last executing test programs: 18.923393824s ago: executing program 1 (id=781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="b7af1cf4e2054a2e401a5f9096f3cc0cfa6671dcd05b0484b5e07cba36ff56baffa193ea083782f5bd7e510c5d2d7809f78f3fccba63c3a65b1b05c939d49d7a09f327a5849e5a7948bbc68c835c1f8ef48067d42c31247098ea8c61d0f3cb0f6fcb3e698057e4031d5e02a47809c011de001405c36dfc660165ba5896f2612ee970652e7342da41db2ce1241a759ce80f2b09c59cb511", @ANYRESOCT, @ANYBLOB="2c2fecdebd36071e578eb5649223f2b71702c303c49090398b3f123e5ee57c2c143976598fe73716f50d3695a92c458927e862b6ed7c820a52fc75ca696ff40b217eeac38ced737c8d1bac114bc649e96cf9d68593f463fa48476449c80f0833a4da14a34bd8e9bf8a1d5a7bd28a63b84d04b62989ba6d21eef82034ab435bafb0fbc7f2f533f2a5f568035ae209c93f3fc060c3b687dc84aa8966cd42eed19b15783d0c93d0fdbd6ec80719ffb763bfa1d86d0a81f887dce3ec5bd43dedfe1551ef9f5fd544316c8feb", @ANYRESHEX], 0x50) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="3417424bba49fc8278570311a50ca6978ff063e00ef7a66316187d9669ad2c5173e26e5306624199d6ad9cf857a08dcc6887a8349984c28b7a", 0x39}], 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x15) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r6 = fsopen(&(0x7f00000000c0)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.553855273s ago: executing program 3 (id=786): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="7110d5ed2a8dcdceb20000170006ffc029227ed329e62de100cdd117624a80f4e102ed05e3", 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 17.243069675s ago: executing program 3 (id=787): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000001000/0x2000)=nil}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) landlock_create_ruleset(&(0x7f0000000480)={0x400, 0x0, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r6, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000280)={{0x1, 0x0, 0x5, 0xb, 0x4d7}, [{0x5, 0x8, 0x0, 0x8}, {0xc786, 0xe4, 0x4, 0x4}, {0x81, 0x6, 0x1}, {0x2, 0x2, 0xd, 0x49}, {0x80000001, 0xffffffff7fffffff, 0x7, 0xfb}, {0x6d, 0x4, 0xa, 0x6}, {0x1, 0x4, 0x5, 0x8}]}) 14.937079205s ago: executing program 1 (id=791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000180)={0x7ff, 0x1, 0xfffffffe, 0x0, 0xfe8, 0x1, 0x0, &(0x7f0000000140)=[{0xf, 0x101, 0x3}]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x6, 0x3b, {0x3b, 0x2, "0f5f671678b79b78f67b27e7cea3c7e53f70473860b319bcaccf35505dd72ba311d33a87a984f3787c83ecc4e53db38055b90726d4e28f162d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.312970869s ago: executing program 0 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 14.049935021s ago: executing program 0 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r9 = accept(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r9, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 13.038038165s ago: executing program 4 (id=798): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r4, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @struct={0x5, 0x2f86}, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0x719, 0x6, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={r4, 0x2, 0x1, [0xd22f, 0xfffffffffffffff5, 0x600000000, 0x9, 0x9], [0xf0e, 0x0, 0xfffffffffffff000, 0xc, 0x6, 0x8000, 0x1, 0x5, 0x7, 0xdd, 0x80000000, 0x9, 0xfff, 0x3, 0xd6, 0x4, 0x8, 0x2, 0x5, 0x6, 0x0, 0x80000000, 0x7, 0xcf, 0x9, 0x1, 0x7, 0xe, 0xed, 0x3, 0x2, 0x100, 0x9, 0x2, 0x9, 0x80000001, 0x5, 0x200, 0x674, 0x3, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x5c1, 0x4, 0x166, 0x2, 0x7, 0x4, 0x1000, 0x7fffffff, 0x9a2, 0x3, 0xd, 0x5, 0xb, 0x401, 0x2, 0x2, 0xff, 0x81, 0x3, 0xc, 0x3, 0x10000, 0x0, 0x5, 0x0, 0x10000, 0x3, 0x5, 0x6, 0x2, 0x7fff, 0x5, 0xaf4b, 0x2, 0xb, 0xfffffffffffffeff, 0x101, 0x2, 0x7, 0x6, 0x1, 0x2, 0x7, 0xffffffff, 0x0, 0x9, 0xb9, 0x7f, 0x9, 0x16, 0xe1, 0x8, 0x7d, 0x1, 0x3, 0x8, 0x400, 0x6, 0x3, 0x8, 0x4ab, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x2, 0x4, 0xe, 0x5, 0xed8, 0x84, 0x7, 0xff, 0x7, 0xb850, 0x7, 0x7, 0xa3e6]}) sendmsg$inet(r3, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000001c0)="447df50ce4033a7b5ad00b83244c00b7a835c2e8c9c0ae82f69c32302d6011803e7cca2504a2600da98efff9e7d67f87b1", 0x31}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2", 0x75}, {&(0x7f0000000880)="a1755527af671ac86bf0a2338efb5db1000000", 0xfffffc83}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4010) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x17) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0xd) creat(&(0x7f0000000280)='./file0\x00', 0xc2) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500), 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 12.122929307s ago: executing program 2 (id=799): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) getsockname$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x60, {{0xa, 0x0, 0x0, @empty, 0x20000}}, {{0xa, 0x4e20, 0x40000, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, 0x108) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r2, &(0x7f0000000100)='./file0/../file0\x00', 0x800, 0x80, &(0x7f0000000380)) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x80000, 0x0) r3 = fsopen(&(0x7f00000007c0)='fuse\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000004300)={0x2, 0x1, 0x1000, 0x6e4d, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) 12.070326863s ago: executing program 1 (id=800): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@uuid_auto}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) setresuid(0xee00, 0xee00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000030101034fe70000000000000001000007"], 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x8080) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) 12.063196752s ago: executing program 3 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0xb}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1006, r4}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 12.029244647s ago: executing program 0 (id=802): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYRES8, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303031303031303030010000007365725f69643de54a6feeca969478bd8674b0cd4005475aafe3bdfcf714a3ea8af1289429e8f8f5e2296814771424e2f9b6661286de0eb4a73ee7a2aac6a3a27ba05892a5fc0bb5b80257af2f7114f34414708b42e154b0d8d8401163c34c49666ad50e7c05b408ee489a53c5b6bd54f53a77accbbb5b79703479d82de96ffaa7da42d0e30aad90c82ac5c539c2a0da47e5d01ae8c45d75e048a64eb6f425f17169bc56ea90022c30f6aa7575501fd4b07a3de75c70380c6177d6f3d4", @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect(0x0, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010203010902e0000106e370130904dc02000e0100010a2401ff0729000201020b240406bea33c2d2031e80b240304020205000a0010092403040404010503052406000105240004000d240f0109000000810000020606241a04003c0c241b070008000b100008107c"], 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x2, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = gettid() mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280), 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) 11.845863943s ago: executing program 2 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0xb}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1006, r4}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 10.145573068s ago: executing program 1 (id=804): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, r1, 0x8401}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r2, 0xe7d, 0x80000000, 0x88e8}) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000280)="4ba9169e1c777e", 0x7}, {&(0x7f00000002c0)="cdd1bd192dcfe7e5697578a62c99d3e2da2103396b2b8668e42e2f0910ed9d61cbc1898db0df9b472e2e6a55a949a377f5786e9e046b03312bd5e9b0640d8f6563a00248baed41f302bd3afa6f831dca0fe191473c0fe729503447fb45da88006bcd97f49a306a5ada16d1692dfac43145a68f7b84e11b66cb720c0c27ceea0eaf62d2d3d8a95e070af6179216b94a842742e4fdad29b71fe49574e495835ba9676252883d3583cd5fa36335ade3c5034b06628b064810c78822d57869406d528ce36802b721bda8a06e741734b57718d8f4a38968c395791e0ef446a95e281d1c38b67371547122604a35554173ea2e566e93c383837ace23", 0xf9}, {&(0x7f0000000480)="671dffc0909d545835c63651a4390d2cc9eac56fcfa60e17d0b140ec25a77b77f069e7d34138a73d2b38fe8997de5a13c9e2a0b259e79f14bffd0893b4ef6b7555266ea6695941dcdd34eae9dd54f9", 0x4f}], 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB='\t'], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffea1, 0x0, 0x4}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd(0x8000) r9 = eventfd(0xa) r10 = eventfd2(0x2, 0x800) r11 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000180)={r10, 0x7, 0x3, r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r9, 0x7, 0x2, r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={r8, 0x6, 0x1, r9}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r5, &(0x7f0000000080)='\xde]\x00', 0x18100, &(0x7f00000000c0)={@align=0x281d4000000, {0x8, 0xbf6, 0xc, 0xfff}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x800001}) 9.981412942s ago: executing program 3 (id=805): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x101, 0x81) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 9.615430285s ago: executing program 4 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto(r2, &(0x7f0000000640)="53620fe1b37fda6265327de031670862cd8dfd4c6912afe263991da93af24cc9303ccd047b5b964060e86d3eab4f0d18eadf34ec842d7076280f0d6c225b192a0aa63a4c8b4512d3da35f0087585e38b801260cab4c3493c5af6cedc5d8acf87b0090a28f8f05e76cbe8df35fa4872dc36fec9b2a88907184fd4be98e60c06b5101cb1e6497c29920adc90e15beb06cf650e2295445991ca50522a4f85fa4c7293f1cf0d6f1d72cb421019b137da06b50ef3e2a25ac2bd795d653f254de6050f0099e1abaa0ee0b4ba2f1b6f472ba4e4641e61e57275a30ccd6abe6825e906c02bfe9dc39e9248edaa3ec2f9", 0xec, 0x0, &(0x7f0000000740)=@llc={0x1a, 0x305, 0x10, 0x0, 0x6, 0x2}, 0x80) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0xa, &(0x7f0000000340)={0x8}) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) lstat(0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000040)) mkdir(0x0, 0x8) rmdir(0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x74, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@generic="cffaf42f0b06bb4d6c8d14e2661f507841e79c801fdf4945c49018fb050df72034e8ecf5de86afeb0ff7e028fb881a8eaf5e2bf8448376acd92faa94149e36bae4e5029971a93260975514bfdfa97500"/93]}, 0x74}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 9.362976883s ago: executing program 3 (id=807): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r6, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) getdents64(r5, &(0x7f0000000240)=""/157, 0x9d) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106d04900940000102030109026e000301002009080b01024a604e510904000000010130000a2401040a0005000000090401"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 6.891490758s ago: executing program 4 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x60002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x894b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffa, 0x200000000000007, 0x5, 0x7, 0x4, 0x8, 0x4, 0x8], 0xc000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.890826435s ago: executing program 0 (id=809): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r6, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) getdents64(r5, &(0x7f0000000240)=""/157, 0x9d) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106d04900940000102030109026e000301002009080b01024a604e510904000000010130000a2401040a0005000000090401"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 6.757503598s ago: executing program 