de2d321bb00dcd29f08e9736d403b21690400bdbcff115d08cdfc78fe4a6e722396155ace940e7fa1b7f21f68f73b6d7bf8e35607885a6d17c6413e4d5a143f451ed555ee9a6959ae4fe653e2d33632b2647d076d6574906230d5257d6de22dcc86220111624a8c469223bb839ca54def34cdc0268558a784fb73fb971b212aec8ef8a08461af362baa7783325157561f7e840a0cff988532141be4b4bf5ac57efc0cbf5e1e0e2fb2ab91045707879468d7bd69ad5b73c208d9e220060a3cb5d4ad12bceae99967f315fbeec2b18d42f6d54fa4a7ba16dbeac487aa981f9a98a821f646538eea94aa7d6724a6", 0x1000}, {&(0x7f0000003600)="fa8def068d17cbf98932b4ad373432ca05c4f48060879b7ec4c52c59ec60b0c1c2168909ff834f4497206b43a4285ca9504641c378aa8e0c5dfd4ccbb6a36141994b99a3104263dfdc058743819548715047c4f526eb8308d4a798d90df5e4818fbabfcb91da4394fad6d09beaf6dd035d9538427ea1a6a04fa43d1a0389d7543879e988accee8d6c9aff7b97c3807e4d3bc88870bf31b7d1725968d89b188a32eddf62859515c1f3598284736a9264bd970753532b23b20c2115797b48b8d97e32fa40b2f0876c6ce71bf002462611b0d04e3e260f1a9c6279dbda2af63d11b19680176210c7175", 0xe8}], 0x4, &(0x7f0000004780)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x2c, 0x1, 0x1, [r7, r6, r11, 0xffffffffffffffff, r2, r1, r7]}}], 0x50, 0x40}}, {{&(0x7f0000004800)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000059c0)=[{&(0x7f0000004880)="1847075e53f54290feae6d4b1c3b6471fbfbeb4dd4b71cbb4e898ebbce60b0b8a682ddb6128f", 0x26}, {&(0x7f00000048c0)}, {0x0}], 0x3, &(0x7f0000006b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000141b72df3cbf00000100000001000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x44000}}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006c80)="daccec57c8e67381c7b1390ded50d9171999885d3ff060136ec01a7144ffb212e87882d0a1a9c95126d684aa67b6262688559f91b34030d01eaf8774eccc2264c8a20595301f75268a929a952eb7d7e5f232a41096109105d10a68", 0x5b}, {&(0x7f0000006d00)="d375fefa549c98378528be1b1f1edcf39d106ff289ef695d4b97a1ff915516c221e764606f5eac50584c1d610e8bf6059f3e7af3e6bad1ff52cdbb9d581476bfc3cb97b6c386f864260c2580b39468452b6c24c6cebca6b1dd602702ab3fbedf1ee054c0e1e6efcac3e61c7609c9fc530708e933696ba49d7ced82c586098447be0dff1262d8f76bb71131e81c0be8088a199de1f30ab641e0578da64fb1276e037206a76303266f3998093941806d583ae5937a904d07ad02a13ec469279257d71f9cbccf8f553829607cc54bc5bf7414dbe5153e4d4785da471f33d4838e70196a0594e78371c5b048b651e3644792c7b04152b95808a53b8f62", 0xfb}, {&(0x7f0000006e00)="d774838b3a36880490bb71a942cabc9929bcd00e73c75726f57f0a9ecf613906f68866de16bf99621dd77e6e9c5709d5a890140792da51a233a2733945ad07baf29a803374da46a73657275161b21d38496ba2c38b5e8251d9888f0f2d824e50d434ce388c6e989c1218fab1c523b0b2e87d12cc60c920af05a5a67a83f6f7ad36aab203889557fbc977180b3d367aa4652c894a5b730f88afd1f7f81aec3fba5854", 0xa2}, {&(0x7f0000001500)="c6e1d48e3d50c44dac9bf731e0005eed155d4214ac4c33ff1c64208b1ef0b267aba9ae346af33703d67ead17d1e6004b7d82ac1838b146660b28c3d395b77f87cb67d2c05a4eeda17c2ea9823f7c2602419b73470ab18c9c24c293c7f4f0cee06a5d3b0098dccfb987f598f9cfbfd13174530ca1bc1caeef33b5504ca24ea79d1d23cbf6a1cbf4dca9976f82c1a8c9fecbe0423571ca80", 0x97}, {&(0x7f0000006f80)="eaddb7c75cf95cca2790331ce1a0bde0fb1a895eb04d2b4da0", 0x19}], 0x5, 0x0, 0x0, 0x20000080}}, {{&(0x7f0000007040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000007240)=[{&(0x7f00000070c0)="ff5df2c4db9282edb2d6e92df66f5029fa1b45d4a9954bf16329f720001efa08ecd6dd1d79cd80a70084c059fe73ae2a3ff7e77d47817826ae3bf9c13ed7208e883de6690dcfaad0e14559ad8016079bce5ceee0b39c66c75c6a5a33127e3d18f6d502e34fc7b5963cf40dd5e4ca886459b13e8df1cd34d3873c244d0d6f2cea42ce5088c10ce83f189533811c0d7bb02f411d64c7aac3059fe1d12859f452e8ff1e514ba6b522fb75adb7b4cec543df7ea906f16549d69b12d687b4831a38c21153965eee01881389687b362e", 0xcd}, {&(0x7f00000071c0)="27fc382c63269a1aaaf456baa9ed1d7a9829709ec41963514d042b54681506f19a93fd80af645396b2ab4f5bfec4787bd979cb4cf4ba2c22578910f7527e725a6f73963871e34c758833095e073d168680216da686c7ce955d06ec837f836fd3907be60b9fc71e54dccebc4dc79710c0423aa8ada1f83460", 0x78}], 0x2, &(0x7f00000072c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}], 0x40, 0x805}}, {{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f0000007340)="c1e3617709f864d8e62ff44eff79c7d76ea4cc36917a7c3db5126b6709dbfbff1afc2d1cbdb34a000ed6b06bc571d4bb0610b3619a82114e101bc98116e970c0b0ceed4c66ba8fc100330239716218b419be3f08a76e77f11ace4edc1ac970ae5801b13ea6a9647b9ef93241c9115840f262c6220de76424980a1df2d758051bbfaa6908383428b22b868326f493fce1f32fb765c13e5193010bec58bb12c2631fa4f5eb06b5d4a029f3c4c70b48ea51368192acca2b2674939899d32d3e963e", 0xc0}, {&(0x7f0000007400)="e5b6f7f1a73bb6e4d0f974e515667c6be88a63f624af0db8a06ee2cf28d11cdaac05f36dcb917646db95d5c4aaeb2681fc829557bce037c6050ce752a8e5e94b70a64a010930319dc9199b6eaeffda7895f92605e089167112b3c6238adc0d869d5fea6ece26b530bdb2b0901dfb8fa9e4d18c788de08c80b75d2abbab5618e73a151d9d4a10226e60df04ea", 0x8c}], 0x2, &(0x7f00000077c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r10]}}, @rights={{0x20, 0x1, 0x1, [r4, r11, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110, 0x20000000}}, {{&(0x7f0000007900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000007980)="dc1057bf79f825a04446ce588c3a5c9483922a57e2689fe0daebd5e2739ed8c35b1ed646083bcc9b79821f552fbf75ae6fc6666246bfb6984c4b734949a5b04872a4941fc9087d21d0", 0x49}, {&(0x7f0000007ac0)="ba501331d608511c6f201019b0047bc8015d8e13dcaeb7c4fabf943bc03beed09b18660406c11e224c113f530f58d149dcf47fa884172359255e169db58cbba521e109de7f273b2329780eb52533e555ebed71f45530afb8a6e5c06711820c41ddb12b1efd008308e2bc5ebde7f7c90c730cdd011df426696d31a554a2de72", 0x7f}, {&(0x7f0000007b40)="c6cb2a886268422652a8991840ece1a18ad965cac9b614a23ceb70ad411da8ba6f4a", 0x22}, {&(0x7f0000007b80)="8cb7a0581f6a37c359", 0x9}], 0x4, &(0x7f0000008d80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x4090}}, {{0x0, 0x0, &(0x7f0000008f80)=[{&(0x7f0000008e80)}, {&(0x7f0000008ec0)="86c1b9a944f0d597cb804673e8daea21d85776b412eca69f887f1d58813c2b9341a8d71ed32b79e78280a07e3e020d1442fcc61edf81485417f875354e4b02f3b521fb02fa02e57802a5c142f9cdb8ac720f94efd0fb8ce592a548efbe9a05c560dc047fc0358f9a0599052fec717a8dfe7b30e18b298d0bb992c25c2ddbda776b922294ed26eccbae6d58813c654a179402b534290fb78c71a372964f77b0cb6b7f55511b846a516577bfc8e44a68546a9471910e4497f9d6", 0xb9}], 0x2, &(0x7f00000090c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r5, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xffffffffffffffff}}}], 0x98, 0x24024800}}, {{&(0x7f0000009180)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000009440)=[{&(0x7f0000009200)="ee9e7cb8611dc704580eed451d1ee17f60c0c8e9cfe4c0db1a627c0ea886f18267dd9474e78fc339df9c12bd2482fe6a07701c75231322671dff554ff8c59bac1f6ef9d7df61812a93a7bd39f41c1777babc34", 0x53}, {&(0x7f0000009280)="f85916", 0x3}, {&(0x7f00000092c0)="867c0e1b1a2dc92f1785b18c8f00d5139da64827b6cf6c1b951563ee6728ebdbff0ce49de020ae724ea4caabb4da6a090a43c6f947e85a5ac438375aa73caa8336d5b162720f64c0", 0x48}, {&(0x7f0000009380)="5d88a7fc3d7e03b264d28e4e95725d94a17b12fe0cf9ef30841dfe48b7", 0x1d}, {&(0x7f0000003700)=':\a$', 0x3}, {&(0x7f0000009400)="4abcc49cbf51cfdc5df0dd3cfd332122e864c0126d840d363a5c5d590bf81d67aa9f0b9316f879de1d0e074f73f69a5eb5156758a91b7c", 0x37}], 0x6, &(0x7f0000009640)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r4, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x120, 0x10}}, {{0x0, 0x0, &(0x7f000000a7c0)=[{&(0x7f0000009780)="9da288118be6d42c92f316678078761c10a56b7fe88c74", 0x17}, {&(0x7f00000097c0)="015855ff4055f0e0cd73b9727ce8ec3182210ead0375efe7a9690779a62baecae8c0d604f0d13836f0f0369b9524187e2f9936acce9992747b4f970e1406e72b4c30897f157ae5dcd7d1a07480db73e1ee79b1193901456fc1f62a1a31efb2d518286e294bb36a9a43313fd425d60b33d821fc678ea022c7e02b834f926e0ee79f231dfc8157743659cfb7048bc38e22c5ffd19920fdcf6b4bd0eeaefb7c5c2ba938b48a1ba6c3965da0c83e6f567044c25491521e9ddc0ade522f676d3442be0fb71f4561db7ccaf3ed6f1a4688bfd893f6101a2a9f8f495d4cfbf066500133870b6d5d6472894d9e71f61dc96625796b9999a999bf54e6eed9e30c46212439712947276fbd0fdd75887d9286233a1f5d00539943757d433b936c662400afb8264c00268786b7fd81a5d1998907b9999d5d36949930b07310b2c8f604aa23abe11b6a7bf8fdd3ffccc7eda6f265c34e72c4b0ac0fb9f6b3667805287f36ebf0ccbe1ca639b8bfedf5b23405553153d2d51e2b1e559c91bcd2e18ed801d33fdbba5ce1d0ea6e591f5b461b3931d762b37fcf661553a1cd6c2f2cb7e5b316d79e4c837d27bff553c0cf8edcd7ce1b1701490a6c8ccc275cf15082dfb8785595fa51191e2003517084cc4d2c73457d0e06b5d300f0c07438df140d65a3cd06a88aa6c9e9dd3496d48485089ba976b303fb4885001650ef4241797f9c347b7c784aa4cc20a689ee307381300bddfbb2db0a87f165469174fe3204ce16b19759719e1950bea3168faec26b55b111104d005e5399cd277c8f35140c0e5008b998156200d29474ab37d238859c989c23969e39136294e09708a23e7fb553617811c0c5a6c8c4f002ff99c4271fea81116b686d12da6c201c28a06957fd2cdb3104fb3c92ac221bf08dd282ac097c24fc19516f74f009af6a7de3d56ff25530401902aee4094f7b90397da53dd0a137c026f8c618fd9cb628046515b6f9a80ec780f12f29b734b84036c2a0238f56048e84886e1c4e80adc1261851b04f9dbfe15364ae2ad2d0824735aa91aecc11f1665c296e8a77630ada03021f5474b69625d2dfad33fd0f1bbd13859fe241be0c8bebc13a9f361e3e4465f80ec6b09778123e70ebc1a636c6220d3ef22073e85d3a573104952a6ae843a5d80c0f6646176212818869c0f6329905dcd485022c196fdf1181fb997b2e34001dc01169a9dfbe48d00f625a89039ea7e618c6fd48da85b2311dc6fa6208658043d45893850f81c0248eba1201f3a7d326210e2996b6e3ea9d9899c840bc4ba001e33474ff80cf20c5338bde6c01ac3d7daf9c5c9947950467757395b55e3487ede31e43f8206dab17c58534a3d56fe7f25ac8ebfefe3f1b52c74d54d68954d1f39481b16857d7ce5f43cafd1e6b1c1a457497cc89cf964407e47d90e8232315a2dabe66b1c5073dfa75f2079e22002ec4d1ad314c84b23cd328b79f8adc431a05d521c1fa376121e61353be57218fb4eac55cf224dcf6214425bec296f73b5bec53ff8616b664e3e1d7ce7f089f7f17295e14aa10bdcb660dca0e6ad74721db4756532236a796e72ab64d1b40051d64749ff11d46a4919a525700c8a01b779cdaeae6ddaedf34f6514b6e849e78971443af2a09a4965d821e7727883a7d83dce732305e32504ef94d9d6b2e3debf31ed88780cd1123176d59d8951fbf030a4f7bfc65f0bd115955ca0e3e3786b85ece4b140208c40a8cd519299ff155c0fe0f514a58f4c72f023a57e5746f70c6172753a09dfdd66571293ed334d3ac88e9ffefb567edfcc9e898f3ecedcc0b795da0bbdfaa5f9e72ec000412728fbec72665437bca563f1305a46bfddfeb58ca1305ba296578c689bbea8f0261d46c1848a8059a14fab106305bcf6ef88f45de2de6ec9b1f11777d128d516c4f3189e3a281377ed2cb41358faa1340c71e85955aa67b2997122fc2935722caed6c5a846b16733a50899559e3028514fe378fc328b68ffa5ecf3ae93666fbe776d96ce11e70205216712107a9de0b88381dbad3825fb06d345c78a1305f7b4837e65c71eb11deeaf029adcf6ce87dbc321f235dabf16742f9adca43c38a739009a03fec38a1a2a3a8881846cab064d43ca1e4fc9324315f73eeabab1a9fd3f0aeb42cbc66190b88159d7ea585375dc9b2a0d459c666af8b11003592ce500e6682a32b40004b84d923a3800b1d03c5894716642eaf19c00c67c9557f2e586cb952b575ad9c069a3cdbced09e581a2d59ff804088328e1d9d669ec9484a383f4dffe1b269f4cfc0ab01d1d67fbb0c024374ee538a116752e5b01e50f37263d2cbe052fac8af607c9ceb924990e37a6a7688448eea3955dbd02d74668c7a272844d7952fca1e15098f8174859ecc183ec9667e78ebf948ce34fc262eec6db6a81af30f64dcafcab6038f6b040e895a16c96477ec79d560b0d00737cd3f6abf407e84d33a9afa85db4e1fa88dff3915d6e115a719d7007b51cdad4d1f75c9e9288b5c761e67d87b5661bda53ff9a4673d3e1eeba01fda3fa08b5626c19612de0ff2e872a4dfa84163147bcf128ee8985f4c9e085b890e4b5f87e2e7ad0ce1372c657a9cd6633e006318012ef957ba863de029c27c8dd4f0a73839b13342c796ee612dac0929872243848b6368b2e13d252d190b5a100ab0af6b0b9f43c27fbf1f75d233b57aef55e21d3cef325598de61b2b6391c0ece6a89e215b11b047b727ccc4af45cd6923ff0f0cade7a97e74a9621d31d745db00bb029a0f8f2972c1d848dfaf0611b6d31c6a0ff3d5cbe9780f7703878a5bf832bf34d16be2d9865ab240335befc578f499a00599d90b141efd43eb5139662518980391d5a92c36535fc4cbb8289374720cd673fce54c853d57260a9174aa1c788e88bbe36476f591fb074257b5c8c31b82991b403f62d7e8f9a42110ccf4fd00f845dc24612d5195b2968eddef5942bb1ef080ffb2e78bd450b69065f986a87705fd607acd913f78e76eb94557ee2a6df78bcd6b856b879245fa1010205cf9036ad5485c0f53602efa4a7d1454b5a5b8e8ad20f8bab61c64548668c37616493b06149e6916f61ad0497b3682ce6b81568a664b0e54f731fa8cc7c4c8a7c8f64afdd578e9327c5cf279795028686682c71b6b1fb7777ada42e61f97b4e7a7382bf1676bf5031ce226a4bd7c233415420ffc7dee0604f1012d021ad47c3a835ad6a19c774c0290bd96a33abd3e5deb5785b1801aea3f95edca3fe63ca336e827f1555ca8e6dbbc27ffcf0656f0df3fa6b7d8c77f6c244d0ca6fe814ec12f532ece18930c8824260edbe0e1f154ca7c9d5ac5ea3064f454cebef3d3f0f06b5f50f7c7e9c562f70f862e5d168df25c770e6ded11d7c47a57e7b34cc95d634755821476acfe2974e699788174813a5e1ae11f44a2923974edece623c43b02dce5aa6bb156dbabc988d98f3aac302639ba065f6c96278dfe929e7ebe4c176e4b9bba8bca0e015e327170a0e09f92955b404b1a73468baf6450803f454b1a05d969019dcdcc1513e3af76cc3a4342c30c86ac865dd5366f2a5c9ac831c0210df420fbeaae2dc90fc65ca838f9c6ca2a4993a759d5be3a6ef5710566f8b07c947428ec02885b9faa03b257b6130f9532c4edbb346b65508ea2c5242766d28de14cd76255fcba236245aa97bef731dd2e969857b86e2e3cd59338450c1fdc333acaff85356e67cfe9813aa81e73bf8c1993dfc16dce3be6aaaf8c4cdd4457a7f29c68ff8ce698f53c3b6fe9e2ba9f21133c0a6114bd81fd3d9c5cdf932ca2954e2f5b2be95510c70366d673af8cb2921a5c1f90b95c32568e93555d3a45cb1239acd2310c5cdd00e52f3e0b75ed67816f4c75f9b217876986c9ca03c69af0afb2f25453a5ffbb928b02c48f7a79c26f6ecb7f11fa3afeb4dfca0003cb529306b8e955c1b2aaec4e4d65353cd4436852ef7975778650e92c2df708472500be8f61f34fdea52f5e977cdb42737ed058e8d4fb06fff76d98030724ddf54dd5aac47ce9fd19bcabc76a53ab84ebc8e4e2f5c2069ed76ec3eac0385356d799c9cbbe17b1e17f0944e57a3f7650cef846cd1a9116127546b58941ff7f6ef4e804a052c301bbc126ca7712b266c78c1bd3ab5887323320d854660529894806e873f96040665ad889b7ca1a1163ab28b0751e075fbaccb5e1c38585cb58258567837db2fd69ad0758a321955d8e1973aa40c3bd6ea0bb301e2e24a17b4d06e1584f4adad8c4de9a706f15b0ee6d5342853b1c2b0dddd363985891f50778ffbaa34ea4c53c5465eac351169a8e58a39f3e7792c93062efb53e48d26a3ce003b3fb205ac69e8b3401318452476e9f77a927b49343eab23e6a41ebab0e0bcd5b71b8c9fa6eb23e0c94bdc382bbf6a69baa3f81187dd10386836791d23684b0365d2d9915f0e9e30289758c9cea86850b8fc16083f5f7ab693b54b78f446fb07bb7c7a8b3619ec9f214fd92552355a1d72507f799e317a0bcf02c9c1af5c5878afee2ee618ca55ea4992d9287c84ad410f6fe1a4127f6e8be1336a7e4afad49b8a7389cb848c25f30021449837f06f6003409270f9746cd3b1ad59489dc44d9daf6c801e8b659d7904826b72360eceb36f99bf7706e16e325f347f25c435d3b4ce66f37d05a5a58f9bcb8b92f955bedfc9f4755d0bf114be51f4705a7953de3a5ddd4f989cc661293fc021b59b7997aeb799152a1ca131474e628b8fdd91138a33e34186456363f05e45a0d8e3610d05cd5eb7b39692a315006dfac785275f6aa66fcd297d15726c5392e43d02f9bb9fd1a9085ec056a6f5a88da6eb8cad18edc20807ffff5e9477a0e6aa35efc2fa223fa981091985c95b9f98295955c4833a7150ab2bc16cd14ba79abf3f67e914a6353e3c5e433933426036d0852b02b91abbac0c9c858e9e867b7682c222415fe18a0fe05a7496ee4c476c7ad9b72ee75eaf838b979c298f29e61d55cb74c331c55e6da635a7ff89cf8789c8ccc4cea24f21f6d9567c0d471bbafab020c7db6f863fd5b8d3f3015271edb704e3eeafd81635412b518ce28ce534dc268aaf5234757502e98b6e86d1142b21a36bcd504905c43c8ec3d8a8ef1aef5453e79dc46647b38795043622419a2ae3cebf285af009b0014903065bd802c2357e64706ab1985e8de8f9bc84446ebf381f0be1d0f9f6de83afb5c8a809e709c0d3cb6175a5927f3e523c3dab827a1cbfa15a15ab97b13dcc4827f53c6693a77bd05418c02e3ddd6a613208d2a5398120b8e3a7b2ed7a780ed09c6ce2695cdab9ff9e2e94527216d2b54bfc0044323bc7ee76081d491a5d049a16736036109c2191cd0e124b5aaf2efd29c917355f2cafdf0427cc3ce1b48c54bf00fce9d26260b145507110b2bf029becd6eb99284f2578fa1b9c76faf9c8a03c6018f4529231503bd45d10db57c8b224c5f9b53d938d24c34ffcefe4e2f62175f00b00d6979794d97a9b03b99f84b494a446da4e4f6e7a181c707835ada6049ba9dcb1dc66b575c815e73abafd255f55f51b192af6338ff8b74ea50f75ad2585c01dae832ee0edbb84787fb190f4aecb57f9f05849954fb05c7500d876c1c497a0a19ce0bfbc9784bb22b16510f57fdeba98526601a243557c782ad4adaa93df487b3ef9cb665dbadd6352bf23816d90f213d811ea81a58c4c4681157b1ed1b5aa9077e518e5fcdd39033f89c3df0eb49c3dbcd5a8c57ae691914cbcaa5b5abf969a63dcf9ecef46ee3c737120f1ea98f8333f4a0832e6dd470a8bcc5fcc9f217a", 0x1000}], 0x2, &(0x7f000000a800)=[@rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x18, 0x10}}, {{&(0x7f000000a840)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000af80)=[{&(0x7f000000a8c0)="7479db885f5f6358a81ceb24af79da31a1eb619548ff8f41f38cf7b80a657af79cfc4d9e946a986377edfd70fb2876eb3881004e071cbe3f4aecc41b115f38940b9232d9a5d14cba0bce7e44ee1eb786734614dfac9c7cec75c2bcb35f0cc6fbb9e13bc6c48e7bc0dfac2b61675af98639939a159c8006b3c02e10896296a44f638ce9fe31eb723f8bd75a3043d2373639fcfae1d1bd4c0602f1d90153cd5a0e612d0b94a4b9401189d1b57d560c0703f103d16451791a93a7c0cf29270c8d62913bd4e5fdb2d096", 0xc8}, {&(0x7f000000a9c0)="ec80f08d577a6190190408d114719a7da29e14179c21bfa6acdc8c48f0b78595da05a4f19676095f015d50da1919b5166bee5d0c296683b4504b3aec8065c36376daa7482cc45d4c3de811a4b4cab8ceaa274a65b11c3a13b0bbc0faabdd6a86f081aba2db10914ee0d0e4a66cc187c95438ae4d3ce5edbf94db2be00d3c39d1a61132d429a00c68c97139abc6560e871dc8a3b35bcc4e94634e27b5985dedf76a5a64a770d76bbda17b3a5691a719662887c6b0eea1", 0xb6}, {&(0x7f000000aa80)="482b78be02653d8636871b646d111018df1ea6f7b70a89ea24f19e8f302a544376216ea87b02ca50c31865fbb0fd0dcb503c3efb343a36c572d5eac19c436ad20694cf970bd1947dd4baebd6ded0349f4c5b6cadfa4b9bda6dee81806b52727a9aa9941d5bf2aff8c06fcac22d99a4bf92d86a81f3f60e59ba13598dd432de08c7d8376cab6672c1c6481ca2c4ca60ae3d", 0x91}, {&(0x7f000000ab40)="bcd8358367c53f415f03a75570cfeeecbf56852d76c76be0258e4fb282a25b36265a6a90cba4c0752a75cd0deddbeb11287c47293798fd9c9009891a7c34c4678ffe87242f3dfa48a37c94c729d49254e341333796a3d454472ee3dc62de68a82554a602cfd45c446c240a510c139dce7ea5896251feb2e870a2a1c5ad066bc2abc6804fe56f1c27f6a0ebb6ea2cd8b1c6354f7709db7811d5440a01e0f30ee36b38b52a5c89131fdcecc3d259ccfc1ea85f9b9e206b5c2455365806520d488fc51c5bf613790a4e63c8cf668abe9af784547bdeada524bb7d6534", 0xdb}, {&(0x7f000000ac40)="af960f34f403c61a7e2bef382d4979d2e9f352a8746465c1174a90a5972f81e26bde2c7a9099cd54abaede98af5d600dd17ab773c4b574f51dbaa2f01dac5d41e360863cf823428e638c9fcc3b2b3fca9312bbbb357035bc3b377e8a762b5ec7f405c63fe7358643c1641f4559d55569b52a2bf27562cb7869bea6efb97dd9ce895c0db2eb5b81fc54f08f5bdf9f9d5d894613ac4527ae72b06cd5bb04da36b3805e5548f9c1109f3a98d62f367df18e14a7fc7c6d9281b998bc345f6a5cf096f22fc04e53171abd3745606aa75929958c6bd163a2108e04f9ea8a9a8e3f0cb05da4370e882264", 