last executing test programs: 2m42.890071335s ago: executing program 3 (id=611): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x20482, 0x0) r1 = dup(r0) write$cgroup_freezer_state(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r6, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x804, 0xfffffffe, 0x100000, 0x8, 0x1}) r8 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x20, 0x80, 0x2, 0x7, {{0x33, 0x4, 0x1, 0x32, 0xcc, 0x64, 0x0, 0x7, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp_prespec={0x44, 0x34, 0x7d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@empty}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x80000001}, {@rand_addr=0x64010101, 0x7f}, {@empty, 0x5}]}, @timestamp={0x44, 0x10, 0x53, 0x0, 0x3, [0x8, 0x100, 0x2]}, @timestamp={0x44, 0x8, 0x5c, 0x0, 0x7, [0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x1, [{@loopback}, {@broadcast, 0x8}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb7ac}]}, @ssrr={0x89, 0x17, 0x48, [@remote, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}]}}}}}) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="b812d269678d5f9d134e138989abfc5a27c02073d94135e525a1adf550aa544820cfb03b0f634747c28ff92451d4", 0x2e}, {&(0x7f00000002c0)="92a8e72d081932e47afb7fef6cc908e956f03a9815f9b90e33d2567df08425052fe0a76583f4234a0bdd7346b9aaef3d8e7ec2dc67f6d8d6c17aa76e68b00626e949", 0x42}, {&(0x7f0000000340)="61ee3ce93c1558011d1b451180276b76ccc542005906adb08ae47eb7d4dddc2fb20db602c2ec0f7ef0563b045afab8d3d805a79d9aa7b91526d7d731c5afc1d1", 0x40}, {&(0x7f0000000380)="821b13e93e3c0ffc5d5a2b792547ed9863f99b935453ced6", 0x18}, {&(0x7f00000003c0)="c74fea2661fbcc72fa3e1da71f4463ba3f9890eace2545e69d431f9547e7e277261e479c99b765f65bb623c2baa918f1fbd947541162702f05fe46b79c698fa573d5f8a0ff07218c96b0483c86b899ae395cab5a462dfd34b9bb437d642ce08b730f2c4d51d3abac06d1b851a086206d2dc2c6a58bb15266c8", 0x79}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="100000000000000001000000040000000d0000000000000001000000170000001000000000000000020000009c0f0000100000000000000001000000120b0000180000000000000008000000", @ANYRES32=r9], 0xb0}, 0x4091) ioctl$TCFLSH(r5, 0x400455c8, 0x4) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='keyring\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r10, 0x7}}, 0x10) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0xf0, 0x0, 0x7a, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xdf, 0xcb, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7f, 0x0, 0x94, "b8"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0xf4, 0x1e, "4d3724429c6c"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8b, 0x3, 0x7, 0xf}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0xe, 0xe0}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9f, 0xc, 0xae, {0x7, 0x25, 0x1, 0xc, 0x2}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0xc, 0x1, 0x8, 0x6}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x10, 0x2, 0xb, 0x3, 0x7, 0x9}]}, 0x5, [{0x7f, &(0x7f00000002c0)=@string={0x7f, 0x3, "537d237ac9454ba40d09d02fa77215e83835950d81eb99d4054dded001fb78829a7b910295e2eb601b2a94e5548ec335a1a37ad1c21d16c3d4f97c1efd16ebaca2a6943fe9267190387105e02eacd7948d7cf4aa44762b17497444c014ebf24d4f9741a8898574ff12f68d89acd6c0ba184932294c68de20c5ea1dd6b1"}}, {0x11, &(0x7f0000000340)=@string={0x11, 0x3, "69a941995b717e07f91d6949f47008"}}, {0x28, &(0x7f0000000380)=@string={0x28, 0x3, "9d13f6cd246d9e594dbc7bc9e34a2cff4d6f37bbdb56895ee2a5299001ba2cdb3e6a1ba231e5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x655268d583612b22}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41c}}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc800) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 2m37.19460148s ago: executing program 3 (id=622): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x208480, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x801) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0xc7}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000e8a000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x3, 0x3, 0xac, &(0x7f0000000080)=""/172}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x310, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x1ec, 0x1, [@m_nat={0x1e8, 0xa, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x40, 0x2, 0x7fff, 0x6}, @private=0xa010102, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x200, 0x10000003, 0xd, 0x400}, @rand_addr=0x64010102, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x6, 0x3, 0x8}, @local, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x40, 0xffffffffffffffff, 0x2, 0x3}, @local, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x4, 0x9, 0x1c009ef8}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe523, 0x80000000, 0x5, 0x0, 0x5}, @broadcast, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xac32, 0x2, 0xffffffffffffffff, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x1}}]}, {0xa6, 0x6, "2f1465afc1b600ee49a42df4cf60d9266be044c55272ab5d9255b07c610953b704b3d545308262356d1871f91277e5fc4ce65c41e75651db9d29cecceece71ee0c0edede2f56758cd17c4674234d629725b3d390faf687d460182113509dc5c5952c6d177c0ee51045d50eca794e2dd4d108244162241017b0b712aea58eae5ae68b403fe914f9570721ec7b4a730f1da571e2748df5528c9bfa3a94a115b0a0b19f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x110, 0x1, [@m_ct={0x10c, 0x9, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e0f6373c541ea40966df858f54d3f27a"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x38, 0x20000000, 0x6, 0x3}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4fb185e886aff8e11b130a0674b0aef2"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x7e, 0x6, "e33c4a40fd135f84fc41bb644eed6fd2d292397d478ab9a5db9c74539e74c426d3715b685aa6fe66ca64a87a8988b73dfda79033df30abb6c7e08bae3e2418b190fcc8a9cb0d89397f7013e3cc1bdbfeeca0e9f6745fea70e091626e1d21ecd4beca4758781e8d1f4648b5b8dcb978e2c7d93786534af6f8451e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/18, 0x12}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}, 0x5fe}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) 2m36.199172584s ago: executing program 3 (id=624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x900) bind$can_j1939(r0, 0x0, 0x0) r3 = epoll_create(0x9) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x0, {0x1, 0xff, 0x2}, {0x0, 0x1, 0x2}, 0x1, 0xfd}, {0x0, 0x0, {0x1, 0xff}, {0x1, 0x1, 0x2}, 0xff, 0x2}], 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp\x00') socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 2m34.488805021s ago: executing program 3 (id=630): read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffff8}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) getsockname$unix(r1, &(0x7f0000000180), &(0x7f0000000240)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4080) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003780), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000037c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7fffffffffffffff}}, 0x30) 2m33.363354448s ago: executing program 3 (id=633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 \\x00000000ffffffff0000000000000000120000000000', 0x4f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000004, 0x0, 0x1, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r4, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdc00, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4b6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40150) syz_usb_connect(0x0, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e01"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, 0x0}, {0x0, 0x0}, {0x1a, 0x0}, {0x26, &(0x7f00000002c0)=@string={0x26, 0x3, "dc0de181412eea052c952f4c5e1b7fb0366a0045163631131a04899f3b3195d16403d64f"}}]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="100a06000408010014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x770, [{0x1, 0x4}]}]}}, 0x0, 0x32, 0x0, 0x1, 0x8}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f0000001dc0)=""/4096, 0x1000) 2m29.741071906s ago: executing program 3 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x18010}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mmap(&(0x7f00006a5000/0x3000)=nil, 0x3000, 0x9, 0x8031, 0xffffffffffffffff, 0xf4960000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r10, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) 2m14.661187794s ago: executing program 32 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x18010}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mmap(&(0x7f00006a5000/0x3000)=nil, 0x3000, 0x9, 0x8031, 0xffffffffffffffff, 0xf4960000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) write(r9, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r10, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffa}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) 2m2.273603497s ago: executing program 2 (id=720): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f28, 0xffffffff, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d30, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000700)="53e252699071597245074d668de4812e4d77e865bb8908e6ce220d3584792b43f8e0ff7d1fdf6fc27910835cd674986e5a7b0a5edbe076a5eb55bcdc0c09cc9705a2f1b480b7aa2fd6220cfd4b51adf9529680dd0682acbb74e3ace794e40e2cee9a764300ede3d1c901094467054e0d7f0a3c4b51bdf695f56f1553f37389d7d27ec1d17cae49ee974bd310d9e3e1c78d054bab74ba37a85c61e8527f58a95a523917c81bc2fb0c8e394abb29e504fa4d0203065c680e9a8d2701ebe684bd5331bea5b60272363bae4e50f1d6dcdf5c4e68b6884dd56fda1a54ad47a6", 0x0, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0x70}], 0x2}, 0x101d0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x33565348, 0x2, 0x7, 0x5, 0x9, 0x1, 0x0, 0x6, 0x0, 0x4}}) 1m58.808018812s ago: executing program 2 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370400000000000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffbff8, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pimreg0\x00'}) write$FUSE_INIT(r6, &(0x7f0000002340)={0x54, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xe}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r8, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="9fcf"], 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$UHID_INPUT(r10, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 1m56.333529888s ago: executing program 2 (id=727): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f28, 0xffffffff, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d30, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000700)="53e252699071597245074d668de4812e4d77e865bb8908e6ce220d3584792b43f8e0ff7d1fdf6fc27910835cd674986e5a7b0a5edbe076a5eb55bcdc0c09cc9705a2f1b480b7aa2fd6220cfd4b51adf9529680dd0682acbb74e3ace794e40e2cee9a764300ede3d1c901094467054e0d7f0a3c4b51bdf695f56f1553f37389d7d27ec1d17cae49ee974bd310d9e3e1c78d054bab74ba37a85c61e8527f58a95a523917c81bc2fb0c8e394abb29e504fa4d0203065c680e9a8d2701ebe684bd5331bea5b60272363bae4e50f1d6dcdf5c4e68b6884dd56fda1a54ad47a6", &(0x7f0000000800)=@tcp=r1, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0x70}], 0x2}, 0x101d0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x33565348, 0x2, 0x7, 0x5, 0x9, 0x1, 0x0, 0x6, 0x0, 0x4}}) 1m55.736932962s ago: executing program 2 (id=731): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000700000068d57ea0b2825979f7c099669a32967f00e9002a080200", @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000000300"/24], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x9, 0x8, 0x2f, 0x81, 0x1000f1, 0x5, 0xb39, 0x2, 0x0, 0x7, 0x5, 0x9, 0x1, 0x10000, 0x2, 0x7ffffffd, 0x1ef, 0x200009ea, 0x2000000d, 0x4, 0x8, 0x400c, 0x746f, 0x8, 0x0, 0x63, 0xee, 0x0, 0x7ff9]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 1m52.352296141s ago: executing program 2 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d01, &(0x7f0000000a00)) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000100)={{0xbb3, 0x4fb3b83}, {0x101, 0x468}, 0x1, 0x1}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000104000000000001000000000000", @ANYRES32=r3, @ANYBLOB="000100006c3000003b0012800b000100697036746e6c00001c00028006000f000300000005000600010000000800140004000000"], 0x4c}}, 0xeb64d656001f6f32) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x880012, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='10000', 0x5) 1m50.59133909s ago: executing program 2 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106800000000000000007"], 0x18}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0xe8f2, 0x16, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 1m35.424981406s ago: executing program 33 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106800000000000000007"], 0x18}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0xe8f2, 0x16, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 12.151811137s ago: executing program 4 (id=1061): socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xa000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 8.486421511s ago: executing program 4 (id=1071): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x5d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x5, 0xb0, 0x2c, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "ba6e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x30, 0x8, 0x38}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x5, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x68, 0x6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xab, 0x4, 0x9, 0x40, 0x2d}, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="090f0c00010710020a82f934a89b127a0300"], 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4f, &(0x7f0000000180)=@string={0x4f, 0x3, "e56767b23bf455696ba3b0d0ec1ca115d043d49e837fc64c0524858433b102fd666806ddd6c2fdbef9d3a6faeb6a5a63732b92933a0c49d59096a156717ec54a18ea8169bf77122fca48315906"}}, {0xcb, &(0x7f0000000200)=@string={0xcb, 0x3, "0a4161657b20545061e590cae753df4e353902a7e05e0113685bb1abd8d960afd7bf23ec130cd73d74410e33a4596655db6c03a819c6feb9a1fe025895f5fff477bb927a6946efca9b89d74b0b7f95d0c6d280099e03f3e0f282995ae8f443be833cd0266d9c8cf3df1fdbe5958b0e1c3b0e35330932d26e303d329c37f317db65334e050490a30417779879a7c518905c7997b448841e4b95914b31b7cc581a38f748ad99791f6ae16b9c34a82202ace449c084884a346f67b610b6f38089b6d77ad0818372816ade"}}]}) 6.164627755s ago: executing program 5 (id=1079): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ptrace$peeksig(0x4209, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x301, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x1, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x81, 0xfffffffc, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 6.033610813s ago: executing program 1 (id=1080): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000240)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000700000068d57ea0b2825979f7c099669a32967f00e9002a080200", @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000000300"/24], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x9, 0x8, 0x2f, 0x81, 0x1000f1, 0x5, 0xb39, 0x2, 0x0, 0x7, 0x5, 0x9, 0x1, 0x10000, 0x2, 0x7ffffffd, 0x1ef, 0x200009ea, 0x2000000d, 0x4, 0x8, 0x400c, 0x746f, 0x8, 0x0, 0x63, 0xee, 0x0, 0x7ff9]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 4.982929863s ago: executing program 0 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0) 4.982345738s ago: executing program 4 (id=1082): socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xa000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 4.321526153s ago: executing program 0 (id=1083): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ptrace$peeksig(0x4209, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) brk(0x200000ffc000) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x301, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x1, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x81, 0xfffffffc, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 4.307072098s ago: executing program 1 (id=1084): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0xe8f2, 0x16, 0x0, 0x0) 3.790005479s ago: executing program 1 (id=1085): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000001e00), 0x0, 0x40002040, 0x0) 3.684176154s ago: executing program 1 (id=1086): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000005c0)) 3.652689826s ago: executing program 5 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x3, 0x4, 0x80a0000, 0x1000, &(0x7f0000a5c000/0x1000)=nil, 0x1000, r2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) (async) shmget$private(0x0, 0x2000, 0x800, &(0x7f000080e000/0x2000)=nil) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r6 = dup2(r5, r4) lseek(r6, 0x8, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.501353016s ago: executing program 5 (id=1088): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x14000000, 0x5, 0x5, 0x8, 0x378, 0x7fffffff, 0x1b}, 0x9c) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x400}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) 3.499817965s ago: executing program 5 (id=1089): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xd, &(0x7f00000009c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x2e00, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f00000000c0)={0xc000003, 0x0, 0x0, 0x1, 0x20000001}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000440)='./file0\x00', 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x144}}, 0x20004000) write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="85a0d5dbc845a99fc0c5bae197c426a3d7f3112a3e50f2cb4cadf9c2bfc7be9ef21756d146081716fbcac50a05221989ef84de2678df2f908da33bccf7ccc86a5fa44041648330b33603b6c30860f001886b9144881942ff46eb17998d88d8e6a183373f9989b03e4d2cc8ba5accf495ae7da3afbe95889f73d71f083fcef55e9b6d13e515259567d6150e258f8cb6ecdc025c30552f3cee7b414ea35f003e8e27f343c503e871f7f6bb2d293cc07ce890a3838347c01b0f2e8212703abb55db3ff4a55dbf06d43050be6bc3b9049c15f472233bdcde", @ANYRES64, @ANYRES32=0x0], 0x78) close(r8) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./mnt\x00', 0x1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/158, 0x9e}], 0x2, &(0x7f00000002c0)=""/165, 0xa5}, 0x40012000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 3.456054959s ago: executing program 1 (id=1090): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x21, 0x20}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x19}, r2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETS(0xffffffffffffffff, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r4, 