1 (id=810): fanotify_init(0x0, 0xc0d9e5268d9d54da) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x2}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="07000000010000", 0x7) mprotect(&(0x7f0000815000/0x1000)=nil, 0x1000, 0x1) 6.746466867s ago: executing program 2 (id=811): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000001000/0x2000)=nil}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) landlock_create_ruleset(&(0x7f0000000480)={0x400, 0x0, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r6, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000280)={{0x1, 0x0, 0x5, 0xb, 0x4d7}, [{0x5, 0x8, 0x0, 0x8}, {0xc786, 0xe4, 0x4, 0x4}, {0x81, 0x6, 0x1}, {0x2, 0x2, 0xd, 0x49}, {0x80000001, 0xffffffff7fffffff, 0x7, 0xfb}, {0x6d, 0x4, 0xa, 0x6}, {0x1, 0x4, 0x5, 0x8}]}) 4.359839325s ago: executing program 1 (id=812): ioperm(0x2, 0x1, 0x2) syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, &(0x7f0000000280)=0xfffffffffffffffb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r2, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x40ed80) rt_sigsuspend(&(0x7f0000000340)={[0x6]}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x305, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4141}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b48, &(0x7f0000000040)) splice(r6, 0x0, r7, 0x0, 0x39000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r6}, 0x18) write$binfmt_elf64(r6, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) remap_file_pages(&(0x7f00000fc000/0x3000)=nil, 0x3000, 0x4, 0x100000001, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x4, &(0x7f0000000200)=[{0x27, 0x5, 0x8, 0x5}, {0x8, 0x5, 0x7, 0xfffffffc}, {0x8, 0x4, 0x3a, 0x9}, {0x1, 0xf9, 0x8, 0x80000000}]}) 4.242689155s ago: executing program 4 (id=813): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) landlock_create_ruleset(&(0x7f0000000480)={0x400, 0x0, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r4, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000280)={{0x1, 0x0, 0x5, 0xb, 0x4d7}, [{0x5, 0x8, 0x0, 0x8}, {0xc786, 0xe4, 0x4, 0x4}, {0x81, 0x6, 0x1}, {0x2, 0x2, 0xd, 0x49}, {0x80000001, 0xffffffff7fffffff, 0x7, 0xfb}, {0x6d, 0x4, 0xa, 0x6}, {0x1, 0x4, 0x5, 0x8}]}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 3.577420062s ago: executing program 3 (id=814): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) clock_settime(0x0, 0x0) syz_usbip_server_init(0x5) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.459220476s ago: executing program 0 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0xb}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1006, r4}, 0x38) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.996334636s ago: executing program 2 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="5eea60e4a0663600f065d44aef6ade4dba21916c57eefc2728bc2060f6ba91d73bf9c1a57df8871c187625fc033d9aa42d4462e4c446def45080649a14a24ffe3218d3f25ea7cb3ea98d41a7dbb7b91f429154c0bd5e0c8a851f291966debb91ff55f52bc2157f716ad842270e79070b4ef0aeba5eeed16f252d9e31407cb17c39c194a80b0c9701730e898b8d260c27380f412c9377b3d0305d9708b76b4d90550568a89b2c4d48216f0e18adc1377aa60c5d908a4822113f25395617fb190216b2d2a0e0aa2fae8e5ffcf911fe91", 0xcf}, {&(0x7f0000000100)="8527bb211f76c9847c684abd6b46be4308338cba7422cf6f068b45ff995bb44d96feca66df0733a7b6e768bd192cc014c78b013e1f5fc81d676e01441c3345ce845d21fdbfd51f7b573563e6ae71d22cc4ce81b54e63ad19fada78c874165da1075fe89a8d34098653f66ceea60025f2b33b309216f010e29ed2d502819e", 0x7e}], 0x2) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0xc4, 0x77, 0xd}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x380000, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000380)="9e6c1ad3189887d34b6e84bc45c1ae3a1a1225646e11cd1ec1bde8d775ed08f8f3881b3331cfb79f4460d0560921b4fbb8c47c9d2ebd228579e99bf50ffeafd1df882e999646c7af052ab4d82f44dedac6fcba4e4e28a5a4b5fc693079f8ea9f8c5b56966797211f06fe3fa1385ef78b46053b5dc0f1fbaea0e8928c", 0x7c}], 0x1) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r5 = dup2(r1, 0xffffffffffffffff) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, r5, 0x12, 0x0, @void}, 0x10) r7 = accept4$phonet_pipe(r5, 0x0, &(0x7f00000004c0), 0x80000) fcntl$lock(r7, 0x1, &(0x7f0000000500)={0x1, 0x4, 0x100000000, 0x5}) r8 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000540)={r4, 0x1, 0x1000000, 0x1000}) ioctl$OCFS2_IOC_MOVE_EXT(r8, 0x40406f06, &(0x7f0000000580)={0x9, 0xfffffffffffffffa, 0x0, 0x1, 0x4}) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={r4, 0x0, 0xfffffffffffff000, 0x100000000}) sendmsg$NFT_BATCH(r5, &(0x7f0000000c00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x78, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x46, 0x6, "7e6af3244cbbe7a5772be57021a674e4888ba7df1396efea2eec2b1527e00414026d0fdb5dd83810c2aabf46f7b2432688adbffc6a01891fa1f487427d373c11c628"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x19c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}]}]}, @NFT_MSG_NEWRULE={0x200, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xa3}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x50, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4f}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd6}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf7}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "a042c081bc37432434ca7c76602481a16d36a614f230aecf6622a1d919d21c475d07ec87633fabbd05dbc4404a6e1eb96098bcbd74d6dabf14b5adab3b651ff2332f8a1fa171a11a9d5adc950e5318708e0abd0c4eb5e97bc2a8e51cc748d301bb3b46bb71d5f10ba6a3b25596d80644f04c765ab3782c75394aa230b346999d6733e01ae9d1c3d15434e029834552341c009cb60c250dd4ba204f0eb404e9686df51356690a91429284d11a146cbadb3c0c7a829d9e282baac3548a3ac15de44af9a66417483b5f15315cec411a83a0eee82d6504c95c580c5e8539c8ae9187fe"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x57c}, 0x1, 0x0, 0x0, 0x8011}, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8084) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000d40)="dd83fc9f8071d4ff6ebc906424dd1578384ab04cb7be555543a9eb9e907945b5faee35ad867a4a0231c475fa4d2338f4b8e011c38655e2e5cfc12dfe346c097dc296892caf3c3e933e3e07bf7463eb258e15d484b9352a70db3b6fdeee9b0f6a63f27d9d6214167ed27f6d31330161efb043d4b3181fd342fbfa28bd1761125b86799697f438d2b9c421d1613a8972ce472a8ca398690025f4cd90ec09027697467e69e4c1d625ac383a3cf71dff3ec94adf9636cede06ee595fd9248789ab49e906d326", 0xc4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@RTM_GETNSID={0x3c, 0x5a, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8004) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000f40)={0x1, 0x1, 0x0, 0x0, 0xfffffff5, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20004004) pwritev(r5, &(0x7f00000024c0)=[{&(0x7f00000010c0)="dab894352f45a7dfa94098b967c0f9903bcf14fccd17564efddf0282a1fd4aaf150e824ddd4f9e3c47ff181804dfa1be90c0dcab3416da79", 0x38}, {&(0x7f0000001100)="8f34127f5d4cb51344ddc2e31c082754ebc87ab998b50966c876fa53b959be4c6ae096d77c57a72fe40cc464676cb12e5df5be2b875f9297ae32073c0afc17c9f67efcdfdea9a046c28d417c7f7fe871e87f184cc74243d71dc273da5c1a289babdf795a00adab53f97d1355a8aa531a4441c98cf9cb4bd4ba317d9fd378e08b8c60792d7aa88bb76aaaca3550b5dce276ff18d1de36ae99128e94bfa7350835010689646314a37054ebe0b33054a34b2a5da104ffa49f3bac6b7eecdf8144c1b8912ebbd0a067c8a27104eb0fef012a6b05962ae642dd2e2c7cadae8ba0806644", 0xe1}, {&(0x7f0000001200)="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", 0xfd}, {&(0x7f0000001300)="3d70e908d06e867fa3ab23b4703c24829e001375abbdc4e93205053d8bcd1d8e15978883bf227f6f2fb48c5091eead79e78fd79b1bf9cdfc696018a4c6fc897e02ca2884735e3dfde22c4ce8edac989a55febc9868b87c0fc048a7b2e83bd518c309d7e4dc36dd5bfaab3358420cef7060b8041bcec8b4ac1350a5dfd9f7d251f1adb95205db23be58956b918dfa57f432fe41720ed63a2b68799271a36fb8bc1f97cc507d6bf0f73cada9e1b72be3a3a859dd64d36037a7f65d91676ec8bcb9a890f1b56defb35c1147dc30996923ef0cdf48ba389291984295938a95", 0xdd}, {&(0x7f0000001400)="9698d212e5b7ee79af0682f756", 0xd}, {&(0x7f0000001440)="042f9e9b3f9f61e5c071b607c6770bc60b6e53502c46388eb56fa96c251e9fe414ec0afc96652d2db4abe024bafaa08896417168618c71f43dd5512f9b2dd21d33b4d234ef3e0f5ff0747544e2bfaa7d1a4f57", 0x53}, {&(0x7f00000014c0)="e5ddec6a8b84aa5d2770c0e0f95401200cc99d629390d98ea989488f0c9adf15670a2c9c2d988ee912435062c4a31cc05aa2e87e30389755152974d1f99e7c739aeb7fa64e096f201fe4e540f0d1e824140f72871b572f9815879cce99e399cf99a4d098c0d0fc0c1db311b696b38f9c1e9c137cebd52f69fbdbcb17f38f3e068c4a6b460276ba636db360b6b80af50f3f2073b70c5dcef5e718cab67724a2aaa14cdf48576c6bd62b31aa0309799e7587ebf433c8efaf7265de99bad0f796db98a7ac306182e3a176fb71fe4e028709d997f9fc88fb434de83b56b16328b3d28d9a259362ca0cc7e38d07afa914003291235cf1eba4baf466b6e714c2f4f60185a08a6bda73222e228d1900d1d47c4a2077a5e2909151b03b64e0aae8cac287a0b074c11603ccfe11488a5b05b758a3fe990f31d9b966ab7827dbd8e684c69b2f895674cfc12644cffdb94b6c15984a70034b984b1505f89f22af0dc5632f2621f73bbe6f0804c7336a855966019c15df5aec774ba80cd125e1bde89b73ea6cf8194847d42de11fda5c93cf33c158f3b3a09b1026dc6e8db55f601908bee618ce98b5de499a5826ea1a170c2985fbdcd609c571b9fadb24934ac8775387e48f6dc4989d147f1a93150d38761fa457ce838e053d97d04a9f5b1f8b63b3bbf23b66eadfd62d2164673df51b9e6c9cbb456bcf2fb91ef72d4ed47a26dac28fccefab4029dfe842c1d1476be686b0029458e645114172a0ea2ef52efc6c51fe1bb4d8d5e64e4eb5b0f0954f51eba67e2fefb5555b55e6d1fe6d86a78afbc36644c9983c6f606174e739c8abdcae0cd5c2d6fa20fdccb8b281d1c2ea4c11c479357d275d6dd61cf5722c696002a861c6843cefbf59cf4f4997ae517bfa92f4461603200bf61a0fd9911f157543828bb833440fe097787f6b83f7494e2d8d6eaf35f2de3246e91995fc8d729aa051ebf1e3fa27401fd13678326dad87e9b1efc2559581a6a28541b507f9d7a4015f2be324032b8140847344e9166ee0252b065dabe318eed507b45234b853bbd5446ea9cb325bd9a2eb34fb174c7f07ac92c30e465c914a1887258acd59807f7d2f53610554daa073f1ce98b427afe125b67d46de2c00937673c45542602a672c4a6fd808f44cd2d26f499203992beb01b5145a51bc89dae9bd1ff298e2fb8d573410c499d5edf52d5a051b694defb0bf9fa203d74776858bd840dbe1a35fdbea1ee641c455f4cc3ffe686da5ad914a0aea72234e24ed638070d21b47a8f6dbd6ff4a4dea159c2f3cd0d476840a47f04e2906525363ce6655673aa6b052f4029a9aa306faa6f52acb91fe1f8e9baf21a865b51b1805f263fe8fd93a4065d833e050b28bd834f06e1ded2e4d872cda958c9dd216501c1c73c814b15463c37202b058ed5e515e84b3fffce422dfe917b4d5de0354c199ca11b8eb868c2201679714d618bfeb1c6557bcd28201ae61a349f6d1b738f07318733d8871e82bca34e757445bd41461bb05d10e440ef49d80b6cae00661136edf2ba9ff91aef9418f478a6e51cf9fbd8cb99407b54d416d5d21681ac3ddb3441516d4169cc6ecb1b8d6376fa1365bbe8d88c7fd782a0ad6d15b483b1d01f59d2bdb1b8eb4195e3bfde335b169a213037948b96742d189ce5081d79a668e1683510c8f9e45bbaf4db5239e5affc8284e84cc330d19bb77723c41145f13d88321036301e787714cf7fbb2c90a2c3a5807c44c324dd871e991e1d2c6d596c98ef83fe6882dc6c06d9ca21e171855065a5ffcb4ec4780344cac129f901e0822512f91cb9d1991e0b05184b705c1cfe64fe9d9eae3ee64b9fad089514803986d556cc308ddfd8789fb8605a5a921b5db3c1cf459f7b0cc5bff9aab5a135da206b82d50900d866078c6485955fa3989d1936f488117ddfba9fb79483cd94e7d982b3108a540ba9283a6c1ecda51bc7bc9318ee58808a3ae51ed9c92de8cb5b67f635b5204fb8c53bb8b343dfea5b71425f54270fd4b6520b7b38a27ff98490cba5f9cde6306d859dbb3845ca7b5e85eff6304797f6694b9ae099efe74c2415ed6109ed40fa473e9fa5fd74e275ffaa0d82e78ee426169552d1fde42069c3c2e7b5e456b45bc0569201ae06db8d1102281df2b277cb65da34bcab48df0471d6aa96929c6511c26ed318741afad39332502c9465a5c5c9c39207c60732c1dbbdce7eb414dd879bd29a41fd2036aa1fb8e70a245dae1f50b4b0fb6d51c91427b3705f75990bc6ea805301f719d5bb300bcf3643de1508cf1a94061defc2e33fe8e4b6b5d81006d9d6a1dab63105d12f20d69b59188c477c2bb41e44a0be3ac08f56c3c4a0122117a8cda1b2284ea23e88acbe01e602312