0xe7}, {&(0x7f000000ad40)="7813c8a132cacc4af503a2917e2fdd776074e0ae8430b652020d3fa0d04b3454e6d1a9ab66a58f2b98d985b71b2c152e28fd037d86b7ce1e2d896ee63a5082b38dfb789dc4507977b0c1f76454b92a897e1338fbb9ccbacbc6534d32a4f575880d156ab855f25f3e533634b8920c519025448bcd03a94c8609ca15f0848e49106a5d923e0395339f6b3900ad7ea3e6862f80f3960fd64471026075dd280bb9c9c24e44294cc8ba48b392df6222ecdc7a7fde0d6141f993afa17d3c10cc6ee8dbe1a2c9f2b522c4a8db9d71315a0e3ccba1604ab3b2b5f6a4a584a09ccf7c023b38c827933083ead570f485eabbef127f7444470a38913eb1c0776572e4eb", 0xfe}, {&(0x7f000000ae40)="94ec9b52aa7edc49c171da2017b9ca", 0xf}, {&(0x7f000000ae80)="76a89d8d7711765388019b56d4174b2acada5de27c885185487c495d0a99f0d3899e7489fb644e04e2402f4bf21aeccf5d4982d5767ec9278f529674d7e9e601caab0cdf3f940bb70bde5e088e514d79c3ba53c43f1f4232fad7c9b1f2ee415aa19f05886e734739fbd3113740c8528e049fed9c9f2f7d2f7ab19bd8dab5018d13206f74601afbd3ce012951c41fdedd53a3e051fce4c616e9d246c55bb9dffaa26b30284184abb522f185797c46ba0a4d2cd50b4f6bd7ee72cd08a6676558ce27b9aa278be7c3d3f8741b735b10fa359f1c67df21961be6", 0xd8}], 0x8, &(0x7f000000b1c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x34, 0x1, 0x1, [r9, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x98, 0x20}}], 0xa, 0x0) 1.533282315s ago: executing program 3 (id=2434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x26, &(0x7f00000003c0)=@string={0x26, 0x3, "c26aaa631ee8eace3f2014fceab98c24d092213ccbcf048765ecad20eaa243b639219f03"}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d70002400028008000140000800161000038009000100080865be5a000000080002"], 0x88}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYRESOCT=r4], 0x50) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$link(0x8, r6, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x70b529, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) 1.463622738s ago: executing program 1 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3, r7}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x2}) r8 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r8, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x82, 0x2, "8370"}, 0x0, 0x0, 0x0}) r9 = socket(0xa, 0x3, 0x3a) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) ioctl$TUNGETVNETBE(r0, 0x800454df, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 870.071849ms ago: executing program 1 (id=2436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@ipv4_getaddr={0x34, 0x16, 0x300, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x2, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x9, 0x0, 0x2}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0x4000000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x101, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4]}}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = getpid() r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)=@userptr={0x81, 0x4, 0x4, 0x8, 0xb002, {}, {0x4, 0xc, 0x80, 0x0, 0x4, 0x8, "0d1e6b95"}, 0x5, 0x2, {0x0}, 0xca}) r5 = syz_pidfd_open(r3, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058ff0b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) close(r1) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x14, 0x905, 0x70bd25, 0x25dfdbfb, {0xa, 0x6, 0x3, 0x0, {0x4e26, 0x4e23, [0x0, 0x2c000000, 0x6, 0x1], [0xfffffffe, 0x5, 0x1, 0x8a67], 0x0, [0x3, 0x1002]}, 0x4, 0xffffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810) close_range(r0, 0xffffffffffffffff, 0x0) 847.534945ms ago: executing program 7 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000680)="91078bbb44b4065042e00e5a538bb4a2fa40592327ada4d0bf5364fd0ca910d2ba549fee38262b806ec658adc00ef5017cc13fec4447f58620c395b5686f650fb34653f08cb9e60d6312192dfdceee0f37c67802cf40dbfa9c341728308d37819c7de7adb8220f7007df4199344f9a0a1f6958b497e9f673d5e155566c16a93b94fb2390126444983b871d3176f3c6f6e852ecb2d8f4092bc1b628fd35a53037965d4d2ac278b1ebd4bc0fee4d9541a39ee9136d582ae3789658cd12261b0ea14a1e80ac45995f46c5823750437d6e311899", 0x0, 0x2000000}, 0x20) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (async, rerun: 32) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x1000, 0x10ffff, 0xfffffffd}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) capget(&(0x7f0000000180)={0x20080522, r3}, &(0x7f00000001c0)={0x4, 0x5, 0xd, 0x6875, 0x4, 0x3}) (async, rerun: 32) mq_open(&(0x7f0000000040)='!-@\x00', 0xc2, 0x22, &(0x7f00000000c0)={0x8, 0x5, 0xfffffe01, 0x8}) (async, rerun: 32) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 64) r4 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) (async) read(r4, &(0x7f0000002340)=""/232, 0xe8) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) (rerun: 32) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000010280)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x810) 790.342152ms ago: executing program 1 (id=2438): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3303120081fd140000007ef52f55", 0xe, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x50}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x419}}}, 0x7) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000100)=""/170, 0xaa) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xfffffdd9) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6966}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x52}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x336c7957}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xd44ae49b35272605) 719.699403ms ago: executing program 7 (id=2439): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) clock_gettime(0x7, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xa7, &(0x7f0000000080)={@local, @random="0000101d00", @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x95, 0x64, 0x0, 0x8, 0x6, 0x0, @local, @broadcast}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x27, 0x0, 0xe7}, {"4e893249fd730317956ecbd54dcee716372a6d282079b5f2e3486b614ab72a3cc1925f936293876a75db57f9a4fa3eb77bd9591a7210251c6a80e210ab053c261c6e09b298ab14fca383413bb3c5554ac31080ad6dbec6eab74599b1670cafebc42350c4ce57b7dbdc75b22dba"}}}}}}, 0x0) 715.854981ms ago: executing program 1 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r1, @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000021401"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x100, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x854) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 535.963316ms ago: executing program 7 (id=2441): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f62415cd600ff01000000000000b3584cf606c267dc000070380d000000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 404.76871ms ago: executing program 7 (id=2442): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9ce"], 0x0) 403.975565ms ago: executing program 4 (id=2443): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1900, 0xa10, 0x0, &(0x7f00000000c0)}], 0x1}) 378.273127ms ago: executing program 6 (id=2444): syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, "13", "7ddc03"}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x16b601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 0s ago: executing program 1 (id=2445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a83c0081000b0008004500001c00000002001190784c5b07ea91069714ad497adef674053b00000000000000000020000000089092703eb0c2dc438c85bac5f760d7f562bf2be19bbbe01408e609c63492a2d33290ba8846beb0fff64fa7f589ba81bd24b18627c77772dd28308e628f8ea6122cdd0417ba39f533875217f95244cc6b56e985956e5f079d6d43b6df30"], 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16, @ANYBLOB="040028bd7000ffdbdf250200000038000380060007004e2200000800030002000000060004000300000008000500e00000021400020076657468315f6d61637674617000000008000400080000002c00028005000d000000000006000b0002000000080004000f00000005000d000100000006000f0003000000080004000700000024000280060002004e230000060002004e220000000600060000000800090000000000080006000700000030000280080004000000010008000500090000000800040036d6000014000100fc0200000000000000000000000000012800018008000b007369700008000800fcffffff14000300"/262], 0x10c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}, 0x1, 0x0, 0x0, 0x604c000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x7}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r3, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000540), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000007c0), r3, 0x0, 0x1, 0x4}}, 0x20) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)={'dummy0\x00'}) kernel console output (not intermixed with test programs): t device team_slave_1 removed [ 804.107164][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 804.696768][T14594] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.719676][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.727973][T14594] bridge_slave_0: entered allmulticast mode [ 804.735769][T14594] bridge_slave_0: entered promiscuous mode [ 804.752133][T14594] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.760715][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.768115][T14594] bridge_slave_1: entered allmulticast mode [ 804.777054][T14594] bridge_slave_1: entered promiscuous mode [ 804.836822][T14594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.865375][T14594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.925310][T14594] team0: Port device team_slave_0 added [ 804.932350][T14594] team0: Port device team_slave_1 added [ 804.984892][ T5934] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 804.993118][T14594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.008496][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.040287][T14594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.053150][T14594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.060863][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.087409][T14594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.139209][ T5934] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 805.160117][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.167184][T14594] hsr_slave_0: entered promiscuous mode [ 805.181827][T14594] hsr_slave_1: entered promiscuous mode [ 805.184063][ T5934] usb 2-1: Product: syz [ 805.188405][T14594] debugfs: 'hsr0' already exists in 'hsr' [ 805.198233][T14594] Cannot create hsr debugfs directory [ 805.202943][ T5934] usb 2-1: Manufacturer: syz [ 805.212714][ T5934] usb 2-1: SerialNumber: syz [ 805.233760][ T5934] usb 2-1: config 0 descriptor?? [ 805.248714][ T5934] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 805.305429][T11362] Bluetooth: hci4: command tx timeout [ 805.391778][T14660] unknown channel width for channel at 909000KHz? [ 805.703189][ T30] audit: type=1400 audit(1756350524.149:562): avc: denied { map } for pid=14665 comm="syz.7.2158" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 805.771923][ T5934] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 805.791462][ T5934] sq905c 2-1:0.0: Reading version command failed [ 805.796685][ T30] audit: type=1400 audit(1756350524.149:563): avc: denied { execute } for pid=14665 comm="syz.7.2158" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 805.897677][T14670] random: crng reseeded on system resumption [ 805.931572][ T30] audit: type=1400 audit(1756350524.359:564): avc: denied { append } for pid=14665 comm="syz.7.2158" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 806.097110][ T976] usb 4-1: USB disconnect, device number 97 [ 806.127569][ T5934] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 806.140250][T14675] FAULT_INJECTION: forcing a failure. [ 806.140250][T14675] name failslab, interval 1, probability 0, space 0, times 0 [ 806.159444][ T5934] usb 2-1: USB disconnect, device number 110 [ 806.172699][T14675] CPU: 0 UID: 0 PID: 14675 Comm: syz.3.2160 Not tainted syzkaller #0 PREEMPT(full) [ 806.172724][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 806.172734][T14675] Call Trace: [ 806.172741][T14675] [ 806.172748][T14675] dump_stack_lvl+0x16c/0x1f0 [ 806.172772][T14675] should_fail_ex+0x512/0x640 [ 806.172791][T14675] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 806.172814][T14675] should_failslab+0xc2/0x120 [ 806.172842][T14675] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 806.172861][T14675] ? __alloc_skb+0x2b2/0x380 [ 806.172882][T14675] __alloc_skb+0x2b2/0x380 [ 806.172900][T14675] ? __pfx___alloc_skb+0x10/0x10 [ 806.172919][T14675] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 806.172942][T14675] netlink_alloc_large_skb+0x69/0x130 [ 806.172963][T14675] netlink_sendmsg+0x6a1/0xdd0 [ 806.172982][T14675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.173001][T14675] ____sys_sendmsg+0xa98/0xc70 [ 806.173017][T14675] ? copy_msghdr_from_user+0x10a/0x160 [ 806.173029][T14675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.173051][T14675] ___sys_sendmsg+0x134/0x1d0 [ 806.173064][T14675] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.173093][T14675] __sys_sendmsg+0x16d/0x220 [ 806.173106][T14675] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.173127][T14675] do_syscall_64+0xcd/0x4c0 [ 806.173142][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.173153][T14675] RIP: 0033:0x7fcbe878ebe9 [ 806.173163][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.173174][T14675] RSP: 002b:00007fcbe95d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.173185][T14675] RAX: ffffffffffffffda RBX: 00007fcbe89b5fa0 RCX: 00007fcbe878ebe9 [ 806.173193][T14675] RDX: 0000000004004014 RSI: 00002000000005c0 RDI: 0000000000000004 [ 806.173199][T14675] RBP: 00007fcbe95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 806.173206][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.173213][T14675] R13: 00007fcbe89b6038 R14: 00007fcbe89b5fa0 R15: 00007ffdb14a1968 [ 806.173227][T14675] [ 806.386919][ T30] audit: type=1400 audit(1756350524.359:565): avc: denied { open } for pid=14665 comm="syz.7.2158" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 806.988124][ T9271] Bluetooth: hci5: Frame reassembly failed (-84) [ 807.066644][T14594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 807.130299][T14682] FAULT_INJECTION: forcing a failure. [ 807.130299][T14682] name failslab, interval 1, probability 0, space 0, times 0 [ 807.141750][T14594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 807.146301][T14682] CPU: 0 UID: 0 PID: 14682 Comm: syz.7.2162 Not tainted syzkaller #0 PREEMPT(full) [ 807.146325][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.146334][T14682] Call Trace: [ 807.146340][T14682] [ 807.146346][T14682] dump_stack_lvl+0x16c/0x1f0 [ 807.146370][T14682] should_fail_ex+0x512/0x640 [ 807.146387][T14682] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 807.146407][T14682] should_failslab+0xc2/0x120 [ 807.146425][T14682] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 807.146441][T14682] ? __pfx_tcp_current_mss+0x10/0x10 [ 807.146465][T14682] ? __alloc_skb+0x2b2/0x380 [ 807.146485][T14682] __alloc_skb+0x2b2/0x380 [ 807.146500][T14682] ? __pfx___alloc_skb+0x10/0x10 [ 807.146518][T14682] ? find_held_lock+0x2b/0x80 [ 807.146548][T14682] tcp_stream_alloc_skb+0x34/0x570 [ 807.146572][T14682] tcp_sendmsg_locked+0x12d0/0x42a0 [ 807.146601][T14682] ? __lock_acquire+0xb97/0x1ce0 [ 807.146632][T14682] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 807.146656][T14682] ? do_raw_spin_lock+0x12c/0x2b0 [ 807.146673][T14682] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 807.146696][T14682] ? __local_bh_enable_ip+0xa4/0x120 [ 807.146719][T14682] tcp_sendmsg+0x2e/0x50 [ 807.146739][T14682] ? __pfx_tcp_sendmsg+0x10/0x10 [ 807.146761][T14682] inet6_sendmsg+0xb9/0x140 [ 807.146783][T14682] ____sys_sendmsg+0x705/0xc70 [ 807.146805][T14682] ? copy_msghdr_from_user+0x10a/0x160 [ 807.146822][T14682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.146854][T14682] ___sys_sendmsg+0x134/0x1d0 [ 807.146873][T14682] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.146920][T14682] __sys_sendmsg+0x16d/0x220 [ 807.146938][T14682] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.146971][T14682] do_syscall_64+0xcd/0x4c0 [ 807.146994][T14682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.147010][T14682] RIP: 0033:0x7fd35c58ebe9 [ 807.147024][T14682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.147039][T14682] RSP: 002b:00007fd35d3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.147055][T14682] RAX: ffffffffffffffda RBX: 00007fd35c7b5fa0 RCX: 00007fd35c58ebe9 [ 807.147066][T14682] RDX: 0000000004000805 RSI: 0000200000000380 RDI: 0000000000000004 [ 807.147076][T14682] RBP: 00007fd35d3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 807.147085][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.147095][T14682] R13: 00007fd35c7b6038 R14: 00007fd35c7b5fa0 R15: 00007ffe9c0580a8 [ 807.147117][T14682] [ 807.396333][ T5856] Bluetooth: hci4: command tx timeout [ 807.558008][T14594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 807.598952][T14594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 807.754664][ T5993] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 807.827556][T14594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.868042][T14594] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.898179][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.904808][ T5993] usb 8-1: Using ep0 maxpacket: 8 [ 807.905315][ T9296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.929101][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.936195][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.959773][ T5993] usb 8-1: unable to get BOS descriptor or descriptor too short [ 807.968696][ T5993] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 807.980574][ T5993] usb 8-1: config 4 has no interface number 0 [ 808.007602][ T5993] usb 8-1: config 4 interface 30 has no altsetting 