last executing test programs: 2m34.874000266s ago: executing program 4 (id=724): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) dup3(0xffffffffffffffff, r0, 0x80000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (async) ppoll(0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) (async) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) (async) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 2m34.750129503s ago: executing program 4 (id=727): setregid(0xee01, 0x0) r0 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x5012a0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0x3, 0x80, 0x0, 0x8000006, 0x1000002, "550000000100", "5922b1fa", "0725ebde", '\'q6O', ["2f7984214422244777b5e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "000000eaff01001b00800001"]}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x7, @vbi={0xa67, 0x800001a, 0x3ced, 0x49433553, [0x1, 0x9], [0x401], 0x108}}) 2m34.632808405s ago: executing program 4 (id=730): getpid() r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') open$dir(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040054) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2bfdffff11000100000000000000800000f9ff"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800"], 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2m33.724659299s ago: executing program 4 (id=732): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x1010400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0xf}, &(0x7f0000000380)=""/148, 0x94, &(0x7f0000000440)=""/129, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6, {r1}}, 0x58) fcntl$setown(r1, 0x8, r2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x440d1) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) unshare(0x22020600) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) 2m31.871357223s ago: executing program 4 (id=743): getpid() r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') open$dir(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040054) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2bfdffff11000100000000000000800000f9ff"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800"], 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2m30.977658271s ago: executing program 4 (id=749): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {0x35}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x17, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721d085704010a486dd00", 0x0, 0x241, 0x0, 0xac, 0x0, &(0x7f0000000700)="389c04000000000000001b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24f0fd198055288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebeae1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2378b69ea336006b589368f92deb68f3dfc6f2bfee09f8342ddf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x50) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x0, 0x404000) writev(0xffffffffffffffff, &(0x7f0000000840), 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x8, 0x0, 0x4cbfa60d, 0x6}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x2, 0x15f, 0x3, 0x7, 0x7}, &(0x7f0000000300)=0x14) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r2, &(0x7f00000000c0)=0x58, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x400000000000000, 0xc, 0x5}, &(0x7f0000000480)={0x1f, 0xfffffffffffffffc, 0x0, 0x0, 0x8000000005, 0x1fffffffffffffdd, 0x4000000000000000}, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 2m15.909413041s ago: executing program 32 (id=749): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {0x35}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x17, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721d085704010a486dd00", 0x0, 0x241, 0x0, 0xac, 0x0, &(0x7f0000000700)="389c04000000000000001b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24f0fd198055288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebeae1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2378b69ea336006b589368f92deb68f3dfc6f2bfee09f8342ddf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x50) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x0, 0x404000) writev(0xffffffffffffffff, &(0x7f0000000840), 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x8, 0x0, 0x4cbfa60d, 0x6}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x2, 0x15f, 0x3, 0x7, 0x7}, &(0x7f0000000300)=0x14) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r2, &(0x7f00000000c0)=0x58, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x400000000000000, 0xc, 0x5}, &(0x7f0000000480)={0x1f, 0xfffffffffffffffc, 0x0, 0x0, 0x8000000005, 0x1fffffffffffffdd, 0x4000000000000000}, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 11.212779436s ago: executing program 5 (id=1415): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000080)="58b03f", 0x3}, {&(0x7f0000000100)="8f6d56aaa97dac951d3da2e3616c853f3eeba90d40", 0x15}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r2 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\b\x00\x00\x00\x00\x00\x00\x00\ad\xb0l \xfd\xe7\x8ei=:\xb5/\xb9\"eT\x9a\xf6\x064\xffz\xad\x9fHjk\x9d$=\xb8\xdfVh\xda\xb8j\x06{\x19\x92u\x97\xde\xa9\xb5\xb9\x80\xc38?\xf6\xda\xdd\xb29\xe9\xcff\xed\x16\xa391\rH\f\x92\xb2\xed\xe5\x14OT\x8c\xcb\\rw\xf6\x92\xbd\xa4\xbf\x9f\xa8\xa8d\xb4\xf6\xe2\x87/b\xd9\r\x87\n\xfcM\xae\xe9\xe5M\\\xe2\xe9\xb9\xd6\xdd\x81\x9d\xff\x1e\x04k\x8f\xac0\xe9\xd4\xa1\xae\x98s[\xf5V\t\xcf\xe3R@\xdd\xc5\x02\xcd$6\xd6\xf8\x8f9pu\x86d\xa0a ^\'\xcc?\xf9\x92\xf6\xa8O\xf2vL\x9d\xbf\"\xb8\x13\x92\xeajo\xf7\f', 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ip6gre0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="da3506e0398d8300de7df0657cea", 0x0, 0x400000fc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) lseek(r2, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000160001042dbd700000000000fe80000000000000000000000000000fac1e01010000000000000000000000000004fffe000000000a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000001ffffffe33000000ac1414215fa62bd2a2aa5b95e907d1a84a9f0e00000000000000000400000000000000feffffffffffffff080000000000000006000000000000000000080000000000b27d2000000000000000000000000000000000000000000200000000000000000600000000000000000000000000100400000000000000f9ffffff0004000003000000feffffff0000000002000400d000000000000000080000008e00"], 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x6484c) 9.130554224s ago: executing program 5 (id=1422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x11080}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000240)) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 7.902366301s ago: executing program 5 (id=1431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40480, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0f01f40f01f2c4e3657d9101000000b6440f20c0350b000000440f22c0660fe7ab00480000660fc73366baf80cb8687c0983ef66bafc0c66ed0f01f1c4c27d1943079a05000000ee00", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x93d, 0x0, 0x7ee69d08}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x300000f, 0x12, r2, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x1b3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) setsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) sendto$inet(r8, &(0x7f0000004580)="607498c79e5678976ec07ec96799a49e134f39640aba5228a993ca97e82c16ebfd85bba56c6fa3f958aa27fabdcdf8a340bf767c48d97b2748b28684cd4d90924ea246d5fa8ecd431274786e5386883faab0e0c6accf8906e10df37c90eb01a90176defa24280b7253d252a2eef505e1d408f36520076b61d7f363eab552aad2a51c585ba1221b29f3d3e82dd562e4593fba73ba62b25609edf73e15b2b654252d0abca239b6c1052f960fd998441579aa2912b917efa9eeaf72b0426a2743ff5ea7d19b1c3ebff43df45a00db9dd16ec36493b8bd48ddd6a2444c7d52", 0xfffffffffffffe68, 0x20, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fcntl$setlease(r7, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r7, &(0x7f00000044c0)={0xa0, 0x0, r9, {{0x0, 0x0, 0x1, 0xfffffffffffff001, 0x78ecbc3b, 0x8, {0x3, 0xfffffffffffffff9, 0xfffffffffffffffa, 0x3da0, 0x7fff, 0x9, 0x4, 0x5, 0xa86c, 0x8000, 0x5, 0xffffffffffffffff, r10, 0x8000, 0x4}}, {0x0, 0x1e}}}, 0xa0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x6, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 7.649085062s ago: executing program 0 (id=1432): mq_open(&(0x7f0000000500)='ba\x01adv_slave_1\x00\b\xfa^\x01\x8fK\x19\x92\xfc\xd5\x1b\r\xe0B\xe7\xb3\x02\xd7\xb2\xcf\x83>\xd1\xb8)b\x89\xb5\x9b$#E\xd0s\xe7\x9d _\x98\xaeH\xe2\xf7\x84\x8c\xda\xf0q\x9d\xbaD\vd\b\x11\x99\xfd\xae9\xd5#\xe1\x16\xbe\x06\xb0;\x95\xba\xa6r\xa6M\x95\x8a\xc9-\x10\x99\xff`\x96t\x02\xd4E\xac\x1a\x13\xed\xb4\xdb\x88\xa1\x9f\xda\xfa\xae\xece;B\x8a\xdfBV\xc9\xd7\xe5e\x81a4\x00m&\xbc\xdb\x1ec{\xd0\xdc\xe6\xcd\xc6\xea.\xa9|\x82{\xb4q\x1b\xbfc-\xff\xc2=<\xd0=m\b\xd0\xe5\x9a$\xcb\xca\x03$[\xc4', 0x40, 0x0, &(0x7f0000000080)={0x7ffffffffffffffe, 0x8, 0x1, 0xc05}) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000059c0)=ANY=[], 0x2914}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x103440, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x4, 0x391, 0x6, 0x8001, 0x16, "3d167d4b882ecdb4cb6ffa292791025380ded2"}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r3 = open(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100240, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(r2, 0x24, 0x0) mprotect(&(0x7f000010f000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000040)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000003c0)="ae779561069a088f5e3daa021658e1da888a1f76d6c4101aa609c16f360a81bcc78867229249ded7c1a1666fd3373d51083aab03ead808c4d5e2d86e3a106e86a4a3e4ddb708914eb575772a749b55cad3cac9df363ece30a98626f6ea3c81155ab425b231e2052569b3169a22411ca099929d981f207b29da583ed31f5ed36aae", 0x81}, {0x0}], 0x2) userfaultfd(0x80001) (async) userfaultfd(0x80001) 7.478602158s ago: executing program 0 (id=1435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d", 0xb5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b", 0x6f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @f={0x0, 0x0, 0x2, 0x2, 0x3, 0xa5, 0x6, {0x6, 0x2e, "854a5867ff4508f32a2785ea11f3d3b43e636cbe27e42cb48d7d8b5a2a32ca93827df8bacbacbb56aa059212d7c3"}, 0x3, 0x2, 0x34, 0x9, 0xb0, "103d8b9ce649601fcfca2baab140b02d994c29b5770ae69907c21e0a322e833451007e2286e2b1ae49173fcdf40d288953de74ed07888fe113d5b37ebe73ae1cafcd6cd8ebc0a7b9ed75afd1478374c2aff4bb754b0c3a4bb06e27ce789b58301a7599d01a1c2bc570aa486ec6b19c34d5969dbd594ea7671ba264d760515c434a26439ccf2e7174921fa95d24e031f3fa6a47d61253c58b301f92c629f12ace12cebd7adfa309c395da430faf8b88ea"}}, 0xef) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0xfffffffffffffc00, 0x10800) ioctl$I2C_PEC(r2, 0x708, 0x7c) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) lseek(r3, 0x5, 0x2) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=@known='user.incfs.id\x00', 0x0, 0x0) preadv(r4, &(0x7f00000033c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x9, 0x0) 7.423265162s ago: executing program 3 (id=1436): ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xb, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 7.279781269s ago: executing program 3 (id=1438): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000200)) socket$inet(0x2, 0x3, 0x2f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000089f000/0x4000)=nil, &(0x7f0000758000/0x4000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000187000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r0 = io_uring_setup(0x64a, &(0x7f00000002c0)={0x0, 0x8835c, 0x800, 0x20000a, 0x33c}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peek(0x3, r1, &(0x7f0000002700)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delqdisc={0x74, 0x25, 0x904, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff3}, {0xe, 0x8}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0xfb, 0x7, 0x1, 0x2, 0x7, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0xdffb]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x3, 0x8, 0x4, 0x2, 0x5, 0x9, 0x2}}, {0x8, 0x2, [0xd, 0x0]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) io_uring_enter(r0, 0x2216, 0x7a5e, 0x16, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x6, 0x9, 0x10000, 0x2, 0x6, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffab) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.47211683s ago: executing program 3 (id=1441): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000100)={0x31, &(0x7f0000000240)=[{0x39, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0xa}, {0x1, @uvalue=0xc18}, {0x2, @svalue=0x40}]}, 0x7fe}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 6.302668602s ago: executing program 2 (id=1442): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_open_procfs$userns(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000100)={0x31, &(0x7f0000000240)=[{0x39, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0xa}, {0x1, @uvalue=0xc18}, {0x2, @svalue=0x40}]}, 0x7fe}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 6.257029448s ago: executing program 5 (id=1443): prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x0, 0x6}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r8, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400, 0x200, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r14, r15, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000061c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r18 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r18, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r18, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r18, &(0x7f0000000040)={0x50, 0x0, r19, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r18, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b40)={0x130, 0x0, 0x1f, {0x3, 0x893e, 0x0, '\x00', {0x100, 0x2, 0x5, 0x5, r20, r21, 0x8000, '\x00', 0x1000, 0x1, 0x101, 0x19, {0xfffffffffffffff7, 0x4}, {0x6, 0xffffff5b}, {0x2, 0x1}, {0xaa, 0x900}, 0x5275, 0x1, 0xfffffff5, 0x7f}}}}) fstat(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000a3c0)=ANY=[@ANYBLOB="4806000000000000", @ANYRES64=0x0, @ANYBLOB="010000000000000002000000000000000300000000000000030000000000000047bf00000300000006000000000000000900000000000000cb05000000000000180000000000000008000000000000000000000000000000b9e900000000000000000100004000005fe00000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0c00000004000000000000000000000000000000a50000000000000001000000050000002a00000000000000030000000000000001000000000000000200000000000000ff0100000000000001000000060000000000000000000000e691000000000000030000000000000000000000010000002400000000000000050000000000000024000000eaf2ffffffff000000c0000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff0300000600000000000000040000000000000006000000000000000200000005000000ca260000000000000400000000000000030000000000000006000000000000000900000000000000ff000000d461682b06000000000000000000000000000000010000000000000000000000800200000500000000000000ab0a00000000000002000000010000000100000000f00000ffff0000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="f8ffffff010000000000000001000000000000000a0000000000000000000000440b000005000000000000000100000000000000285e0000000000000100000001000000ff0100000200000000000000000000000100000000000000e4040000000000009e48000000000000000200000000000006000000000000009f00000017000000f7ffffff00a0000009000000", @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB="04000000080000000000000000000000000000006c0300000000000000000000000100000400000000000000020000000000000006000000000000000b00000000000000fd010000a4000000060000000000000009000000000000000100008000000000224c00000000000006000000000000000100000000000080280000004000000000800000001000000a000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0400000009000000000000000500000000000000000000000000000004000000ffff00005d40f127000000000500000000000000010000000000000007000000000000000e00000000000000040000000500000002000000000000003be0ffffffffffff6a0c00000000000009000000000000000100000000000000ff01000000000000000000000a0e0000060000000040000092040000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000800000500000000000000050000000000000004000000000000000d00000003000000272e232c407d3a2c405d26b57000000002000000000000000200000000000000720700000000000058040000000000004a0900000300000002000000000000000600000000000000060000000000000004000000000000000900000000000000030000000000000001000080080000000100000000a0000007000000", @ANYRES32=r12, @ANYRES32=r15, @ANYBLOB="0500000000800000000000000500000000e5ff000f000000f8fffffd06000005ff7f00005b2e6221407d5b0006000000000000001f0000000000000009000000000000000900000400000000093a9e000400000000000000000000000100000000000000ff03000000000000060000000000000003000000000000f4db8977ada8a1441363f40001000000250000000700000006000000044c57cc5dbb291d841b9772298ba6", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="00800000070000000000000003000000000000000f000000000000000000000006000000020000000000000001000000000000000d000000000000000700000000000000000000006e6300000400000000000000ffffffff00000000f800000000000000070000000000000007000000000000000300000000000000feffffff00000000000200000010000007000000", @ANYRES32=r20, @ANYRES32=0xee01, @ANYBLOB="ffffff7f030000000000000006000000000000000700000000000000020000000800000027250000000000000600000000000000020000000000000000000000000000000800000000000000b9000000ff0f0000030000000000000002000000000000009b040000000000000d000000000000000002000000000000a20e0000000000001f02000071060000c0ffffff0010000001010000", @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="070000000600000000000000060000000000000009000000000000000a0000004e0500002a2d24232b5e395e212b000000000000"], 0x648) socket$tipc(0x1e, 0x5, 0x0) 6.130954707s ago: executing program 5 (id=1444): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003fc2f6240c40911003806010203010902000001720610060904f0d050322f800309050102ff100010028100000000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) 5.132672417s