409a48580bea08deab192894d56d1afcdd1419f843d1b16dea18ac77eb56726abc269a4810a6c4c179c51244791b4e95035ba660c27436e46478b9959e269c0d1c9ef3d0313296637cfc967559540ad11583b4681cc277b705df417ed88e24acffd7f3ee6a614452389f39043037b71afb1952997fd72b4b46e693f8edf5f95f35e265a4c382c40c4d0ca924ccaa5b44e40d861878123c374af535efb08d7f26522e133600a4ca3f38c51d69e22b630ebccbb8ab59f333a998819265f40e7c03efdd52dd31102d7abb230d23f6087e6a1ed25992e69502ef03e4de34454864efd15764ee34b45960aa6062d5789965c2ff4cb7c8eaf0b40561e3318830a3f9d3ded58b75c67d9748c6ee43f931ae6daa72b96190b161e541687dac98dd5685f8f8861092417fabffeb8244dd7f91962cfd40cd5c35ebf7803d42f6a1290124f144544942f2a001eb9ae3db15e7a2222861d729270e30d74e78a2f2d8e657a070f1cd373e8f1c5ac0c4c03ede5d3b95fd06da8a784a12172db137033e7eb09e4cd4aa23f198f49a6da91df632ccfd996d492f423cf2ebe1bfad253a21130f0cc59a112d645a7eaf7965c5547b5af64a858f7348f3a3b876db62baa448905ee2c1b208966c384a3b511441ebbc2b462aa3f12064938cdf4a619fbeec547d53651aa33e4eb90512b3bdccebd01f811ec12219757636f19e5554ef1b02a7b0598f710d0e038de47b32303d66db8a18ec12a2d90ef4fc1222309804b95380da813b5f53b31a3f8ce094e4d0b3e90a1adec32362163173a39f919d0c5437d666440859e83e24186718970075a97e41a34c139e7d1e6f6cc7dcc4e97566c4fa760bb463c3a9303512160f8367a037c74600547d840bc67a10418945d970382a34d0a65124a0229b1e0fd490f2c47c7c59cc45a1a77a0ae566ced8fee563b29459690bb60b3c00746f894f5ebb439b94761ee021484e7a4a26d136b558a7442d097fa24a5c8361b354e80aae7a9cbed5804879deda04a1154464958137a839d8b125a55f8657c4281551eb976d48e3b9ffd99749282956c6cb4249feb301da80ad014414502cab76dbbcde8e190c84e5d314684c3cc6b95c801725cbb1d0cccf9895f0017f2bec260d3f9cebbb12dd498858eb5931ac4500d58ecf98c9aee72e527fcd957ac7046627fcff3cfe6f2aaf6fcb0607a69f060e081b1df9e4a731aee49c20f174089336e95e248ad8b85ff5a9e4b5271c2539e296f85877011339141dcbf84c04949d08f9bb4074c71e4db7bbcbfca391f1fd5787168f11d2e965a57e7dbd8af5f1bdfd8668ba73e2c17999377c926c8e35640ea447d7c700ae1c81ec178ed1ef808d0a668192fa759685a1689e7ca924e7fbacc56b15bce67eda3d851e944d89fdf63a09dfd13f9e2eda06d64b93ef8fc994b713f71098bda86af6c80b9e325b558eb1457bbbafc3087c3576f887d387991f4f2f51974148be551543b5d51a54d233f2a6bc693a0c9d8cf815c338e222e3bf790558a13caaa8675b9cee738f9880664a13884c9b8399ce694c14a1e70af0fdf6047d50ee580117da09ff3d1415aa2cea8a3b4c5a60bf314a9bf73ef9006905a65819f629442b383976e44308da3764c6c22adc282bea1e53f2e1ee5a62350741a78b594dc9fff4b4fcc325e5e2b60964701f1705bb512a08f2911c3ba8655d84da4a522fdaa6bbefa5ebdf5616bf6a7725b4ca3e6837756281409412dcb5fa9d4befc76c6aadc0ba710ff0a049478319bc99fc088062fa3309cbc03cc893e35c08e2deb7a351c33370e1019f2b8f3d03406355ccdc593de114a82ce781d59fb5827b301356083586b51942e457e94c74373a0012dd0794d65dbd94b01ff6e878563c3ea1e246753d1ebb22bf39e70bd5caf1f00e858d61663434379bb8ef46328c5d87009d5e1a7b6b9028f113b667d9b2e30b6afbdce6ebef714b7adacf06ad02af06fe2b2c8ecadf8bf8be25ec8f13e6f505b23b2175c192623e74b520383a5592c3a5d6131970d2c0766822679c2f3da6c857bdf3ae648002cbcc85e8c512808d18fbacecff0fa5128390443c9b46e3ffd52ae8399c65d35a13fb7b4fa1006f7e2ccc52a14b932d7a8d99a77abef4598b648e8ab8657b866eb38292479f0a304cabcff1e60778b1c755b52d869169c5c255c0791cebfaaf024e90d4909ee24a172a567af8da29f8a27a1c670ee005361576a5aadcaa9e2532c367cb529611e04df6e690b84419f4f20b1dae1530f257287cddcfbc4d4b89b1aab288ce9e1fccda8aadb6f0832a71d36693f047a08cad480d4b081a949174f264af8b3306962a4924542950f22aa1c48ba04d0ec1ad6a6ce9139bb724a38e186d1ba1e565956b8732af5ba37d12af05f1d6f41b6b4bc3a12e473fa57c668473a781591f5da0ad8e952058d4cdb763bd17e176b2d34f4dcde878bade369b06e40c83fa49e2f45fda281956217312491663ee32e016642b4ca657b770f53e751cd5efcfafbc657fb3d92d8d7e6c613fab5495389cac0f29475166201ceff90acd02fe1a8b0b6bb417f22f67350b90e58f59644f3f08c3961556928def5b5c6a8db557d161ac2bf5fd81e1536b961cad15d30cae4f6b52abdc5577488aeb4de5b42ed4b1917239d436e01f2e92f0bd2d8a50d642c5d2de8222a76606f4d198d39ebae8698ffc2307dd5c63533ea04aabb7d6bb99d7a83dd02b5b025bbd264fe73575ab96358618e9a80dcc5911f5425eb1d7a702adba2f865b95b73cbc09b246e7a1aac53b4df7a94aa2cba55920e8f7ac65bb38c0f90f84b9f990fd3fbfbd29af37f2b07c60d5ff53cb13a549a91626ffa23170895dc9ea658d643bcbe30675888b180e6a1a6bf6eff27d6ad0e0c7feeb85f7566bdef90c470a96203ce2ec640a78da7dfeae2d9d4242fe53202b940c8d5e463bb6d1ef6a8942db69039adeeaf98ad4b4f1407842c3e2a834d98388d7f7265cd2905506b7598c0b99b9e71d8b609765544d599c9e56ab465d50039d143a6a5c5b42fb38fc2af7593b198ca0c07b1b2566e0a81cf6ad78215fe11dc93b4dba21f6499533387e83063ffedcc57c6e1ea20e2fe9888ac711ebba9fd71b42f25223c1c728de416585dd88a65c7ef408635f76a0cd870a10084ca8c0e67a85ad7a92f266c7fb40b695aae53aea95da5c5cf1ee3e572359a80d23e1ef696081b5508400722aca41e96766cbcaed372e941a4417d51fc8501c14e807b8dd920c675e803479b6dd0c25363122e737653ba66dde17b40c8c88a167636beef446a97cebee8d514dfbfa86bbfddd89bb3278181158901eaa31c993a298fcdd16e4f54ee7bdb4ca556cc4e81a99192918f8a5ace7f50b8ef5d5b991871a89061a26c9e0f6d001005c83e3efbdcc624c4a0d6b", 0x1000}], 0x7, 0xfffffffb, 0x6) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000002540)=0x2, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000002580)={0x1, 0x5, 0x2, {0x2, @sdr={0x30314742, 0xfff}}, 0x10001}) bind$alg(r4, &(0x7f0000002680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) 2.930116581s ago: executing program 4 (id=817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001e00)={&(0x7f0000000000), 0xc, &(0x7f0000001dc0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x1b0, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x51, 0x8, "8e49363f06f55723c66e1c0938cfd269cd147016a1e20773326043828059e5cec84716ddfebbc5a18cbe525ae369d797000619006edf37fa9b321c6da86d0f99d026a5779a233f3f7b33c0d616"}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "f127df38c224e78e430d5c7d224ebc2438f2a33065a61c850b8d9bbbabad2444173b9fb90934411849a536b9be9ac9119edb9e2c4fb75de2877a1c21d31c1460a7d86fa1ea2b77e08c251d20bdc2713d7c1e1d5327c218f54c62a8c8f6af8a64d60af1d9274ded4636ff0581409cf52cc5ec33ff65d921840393784b66dd1d012227799fc93d4099b1856dac74cef42ac75b7a1c10373076700522da0119827d0fcc94ae29c3cb1e2c21466c22e4810186c2b0b3947da824024aafff831fb8fdc298e40f52a615131dadbf5cb36a3a933edc672f649369577091f4a3d584febd38d44644fd03be61beed5ad9c3a8c7"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xe0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xa0, 0x6, "c7fcd270174f6b0aab98bee5d43083c295b544acd6bbba7638369ba7e2a4a5e9f0e6ea04d75c0b57ed0c6113b4241bf292368dbc1575ebf8b4ed188799669598aabf5719e64dcd9f9e12fc15a1adab5715dd0d7ed0772040abd5301cf52fa502a10e1ebbb6891b129c6df8fcb899ddf809f20c351d568b80f7143fd1f6b9b1e153ab86b16488e7c8dcf84a4902e9363c010ff82c764592df267463c6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8a671569150b7c1d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x178c, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x200}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe6b}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x9b7309f96b58a2d}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x1688, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x15d8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x15c8, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x168, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "674cfb1914301e5ba21c92181d6d685297e2c2f4703919f9930ac45395c5c1d1e037b6bd37a0e5790154ab111582ddc011740109d172ff6eb8b2b6150a35d723a554f1bbad677495decd31ffc38ee074dc5d32a89524c6a634ace6557bddaeb09562b0fa7201aafb7b8b537584beb2cd0e06bf36f2c62fe5ae9fea18d354b6695358a045921c34361192ba9dc5c8c57280ac434d32bb7c5d0d03304ce156e1e3b890"}, @NFTA_DATA_VALUE={0x95, 0x1, "1dac178a596b5bddd4b913ce1fae0f7fb9aef42fa0ba7dbc8c0d420e5461e962d6f593168c4866e25b9f3ff8f946ea034fc321f1ebd3c93ffed8e085c7577017f143538489052f18f7f473401c97be43faa0086301132f8aa64f1334e705fd99bd52bce54f8cf325b55f9cc55c9a5c87229e48bef43c21cc7c9fbed4a77687c165c5d14466c7ba26f9cdd947d2a23eb81e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_FROM_DATA={0x1374, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "1b44ac82893f4df84cd657b182b3fda83810bfd3c40a6d42ddedd16699a7b0c3f5c7ed4713a0a67b0d720325cc4e90f798461bda3f1ca8cf2441478b9a3ab29854b77e6d42bdcaa90bde7b68f928d149dea2716b268e5c2be0cb73ac3d205cb2a30f3fed1ddae658d86400f8df439327bd923da0130908da5487760c58292ca34b1d2314b1b0538857823b7dfdd80ad1687a9310653f023eed81a8ce6c343cae78858644073cc6a8d83fe1c119725f61646d19f83600ef823d7a00da31ddf89a3bf73667fd676aeb0a1107aa5fc39dca8b5d1fe3878dae22e08c961b831d7315b6df16cf96f85df334b9e320f4230ff4d1cfa4ff0272da980b7a720c25d1d6941bbd639db58e98c27bf041474032791475353d3f8d4d93e3be0da838e9387035491e89c1276f1b82c5bbaee2da9ab08135f536a6fac9b5b1b0e496a879bd0a3d5f0ddbfaa8701c6b5e04b623e8cde348bc1b5db31a29124686ba8e11cbaa23444a899decf67a03e1ea929881b2fc574f78d3f4ee8c07f3baac8ecd545180892544f1c84e33cda7cea319f9f7b99c765e5fc77b3018e1fc35de3865f40ec9a33b79c30cb1bd7cca5ba9495f7c8880035b5c88043ff3fc6c666355fc6ece5c80b4c34dcfefeeca177ccaa35d5c7a71d5f2e025fb852a1e5856bfd350058340486421fc751027da1237280fa48e10f65e8fac7523106f9f5b5f0763448a6f0758f7f9ce696251be572a24ffa0276bc296322e7844853cfd4d8cff9cbdbde7fe06208bfcf6a3055e92faaa7834a105c38042d788d6a8622019c0030c8437f732ab2c9298b34dbddbb6198154be6c65f9a8a8455aa5d7794d7da45a0e6327a78c09ff8d699de7f267215e1cdd6c10c4c9525b54095c62f663bce1cfbbf8322863bf4d16651a078e3383002dafb49aa3e177216c5fcc086bdb9dcb0feaa494316c34cb15dd35bdede38b08135aa15e1cdf1282ddeb2f323f19a8aa261df59c9de432a76a9c76221ada5445cb644edbb161833e4600eee2f8f6a46b0341b0b585a6152110033aac357ea6b0d8fb514dde8d11b1dfb50cda4f291900b9d0de11c34ca4d71433ba2a4d3648339fe8245dfccf69bc6412c79f63414095a424dad105645dd12965df41eda7e9579e07471d8184c9927daae07d31b38072864194b7bf78d83722ee576da0c0134d7ae62c785b07267cfc3797b5bf9873c194f460e33d3b8dc366a8f85b661210f8959b56a45921a17e35cba92a34864adf6cc515554935fe9b7adecb84d112e6829c7d9ed3ccd9e4f5424c0c14d144e433e5c3572d58ad1ed72e485974798846fbd0c60e8d6115b4f0e673904fe7002911c2a16b6c093f245c0b7bd825ad43fb923cbf9ea798f533ab7a5f8a022a0d9500d399b89f5c3a87c72f0f4f21b09fc44885fc386951fc0474e88b34528d32b384e93eef601782c88b75eb66ca561985c349194d6791c6a8015f1972ae27ba9cab899b56f3b97d832c0a3402b66a7abd0b3801815442db573df725ea096046fea82aee0dca5dc9e8eb8ef2bb075844eba9822bcfa4ae1d0885ac45ffc70dfc201bb1be719c7fb4fe204b6599e97317c297c1341ccca6d36dbc3baa2e3459b39f0f9552593da360412c7b2c6fae89c781f557a1661b19c978d62351862ea4ead3ea8e20b596057705778df59ac9ef875e6688a42fbc2600566431d420d3c2f72ca10a34edb5196b154259845a83b6085f45ef2eb22f355b9b786668ddcf896a24ca4e35f2c70a58424a1195671936ad0ec2b087335c81d45cf327fb17bbfc4e6bd4322a906ad585c81a511d492235193ac6de8a9d0b402a04a676a41ea6e4ffc4abe03eb5eb4bc46d139dd53b8d887cff680fd77708543dbbca2df817faac0fe5c04ce9b706fa58fc674131d1208806f6d6a37c3ceb586e7bc8a09bcd0b317244a57a613c92f153f41cb867704dfd5530bf03d61b6d6be97062331204fc2ab4ac67bc9b05213103a597211bec1cdb420a3d17dc6fdac26cf2bfd75baaa1620a390837eb582594f1019ac57bbe27efb8384dd1bb99119d2cf401ae24ab59626349f25be9876df8b4c4bd0d292f86e6d2f0c23d61d847d7bbea4a0e02af8f0a01e8cc0b0584fb6534f7155732edafe170ecc148ed08bfa0ef4d84971da9385e1be1f48508b58b0aa0ab8a3b81709043434a3b9b40b7f27f8a76ae8de26d30225e2afc6849f6a64a648610214fcacbe9df91006b7fe54ee07f6fe77228d8669b1d7dd201c877d443dc05ebd97d1ac89a71576abc84520803ffcce5f375835f533b8ae01593dc536e20faf0b307652325b6358dbec8c8ce599a5454362b1598079a00b95b5ac9d5ebef157a9635c96e76e7bfe5683def48fc89409cbc0c254c62d9eb352b24a6cda4ab5781b2926302e54db3bc33079007439c77aedfc442cc230fd3ea0b425819c59b4d3f66470e1e7125fa0a2677b62e40657000683b5e893a85e28515969f7ba718e865767db138568bf6406d71219dc5dd0a1b66dd619199b45a7ae1fd830e36a666da7a31e799c0bc816a98b5c