0 [ 808.064900][ T5993] usb 8-1: string descriptor 0 read error: -22 [ 808.071347][ T5993] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 808.086291][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.136448][ T5993] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 808.154385][ T5993] dw2102: su3000_power_ctrl: 1, initialized 0 [ 808.224787][ T5993] dvb-usb: bulk message failed: -22 (2/0) [ 808.344534][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.365033][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.373375][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.385838][ T5993] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 808.393632][ T5993] usb 8-1: media controller created [ 808.400331][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.406712][ T5993] dw2102: i2c transfer failed. [ 808.411626][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.421922][ T5993] dw2102: i2c transfer failed. [ 808.494747][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.512901][ T5993] dw2102: i2c transfer failed. [ 808.525746][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.531509][ T5993] dw2102: i2c transfer failed. [ 808.554384][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.572251][ T5993] dw2102: i2c transfer failed. [ 808.577553][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 808.583429][ T5993] dw2102: i2c transfer failed. [ 808.589063][ T5993] dvb-usb: MAC address: 02:02:02:02:02:02 [ 808.609385][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.645225][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 808.652531][ T5993] dw2102: command 0x0e transfer failed. [ 808.658636][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 808.664460][ T5993] dw2102: command 0x0e transfer failed. [ 808.700304][T14594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.711234][T14703] FAULT_INJECTION: forcing a failure. [ 808.711234][T14703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.725646][T14703] CPU: 1 UID: 0 PID: 14703 Comm: syz.1.2166 Not tainted syzkaller #0 PREEMPT(full) [ 808.725669][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.725680][T14703] Call Trace: [ 808.725686][T14703] [ 808.725694][T14703] dump_stack_lvl+0x16c/0x1f0 [ 808.725719][T14703] should_fail_ex+0x512/0x640 [ 808.725744][T14703] strncpy_from_user+0x3b/0x2e0 [ 808.725766][T14703] getname_flags.part.0+0x8f/0x550 [ 808.725797][T14703] getname_flags+0x93/0xf0 [ 808.725815][T14703] do_sys_openat2+0xb8/0x1d0 [ 808.725838][T14703] ? __pfx_do_sys_openat2+0x10/0x10 [ 808.725866][T14703] ? __fget_files+0x20e/0x3c0 [ 808.725890][T14703] __x64_sys_openat+0x174/0x210 [ 808.725914][T14703] ? __pfx___x64_sys_openat+0x10/0x10 [ 808.725937][T14703] ? ksys_write+0x1ac/0x250 [ 808.725963][T14703] do_syscall_64+0xcd/0x4c0 [ 808.725984][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.726003][T14703] RIP: 0033:0x7fe2cd78d550 [ 808.726017][T14703] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 808.726034][T14703] RSP: 002b:00007fe2ce652f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 808.726051][T14703] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe2cd78d550 [ 808.726063][T14703] RDX: 0000000000000002 RSI: 00007fe2ce652fa0 RDI: 00000000ffffff9c [ 808.726073][T14703] RBP: 00007fe2ce652fa0 R08: 0000000000000000 R09: 00007fe2ce652cd4 [ 808.726084][T14703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 808.726095][T14703] R13: 00007fe2cd9b6038 R14: 00007fe2cd9b5fa0 R15: 00007ffee98b6ec8 [ 808.726120][T14703] [ 808.976955][ T5920] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 808.984801][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 808.988897][T11362] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 808.990646][ T5993] dw2102: command 0x0e transfer failed. [ 809.006968][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 809.012718][ T5993] dw2102: command 0x0e transfer failed. [ 809.087883][ T5993] dvb-usb: bulk message failed: -22 (1/0) [ 809.093712][ T5993] dw2102: command 0x51 transfer failed. [ 809.130313][ T5993] dvb-usb: bulk message failed: -22 (5/0) [ 809.164683][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 809.175404][ T5920] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 809.183425][ T5920] usb 5-1: config 0 has no interface number 0 [ 809.198214][ T5993] dw2102: i2c probe for address 0x68 failed. [ 809.214116][ T5993] dvb-usb: bulk message failed: -22 (5/0) [ 809.220769][ T5920] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 809.231786][ T5993] dw2102: i2c probe for address 0x69 failed. [ 809.280145][ T5993] dvb-usb: bulk message failed: -22 (5/0) [ 809.287518][ T5920] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 809.316461][ T5993] dw2102: i2c probe for address 0x6a failed. [ 809.317249][T14594] veth0_vlan: entered promiscuous mode [ 809.323072][ T5993] dw2102: probing for demodulator failed. Is the external power switched on? [ 809.354900][ T5920] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 809.366718][T14594] veth1_vlan: entered promiscuous mode [ 809.389146][T14721] FAULT_INJECTION: forcing a failure. [ 809.389146][T14721] name failslab, interval 1, probability 0, space 0, times 0 [ 809.407007][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 809.422084][ T5993] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 809.438865][T14594] veth0_macvtap: entered promiscuous mode [ 809.445756][ T5920] usb 5-1: Product: syz [ 809.448024][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.3.2170 Not tainted syzkaller #0 PREEMPT(full) [ 809.448046][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.448056][T14721] Call Trace: [ 809.448061][T14721] [ 809.448067][T14721] dump_stack_lvl+0x16c/0x1f0 [ 809.448091][T14721] should_fail_ex+0x512/0x640 [ 809.448108][T14721] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 809.448129][T14721] should_failslab+0xc2/0x120 [ 809.448147][T14721] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 809.448163][T14721] ? __alloc_skb+0x2b2/0x380 [ 809.448180][T14721] ? avc_has_perm+0x144/0x1f0 [ 809.448198][T14721] __alloc_skb+0x2b2/0x380 [ 809.448214][T14721] ? __pfx___alloc_skb+0x10/0x10 [ 809.448229][T14721] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 809.448250][T14721] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 809.448277][T14721] netlink_alloc_large_skb+0x69/0x130 [ 809.448297][T14721] netlink_sendmsg+0x6a1/0xdd0 [ 809.448320][T14721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.448347][T14721] ____sys_sendmsg+0xa98/0xc70 [ 809.448369][T14721] ? copy_msghdr_from_user+0x10a/0x160 [ 809.448386][T14721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.448416][T14721] ___sys_sendmsg+0x134/0x1d0 [ 809.448435][T14721] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.448478][T14721] __sys_sendmsg+0x16d/0x220 [ 809.448496][T14721] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.448527][T14721] do_syscall_64+0xcd/0x4c0 [ 809.448547][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.448563][T14721] RIP: 0033:0x7fcbe878ebe9 [ 809.448576][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.448592][T14721] RSP: 002b:00007fcbe95d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.448607][T14721] RAX: ffffffffffffffda RBX: 00007fcbe89b5fa0 RCX: 00007fcbe878ebe9 [ 809.448618][T14721] RDX: 0000000004044094 RSI: 0000200000000200 RDI: 0000000000000003 [ 809.448628][T14721] RBP: 00007fcbe95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 809.448638][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.448647][T14721] R13: 00007fcbe89b6038 R14: 00007fcbe89b5fa0 R15: 00007ffdb14a1968 [ 809.448669][T14721] [ 809.474028][T14594] veth1_macvtap: entered promiscuous mode [ 809.544873][ T840] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 809.701321][ T5920] usb 5-1: SerialNumber: syz [ 809.741337][ T5920] usb 5-1: config 0 descriptor?? [ 809.812422][T14594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.828768][ T5920] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 809.855675][ T5993] rc_core: IR keymap rc-tt-1500 not found [ 809.863597][ T5993] Registered IR keymap rc-empty [ 809.871425][T14594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.885602][ T5920] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input69 [ 809.897166][ T5993] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 809.912259][ T5993] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input68 [ 809.948974][T14728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2172'. [ 809.963569][T14728] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 809.975627][ T9296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.975860][ T840] usb 2-1: Using ep0 maxpacket: 16 [ 809.988304][ T9296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.000554][ T5993] dvb-usb: schedule remote query interval to 250 msecs. [ 810.011806][ T5993] dw2102: su3000_power_ctrl: 0, initialized 1 [ 810.023254][ T840] usb 2-1: config 0 has no interfaces? [ 810.043032][ T840] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 810.052940][ T840] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 810.062017][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 810.063386][ T9296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.074600][ T840] usb 2-1: Manufacturer: syz [ 810.089950][ T5993] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 810.113154][ T840] usb 2-1: config 0 descriptor?? [ 810.118354][ T9296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.134972][ T5993] usb 8-1: USB disconnect, device number 16 [ 810.273594][ T9282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.285907][ T5993] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 810.301153][ T976] usb 5-1: USB disconnect, device number 92 [ 810.312116][ T9282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.478619][T14733] FAULT_INJECTION: forcing a failure. [ 810.478619][T14733] name failslab, interval 1, probability 0, space 0, times 0 [ 810.492531][ T976] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 810.499199][ T9286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.520184][ T9286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.565407][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.3.2174 Not tainted syzkaller #0 PREEMPT(full) [ 810.565436][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.565447][T14733] Call Trace: [ 810.565454][T14733] [ 810.565461][T14733] dump_stack_lvl+0x16c/0x1f0 [ 810.565487][T14733] should_fail_ex+0x512/0x640 [ 810.565506][T14733] ? fs_reclaim_acquire+0xae/0x150 [ 810.565531][T14733] ? tomoyo_encode2+0x100/0x3e0 [ 810.565555][T14733] should_failslab+0xc2/0x120 [ 810.565584][T14733] __kmalloc_noprof+0xd2/0x510 [ 810.565602][T14733] ? d_absolute_path+0x136/0x1a0 [ 810.565631][T14733] tomoyo_encode2+0x100/0x3e0 [ 810.565658][T14733] tomoyo_encode+0x29/0x50 [ 810.565681][T14733] tomoyo_realpath_from_path+0x18f/0x6e0 [ 810.565712][T14733] tomoyo_path_number_perm+0x245/0x580 [ 810.565731][T14733] ? tomoyo_path_number_perm+0x237/0x580 [ 810.565754][T14733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 810.565776][T14733] ? find_held_lock+0x2b/0x80 [ 810.565819][T14733] ? find_held_lock+0x2b/0x80 [ 810.565839][T14733] ? hook_file_ioctl_common+0x145/0x410 [ 810.565864][T14733] ? __fget_files+0x20e/0x3c0 [ 810.565888][T14733] security_file_ioctl+0x9b/0x240 [ 810.565915][T14733] __x64_sys_ioctl+0xb7/0x210 [ 810.565945][T14733] do_syscall_64+0xcd/0x4c0 [ 810.565967][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.565986][T14733] RIP: 0033:0x7fcbe878ebe9 [ 810.566000][T14733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.566017][T14733] RSP: 002b:00007fcbe95d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.566035][T14733] RAX: ffffffffffffffda RBX: 00007fcbe89b5fa0 RCX: 00007fcbe878ebe9 [ 810.566047][T14733] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000003 [ 810.566058][T14733] RBP: 00007fcbe95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 810.566068][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.566079][T14733] R13: 00007fcbe89b6038 R14: 00007fcbe89b5fa0 R15: 00007ffdb14a1968 [ 810.566105][T14733] [ 810.566122][T14733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 811.044714][ T5974] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 811.055345][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'. [ 811.146369][T14743] siw: device registration error -23 [ 811.254916][ T5974] usb 8-1: Using ep0 maxpacket: 32 [ 811.273399][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 811.284191][ T5974] usb 8-1: unable to get BOS descriptor or descriptor too short [ 811.293091][ T5974] usb 8-1: config 7 has an invalid interface number: 128 but max is 0 [ 811.303910][ T5974] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 811.322254][ T5974] usb 8-1: config 7 has no interface number 0 [ 811.328648][ T5974] usb 8-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 811.343196][ T5974] usb 8-1: config 7 interface 128 has no altsetting 0 [ 811.355605][ T5974] usb 8-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 811.365117][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.374328][ T5974] usb 8-1: Product: syz [ 811.423599][ T5974] usb 8-1: Manufacturer: syz [ 811.471309][ T5974] usb 8-1: SerialNumber: syz [ 811.494700][ T5993] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 811.765701][ T5974] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 811.767661][ T5993] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.821878][ T5974] usb 8-1: MIDIStreaming interface descriptor not found [ 811.871086][ T5993] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 811.918646][ T5993] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 811.939851][ T5974] usb 8-1: USB disconnect, device number 17 [ 812.024978][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.055160][ T5993] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.183098][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.310911][T13162] usb 2-1: USB disconnect, device number 111 [ 812.444058][ T5993] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.580794][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.581981][ T5993] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 812.658640][T14757] FAULT_INJECTION: forcing a failure. [ 812.658640][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 812.688524][T14757] CPU: 1 UID: 0 PID: 14757 Comm: syz.4.2180 Not tainted syzkaller #0 PREEMPT(full) [ 812.688550][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.688560][T14757] Call Trace: [ 812.688566][T14757] [ 812.688573][T14757] dump_stack_lvl+0x16c/0x1f0 [ 812.688598][T14757] should_fail_ex+0x512/0x640 [ 812.688618][T14757] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 812.688641][T14757] should_failslab+0xc2/0x120 [ 812.688661][T14757] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 812.688679][T14757] ? __alloc_skb+0x2b2/0x380 [ 812.688700][T14757] __alloc_skb+0x2b2/0x380 [ 812.688716][T14757] ? __pfx___alloc_skb+0x10/0x10 [ 812.688735][T14757] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 812.688761][T14757] netlink_alloc_large_skb+0x69/0x130 [ 812.688782][T14757] netlink_sendmsg+0x6a1/0xdd0 [ 812.688816][T14757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.688845][T14757] ____sys_sendmsg+0xa98/0xc70 [ 812.688870][T14757] ? copy_msghdr_from_user+0x10a/0x160 [ 812.688890][T14757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.688924][T14757] ___sys_sendmsg+0x134/0x1d0 [ 812.688943][T14757] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.688993][T14757] __sys_sendmsg+0x16d/0x220 [ 812.689013][T14757] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.689042][T14757] ? fput+0x9b/0xd0 [ 812.689070][T14757] do_syscall_64+0xcd/0x4c0 [ 812.689090][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.689107][T14757] RIP: 0033:0x7ff74bd8ebe9 [ 812.689123][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.689139][T14757] RSP: 002b:00007ff74cc84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.689156][T14757] RAX: ffffffffffffffda RBX: 00007ff74bfb5fa0 RCX: 00007ff74bd8ebe9 [ 812.689169][T14757] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 812.689180][T14757] RBP: 00007ff74cc84090 R08: 0000000000000000 R09: 0000000000000000 [ 812.689190][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.689201][T14757] R13: 00007ff74bfb6038 R14: 00007ff74bfb5fa0 R15: 00007ffe3b86ae28 [ 812.689223][T14757] [ 812.696565][ T5934] usb 7-1: USB disconnect, device number 32 [ 812.915562][ T976] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 813.139920][ T976] usb 8-1: Using ep0 maxpacket: 8 [ 813.154442][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 813.167687][ T976] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 813.178222][ T976] usb 8-1: config 4 has no interface number 0 [ 813.186448][ T976] usb 8-1: config 4 interface 30 has no altsetting 0 [ 813.207604][ T976] usb 8-1: string descriptor 0 read error: -22 [ 813.219795][ T976] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 813.231013][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.249186][ T976] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 813.261960][ T976] dw2102: su3000_power_ctrl: 1, initialized 0 [ 813.269407][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 813.282019][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.295274][ T976] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 813.303000][ T976] usb 8-1: media controller created [ 813.309836][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.317028][ T976] dw2102: i2c transfer failed. [ 813.321847][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.330891][ T976] dw2102: i2c transfer failed. [ 