0xc0606610, &(0x7f0000000040)=0x60) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(r3, 0x0, &(0x7f0000000540)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000}, 0x28) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x1f, 0xff, 0x0, @empty, "f487e640"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.373403078s ago: executing program 0 (id=1091): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f28, 0xffffffff, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d30, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000700)="53e252699071597245074d668de4812e4d77e865bb8908e6ce220d3584792b43f8e0ff7d1fdf6fc27910835cd674986e5a7b0a5edbe076a5eb55bcdc0c09cc9705a2f1b480b7aa2fd6220cfd4b51adf9529680dd0682acbb74e3ace794e40e2cee9a764300ede3d1c901094467054e0d7f0a3c4b51bdf695f56f1553f37389d7d27ec1d17cae49ee974bd310d9e3e1c78d054bab74ba37a85c61e8527f58a95a523917c81bc2fb0c8e394abb29e504fa4d0203065c680e9a8d2701ebe684bd5331bea5b60272363bae4e50f1d6dcdf5c4e68b6884dd56fda1a54ad47a6", 0x0, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {0x0}], 0x2}, 0x101d0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x33565348, 0x2, 0x7, 0x5, 0x9, 0x1, 0x0, 0x6, 0x0, 0x4}}) 2.681393971s ago: executing program 1 (id=1093): r0 = creat(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x480c4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x20010, r1, 0xc4934000) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) syz_usb_connect(0x1, 0x63, &(0x7f0000000080)=ANY=[], 0x0) ioctl(0xffffffffffffffff, 0x40104d05, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2", 0xad) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"1774d10ed679a3761698425e02229859f202c5d54bb9aaa84c470671ed39e31fcd1987c3fab368535c1d72f471356277d68201ce587582e0b61c74107f26d9b357fed4393b6676c62cb12bb5104bc87b40120258613657f462d98097b32565f3c6a065c0ecf81581c270d0adccfdd40199844781374e1cee0129091296af79ff67a1f52be0c73043a7bb6860312b9b2d3514d05233defb9e2e9ae218a0731aa015e7f042114d434f4209218e37f80b240526d575cb63f1ca89512cd50e27c21a827328cbae0874b155506fd933a2e59978eaad1c78dbed757e9e0047f5ebd5e9faefad831e5c55100f289794dc5b2116838edc1caef786cead375259a7768ddfd6cf5ed870b7abdcef90350a64c1eb5d6e54de748d6349f7e5bcb0377df4744678e7700911426a8b8540996d54716ecd8cd3a9f8175f23d45f9a1497654d5f2e4dad96b4b34cce3a39eb084bb829e05c82249951f91b432999c302bbe8ae5f79bb8954ed23ad98f87b5c30d079b1b2186db53a3849f9dce0e4d49c04f3025d4b25bc0728ab25ea5d050dc2586bad7ac437d7a5881c06e8b9f3eae66dc2aa48d0edf763daa7c6aa90df3c61fd69cf301090790b608324f4cfcc23acdcbbf9bd7e224c5c33d817cddcd10e86cbbda0de36f52d2389fa84dad6ed1819ee056b9a80d0b81f2a6b4ac50192f87cabf46f5fc88abcfbeb4301632d353aaf091b7828d941cb1c0e1477e5761032a63dadc3c7f51de8429c63b4ad65e975e38f244c6fe40e8fc6c33c4a16deffbe1b0423e584f45023e196d92b5bbc7d1854c3f33e8b0b7c5d3d87f0119380e2d14d6630219dc0e31469c2af0db2d624cab5c276c396f7d1543370ca9d925ac2dc2204de8008517c815e9fa7cd56e53f82ce1d095cd08032f57835ecb14c39fd57c90e39557934cd278a609e2e05a07a791d417f4460d2c30c10e1ef92cc146b1f9ff6b98b2688e2f050c510feba0d6960d31522cec3f6b0f539f85898a6b6409dd179d990fb57026acd9382f505ce06db211d7a369f46d8ea5804502bc7829155794b19a098d095a00b520966e9f49c74111d1f0f0f75b07aff0d388650a63656c9e601269d2eff1740e87206416ec73c08b56570dd496846b4f1a5d76602b6594e173209e5e7cebbab3f9f29bf957d000510eff9ce7ee3fea7fff32f3b6ae414ac311e14550e9a597aec7e76df40b7352bf4ddbd00739041edda795aeaa2665ad51a836120054bb0c8c1d3149477167214a0f952c78039ec8a70e21158db26d8f0238f782a5d54dced90951085abd412ef2e5b9984c7e263dc3eac6c683e8b82c5d56b5fa1e2f65d5d0afd32bc66d76ddb87a41805e11137de7373a9f6366a9a314cc6d5e731abeb2e83f135798a8bdda1c47b36db21140a9278b86c520bdbc8338ccaf5fbd61d7e73750b38e4bb6c77c33bf5617086c8f97ab219b4f6c930fd717aed4f1fa0eebcda82322c561dcae23284e0bfa4bf7a5b4b19ff3fe3137c4e07c55543a7d3778ccfaf757fae541bcf475382cc8ab6a0ede61789652b528efaacfa804fc1583bdfeaea00565c70a5941dc7a947ed97d9b6688f6363edf0735e72d9b8a4b21e5cd2de518e27bfd41749eafa66f3452e941273050ceaf39435327737857d4718a31b83649b3dced6f37a9ce3621a83a7ba9163dea12990677d21781f4ff95a68dc4b268b4c5e428c0941443c98025773362acd28a88f8d7e42fa72b908ac6a816270d78541c98e36b838b83ba99656192624211a343e6e76e154ebdb1af56aa8489f6a30a6be0dcd84f80ab2d02ac7bee22e5f6207d74c4fda0c6d7cc71bea537718bf8bb1d3c2602903139449b046d09528b4331bd8e396bb9b5c0b15db16a72947eecd0f050de9ee9e6b82fcf48a7fbecf911fda3d013fa9941a60f41b9d1f56ac40f07e7259c7c79f17cb0a90c472d33aed227151fc93c76e7a1fee4675edae1a9fda95a5d2b42c7b13d84995ee1b6411c48329f529752d65601c034cdb13ea4051132ecb7f71953b43663053fc2a174b1a7694d6a8b3eb9facbaf8b7281e00357ee255816a489ca91656dc506deaa9c925a0e53600a9e7df5bc89db907a323ffeba03d3c06a4f0569a6c0cd02ca46eede0b9979aa5b40fa85b47b3d4f4aaf614b5b72ab9ea4289d08346759fbc4c0c25dd179d0efc994f4ace7612720dbd1b40395c95c43e24bdb5941295ccfdfb8b558b3234a80a2cfb5a50d96a31e2f1bcc4aba66994626f735d5fd742f0fc2ab2bcc0a73a6210e9b2222a3577f7cba7fd31459c58bef86eb76dd00fc165a16519d05f5aa5753b89c5391a051b2930b22eadbd1f4fc76fc675faf35bde9306ef48fa349f1978b84e033340681bf06966a833c03902d749444574b9e3e88e027b01d057db785a1e0d6b4135c3b6f2ac370a01351bcdf0474d4708675502e64e02d468c4e1454271dda60f82cefb8f6ec9bd871bb4c7a50a17f3d1d9c1bce2e79cb59704f78a31d13cd6678e20ea53e8d0bff1527bf76670982fab8cbe62377baf3c59f256e0bb21686402efd240cf07989832b02975e09b06da9486667869e543e7e868e1eb2242811f306f9cbeff4e606c62dbccfcc3dec265b396fa70c04b0816dddedfe5d70b44c35e387accad9945c91ced6665482f95e1bcd4fb603eb5add65c934d74a40dd37a24ea972babb9197dd85b102e67d5658dd8cd64b661fac6dae2e1d8f7325e2a62d1060836f53a2f3737c843a42662a7ed6eb63c5ca670273539529a760417f3d95fd4adfe86ae582742c1d54dd121e5ac820d3f547a647f72f723a66dc9830fbcc228559c77d3fd1d7443598717f69d58b9e7cc64e9aad2da810b45aaf01b377d54eddc0e97f6d1dc07aa33c30aa2667719cebf73e67d001bd967e6529f195b38dc6684758b557ce4ba3b47d84a03be117b58cc22adbab162bed3965f768982e5355d241f7f0c0943d389a61ef2c633d8b99c7b6deba3bc4e4c1b7366a178ed6bc1fb49ce646b411ccb940998d01a941546a5ad1988faa66ba6338a7562e17ee0af33e76d6dfcd0ed0fb92911b2c9cb880f367f6429a7446f090b90b83893d1c0ddb138959853b68a85894a6d5aa1d287c2a949f9331fedecf7de02a5b51014c917a42e33274e6d597bd6ab586f73ce61a96f9512a0ebc729869c664a895be61ec7882869852c922d3016726edc90f909af1d07e8a3671bf751135cd24066fad1992103bdcd5052059abb0e1df33560ab3637d66b1013f8a234e3238de1170da7addd84b21f1e870151f534d799ed6164a031686bc48d2ae5a89c81894a28a9cd944a535b907777397e739a3b6a8e7d54bef71907071bc2a047ca14d7ef2e9d9b66da86ce56bc62ada0c813d9d63aa899f77f5d804a13a79b0e2275c4ba387e970519e67d212193d91bd0a96a1068bc136616ab5153b1e4b956f1a44b5334e8fbf8abf57fb28a13a64ad6085497faf88556d721f8e0a0699469646f22789e6530c03c75f69279e809d95d444bd44af1d19d12046de9d524caedc84a506642edf34b409b41ccb9689f8597cacd20eee8beec2b3e89644c06750e080da5cc06f3cb10b854fc23d39e52bf95b88335e7536888d67ea92df5868c5835321234e70ebf80e4365c19693a3a640a30f5aec7c490b4ed32ff169e907e25f862fe5aa8a9238cf5cee03ec2ab9e2801239980e78162b560ae3d066351f944c31d8b57a20cd2419b05b0fdd9f8ca4b7a8e1e7955a6b66a264d6d4c56d83c15871ab3f3327284ff7cf5e8d6c7f762d755fac0c7784af9efd13c9337d38451acb23020f4934ef1708b362b5d5cf4b743fc0f9712860ca2977319e1226ed860c2be3caacc8465ba80a0a6856322bc352972fd3f3c0db3acd66d56fef139e48f3d63d3a62c532aa10485807269bac3348316d9fd1931cbfd2acaa5c4e9102872ab16500260f2aec57025c0d6dc1bd68bff597667469e8eb57459b1881c10bf9531c23a6d9349b06b0db60aa6f89a4e0162038ea1850348b72e16f7d647e092c1d7ca55ba5095e58b18dd56b72ba9cbc09598663e8f54b2594194de72475abafdb285d464007ab91a83b91e7c8d5968ecb452e011c0b74e4309180615c3f67c2cad6e086f3686fd5394efd86d8bd45829314a5eb4a0549613b668e7b97600ac9ffe59df44e87046de44432dcd0aaf0c02c446ee9aaf72e80ce989923d4720fd3b8257d3fec5af22737c1e426f9d851c7929d69713e4751d5d39de20f0990bbdcb579f36b778bba4b8c5bdeb78208412005fe7cee40fe86691b8b0d6d3234e74192528622c31022cc3a81f4a574efdb67348b36ae7fd5977059d911da17746b040f06e7bef06accf4ef1ea4f4402041a98f3760d0fb8851b4e7d1124f37b1c653cc9ac53f4e373f694f8c957c390b0801859a19776a83854d2b65766bb03321fdac9a23d3345821fc21195910245e5ad79926a08094b54e242f002634b7213e5c122e76514f9ce76ce2740741f7ffe30e036de63b737fb16b240c6eeef0c1c537d219449b95d497723088548267c229fd5a122f25f2c6ad2fc3ff28133305ca850c5e2d1453dbb4429a8ee3a8f173feb49b611764c536c668c9aca8b8ec575c2310044898a4657fa1dda2ec6f7b8906d9521525ffd30c2b5948a0250224ba4d6beb39008c3785ddad71ceedb34301706b71634bf74b33ea4c436c2006cc5275d7931855d376c6314f8a5431781c3347bd9b3edadb8fcb959a6bb48e9407de69458fcc61c3a62e32720d3fd838dad3f50e852a2aa6d26af70205f9d8e40d3b9232c2ea9a4f86857fec4f7772e43d6dabd1e34400a84d1d338941bc31ead12047bde3ccdd89c53fcbfeff9fba85be6c11447c4b088eb184186a5e41e17bc0011c008aa8b98b44c1c862f8f977d1998d8dce81688d3d80d0fa2b9b7e7f78f80361f525a7586f3d9e68456b55d6f0e8c99495da3a5f392fc8bfe4e42af04fe85936c99b7be80acd351bffa7b723717621d9ff37b5ef829dfdc6ab085c2e83df864306cee0096486e77a1f9d7b7cf5bd157a69a05a12bb735606ac360af2c23542e52880fe9328524d5b121e378319ef2e1a0874fc99842ac8ac04dd6c634b08d81ffd379e9a52573a1721f63a6c009c590e7f43fcbaa2c23c975dfd1a9d1a6dc21587511b4cfdb6f53721940a9f4dd3d8a2c6bdf9890a152e05c9b561518a58a861aae8cb02f1031a121297f6b0820b22d9d6e544adc91216f4a3c011dee24774bfddef418a56c5f0ed57e6f3ce2a76d812a19a9420141eca0ef3d86f552814cb8b2a68b53bb195b2dd2b44f49e93c742db0b2bd637fd247bc28755819a9e122725a6b4409baec607359268eb6cf83fcb674a3771b75b8a7ea0300c16a624333b69bc188c417557356ff7336cde8645f973ad18ee15fc3b34074e1ec58eb00b779a86c7dd7e76872798a12b29b3f446240770999853686f18a624beb6f07f614b413a0cbd954de99a6a79b7c9dbdec41fa172025d9e7d6e82935fc21b4c90bae9b4e9a84478e2289fda091ceacdd02bee2d96fa9d02982191418a9db4115ba049b045ef03dcffc0566d802df6d97dcd90660cd9c3a682bca8a48dd7168ab86074685993571843f74498f1d3a85ab9c63c83450809e86cb1bcf2f341cfd7db56090ad58c34e3a6a98ea65e7b5b439295b0ad6e6e695d88dec93c2ed776df7fc41ef0cec809500d2ce06ac217001748fa337b91f1bccf4d22ee7183e44a573cf95bdbe1e2e10d0c2d52e1992983f84fa1b109eb1495c9d25651510b75a2d5c689b7fe9", 0x1000}}, 0x1006) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.680401214s ago: executing program 6 (id=1094): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000001d"], 0x30}], 0x1, 0x0) 2.674645796s ago: executing program 0 (id=1095): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x144}}, 0x20004000) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="85a0d5dbc845a99fc0c5bae197c426a3d7f3112a3e50f2cb4cadf9c2bfc7be9ef21756d146081716fbcac50a05221989ef84de2678df2f908da33bccf7ccc86a5fa44041648330b33603b6c30860f001886b9144881942ff46eb17998d88d8e6a183373f9989b03e4d2cc8ba5accf495ae7da3afbe95889f73d71f083fcef55e9b6d13e515259567d6150e258f8cb6ecdc025c30552f3cee7b414ea35f003e8e27f343c503e871f7f6bb2d293cc07ce890a3838347c01b0f2e8212703abb55db3ff4a55dbf06d43050be6bc3b9049c15f472233bdcde", @ANYRES64, @ANYRES32=0x0], 0x78) close(r5) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./mnt\x00', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/158, 0x9e}], 0x2, &(0x7f00000002c0)=""/165, 0xa5}, 0x40012000) 2.543066325s ago: executing program 6 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000706010800000500000000000100000a050001000700000008000640000000030900020073797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2.539836163s ago: executing program 5 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x9, &(0x7f0000006680)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000200)) getegid() times(0xfffffffffffffffc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_ublk_setup_io_uring(0x22cf, 0x0, 0x0, 0x0, 0x0) 2.406226442s ago: executing program 6 (id=1098): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x7a) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="04063ad2f9ec2752b64cfee50a25fd3f66a98082bdc5cfb18db72e745805833b771bf8201399f4934304d90fdedbb372403f861000000000000000c573c9d66a9969c4362abde5f98dbfe80d324cfee39aec235516c5eefd41c2e9"], 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x202f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100)=r3, 0x12) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)={0x41c, 0x14, 0x4, 0x70bd2a, 0x25dfdbfe, {0x26, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xef, 0x1, "157ee07ac3a2a96b9311700ddbf285a6f22ee87e9ecc44915239698812b7a5e7915ba31e9b1dc09f67bde9f01b7dfb1fc979c9518394a2c3241891b302b1c2eaac488c017b5df619ca247a35c41a34431753555871beafcd7e3a2774513c6f3023402dd69f11219b29cddb3716721aecb332151169ce887af19ad9e67596917503eea77d22d2e82f404a9e2349df1abc67983a9b8be07908ed9fd27f6a89bec65f7299d56535f3ba251445433cdb3fb94481dfb600e6cfe61382a418cfc0eb48b82267042bbbeb6d4da2a2222da8832bed703506632c1d0060830e9ca68e2071a2cec2eaa9c00b1e6cf34d"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "9cb119e94cd38e6893714fce51854ddaa3d6d66e1807e993cf9747253cdf8c829f187bd69fc043b4dd6d3e78937a6414ec9c35d527b5fc3ea24330352de8271669041f72fee703bc2feac8dd28db02ddb19b1f1ac572ccf6e5c1840de42972f48ad2ff6c47866303a961533818a5f20615fc8f0d2180ea63422b422b909e5d1b34e37954b90a25c73989eae46495852ced91d7118d2b638c54e4438bb724fbc4c7ce8e9e5829ae16e8faff62b4a7ed8f4c1f8133531470693fbffb275930876175edd0adc63ce3692abdfe149ac934b11396481f6fb6f6241abc85ea3882c318e6af48df01b861a0d51d4c7b26a243369a4e9a76bd75f0d3"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "30c2d2731dce399f1154f58127419b91a68e50ef2b489a36182b96f2c4968c59f95750593e93dbb266388067c999e79b52184618b438e276c7c7875c104d464955ab39cdfd18d1c59bf1a470f6a1586578fd57a2f2897b0986f710c162f0ccfa2f8d09f720c79fe01fc091dc2df0fdcf3ef1d50496a116b3197574b73c46bdbf9821ee949a5b52b2d223cdcb3df9d1782fb8be527e97145972e2b129a567df835efef53e156cb4504f7b1d07e6f54da1d14351c949ec9571f3d2911dbf1997f8bf40e5a491"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "b41137968a54c78f4b8ce2ce6166b04461d4702e867d67c624ff17a8e9a790fe01311c7bad85b1c064d21bc730f8ab3ef8672c95e209db7135da7aefc66290a6d18ed921e425a25ca7d953c2f4c4269a38be028055d6276d06f0121780499bcfafc28582d5121bbf5585f97e490008dba294721d1389c24e4d7ce055e3d64ad524039f6eb7ec236d2376bd23ef318f3f"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "14ae708c3f5d0a721a69608fb4761ad5d364e06538ce8874ef57d8016ad08a52de0950db36625967f7e2b22fd0c122d484bd2469c1104ef17567fe006be1f98f98bddec57c7e1815a1cd7a07cd43e261109a1559dade8047343ca214ca"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "369172f9759d34e555d7bf89fed43c74b2b2c0cd84d5d6d3e0a2d5f3a588aa08a046edf4299f3a2f453806b4b36af89e368d420b76fc74418ce84076724d804e032a447647e1a63d5b1bd4837256fbf369"}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) munlockall() r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='40', 0x2) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x80}}, 0x50) setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file1\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f0000000a80)=ANY=[], 0x4c, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) close(r0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080006000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.805739918s ago: executing program 6 (id=1099): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.74414818s ago: executing program 6 (id=1100): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) bind$bt_hci(r0, &(0x7f0000000640)={0x1f, 0x0, 0x1}, 0x6) 1.742596711s ago: executing program 6 (id=1101): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000680)={&(0x7f00000004c0)=[{0x3, 0x0, 0x377d60c6, 0x6, 0xd, 0x7fffffffffffffff, 0x2, 0x3}, {0x3, 0x0, 0x6, 0x4, 0x6, 0x4, 0x0, 0x3ff3}, {0x0, 0x0, 0x9, 0x4, 0x6, 0x8, 0x62d0, 0x441}, {0x2, 0x0, 0x2, 0x3, 0x1000, 0x9, 0x4, 0x4000000000}, {0x0, 0x0, 0xf71, 0x9, 0xffffffffffffffff, 0x5, 0xdbc2, 0x100}, {0x0, 0x0, 0xff, 0xc772, 0x9, 0xf, 0x80000000, 0xf7}, {0x3, 0x0, 0x2, 0x8, 0x7, 0x8000, 0x6, 0x2}, {0x0, 0x0, 0x0, 0x7, 0x9, 0x6, 0x8, 0x400}], 0x8, 0x38, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) ptrace(0x10, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e5c6000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x38}, 0x1, 0x0, 0x0, 0xfb440c942bbb5e5b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='vimc.0', 0x6) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004100070127bd7000fefdffff047c000008004280"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, 0x0, 0x300) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000006637"], 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl(r7, 0x4048aec9, &(0x7f00000000c0)="030000") sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) seccomp$SECCOMP_SET_MODE_STRICT(0xc07f, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.566528615s ago: executing program 0 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000040000000400000080000000", @ANYRESHEX=r1, @ANYBLOB="00ff0700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES16=r8, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES8=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18fd3f00000000000009000000850000007d0000009500"/32], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad978b3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a3000000000080003"], 0x118}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettfilter={0x74, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {}, {0x0, 0xfff3}}, [{0x6, 0xb, 0x9}, {0x8, 0xb, 0xc4}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x68000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc7f}]}, 0x74}}, 0x40000d0) 1.48330232s ago: executing program 5 (id=1103): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x20000000000005, &(0x7f0000000040)=0x7, &(0x7f00000009c0)=0x271) r6 = eventfd(0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, 0x0, 0x0) read$eventfd(r6, &(0x7f00000002c0), 0x8) shutdown(r1, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)={0x90, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xa4b9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x48000) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000400)=ANY=[], 0x3c) 1.032729048s ago: executing program 4 (id=1104): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x21, 0x20}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x19}, r2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETS(0xffffffffffffffff, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r4, 0xc0606610, &(0x7f0000000040)=0x60) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(r3, 0x0, &(0x7f0000000540)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000}, 0x28) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x1f, 