5dc8c6104dd5f5b55328770e5546f88f6d15d94cdcf33e866233982a41a2b1a792c02e6dded78ff1e53350eaae0355d46f0a722c9807dd9420e13aadf2d5a3424f8a89fcf2de7f1381716054689944dee288ecb191e033c97b9788d02696ab29e1c7d72c77194d2ae4a22e96215cc74b31492c6adf12971b89e1406021091d2621e13a7b94373ad30757d5ca70bcf1f44eaa0f9f082ce8d2dad5359b08fb26810fe3c1f73f81d7f9d94742af22d1e709a825a38b930155011402153cfd7c126b0c40236fe81526b4438d31e8cb7a62c99e731e6fd911b54573acb45c2f962857161e89ad8bfc1201f134390942e2cc697b58fc677cf962505504ad2012c367a0f203b2ba815ff268b49fc0aaedd532022bd90511e11078fe23b04783222b548cfcd8c48dfdbd2e2777024214eaf20b016df60f9fb342066aeffc421cff3cd3e1ce7dff4a7609e2612a02af59e65350fc02e98542a0bae57817b5a6040e1ca4c3f6eb2047aa701706cba18a38a6ab36159e9810483e9c05e9d9729b4eace94b2c2949301ae1f1a02d754bc91d904d809a7a5fa189393c08d75cae7d5c7648f212848e96ddee3f852ed80e8dd39c6228ebb7e1f360f270083a3c34aaab8b1f6e63ef31caf8cef5b2be819da220d2a318afc9cb317b094b61bdabb1f9204f5f5957595707283ba9e41a1ba14b77bee1d0852150c3f1b8b5224230460f74dc735bccedb5207745794d8f1285f1ebd0c6e8e94d4bc886b0e5d0d45fd6ef715d554094e63220051864d65181cc0e7fd48b955c477e674ae5659831bcefc1b61bc21414ddbbc6b14611281f848b41f9cb1f1514c538d46cf229285c0d35cac5f371afaeb4d8f9d318967048909eb3fb5b06ac01d9d0380d3ad8f6793a63cbdbdb6852d8e5bcf5ef2fce8deb2d3a5d495202bdba269b75c822bf95c11ebfe9cbf3439fd024f45ca457a84f8a48ccf2e5e5cb17e4ab613028be1208f0b650eea47a379c1ab39f1e7a7a4f9aecdc6acadc08425a9fad0bac9a0b66114cafd20dd339efd93a90f436d5b2342e6915817c79dd3153a80168e61f45147cbeef413c4462d562d078e358038390bf0b9982f53246b37cf3f28130b3789a8a618137c2ef57e331f52960aba09be7aa146181bfaafbb01edf1804920926ddba5a0e46183e05fcd2bb6ac11bf34707678965e5e904a8d83b9f7dda1343baa8617d1421ab64bd22c0071877f355bcf481ecebddd0a89b3583db77c9eaeae3919493f8e811e626bf93a8eaae5e25ba69007d8b8c78b6cde669b0cee55cb93126297de77f575c7625e48c2825e5fbd20520cfc3be19c02f443f92c9ba470d6f4d10674ffed101029a8f1ecfdba8da98d518d4a24089955fa05d2aa2c3e74d068039745f77a967b5536e83e8dd269e9bbb83968868efae10ba8a439a428d6001bb1b8b0792ddf2b2df53d8269836d45eca3354cd7d24c8b69bc12ac27c545a738bcaeb30442e7041b5176c25bd79ffa93b590bff3368958260930bb06adbb4fc0da545c65aa1ff0a451768362f2cdda31af7c5fb49bdc71fe682040c3ec2d4a8694997df755ab587f4a519449e4168ccf8378403060d8c3ba61c0d52d10ea44b8dd8d1b3db5f2e0ddbda7a0da7df034fc9f316600757f661cc0bdb1741e9338b52aabd5d4d428478e1fb377c85a692ca5945adf92969126b9b4aa9c4fc82e8150a613df59e740d41cef2f46bc38d5fa3df85a0f603fa2c17beac58eef7d8e3b39f4e53386e1c64fdb27932e7a8a3071b846b56aebcc0fb6a730d951f5ea5594e217ca2466234d2e1a08aaf47e6f6e518414564580a88c3bddac3ff4956c0f4e657caf9a5ac119f0042a674b9d0e6de9a0e6897460b1036b2ac44c467d2578565ba77f8ddfd1692856bab240ff7308df91a66cac742d48f305ded18d12c4e61f22fc9d717279e20ac72c70af7643246655764e32ac4b7a16904e8979a7551ba034759b8cbc5f5656f6dab456e0e81aa9be5923a5363764ade1cbae27eafa105e0fa13f16c88355df3447766ac2345203af2ec10a34651eb6ca47179119fd9514b3bd659dfa48e26452b926321b8524fdca6e75d0bc6470f32d5aa7ace56ae70e138737e9917fa20dbab5786f73d2d935cb40cc9efa114ea4b577338283451d43d34f242d5f61937215f0f35bb054a876e7ef1405050325427214354598ee4562228a89553291b8b5e3ce983cae23169ca0f2c6d3a3f31714f6d7d5938912ded5ec372c81eff62d58a21202da19e60e340f9410061cd9b275d0faf35769d67324914a57e6da535976e843603b107f09d3c357487444bf044bc6d9d89874bbea5c22042a5375944f95680611e551474fae55c5358fc245b87c5f2796ba049c37da8313b68950562708fe584e1119b7d5410d8c00f3b1a5f4544754883a56ef7ed99849abb860dfbe9e001cdc60752f8965972cfd96fdd20b9cc5128f534206c9dcdb5889b285ae444eb0d4fa8129d59fe3ad45ed385e11e5becd7766ed8e070b8e5f7716a0722359dcc469eefcdded72c3d72e2fb6c3f0874d26c08c4324ded6f81cface6ded46d84231a25bf17d6ee8825b7d9ae995d452339fa95c88b93d5f509085254db46943f23b89054f1eba83971ca2a2174dfeadd4897b64f8c46e7bf14bd9b977296a08cd7e7bef72c6d727f738e78fd88e668f36222837f6a720cd6f5072f1a3365eaf08762d2575a6e1a48b43ac788a0578007a5ab54d8f0ac99eab56d55314602b6d0e371268952d0d7bc881efbf2bb6984a2de7d0e561d500d6f73daafe726c94afbc80b803fe7d7b55d450e77b5803dbf64eed8a9583b591d0beda33b8b9f5542802767a686f3c5daf8836fefdc0e9e95c25195ffbe47c3933af84ed5bb6bbb4f01a0544e22921e10bbabc20824a0691da2424dcfb08f9720126803dcb29ffa555d9064cf2a8c848dca06791cb8ad15e3a059cd84e405b647dfc0993662c6837e10ce91818d05a92722b905d23205f020ef9696e0c89953cfe57e740cf0179e171c3c47cd7144c6de462e060dfbf7b4fad7ae2b3c087610b3a4a82c13cc269471b7205ba64e619bebc6d62174694974e72a6df4bc1af8785b790c36f2d678132d0a28c5d8f677519fdad4067db6fee13a03e092b69d16ca1310c13d9d69a7f0f0e3270480bf6e0dfd4994e861f433271df7596585078ba68d878d87a3af0ec53715f55ff6fe7cb0540258410c27bfeadd0882a0d346c0b7337339b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4af04bd9080a3b07}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "95a035af9225b7f8f043513916acebda965a7716fa482b41f7cbc53d4ef5af845005a7d86521d1a2a7fe9644b9dfd363586be9760700d58517f792f2002e978351bffcf32265015daececc055391de1c3da43ef64a8d95c71dabd196bb7bbb1b62431e23790e4df38864fafeda40ad2fe59bdf690b1dd33365877a662f07591ef05554d5f00a4987fade05daf7e11fb9f89e2fa894996af3a3b164000e46305ba73eb316ae4f240c402956a1e27a55a3bbcef75a5ef31b2450043f69eccdcb14a38e79b169b197fbd72523a66cbc089a92a26179873cb8235b183ee6613fda2b63c947167348b8ec3af74da0"}, @NFTA_DATA_VALUE={0x91, 0x1, "fcb46f740b8c7fc1dcbe20131d65d684f2020842b2cc0b37c91d240db9955405dc925f1a5bb6f6b12d3b953bc64ad57bd7b14aa9cc189cae867a2e68fbf3667a2788e420ddf125f104281edd03af5e60655c782e81135040f63848da34e476fa8845d0c3cd932939a02a3f592db76b7effa3734797282e49140978c864d334339db196a49faa16a8c4fd0cd4aa"}, @NFTA_DATA_VALUE={0x6b, 0x1, "6205130267005bd7f2ccd6f605a1c1ba53ebaa66ba59558771c3d27a80ff3ae3de1b2c30651bab1b814cebbf8e5871d31cb13b52d5c1a413885aa1646a567d11efb78a51b886723a8f5a29a30a0393af17f2fed746133647abc53303630f02ab934f92f9f5984e"}, @NFTA_DATA_VALUE={0x5d, 0x1, "aa27ea0d973e0b7d29bf808002e241eb47648ce74c85c770ad302f7f681cd4bd50f8422ec6c28f863677eeac37c6c9c1104fca92b5483d44c93f2df0ba2fbceb18282b8be551f9a90a368366d789729f93c743892446cb081b"}, @NFTA_DATA_VALUE={0xf0, 0x1, "ce99e8331180ffe7193c017b63c6ca85abaa1a6a88bcbdd67a72b6d72b33c412e294faeb9e888ff3f38762fe284db5d8db0c03d2684646a9aded7ddde037038725e5381c3de71c0b955900896f751d95f3f9c427bcb19a7833bfade6668e0176b9764ac878a538d702fcd727d79cae2eddb2d17f201039a04dd39ce5c1b83f3c44d4619ae5221c12cc1eb57994ad4b7ef7dff49df89eeddddc200b186765bed1330ba39c1587f3435df5a79526ef5761ea7059760f1ad768611e0c39d623beb03845a558a80c9d8a07d99afefb930caa4e6ebaaad92a9de8b32da333f647c9692b3b978c83b611617c2b2b7e"}]}, @NFTA_RANGE_TO_DATA={0xc8, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "dfd1a22be6de8c37b037600e34f91bcf623e0934c63eb26f04b508f29d750840e993dea4b8b7253e7a6db5cbf91bb32fff63f024b05a6c37add50b5ae18f9564ed815d669d51385d01cda1dbbe54eb181d38c988f44fdad3185eff06141ef97f765cea9260a1d482ec0b759f8baad0e1cc8e48751fcb26e2644be0708fdef4ae6c613cc3a0f92483"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6e}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}]}, @NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xe0, 0x8, "6574d4d0e128c0a793661993a47d7aabbc04badd13b1651d6300974ae5e056f8231c3867e4180e0bddaf99b61c366727f01abb553630e8c490418d978bdb648561ebba80c6ebf44cd2b3cdfd68503cb82d452a75c6f3a7d7a4a32ef6a27f16708ab5de050702dcb4b8fa7e381bcafcb2ce590dfca15f47af858c3ce7fca1fab3e18be5bc7f3fa0b9649ed27a032c89f6265fe4ed4fd7f24f513c81209282edfa8f912140115b1b540f64ee18773e8c53fb71f82264c2eb14c9c536f5e483a3e1a952f8185d54fd73ed99fda7c503f590ecfecd3b8f53a2636d6e5b35"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1ca4}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x108}, 0x1, 0x0, 0x0, 0x4040890}, 0x70) 1.445699832s ago: executing program 2 (id=818): fanotify_init(0x0, 0xc0d9e5268d9d54da) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x2}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000000200)}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="07000000010000", 0x7) mprotect(&(0x7f0000815000/0x1000)=nil, 0x1000, 0x1) 85.374172ms ago: executing program 2 (id=819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x6c, @loopback, 0x4e23, 0x0, 'dh\x00', 0x20, 0xd2, 0x4e}, {@multicast2, 0x4e24, 0x2, 0x4, 0x1, 0xca}}, 0x44) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x1acc02, 0x148, 0x158, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0xf0, 0x158, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@addrtype1={{0x28}, {0x445, 0x18, 0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0xfff6, 0x8, 0x9, 'syz1\x00', 'syz0\x00', {0x470}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 68.792638ms ago: executing program 0 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800a000100717565756500ffff1400028006000240000f000008000440000000020900010073797a30"], 0xf8}}, 0x0) (fail_nth: 2) 0s ago: executing program 4 (id=821): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x345080) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01]) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc1, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x0, {[0xc, 0x7, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='as\x9cI\xd4n\x1f\xf5ymmetPic`\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7iLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x91\xca\xe7$\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1b', r5) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0xf, 0x6, 0xfffffffe, 0xfe3, 0x0, 0x151}}) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x60000, 0x0) write$tun(r9, &(0x7f0000000340)={@val={0x0, 0x883e}, @val={0x2, 0x4, 0x8001, 0xe00, 0x6, 0x8}, @llc={@snap={0xaa, 0xa9, 'JY', "90cf95", 0x9100, "5228b4a549a79df61b47df16"}}}, 0x23) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000700)=0x31) kernel console output (not intermixed with test programs): carlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 260.831188][ T24] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 260.917833][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 260.936533][ T24] usb 1-1: USB disconnect, device number 22 [ 260.974799][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.012844][ T5724] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 261.042227][ T7771] vhci_hcd: connection reset by peer [ 261.057043][ T5724] usb 3-1: USB disconnect, device number 20 [ 261.066533][ T146] vhci_hcd vhci_hcd.4: stop threads [ 261.081455][ T146] vhci_hcd vhci_hcd.4: release socket [ 261.082730][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7449 sclass=netlink_route_socket pid=7785 comm=syz.2.539 [ 261.100134][ T146] vhci_hcd vhci_hcd.4: disconnect device [ 261.140652][ T7778] vhci_hcd: connection reset by peer [ 261.146946][ T146] vhci_hcd vhci_hcd.1: stop threads [ 261.153670][ T146] vhci_hcd vhci_hcd.1: release socket [ 261.159986][ T146] vhci_hcd vhci_hcd.1: disconnect device [ 261.203625][ T7787] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 261.223181][ T7787] hub 1-0:1.0: USB hub found [ 261.228083][ T7787] hub 1-0:1.0: 1 port detected [ 261.508600][ T7794] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 261.522323][ T7794] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 261.536388][ T7794] netlink: 6 bytes leftover after parsing attributes in process `syz.2.543'. [ 261.545182][ T7794] netlink: 6 bytes leftover after parsing attributes in process `syz.2.543'. [ 263.975285][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 264.282211][ T7805] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 265.293847][ T7750] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 265.453460][ T5614] Bluetooth: hci1: ISO packet for unknown connection handle 768 [ 265.473834][ T7818] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 265.590729][ T7826] fuse: Bad value for 'fd' [ 265.965496][ T5738] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 266.153638][ T5809] usb 42-1: device descriptor read/8, error -110 [ 266.196548][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.262538][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.337139][ T5738] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 266.633003][ T804] usb 36-1: device descriptor read/8, error -110 [ 267.687764][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.897624][ T5709] usb 4-1: USB disconnect, device number 27 [ 267.916902][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.127277][ T5738] usb 3-1: config 0 descriptor?? [ 268.190678][ T5738] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 268.293776][ T7834] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 268.306853][ T7834] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 268.319826][ T7834] netlink: 6 bytes leftover after parsing attributes in process `syz.4.554'. [ 268.328698][ T7834] netlink: 6 bytes leftover after parsing attributes in process `syz.4.554'. [ 268.488298][ T7839] Cannot find set identified by id 0 to match [ 268.567900][ T5809] usb usb42-port1: attempt power cycle [ 268.573524][ T804] usb usb36-port1: attempt power cycle [ 268.814165][ T5724] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 268.944820][ T30] audit: type=1400 audit(1778643507.632:448): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 269.001894][ T5724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.011606][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.022101][ T5724] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 269.033940][ T5724] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.099640][ T5709] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 269.100794][ T5724] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 269.122486][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.130708][ T5724] usb 1-1: Product: syz [ 269.134971][ T5724] usb 1-1: Manufacturer: syz [ 269.300347][ T804] usb usb36-port1: unable to enumerate USB device [ 269.319618][ T5809] usb usb42-port1: unable to enumerate USB device [ 269.335920][ T5724] usb 1-1: SerialNumber: syz [ 269.429493][ T7860] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 269.498156][ T5709] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 269.506459][ T5709] usb 4-1: config 0 has no interface number 0 [ 269.512815][ T5709] usb 4-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.524103][ T5709] usb 4-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.534123][ T5709] usb 4-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.547222][ T5709] usb 4-1: config 0 interface 2 has no altsetting 0 [ 269.553912][ T5709] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 269.564287][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.575767][ T5709] usb 4-1: config 0 descriptor?? [ 270.058946][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.067718][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.078026][ T5724] usb 1-1: Can't set UAC3 power state to 1 for id 10 [ 270.092003][ T5724] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 270.263032][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.557'. [ 271.016724][ T5724] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 271.037650][ T5724] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 271.047273][ T5724] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 271.056639][ T5724] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 271.072223][ T5724] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 271.098781][ T5738] usb 3-1: USB disconnect, device number 21 [ 271.149966][ T5724] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 271.184044][ T5724] usb 1-1: USB disconnect, device number 23 [ 271.225803][ T6182] udevd[6182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.227280][ T5709] usbhid 4-1:0.2: can't add hid device: -71 [ 271.281262][ T5709] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 271.309279][ T5709] usb 4-1: USB disconnect, device number 28 [ 275.402384][ T7881] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 275.415412][ T7881] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 275.425658][ T7881] netlink: 6 bytes leftover after parsing attributes in process `syz.2.567'. [ 275.434471][ T7881] netlink: 6 bytes leftover after parsing attributes in process `syz.2.567'. [ 276.215502][ T7896] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 276.224643][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 276.343305][ T5709] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 276.396521][ T5724] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 276.506736][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.522216][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.537316][ T5709] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 276.550245][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.583228][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.583365][ T5709] usb 2-1: config 0 descriptor?? [ 276.612439][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.612825][ T5709] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 276.649551][ T5724] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.673752][ T5724] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 276.701840][ T5724] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 276.714340][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.725583][ T5724] usb 3-1: Product: syz [ 276.736201][ T5724] usb 3-1: Manufacturer: syz [ 276.744463][ T5724] usb 3-1: SerialNumber: syz [ 277.336894][ T5709] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 277.494253][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.502870][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.526118][ T5724] usb 3-1: Can't set UAC3 power state to 1 for id 10 [ 277.539625][ T5724] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 277.552575][ T5724] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 277.560532][ T5724] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 277.572282][ T5724] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 277.582181][ T5724] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 277.597686][ T5724] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 277.834885][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 277.841785][ T5709] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 277.851201][ T5709] usb 1-1: config 179 has no interface number 0 [ 277.927101][ T5709] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 277.967743][ T5709] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 277.981893][ T5709] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 277.985510][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 278.003122][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.011077][ T5709] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 278.027359][ T5709] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.044139][ T5709] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 278.045064][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 278.069643][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.433107][ T7902] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 278.488406][ T5809] usb 40-1: SetAddress Request (10) to port 0 [ 278.508513][ T5809] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 278.522277][ T5724] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 278.560174][ T5724] usb 3-1: USB disconnect, device number 22 [ 278.628262][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.642127][ T7922] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 278.659392][ T7912] vhci_hcd vhci_hcd.0: port 0 already used [ 278.688945][ T7916] vhci_hcd: connection reset by peer [ 278.709042][ T13] vhci_hcd vhci_hcd.3: stop threads [ 278.719041][ T7922] usb 1-1: USB disconnect, device number 24 [ 278.719043][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 278.734068][ T13] vhci_hcd vhci_hcd.3: release socket [ 278.751208][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 278.753521][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 278.799254][ T5709] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input25 [ 279.424486][ T1561] usb 2-1: USB disconnect, device number 21 [ 283.657256][ T7948] netlink: 'syz.2.584': attribute type 4 has an invalid length. [ 283.665298][ T7948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.584'. [ 283.754554][ T7950] FAULT_INJECTION: forcing a failure. [ 283.754554][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 283.769198][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.4.585 Not tainted syzkaller #0 PREEMPT(full) [ 283.769221][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.769230][ T7950] Call Trace: [ 283.769236][ T7950] [ 283.769243][ T7950] dump_stack_lvl+0x100/0x190 [ 283.769269][ T7950] should_fail_ex.cold+0x5/0xa [ 283.769294][ T7950] ? tomoyo_encode2+0xfb/0x3c0 [ 283.769316][ T7950] should_failslab+0xc2/0x120 [ 283.769336][ T7950] __kmalloc_noprof+0xe0/0x850 [ 283.769368][ T7950] tomoyo_encode2+0xfb/0x3c0 [ 283.769396][ T7950] tomoyo_encode+0x29/0x50 [ 283.769418][ T7950] tomoyo_realpath_from_path+0x18c/0x690 [ 283.769449][ T7950] tomoyo_path_number_perm+0x23c/0x580 [ 283.769469][ T7950] ? tomoyo_path_number_perm+0x22e/0x580 [ 283.769492][ T7950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.769544][ T7950] ? find_held_lock+0x2b/0x80 [ 283.769562][ T7950] ? __fget_files+0x215/0x3d0 [ 283.769583][ T7950] ? hook_file_ioctl_common+0x149/0x410 [ 283.769610][ T7950] ? __fget_files+0x215/0x3d0 [ 283.769636][ T7950] ? __fget_files+0x21f/0x3d0 [ 283.769661][ T7950] security_file_ioctl+0xd3/0x230 [ 283.769685][ T7950] __x64_sys_ioctl+0xb7/0x210 [ 283.769703][ T7950] do_syscall_64+0x10b/0xf80 [ 283.769724][ T7950] ? clear_bhb_loop+0x40/0x90 [ 283.769744][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.769762][ T7950] RIP: 0033:0x7f5d96f9ce59 [ 283.769777][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.769793][ T7950] RSP: 002b:00007f5d97f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.769811][ T7950] RAX: ffffffffffffffda RBX: 00007f5d97215fa0 RCX: 00007f5d96f9ce59 [ 283.769822][ T7950] RDX: 0000200000000100 RSI: 000000004020ae46 RDI: 0000000000000004 [ 283.769832][ T7950] RBP: 00007f5d97f26090 R08: 0000000000000000 R09: 0000000000000000 [ 283.769842][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.769852][ T7950] R13: 00007f5d97216038 R14: 00007f5d97215fa0 R15: 00007ffc2a04aff8 [ 283.769876][ T7950] [ 283.769891][ T7950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.041201][ T30] audit: type=1400 audit(1778643521.563:449): avc: denied { create } for pid=7951 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 284.065995][ T5809] usb 40-1: device descriptor read/8, error -110 [ 284.130501][ T5724] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 284.291641][ T5738] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 284.488981][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 284.500042][ T5724] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 284.517089][ T5724] usb 2-1: config 6 has no interface number 0 [ 284.530109][ T5724] usb 2-1: config 6 interface 220 