ago: executing program 2 (id=1445): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$mouse(0x0, 0x0, 0x2042) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) sendfile(r3, r4, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800ff007c05e8fe50a10a000500014002020c600e41b0001200ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 5.131484923s ago: executing program 3 (id=1446): munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000, 0x100000001}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) read(r0, &(0x7f0000000a80)=""/193, 0xc1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) 3.846385732s ago: executing program 3 (id=1447): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2d, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000280)={0x6580, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) 3.596288243s ago: executing program 2 (id=1449): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000340)=ANY=[], 0x78) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x9, 0x8, 0x148, 0x6, 0x2, "7d1bfa58096ab1f9"}) r9 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r9, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/137, 0x89}, {&(0x7f00000028c0)=""/73, 0x49}], 0x4}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) 3.498473956s ago: executing program 0 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 3.492113248s ago: executing program 0 (id=1451): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4000052}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$dsp(r5, &(0x7f0000000500)="efeebb76144d44e306d67c7cdee0422e0a8d9d3f2fecb6ce82861e4f04619d0722e9df4af6d37398cc6a5876a231d1b55450b91e0119", 0x36) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x800, 0xfffffff0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000020800000001000000800020001cfa5d272cf9a1f0fb05b56bc38b6ceae58a7b113d38ecab6fbb77efb6e869da2f88eda21e0967293e36b0fd1a6e3272942415643e1d83291b26532de39a28ded1924b07130851f8d59d2fe4bd2fceedf66b86c59078a94683c5052c2c4461e6b5dd9bb6f57d91a970c3cee6610338afc55230ad9611ad61076c15cb002ce2b2bab25f08757da38b726bd34d220acb490c5b688d0cead9e586a64946d6aba73c6b92d931cc3f2d2d0400b5", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00090000000000000006f8fffffffffffbff000000000000000000007eb5f0d474b471e9a7f0eb698097dc645cd5e54460e594abc88b03affc382efa58f22387e2b7f01dcb2a9521c347f5c22fbef8a6abe193b700609f95e3f1d1b66dda66ac2059100679ac49d195bd7a16fc5908621a3130e05e16c7e84f56bf2f410b6050c5bcad27c513b02202ae6dedac705a57a376522027c55d50a650a7cadc91e1e8180059ebc10ae945fec584dc154382c28c880bb991203e82f398e22179ce7934fe03001ec397a4a8126074382372eefb43d9708ee1888fd5b05d1c1a7451cd82275ccfff4ee4ab9077481d073cdf8b77a2f7fae83657110bd92bdb80487ed5a4fe240414f562f3895e2755cd56c4611b692a0e3688b7eb12543bca4f4c9b7b7d6dcd38072c90f5aab96e7ccf5e06e74896fe0b2f08ecaab202b78a4f1360536a6c7ddb9f0c01f40ecc293daf53552c438111cea3972bdbd1cff3db5160b018ab7d593a9088f7c9ace28e668a7a7b2183dfb7a31d7510144d9ec778"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1c", 0x1, 0x10000000000b) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 3.460020282s ago: executing program 2 (id=1452): r0 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r5, 0x111, 0x20001, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = open(0x0, 0x141080, 0xe8) fcntl$notify(r7, 0x402, 0x8000003b) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r4, r8, 0x0, 0x7ffff006) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_U32_SEL={0xffffff1b, 0x5, {0xc, 0x3, 0x0, 0x3d3f, 0xe12e, 0xfff, 0x3, 0x58f}}, @TCA_U32_MARK={0x0, 0xa, {0x403, 0x7ff}}]}}]}, 0x60}}, 0x24040084) 2.854654012s ago: executing program 0 (id=1453): r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000180)=0xffffffff, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x80) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) creat(&(0x7f00000001c0)='./file0\x00', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8) recvmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 2.743352278s ago: executing program 3 (id=1454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31100}}], 0x300, 0xf1c) 2.444996686s ago: executing program 2 (id=1455): r0 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket(0x10, 0x803, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x111, 0x20001, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = open(0x0, 0x141080, 0xe8) fcntl$notify(r6, 0x402, 0x8000003b) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r7, 0x0, 0x7ffff006) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 1.994360496s ago: executing program 1 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f0000000500)=@newtclass={0x584, 0x28, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0xc, 0xd}, {0x5, 0xfff1}}, [@c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x21, 0x3, "70f2f6c592e095a3093c527a6eb8aa56cb678ab6e80f4f7523b3e40bb1"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x2}}, @TCA_ATM_FD={0x8}]}}, @c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x29, 0x3, "275c3c57d167880d4c0a258fc5fda8889bad788b92ad52d11ddb9ba88d3420fca4da951dcc"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0xe, 0x3, "8394a5def0cd5d889c2d"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x11, 0x3, "28409f671a986589c619e7dea1"}]}}, @c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x6, 0xb, 0xc, 0xfffffff7, 0x6}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x4, 0x6, 0x5, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0xfff, 0x4, 0x80, 0x10b8, 0x1, 0x8, 0x5, 0x30e, 0x8, 0x4, 0x9, 0x6, 0xfff, 0xfffffff7, 0x1ff, 0x0, 0x8984, 0x4, 0x8000, 0x9, 0xffffffff, 0x8, 0x110, 0xfba, 0x6, 0x3, 0x9, 0x0, 0x10, 0x4c, 0xcfc4, 0x2, 0x8, 0x4, 0xd, 0xfffffffd, 0x8, 0x0, 0xff, 0x4, 0x7fffffff, 0xc6b, 0xde, 0x52, 0x8, 0x4bb, 0x6, 0xffffffff, 0x62d4, 0xb1, 0xb, 0x7, 0x4, 0xdd, 0x2, 0x5, 0x4, 0x40, 0x8, 0x6, 0x1, 0x3, 0x8, 0x8, 0x5a48, 0x2, 0xf16, 0xfffffffc, 0x9, 0xfffffffc, 0x87d1, 0x6, 0x60, 0x4, 0xe9, 0x1, 0x4, 0x2, 0x6, 0x1ff, 0x9343, 0x471, 0x8, 0xcb7, 0x5, 0x1, 0xfffffffe, 0x7, 0x8, 0x9, 0xf00f, 0x2, 0x6, 0x8, 0x1, 0x4be, 0x0, 0x2, 0x6, 0x81, 0x1, 0x7ff, 0x0, 0x4, 0xfffffff8, 0x53aa, 0x8, 0x3, 0x8d, 0x7fff, 0x6, 0x1, 0xe41, 0x1, 0xe, 0x6, 0xff, 0x6, 0x507, 0xe, 0x6, 0xfff, 0x2, 0x80, 0xd, 0x9, 0x2, 0x0, 0x5, 0x1, 0x2, 0x200, 0x1, 0x5, 0x2c, 0x6, 0x81, 0xffffffff, 0x55, 0x5, 0x6, 0x2, 0x4, 0x81, 0x8, 0x81, 0x5, 0x6, 0x1, 0x1, 0x5, 0x7, 0x0, 0x8000, 0x6, 0xfffffff9, 0xcf6d, 0x2, 0x0, 0x81, 0x62a3000, 0x89ca, 0xc00000, 0x7, 0xffff, 0x36, 0x0, 0x80, 0x2, 0x0, 0x6, 0x1, 0x2, 0x7, 0x1, 0x10, 0x0, 0x9c94, 0x3ff, 0x4, 0x2, 0x5, 0xc, 0x53, 0x0, 0x6, 0x9, 0xfeb, 0x8, 0xff, 0x9, 0x1000, 0x3, 0xc0, 0xbf7a, 0xa590, 0x7, 0x4, 0x9, 0x5, 0x1, 0xe8f, 0xff, 0xd91c, 0xf, 0x4, 0x4, 0x6405, 0x0, 0x3, 0x8, 0x4, 0x7ff, 0x10001, 0x10001, 0x1000, 0x3, 0x4, 0x4de1, 0x10, 0x3, 0x10000, 0x2, 0xffff, 0x4, 0x5, 0x2d6, 0x3, 0x3, 0x800, 0x2, 0xffff, 0x9, 0x6, 0xa03, 0x3b8, 0xff, 0x4, 0x3, 0x10000, 0x8, 0x8, 0x5, 0x5, 0x8, 0x4, 0x10000, 0xfffffffa, 0x5, 0x9, 0x8001, 0x2, 0xfffff001, 0x8, 0x1]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x5, 0xfff}}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x0, 0x14, 0xd, 0x2, 0x6, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7f, 0x3, 0xd9, 0x5, 0x1, 0x7}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r5, 0x1b, &(0x7f0000000480)={0x16, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r6 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r6, 0x0, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0) 1.763827372s ago: executing program 5 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0xd, 0x1, 0x77, 0x8, 0x0, 0x4, 0x8000000000000001}, 0x0, &(0x7f00000000c0)={0x9, 0xa81e, 0x8, 0x1, 0x6, 0x4, 0xc, 0x101}, &(0x7f0000000140), 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000340)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) unshare(0x100000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) lseek(r6, 0x0, 0x3) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001514030129bd7000"], 0x18}}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') readv(r8, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/168, 0xa8}], 0x1) syz_usb_connect(0x2, 0x36, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x5800003, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ff8000) 1.423443752s ago: executing program 2 (id=1458): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000004b74ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x40806685, &(0x7f0000000000)={0x0, 0x7fff}) (fail_nth: 4) 1.349567282s ago: executing program 0 (id=1459): syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x27, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 1.119736125s ago: executing program 1 (id=1460): syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x27, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 486.54212ms ago: executing program 1 (id=1461): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x464, 0x400, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0xc010) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) lremovexattr(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) close(r1) socket$unix(0x1, 0x1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000200)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x1ffff0100}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x0, 0x80, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x418100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000280)=0xfffffffc) r11 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r11, 0x805c6103, &(0x7f0000000400)) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000240)=0xffff) ioctl$SYNC_IOC_FILE_INFO(r10, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xcd, 0x20, 0x7b5, 0x3}, &(0x7f0000000040)=0x18) 238.587831ms ago: executing program 1 (id=1462): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000340)=ANY=[], 0x78) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x9, 0x8, 0x148, 0x6, 0x2, "7d1bfa58096ab1f9"}) r9 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r9, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/137, 0x89}, {&(0x7f00000028c0)=""/73, 0x49}], 0x4}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) 20.066673ms ago: executing program 1 (id=1463): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0xe0000, 0x42) clock_adjtime(0x2, &(0x7f0000000040)={0x5, 0x2, 0x1000, 0x6, 0x6, 0xfffffffefffffffd, 0x3, 0xebe, 0x8, 0xc, 0xc, 0x62, 0x400000000000e, 0xfffffffffffffffa, 0xa70, 0x4, 0x8, 0x4, 0x8, 0x101, 0x1, 0x7fffffff, 0x7, 0x400, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = signalfd4(r0, &(0x7f00000001c0)={[0x4]}, 0x8, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0xf0, r4, 0x8, 0x70bd29, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xcc, 0x1, 'C\x03\x00\x00\x00\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7dp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg@\xcd\x03\x00\xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83\xb4\x8c\xae\xdd\\/\xaa\x1dU'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0xf0}}, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) getsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) syz_emit_ethernet(0x16f, &(0x7f0000005ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6000000001390600fc000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="a0c2fffc9078ff6b030381fe06e2d4c3d9080a0000081f0000000000fdd3ce7bad775227715a87009aca286cc4450a1c2acf86782671a879b313b51fe2521527f254150fd5849316f3699db15c65ca1f63e8f01d9b0dc99b1aa2123fbe0e2243d63ceeb93e6a67391ccd47bb7fe5a9f0c7901fe23ce23c33ae1f6a4768356694e2b628668c6679957c28a61389f31408c4461cea72bc1649b209678bc119d9f40929294d"], 0x0) 0s ago: executing program 1 (id=1464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x1, 0x3, "cfbe95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x210, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "0f95f631858f08"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001700)={r2, 0x7ff}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) sendmmsg(r1, &(0x7f00000096c0)=[{{&(0x7f0000000680)=@rc={0x1f, @none, 0x2}, 0x80, 0x0}}, {{&(0x7f0000002880)=@ieee802154, 0x80, 0x0}}], 0x2, 0x24004010) kernel console output (not intermixed with test programs): dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 288.061637][ T805] imon:send_packet: packet tx failed (-71) [ 288.085639][ T805] imon 3-1:0.0: panel buttons/knobs setup failed [ 288.135369][ T805] rc_core: IR keymap rc-imon-pad not found [ 288.136248][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.141298][ T805] Registered IR keymap rc-empty [ 288.152025][ T5731] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.157299][ T805] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 288.165947][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.166943][ T5731] usb 1-1: config 0 descriptor?? [ 288.180999][ T805] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 288.191245][ T5731] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 288.199072][ T805] imon:send_packet: packet tx failed (-71) [ 288.225153][ T805] imon 3-1:0.0: remote input dev register failed [ 288.231563][ T805] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 288.258611][ T805] imon 3-1:0.0: unable to initialize intf0, err 0 [ 288.268378][ T805] imon:imon_probe: failed to initialize context! [ 288.274723][ T805] imon 3-1:0.0: unable to register, err -19 [ 288.290414][ T805] usb 3-1: USB disconnect, device number 53 [ 288.584955][ T805] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 288.628982][T10120] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 288.636346][T10120] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 288.662755][ T5731] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 288.735011][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 288.741323][ T805] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.752681][ T805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.761489][ T805] usb 3-1: string descriptor 0 read error: -22 [ 288.768222][ T805] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 288.777347][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.786540][ T805] usb 3-1: config 0 descriptor?? [ 288.793979][ T805] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58 [ 288.834957][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 288.841232][ T5731] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 288.850701][ T5731] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.860602][ T5731] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.870535][ T5731] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.880647][ T5731] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.893749][ T5731] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.902861][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.029767][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.038530][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.113471][ T5731] usb 4-1: GET_CAPABILITIES returned 0 [ 289.120529][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.145302][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.152283][ T5731] usbtmc 4-1:16.0: can't read capabilities [ 289.171258][ T5731] usb 4-1: USB disconnect, device number 44 [ 289.202090][T10126] netlink: 'syz.3.1174': attribute type 4 has an invalid length. [ 290.129569][ T46] usb 1-1: USB disconnect, device number 39 [ 290.230159][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 290.230175][ T29] audit: type=1400 audit(1781876195.571:764): avc: denied { listen } for pid=10141 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.230599][T10144] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 290.733284][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 290.740527][ T805] imon:send_packet: packet tx failed (-71) [ 290.766598][ T805] imon 3-1:0.0: panel buttons/knobs setup failed [ 290.832565][ T805] rc_core: IR keymap rc-imon-pad not found [ 290.901683][ T805] Registered IR keymap rc-empty [ 290.950044][ T805] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 291.410037][ T805] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 291.428068][ T805] imon:send_packet: packet tx failed (-71) [ 291.497664][ T805] imon 3-1:0.0: remote input dev register failed [ 291.506251][ T805] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 291.559221][ T805] imon 3-1:0.0: unable to initialize intf0, err 0 [ 291.578105][ T805] imon:imon_probe: failed to initialize context! [ 291.623434][ T805] imon 3-1:0.0: unable to register, err -19 [ 291.651989][ T805] usb 3-1: USB disconnect, device number 54 [ 292.130798][T10173] syz.3.1187 (10173) used obsolete PPPIOCDETACH ioctl [ 292.165503][T10170] syz.2.1186 (10170): drop_caches: 2 [ 292.360221][T10173] sch_tbf: peakrate 5120 is lower than or equals to rate 16184521995824869011 ! [ 292.962177][ T29] audit: type=1400 audit(1781876198.138:765): avc: denied { setattr } for pid=10164 comm="syz.0.1185" name="task" dev="proc" ino=33270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 294.080875][ T4919] block nbd0: Possible stuck request ffff888027a37000: control (read@0,1024B). Runtime 90 seconds [ 294.092013][ T4919] block nbd0: Possible stuck request ffff888027a371c0: control (read@1024,1024B). Runtime 90 seconds [ 294.103075][ T4919] block nbd0: Possible stuck request ffff888027a37380: control (read@2048,1024B). Runtime 90 seconds [ 294.185867][T10189] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.566456][ T29] audit: type=1400 audit(1781876199.636:766): avc: denied { associate } for pid=10195 comm="syz.0.1185" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 294.592707][ T4919] block nbd0: Possible stuck request ffff888027a37540: control (read@3072,1024B). Runtime 90 seconds [ 