0xff, 0x0, @empty, "f487e640"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 382.809791ms ago: executing program 4 (id=1105): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f28, 0xffffffff, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d30, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000700)="53e252699071597245074d668de4812e4d77e865bb8908e6ce220d3584792b43f8e0ff7d1fdf6fc27910835cd674986e5a7b0a5edbe076a5eb55bcdc0c09cc9705a2f1b480b7aa2fd6220cfd4b51adf9529680dd0682acbb74e3ace794e40e2cee9a764300ede3d1c901094467054e0d7f0a3c4b51bdf695f56f1553f37389d7d27ec1d17cae49ee974bd310d9e3e1c78d054bab74ba37a85c61e8527f58a95a523917c81bc2fb0c8e394abb29e504fa4d0203065c680e9a8d2701ebe684bd5331bea5b60272363bae4e50f1d6dcdf5c4e68b6884dd56fda1a54ad47a6", 0x0, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {0x0}], 0x2}, 0x101d0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x1, 0xffffffff, 0x33565348, 0x2, 0x7, 0x5, 0x9, 0x1, 0x0, 0x6, 0x0, 0x4}}) 23.849079ms ago: executing program 0 (id=1106): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x208480, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x801) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0xc7}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000e8a000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x3, 0x3, 0xac, &(0x7f0000000080)=""/172}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x200, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x1ec, 0x1, [@m_nat={0x1e8, 0xa, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x40, 0x2, 0x7fff, 0x6}, @private=0xa010102, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x200, 0x10000003, 0xd, 0x400}, @rand_addr=0x64010102, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x6, 0x3, 0x8}, @local, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x40, 0xffffffffffffffff, 0x2, 0x3}, @local, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x4, 0x9, 0x1c009ef8}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe523, 0x80000000, 0x5, 0x0, 0x5}, @broadcast, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xac32, 0x2, 0xffffffffffffffff, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0x1}}]}, {0xa6, 0x6, "2f1465afc1b600ee49a42df4cf60d9266be044c55272ab5d9255b07c610953b704b3d545308262356d1871f91277e5fc4ce65c41e75651db9d29cecceece71ee0c0edede2f56758cd17c4674234d629725b3d390faf687d460182113509dc5c5952c6d177c0ee51045d50eca794e2dd4d108244162241017b0b712aea58eae5ae68b403fe914f9570721ec7b4a730f1da571e2748df5528c9bfa3a94a115b0a0b19f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/18, 0x12}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}, 0x5fe}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) 0s ago: executing program 4 (id=1107): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x111c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10ec, 0x2, [@TCA_TCINDEX_ACT={0x10e8, 0x7, [@m_xt={0x14c, 0x17, 0x0, 0x0, {{0x7}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x118, 0x16, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xca, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x27e}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x4, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x2}, {0xf, 0x5, 0x80, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x7, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x800005, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x111c}, 0x1, 0x0, 0x0, 0x810}, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000001b00), 0x0, 0x20000045, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) keyctl$unlink(0x9, r7, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) kernel console output (not intermixed with test programs): op threads [ 309.032690][ T7672] vhci_hcd vhci_hcd.0: release socket [ 309.044209][ T7672] vhci_hcd vhci_hcd.0: disconnect device [ 311.538006][ T8371] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 311.559444][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.567213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.773653][ T8367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8367 comm=syz.1.654 [ 312.664928][ T5795] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 312.722527][ T8386] netlink: Conntrack attr has 4 unknown bytes [ 312.728720][ T8386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.946148][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 312.946163][ T29] audit: type=1400 audit(1786539687.196:441): avc: denied { bind } for pid=8387 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.034295][ T8385] FAULT_INJECTION: forcing a failure. [ 313.034295][ T8385] name fail_futex, interval 1, probability 0, space 0, times 1 [ 313.047606][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.047634][ T8385] Tainted: [L]=SOFTLOCKUP [ 313.047640][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 313.047650][ T8385] Call Trace: [ 313.047656][ T8385] [ 313.047662][ T8385] dump_stack_lvl+0x100/0x190 [ 313.047689][ T8385] should_fail_ex.cold+0x5/0xa [ 313.047712][ T8385] should_fail_futex+0x4c/0x60 [ 313.047736][ T8385] lock_pi_update_atomic+0x20/0x130 [ 313.047755][ T8385] futex_lock_pi_atomic+0x3fb/0xaf0 [ 313.047777][ T8385] futex_lock_pi+0x278/0x7f0 [ 313.047799][ T8385] ? __pfx_futex_lock_pi+0x10/0x10 [ 313.047845][ T8385] ? __pfx_futex_wake_mark+0x10/0x10 [ 313.047872][ T8385] ? rcu_read_lock_any_held+0x6a/0xa0 [ 313.047896][ T8385] ? find_held_lock+0x2b/0x80 [ 313.047913][ T8385] ? ksys_write+0x190/0x250 [ 313.047934][ T8385] do_futex+0x371/0x440 [ 313.047960][ T8385] ? __pfx_do_futex+0x10/0x10 [ 313.047987][ T8385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.048017][ T8385] __x64_sys_futex+0x34f/0x4d0 [ 313.048045][ T8385] ? fput+0x79/0x100 [ 313.048066][ T8385] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.048090][ T8385] ? ksys_write+0x1ac/0x250 [ 313.048106][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 313.048129][ T8385] do_syscall_64+0x115/0x870 [ 313.048152][ T8385] ? clear_bhb_loop+0x70/0xc0 [ 313.048174][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.048192][ T8385] RIP: 0033:0x7f46b079e0d9 [ 313.048207][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.048223][ T8385] RSP: 002b:00007f46b1587028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.048241][ T8385] RAX: ffffffffffffffda RBX: 00007f46b0a25fa0 RCX: 00007f46b079e0d9 [ 313.048252][ T8385] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 313.048262][ T8385] RBP: 00007f46b1587090 R08: 0000000000000000 R09: 00000000fffffffc [ 313.048272][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.048282][ T8385] R13: 00007f46b0a26038 R14: 00007f46b0a25fa0 R15: 00007ffda0802588 [ 313.048306][ T8385] [ 313.117011][ T5795] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 313.543764][ T5795] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.576157][ T5795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.615489][ T5795] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.658750][ T5795] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.696605][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.715521][ T24] usb 34-1: device descriptor read/8, error -110 [ 314.168139][ T24] usb usb34-port1: attempt power cycle [ 314.316659][ T29] audit: type=1400 audit(1786539688.516:442): avc: denied { setopt } for pid=8405 comm="syz.1.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.044465][ T24] usb usb34-port1: unable to enumerate USB device [ 316.417032][ T5795] gud 5-1:1.0: probe with driver gud failed with error -71 [ 316.646704][ T5795] usb 5-1: USB disconnect, device number 16 [ 316.776103][ T8424] mmap: syz.0.663 (8424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.960267][ T8408] Cannot find add_set index 0 as target [ 317.675459][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 317.696133][ T8430] netlink: 'syz.2.671': attribute type 11 has an invalid length. [ 317.810874][ T8432] fuse: Unknown parameter 'user_id00000000000000000000' [ 317.864520][ T8432] syz.2.672 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 317.886060][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.2.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.886093][ T8432] Tainted: [L]=SOFTLOCKUP [ 317.886100][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 317.886111][ T8432] Call Trace: [ 317.886118][ T8432] [ 317.886126][ T8432] dump_stack_lvl+0x100/0x190 [ 317.886154][ T8432] dump_header+0xfb/0x606 [ 317.886177][ T8432] oom_kill_process.cold+0xd/0x330 [ 317.886202][ T8432] out_of_memory+0x340/0x14f0 [ 317.886238][ T8432] ? __pfx_out_of_memory+0x10/0x10 [ 317.886275][ T8432] mem_cgroup_out_of_memory+0xc6/0x130 [ 317.886296][ T8432] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 317.886316][ T8432] ? find_held_lock+0x2b/0x80 [ 317.886339][ T8432] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.886366][ T8432] ? _raw_spin_unlock+0x28/0x50 [ 317.886390][ T8432] try_charge_memcg+0x6e5/0xdf0 [ 317.886420][ T8432] ? __pfx_try_charge_memcg+0x10/0x10 [ 317.886445][ T8432] ? find_held_lock+0x2b/0x80 [ 317.886460][ T8432] ? rcu_read_unlock+0x17/0x60 [ 317.886493][ T8432] ? rcu_read_unlock+0x17/0x60 [ 317.886533][ T8432] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 317.886570][ T8432] ? kasan_save_track+0x14/0x30 [ 317.886596][ T8432] kmem_cache_alloc_noprof+0x587/0x6a0 [ 317.886619][ T8432] ? alloc_empty_file+0x5b/0x1c0 [ 317.886648][ T8432] alloc_empty_file+0x5b/0x1c0 [ 317.886673][ T8432] path_openat+0xe7/0x4280 [ 317.886691][ T8432] ? __kasan_slab_alloc+0x89/0x90 [ 317.886713][ T8432] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 317.886733][ T8432] ? do_getname+0x35/0x390 [ 317.886755][ T8432] ? do_sys_openat2+0xc7/0x1e0 [ 317.886777][ T8432] ? __x64_sys_openat+0x12d/0x210 [ 317.886800][ T8432] ? do_syscall_64+0x115/0x870 [ 317.886823][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.886850][ T8432] ? __pfx_path_openat+0x10/0x10 [ 317.886878][ T8432] do_file_open+0x20e/0x430 [ 317.886901][ T8432] ? __pfx_do_file_open+0x10/0x10 [ 317.886939][ T8432] ? alloc_fd+0x471/0x7a0 [ 317.886960][ T8432] ? do_getname+0x191/0x390 [ 317.886983][ T8432] do_sys_openat2+0x10f/0x1e0 [ 317.887005][ T8432] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.887030][ T8432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.887064][ T8432] __x64_sys_openat+0x12d/0x210 [ 317.887089][ T8432] ? __pfx___x64_sys_openat+0x10/0x10 [ 317.887122][ T8432] do_syscall_64+0x115/0x870 [ 317.887144][ T8432] ? clear_bhb_loop+0x70/0xc0 [ 317.887167][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.887186][ T8432] RIP: 0033:0x7f46b079e0d9 [ 317.887202][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.887219][ T8432] RSP: 002b:00007f46b1587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.887238][ T8432] RAX: ffffffffffffffda RBX: 00007f46b0a25fa0 RCX: 00007f46b079e0d9 [ 317.887250][ T8432] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 317.887261][ T8432] RBP: 00007f46b0835024 R08: 0000000000000000 R09: 0000000000000000 [ 317.887272][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.887282][ T8432] R13: 00007f46b0a26038 R14: 00007f46b0a25fa0 R15: 00007ffda0802588 [ 317.887309][ T8432] [ 317.892087][ T8432] memory: usage 0kB, limit 0kB, failcnt 505 [ 318.215582][ T8432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 318.238949][ T8432] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 318.246330][ T8432] Memory cgroup stats for /syz2/syz2: [ 318.246447][ T8432] cache 0 [ 318.255341][ T8432] rss 0 [ 318.258124][ T8432] rss_huge 0 [ 318.261312][ T8432] shmem 0 [ 318.353954][ T8432] mapped_file 0 [ 318.357895][ T8432] dirty 0 [ 318.360857][ T8432] writeback 0 [ 318.364190][ T8432] workingset_refault_anon 0 [ 318.370409][ T8432] workingset_refault_file 0 [ 318.374948][ T8432] swap 0 [ 318.378135][ T8432] swapcached 0 [ 318.382688][ T8432] pgpgin 0 [ 318.386020][ T8432] pgpgout 0 [ 318.389150][ T8432] pgfault 2 [ 318.392251][ T8432] pgmajfault 0 [ 318.396241][ T8432] inactive_anon 0 [ 318.400787][ T8432] active_anon 0 [ 318.404231][ T8432] inactive_file 0 [ 318.407893][ T8432] active_file 0 [ 318.411346][ T8432] unevictable 0 [ 318.482285][ T8438] netlink: Conntrack attr has 4 unknown bytes [ 318.488523][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.544942][ T8432] hierarchical_memory_limit 0 [ 318.881339][ T8432] hierarchical_memsw_limit 9223372036854771712 [ 318.906302][ T8432] total_cache 0 [ 318.922922][ T8432] total_rss 0 [ 319.045160][ T8432] total_rss_huge 0 [ 319.246271][ T8432] total_shmem 0 [ 319.249773][ T8432] total_mapped_file 0 [ 319.277103][ T8432] total_dirty 0 [ 319.288590][ T8432] total_writeback 0 [ 319.307082][ T8432] total_workingset_refault_anon 0 [ 319.460312][ T8432] total_workingset_refault_file 0 [ 319.483943][ T29] audit: type=1400 audit(1786539693.726:443): avc: denied { bind } for pid=8442 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.515930][ T8432] total_swap 0 [ 319.519374][ T8432] total_swapcached 0 [ 319.533416][ T8432] total_pgpgin 0 [ 319.537286][ T8432] total_pgpgout 0 [ 319.570279][ T29] audit: type=1400 audit(1786539693.756:444): avc: denied { map } for pid=8442 comm="syz.0.676" path="socket:[21681]" dev="sockfs" ino=21681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.593372][ T8432] total_pgfault 2 [ 319.597510][ T8432] total_pgmajfault 0 [ 319.601662][ T8432] total_inactive_anon 0 [ 319.606028][ T8432] total_active_anon 0 [ 319.610305][ T8432] total_inactive_file 0 [ 319.615130][ T8432] total_active_file 0 [ 319.619145][ T29] audit: type=1400 audit(1786539693.756:445): avc: denied { read write } for pid=8442 comm="syz.0.676" path="socket:[21681]" dev="sockfs" ino=21681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.642839][ T8432] total_unevictable 0 [ 319.646939][ T8432] anon_cost 0 [ 319.650214][ T8432] file_cost 0 [ 319.653544][ T8432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.672,pid=8431,uid=0 [ 319.670601][ T8432] Memory cgroup out of memory: Killed process 8431 (syz.2.672) total-vm:102384kB, anon-rss:1436kB, file-rss:22800kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 320.005414][ T1209] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 320.198504][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.274401][ T1209] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 320.383724][ T1209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.495398][ T1209] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 320.583183][ T1209] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 320.668863][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.688364][ T1209] usb 2-1: Product: syz [ 320.705569][ T1209] usb 2-1: Manufacturer: syz [ 320.721210][ T1209] usb 2-1: SerialNumber: syz [ 320.811127][ T8461] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 320.864898][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 320.877535][ T8463] netlink: 'syz.0.683': attribute type 11 has an invalid length. [ 320.942773][ T29] audit: type=1400 audit(1786539695.186:446): avc: denied { getopt } for pid=8449 comm="syz.1.678" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.024780][ T1209] usb 2-1: 1:1 : invalid UAC_AS_GENERAL desc [ 321.054738][ T1209] usb 2-1: 0:2 : does not exist [ 321.111983][ T8455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8455 comm=syz.4.680 [ 321.277804][ T1209] usb 2-1: USB disconnect, device number 18 [ 321.456407][ T8423] udevd[8423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.538567][ T8479] netlink: Conntrack attr has 4 unknown bytes [ 321.544751][ T8479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.576052][ T5701] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 321.853173][ T5701] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 321.923083][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.961580][ T5701] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.995343][ T5701] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.033991][ T5701] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.064423][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.176125][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 322.196944][ T8487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.204179][ T8487] IPv6: NLM_F_CREATE should be set when creating new route [ 322.227727][ T8488] netlink: 'syz.1.688': attribute type 11 has an invalid length. [ 327.000193][ T5701] gud 1-1:1.0: probe with driver gud failed with error -71 [ 327.622806][ T5701] usb 1-1: USB disconnect, device number 11 [ 327.634592][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.645226][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.653183][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.672454][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.683147][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.709504][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.719725][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.734070][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.760724][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.775395][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.783721][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 327.821560][ T8504] netlink: 'syz.2.695': attribute type 11 has an invalid length. [ 329.509322][ T29] audit: type=1400 audit(1786539703.756:447): avc: denied { listen } for pid=8536 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.696862][ T8498] lo speed is unknown, defaulting to 1000 [ 329.776609][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 329.789389][ T8548] netlink: 'syz.1.707': attribute type 11 has an invalid length. [ 329.814885][ T187] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 329.890060][ T5603] Bluetooth: hci5: command tx timeout [ 330.308843][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 331.955083][ T5603] Bluetooth: hci5: command tx timeout [ 332.229403][ T187] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.239947][ T187] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.249787][ T187] usb 1-1: config 0 has no interface number 0 [ 332.255947][ T187] usb 1-1: config 0 interface 184 has no altsetting 0 [ 332.265985][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.276813][ T187] usb 1-1: Product: syz [ 332.281916][ T187] usb 1-1: Manufacturer: syz [ 332.293408][ T187] usb 