813.347969][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.364400][ T976] dw2102: i2c transfer failed. [ 813.381055][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.390398][ T976] dw2102: i2c transfer failed. [ 813.395339][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.401188][ T976] dw2102: i2c transfer failed. [ 813.408254][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 813.414100][ T976] dw2102: i2c transfer failed. [ 813.419578][ T976] dvb-usb: MAC address: 02:02:02:02:02:02 [ 813.454738][ T5993] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 813.472588][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.512466][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 813.525614][ T976] dw2102: command 0x0e transfer failed. [ 813.531197][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 813.554624][ T976] dw2102: command 0x0e transfer failed. [ 813.630243][ T5993] usb 5-1: config 0 has no interfaces? [ 813.644661][ T5993] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 813.653730][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.685659][ T30] audit: type=1400 audit(1756350532.139:566): avc: denied { execute } for pid=14772 comm="syz.1.2186" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=57804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 813.705611][ T5993] usb 5-1: config 0 descriptor?? [ 813.796237][T14780] FAULT_INJECTION: forcing a failure. [ 813.796237][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.865149][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 813.870935][ T976] dw2102: command 0x0e transfer failed. [ 813.893172][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.3.2187 Not tainted syzkaller #0 PREEMPT(full) [ 813.893201][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.893212][T14780] Call Trace: [ 813.893218][T14780] [ 813.893225][T14780] dump_stack_lvl+0x16c/0x1f0 [ 813.893251][T14780] should_fail_ex+0x512/0x640 [ 813.893276][T14780] _copy_to_user+0x32/0xd0 [ 813.893301][T14780] simple_read_from_buffer+0xcb/0x170 [ 813.893322][T14780] proc_fail_nth_read+0x197/0x240 [ 813.893345][T14780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.893367][T14780] ? rw_verify_area+0xcf/0x6c0 [ 813.893391][T14780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.893410][T14780] vfs_read+0x1e4/0xcf0 [ 813.893425][T14780] ? __pfx___mutex_lock+0x10/0x10 [ 813.893438][T14780] ? __pfx_vfs_read+0x10/0x10 [ 813.893453][T14780] ? __fget_files+0x20e/0x3c0 [ 813.893470][T14780] ksys_read+0x12a/0x250 [ 813.893481][T14780] ? __pfx_ksys_read+0x10/0x10 [ 813.893496][T14780] do_syscall_64+0xcd/0x4c0 [ 813.893510][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.893522][T14780] RIP: 0033:0x7fcbe878d5fc [ 813.893532][T14780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 813.893548][T14780] RSP: 002b:00007fcbe95d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.893559][T14780] RAX: ffffffffffffffda RBX: 00007fcbe89b5fa0 RCX: 00007fcbe878d5fc [ 813.893566][T14780] RDX: 000000000000000f RSI: 00007fcbe95d80a0 RDI: 0000000000000004 [ 813.893573][T14780] RBP: 00007fcbe95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 813.893579][T14780] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 813.893586][T14780] R13: 00007fcbe89b6038 R14: 00007fcbe89b5fa0 R15: 00007ffdb14a1968 [ 813.893600][T14780] [ 814.092993][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 814.102583][ T976] dw2102: command 0x0e transfer failed. [ 814.108728][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 814.114449][ T976] dw2102: command 0x51 transfer failed. [ 814.120239][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 814.126044][ T976] dw2102: i2c probe for address 0x68 failed. [ 814.184843][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 814.210239][ T976] dw2102: i2c probe for address 0x69 failed. [ 814.234160][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 814.323124][ T976] dw2102: i2c probe for address 0x6a failed. [ 814.350490][ T976] dw2102: probing for demodulator failed. Is the external power switched on? [ 814.366649][ T976] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 814.551754][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'. [ 814.704711][ T976] rc_core: IR keymap rc-tt-1500 not found [ 814.721677][ T976] Registered IR keymap rc-empty [ 814.741191][ T976] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 814.757998][ T976] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input70 [ 814.871813][ T976] dvb-usb: schedule remote query interval to 250 msecs. [ 814.890942][ T976] dw2102: su3000_power_ctrl: 0, initialized 1 [ 814.913985][ T976] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 814.969988][ T976] usb 8-1: USB disconnect, device number 18 [ 815.000512][ T5934] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 815.039496][T14805] bond0: (slave bond_slave_1): Releasing backup interface [ 815.115404][ T30] audit: type=1400 audit(1756350533.569:567): avc: denied { relabelfrom } for pid=14799 comm="syz.7.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 815.147168][ T30] audit: type=1400 audit(1756350533.579:568): avc: denied { relabelto } for pid=14799 comm="syz.7.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 815.167412][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 815.247861][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.324695][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 815.336911][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 815.338543][ T5920] usb 4-1: config 0 has no interfaces? [ 815.364501][ T976] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 815.399510][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 815.403813][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.423796][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 815.482705][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2195'. [ 815.506338][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.515279][ T5920] usb 4-1: Manufacturer: syz [ 815.520707][ T5934] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 815.531950][ T5920] usb 4-1: config 0 descriptor?? [ 815.534187][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.575462][T14814] bridge_slave_1 (unregistering): left allmulticast mode [ 815.584323][T14814] bridge_slave_1 (unregistering): left promiscuous mode [ 815.593226][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.602716][ T5934] usb 7-1: Product: syz [ 815.629726][ T5934] usb 7-1: Manufacturer: syz [ 815.642850][ T5934] usb 7-1: SerialNumber: syz [ 815.657441][ T5934] usb 7-1: config 0 descriptor?? [ 815.678133][T14798] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 815.903276][ T5934] powermate: unknown product id 0240 [ 815.913442][ T5934] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 816.021504][ T5934] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input72 [ 816.092531][ T5920] usb 5-1: USB disconnect, device number 93 [ 817.573811][ T5934] usb 4-1: USB disconnect, device number 98 [ 817.648193][T14833] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2201'. [ 817.725895][T14833] loop8: detected capacity change from 0 to 7 [ 817.745830][T14833] Dev loop8: unable to read RDB block 7 [ 817.758632][T14833] loop8: unable to read partition table [ 817.809195][T14833] loop8: partition table beyond EOD, truncated [ 817.831366][T14833] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 817.847973][ C0] powermate: config urb returned -71 [ 817.853456][ C0] powermate: config urb returned -71 [ 817.858914][ C0] powermate: config urb returned -71 [ 817.864809][ T5934] usb 7-1: USB disconnect, device number 33 [ 817.864855][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 817.888016][T14797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.911120][ T5862] Dev loop8: unable to read RDB block 7 [ 817.917359][ T5862] loop8: unable to read partition table [ 817.933543][ T5862] loop8: partition table beyond EOD, truncated [ 817.947891][T14834] Dev loop8: unable to read RDB block 7 [ 817.955431][T14834] loop8: unable to read partition table [ 817.962585][T14834] loop8: partition table beyond EOD, truncated [ 817.977265][T14834] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 818.291246][T14840] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2203'. [ 818.354706][ T30] audit: type=1400 audit(1756350536.799:569): avc: denied { getopt } for pid=14839 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 818.482171][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 818.512379][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.558978][T14842] bridge_slave_1 (unregistering): left allmulticast mode [ 818.558997][T14842] bridge_slave_1 (unregistering): left promiscuous mode [ 818.559037][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.569498][ T30] audit: type=1400 audit(1756350536.969:570): avc: denied { ioctl } for pid=14839 comm="syz.4.2203" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 818.704849][ T5965] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 818.924642][ T5965] usb 8-1: Using ep0 maxpacket: 32 [ 818.939229][ T5965] usb 8-1: unable to get BOS descriptor or descriptor too short [ 818.944480][ T5965] usb 8-1: config 7 has an invalid interface number: 128 but max is 0 [ 818.944742][ T5965] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 818.944804][ T5965] usb 8-1: config 7 has no interface number 0 [ 818.945028][ T5965] usb 8-1: config 7 interface 128 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 818.945096][ T5965] usb 8-1: config 7 interface 128 has no altsetting 0 [ 819.036850][ T5965] usb 8-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 819.036879][ T5965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.036898][ T5965] usb 8-1: Product: syz [ 819.036913][ T5965] usb 8-1: Manufacturer: syz [ 819.036928][ T5965] usb 8-1: SerialNumber: syz [ 819.527666][ T5965] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.527692][ T5965] usb 8-1: MIDIStreaming interface descriptor not found [ 819.535694][ T5965] usb 8-1: USB disconnect, device number 19 [ 819.599472][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.704873][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.680035][T14877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2212'. [ 824.105258][ T5965] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 824.582604][ T30] audit: type=1400 audit(1756350543.039:571): avc: denied { shutdown } for pid=14891 comm="syz.7.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 824.602609][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.744661][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 824.856480][T14902] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 824.888078][T14902] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 825.985226][ T30] audit: type=1400 audit(1756350544.429:572): avc: denied { getopt } for pid=14910 comm="syz.4.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 826.158197][T14914] input: syz0 as /devices/virtual/input/input73 [ 826.280327][ T5965] usb 4-1: device descriptor read/all, error -71 [ 827.149292][T14924] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2226'. [ 827.524863][T14927] FAULT_INJECTION: forcing a failure. [ 827.524863][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.589079][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.6.2227 Not tainted syzkaller #0 PREEMPT(full) [ 827.589096][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.589107][T14927] Call Trace: [ 827.589111][T14927] [ 827.589116][T14927] dump_stack_lvl+0x16c/0x1f0 [ 827.589133][T14927] should_fail_ex+0x512/0x640 [ 827.589149][T14927] _copy_from_user+0x2e/0xd0 [ 827.589164][T14927] kstrtouint_from_user+0xd6/0x1d0 [ 827.589176][T14927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 827.589186][T14927] ? __lock_acquire+0xb97/0x1ce0 [ 827.589206][T14927] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 827.589228][T14927] proc_fail_nth_write+0x83/0x220 [ 827.589243][T14927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 827.589260][T14927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 827.589272][T14927] vfs_write+0x29d/0x11d0 [ 827.589286][T14927] ? __pfx___mutex_lock+0x10/0x10 [ 827.589300][T14927] ? __pfx_vfs_write+0x10/0x10 [ 827.589315][T14927] ? __fget_files+0x20e/0x3c0 [ 827.589333][T14927] ksys_write+0x12a/0x250 [ 827.589345][T14927] ? __pfx_ksys_write+0x10/0x10 [ 827.589360][T14927] do_syscall_64+0xcd/0x4c0 [ 827.589374][T14927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.589386][T14927] RIP: 0033:0x7fa61e38d69f [ 827.589396][T14927] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 827.589407][T14927] RSP: 002b:00007fa61c5d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 827.589419][T14927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa61e38d69f [ 827.589426][T14927] RDX: 0000000000000001 RSI: 00007fa61c5d50a0 RDI: 0000000000000007 [ 827.589432][T14927] RBP: 00007fa61c5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 827.589439][T14927] R10: 0000000000000004 R11: 0000000000000293 R12: 0000000000000001 [ 827.589446][T14927] R13: 00007fa61e5b6128 R14: 00007fa61e5b6090 R15: 00007fffea0d89f8 [ 827.589465][T14927] [ 827.785160][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.857184][ T30] audit: type=1400 audit(1756350546.319:573): avc: denied { ioctl } for pid=14930 comm="syz.1.2228" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 827.933930][ T30] audit: type=1400 audit(1756350546.389:574): avc: denied { getopt } for pid=14937 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 828.297124][T14954] netlink: 'syz.7.2234': attribute type 11 has an invalid length. [ 828.676965][ T5934] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 828.904735][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 828.914870][ T5934] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 828.934656][T13417] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 828.942296][ T5934] usb 4-1: config 0 has no interface number 0 [ 828.986481][ T5934] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 829.017833][ T5934] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 829.155335][ T5974] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 829.165597][T13417] usb 5-1: Using ep0 maxpacket: 16 [ 829.207263][T14965] FAULT_INJECTION: forcing a failure. [ 829.207263][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.220420][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.7.2237 Not tainted syzkaller #0 PREEMPT(full) [ 829.220444][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.220454][T14965] Call Trace: [ 829.220459][T14965] [ 829.220464][T14965] dump_stack_lvl+0x16c/0x1f0 [ 829.220481][T14965] should_fail_ex+0x512/0x640 [ 829.220497][T14965] _copy_from_user+0x2e/0xd0 [ 829.220516][T14965] get_timespec64+0x8b/0x240 [ 829.220541][T14965] ? __pfx_get_timespec64+0x10/0x10 [ 829.220564][T14965] ? find_held_lock+0x2b/0x80 [ 829.220589][T14965] get_itimerspec64+0x40/0x60 [ 829.220607][T14965] __x64_sys_timer_settime+0x17d/0x2c0 [ 829.220619][T14965] ? find_held_lock+0x2b/0x80 [ 829.220633][T14965] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 829.220646][T14965] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 829.220661][T14965] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.220681][T14965] ? rcu_read_unlock_trace_special+0x2aa/0x3f0 [ 829.220708][T14965] ? rcu_is_watching+0x12/0xc0 [ 829.220731][T14965] do_syscall_64+0xcd/0x4c0 [ 829.220747][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.220759][T14965] RIP: 0033:0x7fd35c58ebe9 [ 829.220769][T14965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.220780][T14965] RSP: 002b:00007fd35d3c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 829.220792][T14965] RAX: ffffffffffffffda RBX: 00007fd35c7b5fa0 RCX: 00007fd35c58ebe9 [ 829.220806][T14965] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 829.220822][T14965] RBP: 00007fd35d3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 829.220832][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.220841][T14965] R13: 00007fd35c7b6038 R14: 00007fd35c7b5fa0 R15: 00007ffe9c0580a8 [ 829.220864][T14965] [ 829.407045][T13417] usb 5-1: config 0 has no interfaces? [ 829.414006][ T5934] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 829.425235][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.433351][T13417] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 829.656055][ T5993] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 829.659831][ T5934] usb 4-1: Product: syz [ 829.674402][T13417] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 829.692041][ T5934] usb 4-1: Manufacturer: syz [ 829.703179][T13417] usb 5-1: Manufacturer: syz [ 829.714262][ T5934] usb 4-1: SerialNumber: syz [ 829.726337][T13417] usb 5-1: config 0 descriptor?? [ 829.793516][ T5934] usb 4-1: config 0 descriptor?? [ 829.812371][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 829.845364][T14947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 829.852583][T14947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 829.886690][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 829.896459][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 829.896551][ T5993] usb 7-1: config 0 has no interfaces? [ 829.916099][ T5993] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 829.927032][ T5993] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 829.940292][ T5993] usb 7-1: Manufacturer: syz [ 829.956401][ T5993] usb 7-1: config 0 descriptor?? [ 830.084649][ T5974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 830.095504][ T5974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 830.105048][T14940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 