294.626148][T10189] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.812231][T10189] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.829649][T10205] nbd: must specify a size in bytes for the device [ 294.858674][T10205] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 294.938078][T10205] bond1: (slave geneve2): making interface the new active one [ 294.971848][T10205] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 295.021664][ T6085] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.046488][ T6085] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.090823][ T6085] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.165299][ T6085] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.179853][T10189] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.644650][ T98] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.653890][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 295.657374][ T98] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.677181][ T98] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.690127][ T98] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.794897][ T29] audit: type=1400 audit(1781876200.787:767): avc: denied { read } for pid=10232 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 295.849943][ T29] audit: type=1400 audit(1781876200.834:768): avc: denied { write } for pid=10232 comm="syz.0.1201" path="socket:[33526]" dev="sockfs" ino=33526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.030512][ T5710] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 296.257958][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 296.278744][ T5710] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 296.304605][ T5710] usb 2-1: config 0 has no interface number 0 [ 296.329863][ T5710] usb 2-1: config 0 interface 184 has no altsetting 0 [ 296.465083][ T5710] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 296.483729][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.502576][ T5710] usb 2-1: Product: syz [ 296.522168][ T5710] usb 2-1: Manufacturer: syz [ 296.544463][ T5710] usb 2-1: SerialNumber: syz [ 296.664483][ T5710] usb 2-1: config 0 descriptor?? [ 297.616383][ T6687] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.777920][ T6687] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 297.786475][ T6687] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 297.796922][ T6687] usb 4-1: config 220 has no interface number 2 [ 297.803389][ T6687] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 297.825631][ T6687] usb 4-1: config 220 interface 0 has no altsetting 0 [ 297.838097][ T6687] usb 4-1: config 220 interface 76 has no altsetting 0 [ 297.851077][ T6687] usb 4-1: config 220 interface 1 has no altsetting 0 [ 297.864836][ T6687] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 297.874094][ T6687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.882820][ T6687] usb 4-1: Product: syz [ 297.890670][ T6687] usb 4-1: Manufacturer: syz [ 297.898935][ T6687] usb 4-1: SerialNumber: syz [ 298.156789][ T6687] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 298.170935][ T6687] uvcvideo 4-1:220.0: No valid video chain found. [ 298.180795][ T6687] usb 4-1: selecting invalid altsetting 0 [ 298.194816][ T6687] usb 4-1: selecting invalid altsetting 0 [ 298.212873][ T6687] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 298.237459][ T6687] usb 4-1: USB disconnect, device number 45 [ 298.563949][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 298.575574][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 298.588403][T10263] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 298.595731][T10263] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 298.605138][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.616197][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 298.626183][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 298.636466][ T5710] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 298.646187][ T5710] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 298.661247][ T5710] usb 2-1: USB disconnect, device number 49 [ 299.118127][ T29] audit: type=1400 audit(1781876203.894:769): avc: denied { accept } for pid=10273 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.162450][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1213'. [ 299.787922][T10288] binder: 10287:10288 unknown command 0 [ 299.806840][T10288] binder: 10287:10288 ioctl c0306201 2000000001c0 returned -22 [ 300.556754][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 300.572053][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1221'. [ 300.783793][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1225'. [ 300.843569][ T5710] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 300.855073][ T46] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 300.888518][T10318] vlan5: entered promiscuous mode [ 300.893565][T10318] bridge0: entered promiscuous mode [ 300.905033][T10318] bridge0: port 3(vlan5) entered blocking state [ 300.911608][T10318] bridge0: port 3(vlan5) entered disabled state [ 300.917914][T10318] vlan5: entered allmulticast mode [ 300.923410][T10318] bridge0: entered allmulticast mode [ 300.929712][T10318] vlan5: left allmulticast mode [ 300.934612][T10318] bridge0: left allmulticast mode [ 301.014605][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 301.025364][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 301.034954][ T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.047120][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.057665][ T1227] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 301.071164][ T46] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 301.071421][ T5710] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 301.080708][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.098054][ T46] usb 4-1: Product: syz [ 301.098068][ T805] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 301.102523][ T46] usb 4-1: Manufacturer: syz [ 301.109930][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.123073][ T46] usb 4-1: SerialNumber: syz [ 301.148175][ T46] usb 4-1: config 0 descriptor?? [ 301.148566][ T5710] usb 2-1: Product: syz [ 301.159083][ T5710] usb 2-1: Manufacturer: syz [ 301.163805][ T5710] usb 2-1: SerialNumber: syz [ 301.187915][ T5710] usb 2-1: config 0 descriptor?? [ 301.227074][ T5710] usb 2-1: selecting invalid altsetting 1 [ 301.234624][ T5710] technisat-usb2: could not set alternate setting to 0 [ 301.238968][ T1227] usb 1-1: Using ep0 maxpacket: 32 [ 301.255512][ T1227] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 301.265246][ T1227] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 301.275428][ T1227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 301.286395][ T1227] usb 1-1: config 1 has no interface number 0 [ 301.294370][ T1227] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.306189][ T1227] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 301.320384][ T1227] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 301.329495][ T1227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.367066][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 301.372099][ T1227] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 301.418687][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 301.436376][ T5710] technisat-usb2: firmware version: 0.0 [ 301.446012][ T805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.446075][ T46] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 301.460749][ T5710] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 301.484573][ T46] imon:send_packet: packet tx failed (-71) [ 301.492863][ T805] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 301.503217][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.506111][ T46] imon 4-1:0.0: panel buttons/knobs setup failed [ 301.523395][ T805] usb 3-1: config 0 descriptor?? [ 301.538673][T10314] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 301.571680][ T46] rc_core: IR keymap rc-imon-pad not found [ 301.577601][ T46] Registered IR keymap rc-empty [ 301.588367][T10312] sctp: [Deprecated]: syz.0.1225 (pid 10312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.588367][T10312] Use struct sctp_sack_info instead [ 301.612357][ T46] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 301.623047][ T46] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 301.635699][ T46] imon:send_packet: packet tx failed (-71) [ 301.647070][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.648506][ T1227] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 301.667531][ T5710] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 301.670289][ T46] imon 4-1:0.0: remote input dev register failed [ 301.676447][ T5710] usb 2-1: media controller created [ 301.684778][ T46] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 301.689610][ T5710] technisat-usb2: i2c-error: out failed 53 = -22 [ 301.702289][ T5710] dvb-usb: MAC address reading failed. [ 301.711032][ T46] imon 4-1:0.0: unable to initialize intf0, err 0 [ 301.713756][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.717515][ T46] imon:imon_probe: failed to initialize context! [ 301.732653][ T46] imon 4-1:0.0: unable to register, err -19 [ 301.759192][ T46] usb 4-1: USB disconnect, device number 46 [ 301.776117][ T5710] DVB: Unable to find symbol stv090x_attach() [ 301.786918][ T5710] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 301.858727][ T5710] rc_core: IR keymap rc-technisat-usb2 not found [ 301.865168][ T5710] Registered IR keymap rc-empty [ 301.871492][ T5710] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 301.882824][ T5710] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input63 [ 301.896000][ T5710] dvb-usb: schedule remote query interval to 100 msecs. [ 301.903638][ T5710] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 301.921686][ T5710] usb 2-1: USB disconnect, device number 50 [ 301.951742][ T5710] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 301.981928][ T805] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x0 [ 301.992099][ T805] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x1 [ 301.999862][ T805] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x3 [ 302.007308][ T805] magicmouse 0003:05AC:0265.000D: unknown main item tag 0x1 [ 302.015748][ T805] magicmouse 0003:05AC:0265.000D: hidraw0: USB HID v80.09 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 302.093826][ T46] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 302.148296][T10312] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 302.158627][ T5710] usb 1-1: USB disconnect, device number 40 [ 302.166926][ T5710] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 302.243273][T10314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.252131][T10314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.266890][ T805] usb 3-1: USB disconnect, device number 55 [ 302.307540][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 302.313771][ T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.324751][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.333435][ T46] usb 4-1: string descriptor 0 read error: -22 [ 302.340627][ T46] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 302.349727][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.366573][ T46] usb 4-1: config 0 descriptor?? [ 302.533535][ T46] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input64 [ 303.197221][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.257866][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.447988][T10347] lo speed is unknown, defaulting to 1000 [ 303.750258][ T805] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 303.841518][T10343] lo speed is unknown, defaulting to 1000 [ 303.851052][T10354] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1236'. [ 303.863451][T10353] netlink: 'syz.0.1237': attribute type 12 has an invalid length. [ 303.874896][T10354] openvswitch: netlink: Message has 512 unknown bytes. [ 303.894115][T10354] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 304.040820][ T805] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 304.058698][ T805] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.074170][ T805] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 304.084634][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.095698][ T805] usb 3-1: Product: syz [ 304.100145][ T805] usb 3-1: Manufacturer: syz [ 304.105079][ T805] usb 3-1: SerialNumber: syz [ 304.169706][T10363] batman_adv: batadv0: Adding interface: vxlan0 [ 304.176246][T10363] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.202497][T10363] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 304.209679][ T1227] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 304.355023][ T29] audit: type=1400 audit(1781876208.797:770): avc: denied { mount } for pid=10341 comm="syz.2.1233" name="/" dev="pstore" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 304.446577][ T1227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.458415][ T1227] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 304.471757][ T1227] usb 1-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 304.472355][T10368] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 304.480883][ T1227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.482089][ T1227] usb 1-1: config 0 descriptor?? [ 304.506624][ T1227] appledisplay 1-1:0.0: Could not find int-in endpoint [ 304.538052][ T1227] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 304.569951][ T805] usb 3-1: 0:1 : does not exist [ 304.581515][ T805] usb 3-1: unit 80 not found! [ 304.643043][ T805] usb 3-1: USB disconnect, device number 56 [ 304.677605][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.833384][T10375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1241'. [ 304.979776][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 305.004610][ T46] imon:send_packet: packet tx failed (-71) [ 305.032497][ T46] imon 4-1:0.0: panel buttons/knobs setup failed [ 305.139456][ T46] rc_core: IR keymap rc-imon-pad not found [ 305.145303][ T46] Registered IR keymap rc-empty [ 305.150278][ T46] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 305.163373][ T46] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 305.178406][ T46] imon:send_packet: packet tx failed (-71) [ 306.222474][ T46] imon 4-1:0.0: remote input dev register failed [ 306.241337][ T29] audit: type=1400 audit(1781876210.566:771): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 306.263073][ T46] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 306.579987][ T46] imon 4-1:0.0: unable to initialize intf0, err 0 [ 306.595722][ T46] imon:imon_probe: failed to initialize context! [ 306.603346][ T46] imon 4-1:0.0: unable to register, err -19 [ 306.620365][ T46] usb 4-1: USB disconnect, device number 47 [ 306.733042][ T805] usb 1-1: USB disconnect, device number 41 [ 307.078923][T10394] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 308.010627][T10394] bond2: entered promiscuous mode [ 308.035163][T10394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.051022][T10395] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.078082][T10395] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 308.092998][T10395] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 308.130028][ T29] audit: type=1400 audit(1781876212.325:772): avc: denied { create } for pid=10400 comm="syz.5.1248" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 308.153993][T10399] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.166582][T10399] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 308.200532][T10401] netlink: 'syz.5.1248': attribute type 12 has an invalid length. [ 308.363058][T10394] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.377323][ T5722] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 308.436811][T10394] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 308.471472][ T29] audit: type=1400 audit(1781876212.643:773): avc: denied { map } for pid=10414 comm="syz.0.1252" path="/dev/usbmon0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 308.583448][T10425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1255'. [ 308.751543][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 308.815354][ T46] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 309.250402][ T5722] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 309.323524][ T29] audit: type=1400 audit(1781876212.980:774): avc: denied { ioctl } for pid=10426 comm="syz.1.1257" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 309.639154][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.647256][ T5722] usb 4-1: Product: syz [ 309.655413][ T5722] usb 4-1: Manufacturer: syz [ 309.660815][ T29] audit: type=1400 audit(1781876213.242:775): avc: denied { map } for pid=10426 comm="syz.1.1257" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 309.685574][ T5722] usb 4-1: SerialNumber: syz [ 309.715356][ T5722] usb 4-1: config 0 descriptor?? [ 309.738802][ T5722] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 309.747001][ T29] audit: type=1400 audit(1781876213.242:776): avc: denied { read write } for pid=10426 comm="syz.1.1257" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 309.780458][ T29] audit: type=1400 audit(1781876213.748:777): avc: denied { sys_module } for pid=10424 comm="syz.5.1255" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 309.845149][ T46] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 309.866083][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.882298][ T46] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 309.891869][ T46] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 309.903705][ T46] usb 1-1: Product: syz [ 309.908641][ T46] usb 1-1: Manufacturer: syz [ 309.913289][ T46] usb 1-1: SerialNumber: syz [ 309.934720][ T46] usb 1-1: config 