1-1: SerialNumber: syz [ 332.306480][ T187] usb 1-1: config 0 descriptor?? [ 332.444642][ T8559] syzkaller0: entered promiscuous mode [ 332.451216][ T8559] syzkaller0: entered allmulticast mode [ 332.625819][ T187] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 332.638438][ T187] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 332.662471][ T187] usb 1-1: USB disconnect, device number 12 [ 334.036096][ T5603] Bluetooth: hci5: command tx timeout [ 334.204579][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.233374][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.272753][ T8498] bridge_slave_0: entered allmulticast mode [ 334.301480][ T8498] bridge_slave_0: entered promiscuous mode [ 334.320157][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.331863][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.342363][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 334.351681][ T8498] bridge_slave_1: entered allmulticast mode [ 334.358122][ T8584] netlink: 'syz.2.717': attribute type 11 has an invalid length. [ 334.376924][ T8498] bridge_slave_1: entered promiscuous mode [ 334.426291][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.442305][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.474075][ T8498] team0: Port device team_slave_0 added [ 334.482623][ T8498] team0: Port device team_slave_1 added [ 335.907474][ T5795] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 336.127688][ T5603] Bluetooth: hci5: command tx timeout [ 336.284931][ T5795] usb 2-1: Using ep0 maxpacket: 8 [ 336.486215][ T5795] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 337.102717][ T5795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 337.212588][ T5795] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 337.698056][ T5795] usb 2-1: Product: syz [ 337.729648][ T5795] usb 2-1: Manufacturer: syz [ 337.735290][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.742256][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.768302][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.769710][ T5795] usb 2-1: SerialNumber: syz [ 337.788971][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.797161][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.823357][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.901781][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 337.917279][ T8604] veth1_macvtap: left promiscuous mode [ 337.977846][ T8498] hsr_slave_0: entered promiscuous mode [ 337.984328][ T8498] hsr_slave_1: entered promiscuous mode [ 338.000946][ T8498] debugfs: 'hsr0' already exists in 'hsr' [ 338.008470][ T8498] Cannot create hsr debugfs directory [ 338.074355][ T8601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8601 comm=syz.0.721 [ 338.092638][ T5795] usb 2-1: Invalid connection information received from device [ 338.195105][ T1209] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 338.836027][ T1209] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 338.849137][ T187] usb 2-1: USB disconnect, device number 19 [ 338.849371][ T1209] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 338.866973][ T1209] usb 3-1: config 0 has no interface number 0 [ 338.873407][ T1209] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.889281][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 338.900013][ T1209] usb 3-1: Product: syz [ 338.909267][ T1209] usb 3-1: SerialNumber: syz [ 338.920093][ T1209] usb 3-1: config 0 descriptor?? [ 338.928934][ T1209] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 339.002944][ T8498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.029543][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.036743][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.040126][ T8498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.048898][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.062399][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.070735][ T8498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.079248][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.086899][ T8498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.096119][ T8498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.124869][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 339.176279][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.200946][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.208883][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.208962][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.211045][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.211088][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.251661][ T8498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.267305][ T5701] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 339.285315][ T9] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 339.295992][ T9] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 339.304397][ T9] usb 1-1: config 127 has no interface number 0 [ 339.318608][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.330194][ T9] usb 1-1: Product: syz [ 339.346777][ T9] usb 1-1: Manufacturer: syz [ 339.360715][ T9] usb 1-1: SerialNumber: syz [ 339.373552][ T187] usb 3-1: USB disconnect, device number 13 [ 339.421687][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.436722][ T5701] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030a, bcdDevice=cf.d0 [ 339.450316][ T5701] usb 5-1: config 114 has an invalid interface number: 49 but max is 0 [ 339.458984][ T5701] usb 5-1: config 114 has no interface number 0 [ 339.469361][ T5701] usb 5-1: config 114 interface 49 altsetting 232 bulk endpoint 0x2 has invalid maxpacket 1023 [ 339.490179][ T5701] usb 5-1: config 114 interface 49 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 339.504029][ T5701] usb 5-1: config 114 interface 49 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 339.536956][ T5701] usb 5-1: config 114 interface 49 has no altsetting 0 [ 339.574089][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.599489][ T5701] usb 5-1: Product: syz [ 339.659397][ T5701] usb 5-1: Manufacturer: syz [ 339.723945][ T5701] usb 5-1: SerialNumber: syz [ 339.916814][ T9] asix 1-1:127.57: probe with driver asix failed with error -22 [ 339.940018][ T8616] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 340.007258][ T8616] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 340.113476][ T9] usb 1-1: USB disconnect, device number 13 [ 340.323169][ T5701] option 5-1:114.49: GSM modem (1-port) converter detected [ 340.378711][ T5701] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 340.420959][ T5701] usb 5-1: USB disconnect, device number 17 [ 340.807091][ T5701] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 340.827988][ T5701] option 5-1:114.49: device disconnected [ 340.938714][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.952845][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 340.966709][ T8643] netlink: 'syz.1.729': attribute type 11 has an invalid length. [ 341.016647][ T29] audit: type=1400 audit(1786539715.256:448): avc: denied { ioctl } for pid=8644 comm="syz.4.732" path="socket:[22648]" dev="sockfs" ino=22648 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.173280][ T29] audit: type=1400 audit(1786539715.306:449): avc: denied { mount } for pid=8647 comm="syz.0.730" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 341.229596][ T29] audit: type=1400 audit(1786539715.476:450): avc: denied { listen } for pid=8647 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.325462][ T1209] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 341.362973][ T8498] veth0_vlan: entered promiscuous mode [ 341.377538][ T8662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8662 comm=syz.1.733 [ 341.393799][ T8498] veth1_vlan: entered promiscuous mode [ 341.480645][ T1209] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 341.536574][ T1209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.551464][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.566538][ T1209] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 341.590627][ T1209] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.609297][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.712351][ T8498] veth0_macvtap: entered promiscuous mode [ 341.756659][ T8498] veth1_macvtap: entered promiscuous mode [ 341.798200][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.833382][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.885195][ T7672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.933610][ T7672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.982469][ T7672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.017414][ T7672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.068653][ T29] audit: type=1400 audit(1786539716.306:451): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 343.604104][ T29] audit: type=1400 audit(1786539717.846:452): avc: denied { create } for pid=8671 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 343.676123][ T8672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.736'. [ 343.718929][ T29] audit: type=1400 audit(1786539717.916:453): avc: denied { write } for pid=8671 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 344.281203][ T1209] gud 3-1:1.0: probe with driver gud failed with error -71 [ 344.313133][ T7670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.333399][ T7670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.365397][ T1209] usb 3-1: USB disconnect, device number 14 [ 344.457025][ T8061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.582949][ T8061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.911794][ T8690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.740'. [ 345.336352][ T29] audit: type=1400 audit(1786539719.576:454): avc: denied { mounton } for pid=8682 comm="syz.2.740" path="/168/file1/sys" dev="autofs" ino=23567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 345.361672][ T29] audit: type=1400 audit(1786539719.606:455): avc: denied { mounton } for pid=8498 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 345.400207][ T29] audit: type=1400 audit(1786539719.646:456): avc: denied { mounton } for pid=8682 comm="syz.2.740" path="/168/file1/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 345.430181][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 345.478538][ T8695] netlink: 'syz.4.742': attribute type 11 has an invalid length. [ 345.793884][ T8701] fuse: Unknown parameter 'user_id00000000000000000000' [ 345.842951][ T8699] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 345.849487][ T8699] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 346.022413][ T29] audit: type=1400 audit(1786539720.266:457): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 346.170752][ T8699] vhci_hcd vhci_hcd.0: Device attached [ 346.434965][ T1209] usb 36-1: SetAddress Request (10) to port 0 [ 346.460006][ T1209] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 346.570181][ T8718] netlink: Conntrack attr has 4 unknown bytes [ 346.576457][ T8718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.999874][ T8719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8719 comm=syz.0.747 [ 347.024913][ T29] audit: type=1400 audit(1786539721.266:458): avc: denied { read } for pid=8721 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.085952][ T8703] vhci_hcd: connection reset by peer [ 347.097311][ T7670] vhci_hcd vhci_hcd.1: stop threads [ 347.102706][ T7670] vhci_hcd vhci_hcd.1: release socket [ 347.108496][ T7670] vhci_hcd vhci_hcd.1: disconnect device [ 348.064959][ T5795] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 348.298645][ T5795] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 348.309392][ T5795] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.324848][ T5795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.334749][ T5795] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 348.345423][ T5795] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.358971][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.372090][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 348.383415][ T8739] netlink: 'syz.4.754': attribute type 11 has an invalid length. [ 348.746054][ T8746] overlayfs: failed to resolve './file0': -2 [ 348.815029][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 350.309647][ T8754] Cannot find add_set index 0 as target [ 351.055046][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 351.101034][ T5795] gud 6-1:1.0: probe with driver gud failed with error -71 [ 351.141411][ T5795] usb 6-1: USB disconnect, device number 2 [ 351.247150][ T24] usb 2-1: device descriptor read/64, error -71 [ 351.247338][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 351.267460][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 351.285265][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.293587][ T9] usb 5-1: Product: syz [ 351.369165][ T8766] netlink: Conntrack attr has 4 unknown bytes [ 351.375351][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.618475][ T9] usb 5-1: Manufacturer: syz [ 351.653124][ T9] usb 5-1: SerialNumber: syz [ 351.698509][ T1209] usb 36-1: device descriptor read/8, error -110 [ 351.750930][ T9] usb 5-1: can't set config #1, error -71 [ 351.865063][ T9] usb 5-1: USB disconnect, device number 18 [ 352.474115][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 352.723686][ T8767] pim6reg: entered allmulticast mode [ 352.729914][ T8765] pim6reg: left allmulticast mode [ 352.906457][ T29] audit: type=1400 audit(1786539727.026:459): avc: denied { nosuid_transition } for pid=8762 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 353.002781][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 353.075050][ T29] audit: type=1400 audit(1786539727.026:460): avc: denied { transition } for pid=8762 comm="syz.5.762" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 353.126514][ T29] audit: type=1400 audit(1786539727.026:461): avc: denied { entrypoint } for pid=8762 comm="syz.5.762" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=117 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 353.162814][ T29] audit: type=1400 audit(1786539727.026:462): avc: denied { noatsecure } for pid=8762 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 353.184976][ T24] usb 2-1: device descriptor read/64, error -71 [ 353.201971][ T29] audit: type=1400 audit(1786539727.356:463): avc: denied { create } for pid=8772 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.242167][ T29] audit: type=1400 audit(1786539727.356:464): avc: denied { setopt } for pid=8772 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.267472][ T29] audit: type=1400 audit(1786539727.356:465): avc: denied { bind } for pid=8772 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.287262][ T29] audit: type=1400 audit(1786539727.356:466): avc: denied { node_bind } for pid=8772 comm="syz.0.764" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 353.311150][ T29] audit: type=1400 audit(1786539727.366:467): avc: denied { connect } for pid=8772 comm="syz.0.764" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.333382][ T29] audit: type=1400 audit(1786539727.366:468): avc: denied { ioctl } for pid=8780 comm="syz.4.765" path="socket:[23061]" dev="sockfs" ino=23061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.360407][ T24] usb usb2-port1: attempt power cycle [ 353.442769][ T1209] usb usb36-port1: attempt power cycle [ 353.716836][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 353.820731][ T8799] comedi comedi1: pcl724: I/O base address not correctly aligned [ 354.876333][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 354.887972][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.888246][ T8803] futex_wake_op: syz.5.772 tries to shift op by 144; fix this program [ 354.896195][ T24] usb 2-1: Product: syz [ 354.896215][ T24] usb 2-1: Manufacturer: syz [ 354.896229][ T24] usb 2-1: SerialNumber: syz [ 355.250553][ T8806] loop1: detected capacity change from 0 to 107 [ 355.327877][ T8813] netlink: Conntrack attr has 4 unknown bytes [ 355.334368][ T8813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.887570][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 355.916975][ T1209] usb usb36-port1: unable to enumerate USB device [ 355.925006][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 355.935511][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 356.029007][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 356.060928][ T24] usb 2-1: USB disconnect, device number 22 [ 357.076010][ T8825] netlink: 292 bytes leftover after parsing attributes in process `syz.1.777'. [ 357.112055][ T8825] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 357.137094][ T8825] netlink: 'syz.1.777': attribute type 2 has an invalid length. [ 357.176130][ T8827] netlink: zone id is out of range [ 357.502332][ T8833] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 357.515262][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.779'. [ 357.544708][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 357.558360][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 357.584274][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 357.595267][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 357.648485][ T8835] netlink: 'syz.4.781': attribute type 11 has an invalid length. [ 357.758337][ T8835] netlink: 'syz.4.781': attribute type 7 has an invalid length. [ 357.867565][ T8848] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.022061][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 358.130695][ T8856] devpts: Unknown parameter 'ûFr¬×Oœ“¾á¹#i}~¶Uý°E@?d€§«˜n‹ybÀqXñ$ïJ{F8¨íš3uN¿E­Ã+lÒ/9' [ 358.239215][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 358.239252][ T29] audit: type=1400 audit(1786539732.486:476): avc: denied { bind } for pid=8853 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.648085][ T8869] syz.1.789 uses obsolete (PF_INET,SOCK_PACKET) [ 359.696482][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 359.912742][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 359.924877][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 359.960909][ T8875] netlink: 'syz.5.791': attribute type 11 has an invalid length. [ 359.982384][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 360.050933][ T29] audit: type=1400 audit(1786539734.296:477): avc: denied { create } for pid=8876 