830.115186][T14940] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 830.136020][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.162407][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 830.253203][ T30] audit: type=1400 audit(1756350548.709:575): avc: denied { audit_write } for pid=14971 comm="syz.7.2240" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 830.274369][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.323061][T14976] FAULT_INJECTION: forcing a failure. [ 830.323061][T14976] name failslab, interval 1, probability 0, space 0, times 0 [ 830.337271][T14976] CPU: 1 UID: 0 PID: 14976 Comm: syz.7.2241 Not tainted syzkaller #0 PREEMPT(full) [ 830.337297][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.337308][T14976] Call Trace: [ 830.337315][T14976] [ 830.337323][T14976] dump_stack_lvl+0x16c/0x1f0 [ 830.337348][T14976] should_fail_ex+0x512/0x640 [ 830.337368][T14976] ? __kmalloc_node_noprof+0xc5/0x500 [ 830.337390][T14976] should_failslab+0xc2/0x120 [ 830.337410][T14976] __kmalloc_node_noprof+0xd8/0x500 [ 830.337428][T14976] ? __up_read+0x1f8/0x750 [ 830.337446][T14976] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 830.337469][T14976] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 830.337493][T14976] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 830.337515][T14976] crypto_create_tfm_node+0x85/0x350 [ 830.337538][T14976] crypto_spawn_tfm2+0x62/0xb0 [ 830.337569][T14976] ? __pfx_hmac_init_tfm+0x10/0x10 [ 830.337595][T14976] hmac_init_tfm+0x39/0xb0 [ 830.337620][T14976] ? __pfx_hmac_init_tfm+0x10/0x10 [ 830.337646][T14976] crypto_shash_init_tfm+0x132/0x1e0 [ 830.337668][T14976] crypto_create_tfm_node+0x124/0x350 [ 830.337690][T14976] crypto_alloc_tfm_node+0x102/0x260 [ 830.337717][T14976] sctp_inet_listen+0x825/0xa20 [ 830.337740][T14976] ? __pfx_sctp_inet_listen+0x10/0x10 [ 830.337769][T14976] ? __fget_files+0x20e/0x3c0 [ 830.337794][T14976] __sys_listen_socket+0x114/0x160 [ 830.337821][T14976] __sys_listen+0xa7/0x130 [ 830.337846][T14976] __x64_sys_listen+0x53/0x80 [ 830.337871][T14976] do_syscall_64+0xcd/0x4c0 [ 830.337894][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.337913][T14976] RIP: 0033:0x7fd35c58ebe9 [ 830.337929][T14976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.337946][T14976] RSP: 002b:00007fd35d3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 830.337964][T14976] RAX: ffffffffffffffda RBX: 00007fd35c7b5fa0 RCX: 00007fd35c58ebe9 [ 830.337975][T14976] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000000004 [ 830.337986][T14976] RBP: 00007fd35d3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 830.337998][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.338009][T14976] R13: 00007fd35c7b6038 R14: 00007fd35c7b5fa0 R15: 00007ffe9c0580a8 [ 830.338035][T14976] [ 830.338281][T14976] net_ratelimit: 4055 callbacks suppressed [ 830.338291][T14976] sctp: failed to load transform for md5: -12 [ 830.791714][ T5974] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 830.964519][T14980] FAULT_INJECTION: forcing a failure. [ 830.964519][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 830.979943][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.7.2243 Not tainted syzkaller #0 PREEMPT(full) [ 830.979967][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.979977][T14980] Call Trace: [ 830.979983][T14980] [ 830.979991][T14980] dump_stack_lvl+0x16c/0x1f0 [ 830.980011][T14980] should_fail_ex+0x512/0x640 [ 830.980024][T14980] ? fs_reclaim_acquire+0xae/0x150 [ 830.980040][T14980] ? tomoyo_encode2+0x100/0x3e0 [ 830.980058][T14980] should_failslab+0xc2/0x120 [ 830.980078][T14980] __kmalloc_noprof+0xd2/0x510 [ 830.980102][T14980] tomoyo_encode2+0x100/0x3e0 [ 830.980129][T14980] tomoyo_encode+0x29/0x50 [ 830.980147][T14980] tomoyo_realpath_from_path+0x18f/0x6e0 [ 830.980166][T14980] ? tomoyo_profile+0x47/0x60 [ 830.980178][T14980] tomoyo_path_number_perm+0x245/0x580 [ 830.980192][T14980] ? tomoyo_path_number_perm+0x237/0x580 [ 830.980213][T14980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 830.980236][T14980] ? find_held_lock+0x2b/0x80 [ 830.980278][T14980] ? find_held_lock+0x2b/0x80 [ 830.980292][T14980] ? hook_file_ioctl_common+0x145/0x410 [ 830.980307][T14980] ? __fget_files+0x20e/0x3c0 [ 830.980322][T14980] security_file_ioctl+0x9b/0x240 [ 830.980341][T14980] __x64_sys_ioctl+0xb7/0x210 [ 830.980369][T14980] do_syscall_64+0xcd/0x4c0 [ 830.980390][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.980407][T14980] RIP: 0033:0x7fd35c58ebe9 [ 830.980421][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.980433][T14980] RSP: 002b:00007fd35d3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.980444][T14980] RAX: ffffffffffffffda RBX: 00007fd35c7b5fa0 RCX: 00007fd35c58ebe9 [ 830.980451][T14980] RDX: 0000200000000240 RSI: 000000004048ae9b RDI: 0000000000000005 [ 830.980480][T14980] RBP: 00007fd35d3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 830.980489][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.980499][T14980] R13: 00007fd35c7b6038 R14: 00007fd35c7b5fa0 R15: 00007ffe9c0580a8 [ 830.980523][T14980] [ 830.980745][T14980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 831.462739][ T5934] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 831.473002][ T5934] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 831.493074][ T5934] asix 4-1:0.251: probe with driver asix failed with error -71 [ 831.526132][ T5934] usb 4-1: USB disconnect, device number 101 [ 831.616756][ T5965] usb 5-1: USB disconnect, device number 94 [ 831.779458][ T5993] usb 7-1: USB disconnect, device number 34 [ 831.914478][ T5934] usb 2-1: USB disconnect, device number 112 [ 832.042217][ T30] audit: type=1400 audit(1756350550.499:576): avc: denied { append } for pid=14992 comm="syz.4.2249" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 832.092197][ T30] audit: type=1400 audit(1756350550.499:577): avc: denied { ioctl } for pid=14992 comm="syz.4.2249" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 832.475314][T15007] FAULT_INJECTION: forcing a failure. [ 832.475314][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 832.513794][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.3.2250 Not tainted syzkaller #0 PREEMPT(full) [ 832.513813][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.513820][T15007] Call Trace: [ 832.513825][T15007] [ 832.513829][T15007] dump_stack_lvl+0x16c/0x1f0 [ 832.513846][T15007] should_fail_ex+0x512/0x640 [ 832.513860][T15007] ? fs_reclaim_acquire+0xae/0x150 [ 832.513876][T15007] ? tomoyo_encode2+0x100/0x3e0 [ 832.513892][T15007] should_failslab+0xc2/0x120 [ 832.513906][T15007] __kmalloc_noprof+0xd2/0x510 [ 832.513921][T15007] tomoyo_encode2+0x100/0x3e0 [ 832.513940][T15007] tomoyo_encode+0x29/0x50 [ 832.513955][T15007] tomoyo_realpath_from_path+0x18f/0x6e0 [ 832.513974][T15007] ? tomoyo_profile+0x47/0x60 [ 832.513986][T15007] tomoyo_path_number_perm+0x245/0x580 [ 832.513999][T15007] ? tomoyo_path_number_perm+0x237/0x580 [ 832.514015][T15007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 832.514030][T15007] ? find_held_lock+0x2b/0x80 [ 832.514056][T15007] ? find_held_lock+0x2b/0x80 [ 832.514069][T15007] ? hook_file_ioctl_common+0x145/0x410 [ 832.514084][T15007] ? __fget_files+0x20e/0x3c0 [ 832.514099][T15007] security_file_ioctl+0x9b/0x240 [ 832.514117][T15007] __x64_sys_ioctl+0xb7/0x210 [ 832.514135][T15007] do_syscall_64+0xcd/0x4c0 [ 832.514149][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.514161][T15007] RIP: 0033:0x7fcbe878ebe9 [ 832.514170][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.514181][T15007] RSP: 002b:00007fcbe95b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.514192][T15007] RAX: ffffffffffffffda RBX: 00007fcbe89b6090 RCX: 00007fcbe878ebe9 [ 832.514200][T15007] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 832.514206][T15007] RBP: 00007fcbe95b7090 R08: 0000000000000000 R09: 0000000000000000 [ 832.514213][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.514220][T15007] R13: 00007fcbe89b6128 R14: 00007fcbe89b6090 R15: 00007ffdb14a1968 [ 832.514234][T15007] [ 832.514245][T15007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.794642][ T5974] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 833.945384][ T5974] usb 2-1: Using ep0 maxpacket: 32 [ 834.006484][ T5974] usb 2-1: config 0 has no interfaces? [ 834.015718][ T5974] usb 2-1: New USB device found, idVendor=2dc8, idProduct=aa4a, bcdDevice=b4.3d [ 834.081635][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.081829][ T30] audit: type=1400 audit(1756350552.539:578): avc: denied { getopt } for pid=15028 comm="syz.4.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 834.151707][ T5974] usb 2-1: Product: syz [ 834.169110][ T5974] usb 2-1: Manufacturer: syz [ 834.236373][ T5974] usb 2-1: SerialNumber: syz [ 834.273891][ T5974] usb 2-1: config 0 descriptor?? [ 834.306825][ T840] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 834.365528][ T5993] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 834.457407][ T5965] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 834.484795][ T840] usb 8-1: Using ep0 maxpacket: 16 [ 834.498163][ T840] usb 8-1: config 0 has no interfaces? [ 834.513831][ T840] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 834.523950][ T840] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 834.536761][ T840] usb 8-1: Manufacturer: syz [ 834.564767][ T840] usb 8-1: config 0 descriptor?? [ 834.576086][ T5993] usb 5-1: Using ep0 maxpacket: 8 [ 834.593724][ T5993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.615013][ T5993] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 834.624659][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.632636][ T5993] usb 5-1: Product: syz [ 834.638325][ T5993] usb 5-1: Manufacturer: syz [ 834.643824][ T5993] usb 5-1: SerialNumber: syz [ 834.673299][ T5993] usb 5-1: config 0 descriptor?? [ 834.692043][ T5993] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 834.742690][ T5965] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 834.755078][ T5965] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 834.765572][ T5965] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 834.803055][ T5965] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 834.813594][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.878878][ T5965] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.896832][ T5993] usb 5-1: USB disconnect, device number 95 [ 834.945856][T15034] syz.1.2254 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 835.093136][ T5856] Bluetooth: hci3: unexpected event 0x20 length: 8 > 7 [ 835.605178][ T5934] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 835.780701][ T5934] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 835.791940][ T5965] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 835.802162][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.831611][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.877141][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 835.980213][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 836.014626][ T5934] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 836.034792][ T5934] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 836.051570][ T5934] usb 4-1: Manufacturer: syz [ 836.083284][ T5934] usb 4-1: config 0 descriptor?? [ 836.442881][ T5965] usb 2-1: USB disconnect, device number 113 [ 836.527638][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 836.534253][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 836.567940][ T5934] usb 4-1: USB disconnect, device number 102 [ 836.676005][T15052] FAULT_INJECTION: forcing a failure. [ 836.676005][T15052] name failslab, interval 1, probability 0, space 0, times 0 [ 836.688906][T15052] CPU: 1 UID: 0 PID: 15052 Comm: syz.1.2263 Not tainted syzkaller #0 PREEMPT(full) [ 836.688931][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.688940][T15052] Call Trace: [ 836.688946][T15052] [ 836.688952][T15052] dump_stack_lvl+0x16c/0x1f0 [ 836.688974][T15052] should_fail_ex+0x512/0x640 [ 836.688992][T15052] ? fs_reclaim_acquire+0xae/0x150 [ 836.689016][T15052] ? tomoyo_encode2+0x100/0x3e0 [ 836.689039][T15052] should_failslab+0xc2/0x120 [ 836.689059][T15052] __kmalloc_noprof+0xd2/0x510 [ 836.689081][T15052] tomoyo_encode2+0x100/0x3e0 [ 836.689112][T15052] tomoyo_encode+0x29/0x50 [ 836.689134][T15052] tomoyo_realpath_from_path+0x18f/0x6e0 [ 836.689161][T15052] ? tomoyo_profile+0x47/0x60 [ 836.689179][T15052] tomoyo_path_number_perm+0x245/0x580 [ 836.689199][T15052] ? tomoyo_path_number_perm+0x237/0x580 [ 836.689222][T15052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.689241][T15052] ? find_held_lock+0x2b/0x80 [ 836.689287][T15052] ? find_held_lock+0x2b/0x80 [ 836.689305][T15052] ? hook_file_ioctl_common+0x145/0x410 [ 836.689328][T15052] ? __fget_files+0x20e/0x3c0 [ 836.689352][T15052] security_file_ioctl+0x9b/0x240 [ 836.689378][T15052] __x64_sys_ioctl+0xb7/0x210 [ 836.689411][T15052] do_syscall_64+0xcd/0x4c0 [ 836.689431][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.689448][T15052] RIP: 0033:0x7fe2cd78ebe9 [ 836.689462][T15052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.689478][T15052] RSP: 002b:00007fe2ce653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.689494][T15052] RAX: ffffffffffffffda RBX: 00007fe2cd9b5fa0 RCX: 00007fe2cd78ebe9 [ 836.689505][T15052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 836.689515][T15052] RBP: 00007fe2ce653090 R08: 0000000000000000 R09: 0000000000000000 [ 836.689525][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.689534][T15052] R13: 00007fe2cd9b6038 R14: 00007fe2cd9b5fa0 R15: 00007ffee98b6ec8 [ 836.689557][T15052] [ 836.689647][T15052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.284145][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 837.427336][T13417] usb 7-1: USB disconnect, device number 35 [ 837.497612][ T5934] usb 8-1: USB disconnect, device number 20 [ 837.884848][T13417] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 837.895696][T15076] FAULT_INJECTION: forcing a failure. [ 837.895696][T15076] name failslab, interval 1, probability 0, space 0, times 0 [ 837.915786][T15076] CPU: 1 UID: 0 PID: 15076 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) [ 837.915813][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.915823][T15076] Call Trace: [ 837.915830][T15076] [ 837.915838][T15076] dump_stack_lvl+0x16c/0x1f0 [ 837.915863][T15076] should_fail_ex+0x512/0x640 [ 837.915883][T15076] ? fs_reclaim_acquire+0xae/0x150 [ 837.915908][T15076] ? tomoyo_encode2+0x100/0x3e0 [ 837.915932][T15076] should_failslab+0xc2/0x120 [ 837.915954][T15076] __kmalloc_noprof+0xd2/0x510 [ 837.915980][T15076] tomoyo_encode2+0x100/0x3e0 [ 837.916008][T15076] tomoyo_encode+0x29/0x50 [ 837.916032][T15076] tomoyo_realpath_from_path+0x18f/0x6e0 [ 837.916060][T15076] ? tomoyo_profile+0x47/0x60 [ 837.916080][T15076] tomoyo_path_number_perm+0x245/0x580 [ 837.916101][T15076] ? tomoyo_path_number_perm+0x237/0x580 [ 837.916125][T15076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 837.916150][T15076] ? find_held_lock+0x2b/0x80 [ 837.916196][T15076] ? find_held_lock+0x2b/0x80 [ 837.916216][T15076] ? hook_file_ioctl_common+0x145/0x410 [ 837.916238][T15076] ? __fget_files+0x20e/0x3c0 [ 837.916260][T15076] security_file_ioctl+0x9b/0x240 [ 837.916286][T15076] __x64_sys_ioctl+0xb7/0x210 [ 837.916314][T15076] do_syscall_64+0xcd/0x4c0 [ 837.916336][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.916353][T15076] RIP: 0033:0x7fe2cd78ebe9 [ 837.916368][T15076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.916385][T15076] RSP: 002b:00007fe2ce653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.916404][T15076] RAX: ffffffffffffffda RBX: 00007fe2cd9b5fa0 RCX: 00007fe2cd78ebe9 [ 837.916416][T15076] RDX: 0000200000000280 RSI: 000000004068aea3 RDI: 0000000000000004 [ 837.916425][T15076] RBP: 00007fe2ce653090 R08: 0000000000000000 R09: 0000000000000000 [ 837.916434][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.916442][T15076] R13: 00007fe2cd9b6038 R14: 00007fe2cd9b5fa0 R15: 00007ffee98b6ec8 [ 837.916463][T15076] [ 837.916481][T15076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 838.004681][ T5974] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 838.284984][T13417] usb 7-1: Using ep0 maxpacket: 16 [ 838.291597][T13417] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 838.303783][T13417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 838.325576][T13417] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 838.335235][T13417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.344496][T13417] usb 7-1: Product: syz [ 838.352255][T13417] usb 7-1: Manufacturer: syz [ 838.357122][T13417] usb 7-1: SerialNumber: syz [ 838.367489][T15085] FAULT_INJECTION: forcing a failure. [ 838.367489][T15085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.383130][T13417] usb 7-1: config 0 descriptor?? [ 838.388434][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.7.2274 Not tainted syzkaller #0 PREEMPT(full) [ 838.388467][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 838.388477][T15085] Call Trace: [ 838.388484][T15085] [ 838.388491][T15085] dump_stack_lvl+0x16c/0x1f0 [ 838.388519][T15085] should_fail_ex+0x512/0x640 [ 838.388542][T15085] _copy_from_iter+0x29f/0x1720 [ 838.388571][T15085] ? __pfx__copy_from_iter+0x10/0x10 [ 838.388592][T15085] ? rcu_is_watching+0x12/0xc0 [ 838.388614][T15085] ? trace_kmalloc+0x2b/0xd0 [ 838.388634][T15085] ? __kmalloc_noprof+0x242/0x510 [ 838.388658][T15085] kernfs_fop_write_iter+0x19a/0x510 [ 838.388681][T15085] vfs_write+0x7d0/0x11d0 [ 838.388700][T15085] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 838.388719][T15085] ? __pfx___mutex_lock+0x10/0x10 [ 838.388739][T15085] ? __pfx_vfs_write+0x10/0x10 [ 838.388770][T15085] ksys_write+0x12a/0x250 [ 838.388787][T15085] ? __pfx_ksys_write+0x10/0x10 [ 838.388813][T15085] do_syscall_64+0xcd/0x4c0 [ 838.388836][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.388854][T15085] RIP: 0033:0x7fd35c58ebe9 [ 838.388870][T15085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.388887][T15085] RSP: 002b:00007fd35d3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.388904][T15085] RAX: ffffffffffffffda RBX: 00007fd35c7b5fa0 RCX: 00007fd35c58ebe9 [ 838.388916][T15085] RDX: 0000000000000001 RSI: 0000200000002540 RDI: 0000000000000005 [ 838.388927][T15085] RBP: 00007fd35d3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 838.388938][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.388948][T15085] R13: 00007fd35c7b6038 R14: 00007fd35c7b5fa0 R15: 00007ffe9c0580a8 [ 838.388973][T15085] [ 838.391353][T13417] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 838.621036][T15087] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2275'. [ 838.864802][ T5974] usb 5-1: Using ep0 maxpacket: 16 [ 838.915845][ T5974] usb 5-1: config 0 has no interfaces? [ 838.951067][ T5974] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 838.969809][ T5974] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.039697][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2276'. [ 839.071999][ T5974] usb 5-1: Manufacturer: syz [ 839.130772][ T5974] usb 5-1: config 0 descriptor?? [ 839.149970][T13417] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 839.605437][T13417] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 839.611810][T13417] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 839.619813][T13417] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 839.792770][T13417] em28xx 7-1:0.0: No AC97 audio processor [ 840.023065][T13417] usb 7-1: USB disconnect, device number 36 [ 840.042542][T13417] em28xx 7-1:0.0: Disconnecting em28xx [ 840.064943][T13417] em28xx 7-1:0.0: Freeing device [ 840.486407][ T5974] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 840.694766][ T5974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.749909][ T5920] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 840.765892][ T5974] usb 4-1: config 0 has no interfaces? [ 840.780991][ T5974] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 840.790894][ T5974] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 840.802929][ T5974] usb 4-1: Product: syz [ 840.810872][ T5974] usb 4-1: Manufacturer: syz [ 840.821054][ T5974] usb 4-1: SerialNumber: syz [ 840.833339][ T5974] usb 4-1: config 0 descriptor?? [ 840.874329][ T5934] usb 5-1: USB disconnect, device number 96 [ 840.969242][ T5920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 841.034689][T13417] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 841.216575][T13417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.233122][T13417] usb 7-1: config 0 has no interfaces? [ 841.261105][T13417] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 841.271405][T13417] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 841.287640][T13417] usb 7-1: Product: syz [ 841.298578][T13417] usb 7-1: Manufacturer: syz [ 841.303430][ T5920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 841.303588][T13417] usb 7-1: SerialNumber: syz [ 841.330449][T13417] usb 7-1: config 0 descriptor?? [ 841.369283][ T5920] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 841.412273][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.473950][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.530623][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 841.558135][ T5974] usb 7-1: USB disconnect, device number 37 [ 841.710619][ T5920] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 841.715038][T13417] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 841.799622][ T5974] usb 4-1: USB disconnect, device number 103 [ 841.887655][T13417] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.899455][T13417] usb 5-1: config 0 has no interfaces? [ 841.908942][T13417] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 841.919115][T13417] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 841.927833][T13417] usb 5-1: Product: syz [ 841.932238][T13417] usb 5-1: Manufacturer: syz [ 841.937745][T13417] usb 5-1: SerialNumber: syz [ 841.947296][T13417] usb 5-1: config 0 descriptor?? [ 842.184390][T15120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15120 comm=syz.6.2283 [ 842.259301][T13417] usb 5-1: USB disconnect, device number 97 [ 842.454803][ T5920] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 842.627679][ T5920] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 842.637080][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.645159][ T5920] usb 7-1: Product: syz [ 842.649387][ T5920] usb 7-1: Manufacturer: syz [ 842.653970][ T5920] usb 7-1: SerialNumber: syz [ 842.658661][ T5993] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 842.668161][ T5920] usb 7-1: config 0 descriptor?? [ 842.824636][ T5993] usb 4-1: Using ep0 maxpacket: 16 [ 842.832384][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.843571][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.853456][ T5993] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 842.863001][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.889272][ T5993] usb 4-1: config 0 descriptor?? [ 842.941057][ T30] audit: type=1326 audit(1756350561.399:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.4.2286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74bd8ebe9 code=0x0 [ 843.003078][ T30] audit: type=1400 audit(1756350561.459:580): avc: denied { name_connect } for pid=15125 comm="syz.4.2286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 843.072249][ T30] audit: type=1400 audit(1756350561.529:581): avc: denied { execmod } for pid=15125 comm="syz.4.2286" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 843.145127][T13417] usb 2-1: USB disconnect, device number 114 [ 843.351623][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.382256][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.424452][T15122] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 843.440701][ T5920] usb 7-1: USB disconnect, device number 38 [ 843.641649][ T5993] hid (null): bogus close delimiter [ 843.662816][ T5993] hid (null): unknown global tag 0x30 [ 843.673471][ T5993] hid (null): unknown global tag 0xc [ 843.681375][ T5993] hid (null): invalid report_size 40320 [ 843.871564][ T5993] usb 4-1: string descriptor 0 read error: -71 [ 843.944899][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2289'. [ 843.994171][ T5993] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 844.104861][ T5993] letsketch 0003:6161:4D15.0032: probe with driver letsketch failed with error -32 [ 844.154873][ T5993] usb 4-1: USB disconnect, device number 104 [ 844.668002][ T5920] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 844.694851][ T5965] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 844.696226][ T976] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 844.846032][ T5920] usb 2-1: config 0 has no interfaces? [ 844.851536][ T5920] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 844.862317][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.871598][ T5965] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.874617][ T976] usb 8-1: Using ep0 maxpacket: 16 [ 844.884871][ T5920] usb 2-1: config 0 descriptor?? [ 844.909068][ T5965] usb 7-1: config 0 has no interfaces? [ 844.920564][ T5965] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 844.934525][ T5965] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 844.934654][T13162] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 844.950652][ T5965] usb 7-1: Product: syz [ 844.955182][ T5965] usb 7-1: Manufacturer: syz [ 844.955533][ T976] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 844.972330][ T5965] usb 7-1: SerialNumber: syz [ 844.982800][ T5965] usb 7-1: config 0 descriptor?? [ 844.988482][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 845.003396][ T976] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 845.034342][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.124647][T13162] usb 4-1: Using ep0 maxpacket: 16 [ 845.156464][ T976] usb 8-1: Product: syz [ 845.162445][ T976] usb 8-1: Manufacturer: syz [ 845.167258][ T976] usb 8-1: SerialNumber: syz [ 845.168178][T13162] usb 4-1: config 0 has no interfaces? [ 845.179749][ T976] usb 8-1: config 0 descriptor?? [ 845.189244][ T976] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 845.199575][T13162] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 845.199741][ T976] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 845.236328][ T5974] usb 7-1: USB disconnect, device number 39 [ 845.306895][T13162] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 845.343914][T13162] usb 4-1: Manufacturer: syz [ 845.381977][T13162] usb 4-1: config 0 descriptor?? [ 845.446369][ T30] audit: type=1400 audit(1756350563.909:582): avc: denied { read } for pid=15154 comm="syz.7.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 845.980323][ T976] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 845.989795][ T976] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 846.236289][ T976] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 846.280362][ T976] em28xx 8-1:0.0: No AC97 audio processor [ 846.331028][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'. [ 846.380840][ T976] usb 8-1: USB disconnect, device number 21 [ 846.437588][T15179] team0: Port device batadv0 removed [ 846.443568][ T976] em28xx 8-1:0.0: Disconnecting em28xx [ 846.451863][ T976] em28xx 8-1:0.0: Freeing device [ 846.585178][ T5974] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 846.759266][ T5974] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 846.792162][ T5974] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 846.804748][ T5974] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 846.821809][ T5974] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 846.844373][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.898026][ T5974] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.024858][ T5974] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 847.034839][ T976] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 847.194635][ T976] usb 8-1: Using ep0 maxpacket: 32 [ 847.246246][ T5965] usb 2-1: USB disconnect, device number 115 [ 847.277255][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 847.347269][ T976] usb 8-1: config index 0 descriptor too short (expected 53, got 34) [ 847.504610][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'. [ 847.705005][ T976] usb 8-1: config 2 has an invalid interface number: 221 but max is 0 [ 847.830313][ T976] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 847.842190][ T5974] usb 4-1: USB disconnect, device number 105 [ 848.180396][ T976] usb 8-1: config 2 has no interface number 0 [ 848.227632][ T976] usb 8-1: config 2 interface 221 has no altsetting 0 [ 848.267231][ T976] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 848.295488][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.313544][ T976] usb 8-1: Product: syz [ 848.326042][ T976] usb 8-1: Manufacturer: ꩮ蒑㴮盺䙧ꕠ஥㺁앒驾比 [ 848.340640][ T976] usb 8-1: SerialNumber: syz [ 848.434758][T13417] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 848.620394][ T976] usb 8-1: Found UVC 0.00 device syz (05ac:8501) [ 848.626888][ T976] usb 8-1: No valid video chain found. [ 848.637194][ T976] usb 8-1: USB disconnect, device number 22 [ 849.080868][T13417] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 849.089215][T13417] usb 2-1: config 0 has no interface number 0 [ 849.095409][T13417] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 849.107162][T13417] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.119930][T13417] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 849.129214][T13417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.137273][T13417] usb 2-1: Product: syz [ 849.141555][T13417] usb 2-1: Manufacturer: syz [ 849.146545][T13417] usb 2-1: SerialNumber: syz [ 849.152820][T13417] usb 2-1: config 0 descriptor?? [ 849.159180][T15192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.168794][T13417] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 849.180801][T13417] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 849.426208][T13162] usb 2-1: USB disconnect, device number 116 [ 849.435889][T13162] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 849.544080][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 849.788331][T13162] cyberjack 2-1:0.69: device disconnected [ 849.795518][T13417] usb 7-1: USB disconnect, device number 40 [ 850.093943][ T30] audit: type=1400 audit(1756350568.539:583): avc: denied { ioctl } for pid=15202 comm="syz.4.2306" path="socket:[59388]" dev="sockfs" ino=59388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 850.246196][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2308'. [ 850.875301][T13417] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 850.923880][T15219] siw: device registration error -23 [ 851.036083][T13417] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.049204][T13417] usb 7-1: config 0 has no interfaces? [ 851.077167][T13417] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 851.193000][T13417] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 851.283162][T13417] usb 7-1: Product: syz [ 851.308776][T13417] usb 7-1: Manufacturer: syz [ 851.424736][T13417] usb 7-1: SerialNumber: syz [ 851.455764][T13417] usb 7-1: config 0 descriptor?? [ 851.887876][ T5920] usb 7-1: USB disconnect, device number 41 [ 852.604831][ T976] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 852.708172][ T30] audit: type=1400 audit(1756350571.169:584): avc: denied { create } for pid=15236 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 852.835232][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 852.844495][ T30] audit: type=1400 audit(1756350571.299:585): avc: denied { ioctl } for pid=15236 comm="syz.3.2316" path="socket:[60475]" dev="sockfs" ino=60475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 853.026927][ T976] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 853.150015][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.204116][T15242] vxcan1 speed is unknown, defaulting to 1000 [ 853.317731][ T976] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 853.356759][ T976] usb 2-1: config 1 has no interface number 1 [ 853.384045][ T976] usb 2-1: too many endpoints for config 1 interface 6 altsetting 40: 173, using maximum allowed: 30 [ 853.404485][ T976] usb 2-1: config 1 interface 6 altsetting 40 has an invalid descriptor for endpoint zero, skipping [ 854.178245][ T976] usb 2-1: config 1 interface 6 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 173 [ 854.194636][ T976] usb 2-1: config 1 interface 6 has no altsetting 0 [ 854.203767][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 854.227702][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.237303][ T976] usb 2-1: Product: syz [ 854.241491][ T976] usb 2-1: Manufacturer: syz [ 854.254658][ T976] usb 2-1: SerialNumber: syz [ 854.294698][ T30] audit: type=1400 audit(1756350572.719:586): avc: denied { map } for pid=15251 comm="syz.3.2320" path="socket:[61443]" dev="sockfs" ino=61443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 854.318085][ T30] audit: type=1400 audit(1756350572.719:587): avc: denied { read } for pid=15251 comm="syz.3.2320" path="socket:[61443]" dev="sockfs" ino=61443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 854.349961][T13162] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 854.350046][ T976] usb 2-1: can't set config #1, error -71 [ 854.385152][ T976] usb 2-1: USB disconnect, device number 117 [ 854.529659][ T30] audit: type=1400 audit(1756350572.989:588): avc: denied { write } for pid=15251 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 854.618099][T13162] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 854.668313][T13162] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 854.688294][T13162] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 854.723661][T13162] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 854.784825][ T5993] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 854.793519][T13162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.430467][ T5993] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 855.442632][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.461161][T13162] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.469552][ T5993] usb 4-1: config 0 descriptor?? [ 855.482594][ T5993] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 855.600257][T13162] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 855.637764][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.855545][ T5920] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 856.014609][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 856.029288][ T5920] usb 2-1: config 0 has no interfaces? [ 856.041875][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 856.051670][ T5920] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 856.059818][ T5920] usb 2-1: Manufacturer: syz [ 856.066611][ T5920] usb 2-1: config 0 descriptor?? [ 856.197072][T13162] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 856.508491][T13162] usb 7-1: device descriptor read/64, error -71 [ 856.764921][T13162] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 856.914628][T13162] usb 7-1: device descriptor read/64, error -71 [ 857.025010][T13162] usb usb7-port1: attempt power cycle [ 857.083447][ T976] usb 5-1: USB disconnect, device number 98 [ 857.374623][T13162] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 