has no altsetting 0 [ 284.546329][ T5724] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 284.562129][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.576130][ T5738] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 284.579227][ T5724] usb 2-1: Product: syz [ 284.584620][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.598487][ T5724] usb 2-1: Manufacturer: syz [ 284.610111][ T5724] usb 2-1: SerialNumber: syz [ 284.626379][ T5738] usb 3-1: config 0 has no interfaces? [ 284.639009][ T5738] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 284.641130][ T5809] usb usb40-port1: attempt power cycle [ 284.648434][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.664106][ T5738] usb 3-1: config 0 descriptor?? [ 285.001155][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 285.284611][ T804] usb 3-1: USB disconnect, device number 23 [ 285.356902][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.365805][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.376006][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.385617][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 285.405773][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 285.414998][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.423297][ T24] usb 4-1: Product: syz [ 285.427593][ T24] usb 4-1: Manufacturer: syz [ 285.432337][ T24] usb 4-1: SerialNumber: syz [ 285.573259][ T5809] usb usb40-port1: unable to enumerate USB device [ 285.831565][ T804] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 286.213157][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.222104][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.240021][ T30] audit: type=1400 audit(1778643523.576:450): avc: denied { create } for pid=7959 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 286.319652][ T30] audit: type=1400 audit(1778643523.576:451): avc: denied { ioctl } for pid=7959 comm="syz.3.589" path="socket:[17319]" dev="sockfs" ino=17319 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 286.348230][ T24] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 286.356196][ T804] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 286.398784][ T24] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 286.407652][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 286.423472][ T804] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 286.435781][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 286.461251][ T24] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 286.470662][ T24] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 286.481409][ T24] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 286.490241][ T24] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 286.513576][ T24] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 286.524848][ T804] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 286.536025][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.561072][ T7974] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 286.567619][ T7974] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 286.575474][ T7974] vhci_hcd vhci_hcd.0: Device attached [ 286.591434][ T804] usb 3-1: Product: syz [ 286.688459][ T7974] vhci_hcd vhci_hcd.0: port 0 already used [ 286.719091][ T804] usb 3-1: Manufacturer: syz [ 286.874090][ T804] usb 3-1: SerialNumber: syz [ 286.914264][ T5738] usb 34-1: SetAddress Request (6) to port 0 [ 286.985299][ T5738] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 286.985879][ T804] usb 3-1: config 0 descriptor?? [ 287.042554][ T804] usb 3-1: can't set config #0, error -71 [ 287.068456][ T804] usb 3-1: USB disconnect, device number 24 [ 287.100880][ T7975] vhci_hcd: connection reset by peer [ 287.113586][ T7662] vhci_hcd vhci_hcd.0: stop threads [ 287.118745][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 287.129273][ T7662] vhci_hcd vhci_hcd.0: release socket [ 287.136504][ T24] usb 4-1: USB disconnect, device number 29 [ 287.143893][ T7662] vhci_hcd vhci_hcd.0: disconnect device [ 287.162010][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.340570][ T7982] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 287.361008][ T7982] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 287.420275][ T7982] netlink: 6 bytes leftover after parsing attributes in process `syz.2.593'. [ 287.429342][ T7982] netlink: 6 bytes leftover after parsing attributes in process `syz.2.593'. [ 288.382363][ T7990] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 288.398343][ T7991] netlink: 'syz.0.595': attribute type 21 has an invalid length. [ 288.421720][ T1561] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 288.423732][ T5724] uvcvideo 2-1:6.220: Found multiple Units with ID 4 [ 288.430568][ T7991] netlink: 'syz.0.595': attribute type 6 has an invalid length. [ 288.438753][ T5724] uvcvideo 2-1:6.220: Found Unit with invalid ID 0 [ 288.450301][ T7990] hub 1-0:1.0: USB hub found [ 288.450937][ T5724] uvcvideo 2-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 288.462944][ T5724] uvcvideo 2-1:6.220: Entity type for entity Output 4 was not initialized! [ 288.466245][ T7990] hub 1-0:1.0: 1 port detected [ 288.472006][ T5724] uvcvideo 2-1:6.220: Failed to create links for entity 4 [ 288.483471][ T5724] uvcvideo 2-1:6.220: Failed to register entities (-22). [ 288.495007][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.595'. [ 288.516387][ T5724] usb 2-1: USB disconnect, device number 22 [ 288.625667][ T1561] usb 5-1: Using ep0 maxpacket: 16 [ 288.635117][ T1561] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 288.646882][ T1561] usb 5-1: config 0 has no interface number 0 [ 288.664565][ T1561] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 288.673948][ T1561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.682452][ T1561] usb 5-1: Product: syz [ 288.696362][ T1561] usb 5-1: Manufacturer: syz [ 288.708319][ T7997] xt_TCPMSS: Only works on TCP SYN packets [ 288.718026][ T1561] usb 5-1: SerialNumber: syz [ 288.723358][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 288.823380][ T1561] usb 5-1: config 0 descriptor?? [ 288.831626][ T1561] hub 5-1:0.132: bad descriptor, ignoring hub [ 288.837750][ T1561] hub 5-1:0.132: probe with driver hub failed with error -5 [ 288.848179][ T1561] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input26 [ 288.897995][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.355948][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.375820][ T7998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.391736][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 289.400894][ T5809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 289.413358][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.441637][ T24] usb 4-1: config 0 descriptor?? [ 289.452359][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 289.485065][ T8003] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.569438][ T5809] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 289.580421][ T5809] usb 1-1: config 0 has no interface number 0 [ 289.600176][ T5809] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 289.670191][ T5809] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 289.736103][ T5809] usb 1-1: config 0 interface 153 has no altsetting 0 [ 289.755120][ T5809] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 289.764282][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.786383][ T5809] usb 1-1: Product: syz [ 289.791718][ T5809] usb 1-1: Manufacturer: syz [ 289.796568][ T5809] usb 1-1: SerialNumber: syz [ 289.817081][ T5809] usb 1-1: config 0 descriptor?? [ 289.855812][ T5809] hub 1-1:0.153: bad descriptor, ignoring hub [ 289.862085][ T5809] hub 1-1:0.153: probe with driver hub failed with error -5 [ 289.875104][ T5809] sierra 1-1:0.153: Sierra USB modem converter detected [ 290.112287][ T5809] usb 1-1: USB disconnect, device number 25 [ 290.118642][ T5809] sierra 1-1:0.153: device disconnected [ 290.337355][ T5724] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 290.482235][ T24] usb 5-1: USB disconnect, device number 26 [ 290.512203][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.520694][ T5724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.531136][ T5724] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 290.540315][ T5724] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 290.554332][ T5724] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 290.563383][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.573998][ T5724] usb 2-1: Product: syz [ 290.578634][ T5724] usb 2-1: Manufacturer: syz [ 290.583369][ T5724] usb 2-1: SerialNumber: syz [ 290.657226][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 290.804345][ T24] usb 5-1: device descriptor read/64, error -71 [ 290.887572][ T8022] hub 1-0:1.0: USB hub found [ 290.888021][ T8022] hub 1-0:1.0: 1 port detected [ 291.263878][ T24] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 291.272518][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.281112][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.293265][ T5724] usb 2-1: Can't set UAC3 power state to 1 for id 10 [ 291.310550][ T5724] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 291.330562][ T5724] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 291.338659][ T5724] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 291.349578][ T5724] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 291.359476][ T5724] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 291.376195][ T5724] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 291.454067][ T24] usb 5-1: device descriptor read/64, error -71 [ 291.572528][ T5724] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 291.593109][ T5708] usb 4-1: USB disconnect, device number 30 [ 291.594536][ T24] usb usb5-port1: attempt power cycle [ 291.606937][ T5724] usb 2-1: USB disconnect, device number 23 [ 291.671962][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.005591][ T24] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 292.026927][ T8046] FAULT_INJECTION: forcing a failure. [ 292.026927][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 292.042687][ T8046] CPU: 0 UID: 0 PID: 8046 Comm: syz.1.612 Not tainted syzkaller #0 PREEMPT(full) [ 292.042712][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.042722][ T8046] Call Trace: [ 292.042727][ T8046] [ 292.042734][ T8046] dump_stack_lvl+0x100/0x190 [ 292.042766][ T8046] should_fail_ex.cold+0x5/0xa [ 292.042790][ T8046] ? tomoyo_encode2+0xfb/0x3c0 [ 292.042811][ T8046] should_failslab+0xc2/0x120 [ 292.042832][ T8046] __kmalloc_noprof+0xe0/0x850 [ 292.042853][ T8046] ? d_absolute_path+0x136/0x1b0 [ 292.042872][ T8046] tomoyo_encode2+0xfb/0x3c0 [ 292.042896][ T8046] tomoyo_encode+0x29/0x50 [ 292.042915][ T8046] tomoyo_realpath_from_path+0x18c/0x690 [ 292.042942][ T8046] tomoyo_path_number_perm+0x23c/0x580 [ 292.042959][ T8046] ? tomoyo_path_number_perm+0x22e/0x580 [ 292.042979][ T8046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.043019][ T8046] ? find_held_lock+0x2b/0x80 [ 292.043036][ T8046] ? __fget_files+0x215/0x3d0 [ 292.043054][ T8046] ? hook_file_ioctl_common+0x149/0x410 [ 292.043080][ T8046] ? __fget_files+0x215/0x3d0 [ 292.043104][ T8046] ? __fget_files+0x21f/0x3d0 [ 292.043128][ T8046] security_file_ioctl+0xd3/0x230 [ 292.043149][ T8046] __x64_sys_ioctl+0xb7/0x210 [ 292.043169][ T8046] do_syscall_64+0x10b/0xf80 [ 292.043191][ T8046] ? clear_bhb_loop+0x40/0x90 [ 292.043211][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.043228][ T8046] RIP: 0033:0x7f831119ce59 [ 292.043242][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.043259][ T8046] RSP: 002b:00007f8312045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.043276][ T8046] RAX: ffffffffffffffda RBX: 00007f8311415fa0 RCX: 00007f831119ce59 [ 292.043287][ T8046] RDX: 00002000000001c0 RSI: 00000000c034564b RDI: 0000000000000003 [ 292.043298][ T8046] RBP: 00007f8312045090 R08: 0000000000000000 R09: 0000000000000000 [ 292.043307][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.043316][ T8046] R13: 00007f8311416038 R14: 00007f8311415fa0 R15: 00007fff745b44d8 [ 292.043339][ T8046] [ 292.043876][ T8046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.048375][ T8047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.274301][ T24] usb 5-1: device descriptor read/8, error -71 [ 292.471046][ T5738] usb 34-1: device descriptor read/8, error -110 [ 292.546868][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 292.570311][ T24] usb 5-1: device descriptor read/8, error -71 [ 292.689401][ T24] usb usb5-port1: unable to enumerate USB device [ 292.738391][ T8054] FAULT_INJECTION: forcing a failure. [ 292.738391][ T8054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.753802][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.2.615 Not tainted syzkaller #0 PREEMPT(full) [ 292.753828][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.753839][ T8054] Call Trace: [ 292.753845][ T8054] [ 292.753851][ T8054] dump_stack_lvl+0x100/0x190 [ 292.753879][ T8054] should_fail_ex.cold+0x5/0xa [ 292.753904][ T8054] _copy_to_user+0x32/0xd0 [ 292.753934][ T8054] simple_read_from_buffer+0xcb/0x170 [ 292.753959][ T8054] proc_fail_nth_read+0x1af/0x230 [ 292.753984][ T8054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.754005][ T8054] ? rw_verify_area+0xce/0x6d0 [ 292.754023][ T8054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.754042][ T8054] vfs_read+0x1e4/0xb30 [ 292.754065][ T8054] ? __pfx_vfs_read+0x10/0x10 [ 292.754083][ T8054] ? __fget_files+0x215/0x3d0 [ 292.754111][ T8054] ? __fget_files+0x21f/0x3d0 [ 292.754140][ T8054] ksys_read+0x12a/0x250 [ 292.754160][ T8054] ? __pfx_ksys_read+0x10/0x10 [ 292.754181][ T8054] ? rcu_is_watching+0x12/0xc0 [ 292.754212][ T8054] do_syscall_64+0x10b/0xf80 [ 292.754235][ T8054] ? clear_bhb_loop+0x40/0x90 [ 292.754257][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.754276][ T8054] RIP: 0033:0x7fd80a35d68e [ 292.754291][ T8054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.754309][ T8054] RSP: 002b:00007fd80b311fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.754326][ T8054] RAX: ffffffffffffffda RBX: 00007fd80b3126c0 RCX: 00007fd80a35d68e [ 292.754338][ T8054] RDX: 000000000000000f RSI: 00007fd80b3120a0 RDI: 0000000000000003 [ 292.754348][ T8054] RBP: 00007fd80b312090 R08: 0000000000000000 R09: 0000000000000000 [ 292.754365][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.754376][ T8054] R13: 00007fd80a616038 R14: 00007fd80a615fa0 R15: 00007ffc727bcde8 [ 292.754400][ T8054] [ 293.033403][ T30] audit: type=1400 audit(1778643529.863:452): avc: denied { getopt } for pid=8049 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.069012][ T8058] FAULT_INJECTION: forcing a failure. [ 293.069012][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.093272][ T5738] usb usb34-port1: attempt power cycle [ 293.159561][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(full) [ 293.159579][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.159585][ T8058] Call Trace: [ 293.159589][ T8058] [ 293.159593][ T8058] dump_stack_lvl+0x100/0x190 [ 293.159614][ T8058] should_fail_ex.cold+0x5/0xa [ 293.159629][ T8058] _copy_to_user+0x32/0xd0 [ 293.159646][ T8058] simple_read_from_buffer+0xcb/0x170 [ 293.159661][ T8058] proc_fail_nth_read+0x1af/0x230 [ 293.159673][ T8058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.159685][ T8058] ? rw_verify_area+0xce/0x6d0 [ 293.159695][ T8058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.159706][ T8058] vfs_read+0x1e4/0xb30 [ 293.159719][ T8058] ? __pfx_vfs_read+0x10/0x10 [ 293.159730][ T8058] ? __fget_files+0x215/0x3d0 [ 293.159747][ T8058] ? __fget_files+0x21f/0x3d0 [ 293.159763][ T8058] ksys_read+0x12a/0x250 [ 293.159774][ T8058] ? __pfx_ksys_read+0x10/0x10 [ 293.159787][ T8058] ? rcu_is_watching+0x12/0xc0 [ 293.159805][ T8058] do_syscall_64+0x10b/0xf80 [ 293.159819][ T8058] ? clear_bhb_loop+0x40/0x90 [ 293.159832][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.159843][ T8058] RIP: 0033:0x7fd80a35d68e [ 293.159852][ T8058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.159862][ T8058] RSP: 002b:00007fd80b2f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.159875][ T8058] RAX: ffffffffffffffda RBX: 00007fd80b2f16c0 RCX: 00007fd80a35d68e [ 293.159886][ T8058] RDX: 000000000000000f RSI: 00007fd80b2f10a0 RDI: 0000000000000004 [ 293.159896][ T8058] RBP: 00007fd80b2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 293.159903][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.159912][ T8058] R13: 00007fd80a616128 R14: 00007fd80a616090 R15: 00007ffc727bcde8 [ 293.159935][ T8058] [ 293.926780][ T5738] usb usb34-port1: unable to enumerate USB device [ 295.574499][ T8084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 295.581031][ T8084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.608454][ T8084] vhci_hcd vhci_hcd.0: Device attached [ 295.666501][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 295.908153][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.010996][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.026313][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.036041][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 296.076378][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 296.087883][ T8090] vhci_hcd vhci_hcd.0: port 0 already used [ 296.096830][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.106394][ T24] usb 1-1: Product: syz [ 296.111317][ T24] usb 1-1: Manufacturer: syz [ 296.118430][ T24] usb 1-1: SerialNumber: syz [ 296.240666][ T5738] usb 36-1: SetAddress Request (14) to port 0 [ 296.247019][ T5738] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 296.815077][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.823691][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.833922][ T24] usb 1-1: Can't set UAC3 power state to 1 for id 10 [ 296.846842][ T24] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 296.873174][ T24] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 296.959667][ T24] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 297.223222][ T8085] vhci_hcd: connection reset by peer [ 297.373048][ T3368] vhci_hcd vhci_hcd.1: stop threads [ 297.393847][ T3368] vhci_hcd vhci_hcd.1: release socket [ 297.508607][ T3368] vhci_hcd vhci_hcd.1: disconnect device [ 298.074372][ T24] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 298.242609][ T24] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 298.290107][ T24] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 298.582658][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 298.648218][ T24] usb 1-1: USB disconnect, device number 26 [ 298.718566][ T6182] udevd[6182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.934165][ T804] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 299.977660][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 300.055091][ T8122] IPVS: rr: FWM 3 0x00000003 - no destination available [ 300.141814][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.157964][ T804] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.169586][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.179345][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.195596][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 300.210779][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.220163][ T804] usb 5-1: config 0 descriptor?? [ 300.584525][ T24] usb 1-1: config 0 descriptor?? [ 300.750349][ T8110] binder: BINDER_SET_CONTEXT_MGR already set [ 300.768828][ T8110] binder: 8109:8110 ioctl 4018620d 200000000040 returned -16 [ 300.909504][ T1561] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 301.778596][ T5738] usb 36-1: device descriptor read/8, error -110 [ 301.799460][ T30] audit: type=1400 audit(1778643537.950:453): avc: denied { execmod } for pid=8107 comm="syz.0.629" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 301.840207][ T30] audit: type=1400 audit(1778643537.996:454): avc: denied { execute } for pid=8107 comm="syz.0.629" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 301.961392][ T1561] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 301.975598][ T804] usbhid 5-1:0.0: can't add hid device: -71 [ 301.983464][ T804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.988990][ T1561] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.003252][ T5614] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 302.009399][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.021270][ T1561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.053654][ T804] usb 5-1: USB disconnect, device number 31 [ 302.075029][ T1561] usb 4-1: Product: syz [ 302.091288][ T1561] usb 4-1: Manufacturer: syz [ 302.103095][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 302.110445][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 302.112583][ T1561] usb 4-1: SerialNumber: syz [ 302.117852][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 302.129549][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 302.135752][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 302.163962][ T24] usb 1-1: USB disconnect, device number 27 [ 302.210337][ T5738] usb usb36-port1: attempt power cycle [ 303.324891][ T8127] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 303.476437][ T804] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 303.700310][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.762275][ T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.831140][ T804] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.906381][ T804] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 304.038703][ T804] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 304.115150][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.183788][ T804] usb 5-1: Product: syz [ 304.230582][ T804] usb 5-1: Manufacturer: syz [ 304.274399][ T804] usb 5-1: SerialNumber: syz [ 304.442884][ T5738] usb usb36-port1: unable to enumerate USB device [ 305.200033][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.208868][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.221417][ T804] usb 5-1: Can't set UAC3 power state to 1 for id 10 [ 305.232688][ T804] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 305.236316][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.251445][ T804] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 305.271934][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.281590][ T804] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 305.314996][ T804] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 305.338205][ T804] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 305.366276][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.377118][ T804] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 305.437826][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.469278][ T5738] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.469318][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 