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 360.143810][ T29] audit: type=1400 audit(1786539734.336:478): avc: denied { write } for pid=8876 comm="syz.4.790" path="socket:[23303]" dev="sockfs" ino=23303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 360.411308][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 360.786140][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.800690][ T24] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 360.867009][ T8884] fuse: Unknown parameter 'user_id00000000000000000000' [ 360.893343][ T29] audit: type=1400 audit(1786539735.136:479): avc: denied { ioctl } for pid=8881 comm="syz.1.792" path="socket:[24000]" dev="sockfs" ino=24000 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.008355][ T24] gspca_sunplus: reg_w_riv err -71 [ 361.017504][ T24] sunplus 1-1:8.0: probe with driver sunplus failed with error -71 [ 361.036540][ T24] usb 1-1: USB disconnect, device number 14 [ 361.244889][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 361.395104][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 361.409682][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 361.439510][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 361.452689][ T9] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 361.476442][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 361.502353][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.512653][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.523311][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.538148][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.546541][ T9] usb 6-1: Product: syz [ 361.550841][ T9] usb 6-1: Manufacturer: syz [ 361.556900][ T9] usb 6-1: SerialNumber: syz [ 361.561584][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.569228][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.781565][ T9] usb 6-1: USB disconnect, device number 3 [ 362.578348][ T29] audit: type=1400 audit(1786539736.826:480): avc: denied { connect } for pid=8896 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 363.634892][ T5603] Bluetooth: hci1: command tx timeout [ 363.824418][ T8894] lo speed is unknown, defaulting to 1000 [ 364.303017][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 364.311879][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 364.320734][ T8923] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 364.697480][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 364.813799][ T8926] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 364.820335][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 364.846562][ T24] usb 2-1: device descriptor read/64, error -71 [ 365.081128][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.090691][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 365.090958][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.103525][ T8894] bridge_slave_0: entered allmulticast mode [ 365.113533][ T8894] bridge_slave_0: entered promiscuous mode [ 365.126954][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 365.140507][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.148846][ T8936] netlink: 152 bytes leftover after parsing attributes in process `syz.4.803'. [ 365.158395][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.172143][ T8894] bridge_slave_1: entered allmulticast mode [ 365.220669][ T8894] bridge_slave_1: entered promiscuous mode [ 365.262630][ T8930] ipvlan2: entered allmulticast mode [ 365.268055][ T8930] ip6gretap0: entered allmulticast mode [ 365.306487][ T24] usb 2-1: device descriptor read/64, error -71 [ 365.326952][ T8938] siw: device registration error -23 [ 365.371073][ T8930] batman_adv: batadv0: Adding interface: ipvlan2 [ 365.394930][ T5795] usb 44-1: SetAddress Request (2) to port 0 [ 365.398036][ T8930] batman_adv: batadv0: Interface activated: ipvlan2 [ 365.401853][ T5795] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 365.505208][ T24] usb usb2-port1: attempt power cycle [ 365.530320][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.571629][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.643685][ T29] audit: type=1400 audit(1786539739.886:481): avc: denied { setopt } for pid=8943 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.675883][ T8894] team0: Port device team_slave_0 added [ 365.714985][ T5603] Bluetooth: hci1: command tx timeout [ 365.725337][ T29] audit: type=1400 audit(1786539739.926:482): avc: denied { write } for pid=8943 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.765746][ T8894] team0: Port device team_slave_1 added [ 365.895221][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 366.014736][ T24] usb 2-1: device descriptor read/8, error -71 [ 366.334678][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 366.395040][ T24] usb 2-1: device descriptor read/8, error -71 [ 366.420968][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.431358][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.464706][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.491797][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.498913][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.568886][ T8954] comedi comedi1: pcl724: I/O base address not correctly aligned [ 366.932535][ T24] usb usb2-port1: unable to enumerate USB device [ 366.949247][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.960075][ T8927] vhci_hcd: connection reset by peer [ 367.015979][ T7672] vhci_hcd vhci_hcd.5: stop threads [ 367.021399][ T7672] vhci_hcd vhci_hcd.5: release socket [ 367.029255][ T7672] vhci_hcd vhci_hcd.5: disconnect device [ 367.458770][ T8894] hsr_slave_0: entered promiscuous mode [ 367.465337][ T8894] hsr_slave_1: entered promiscuous mode [ 367.471508][ T8894] debugfs: 'hsr0' already exists in 'hsr' [ 367.477427][ T8894] Cannot create hsr debugfs directory [ 367.735483][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 367.744964][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 367.753732][ T8964] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 367.773231][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 367.794858][ T5603] Bluetooth: hci1: command tx timeout [ 368.366845][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 368.375785][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 368.384631][ T8977] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 369.879324][ T5603] Bluetooth: hci1: command tx timeout [ 370.213447][ T8988] FAULT_INJECTION: forcing a failure. [ 370.213447][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 370.274251][ T8894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.293763][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.5.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.293793][ T8988] Tainted: [L]=SOFTLOCKUP [ 370.293798][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 370.293809][ T8988] Call Trace: [ 370.293815][ T8988] [ 370.293821][ T8988] dump_stack_lvl+0x100/0x190 [ 370.293848][ T8988] should_fail_ex.cold+0x5/0xa [ 370.293871][ T8988] should_failslab+0xc2/0x120 [ 370.293895][ T8988] __kmalloc_noprof+0xfc/0x820 [ 370.293917][ T8988] ? tomoyo_encode2+0xfb/0x3c0 [ 370.293939][ T8988] tomoyo_encode2+0xfb/0x3c0 [ 370.293959][ T8988] tomoyo_encode+0x29/0x50 [ 370.293974][ T8988] tomoyo_realpath_from_path+0x18c/0x690 [ 370.293997][ T8988] tomoyo_path_number_perm+0x23c/0x580 [ 370.294026][ T8988] ? tomoyo_path_number_perm+0x22e/0x580 [ 370.294052][ T8988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 370.294101][ T8988] ? find_held_lock+0x2b/0x80 [ 370.294117][ T8988] ? __fget_files+0x215/0x3d0 [ 370.294135][ T8988] ? hook_file_ioctl_common+0x140/0x440 [ 370.294154][ T8988] ? __fget_files+0x215/0x3d0 [ 370.294176][ T8988] ? __fget_files+0x21f/0x3d0 [ 370.294198][ T8988] security_file_ioctl+0xd3/0x230 [ 370.294225][ T8988] __x64_sys_ioctl+0xb7/0x210 [ 370.294253][ T8988] do_syscall_64+0x115/0x870 [ 370.294275][ T8988] ? clear_bhb_loop+0x70/0xc0 [ 370.294297][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.294315][ T8988] RIP: 0033:0x7fe71cf9e0d9 [ 370.294329][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.294345][ T8988] RSP: 002b:00007fe71ddf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.294363][ T8988] RAX: ffffffffffffffda RBX: 00007fe71d225fa0 RCX: 00007fe71cf9e0d9 [ 370.294375][ T8988] RDX: 0000200000000000 RSI: 0000000000005404 RDI: 0000000000000003 [ 370.294385][ T8988] RBP: 00007fe71ddf1090 R08: 0000000000000000 R09: 0000000000000000 [ 370.294395][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.294405][ T8988] R13: 00007fe71d226038 R14: 00007fe71d225fa0 R15: 00007ffe462df6d8 [ 370.294431][ T8988] [ 370.294582][ T8988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.526674][ T5795] usb 44-1: device descriptor read/8, error -110 [ 370.535013][ T8992] comedi comedi1: pcl724: I/O base address not correctly aligned [ 370.544818][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.552457][ T8894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 370.597583][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.614455][ T8894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.624255][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.633301][ T8894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 370.655459][ T8894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.671751][ T8996] binder: 8995:8996 ioctl c0306201 200000000080 returned -14 [ 370.680111][ T8996] binder: 8995:8996 ioctl c0306201 2000000003c0 returned -14 [ 370.782491][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.798988][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.811868][ T237] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.818988][ T237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.831582][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.838708][ T7686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.856196][ T5701] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 370.989502][ T5795] usb usb44-port1: attempt power cycle [ 371.039183][ T5701] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 371.064716][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.090058][ T9013] netlink: 76 bytes leftover after parsing attributes in process `syz.0.821'. [ 371.090378][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.111659][ T5701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.122037][ T5701] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.137314][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.202247][ T9018] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 371.244417][ T9018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.330428][ T9018] bond2: (slave ip6gretap1): making interface the new active one [ 371.334392][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 371.348722][ T9018] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 371.397702][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 371.434159][ T9022] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 371.466458][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.476004][ T9022] UDF-fs: Scanning with blocksize 512 failed [ 371.487361][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 371.498271][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 371.520970][ T9022] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 371.541031][ T9022] UDF-fs: Scanning with blocksize 1024 failed [ 371.556039][ T5795] usb usb44-port1: unable to enumerate USB device [ 371.577984][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 371.591807][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 371.608137][ T9022] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 371.616159][ T9022] UDF-fs: Scanning with blocksize 2048 failed [ 371.625645][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 371.635815][ T9022] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 371.646276][ T9022] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 371.653944][ T9022] UDF-fs: Scanning with blocksize 4096 failed [ 372.049867][ T5694] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 372.128386][ T9022] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 372.326673][ T5694] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 372.388398][ T5694] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.444080][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.532753][ T5694] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.651808][ T5694] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.783601][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.999714][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.013280][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.838239][ T5701] gud 2-1:1.0: probe with driver gud failed with error -71 [ 373.905441][ T5701] usb 2-1: USB disconnect, device number 27 [ 374.080546][ T8894] veth0_vlan: entered promiscuous mode [ 374.103093][ T8894] veth1_vlan: entered promiscuous mode [ 374.265435][ T9053] comedi comedi1: pcl724: I/O base address not correctly aligned [ 374.700487][ T8894] veth0_macvtap: entered promiscuous mode [ 374.719432][ T8894] veth1_macvtap: entered promiscuous mode [ 374.742272][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.839004][ T9058] comedi comedi1: pcl724: I/O base address not correctly aligned [ 375.042333][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.284953][ T7686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.380976][ T29] audit: type=1400 audit(1786539749.626:483): avc: denied { setopt } for pid=9062 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.402332][ T7686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.460532][ T7686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.483217][ T7686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.511824][ T5694] gud 6-1:1.0: probe with driver gud failed with error -71 [ 375.572794][ T29] audit: type=1400 audit(1786539749.816:484): avc: denied { mounton } for pid=9066 comm="syz.1.834" path="/170/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.575893][ T5694] usb 6-1: USB disconnect, device number 4 [ 375.609212][ T9067] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 375.618721][ T9067] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 375.674037][ T7682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.686570][ T7682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.744759][ T7686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.752823][ T7686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.873808][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.795'. [ 376.689332][ T29] audit: type=1400 audit(1786539750.936:485): avc: denied { name_bind } for pid=9082 comm="syz.6.838" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 376.821990][ T9085] tmpfs: Bad value for 'mpol' [ 376.914970][ T5794] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 376.991189][ T9085] bond1: entered promiscuous mode [ 377.030205][ T9085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.075163][ T5794] usb 6-1: Using ep0 maxpacket: 32 [ 377.107248][ T5794] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 377.150803][ T5794] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 377.226896][ T5794] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 377.279448][ T5794] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.317637][ T5794] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 377.347359][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.356472][ T5794] usb 6-1: Product: syz [ 377.365084][ T5794] usb 6-1: Manufacturer: syz [ 377.376782][ T5794] usb 6-1: SerialNumber: syz [ 377.410597][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 377.439733][ T5794] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input19 [ 377.635062][ T5794] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 377.665262][ T5794] (id 0x00) [ 377.669927][ T9097] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 377.734624][ T9100] comedi comedi1: pcl724: I/O base address not correctly aligned [ 378.240907][ T29] audit: type=1400 audit(1786539752.486:486): avc: denied { ioctl } for pid=9093 comm="syz.6.840" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.291381][ T5794] rc_core: IR keymap rc-imon-pad not found [ 378.311184][ T5794] Registered IR keymap rc-empty [ 378.317804][ T5794] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 379.550148][ T5794] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 379.677823][ T5794] imon:send_packet: packet tx failed (-71) [ 379.705180][ T5794] imon 6-1:155.0: remote input dev register failed [ 379.715368][ T5794] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 379.783553][ T5794] imon 6-1:155.0: unable to initialize intf0, err 0 [ 379.784816][ T9110] nvme_fabrics: missing parameter 'nqn=%s' [ 379.796022][ T5794] imon:imon_probe: failed to initialize context! [ 379.796040][ T5794] imon 6-1:155.0: unable to register, err -19 [ 379.802906][ T5794] usb 6-1: USB disconnect, device number 5 [ 379.822601][ T29] audit: type=1400 audit(1786539754.046:487): avc: denied { connect } for pid=9112 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.878426][ T29] audit: type=1400 audit(1786539754.106:488): avc: denied { accept } for pid=9114 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.943171][ T29] audit: type=1400 audit(1786539754.106:489): avc: denied { read } for pid=9114 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.092206][ T9121] fuse: Unknown parameter 'user_id00000000000000000000' [ 380.154702][ T29] audit: type=1400 audit(1786539754.396:490): avc: denied { write } for pid=9118 comm="syz.1.845" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 380.182412][ T29] audit: type=1400 audit(1786539754.426:491): avc: denied { ioctl } for pid=9118 comm="syz.1.845" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 380.445004][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 380.544843][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 380.644882][ T24] usb 2-1: device descriptor read/64, error -71 [ 380.715888][ T5603] Bluetooth: hci1: failed to read key size for handle 200 [ 381.116866][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 381.137726][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 381.206030][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 381.223025][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 381.237960][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.248445][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.261928][ T9] usb 6-1: config 0 descriptor?? [ 381.275924][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 381.634888][ T24] usb 2-1: device descriptor read/64, error -71 [ 381.719171][ T9149] comedi comedi1: pcl724: I/O base address not correctly aligned [ 381.758771][ T24] usb usb2-port1: attempt power cycle [ 382.215905][ T29] audit: type=1400 audit(1786539756.456:492): avc: denied { bind } for pid=9124 comm="syz.5.