0 descriptor?? [ 309.986033][ T46] usb 1-1: selecting invalid altsetting 0 [ 310.065816][ T5731] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 310.108512][ T1227] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 310.207335][ T5722] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 310.228196][ T46] usb 1-1: USB disconnect, device number 42 [ 310.248638][ T5731] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.279641][ T5731] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.291722][ T5731] usb 2-1: config 220 has no interface number 2 [ 310.298356][ T5731] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.311926][ T5731] usb 2-1: config 220 interface 0 has no altsetting 0 [ 310.318930][ T1227] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.331732][ T1227] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.342852][ T5731] usb 2-1: config 220 interface 76 has no altsetting 0 [ 310.349861][ T1227] usb 3-1: config 220 has no interface number 2 [ 310.356312][ T5731] usb 2-1: config 220 interface 1 has no altsetting 0 [ 310.363198][ T1227] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.376957][ T1227] usb 3-1: config 220 interface 0 has no altsetting 0 [ 310.384471][ T1227] usb 3-1: config 220 interface 76 has no altsetting 0 [ 310.393654][ T5731] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.402746][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.414668][ T1227] usb 3-1: config 220 interface 1 has no altsetting 0 [ 310.428227][ T5731] usb 2-1: Product: syz [ 310.434046][ T5731] usb 2-1: Manufacturer: syz [ 310.439427][ T5722] usb 4-1: USB disconnect, device number 48 [ 310.448164][ T1227] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.464669][ T5731] usb 2-1: SerialNumber: syz [ 310.469731][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.480669][ T1227] usb 3-1: Product: syz [ 310.485390][ T1227] usb 3-1: Manufacturer: syz [ 310.490089][ T1227] usb 3-1: SerialNumber: syz [ 310.707805][ T5731] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 310.716140][ T5731] uvcvideo 2-1:220.0: No valid video chain found. [ 310.726242][ T5731] usb 2-1: selecting invalid altsetting 0 [ 310.736535][ T1227] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 310.744660][ T1227] uvcvideo 3-1:220.0: No valid video chain found. [ 310.752646][ T1227] usb 3-1: selecting invalid altsetting 0 [ 310.759080][ T5731] usb 2-1: selecting invalid altsetting 0 [ 310.765005][ T5731] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 310.777527][ T1227] usb 3-1: selecting invalid altsetting 0 [ 310.785057][ T5731] usb 2-1: USB disconnect, device number 51 [ 310.791024][ T1227] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 310.822389][ T1227] usb 3-1: USB disconnect, device number 57 [ 311.377038][T10463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1268'. [ 311.918966][ T805] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 312.350912][T10471] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1269'. [ 312.359905][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1269'. [ 312.368898][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 312.616042][ T805] usb 1-1: Using ep0 maxpacket: 16 [ 312.627708][ T805] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 21, changing to 7 [ 312.638889][ T805] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.653082][ T805] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 312.729376][ T805] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice= 0.40 [ 313.008322][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.027043][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.033398][ T805] usb 1-1: Product: syz [ 313.036053][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.040048][ T805] usb 1-1: Manufacturer: syz [ 313.074193][ T805] usb 1-1: SerialNumber: syz [ 313.320029][T10458] netlink: 'syz.0.1267': attribute type 8 has an invalid length. [ 313.527984][ T5731] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 313.689198][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.734103][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.755839][ T5731] usb 3-1: device descriptor read/64, error -71 [ 313.824185][ T805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.855419][ T805] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 313.888777][T10508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1281'. [ 313.908919][ T805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.042224][ T805] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 314.450661][ T5731] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 314.563032][ T805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.677419][ T805] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 314.693435][ T5731] usb 3-1: device descriptor read/64, error -71 [ 314.720934][ T805] usb 1-1: USB disconnect, device number 43 [ 314.728059][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.772163][T10518] o2cb: This node has not been configured. [ 314.778049][ T29] audit: type=1400 audit(1781876218.548:778): avc: denied { write } for pid=10513 comm="syz.5.1282" name="/" dev="ocfs2_dlmfs" ino=35390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.802527][T10518] o2cb: Cluster check failed. Fix errors before retrying. [ 314.815727][T10518] (syz.5.1282,10518,0):user_dlm_register:674 ERROR: status = -22 [ 314.830171][ T29] audit: type=1400 audit(1781876218.548:779): avc: denied { add_name } for pid=10513 comm="syz.5.1282" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.853945][T10518] (syz.5.1282,10518,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 314.873558][T10524] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 314.884646][ T29] audit: type=1400 audit(1781876218.548:780): avc: denied { create } for pid=10513 comm="syz.5.1282" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 314.887600][ T5731] usb usb3-port1: attempt power cycle [ 314.905438][ T29] audit: type=1400 audit(1781876218.548:781): avc: denied { associate } for pid=10513 comm="syz.5.1282" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 315.163053][ T5722] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 315.334021][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 315.515991][ T5731] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 315.536197][T10535] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1286'. [ 315.558797][ T5731] usb 3-1: device descriptor read/8, error -71 [ 315.809920][T10539] evm: overlay not supported [ 315.823755][ T29] audit: type=1400 audit(1781876219.521:782): avc: denied { remount } for pid=10538 comm="syz.3.1288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 315.847206][ T5731] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 315.880483][ T5731] usb 3-1: device descriptor read/8, error -71 [ 316.007441][ T5731] usb usb3-port1: unable to enumerate USB device [ 316.113995][ T46] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 316.275440][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.286739][ T46] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 316.295843][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.305057][ T46] usb 1-1: config 0 descriptor?? [ 316.527270][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 316.533433][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.542568][ T46] usb 1-1: USB disconnect, device number 44 [ 316.672503][ T5710] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 316.681985][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.690795][ T5722] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 316.698650][ T5722] usb 2-1: can't read configurations, error -71 [ 316.797886][ T805] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 316.872676][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 316.878959][ T5710] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 316.887240][ T5710] usb 6-1: config 0 has no interface number 0 [ 316.893345][ T5710] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 316.904846][ T5710] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 316.914299][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.922527][ T5710] usb 6-1: Product: syz [ 316.926765][ T5710] usb 6-1: Manufacturer: syz [ 316.932016][ T5710] usb 6-1: SerialNumber: syz [ 316.969519][T10556] FAULT_INJECTION: forcing a failure. [ 316.969519][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 316.982247][T10556] CPU: 0 UID: 0 PID: 10556 Comm: syz.3.1295 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.982274][T10556] Tainted: [L]=SOFTLOCKUP [ 316.982280][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.982290][T10556] Call Trace: [ 316.982296][T10556] [ 316.982302][T10556] dump_stack_lvl+0x100/0x190 [ 316.982325][T10556] should_fail_ex.cold+0x5/0xa [ 316.982346][T10556] ? fs_reclaim_acquire+0x70/0x100 [ 316.982372][T10556] ? tomoyo_encode2+0xfb/0x3c0 [ 316.982393][T10556] should_failslab+0xc2/0x120 [ 316.982417][T10556] __kmalloc_noprof+0xe0/0x840 [ 316.982436][T10556] ? d_absolute_path+0x136/0x1b0 [ 316.982462][T10556] tomoyo_encode2+0xfb/0x3c0 [ 316.982483][T10556] tomoyo_encode+0x29/0x50 [ 316.982503][T10556] tomoyo_realpath_from_path+0x18c/0x690 [ 316.982527][T10556] tomoyo_path_number_perm+0x23c/0x580 [ 316.982549][T10556] ? tomoyo_path_number_perm+0x22e/0x580 [ 316.982568][T10556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.982585][T10556] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 316.982607][T10556] ? rcu_is_watching+0x12/0xc0 [ 316.982630][T10556] ? rcu_is_watching+0x12/0xc0 [ 316.982656][T10556] ? rcu_is_watching+0x12/0xc0 [ 316.982677][T10556] ? __fget_files+0x215/0x3d0 [ 316.982693][T10556] ? hook_file_ioctl_common+0x149/0x410 [ 316.982717][T10556] ? lock_release+0x24d/0x310 [ 316.982735][T10556] ? __fget_files+0x21f/0x3d0 [ 316.982753][T10556] security_file_ioctl+0xd3/0x230 [ 316.982772][T10556] __x64_sys_ioctl+0xb7/0x210 [ 316.982796][T10556] do_syscall_64+0x115/0x870 [ 316.982816][T10556] ? clear_bhb_loop+0x40/0x90 [ 316.982835][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.982852][T10556] RIP: 0033:0x7fdda7b9ce59 [ 316.982865][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.982881][T10556] RSP: 002b:00007fdda898d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.982899][T10556] RAX: ffffffffffffffda RBX: 00007fdda7e16180 RCX: 00007fdda7b9ce59 [ 316.982910][T10556] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000007 [ 316.982921][T10556] RBP: 00007fdda898d090 R08: 0000000000000000 R09: 0000000000000000 [ 316.982931][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.982942][T10556] R13: 00007fdda7e16218 R14: 00007fdda7e16180 R15: 00007ffca32f7d58 [ 316.982958][T10556] [ 316.983002][T10556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.129477][ T5722] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 317.237339][ T5710] usb 6-1: config 0 descriptor?? [ 317.242842][T10548] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.250054][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 317.257876][ T805] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 317.267025][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.275090][ T805] usb 3-1: Product: syz [ 317.279324][ T805] usb 3-1: Manufacturer: syz [ 317.283919][ T805] usb 3-1: SerialNumber: syz [ 317.289303][ T805] usb 3-1: config 0 descriptor?? [ 317.311927][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.322941][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.332945][ T5722] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.342048][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.351604][ T5722] usb 2-1: config 0 descriptor?? [ 317.388750][T10558] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 317.396859][T10558] netlink: 'syz.0.1296': attribute type 2 has an invalid length. [ 317.489731][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.526987][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.553091][T10548] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.631452][ T5722] usbhid 2-1:0.0: can't add hid device: -71 [ 317.648133][ T5722] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 317.675427][ T5722] usb 2-1: USB disconnect, device number 53 [ 317.825653][ T5710] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 317.877377][ T5710] asix 6-1:0.188: probe with driver asix failed with error -71 [ 317.892146][ T5710] usb 6-1: USB disconnect, device number 21 [ 318.424954][T10550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.435335][ T805] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 318.497991][ T805] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 318.510032][ T805] usb 3-1: USB disconnect, device number 62 [ 318.614470][ T5722] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 318.623929][T10558] xt_CT: No such helper "snmp_trap" [ 318.786557][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.815872][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.830851][ T5722] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.084759][ T5615] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 319.118692][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.128699][ T5722] usb 2-1: config 0 descriptor?? [ 319.204246][T10588] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1302'. [ 319.278435][ T5615] usb 4-1: not running at top speed; connect to a high speed hub [ 319.288591][ T5615] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 319.297755][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.305845][ T5615] usb 4-1: Product: ꣀꡛ狎✡숴䧓苓䶉楿⓰텲ⳑ糺掳䮐ｐ냅绘⇱汗䔱筠ꣁ辶攐ೄ쒶⍗ᛩ딟኏벛汗᪕뼢㡮虘㙑ꊕ➓譿 [ 319.321605][ T5615] usb 4-1: Manufacturer: Й [ 319.326135][ T5615] usb 4-1: SerialNumber: Б [ 319.548083][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 319.560667][ T5615] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 319.568205][ T5615] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 319.569260][ T5722] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 319.575264][ T5615] usb 4-1: unit 5 not found! [ 319.593114][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input70 [ 319.607706][ T5615] usb 4-1: USB disconnect, device number 49 [ 319.780976][ T5722] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 319.874320][ T5722] usb 2-1: USB disconnect, device number 54 [ 320.227352][T10594] fido_id[10594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 320.314333][T10604] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1306'. [ 320.378786][T10608] capability: warning: `syz.3.1308' uses 32-bit capabilities (legacy support in use) [ 320.591603][ T5615] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 320.762552][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 321.069059][ T5615] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.081051][ T5615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.092032][ T5615] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 321.107375][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.117585][ T5615] usb 3-1: config 0 descriptor?? [ 321.213868][ T805] libceph: connect (1)[c::]:6789 error -101 [ 321.219896][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 321.232620][ T5722] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 321.376840][T10622] ceph: No mds server is up or the cluster is laggy [ 321.404918][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.413036][ T5722] usb 2-1: not running at top speed; connect to a high speed hub [ 321.421717][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.432402][ T5722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.435498][T10633] lo speed is unknown, defaulting to 1000 [ 321.442794][ T5722] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 321.456175][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.464207][ T5722] usb 2-1: Product: syz [ 321.468477][ T5722] usb 2-1: Manufacturer: syz [ 321.473153][ T5722] usb 2-1: SerialNumber: syz [ 321.787969][ T5615] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 321.838447][T10616] sg_write: data in/out 1583/14 bytes for SCSI command 0x0-- guessing data in; [ 321.838447][T10616] program syz.1.1311 not setting count and/or reply_len properly [ 322.119549][ T46] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 322.128340][ T29] audit: type=1400 audit(1781876225.426:783): avc: denied { ioctl } for pid=10640 comm="syz.0.1316" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.166070][ T29] audit: type=1400 audit(1781876225.464:784): avc: denied { connect } for pid=10603 comm="syz.2.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.189079][ T5615] usb 3-1: USB disconnect, device number 63 [ 322.228028][ T29] audit: type=1400 audit(1781876225.520:785): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 322.250708][ T29] audit: type=1400 audit(1781876225.548:786): avc: denied { read write } for pid=5604 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.280464][ T29] audit: type=1400 audit(1781876225.548:787): avc: denied { open } for pid=5604 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.281353][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 322.304979][ T29] audit: type=1400 audit(1781876225.548:788): avc: denied { ioctl } for pid=5604 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.338145][ T29] audit: type=1400 audit(1781876225.623:789): avc: denied { read } for pid=10647 comm="syz.3.1319" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 322.363076][ T29] audit: type=1400 audit(1781876225.623:790): avc: denied { open } for pid=10647 comm="syz.3.1319" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 322.363930][ T46] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 322.398256][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.405154][ T46] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 322.414318][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.495742][ T46] usb 1-1: config 0 descriptor?? [ 322.727092][ T29] audit: type=1400 audit(1781876225.988:791): avc: denied { create } for pid=10652 comm="syz.5.