857.395440][T13162] usb 7-1: device descriptor read/8, error -71 [ 857.424679][ T5920] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 857.464767][ T976] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 857.624937][ T5912] usb 2-1: USB disconnect, device number 118 [ 857.636797][ T5920] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.645937][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 857.648418][ T5920] usb 8-1: config 0 has no interfaces? [ 857.670976][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.671642][ T5920] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 857.692832][ T5920] usb 8-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 857.694803][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 857.704361][ T5920] usb 8-1: Product: syz [ 857.714151][ T5920] usb 8-1: Manufacturer: syz [ 857.718946][ T5920] usb 8-1: SerialNumber: syz [ 857.724643][T13162] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 857.730435][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.745316][T13162] usb 7-1: device descriptor read/8, error -71 [ 857.751641][ T976] usb 5-1: config 0 descriptor?? [ 857.752045][ T5920] usb 8-1: config 0 descriptor?? [ 857.760035][T15281] FAULT_INJECTION: forcing a failure. [ 857.760035][T15281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.802475][ T5934] usb 4-1: USB disconnect, device number 106 [ 857.812652][ T976] hub 5-1:0.0: USB hub found [ 857.814746][T15281] CPU: 1 UID: 0 PID: 15281 Comm: syz.1.2329 Not tainted syzkaller #0 PREEMPT(full) [ 857.814769][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.814779][T15281] Call Trace: [ 857.814785][T15281] [ 857.814791][T15281] dump_stack_lvl+0x16c/0x1f0 [ 857.814814][T15281] should_fail_ex+0x512/0x640 [ 857.814837][T15281] _copy_to_user+0x32/0xd0 [ 857.814860][T15281] simple_read_from_buffer+0xcb/0x170 [ 857.814880][T15281] proc_fail_nth_read+0x197/0x240 [ 857.814900][T15281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.814921][T15281] ? rw_verify_area+0xcf/0x6c0 [ 857.814945][T15281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.814964][T15281] vfs_read+0x1e4/0xcf0 [ 857.814984][T15281] ? __pfx___mutex_lock+0x10/0x10 [ 857.815003][T15281] ? __pfx_vfs_read+0x10/0x10 [ 857.815026][T15281] ? __fget_files+0x20e/0x3c0 [ 857.815051][T15281] ksys_read+0x12a/0x250 [ 857.815067][T15281] ? __pfx_ksys_read+0x10/0x10 [ 857.815090][T15281] do_syscall_64+0xcd/0x4c0 [ 857.815110][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.815127][T15281] RIP: 0033:0x7fe2cd78d5fc [ 857.815141][T15281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 857.815156][T15281] RSP: 002b:00007fe2ce653030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.815173][T15281] RAX: ffffffffffffffda RBX: 00007fe2cd9b5fa0 RCX: 00007fe2cd78d5fc [ 857.815184][T15281] RDX: 000000000000000f RSI: 00007fe2ce6530a0 RDI: 0000000000000004 [ 857.815195][T15281] RBP: 00007fe2ce653090 R08: 0000000000000000 R09: 0000000000000000 [ 857.815205][T15281] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 857.815215][T15281] R13: 00007fe2cd9b6038 R14: 00007fe2cd9b5fa0 R15: 00007ffee98b6ec8 [ 857.815238][T15281] [ 857.884751][T13162] usb usb7-port1: unable to enumerate USB device [ 858.015804][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 858.025404][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 858.037889][ T976] hub 5-1:0.0: 2 ports detected [ 859.263196][ T976] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 859.274668][ T976] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 859.293115][ T976] usbhid 5-1:0.0: can't add hid device: -32 [ 859.327125][ T5920] usb 8-1: USB disconnect, device number 23 [ 859.378415][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 859.436951][ T976] usb 5-1: USB disconnect, device number 99 [ 859.645486][T15295] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.050840][T15304] veth1_virt_wifi: entered promiscuous mode [ 860.057114][T15304] veth1_virt_wifi: entered allmulticast mode [ 860.207372][ T30] audit: type=1400 audit(1756350578.669:589): avc: denied { setopt } for pid=15310 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 860.444619][T13162] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 860.522420][T15321] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2339'. [ 860.545673][T15321] 0XD: renamed from macvtap0 (while UP) [ 860.738405][T13162] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.785635][T15321] 0XD: entered allmulticast mode [ 860.790904][T13417] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 861.517197][T13162] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.998044][T15321] veth0_macvtap: entered allmulticast mode [ 862.004376][T15321] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 862.034600][T13162] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 862.053266][T13162] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.125329][T13162] usb 8-1: config 0 descriptor?? [ 862.165395][T15321] hub 1-0:1.0: USB hub found [ 862.212835][T13417] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 862.244809][T15321] hub 1-0:1.0: 1 port detected [ 862.284619][T13417] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 862.334015][T13417] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 862.383283][T13417] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.392885][T13417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.431711][T15312] binder: 15309:15312 ioctl c0306201 200000000080 returned -14 [ 862.463853][T13162] usb 8-1: USB disconnect, device number 24 [ 862.528725][T13417] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.564655][ T976] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 862.723586][ T30] audit: type=1400 audit(1756350581.169:590): avc: denied { create } for pid=15335 comm="syz.1.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 862.754830][ T976] usb 7-1: device descriptor read/64, error -71 [ 862.824227][ T30] audit: type=1400 audit(1756350581.279:591): avc: denied { sys_admin } for pid=15335 comm="syz.1.2345" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 862.846323][T13417] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 862.944719][T13162] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 863.054692][ T976] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 863.151195][T13162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 863.164105][T13162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.175166][T13162] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 863.274762][ T976] usb 7-1: device descriptor read/64, error -71 [ 863.615150][T13162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.625046][T13162] usb 4-1: config 0 descriptor?? [ 863.631733][T13162] hub 4-1:0.0: USB hub found [ 863.692832][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2347'. [ 863.742221][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2347'. [ 863.756919][ T976] usb usb7-port1: attempt power cycle [ 863.854832][T13162] hub 4-1:0.0: 2 ports detected [ 863.941329][ T5934] usb 5-1: USB disconnect, device number 100 [ 864.905740][ T976] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 864.916808][T13162] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 864.923430][T13162] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 865.295047][T13162] usbhid 4-1:0.0: can't add hid device: -71 [ 865.303120][T13162] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 865.337898][ T976] usb 7-1: device descriptor read/8, error -71 [ 865.352924][T13162] usb 4-1: USB disconnect, device number 107 [ 866.854686][ T976] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 867.626393][ T976] usb 7-1: Using ep0 maxpacket: 16 [ 867.741591][ T976] usb 7-1: config 0 has no interfaces? [ 867.801040][T15397] netlink: 'syz.7.2358': attribute type 29 has an invalid length. [ 867.809092][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2358'. [ 868.104774][T13162] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 868.450577][T13162] usb 4-1: Using ep0 maxpacket: 16 [ 868.564969][T13162] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 868.609015][T13162] usb 4-1: config 0 has no interface number 0 [ 868.650596][T13162] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 868.691152][ T976] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.700764][ T976] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 868.709040][ T976] usb 7-1: Manufacturer: syz [ 868.716959][ T976] usb 7-1: config 0 descriptor?? [ 868.749387][T13162] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 868.814643][T13417] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 868.863416][ T5912] usb 7-1: USB disconnect, device number 49 [ 868.908823][T13162] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 868.970918][T13162] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 868.984115][T13417] usb 5-1: Using ep0 maxpacket: 16 [ 868.999537][T13162] usb 4-1: Product: syz [ 869.003738][T13162] usb 4-1: SerialNumber: syz [ 869.072424][T13162] usb 4-1: config 0 descriptor?? [ 869.093694][T13162] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 869.111131][T13417] usb 5-1: config 0 has no interfaces? [ 869.117777][T15404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2361'. [ 869.129604][T13162] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input74 [ 869.166166][T13417] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 869.185992][T13417] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 869.212056][T13417] usb 5-1: Manufacturer: syz [ 869.261910][T13417] usb 5-1: config 0 descriptor?? [ 869.567100][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 869.765989][T15418] vxcan1 speed is unknown, defaulting to 1000 [ 869.981598][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.988006][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.584675][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2366'. [ 870.628207][T15422] : renamed from lo (while UP) [ 870.801802][ T976] usb 4-1: USB disconnect, device number 108 [ 870.859203][ T976] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 871.774646][T13162] usb 5-1: USB disconnect, device number 101 [ 871.899558][T15429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.934270][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2368'. [ 872.114601][ T976] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 872.666401][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.681217][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. [ 872.699568][ T976] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 872.775687][ T976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.823997][ T976] usb 7-1: config 0 descriptor?? [ 873.574840][T12517] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 873.634088][ T976] nintendo 0003:057E:200E.0033: unbalanced delimiter at end of report description [ 873.736336][T12517] usb 8-1: Using ep0 maxpacket: 16 [ 873.881455][T12517] usb 8-1: config 0 has no interfaces? [ 873.893279][T12517] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.903536][ T976] nintendo 0003:057E:200E.0033: HID parse failed [ 873.910353][T12517] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.922095][T12517] usb 8-1: Manufacturer: syz [ 873.936921][ T976] nintendo 0003:057E:200E.0033: probe - fail = -22 [ 873.951716][T12517] usb 8-1: config 0 descriptor?? [ 873.972072][ T976] nintendo 0003:057E:200E.0033: probe with driver nintendo failed with error -22 [ 873.995417][T15462] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.029076][ T30] audit: type=1400 audit(1756350592.459:592): avc: denied { write } for pid=15459 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 874.750280][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 875.616041][ T5920] usb 7-1: USB disconnect, device number 50 [ 875.745588][T15473] trusted_key: syz.1.2378 sent an empty control message without MSG_MORE. [ 875.960429][T15482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2381'. [ 876.207703][T12517] usb 8-1: USB disconnect, device number 25 [ 876.254946][ T976] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 876.965198][ T976] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.137313][ T976] usb 7-1: config 0 has no interfaces? [ 877.201154][ T976] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 877.228289][T15496] FAULT_INJECTION: forcing a failure. [ 877.228289][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 877.259530][ T976] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 877.264704][T15496] CPU: 1 UID: 0 PID: 15496 Comm: syz.3.2386 Not tainted syzkaller #0 PREEMPT(full) [ 877.264728][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.264737][T15496] Call Trace: [ 877.264743][T15496] [ 877.264750][T15496] dump_stack_lvl+0x16c/0x1f0 [ 877.264773][T15496] should_fail_ex+0x512/0x640 [ 877.264791][T15496] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 877.264817][T15496] should_failslab+0xc2/0x120 [ 877.264836][T15496] __kmalloc_cache_noprof+0x6a/0x3e0 [ 877.264860][T15496] ? alloc_super+0x52/0xbd0 [ 877.264878][T15496] ? __pfx_test_meta_super+0x10/0x10 [ 877.264895][T15496] alloc_super+0x52/0xbd0 [ 877.264908][T15496] ? sget_fc+0xd3/0xc20 [ 877.264926][T15496] ? __pfx_test_meta_super+0x10/0x10 [ 877.264940][T15496] sget_fc+0x116/0xc20 [ 877.264957][T15496] ? __pfx_set_meta_super+0x10/0x10 [ 877.264975][T15496] gfs2_meta_get_tree+0x1db/0x450 [ 877.264991][T15496] ? __pfx_gfs2_meta_get_tree+0x10/0x10 [ 877.265010][T15496] ? bpf_lsm_capable+0x9/0x10 [ 877.265031][T15496] ? security_capable+0x7e/0x260 [ 877.265052][T15496] vfs_get_tree+0x8b/0x340 [ 877.265076][T15496] vfs_cmd_create+0xd7/0x2a0 [ 877.265099][T15496] __do_sys_fsconfig+0x7b8/0xbe0 [ 877.265122][T15496] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 877.265154][T15496] do_syscall_64+0xcd/0x4c0 [ 877.265175][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.265191][T15496] RIP: 0033:0x7fcbe878ebe9 [ 877.265205][T15496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.265221][T15496] RSP: 002b:00007fcbe95d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 877.265237][T15496] RAX: ffffffffffffffda RBX: 00007fcbe89b5fa0 RCX: 00007fcbe878ebe9 [ 877.265247][T15496] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 877.265257][T15496] RBP: 00007fcbe95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 877.265267][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.265277][T15496] R13: 00007fcbe89b6038 R14: 00007fcbe89b5fa0 R15: 00007ffdb14a1968 [ 877.265299][T15496] [ 877.265310][T15496] gfs2: gfs2 mount does not exist [ 877.493700][ T976] usb 7-1: Product: syz [ 877.503887][ T976] usb 7-1: Manufacturer: syz [ 877.514640][ T976] usb 7-1: SerialNumber: syz [ 877.532363][ T976] usb 7-1: config 0 descriptor?? [ 877.647789][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 877.779739][T15500] siw: device registration error -23 [ 877.829112][ T976] usb 7-1: USB disconnect, device number 51 [ 879.514655][ T5912] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 879.812739][ T5912] usb 8-1: Using ep0 maxpacket: 16 [ 880.404585][ T5912] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 880.418374][ T5912] usb 8-1: config 0 has no interface number 0 [ 880.425107][ T5912] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 880.435344][ T5912] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 880.454793][ T5912] usb 8-1: config 0 interface 41 has no altsetting 0 [ 880.463924][ T5912] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 880.473095][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.481190][ T5912] usb 8-1: Product: syz [ 880.486157][ T5912] usb 8-1: Manufacturer: syz [ 880.491835][ T5912] usb 8-1: SerialNumber: syz [ 880.503465][ T5912] usb 8-1: config 0 descriptor?? [ 880.510361][T15524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.544003][T15524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.644041][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 880.650378][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 880.662103][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 880.692759][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 880.705976][T12517] libceph: connect (1)[b::]:6789 error -101 [ 880.712027][T12517] libceph: mon0 (1)[b::]:6789 connect error [ 880.738455][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2400'. [ 880.910388][T15524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.922419][T15524] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 880.975143][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 880.983183][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 881.029525][T15570] PKCS7: Unknown OID: [5] (bad) [ 881.037255][ T30] audit: type=1400 audit(1756350599.489:593): avc: denied { write } for pid=15567 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 881.056555][T15570] PKCS7: Only support pkcs7_signedData type [ 881.065712][T15570] netlink: 'syz.4.2407': attribute type 2 has an invalid length. [ 881.073453][T15570] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2407'. [ 881.083559][T12517] libceph: connect (1)[b::]:6789 error -101 [ 881.096434][T12517] libceph: mon0 (1)[b::]:6789 connect error [ 881.496066][T15555] ceph: No mds server is up or the cluster is laggy [ 881.515567][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 881.522909][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 881.529163][T15549] ceph: No mds server is up or the cluster is laggy [ 881.545476][ T5912] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 881.617764][T13417] libceph: connect (1)[b::]:6789 error -101 [ 881.623823][T13417] libceph: mon0 (1)[b::]:6789 connect error [ 881.681363][T15574] syzkaller1: entered promiscuous mode [ 