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.236719][ T9] hid (null): usage index exceeded [ 382.246948][ T9134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9134 comm=syz.0.851 [ 382.260324][ T9] lg-g15 0003:046D:C227.0002: unknown main item tag 0x3 [ 382.267956][ T9] lg-g15 0003:046D:C227.0002: ignoring exceeding usage max [ 382.276190][ T9] lg-g15 0003:046D:C227.0002: ignoring exceeding usage max [ 382.336859][ T9] lg-g15 0003:046D:C227.0002: usage index exceeded [ 382.355512][ T9] lg-g15 0003:046D:C227.0002: item 0 1 2 2 parsing failed [ 382.363226][ T9] lg-g15 0003:046D:C227.0002: probe with driver lg-g15 failed with error -22 [ 382.474935][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 382.500402][ T9155] netlink: 'syz.6.855': attribute type 4 has an invalid length. [ 382.510516][ T5795] usb 6-1: USB disconnect, device number 6 [ 382.520473][ T24] usb 2-1: device descriptor read/8, error -71 [ 382.775492][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 382.950223][ T24] usb 2-1: device descriptor read/8, error -71 [ 383.021055][ T29] audit: type=1400 audit(1786539757.266:493): avc: denied { getopt } for pid=9161 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 383.069626][ T9166] fuse: Unknown parameter 'user_id00000000000000000000' [ 383.075320][ T24] usb usb2-port1: unable to enumerate USB device [ 383.425834][ T5795] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 383.975086][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 384.055568][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 384.072967][ T5795] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 384.106226][ T9183] comedi comedi1: pcl724: I/O base address not correctly aligned [ 384.265940][ T5795] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 384.362718][ T5795] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 384.458343][ T5795] usb 6-1: config 0 interface 0 has no altsetting 0 [ 384.486030][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 384.490215][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.705414][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 384.803890][ T5795] usb 6-1: config 0 descriptor?? [ 384.819725][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.011473][ T9] usb 5-1: config 0 descriptor?? [ 385.062669][ T9173] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 385.651244][ T29] audit: type=1400 audit(1786539759.886:494): avc: denied { mount } for pid=9172 comm="syz.4.862" name="/" dev="ramfs" ino=27592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 385.754797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 385.773131][ T9168] Bluetooth: MGMT ver 1.23 [ 385.778826][ T9168] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 385.825704][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.825972][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 385.846411][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.856948][ T29] audit: type=1400 audit(1786539760.016:495): avc: denied { read write } for pid=9167 comm="syz.5.860" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 385.907013][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.918250][ T29] audit: type=1400 audit(1786539760.016:496): avc: denied { open } for pid=9167 comm="syz.5.860" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 385.993330][ T29] audit: type=1804 audit(1786539760.136:497): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.862" name="bus" dev="ramfs" ino=27777 res=1 errno=0 [ 386.022952][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 386.031859][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 386.040735][ T9203] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 386.404981][ T1209] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.433734][ T9] hid (null): invalid report_size 29797 [ 386.488766][ T5795] usbhid 6-1:0.0: can't add hid device: -71 [ 386.602128][ T5795] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 386.654719][ T1209] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 386.683348][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.765283][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.807383][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.849652][ T5795] usb 6-1: USB disconnect, device number 7 [ 386.872794][ T1209] usb 7-1: Product: syz [ 386.929378][ T1209] usb 7-1: Manufacturer: syz [ 386.995214][ T1209] usb 7-1: SerialNumber: syz [ 387.261310][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.271980][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.282892][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.290172][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.298713][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.306586][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.313940][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.321868][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.329467][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.336638][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.343849][ T9] uclogic 0003:5543:0064.0004: unknown main item tag 0x0 [ 387.355290][ T9] uclogic 0003:5543:0064.0004: invalid report_size 29797 [ 387.362353][ T9] uclogic 0003:5543:0064.0004: item 0 2 1 7 parsing failed [ 387.368909][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 387.370316][ T9] uclogic 0003:5543:0064.0004: parse failed [ 387.387437][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 387.388308][ T9] uclogic 0003:5543:0064.0004: probe with driver uclogic failed with error -22 [ 387.402864][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.419200][ T9] usb 5-1: USB disconnect, device number 19 [ 387.435446][ T1209] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 387.452346][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.479296][ T1209] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 387.586552][ T9212] fuse: Unknown parameter 'user_id00000000000000000000' [ 387.597107][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.610428][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.646433][ T9] usb 7-1: USB disconnect, device number 2 [ 389.167501][ T9229] comedi comedi1: pcl724: I/O base address not correctly aligned [ 389.742066][ T29] audit: type=1400 audit(1786539763.986:498): avc: denied { write } for pid=9223 comm="syz.4.879" path="socket:[28741]" dev="sockfs" ino=28741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 389.769494][ T9234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=77 sclass=netlink_route_socket pid=9234 comm=syz.6.882 [ 390.080309][ T9243] netlink: Conntrack attr has 4 unknown bytes [ 390.086585][ T9243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.802650][ T9245] 9p: Bad value for 'rfdno' [ 390.984998][ T5693] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 391.854892][ T5693] usb 7-1: device descriptor read/64, error -71 [ 391.942973][ T29] audit: type=1400 audit(1786539766.186:499): avc: denied { connect } for pid=9258 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.127396][ T5693] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 392.152004][ T29] audit: type=1400 audit(1786539766.306:500): avc: denied { listen } for pid=9258 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.211048][ T29] audit: type=1400 audit(1786539766.306:501): avc: denied { accept } for pid=9258 comm="syz.1.889" lport=53943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.263618][ T29] audit: type=1400 audit(1786539766.446:502): avc: denied { create } for pid=9265 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.274987][ T5693] usb 7-1: device descriptor read/64, error -71 [ 392.330222][ T29] audit: type=1400 audit(1786539766.456:503): avc: denied { ioctl } for pid=9267 comm="syz.0.892" path="socket:[28802]" dev="sockfs" ino=28802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.394881][ T1209] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 392.411486][ T29] audit: type=1400 audit(1786539766.616:504): avc: denied { name_bind } for pid=9269 comm="syz.4.893" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 392.470463][ T5693] usb usb7-port1: attempt power cycle [ 392.516501][ T29] audit: type=1400 audit(1786539766.616:505): avc: denied { node_bind } for pid=9269 comm="syz.4.893" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 392.555115][ T1209] usb 2-1: device descriptor read/64, error -71 [ 392.594702][ T29] audit: type=1400 audit(1786539766.616:506): avc: denied { mount } for pid=9269 comm="syz.4.893" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 392.642598][ T29] audit: type=1400 audit(1786539766.626:507): avc: denied { append } for pid=9269 comm="syz.4.893" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.745057][ T5795] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 392.827928][ T1209] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 392.908289][ T5795] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 392.924527][ T5795] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 392.975194][ T1209] usb 2-1: device descriptor read/64, error -71 [ 393.670202][ T5795] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.702995][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.730596][ T5795] usb 5-1: Product: syz [ 393.747264][ T5795] usb 5-1: Manufacturer: syz [ 393.763973][ T5795] usb 5-1: SerialNumber: syz [ 393.770620][ T1209] usb usb2-port1: attempt power cycle [ 393.774494][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.124890][ T5693] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 394.135837][ T1209] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 394.145354][ T5693] usb 7-1: Using ep0 maxpacket: 32 [ 394.220263][ T1209] usb 2-1: device descriptor read/8, error -71 [ 394.545265][ T1209] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 394.589200][ T5693] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 394.700852][ T5693] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 394.705648][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 394.709314][ T5693] usb 7-1: config 0 has no interface number 0 [ 394.726541][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.726566][ T5693] usb 7-1: Product: syz [ 394.726580][ T5693] usb 7-1: Manufacturer: syz [ 394.726594][ T5693] usb 7-1: SerialNumber: syz [ 394.752276][ T5693] usb 7-1: config 0 descriptor?? [ 394.764105][ T1209] usb 2-1: device descriptor read/8, error -71 [ 394.772979][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.774640][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.785574][ T9291] netlink: 'syz.0.898': attribute type 16 has an invalid length. [ 394.865979][ T1209] usb usb2-port1: unable to enumerate USB device [ 394.951860][ T5795] usb 5-1: invalid UAC_HEADER (v1) [ 395.061835][ T5795] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 395.116504][ T5795] usb 5-1: USB disconnect, device number 20 [ 395.142494][ T9051] udevd[9051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.297837][ T9303] netlink: Conntrack attr has 4 unknown bytes [ 395.303961][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.509084][ T5693] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 395.519055][ T1209] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 395.539667][ T5693] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 395.655642][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 395.655666][ T29] audit: type=1400 audit(1786539769.906:515): avc: denied { read write } for pid=9309 comm="syz.1.905" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.689528][ T29] audit: type=1400 audit(1786539769.906:516): avc: denied { open } for pid=9309 comm="syz.1.905" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.714461][ T1209] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 395.724633][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.821909][ T1209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.833526][ T1209] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.843622][ T1209] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.860261][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.994909][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 396.128551][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.145393][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.155557][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.182304][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.203496][ T5693] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 396.228489][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.254487][ T5693] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 396.267675][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.278187][ T9] usb 2-1: Product: syz [ 396.283137][ T9] usb 2-1: Manufacturer: syz [ 396.294465][ T5693] usb 7-1: USB disconnect, device number 5 [ 396.317571][ T9] usb 2-1: SerialNumber: syz [ 396.473569][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 399.012256][ T9] cdc_ncm 2-1:1.0: bind() failure [ 399.082290][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 399.679790][ T1209] gud 6-1:1.0: probe with driver gud failed with error -71 [ 399.781390][ T29] audit: type=1400 audit(1786539773.986:517): avc: denied { create } for pid=9311 comm="syz.1.906" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 399.955603][ T9] cdc_ncm 2-1:1.1: bind() failure [ 400.107165][ T1209] usb 6-1: USB disconnect, device number 8 [ 400.121232][ T29] audit: type=1400 audit(1786539773.996:518): avc: denied { mounton } for pid=9311 comm="syz.1.906" path="/184/file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.648894][ T9350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9350 comm=syz.6.916 [ 400.989527][ T1209] usb 2-1: USB disconnect, device number 36 [ 401.111776][ T29] audit: type=1400 audit(1786539775.356:519): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 401.147204][ T9356] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.227407][ T29] audit: type=1400 audit(1786539775.476:520): avc: denied { mounton } for pid=9359 comm="syz.4.920" path="/182/tracing/uprobe_events" dev="tracefs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 402.079477][ T29] audit: type=1400 audit(1786539776.306:521): avc: denied { write } for pid=9365 comm="syz.6.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 402.101970][ T9360] 9p: Could not find request transport: rDma$port=0x0000000000004e22 [ 403.400290][ T9389] fuse: Unknown parameter 'user_id00000000000000000000' [ 403.529252][ T9395] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 403.547099][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.930'. [ 403.705053][ T5795] IPVS: starting estimator thread 0... [ 403.934661][ T9404] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 403.941167][ T9404] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 403.984845][ T9403] IPVS: using max 75 ests per chain, 180000 per kthread [ 404.030283][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9408 comm=syz.0.931 [ 404.046041][ T9404] vhci_hcd vhci_hcd.0: Device attached [ 404.228845][ T29] audit: type=1400 audit(1786539778.476:522): avc: denied { ioctl } for pid=9414 comm="syz.6.935" path="socket:[29193]" dev="sockfs" ino=29193 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.314889][ T5795] usb 42-1: SetAddress Request (14) to port 0 [ 404.324704][ T5795] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 404.535200][ T1209] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 404.551425][ T9405] vhci_hcd: connection reset by peer [ 404.696152][ T1209] usb 7-1: device descriptor read/64, error -71 [ 404.954967][ T1209] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 405.198367][ T1209] usb 7-1: device descriptor read/64, error -71 [ 405.293614][ T101] vhci_hcd vhci_hcd.4: stop threads [ 405.312770][ T101] vhci_hcd vhci_hcd.4: release socket [ 405.344198][ T101] vhci_hcd vhci_hcd.4: disconnect device [ 405.361833][ T1209] usb usb7-port1: attempt power cycle [ 405.386844][ T29] audit: type=1400 audit(1786539779.596:523): avc: denied { associate } for pid=9425 comm="syz.5.938" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 405.744842][ T1209] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 406.189021][ T1209] usb 7-1: device descriptor read/8, error -71 [ 406.345872][ T9435] futex_wake_op: syz.1.941 tries to shift op by 144; fix this program [ 406.435119][ T1209] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 406.492027][ T9443] netlink: Conntrack attr has 4 unknown bytes [ 406.498326][ T9443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.916722][ T1209] usb 7-1: device descriptor read/8, error -71 [ 407.025230][ T1209] usb usb7-port1: unable to enumerate USB device [ 407.479617][ T9460] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 408.406243][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 408.458717][ T9470] netlink: 'syz.1.950': attribute type 11 has an invalid length. [ 409.617666][ T9475] random: crng reseeded on system resumption [ 409.664215][ T29] audit: type=1400 audit(1786539783.866:524): avc: denied { write } for pid=9472 comm="syz.6.952" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.824845][ T5795] usb 42-1: device descriptor read/8, error -110 [ 409.890303][ T9452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9452 comm=syz.4.947 [ 409.909034][ T29] audit: type=1400 audit(1786539783.866:525): avc: denied { open } for pid=9472 comm="syz.6.952" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.954052][ T9477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.953'. [ 410.155551][ T29] audit: type=1400 audit(1786539784.396:526): avc: denied { map } for pid=9476 comm="syz.1.953" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.233345][ T29] audit: type=1400 audit(1786539784.476:527): avc: denied { ioctl } for pid=9472 comm="syz.6.952" path="socket:[29380]" dev="sockfs" ino=29380 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 410.521156][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.955'. [ 410.549058][ T5795] usb usb42-port1: attempt power cycle [ 410.555164][ T9488] netlink: 'syz.5.955': attribute type 11 has an invalid length. [ 411.128256][ T5795] usb usb42-port1: unable to enumerate USB device [ 411.436642][ T9487] bond1: left promiscuous mode [ 411.448773][ T29] audit: type=1400 audit(1786539785.696:528): avc: denied { nlmsg_read } for pid=9476 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 411.538576][ T9494] netlink: Conntrack attr has 4 unknown bytes [ 411.544741][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.559979][ T29] audit: type=1400 audit(1786539785.776:529): avc: denied { mount } for pid=9491 comm="syz.4.957" name="/" dev="rpc_pipefs" ino=29393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 412.215964][ T9497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 412.222493][ T9497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.281766][ T9497] vhci_hcd vhci_hcd.0: Device attached [ 412.394861][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 412.477461][ T9500] vhci_hcd: connection closed [ 412.477756][ T237] vhci_hcd vhci_hcd.0: stop threads [ 412.497566][ T237] vhci_hcd vhci_hcd.0: release socket [ 412.511318][ T237] vhci_hcd vhci_hcd.0: disconnect device [ 412.554859][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 412.564292][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 412.577503][ T5795] usb 34-1: enqueue for inactive port 0 [ 412.593799][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 412.613171][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 412.634528][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 412.645341][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.660295][ T9] usb 6-1: config 0 descriptor?? [ 412.705220][ T1209] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 412.834960][ T5794] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 412.854942][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 412.860659][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 412.871607][ T1209] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 412.890791][ T1209] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 412.924820][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 412.944830][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.965714][ T1209] usb 5-1: config 0 descriptor?? [ 412.985442][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 412.991353][ T5794] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 413.004576][ T5794] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 413.014255][ T5794] usb 2-1: config 0 has no interface number 0 [ 413.022916][ T5794] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 413.037621][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.048332][ T5794] usb 2-1: Product: syz [ 413.162827][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.963'. [ 413.189807][ T9514] netlink: 'syz.6.963': attribute type 11 has an invalid length. [ 413.212292][ T5795] usb usb34-port1: attempt power cycle [ 413.264478][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 413.299161][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 413.577521][ T9] usb 6-1: USB disconnect, device number 9 [ 413.871722][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 413.880446][ T5794] usb 2-1: Manufacturer: syz [ 413.885451][ T1209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 413.893228][ T5794] usb 2-1: SerialNumber: syz [ 413.902931][ T5794] usb 2-1: config 0 descriptor?? [ 413.911186][ T1209] usb 5-1: USB disconnect, device number 21 [ 413.926807][ T5794] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 413.947982][ T5794] em28xx 2-1:0.132: Video interface 132 found: [ 414.177143][ T29] audit: type=1400 audit(1786539788.356:530): avc: denied { write } for pid=9521 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.299593][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 414.319723][ T9522] netlink: 'syz.0.967': attribute type 14 has an invalid length. [ 414.344878][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 414.470642][ T5795] usb usb34-port1: unable to enumerate USB device [ 414.508492][ T5794] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 415.082802][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.962'. [ 415.091827][ T8061] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.127804][ T8061] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.157626][ T8061] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.193986][ T8061] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.204950][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 415.215489][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.245865][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 415.273469][ T9] usb 6-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 415.339193][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 415.355688][ T5794] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 415.381053][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.814287][ T9516] jffs2: notice: (9516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 416.109330][ T29] audit: type=1400 audit(1786539790.356:531): avc: denied { mount } for pid=9515 comm="syz.5.964" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 416.277258][ T5794] em28xx 2-1:0.132: board has no eeprom [ 416.325961][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.357496][ T5794] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 416.367560][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.399617][ T29] audit: type=1400 audit(1786539790.646:532): avc: denied { read } for pid=5260 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 416.434403][ T5794] em28xx 2-1:0.132: analog set to bulk mode. [ 416.472568][ T5795] em28xx 2-1:0.132: Registering V4L2 extension [ 416.498883][ T5794] usb 2-1: USB disconnect, device number 37 [ 416.522023][ T5794] em28xx 2-1:0.132: Disconnecting em28xx [ 416.565949][ T9] usb 6-1: USB disconnect, device number 10 [ 416.568800][ T29] audit: type=1400 audit(1786539790.816:533): avc: denied { watch_mount watch_reads } for pid=9544 comm="syz.4.973" path="/189" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 416.685674][ T29] audit: type=1400 audit(1786539790.886:534): avc: denied { create } for pid=9550 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 416.765221][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 416.780096][ T29] audit: type=1400 audit(1786539790.966:535): avc: denied { sys_admin } for pid=9550 comm="syz.0.974" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 416.838279][ T5795] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 416.855067][ T5795] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 416.878366][ T5795] em28xx 2-1:0.132: No AC97 audio processor [ 416.916019][ T5795] usb 2-1: Decoder not found [ 416.945774][ T5795] em28xx 2-1:0.132: failed to create media graph [ 416.973979][ T5795] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 416.980880][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 417.003040][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 417.021531][ T5795] em28xx 2-1:0.132: Remote control support is not available for this card. [ 417.047424][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 417.071064][ T5794] em28xx 2-1:0.132: Closing input extension [ 417.081163][ T24] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 417.124049][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 417.154259][ T5794] em28xx 2-1:0.132: Freeing device [ 417.159475][ T29] audit: type=1400 audit(1786539791.396:536): avc: denied { write } for pid=9559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.182868][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.234710][ T24] usb 7-1: config 0 descriptor?? [ 417.278483][ T29] audit: type=1400 audit(1786539791.456:537): avc: denied { unmount } for pid=8498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 417.413344][ T29] audit: type=1400 audit(1786539791.656:538): avc: denied { write } for pid=9580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.451378][ T9585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 417.457916][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 417.484689][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 417.513536][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 417.756432][ T5794] usb 36-1: SetAddress Request (14) to port 0 [ 418.270639][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 418.278515][ T5794] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 418.289039][ T24] usb 7-1: USB disconnect, device number 10 [ 418.722719][ T9601] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 419.842334][ T9609] fuse: Unknown parameter 'user_id00000000000000000000' [ 420.173328][ T9613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9613 comm=syz.5.981 [ 420.354526][ T29] audit: type=1400 audit(1786539794.596:539): avc: denied { write } for pid=9593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.392736][ T9586] vhci_hcd: connection reset by peer [ 420.405279][ T13] vhci_hcd vhci_hcd.1: stop threads [ 420.413798][ T13] vhci_hcd vhci_hcd.1: release socket [ 420.422752][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 420.524883][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 420.566891][ T29] audit: type=1400 audit(1786539794.816:540): avc: denied { write } for pid=9623 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.760991][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 420.778645][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.917733][ T9633] comedi comedi1: pcl724: I/O base address not correctly aligned [ 421.472328][ T9] cxacru_cm: 1 callbacks suppressed [ 421.472343][ T9] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 421.582665][ T9639] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 422.373125][ T9646] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 422.379665][ T9646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 422.459177][ T9639] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 422.460180][ T29] audit: type=1400 audit(1786539796.706:542): avc: denied { firmware_load } for pid=9639 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 422.857078][ T29] audit: type=1400 audit(1786539796.826:543): avc: denied { read } for pid=9652 comm="syz.1.992" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 422.882014][ T9646] vhci_hcd vhci_hcd.0: Device attached [ 423.102832][ T29] audit: type=1400 audit(1786539796.826:544): avc: denied { open } for pid=9652 comm="syz.1.992" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 423.166053][ T24] usb 44-1: SetAddress Request (6) to port 0 [ 423.184047][ T24] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 423.372518][ T9672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.996'. [ 423.387871][ T9672] netlink: 'syz.0.996': attribute type 2 has an invalid length. [ 423.396208][ T5794] usb 36-1: device descriptor read/8, error -110 [ 423.406853][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 423.476235][ T9675] netlink: 25 bytes leftover after parsing attributes in process `syz.0.996'. [ 423.510150][ T5693] lo speed is unknown, defaulting to 1000 [ 423.516582][ T5693] syz2: Port: 1 Link DOWN [ 423.581573][ T5795] usb 5-1: USB disconnect, device number 22 [ 423.788581][ T9672] : entered promiscuous mode [ 423.795743][ T5794] usb usb36-port1: attempt power cycle [ 423.798469][ T29] audit: type=1400 audit(1786539798.046:545): avc: denied { write } for pid=9678 comm="syz.4.998" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 423.826345][ T46] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 423.894457][ T9686] comedi comedi1: pcl724: I/O base address not correctly aligned [ 424.420692][ T9688] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 424.431199][ T9647] vhci_hcd: connection reset by peer [ 424.439396][ T13] vhci_hcd vhci_hcd.5: stop threads [ 424.445651][ T13] vhci_hcd vhci_hcd.5: release socket [ 424.451324][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 424.591184][ T46] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 425.085449][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.114398][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.137506][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 425.148250][ T9688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9688 comm=syz.4.1000 [ 425.161425][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.178120][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.302152][ T5794] usb usb36-port1: unable to enumerate USB device [ 425.364881][ T1209] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 425.791968][ T1209] usb 7-1: Using ep0 maxpacket: 32 [ 426.516039][ T1209] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 426.527599][ T1209] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 426.539363][ T1209] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 426.552949][ T1209] usb 7-1: config 0 interface 0 has no altsetting 0 [ 426.559675][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.580862][ T1209] usb 7-1: config 0 descriptor?? [ 426.625916][ T46] usb 2-1: USB disconnect, device number 38 [ 426.772395][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'. [ 426.832077][ T9709] netlink: 'syz.5.1005': attribute type 11 has an invalid length. [ 426.866494][ T9698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9698 comm=syz.0.1003 [ 427.023753][ T9696] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 427.388506][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.486113][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.497825][ T46] hid_parser_main: 103 callbacks suppressed [ 427.497844][ T46] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 427.921346][ T46] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.947051][ T1209] usbhid 7-1:0.0: can't add hid device: -71 [ 427.963626][ T1209] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 427.992084][ T1209] usb 7-1: USB disconnect, device number 11 [ 428.309602][ T24] usb 44-1: device descriptor read/8, error -110 [ 428.524937][ T5694] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 428.687875][ T5694] usb 6-1: Using ep0 maxpacket: 8 [ 428.728279][ T5694] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 428.770142][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.783670][ T5694] usb 6-1: Product: syz [ 428.796527][ T5694] usb 6-1: Manufacturer: syz [ 428.811832][ T5694] usb 6-1: SerialNumber: syz [ 428.870413][ T5694] usb 6-1: config 0 descriptor?? [ 428.920975][ T5694] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 429.545678][ T9732] comedi comedi1: pcl724: I/O base address not correctly aligned [ 429.617693][ T24] usb usb44-port1: attempt power cycle [ 430.340231][ T24] usb usb44-port1: unable to enumerate USB device [ 430.950214][ T9738] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 431.055847][ T9738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9738 comm=syz.6.1014 [ 431.093209][ T5694] gspca_sonixj: reg_r err -71 [ 431.150062][ T5694] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 431.206749][ T5694] usb 6-1: USB disconnect, device number 11 [ 431.408480][ T9744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 431.415020][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.442871][ T9744] vhci_hcd vhci_hcd.0: Device attached [ 431.552438][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 431.592852][ T29] audit: type=1400 audit(1786539805.836:546): avc: denied { audit_write } for pid=9742 comm="syz.4.1015" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.725196][ T24] usb 34-1: SetAddress Request (14) to port 0 [ 431.735305][ T24] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 431.796172][ T9750] fuse: Bad value for 'fd' [ 432.052837][ T9755] netlink: Conntrack attr has 4 unknown bytes [ 432.059169][ T9755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.744184][ T9745] vhci_hcd: connection reset by peer [ 432.782963][ T237] vhci_hcd vhci_hcd.0: stop threads [ 432.821385][ T237] vhci_hcd vhci_hcd.0: release socket [ 432.841577][ T1209] IPVS: starting estimator thread 0... [ 432.876946][ T237] vhci_hcd vhci_hcd.0: disconnect device [ 432.994857][ T9758] IPVS: using max 46 ests per chain, 110400 per kthread [ 433.443450][ T29] audit: type=1400 audit(1786539807.686:547): avc: denied { read write } for pid=9764 comm="syz.5.1021" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 433.468500][ T9765] MTRR 1 not used [ 433.825277][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 433.834132][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 433.842993][ T9770] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 434.716302][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.722625][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.738041][ T29] audit: type=1400 audit(1786539807.716:548): avc: denied { open } for pid=9764 comm="syz.5.1021" path="/48/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 434.765587][ T29] audit: type=1400 audit(1786539807.716:549): avc: denied { ioctl } for pid=9764 comm="syz.5.1021" path="/48/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 434.933697][ T9778] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1022'. [ 434.949118][ T9778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.021616][ T9779] comedi comedi1: pcl724: I/O base address not correctly aligned [ 435.529854][ T9787] Bluetooth: MGMT ver 1.23 [ 435.590765][ T9788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9788 comm=syz.0.1027 [ 435.630673][ T9792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9792 comm=syz.5.1025 [ 435.709965][ T5794] hid-generic 0005:10CF:5505.0006: item fetching failed at offset 0/1 [ 435.741697][ T5794] hid-generic 0005:10CF:5505.0006: probe with driver hid-generic failed with error -22 [ 437.130671][ T24] usb 34-1: device descriptor read/8, error -110 [ 438.127241][ T24] usb usb34-port1: attempt power cycle [ 438.210208][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 