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.746998][ T29] audit: type=1400 audit(1781876225.988:792): avc: denied { allowed } for pid=10652 comm="syz.5.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 322.799948][T10657] fuseblk: Unknown parameter 'subj_type' [ 322.906189][T10662] syzkaller0: entered promiscuous mode [ 322.911953][T10662] syzkaller0: entered allmulticast mode [ 322.954485][ T46] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 323.499762][ T46] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -71 [ 323.531330][ T46] usb 1-1: USB disconnect, device number 45 [ 323.926985][ T5722] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 323.943655][ T5722] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 323.951432][ T5722] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 323.961037][ T5722] usb 2-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 323.970634][ T5722] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 323.979001][ T5722] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 323.987005][ T5722] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 324.026938][ T5722] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 324.035052][ T5722] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 324.043105][ T5722] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 324.053428][ T5722] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 324.064107][ T5722] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 324.073649][ T5722] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 324.084956][ T5722] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 324.095060][ T5722] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 324.103490][ T5722] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 324.111741][ T5722] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 324.129453][ T5722] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 324.137602][ T5722] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 324.172338][ T5722] usb 2-1: USB disconnect, device number 55 [ 324.198312][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.228405][T10678] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.266439][T10685] SELinux: failed to load policy [ 324.273882][T10678] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.288047][T10685] trusted_key: encrypted_key: master key parameter '|rusted:syz' is invalid [ 324.297842][T10685] trusted_key: encrypted_key: hex blob is missing [ 324.334243][T10678] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.398650][T10678] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.488299][ T457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.499004][ T457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.509925][ T457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.521159][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.523924][ T5722] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 324.684328][ T5731] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 324.697587][ T5722] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 324.706828][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.714817][ T5722] usb 2-1: Product: syz [ 324.719076][ T5722] usb 2-1: Manufacturer: syz [ 324.723678][ T5722] usb 2-1: SerialNumber: syz [ 324.729107][ T5722] usb 2-1: config 0 descriptor?? [ 324.736263][ T5722] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 324.844429][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 324.850681][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.861203][ T5731] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.870268][ T5731] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 324.879369][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.888775][ T5731] usb 4-1: config 0 descriptor?? [ 324.908573][ T5615] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 325.047484][ T5615] usb 6-1: device descriptor read/64, error -71 [ 325.173857][ T5722] sonixb 2-1:0.0: Error writing register 01: -71 [ 325.183430][ T5722] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 325.199613][ T5722] usb 2-1: USB disconnect, device number 56 [ 325.325325][ T5615] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 325.505912][ T5615] usb 6-1: device descriptor read/64, error -71 [ 325.624648][ T5615] usb usb6-port1: attempt power cycle [ 325.891456][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 325.987862][ T5615] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 326.009865][ T5615] usb 6-1: device descriptor read/8, error -71 [ 326.051978][ T5722] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 326.080054][ T805] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 326.085044][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.094805][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.101918][T10707] batman_adv: batadv0: Interface activated: dummy0 [ 326.108459][T10707] batadv0: mtu less than device minimum [ 326.114188][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.124699][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.135440][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.136466][T10706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.146129][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.152981][T10706] IPv6: NLM_F_CREATE should be set when creating new route [ 326.163652][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.170503][T10706] IPv6: NLM_F_CREATE should be set when creating new route [ 326.181133][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.198510][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.209025][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.219538][T10707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.233480][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.248572][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.260711][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.273958][T10707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.284528][T10707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.295652][T10707] veth0_virt_wifi: left promiscuous mode [ 326.302147][T10707] veth1_vlan: left promiscuous mode [ 326.307683][T10707] veth0_vlan: left promiscuous mode [ 326.313097][T10707] veth0_vlan: entered promiscuous mode [ 326.319675][T10707] veth1_vlan: entered promiscuous mode [ 326.326143][T10707] veth1_macvtap: left promiscuous mode [ 326.331914][T10707] veth0_macvtap: left promiscuous mode [ 326.337651][T10707] veth0_macvtap: entered promiscuous mode [ 326.343695][T10707] veth1_macvtap: entered promiscuous mode [ 326.352321][T10707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.359880][T10707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.367253][T10707] 8021q: adding VLAN 0 to HW filter on device eth0 [ 326.374435][T10707] 8021q: adding VLAN 0 to HW filter on device eth1 [ 326.381623][T10707] 8021q: adding VLAN 0 to HW filter on device eth2 [ 326.388799][T10707] 8021q: adding VLAN 0 to HW filter on device eth3 [ 326.395613][T10707] vlan2: left promiscuous mode [ 326.400350][T10707] dummy0: left promiscuous mode [ 326.437039][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.450395][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.459414][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.469396][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.484363][T10710] lo speed is unknown, defaulting to 1000 [ 326.504317][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 326.510913][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.525962][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 326.538729][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 326.543668][ T5615] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 326.550235][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024 [ 326.572053][ T5722] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 326.576042][ T5615] usb 6-1: device descriptor read/8, error -71 [ 326.588167][ T805] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 326.591977][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.596193][ T805] usb 3-1: config 1 has no interface number 0 [ 326.610487][ T805] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 326.613833][ T5722] usb 2-1: Product: syz [ 326.622036][ T805] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 326.622062][ T805] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.623532][ T805] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 326.637970][ T5722] usb 2-1: Manufacturer: syz [ 326.647303][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.669288][ T805] usb 3-1: Product: syz [ 326.673861][ T805] usb 3-1: Manufacturer: syz [ 326.678509][ T805] usb 3-1: SerialNumber: syz [ 326.686173][T10704] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 326.693860][ T5722] usb 2-1: SerialNumber: syz [ 326.704216][ T5615] usb usb6-port1: unable to enumerate USB device [ 326.709720][ T5722] usb 2-1: config 0 descriptor?? [ 326.715678][ T5980] block nbd0: Possible stuck request ffff888027a37000: control (read@0,1024B). Runtime 120 seconds [ 326.726558][ T5980] block nbd0: Possible stuck request ffff888027a371c0: control (read@1024,1024B). Runtime 120 seconds [ 326.737732][ T5980] block nbd0: Possible stuck request ffff888027a37380: control (read@2048,1024B). Runtime 120 seconds [ 326.749038][ T5980] block nbd0: Possible stuck request ffff888027a37540: control (read@3072,1024B). Runtime 120 seconds [ 326.763183][T10702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.908035][T10704] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 327.067190][T10702] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 327.075011][T10702] nbd: error processing sock list [ 327.080197][ T5722] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 327.087820][T10702] block nbd1: shutting down sockets [ 327.260419][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 327.272427][ T5722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.284004][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 327.296965][ T5722] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 327.310857][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.320128][ T5722] usb 1-1: Product: syz [ 327.325285][ T5722] usb 1-1: Manufacturer: syz [ 327.330810][ T5722] usb 1-1: SerialNumber: syz [ 327.353379][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.381148][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.388742][ T805] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 327.413601][ T5722] usb 1-1: config 0 descriptor?? [ 327.525472][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 327.525660][ T29] audit: type=1400 audit(1781876230.470:858): avc: denied { append } for pid=10720 comm="syz.2.1341" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 327.805081][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 327.842774][ T5722] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input71 [ 327.962974][ T29] audit: type=1400 audit(1781876230.882:859): avc: denied { read } for pid=4959 comm="acpid" name="mouse1" dev="devtmpfs" ino=3559 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.030336][ T5722] imon:send_packet: packet tx failed (-71) [ 328.135977][ T5722] imon 1-1:0.0: panel buttons/knobs setup failed [ 328.230194][ T29] audit: type=1400 audit(1781876230.882:860): avc: denied { open } for pid=4959 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3559 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.300603][ T805] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 328.307267][ T805] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 328.308999][ T805] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 328.309019][ T805] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 328.314957][ T805] usb 3-1: USB disconnect, device number 64 [ 328.340805][ T805] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 328.372289][ T806] usb 4-1: USB disconnect, device number 50 [ 328.404533][ T805] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 328.416406][ T5722] rc_core: IR keymap rc-imon-pad not found [ 328.429242][ T29] audit: type=1400 audit(1781876230.882:861): avc: denied { ioctl } for pid=4959 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3559 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.457366][ T5722] Registered IR keymap rc-empty [ 328.470745][ T1227] usb 2-1: USB disconnect, device number 57 [ 328.478263][ T5722] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 328.503208][ T5722] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 328.513100][ T29] audit: type=1400 audit(1781876231.256:862): avc: denied { read } for pid=5269 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 328.546906][ T5722] imon:send_packet: packet tx failed (-71) [ 328.555680][ T29] audit: type=1400 audit(1781876231.284:863): avc: denied { name_bind } for pid=10726 comm="syz.5.1342" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 328.582502][ T5722] imon 1-1:0.0: remote input dev register failed [ 328.590617][ T5722] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 328.598654][ T29] audit: type=1400 audit(1781876231.284:864): avc: denied { node_bind } for pid=10726 comm="syz.5.1342" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 328.621734][ T29] audit: type=1400 audit(1781876231.294:865): avc: denied { unlink } for pid=10726 comm="syz.5.1342" name="#15" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.647057][ T5722] imon 1-1:0.0: unable to initialize intf0, err 0 [ 328.654074][ T5722] imon:imon_probe: failed to initialize context! [ 328.660822][ T5722] imon 1-1:0.0: unable to register, err -19 [ 328.671656][ T5722] usb 1-1: USB disconnect, device number 46 [ 328.677616][ T29] audit: type=1400 audit(1781876231.294:866): avc: denied { mount } for pid=10726 comm="syz.5.1342" name="/" dev="overlay" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 328.704790][ T29] audit: type=1400 audit(1781876231.313:867): avc: denied { mounton } for pid=10726 comm="syz.5.1342" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 328.981352][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 329.076163][ T5722] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 329.236480][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 329.257951][ T5722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.272834][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.288205][ T5722] usb 1-1: string descriptor 0 read error: -22 [ 329.295409][ T5722] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 329.305399][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.378546][ T5722] usb 1-1: config 0 descriptor?? [ 329.413137][ T5722] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input73 [ 329.597381][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 329.797821][T10761] tc_dump_action: action bad kind [ 329.824179][T10714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.857124][T10714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.872808][T10780] FAULT_INJECTION: forcing a failure. [ 330.872808][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 330.908282][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.1.1358 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.908308][T10780] Tainted: [L]=SOFTLOCKUP [ 330.908314][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.908323][T10780] Call Trace: [ 330.908328][T10780] [ 330.908334][T10780] dump_stack_lvl+0x100/0x190 [ 330.908350][T10780] should_fail_ex.cold+0x5/0xa [ 330.908363][T10780] ? fs_reclaim_acquire+0x70/0x100 [ 330.908384][T10780] ? tomoyo_encode2+0xfb/0x3c0 [ 330.908397][T10780] should_failslab+0xc2/0x120 [ 330.908419][T10780] __kmalloc_noprof+0xe0/0x840 [ 330.908436][T10780] ? d_absolute_path+0x136/0x1b0 [ 330.908459][T10780] tomoyo_encode2+0xfb/0x3c0 [ 330.908479][T10780] tomoyo_encode+0x29/0x50 [ 330.908492][T10780] tomoyo_realpath_from_path+0x18c/0x690 [ 330.908507][T10780] tomoyo_path_perm+0x276/0x460 [ 330.908517][T10780] ? tomoyo_path_perm+0x262/0x460 [ 330.908527][T10780] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 330.908538][T10780] ? __pfx_stack_trace_save+0x10/0x10 [ 330.908559][T10780] ? stack_depot_save_flags+0x27/0x9d0 [ 330.908586][T10780] ? rcu_is_watching+0x12/0xc0 [ 330.908605][T10780] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 330.908629][T10780] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 330.908643][T10780] tomoyo_sb_umount+0x8c/0xd0 [ 330.908657][T10780] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 330.908672][T10780] security_sb_umount+0xc4/0x210 [ 330.908682][T10780] path_umount+0x328/0x1260 [ 330.908698][T10780] ? putname+0xb1/0x110 [ 330.908715][T10780] ? __pfx_path_umount+0x10/0x10 [ 330.908732][T10780] ? putname+0xb6/0x110 [ 330.908749][T10780] __x64_sys_umount+0x16a/0x1a0 [ 330.908765][T10780] ? __pfx___x64_sys_umount+0x10/0x10 [ 330.908777][T10780] ? rcu_is_watching+0x12/0xc0 [ 330.908791][T10780] do_syscall_64+0x115/0x870 [ 330.908802][T10780] ? clear_bhb_loop+0x40/0x90 [ 330.908814][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.908824][T10780] RIP: 0033:0x7f640e39ce59 [ 330.908835][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.908850][T10780] RSP: 002b:00007f640f1ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 330.908866][T10780] RAX: ffffffffffffffda RBX: 00007f640e615fa0 RCX: 00007f640e39ce59 [ 330.908876][T10780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 330.908888][T10780] RBP: 00007f640f1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 330.908898][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.908907][T10780] R13: 