881.691553][T15574] syzkaller1: entered allmulticast mode [ 881.704417][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.762721][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.324697][T13417] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 882.436602][ T5912] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 882.454596][ T5912] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 882.476951][ T5912] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 882.503448][ T5912] usb 8-1: USB disconnect, device number 26 [ 882.514687][T13417] usb 4-1: Using ep0 maxpacket: 32 [ 882.544882][T13417] usb 4-1: unable to get BOS descriptor or descriptor too short [ 882.561771][T13417] usb 4-1: config index 0 descriptor too short (expected 53, got 34) [ 882.590603][T13417] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 882.621619][T13417] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 882.635328][T13417] usb 4-1: config 2 has no interface number 0 [ 882.641848][T13417] usb 4-1: config 2 interface 221 has no altsetting 0 [ 882.653128][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 882.654999][T13417] usb 4-1: string descriptor 0 read error: -22 [ 882.684141][T15587] FAULT_INJECTION: forcing a failure. [ 882.684141][T15587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 882.693772][T13417] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 882.726445][T13417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.727628][T15587] CPU: 1 UID: 0 PID: 15587 Comm: syz.4.2414 Not tainted syzkaller #0 PREEMPT(full) [ 882.727650][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 882.727659][T15587] Call Trace: [ 882.727665][T15587] [ 882.727672][T15587] dump_stack_lvl+0x16c/0x1f0 [ 882.727693][T15587] should_fail_ex+0x512/0x640 [ 882.727715][T15587] should_fail_alloc_page+0xe7/0x130 [ 882.727736][T15587] prepare_alloc_pages+0x3c2/0x610 [ 882.727756][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.727784][T15587] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 882.727803][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.727829][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.727855][T15587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 882.727874][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.727902][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.727928][T15587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 882.727949][T15587] ? policy_nodemask+0xea/0x4e0 [ 882.727970][T15587] alloc_pages_mpol+0x1fb/0x550 [ 882.727989][T15587] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 882.728006][T15587] ? is_bpf_text_address+0x8a/0x1a0 [ 882.728023][T15587] ? bpf_ksym_find+0x127/0x1c0 [ 882.728043][T15587] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 882.728068][T15587] folio_alloc_mpol_noprof+0x36/0x2f0 [ 882.728091][T15587] vma_alloc_folio_noprof+0xed/0x1e0 [ 882.728112][T15587] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 882.728134][T15587] ? rcu_read_unlock+0x2d/0xb0 [ 882.728154][T15587] do_wp_page+0x1136/0x4f00 [ 882.728181][T15587] ? __pfx_do_wp_page+0x10/0x10 [ 882.728204][T15587] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 882.728221][T15587] ? ___pte_offset_map+0x2ad/0x4f0 [ 882.728245][T15587] __handle_mm_fault+0x1b2d/0x2a50 [ 882.728272][T15587] ? mt_find+0x3ef/0xa30 [ 882.728293][T15587] ? __pfx___handle_mm_fault+0x10/0x10 [ 882.728314][T15587] ? __pfx_mt_find+0x10/0x10 [ 882.728346][T15587] ? find_vma+0xbf/0x140 [ 882.728363][T15587] ? __pfx_find_vma+0x10/0x10 [ 882.728383][T15587] handle_mm_fault+0x589/0xd10 [ 882.728407][T15587] ? __bpf_trace_exceptions+0x1/0x40 [ 882.728433][T15587] do_user_addr_fault+0x7a6/0x1370 [ 882.728457][T15587] ? rcu_is_watching+0x12/0xc0 [ 882.728479][T15587] exc_page_fault+0x5c/0xb0 [ 882.728496][T15587] asm_exc_page_fault+0x26/0x30 [ 882.728512][T15587] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 882.728530][T15587] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 69 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 882.728546][T15587] RSP: 0018:ffffc9000b8f79f8 EFLAGS: 00050293 [ 882.728560][T15587] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 00002000000051b0 [ 882.728571][T15587] RDX: ffff88807d824880 RSI: ffffffff89631353 RDI: 0000000000000005 [ 882.728581][T15587] RBP: ffffc9000b8f7d98 R08: 0000000000000005 R09: 0000000000000000 [ 882.728590][T15587] R10: 000000000000a000 R11: 0000000000000000 R12: 0000000000000000 [ 882.728600][T15587] R13: 0000200000005180 R14: ffffc9000b8f7ddc R15: 000000000000a000 [ 882.728617][T15587] ? ____sys_recvmsg+0x2e3/0x6b0 [ 882.728642][T15587] ____sys_recvmsg+0x2ee/0x6b0 [ 882.728667][T15587] ? __pfx_____sys_recvmsg+0x10/0x10 [ 882.728697][T15587] ? __lock_acquire+0x62e/0x1ce0 [ 882.728724][T15587] ___sys_recvmsg+0x114/0x1a0 [ 882.728742][T15587] ? __pfx____sys_recvmsg+0x10/0x10 [ 882.728761][T15587] ? find_held_lock+0x2b/0x80 [ 882.728795][T15587] do_recvmmsg+0x2fe/0x750 [ 882.728816][T15587] ? __pfx_do_recvmmsg+0x10/0x10 [ 882.728838][T15587] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 882.728862][T15587] ? __fget_files+0x20e/0x3c0 [ 882.728888][T15587] __x64_sys_recvmmsg+0x22a/0x280 [ 882.728906][T15587] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 882.728932][T15587] do_syscall_64+0xcd/0x4c0 [ 882.728951][T15587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.728967][T15587] RIP: 0033:0x7ff74bd8ebe9 [ 882.728979][T15587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.728994][T15587] RSP: 002b:00007ff74cc84038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 882.729008][T15587] RAX: ffffffffffffffda RBX: 00007ff74bfb5fa0 RCX: 00007ff74bd8ebe9 [ 882.729018][T15587] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000003 [ 882.729028][T15587] RBP: 00007ff74cc84090 R08: 0000000000000000 R09: 0000000000000000 [ 882.729037][T15587] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000001 [ 882.729047][T15587] R13: 00007ff74bfb6038 R14: 00007ff74bfb5fa0 R15: 00007ffe3b86ae28 [ 882.729069][T15587] [ 882.732185][T15590] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 882.873541][T15592] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2415'. [ 883.197173][T13417] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 883.204079][T13417] usb 4-1: No valid video chain found. [ 883.247682][T13417] usb 4-1: USB disconnect, device number 109 [ 883.275653][T15590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 883.291052][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2415'. [ 884.296064][T15619] net veth1_virt_wifi : renamed from virt_wifi0 [ 884.378705][T15620] netlink: 8920 bytes leftover after parsing attributes in process `syz.3.2423'. [ 884.525289][ T30] audit: type=1400 audit(1756350602.859:594): avc: denied { setopt } for pid=15616 comm="syz.3.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 884.555300][ T30] audit: type=1400 audit(1756350602.989:595): avc: denied { read } for pid=15616 comm="syz.3.2423" lport=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 884.903593][T15627] PKCS7: Unknown OID: [5] (bad) [ 884.908960][T15627] PKCS7: Only support pkcs7_signedData type [ 884.918672][T15627] netlink: 'syz.3.2424': attribute type 2 has an invalid length. [ 884.926727][T15627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2424'. [ 885.484778][ T5920] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 885.637874][ T5920] usb 8-1: Using ep0 maxpacket: 16 [ 885.669019][ T5920] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 885.713895][ T5920] usb 8-1: config 0 has no interface number 0 [ 885.740323][ T5920] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 885.787832][ T5920] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 885.809015][ T5920] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 885.823956][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 885.832618][ T5920] usb 8-1: Product: syz [ 885.837811][ T5920] usb 8-1: SerialNumber: syz [ 885.857537][ T5920] usb 8-1: config 0 descriptor?? [ 885.875736][ T5920] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 885.920771][ T5920] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input75 [ 886.054857][ T976] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 886.071478][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 886.209820][ T976] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 886.219902][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.236625][ T976] usb 5-1: Product: syz [ 886.241801][ T976] usb 5-1: Manufacturer: syz [ 886.247301][ T976] usb 5-1: SerialNumber: syz [ 886.259775][ T976] usb 5-1: config 0 descriptor?? [ 886.271351][ T976] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 886.285942][T12517] usb 8-1: USB disconnect, device number 27 [ 886.299042][T12517] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 886.454629][ T5920] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 886.616914][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 886.625655][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.637316][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.649054][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 886.660342][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 886.704033][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.752537][ T976] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 886.761885][ T976] sq905c 5-1:0.0: Reading version command failed [ 886.771953][ T976] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 886.784434][ T976] usb 5-1: USB disconnect, device number 102 [ 886.829576][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.865775][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.911213][ T5920] usb 4-1: Manufacturer: syz [ 886.925296][ T5920] usb 4-1: config 0 descriptor?? [ 886.961171][ T5856] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 887.207538][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2441'. [ 887.248566][ T5920] rc_core: IR keymap rc-hauppauge not found [ 887.265848][ T5920] Registered IR keymap rc-empty [ 887.275208][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.324252][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.372978][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 887.468864][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input76 [ 887.503322][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.534762][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.574645][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.604664][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.610536][ T976] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 887.646029][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.674735][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.709827][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.734642][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.744653][T13417] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 887.765251][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 887.774142][ T976] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.782793][ T976] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 887.795172][ T976] usb 5-1: config 4 has no interface number 0 [ 887.796810][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.809849][ T976] usb 5-1: config 4 interface 30 has no altsetting 0 [ 887.827514][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.839544][ T976] usb 5-1: string descriptor 0 read error: -22 [ 887.846206][ T976] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 887.855657][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.875079][ T976] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 887.887240][ T5920] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 887.894651][ T976] dw2102: su3000_power_ctrl: 1, initialized 0 [ 887.902355][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 887.905722][ T5920] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 887.917314][T13417] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 887.926593][T13417] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.937158][ T5920] usb 4-1: USB disconnect, device number 110 [ 887.971871][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 888.085837][T15677] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 888.097926][T15677] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 888.106316][T15677] CPU: 0 UID: 0 PID: 15677 Comm: syz.4.2443 Not tainted syzkaller #0 PREEMPT(full) [ 888.115663][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.125709][T15677] RIP: 0010:su3000_i2c_transfer+0x610/0xf30 [ 888.131600][T15677] Code: e4 bf f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 1a 08 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 eb 07 00 00 48 8b 44 24 10 [ 888.151202][T15677] RSP: 0018:ffffc9000bb1fc40 EFLAGS: 00010246 [ 888.157291][T15677] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000cd41000 [ 888.165248][T15677] RDX: 0000000000000000 RSI: ffffffff87fba7d9 RDI: ffff888079219268 [ 888.173204][T15677] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000001a00 [ 888.181171][T15677] R10: 0000000000001900 R11: 0000000000000000 R12: ffff888078614d00 [ 888.189127][T15677] R13: 0000000000001900 R14: 0000000000000001 R15: dffffc0000000000 [ 888.197097][T15677] FS: 00007ff74cc846c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 888.206029][T15677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.212595][T15677] CR2: 000000110c34d860 CR3: 0000000026231000 CR4: 00000000003526f0 [ 888.220544][T15677] Call Trace: [ 888.223797][T15677] [ 888.226711][T15677] __i2c_transfer+0x6b6/0x2190 [ 888.231473][T15677] ? lockdep_hardirqs_on+0x7c/0x110 [ 888.236655][T15677] ? __pfx___i2c_transfer+0x10/0x10 [ 888.241831][T15677] ? rt_mutex_slowtrylock+0xc9/0x100 [ 888.247106][T15677] i2c_transfer+0x1da/0x380 [ 888.251627][T15677] i2cdev_ioctl_rdwr+0x373/0x710 [ 888.256588][T15677] i2cdev_ioctl+0x5ff/0x820 [ 888.261108][T15677] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 888.266157][T15677] ? selinux_file_ioctl+0x180/0x270 [ 888.271382][T15677] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 888.277475][T15677] __x64_sys_ioctl+0x18b/0x210 [ 888.282271][T15677] do_syscall_64+0xcd/0x4c0 [ 888.286787][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.292683][T15677] RIP: 0033:0x7ff74bd8ebe9 [ 888.297102][T15677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.316886][T15677] RSP: 002b:00007ff74cc84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.325304][T15677] RAX: ffffffffffffffda RBX: 00007ff74bfb5fa0 RCX: 00007ff74bd8ebe9 [ 888.333275][T15677] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 888.341248][T15677] RBP: 00007ff74be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 888.349310][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.357275][T15677] R13: 00007ff74bfb6038 R14: 00007ff74bfb5fa0 R15: 00007ffe3b86ae28 [ 888.365232][T15677] [ 888.368244][T15677] Modules linked in: [ 888.372938][T15677] ---[ end trace 0000000000000000 ]--- [ 888.378958][T13417] usb 8-1: config 0 has no interface number 0 [ 888.385701][T13417] usb 8-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 888.399827][ T976] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 888.407365][ T30] audit: type=1400 audit(1756350606.839:596): avc: denied { read } for pid=5205 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 888.433195][ T976] usb 5-1: media controller created [ 888.452295][T13417] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 888.612757][T13417] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.622070][T15677] RIP: 0010:su3000_i2c_transfer+0x610/0xf30 [ 888.625463][ T30] audit: type=1400 audit(1756350606.839:597): avc: denied { search } for pid=5205 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.653695][T15677] Code: e4 bf f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 1a 08 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 eb 07 00 00 48 8b 44 24 10 [ 888.684618][T13417] usb 8-1: Product: syz [ 888.688902][T13417] usb 8-1: Manufacturer: syz [ 888.693731][T13417] usb 8-1: SerialNumber: syz [ 888.698661][T15677] RSP: 0018:ffffc9000bb1fc40 EFLAGS: 00010246 [ 888.709700][T13417] usb 8-1: config 0 descriptor?? [ 888.717225][T13417] cyberjack 8-1:0.69: required endpoints missing [ 888.723650][T15677] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc9000cd41000 [ 888.742978][ T30] audit: type=1400 audit(1756350606.839:598): avc: denied { search } for pid=5205 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.768722][ T30] audit: type=1400 audit(1756350606.839:599): avc: denied { add_name } for pid=5205 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.769737][T15677] RDX: 0000000000000000 RSI: ffffffff87fba7d9 RDI: ffff888079219268 [ 888.791194][ T30] audit: type=1400 audit(1756350606.839:600): avc: denied { create } for pid=5205 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 888.819871][T15677] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000001a00 [ 888.828539][T15677] R10: 0000000000001900 R11: 0000000000000000 R12: ffff888078614d00 [ 888.837789][T15677] R13: 0000000000001900 R14: 0000000000000001 R15: dffffc0000000000 [ 888.847755][T15677] FS: 00007ff74cc846c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 888.857267][ T30] audit: type=1400 audit(1756350606.839:601): avc: denied { append open } for pid=5205 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 888.880967][T15677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.888716][T15677] CR2: 000020000039b030 CR3: 0000000026231000 CR4: 00000000003526f0 [ 888.897272][T15677] Kernel panic - not syncing: Fatal exception [ 888.903599][T15677] Kernel Offset: disabled [ 888.907905][T15677] Rebooting in 86400 seconds..