438.219300][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 438.228193][ T9817] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 438.715520][ T24] usb usb34-port1: unable to enumerate USB device [ 438.841901][ T9824] netlink: Conntrack attr has 4 unknown bytes [ 438.848184][ T9824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.585693][ T29] audit: type=1400 audit(1786539813.836:550): avc: denied { setopt } for pid=9822 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.671076][ T29] audit: type=1400 audit(1786539813.856:551): avc: denied { listen } for pid=9822 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 441.022781][ T5694] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 441.258910][ T9849] comedi comedi1: pcl724: I/O base address not correctly aligned [ 441.355009][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 441.361460][ T5694] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.375507][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 441.386883][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 441.401341][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.430686][ T5694] usb 6-1: config 0 descriptor?? [ 441.447417][ T5694] hub 6-1:0.0: USB hub found [ 441.546344][ T9843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9843 comm=syz.1.1042 [ 441.847953][ T5694] hub 6-1:0.0: 1 port detected [ 442.196674][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 442.205868][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 442.214715][ T9870] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 442.224225][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 442.305103][ T9872] fuse: Unknown parameter 'user_id00000000000000000000' [ 442.404831][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 442.414022][ T9873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 442.420555][ T9873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.431406][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 442.442879][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 442.457136][ T9873] vhci_hcd vhci_hcd.0: Device attached [ 442.512567][ T24] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 442.550003][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 442.557622][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 442.572714][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.611691][ T5694] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 442.620221][ T24] usb 7-1: config 0 descriptor?? [ 442.647328][ T5693] usb 6-1: USB disconnect, device number 12 [ 442.725177][ T9065] usb 42-1: SetAddress Request (18) to port 0 [ 442.743796][ T9065] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 442.809867][ T9875] vhci_hcd: connection reset by peer [ 442.838899][ T7682] vhci_hcd vhci_hcd.4: stop threads [ 442.852102][ T7682] vhci_hcd vhci_hcd.4: release socket [ 442.861605][ T7682] vhci_hcd vhci_hcd.4: disconnect device [ 442.867574][ T9864] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 442.891025][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.891328][ T46] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 442.901326][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.950775][ T46] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.155003][ T1209] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 443.170100][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 443.177823][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 443.189736][ T24] usb 7-1: USB disconnect, device number 12 [ 443.384418][ T29] audit: type=1400 audit(1786539817.626:552): avc: denied { wake_alarm } for pid=9889 comm="syz.0.1054" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 443.477191][ T9891] netlink: Conntrack attr has 4 unknown bytes [ 443.483385][ T9891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.853588][ T1209] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 443.885024][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.903119][ T1209] usb 2-1: Product: syz [ 443.918409][ T1209] usb 2-1: Manufacturer: syz [ 443.932744][ T1209] usb 2-1: SerialNumber: syz [ 443.956769][ T1209] usb 2-1: config 0 descriptor?? [ 444.215353][ T1209] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 444.415539][ T1209] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 444.577780][ T1209] usb 2-1: USB disconnect, device number 39 [ 445.106747][ T9925] vlan2: entered promiscuous mode [ 445.117594][ T9925] hsr0: entered promiscuous mode [ 445.129664][ T9925] vlan2: entered allmulticast mode [ 445.137584][ T9925] hsr0: entered allmulticast mode [ 445.142715][ T9925] hsr_slave_0: entered allmulticast mode [ 445.149812][ T9925] hsr_slave_1: entered allmulticast mode [ 445.212163][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 445.221546][ T9925] hsr_slave_0: left promiscuous mode [ 445.231745][ T9925] hsr_slave_1: left promiscuous mode [ 445.398916][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 445.408862][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 445.419278][ T9932] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 445.555851][ T9677] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 445.787873][ T9677] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 446.362308][ T9677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 446.406697][ T9677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.495270][ T9937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.502525][ T9937] IPv6: NLM_F_CREATE should be set when creating new route [ 446.575575][ T29] audit: type=1400 audit(1786539820.816:553): avc: denied { bind } for pid=9936 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.604971][ T29] audit: type=1400 audit(1786539820.826:554): avc: denied { connect } for pid=9936 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.812498][ T9931] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1065'. [ 446.821642][ T9931] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 447.910128][ T9065] usb 42-1: device descriptor read/8, error -110 [ 448.255338][ T9677] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -71 [ 448.435250][ T9065] usb usb42-port1: attempt power cycle [ 448.534739][ T9677] usb 2-1: USB disconnect, device number 40 [ 448.555028][ T5693] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 448.576553][ T9958] 9p: Bad value for 'wfdno' [ 448.590780][ T9958] FAULT_INJECTION: forcing a failure. [ 448.590780][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.603990][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.1.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.604018][ T9958] Tainted: [L]=SOFTLOCKUP [ 448.604024][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.604034][ T9958] Call Trace: [ 448.604041][ T9958] [ 448.604047][ T9958] dump_stack_lvl+0x100/0x190 [ 448.604076][ T9958] should_fail_ex.cold+0x5/0xa [ 448.604100][ T9958] _copy_from_user+0x2e/0xd0 [ 448.604126][ T9958] do_ipt_set_ctl+0xa09/0xcf0 [ 448.604151][ T9958] ? nf_sockopt_find.isra.0+0x222/0x290 [ 448.604173][ T9958] ? nf_sockopt_find.isra.0+0x222/0x290 [ 448.604198][ T9958] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 448.604222][ T9958] ? __mutex_unlock_slowpath+0x35d/0x930 [ 448.604248][ T9958] ? sockopt_release_sock+0x5c/0x70 [ 448.604274][ T9958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.604308][ T9958] ? nf_sockopt_find.isra.0+0x222/0x290 [ 448.604332][ T9958] nf_setsockopt+0x8d/0xf0 [ 448.604356][ T9958] ip_setsockopt+0xcb/0xf0 [ 448.604383][ T9958] udp_setsockopt+0x64/0xb0 [ 448.604405][ T9958] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 448.604434][ T9958] do_sock_setsockopt+0xf3/0x1d0 [ 448.604463][ T9958] __sys_setsockopt+0x195/0x220 [ 448.604490][ T9958] __x64_sys_setsockopt+0xbd/0x160 [ 448.604511][ T9958] ? do_syscall_64+0x90/0x870 [ 448.604534][ T9958] ? lockdep_hardirqs_on+0x78/0x100 [ 448.604557][ T9958] do_syscall_64+0x115/0x870 [ 448.604579][ T9958] ? clear_bhb_loop+0x70/0xc0 [ 448.604602][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.604620][ T9958] RIP: 0033:0x7fde6e39e0d9 [ 448.604635][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.604652][ T9958] RSP: 002b:00007fde6f2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 448.604670][ T9958] RAX: ffffffffffffffda RBX: 00007fde6e626090 RCX: 00007fde6e39e0d9 [ 448.604681][ T9958] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 448.604691][ T9958] RBP: 00007fde6f2ab090 R08: 0000000000000500 R09: 0000000000000000 [ 448.604702][ T9958] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 448.604711][ T9958] R13: 00007fde6e626128 R14: 00007fde6e626090 R15: 00007ffe846adfd8 [ 448.604735][ T9958] [ 448.764864][ T5693] usb 1-1: device descriptor read/64, error -71 [ 449.045153][ T29] audit: type=1400 audit(1786539823.276:555): avc: denied { read } for pid=9959 comm="syz.6.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.045846][ T9065] usb usb42-port1: unable to enumerate USB device [ 449.374467][ T29] audit: type=1400 audit(1786539823.616:556): avc: denied { create } for pid=9961 comm="syz.5.1075" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 449.423269][ T9965] fuse: Bad value for 'fd' [ 449.425617][ T9963] jffs2: notice: (9963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 449.500135][ T29] audit: type=1400 audit(1786539823.726:557): avc: denied { name_bind } for pid=9961 comm="syz.5.1075" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 449.595057][ T5693] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 449.734978][ T5693] usb 1-1: device descriptor read/64, error -71 [ 449.845895][ T5693] usb usb1-port1: attempt power cycle [ 450.197556][ T5693] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 450.247094][ T5693] usb 1-1: device descriptor read/8, error -71 [ 450.592312][ T5693] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 450.626938][ T5693] usb 1-1: device descriptor read/8, error -71 [ 450.707718][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'. [ 450.716837][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'. [ 450.725841][ T9980] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 450.736188][ T9065] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 450.744865][ T5693] usb usb1-port1: unable to enumerate USB device [ 450.946518][ T9065] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 452.161532][ T9065] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.171962][ T9065] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.181017][ T9065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.191304][ T9065] usb 7-1: config 0 descriptor?? [ 452.199320][ T9065] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.209389][ T9065] dvb-usb: bulk message failed: -22 (3/0) [ 452.219038][ T9065] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.233344][ T9065] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.241223][ T9065] usb 7-1: media controller created [ 452.247727][ T9065] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.266704][ T9065] dvb-usb: bulk message failed: -22 (6/0) [ 452.273288][ T9065] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.287109][ T9065] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21 [ 452.302218][ T9065] dvb-usb: schedule remote query interval to 150 msecs. [ 452.309437][ T9065] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 452.475201][ T9065] dvb-usb: bulk message failed: -22 (1/0) [ 452.481614][ T9065] dvb-usb: error while querying for an remote control event. [ 452.771503][ T9991] comedi comedi1: pcl724: I/O base address not correctly aligned [ 452.799729][ T9065] dvb-usb: bulk message failed: -22 (1/0) [ 452.813784][ T9065] dvb-usb: error while querying for an remote control event. [ 452.838850][ T9973] dvb-usb: bulk message failed: -22 (2/0) [ 452.868041][ T46] usb 7-1: USB disconnect, device number 13 [ 452.918962][ T46] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 453.446174][T10013] netlink: Conntrack attr has 4 unknown bytes [ 453.452627][T10013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.074988][ T29] audit: type=1400 audit(1786539828.296:558): avc: denied { write } for pid=10018 comm="syz.6.1094" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 454.108677][ T29] audit: type=1400 audit(1786539828.296:559): avc: denied { open } for pid=10018 comm="syz.6.1094" path="/59/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 454.175548][T10025] binder: 10016:10025 ioctl c0306201 0 returned -14 [ 454.240992][ T29] audit: type=1400 audit(1786539828.416:560): avc: denied { map } for pid=10016 comm="syz.1.1093" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.268291][ T29] audit: type=1400 audit(1786539828.426:561): avc: denied { ioctl } for pid=10016 comm="syz.1.1093" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 454.272441][T10030] fuse: Unknown parameter 'user_id00000000000000000000' [ 454.535061][ T24] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 454.705060][ T24] usb 2-1: device descriptor read/64, error -71 [ 454.937984][T10039] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 454.947057][ T24] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 455.055719][T10039] @0Ù: renamed from bond_slave_1 (while UP) [ 455.138914][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1101'. [ 455.211441][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 455.269599][T10044] netlink: 'syz.0.1102': attribute type 11 has an invalid length. [ 455.286363][ T24] usb 2-1: device descriptor read/64, error -71 [ 455.349978][T10042] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 455.412278][ T24] usb usb2-port1: attempt power cycle [ 455.585391][T10048] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 455.755024][ T24] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 455.798403][ T24] usb 2-1: device descriptor read/8, error -71 [ 456.088805][ T24] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 456.208643][ T24] usb 2-1: device descriptor read/8, error -71 [ 456.229291][T10049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=10049 comm=syz.5.1103 [ 456.376268][ T24] usb usb2-port1: unable to enumerate USB device [ 457.703253][T10065] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 457.715315][T10065] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 457.723707][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.4.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.734818][T10065] Tainted: [L]=SOFTLOCKUP [ 457.739125][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 457.749247][T10065] RIP: 0010:subdev_open+0x193/0x510 [ 457.754431][T10065] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 [ 457.774017][T10065] RSP: 0018:ffffc9000f1978a0 EFLAGS: 00010246 [ 457.780061][T10065] RAX: dffffc0000000000 RBX: ffff88807e4fc000 RCX: ffffc9000f783000 [ 457.788007][T10065] RDX: 0000000000000000 RSI: ffffffff88170d93 RDI: ffff88802e43c3d0 [ 457.795963][T10065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 457.803907][T10065] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d99e820 [ 457.811852][T10065] R13: ffff88802e959000 R14: ffff88807f72ce00 R15: ffff88807e4fc138 [ 457.819798][T10065] FS: 00007fd2dc4166c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 457.828710][T10065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.835268][T10065] CR2: 0000001b32421ff6 CR3: 000000005ad78000 CR4: 00000000003526f0 [ 457.843213][T10065] Call Trace: [ 457.846472][T10065] [ 457.849393][T10065] v4l2_open+0x1d2/0x490 [ 457.853621][T10065] ? __pfx_v4l2_open+0x10/0x10 [ 457.858366][T10065] chrdev_open+0x234/0x6a0 [ 457.862766][T10065] ? __pfx_chrdev_open+0x10/0x10 [ 457.867676][T10065] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 457.873981][T10065] do_dentry_open+0x6ab/0x14d0 [ 457.878729][T10065] ? __pfx_chrdev_open+0x10/0x10 [ 457.883652][T10065] vfs_open+0x82/0x3f0 [ 457.887706][T10065] path_openat+0x2873/0x4280 [ 457.892279][T10065] ? __pfx_path_openat+0x10/0x10 [ 457.897209][T10065] do_file_open+0x20e/0x430 [ 457.901700][T10065] ? __pfx_do_file_open+0x10/0x10 [ 457.906701][T10065] ? alloc_fd+0x471/0x7a0 [ 457.911008][T10065] ? do_getname+0x191/0x390 [ 457.915504][T10065] do_sys_openat2+0x10f/0x1e0 [ 457.920157][T10065] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.925335][T10065] ? irqentry_exit+0x24d/0xa00 [ 457.930081][T10065] __x64_sys_openat+0x12d/0x210 [ 457.934910][T10065] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.940256][T10065] do_syscall_64+0x115/0x870 [ 457.944825][T10065] ? clear_bhb_loop+0x70/0xc0 [ 457.949497][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.955367][T10065] RIP: 0033:0x7fd2db55e90e [ 457.959755][T10065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.979342][T10065] RSP: 002b:00007fd2dc415b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.987733][T10065] RAX: ffffffffffffffda RBX: 00007fd2dc4166c0 RCX: 00007fd2db55e90e [ 457.995700][T10065] RDX: 0000000000000000 RSI: 00007fd2dc415c00 RDI: ffffffffffffff9c [ 458.003659][T10065] RBP: 00007fd2dc415c00 R08: 0000000000000000 R09: 0000000000000000 [ 458.011613][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 458.019564][T10065] R13: 00007fd2db826218 R14: 00007fd2db826180 R15: 00007fffda6c6ce8 [ 458.027532][T10065] [ 458.030530][T10065] Modules linked in: [ 458.035448][T10065] ---[ end trace 0000000000000000 ]--- [ 458.041492][T10065] RIP: 0010:subdev_open+0x193/0x510 [ 458.046782][T10065] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 [ 458.066691][T10065] RSP: 0018:ffffc9000f1978a0 EFLAGS: 00010246 [ 458.072774][T10065] RAX: dffffc0000000000 RBX: ffff88807e4fc000 RCX: ffffc9000f783000 [ 458.080765][T10065] RDX: 0000000000000000 RSI: ffffffff88170d93 RDI: ffff88802e43c3d0 [ 458.088738][T10065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 458.096710][T10065] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d99e820 [ 458.104654][T10065] R13: ffff88802e959000 R14: ffff88807f72ce00 R15: ffff88807e4fc138 [ 458.112645][T10065] FS: 00007fd2dc4166c0(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 458.121654][T10065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.128270][T10065] CR2: 00007fe71ddf1990 CR3: 000000005ad78000 CR4: 00000000003526f0 [ 458.136276][T10065] Kernel panic - not syncing: Fatal exception [ 458.142539][T10065] Kernel Offset: disabled [ 458.146838][T10065] Rebooting in 86400 seconds..