00007f640e616038 R14: 00007f640e615fa0 R15: 00007ffd2836f358 [ 330.908917][T10780] [ 330.910039][T10780] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.177276][ T805] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 331.200582][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 331.343388][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.354479][ T805] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 331.363793][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.373207][ T805] usb 6-1: config 0 descriptor?? [ 331.401999][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 331.432570][ T5722] imon:send_packet: packet tx failed (-71) [ 331.460515][ T5722] imon 1-1:0.0: panel buttons/knobs setup failed [ 331.491742][ T1227] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 331.642270][ T805] usbhid 6-1:0.0: can't add hid device: -71 [ 331.642493][ T5722] rc_core: IR keymap rc-imon-pad not found [ 331.648332][ T805] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 331.669586][ T5722] Registered IR keymap rc-empty [ 331.674905][ T5722] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 331.695945][ T5722] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 331.717848][ T1227] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 331.719023][ T805] usb 6-1: USB disconnect, device number 26 [ 331.750960][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.759084][ T1227] usb 2-1: Product: syz [ 331.763916][ T1227] usb 2-1: Manufacturer: syz [ 331.764005][ T5722] imon:send_packet: packet tx failed (-71) [ 331.774794][ T1227] usb 2-1: SerialNumber: syz [ 331.801368][ T5722] imon 1-1:0.0: remote input dev register failed [ 331.808537][ T5722] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 331.827634][ T1227] usb 2-1: config 0 descriptor?? [ 331.865382][ T1227] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 331.886627][T10802] net_ratelimit: 69 callbacks suppressed [ 331.886638][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 331.906503][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.944858][ T5722] imon 1-1:0.0: unable to initialize intf0, err 0 [ 331.951582][ T5722] imon:imon_probe: failed to initialize context! [ 331.959196][ T5722] imon 1-1:0.0: unable to register, err -19 [ 331.967518][ T5722] usb 1-1: USB disconnect, device number 47 [ 332.074077][T10812] binder: 10807:10812 ioctl 800a6f2f 200000000140 returned -22 [ 332.082857][T10812] binder: 10807:10812 ioctl c0306201 200000000640 returned -22 [ 332.400190][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1367'. [ 332.452936][ T6687] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 332.474419][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 332.488987][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.538511][ T805] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 332.636227][ T1227] gspca_sunplus: reg_w_riv err -71 [ 332.641661][ T1227] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 332.641742][ T6687] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.788902][ T1227] usb 2-1: USB disconnect, device number 58 [ 332.797697][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.809238][ T6687] usb 3-1: not running at top speed; connect to a high speed hub [ 332.821938][ T6687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.851114][ T805] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 332.861084][ T6687] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.869996][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.884284][ T6687] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 332.903164][ T805] usb 6-1: config 0 descriptor?? [ 332.917563][ T6687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.928832][ T6687] usb 3-1: Product: syz [ 332.938955][ T6687] usb 3-1: Manufacturer: syz [ 332.944647][ T6687] usb 3-1: SerialNumber: syz [ 333.032361][T10821] gfs2: error -5 reading superblock [ 333.049379][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 333.054778][T10821] xt_hashlimit: size too large, truncated to 1048576 [ 333.063709][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 333.086788][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 333.086815][ T29] audit: type=1400 audit(1781876235.655:906): avc: denied { setopt } for pid=10819 comm="syz.3.1369" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.257818][ T29] audit: type=1400 audit(1781876235.842:907): avc: denied { map } for pid=10819 comm="syz.3.1369" path="socket:[37204]" dev="sockfs" ino=37204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.286859][ T1227] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 333.306277][T10809] sg_write: data in/out 1583/14 bytes for SCSI command 0x0-- guessing data in; [ 333.306277][T10809] program syz.2.1365 not setting count and/or reply_len properly [ 333.323245][ T29] audit: type=1400 audit(1781876235.889:908): avc: denied { read write } for pid=10808 comm="syz.2.1365" name="sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.351517][ T29] audit: type=1400 audit(1781876235.889:909): avc: denied { open } for pid=10808 comm="syz.2.1365" path="/dev/sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.376908][ T29] audit: type=1400 audit(1781876235.889:910): avc: denied { ioctl } for pid=10808 comm="syz.2.1365" path="/dev/sg0" dev="devtmpfs" ino=711 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.404165][ T29] audit: type=1400 audit(1781876235.907:911): avc: denied { read accept } for pid=10819 comm="syz.3.1369" path="socket:[37204]" dev="sockfs" ino=37204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.465647][ T1227] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 333.475274][ T1227] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 333.484903][ T1227] usb 1-1: Product: syz [ 333.489681][ T1227] usb 1-1: Manufacturer: syz [ 333.494356][ T1227] usb 1-1: SerialNumber: syz [ 333.501552][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 333.510719][ T1227] usb 1-1: config 0 descriptor?? [ 333.661290][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 333.675647][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 333.732162][ T29] audit: type=1400 audit(1781876236.282:912): avc: denied { create } for pid=10822 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 333.772265][T10834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.793241][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.813260][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.823315][ T1227] usb 1-1: USB disconnect, device number 48 [ 333.906583][ T805] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 333.914246][ T805] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input75 [ 334.109237][ T46] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 334.147825][ T1227] usb 6-1: USB disconnect, device number 27 [ 334.147960][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 334.258892][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 334.273208][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 334.282979][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.298873][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.308054][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.317949][ T46] usb 4-1: config 0 descriptor?? [ 334.472337][ T29] audit: type=1400 audit(1781876236.974:913): avc: denied { create } for pid=10844 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.492745][ T29] audit: type=1400 audit(1781876236.984:914): avc: denied { write } for pid=10844 comm="syz.1.1375" path="socket:[37306]" dev="sockfs" ino=37306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.553112][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 334.561012][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.569429][ T29] audit: type=1400 audit(1781876236.984:915): avc: denied { bind } for pid=10844 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.595448][ T46] usb 4-1: USB disconnect, device number 51 [ 335.178913][ T46] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 335.957650][ T6687] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 335.972111][ T6687] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 335.985182][ T6687] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 336.011160][ T6687] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 336.027414][T10856] wireguard0: entered promiscuous mode [ 336.036866][ T6687] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 336.045369][ T6687] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 336.053300][ T6687] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 336.062021][ T6687] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 336.068262][T10856] wireguard0: entered allmulticast mode [ 336.070539][ T6687] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 336.083073][ T6687] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 336.098272][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.099574][ T6687] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 336.111230][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 336.117118][ T6687] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 336.133655][ T6687] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 336.143774][ T6687] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 336.145595][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.155281][ T6687] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 336.168347][ T6687] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3) [ 336.176500][ T6687] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 336.194207][ T6687] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 336.202475][ T6687] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 336.205306][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.218360][ T6687] usb 3-1: USB disconnect, device number 65 [ 336.259792][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.308893][ T46] usb 4-1: config 0 descriptor?? [ 336.463241][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 336.481823][T10869] bridge_slave_1: left allmulticast mode [ 336.490381][T10869] bridge_slave_1: left promiscuous mode [ 336.498726][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.547840][T10869] bridge_slave_0: left allmulticast mode [ 336.554898][T10869] bridge_slave_0: left promiscuous mode [ 336.562015][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.629963][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 336.674071][ T6687] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 336.835108][ T6687] usb 3-1: Using ep0 maxpacket: 16 [ 336.849567][ T6687] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.866380][ T6687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.908404][ T6687] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 336.953724][ T6687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.973452][ T6687] usb 3-1: Product: syz [ 336.989661][ T6687] usb 3-1: Manufacturer: syz [ 336.998289][ T6687] usb 3-1: SerialNumber: syz [ 337.090746][ T1227] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 337.091191][ T6687] usb 3-1: config 0 descriptor?? [ 337.285742][ T1227] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 337.302146][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.316312][ T1227] usb 1-1: Product: syz [ 337.323054][ T1227] usb 1-1: Manufacturer: syz [ 337.331693][ T1227] usb 1-1: SerialNumber: syz [ 337.341756][ T1227] usb 1-1: config 0 descriptor?? [ 337.352601][ T1227] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 337.374951][ T1227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.385928][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 337.393315][ T1227] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 337.393854][ T6687] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 337.417221][ T1227] usb 1-1: media controller created [ 337.417572][ T6687] imon:send_packet: packet tx failed (-71) [ 337.437855][ T1227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.443342][ T6687] imon 3-1:0.0: panel buttons/knobs setup failed [ 337.481868][ T1227] DVB: Unable to find symbol mt352_attach() [ 337.498029][ T6687] rc_core: IR keymap rc-imon-pad not found [ 337.504204][ T6687] Registered IR keymap rc-empty [ 337.509698][ T6687] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 337.520053][ T1227] DVB: Unable to find symbol nxt6000_attach() [ 337.520312][ T6687] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 337.535548][ T1227] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 337.535969][ T6687] imon:send_packet: packet tx failed (-71) [ 337.550835][ T1165] net_ratelimit: 8 callbacks suppressed [ 337.550847][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 337.570890][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.587047][ T1227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input78 [ 337.613273][ T1227] dvb-usb: schedule remote query interval to 1000 msecs. [ 337.613497][ T6687] imon 3-1:0.0: remote input dev register failed [ 337.621078][ T1227] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 337.644703][ T1227] dvb-usb: bulk message failed: -22 (7/0) [ 337.651015][ T6687] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 337.653742][ T1227] dvb-usb: bulk message failed: -22 (7/0) [ 337.666209][ T1227] usb 1-1: USB disconnect, device number 49 [ 337.686155][ T6687] imon 3-1:0.0: unable to initialize intf0, err 0 [ 337.699955][ T6687] imon:imon_probe: failed to initialize context! [ 337.717367][ T6687] imon 3-1:0.0: unable to register, err -19 [ 337.735998][ T1227] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 337.736604][ T6687] usb 3-1: USB disconnect, device number 66 [ 337.868480][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 337.875669][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.902294][ T46] usb 4-1: USB disconnect, device number 52 [ 338.105824][ T6687] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 338.159429][ T805] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 338.160494][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 338.181537][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 338.266345][ T6687] usb 3-1: Using ep0 maxpacket: 16 [ 338.272853][ T6687] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.283940][ T6687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.287948][ T46] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 338.292957][ T6687] usb 3-1: string descriptor 0 read error: -22 [ 338.304615][ T6687] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 338.313927][ T6687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.323135][ T6687] usb 3-1: config 0 descriptor?? [ 338.347263][ T6687] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input79 [ 338.359243][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 338.368365][ T805] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 338.376956][ T805] usb 2-1: config 0 has no interface number 0 [ 338.384843][ T805] usb 2-1: config 0 interface 184 has no altsetting 0 [ 338.393865][ T805] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 338.403314][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.411380][ T805] usb 2-1: Product: syz [ 338.415763][ T805] usb 2-1: Manufacturer: syz [ 338.420402][ T805] usb 2-1: SerialNumber: syz [ 338.426635][ T805] usb 2-1: config 0 descriptor?? [ 338.491824][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.512111][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 338.531196][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.541156][ T46] usb 4-1: config 0 descriptor?? [ 338.580040][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.589543][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.888642][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 339.353206][T10919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.365074][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 339.379582][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 339.401679][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.411247][ T46] usb 4-1: USB disconnect, device number 53 [ 339.421896][ T5710] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 339.439889][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 339.439903][ T29] audit: type=1400 audit(1781876241.625:937): avc: denied { read } for pid=10925 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.471407][ T29] audit: type=1400 audit(1781876241.625:938): avc: denied { read open } for pid=10925 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.498215][ T29] audit: type=1400 audit(1781876241.625:939): avc: denied { getattr } for pid=10925 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.524453][ T29] audit: type=1400 audit(1781876241.625:940): avc: denied { getattr } for pid=10925 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.551231][ T29] audit: type=1400 audit(1781876241.709:941): avc: denied { read } for pid=10927 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.575921][ T29] audit: type=1400 audit(1781876241.709:942): avc: denied { open } for pid=10927 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.613852][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.626352][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.642159][ T5710] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 339.655339][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.667961][ T5710] usb 1-1: config 0 descriptor?? [ 339.674748][ T29] audit: type=1400 audit(1781876241.840:943): avc: denied { write } for pid=10924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.676664][ T1227] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 339.703408][ T29] audit: type=1400 audit(1781876241.840:944): avc: denied { add_name } for pid=10924 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.730799][ T29] audit: type=1400 audit(1781876241.840:945): avc: denied { create } for pid=10924 comm="dhcpcd-run-hook" name="resolv.conf.ipvlan1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.754778][ T29] audit: type=1400 audit(1781876241.840:946): avc: denied { write } for pid=10924 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ipvlan1.ipv4ll" dev="tmpfs" ino=7252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.783718][ T46] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 339.880922][ T1227] usb 6-1: config 8 has an invalid interface number: 137 but max is 0 [ 339.889114][ T1227] usb 6-1: config 8 has no interface number 0 [ 339.897783][ T1227] usb 6-1: string descriptor 0 read error: -22 [ 339.904182][ T1227] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 339.913554][ T1227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.926395][ T1227] ttusb_dec_send_command: command bulk message failed: error -22 [ 339.954553][T10799] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 339.968973][T10799] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.002372][ T1227] ttusb-dec 6-1:8.137: probe with driver ttusb-dec failed with error -22 [ 340.030385][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.041739][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 340.041830][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 340.051032][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.070374][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.074870][ T46] usb 4-1: config 0 descriptor?? [ 340.400380][ T9] usb 6-1: USB disconnect, device number 28 [ 340.491555][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 340.505564][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 340.528652][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 340.562805][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 340.577212][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.592234][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 340.592733][ T6687] imon:send_packet: packet tx failed (-71) [ 340.609147][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 340.619684][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 340.629343][ T805] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 340.638511][ T6687] imon 3-1:0.0: panel buttons/knobs setup failed [ 340.660007][ T805] usb 2-1: USB disconnect, device number 59 [ 340.702782][ T6687] rc_core: IR keymap rc-imon-pad not found [ 340.709689][ T6687] Registered IR keymap rc-empty [ 340.715974][ T6687] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 340.726298][ T6687] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 340.735871][ T6687] imon:send_packet: packet tx failed (-71) [ 340.786125][ T6687] imon 3-1:0.0: remote input dev register failed [ 340.797082][ T6687] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 340.817621][ T6687] imon 3-1:0.0: unable to initialize intf0, err 0 [ 340.824268][ T6687] imon:imon_probe: failed to initialize context! [ 340.830635][ T6687] imon 3-1:0.0: unable to register, err -19 [ 340.839404][ T6687] usb 3-1: USB disconnect, device number 67 [ 341.078636][ T46] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 341.094518][ T46] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input81 [ 341.162079][ T6687] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 341.314993][ T9] usb 4-1: USB disconnect, device number 54 [ 341.315097][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 341.344424][ T6687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.377169][ T6687] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.547668][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.559316][ T6687] usb 3-1: config 0 descriptor?? [ 341.786411][ T5710] usbhid 1-1:0.0: can't add hid device: -71 [ 341.792400][ T5710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 341.835047][ T5710] usb 1-1: USB disconnect, device number 50 [ 341.883548][T10960] fuse: Bad value for 'fd' [ 341.937393][ T6687] usbhid 3-1:0.0: can't add hid device: -71 [ 341.955648][ T6687] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.007691][ T6687] usb 3-1: USB disconnect, device number 68 [ 342.061125][T10966] fuse: Bad value for 'fd' [ 342.327910][T10972] netlink: 'syz.3.1409': attribute type 2 has an invalid length. [ 342.533287][ T6687] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 342.811421][ T6687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.895124][ T6687] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.916972][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1410'. [ 342.961311][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.056234][ T6687] usb 3-1: config 0 descriptor?? [ 343.355445][ T457] net_ratelimit: 8 callbacks suppressed [ 343.355461][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 343.375469][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 343.620153][ T5722] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 343.704869][ T6687] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 343.839258][ T5722] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 175, changing to 4 [ 343.957492][ T5722] usb 4-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40 [ 344.057280][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.111927][ T6687] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input83 [ 344.132916][ T5722] usb 4-1: Product: syz [ 344.147885][ T5722] usb 4-1: Manufacturer: syz [ 344.162855][ T5722] usb 4-1: SerialNumber: syz [ 344.240124][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 344.254427][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 344.504823][ T6687] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 344.525822][ T5722] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 344.565173][ T6687] usb 3-1: USB disconnect, device number 69 [ 344.596207][T11006] fido_id[11006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 344.696972][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 344.707575][ T5722] usb 4-1: can't set first interface for hiFace device. [ 344.727376][ T5722] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 344.730984][T11011] FAULT_INJECTION: forcing a failure. [ 344.730984][T11011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.751328][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.1.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.751357][T11011] Tainted: [L]=SOFTLOCKUP [ 344.751364][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.751374][T11011] Call Trace: [ 344.751381][T11011] [ 344.751388][T11011] dump_stack_lvl+0x100/0x190 [ 344.751412][T11011] should_fail_ex.cold+0x5/0xa [ 344.751434][T11011] _copy_from_iter+0x1f4/0x1690 [ 344.751462][T11011] ? __asan_memset+0x23/0x50 [ 344.751483][T11011] ? __pfx__copy_from_iter+0x10/0x10 [ 344.751508][T11011] ? __pfx___alloc_skb+0x10/0x10 [ 344.751530][T11011] ? netlink_autobind.isra.0+0x160/0x370 [ 344.751553][T11011] netlink_sendmsg+0x808/0xda0 [ 344.751574][T11011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.751598][T11011] ____sys_sendmsg+0x9e1/0xb70 [ 344.751616][T11011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.751637][T11011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.751657][T11011] ? kstrtouint_from_user+0x13c/0x1d0 [ 344.751679][T11011] ___sys_sendmsg+0x190/0x1e0 [ 344.751699][T11011] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.751717][T11011] ? get_pid_task+0x106/0x250 [ 344.751743][T11011] ? rcu_is_watching+0x12/0xc0 [ 344.751771][T11011] __sys_sendmsg+0x160/0x210 [ 344.751794][T11011] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.751820][T11011] ? rcu_is_watching+0x12/0xc0 [ 344.751846][T11011] do_syscall_64+0x115/0x870 [ 344.751865][T11011] ? clear_bhb_loop+0x40/0x90 [ 344.751884][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.751901][T11011] RIP: 0033:0x7f640e39ce59 [ 344.751915][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.751932][T11011] RSP: 002b:00007f640f1ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.751950][T11011] RAX: ffffffffffffffda RBX: 00007f640e615fa0 RCX: 00007f640e39ce59 [ 344.751962][T11011] RDX: 0000000004008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 344.751973][T11011] RBP: 00007f640f1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 344.751984][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.751994][T11011] R13: 00007f640e616038 R14: 00007f640e615fa0 R15: 00007ffd2836f358 [ 344.752011][T11011] [ 344.881254][ T5722] usb 4-1: can't set first interface for hiFace device. [ 344.983694][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 344.983709][ T29] audit: type=1400 audit(1781876246.772:972): avc: denied { ioctl } for pid=10994 comm="syz.5.1415" path="socket:[37758]" dev="sockfs" ino=37758 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 345.032373][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1415'. [ 345.042867][ T5722] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 345.052724][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 345.054535][ T5722] usb 4-1: can't set first interface for hiFace device. [ 345.067117][ T6085] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 345.089554][ T5722] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 345.122768][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.148143][ T5722] usb 4-1: USB disconnect, device number 55 [ 345.433009][ T29] audit: type=1400 audit(1781876247.231:973): avc: denied { append } for pid=11018 comm="syz.2.1421" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.456832][T11022] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 345.470092][T11022] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.479199][ T46] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 345.488335][ T29] audit: type=1400 audit(1781876247.287:974): avc: denied { create } for pid=11014 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 345.589064][T11027] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 345.607606][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 345.622015][ T1165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 345.666564][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 345.708923][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.729057][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.742795][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.752668][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 345.761765][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.770938][ T46] usb 2-1: config 0 descriptor?? [ 345.999336][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 346.009888][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 346.028919][ T46] usb 2-1: USB disconnect, device number 60 [ 346.038516][T11039] binder: BINDER_SET_CONTEXT_MGR already set [ 346.044893][T11039] binder: 11037:11039 ioctl 4018620d 200000004a80 returned -16 [ 346.206292][T10798] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 346.220622][T10798] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.872169][ T29] audit: type=1400 audit(1781876248.587:975): avc: denied { ioctl } for pid=11052 comm="syz.0.1432" path="socket:[37879]" dev="sockfs" ino=37879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.966077][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1434'. [ 347.000097][ T29] audit: type=1400 audit(1781876248.700:976): avc: denied { execute } for pid=11056 comm="syz.5.1431" path="/dev/comedi4" dev="devtmpfs" ino=3418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 347.026882][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 347.050799][ T29] audit: type=1400 audit(1781876248.728:977): avc: denied { read } for pid=11058 comm="syz.3.1434" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 347.110674][ T29] audit: type=1400 audit(1781876248.803:978): avc: denied { create } for pid=11063 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.188441][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 347.203717][ T29] audit: type=1400 audit(1781876248.896:979): avc: denied { getopt } for pid=11068 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.295825][ T6687] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 347.466812][ T6687] usb 1-1: Using ep0 maxpacket: 16 [ 347.473317][ T6687] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.487338][ T6687] usb 1-1: config 0 interface 0 has no altsetting 0 [ 347.494257][ T6687] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 347.503664][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.513946][ T6687] usb 1-1: config 0 descriptor?? [ 347.643933][ T1227] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 347.766428][T11081] FAULT_INJECTION: forcing a failure. [ 347.766428][T11081] name failslab, interval 1, probability 0, space 0, times 0 [ 347.779131][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.2.1440 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.779159][T11081] Tainted: [L]=SOFTLOCKUP [ 347.779166][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.779176][T11081] Call Trace: [ 347.779183][T11081] [ 347.779190][T11081] dump_stack_lvl+0x100/0x190 [ 347.779213][T11081] should_fail_ex.cold+0x5/0xa [ 347.779233][T11081] ? fs_reclaim_acquire+0x70/0x100 [ 347.779261][T11081] ? tomoyo_realpath_from_path+0xb6/0x690 [ 347.779283][T11081] should_failslab+0xc2/0x120 [ 347.779308][T11081] __kmalloc_noprof+0xe0/0x840 [ 347.779327][T11081] ? kfree+0x1e5/0x6c0 [ 347.779345][T11081] tomoyo_realpath_from_path+0xb6/0x690 [ 347.779369][T11081] tomoyo_check_open_permission+0x2af/0x3c0 [ 347.779389][T11081] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 347.779409][T11081] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 347.779436][T11081] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 347.779460][T11081] ? hook_file_open+0x24e/0x7a0 [ 347.779490][T11081] ? rcu_is_watching+0x12/0xc0 [ 347.779513][T11081] tomoyo_file_open+0x6b/0x90 [ 347.779538][T11081] security_file_open+0xb5/0x1e0 [ 347.779560][T11081] do_dentry_open+0x588/0x14d0 [ 347.779588][T11081] vfs_open+0x82/0x3f0 [ 347.779609][T11081] path_openat+0x2873/0x4280 [ 347.779628][T11081] ? __pfx_path_openat+0x10/0x10 [ 347.779646][T11081] ? __pfx___schedule+0x10/0x10 [ 347.779665][T11081] do_file_open+0x20e/0x430 [ 347.779683][T11081] ? __pfx_do_file_open+0x10/0x10 [ 347.779700][T11081] ? irqentry_exit+0x24d/0xa00 [ 347.779726][T11081] ? alloc_fd+0x471/0x7a0 [ 347.779743][T11081] ? do_getname+0x191/0x390 [ 347.779764][T11081] do_sys_openat2+0x10f/0x1e0 [ 347.779783][T11081] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.779804][T11081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.779827][T11081] __x64_sys_openat+0x12d/0x210 [ 347.779848][T11081] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.779870][T11081] ? trace_hardirqs_off+0x70/0x170 [ 347.779890][T11081] ? rcu_is_watching+0x12/0xc0 [ 347.779912][T11081] do_syscall_64+0x115/0x870 [ 347.779930][T11081] ? clear_bhb_loop+0x40/0x90 [ 347.779950][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.779968][T11081] RIP: 0033:0x7fa1c3d9ce59 [ 347.779981][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.779998][T11081] RSP: 002b:00007fa1c1fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.780017][T11081] RAX: ffffffffffffffda RBX: 00007fa1c4016180 RCX: 00007fa1c3d9ce59 [ 347.780029][T11081] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 347.780039][T11081] RBP: 00007fa1c1fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 347.780050][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.780059][T11081] R13: 00007fa1c4016218 R14: 00007fa1c4016180 R15: 00007ffcaff762f8 [ 347.780076][T11081] [ 347.780099][T11081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.926379][ T29] audit: type=1400 audit(1781876249.411:980): avc: denied { setopt } for pid=11077 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.958328][ T1227] usb 2-1: Using ep0 maxpacket: 32 [ 348.076019][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 348.209873][ T6687] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 348.289594][ T1227] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 348.298828][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.363582][ T1227] usb 2-1: Product: syz [ 349.291389][ T457] net_ratelimit: 6 callbacks suppressed [ 349.291405][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 349.311255][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 349.382704][ T1227] usb 2-1: Manufacturer: syz [ 349.388766][ T1227] usb 2-1: SerialNumber: syz [ 349.390537][ T6687] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 349.397333][ T1227] usb 2-1: config 0 descriptor?? [ 349.519856][ T806] usb 1-1: USB disconnect, device number 51 [ 350.347187][T11104] orangefs_mount: mount request failed with -4 [ 350.517039][ T6687] usb 6-1: Using ep0 maxpacket: 16 [ 350.522241][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 350.523590][ T6687] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.540010][ T6687] usb 6-1: config 0 interface 0 has no altsetting 0 [ 350.547562][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 350.561987][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 350.577029][ T1227] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 350.586521][ T29] audit: type=1400 audit(1781876251.226:981): avc: denied { read } for pid=11100 comm="syz.3.1446" path="socket:[38016]" dev="sockfs" ino=38016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.604240][ T1227] airspy 2-1:0.0: Could not detect board [ 350.616531][ T1227] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 350.633188][ T6687] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 350.827577][ T6687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.847291][ T5710] usb 2-1: USB disconnect, device number 61 [ 350.854534][ T6687] usb 6-1: Product: syz [ 350.906525][ T6687] usb 6-1: Manufacturer: syz [ 350.912494][ T6687] usb 6-1: SerialNumber: syz [ 350.923127][ T6687] usb 6-1: config 0 descriptor?? [ 350.934378][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 351.288084][ T29] audit: type=1400 audit(1781876252.518:982): avc: denied { getopt } for pid=11122 comm="syz.2.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.325954][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 351.334728][ T29] audit: type=1400 audit(1781876252.752:983): avc: denied { create } for pid=11120 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.335428][ T6687] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 351.399894][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.414237][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.432093][ T6687] imon:send_packet: packet tx failed (-71) [ 351.452686][ T6687] imon 6-1:0.0: panel buttons/knobs setup failed [ 351.479959][T11123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1452'. [ 351.492064][ T29] audit: type=1400 audit(1781876252.901:984): avc: denied { write } for pid=11120 comm="syz.0.1451" path="socket:[39034]" dev="sockfs" ino=39034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.548844][ T6687] rc_core: IR keymap rc-imon-pad not found [ 351.555787][ T6687] Registered IR keymap rc-empty [ 351.565139][ T6687] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 351.582400][ T6687] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 351.593159][ T6687] imon:send_packet: packet tx failed (-71) [ 351.623711][ T6687] imon 6-1:0.0: remote input dev register failed [ 351.630300][ T6687] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 351.646199][ T6687] imon 6-1:0.0: unable to initialize intf0, err 0 [ 351.652698][ T6687] imon:imon_probe: failed to initialize context! [ 351.661134][ T6687] imon 6-1:0.0: unable to register, err -19 [ 351.681844][ T6687] usb 6-1: USB disconnect, device number 29 [ 351.892805][ T29] audit: type=1400 audit(1781876253.285:985): avc: denied { setopt } for pid=11133 comm="syz.3.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 351.976376][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.990703][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.014631][ T6687] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 352.345775][ T6687] usb 6-1: Using ep0 maxpacket: 16 [ 352.352221][ T6687] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.363168][ T6687] usb 6-1: config 0 interface 0 has no altsetting 0 [ 352.382989][ T6687] usb 6-1: string descriptor 0 read error: -22 [ 352.389415][ T6687] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 352.398454][ T6687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.412707][ T6687] usb 6-1: config 0 descriptor?? [ 352.441239][ T6687] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86 [ 352.696327][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 352.710655][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.731870][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 352.750809][ T6687] imon:send_packet: packet tx failed (-71) [ 352.821910][ T6687] imon 6-1:0.0: panel buttons/knobs setup failed [ 352.991486][ T6687] rc_core: IR keymap rc-imon-pad not found [ 353.007016][ T6687] Registered IR keymap rc-empty [ 353.021940][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'. [ 353.052972][ T6687] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 353.084953][ T6687] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 353.114895][ T6687] imon:send_packet: packet tx failed (-71) [ 353.142258][ T6687] imon 6-1:0.0: remote input dev register failed [ 353.154570][ T6687] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 353.162338][T11152] FAULT_INJECTION: forcing a failure. [ 353.162338][T11152] name failslab, interval 1, probability 0, space 0, times 0 [ 353.193639][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.2.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.193660][T11152] Tainted: [L]=SOFTLOCKUP [ 353.193664][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.193671][T11152] Call Trace: [ 353.193675][T11152] [ 353.193679][T11152] dump_stack_lvl+0x100/0x190 [ 353.193694][T11152] should_fail_ex.cold+0x5/0xa [ 353.193707][T11152] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 353.193720][T11152] should_failslab+0xc2/0x120 [ 353.193736][T11152] __kmalloc_cache_noprof+0x7a/0x6e0 [ 353.193747][T11152] ? fuse_do_ioctl+0x33b/0x17d0 [ 353.193763][T11152] fuse_do_ioctl+0x33b/0x17d0 [ 353.193779][T11152] ? __pfx_fuse_do_ioctl+0x10/0x10 [ 353.193795][T11152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.193813][T11152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 353.193832][T11152] fuse_ioctl_common+0x12d/0x1a0 [ 353.193847][T11152] ? __pfx_fuse_file_ioctl+0x10/0x10 [ 353.193861][T11152] __x64_sys_ioctl+0x18e/0x210 [ 353.193876][T11152] do_syscall_64+0x115/0x870 [ 353.193888][T11152] ? clear_bhb_loop+0x40/0x90 [ 353.193900][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.193911][T11152] RIP: 0033:0x7fa1c3d9ce59 [ 353.193919][T11152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.193932][T11152] RSP: 002b:00007fa1c1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.193943][T11152] RAX: ffffffffffffffda RBX: 00007fa1c4015fa0 RCX: 00007fa1c3d9ce59 [ 353.193950][T11152] RDX: 0000200000000000 RSI: 0000000040806685 RDI: 0000000000000004 [ 353.193956][T11152] RBP: 00007fa1c1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.193962][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.193969][T11152] R13: 00007fa1c4016038 R14: 00007fa1c4015fa0 R15: 00007ffcaff762f8 [ 353.193978][T11152] [ 353.402680][ T6687] imon 6-1:0.0: unable to initialize intf0, err 0 [ 353.410012][ T6687] imon:imon_probe: failed to initialize context! [ 353.416333][ T6687] imon 6-1:0.0: unable to register, err -19 [ 353.425739][ T6687] usb 6-1: USB disconnect, device number 30 [ 353.490657][T11160] gfs2: error -5 reading superblock [ 353.546802][T11161] xt_hashlimit: size too large, truncated to 1048576 [ 353.695945][ T29] audit: type=1400 audit(1781876254.960:986): avc: denied { write } for pid=11145 comm="syz.5.1457" name="ip_tables_targets" dev="proc" ino=4026534018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 353.806398][T11159] xt_hashlimit: size too large, truncated to 1048576 [ 354.080897][ T29] audit: type=1400 audit(1781876255.325:987): avc: denied { audit_write } for pid=11165 comm="syz.1.1461" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 354.164099][T11166] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 354.179987][ T29] audit: type=1400 audit(1781876255.381:988): avc: denied { connect } for pid=11165 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.241760][ T29] audit: type=1400 audit(1781876255.381:989): avc: denied { write } for pid=11165 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.274019][ T29] audit: type=1400 audit(1781876255.447:990): avc: denied { setopt } for pid=11165 comm="syz.1.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.295433][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 354.744087][ T30] INFO: task syz.4.749:8452 blocked in I/O wait for more than 143 seconds. [ 354.752751][ T30] Tainted: G L syzkaller #0 [ 354.759291][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.765372][ T6687] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 354.768050][ T30] task:syz.4.749 state:D stack:26632 pid:8452 tgid:8451 ppid:5607 task_flags:0x400140 flags:0x00080002 [ 354.787541][ T30] Call Trace: [ 354.790811][ T30] [ 354.793726][ T30] __schedule+0x125c/0x6730 [ 354.798807][ T30] ? __pfx___schedule+0x10/0x10 [ 354.803677][ T30] ? rcu_is_watching+0x12/0xc0 [ 354.808483][ T30] ? schedule+0x2bf/0x390 [ 354.812921][ T30] ? lock_release+0x24d/0x310 [ 354.817604][ T30] schedule+0xdd/0x390 [ 354.821730][ T30] io_schedule+0x8a/0xf0 [ 354.826030][ T30] folio_wait_bit_common+0x414/0xa70 [ 354.831356][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 354.836945][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 354.842874][ T30] ? __folio_put+0x3b0/0x5f0 [ 354.847475][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 354.853234][ T30] ? __pfx___might_resched+0x10/0x10 [ 354.858541][ T30] migrate_pages_batch+0x7a1/0x45c0 [ 354.863756][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 354.869135][ T30] ? __pfx_compaction_free+0x10/0x10 [ 354.874465][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 354.880102][ T30] ? ktime_get+0x1a4/0x320 [ 354.884521][ T30] ? clockevents_program_event+0x1ef/0x820 [ 354.890335][ T30] ? rcu_is_watching+0x12/0xc0 [ 354.895146][ T30] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 354.900881][ T30] migrate_pages_sync+0x4db/0x880 [ 354.906100][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 354.911483][ T30] ? __pfx_compaction_free+0x10/0x10 [ 354.916839][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 354.922384][ T30] ? do_raw_spin_lock+0x128/0x260 [ 354.927426][ T30] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 354.933148][ T30] ? isolate_migratepages_block+0x63f/0x61d0 [ 354.939170][ T30] migrate_pages+0x1a83/0x2850 [ 354.939496][ T6687] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 354.943955][ T30] ? isolate_migratepages_block+0xd74/0x61d0 [ 354.953219][ T6687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.959273][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 354.967211][ T6687] usb 2-1: Product: syz [ 354.972604][ T30] ? __pfx_compaction_free+0x10/0x10 [ 354.981993][ T6687] usb 2-1: Manufacturer: syz [ 354.982027][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 354.986628][ T6687] usb 2-1: SerialNumber: syz [ 354.996489][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 354.996787][ T6687] usb 2-1: config 0 descriptor?? [ 355.005102][ T30] ? __nr_to_section+0xaa/0x100 [ 355.013000][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 355.018707][ T30] compact_zone+0x2439/0x4410 [ 355.023484][ T457] net_ratelimit: 6 callbacks suppressed [ 355.023495][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 355.023535][ T30] ? rcu_is_cpu_rrupt_from_idle+0x1a0/0x270 [ 355.029079][ T457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 355.043463][ T30] ? debug_object_free+0x295/0x550 [ 355.068741][ T30] ? __pfx_debug_object_free+0x10/0x10 [ 355.074210][ T30] ? __pfx_compact_zone+0x10/0x10 [ 355.079349][ T30] ? __flush_work+0x4ca/0xcb0 [ 355.084072][ T30] ? __flush_work+0x5fe/0xcb0 [ 355.089057][ T30] ? lock_release+0x24d/0x310 [ 355.093805][ T30] compact_node+0x17f/0x2c0 [ 355.098344][ T30] ? __pfx_compact_node+0x10/0x10 [ 355.103376][ T30] ? __lru_add_drain_all+0x441/0x650 [ 355.108719][ T30] sysctl_compaction_handler+0x141/0x210 [ 355.114344][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 355.119651][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 355.125608][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 355.131134][ T30] iter_file_splice_write+0x830/0x10b0 [ 355.136621][ T30] ? copy_splice_read+0x739/0xbb0 [ 355.141759][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 355.147700][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 355.153152][ T30] ? __pfx___might_resched+0x10/0x10 [ 355.158483][ T30] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 355.163916][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 355.169812][ T30] direct_splice_actor+0x192/0x690 [ 355.175163][ T30] splice_direct_to_actor+0x345/0xa30 [ 355.180544][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 355.186430][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 355.192334][ T30] do_splice_direct+0x174/0x240 [ 355.197827][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 355.203213][ T30] ? avc_policy_seqno+0x9/0x20 [ 355.208011][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 355.213960][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 355.219375][ T30] ? security_file_permission+0x76/0x210 [ 355.225023][ T30] ? rw_verify_area+0xce/0x6d0 [ 355.229794][ T30] do_sendfile+0xadc/0xe20 [ 355.234379][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 355.239360][ T30] ? lock_release+0x24d/0x310 [ 355.244032][ T30] __x64_sys_sendfile64+0x154/0x220 [ 355.249252][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 355.254965][ T30] ? rcu_is_watching+0x12/0xc0 [ 355.259752][ T30] do_syscall_64+0x115/0x870 [ 355.264353][ T30] ? clear_bhb_loop+0x40/0x90 [ 355.269068][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.274956][ T30] RIP: 0033:0x7f5c5f59ce59 [ 355.279391][ T30] RSP: 002b:00007f5c60505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 355.287814][ T30] RAX: ffffffffffffffda RBX: 00007f5c5f815fa0 RCX: 00007f5c5f59ce59 [ 355.295833][ T30] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000008 [ 355.303858][ T30] RBP: 00007f5c5f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 355.312044][ T30] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 355.320039][ T30] R13: 00007f5c5f816038 R14: 00007f5c5f815fa0 R15: 00007ffe63e4b2b8 [ 355.328038][ T30] [ 355.331079][ T30] INFO: lockdep is turned off. [ 355.335946][ T30] NMI backtrace for cpu 1 [ 355.335962][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 355.335986][ T30] Tainted: [L]=SOFTLOCKUP [ 355.335992][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.336001][ T30] Call Trace: [ 355.336007][ T30] [ 355.336012][ T30] dump_stack_lvl+0x100/0x190 [ 355.336036][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 355.336058][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.336081][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 355.336111][ T30] sys_info+0x141/0x190 [ 355.336134][ T30] watchdog+0xcb1/0x1030 [ 355.336152][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 355.336172][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.336188][ T30] ? __kthread_parkme+0x18c/0x230 [ 355.336209][ T30] ? kthread+0x13a/0x450 [ 355.336233][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.336248][ T30] kthread+0x370/0x450 [ 355.336267][ T30] ? __pfx_kthread+0x10/0x10 [ 355.336290][ T30] ret_from_fork+0x72b/0xd50 [ 355.336310][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 355.336331][ T30] ? __switch_to+0x800/0x10f0 [ 355.336355][ T30] ? __pfx_kthread+0x10/0x10 [ 355.336378][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.336406][ T30] [ 355.336413][ T30] Sending NMI from CPU 1 to CPUs 0: [ 355.467784][ C0] NMI backtrace for cpu 0 [ 355.467801][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.467821][ C0] Tainted: [L]=SOFTLOCKUP [ 355.467827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.467835][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 355.467855][ C0] Code: 76 89 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 07 16 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 355.467869][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 355.467882][ C0] RAX: 0000000002c0532c RBX: ffffffff8e491480 RCX: ffffffff8b9592b5 [ 355.467891][ C0] RDX: 0000000000000001 RSI: ffffffff8c1d0d00 RDI: ffffffff81de38e7 [ 355.467901][ C0] RBP: fffffbfff1c92290 R08: 0000000000000000 R09: ffffed101708678d [ 355.467910][ C0] R10: ffff8880b8433c6b R11: ffffffff81d50f9c R12: 0000000000000000 [ 355.467919][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 355.467929][ C0] FS: 0000000000000000(0000) GS:ffff888124325000(0000) knlGS:0000000000000000 [ 355.467943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.467953][ C0] CR2: 0000001b32f23ffc CR3: 0000000073e5f000 CR4: 00000000003526f0 [ 355.467963][ C0] Call Trace: [ 355.467978][ C0] [ 355.467984][ C0] default_idle+0x9/0x10 [ 355.468005][ C0] default_idle_call+0x6c/0xb0 [ 355.468022][ C0] do_idle+0x3a7/0x5b0 [ 355.468039][ C0] ? __pfx_do_idle+0x10/0x10 [ 355.468054][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 355.468074][ C0] cpu_startup_entry+0x4f/0x60 [ 355.468091][ C0] rest_init+0x251/0x260 [ 355.468109][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 355.468130][ C0] start_kernel+0x484/0x490 [ 355.468148][ C0] x86_64_start_reservations+0x24/0x30 [ 355.468166][ C0] x86_64_start_kernel+0x12b/0x130 [ 355.468185][ C0] common_startup_64+0x13e/0x158 [ 355.468207][ C0] [ 355.592829][T10802] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 355.596333][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 355.596349][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 355.596371][ T30] Tainted: [L]=SOFTLOCKUP [ 355.596377][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.596387][ T30] Call Trace: [ 355.596393][ T30] [ 355.596400][ T30] dump_stack_lvl+0x100/0x190 [ 355.596422][ T30] vpanic+0x552/0x970 [ 355.596437][ T30] ? __pfx_vpanic+0x10/0x10 [ 355.596452][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 355.596478][ T30] panic+0xd1/0xe0 [ 355.596492][ T30] ? __pfx_panic+0x10/0x10 [ 355.596507][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 355.596530][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 355.596554][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 355.596577][ T30] ? watchdog.cold+0x1ec/0x234 [ 355.596593][ T30] ? watchdog+0xcc1/0x1030 [ 355.596609][ T30] watchdog.cold+0x1fd/0x234 [ 355.596631][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 355.596650][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.596665][ T30] ? __kthread_parkme+0x18c/0x230 [ 355.596684][ T30] ? kthread+0x13a/0x450 [ 355.596704][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.596718][ T30] kthread+0x370/0x450 [ 355.596739][ T30] ? __pfx_kthread+0x10/0x10 [ 355.596760][ T30] ret_from_fork+0x72b/0xd50 [ 355.596779][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 355.596798][ T30] ? __switch_to+0x800/0x10f0 [ 355.596819][ T30] ? __pfx_kthread+0x10/0x10 [ 355.596841][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.596866][ T30] [ 355.599196][ T30] Kernel Offset: disabled