305.483344][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 305.523213][ T804] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 305.570111][ T804] usb 5-1: USB disconnect, device number 32 [ 305.576641][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.633630][ T5738] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 305.647718][ T5738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.658072][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.671745][ T5738] usb 3-1: Product: syz [ 305.678797][ T5738] usb 3-1: Manufacturer: syz [ 305.687015][ T5738] usb 3-1: SerialNumber: syz [ 305.707634][ T5708] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 305.916998][ T5708] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.928797][ T5708] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 305.931537][ T8152] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 305.945843][ T5708] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1503, setting to 1024 [ 305.958766][ T5708] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 305.980644][ T5708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.992564][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.001746][ T5708] usb 1-1: Product: syz [ 306.010847][ T5708] usb 1-1: Manufacturer: syz [ 306.015486][ T5708] usb 1-1: SerialNumber: syz [ 306.280685][ T8155] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 306.291440][ T8160] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 306.297971][ T8160] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.317640][ T8160] vhci_hcd vhci_hcd.0: Device attached [ 306.347535][ T8155] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 306.531723][ T8163] vhci_hcd vhci_hcd.0: port 0 already used [ 306.545391][ T1561] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 306.560421][ T1561] cdc_ncm 4-1:1.0: bind() failure [ 306.561377][ T8168] FAULT_INJECTION: forcing a failure. [ 306.561377][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.600594][ T8168] CPU: 1 UID: 0 PID: 8168 Comm: syz.1.646 Not tainted syzkaller #0 PREEMPT(full) [ 306.600618][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.600627][ T8168] Call Trace: [ 306.600632][ T8168] [ 306.600638][ T8168] dump_stack_lvl+0x100/0x190 [ 306.600660][ T8168] should_fail_ex.cold+0x5/0xa [ 306.600680][ T8168] _copy_from_user+0x2e/0xd0 [ 306.600702][ T8168] lowpan_control_write+0x101/0x920 [ 306.600724][ T8168] ? __pfx_lowpan_control_write+0x10/0x10 [ 306.600749][ T8168] ? __debugfs_file_get+0x1fc/0x860 [ 306.600771][ T8168] ? lock_acquire+0x5e/0x370 [ 306.600793][ T8168] full_proxy_write+0x135/0x1a0 [ 306.600817][ T8168] vfs_write+0x2aa/0x1070 [ 306.600834][ T8168] ? __pfx_full_proxy_write+0x10/0x10 [ 306.600854][ T8168] ? __pfx_vfs_write+0x10/0x10 [ 306.600869][ T8168] ? __fget_files+0x215/0x3d0 [ 306.600892][ T8168] ? __fget_files+0x21f/0x3d0 [ 306.600914][ T8168] ksys_write+0x12a/0x250 [ 306.600929][ T8168] ? __pfx_ksys_write+0x10/0x10 [ 306.600945][ T8168] ? rcu_is_watching+0x12/0xc0 [ 306.600969][ T8168] do_syscall_64+0x10b/0xf80 [ 306.600987][ T8168] ? clear_bhb_loop+0x40/0x90 [ 306.601004][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.601018][ T8168] RIP: 0033:0x7f831119ce59 [ 306.601030][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.601043][ T8168] RSP: 002b:00007f8312045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.601058][ T8168] RAX: ffffffffffffffda RBX: 00007f8311415fa0 RCX: 00007f831119ce59 [ 306.601067][ T8168] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000003 [ 306.601075][ T8168] RBP: 00007f8312045090 R08: 0000000000000000 R09: 0000000000000000 [ 306.601083][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.601092][ T8168] R13: 00007f8311416038 R14: 00007f8311415fa0 R15: 00007fff745b44d8 [ 306.601112][ T8168] [ 306.609717][ T1561] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 306.808792][ T5709] usb 42-1: SetAddress Request (14) to port 0 [ 306.815008][ T5709] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 306.826746][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.885084][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.050506][ T1561] cdc_ncm 4-1:1.1: bind() failure [ 307.078921][ T8155] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 307.098610][ T8161] vhci_hcd: connection reset by peer [ 307.114081][ T8155] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 307.129324][ T3368] vhci_hcd vhci_hcd.4: stop threads [ 307.161811][ T3368] vhci_hcd vhci_hcd.4: release socket [ 307.194833][ T8173] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 307.211850][ T8173] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 307.232456][ T3368] vhci_hcd vhci_hcd.4: disconnect device [ 307.255238][ T8173] netlink: 6 bytes leftover after parsing attributes in process `syz.1.647'. [ 307.264106][ T8173] netlink: 6 bytes leftover after parsing attributes in process `syz.1.647'. [ 307.338957][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.450578][ T5708] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 307.452479][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.457117][ T5708] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 309.154375][ T1561] usb 4-1: USB disconnect, device number 31 [ 309.187637][ T30] audit: type=1400 audit(1778643544.782:455): avc: denied { mount } for pid=8154 comm="syz.0.643" name="/" dev="autofs" ino=19778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 309.262592][ T30] audit: type=1400 audit(1778643544.856:456): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 309.373569][ T8183] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 309.386834][ T8183] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 309.408024][ T8183] netlink: 6 bytes leftover after parsing attributes in process `syz.0.650'. [ 309.416852][ T8183] netlink: 6 bytes leftover after parsing attributes in process `syz.0.650'. [ 309.453912][ T5708] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 309.650062][ T8185] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 309.684577][ T5708] usb 1-1: USB disconnect, device number 28 [ 309.734427][ T30] audit: type=1400 audit(1778643545.280:457): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 309.762666][ T5708] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 310.082292][ T5738] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 310.100075][ T5738] cdc_ncm 3-1:1.0: bind() failure [ 310.128030][ T5738] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 310.150813][ T5738] cdc_ncm 3-1:1.1: bind() failure [ 310.586763][ T5708] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 311.364510][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 311.371574][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 311.899238][ T30] audit: type=1400 audit(1778643547.284:458): avc: denied { write } for pid=8191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.217754][ T5738] usb 3-1: USB disconnect, device number 25 [ 312.325903][ T5709] usb 42-1: device descriptor read/8, error -110 [ 312.347650][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 312.361578][ T5708] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 312.467588][ T8216] input: syz1 as /devices/virtual/input/input27 [ 312.498488][ T5708] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.510046][ T5708] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.589094][ T8218] NILFS (nullb0): couldn't find nilfs on the device [ 312.631966][ T8218] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 312.928491][ T30] audit: type=1400 audit(1778643548.235:459): avc: denied { write } for pid=8212 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.956644][ T5708] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.968046][ T5708] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.982251][ T5708] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.988866][ T8215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.991629][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.051635][ T5738] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 313.114865][ T5708] usb 1-1: usb_control_msg returned -71 [ 313.121495][ T5709] usb usb42-port1: attempt power cycle [ 313.165453][ T5708] usbtmc 1-1:16.0: can't read capabilities [ 313.310657][ T5708] usb 1-1: USB disconnect, device number 29 [ 313.357579][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.395857][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.422026][ T5738] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 314.321006][ T5738] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 314.342288][ T5738] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 314.394715][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.432380][ T5738] usb 3-1: Product: syz [ 314.432396][ T5738] usb 3-1: Manufacturer: syz [ 314.432405][ T5738] usb 3-1: SerialNumber: syz [ 314.468064][ T8241] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 314.468695][ T8241] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 314.471141][ T8241] netlink: 6 bytes leftover after parsing attributes in process `syz.3.662'. [ 314.471158][ T8241] netlink: 6 bytes leftover after parsing attributes in process `syz.3.662'. [ 314.615675][ T5738] usb 3-1: Can't get UAC3 power state for id 10 [ 314.618633][ T5738] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 314.622915][ T5709] usb usb42-port1: unable to enumerate USB device [ 314.626602][ T5738] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 314.626621][ T5738] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 314.626630][ T5738] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 314.626703][ T5738] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 314.626733][ T5738] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 314.767004][ T8249] FAULT_INJECTION: forcing a failure. [ 314.767004][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 314.767034][ T8249] CPU: 1 UID: 0 PID: 8249 Comm: syz.2.663 Not tainted syzkaller #0 PREEMPT(full) [ 314.767053][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.767063][ T8249] Call Trace: [ 314.767069][ T8249] [ 314.767076][ T8249] dump_stack_lvl+0x100/0x190 [ 314.767103][ T8249] should_fail_ex.cold+0x5/0xa [ 314.767127][ T8249] ? tomoyo_encode2+0xfb/0x3c0 [ 314.767150][ T8249] should_failslab+0xc2/0x120 [ 314.767169][ T8249] __kmalloc_noprof+0xe0/0x850 [ 314.767193][ T8249] ? d_absolute_path+0x136/0x1b0 [ 314.767217][ T8249] tomoyo_encode2+0xfb/0x3c0 [ 314.767243][ T8249] tomoyo_encode+0x29/0x50 [ 314.767263][ T8249] tomoyo_realpath_from_path+0x18c/0x690 [ 314.767291][ T8249] tomoyo_path_number_perm+0x23c/0x580 [ 314.767310][ T8249] ? tomoyo_path_number_perm+0x22e/0x580 [ 314.767333][ T8249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.767378][ T8249] ? find_held_lock+0x2b/0x80 [ 314.767395][ T8249] ? __fget_files+0x215/0x3d0 [ 314.767414][ T8249] ? hook_file_ioctl_common+0x149/0x410 [ 314.767439][ T8249] ? __fget_files+0x215/0x3d0 [ 314.767465][ T8249] ? __fget_files+0x21f/0x3d0 [ 314.767489][ T8249] security_file_ioctl+0xd3/0x230 [ 314.767519][ T8249] __x64_sys_ioctl+0xb7/0x210 [ 314.767540][ T8249] do_syscall_64+0x10b/0xf80 [ 314.767562][ T8249] ? clear_bhb_loop+0x40/0x90 [ 314.767584][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.767601][ T8249] RIP: 0033:0x7fd80a39ce59 [ 314.767615][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.767631][ T8249] RSP: 002b:00007fd80b312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.767647][ T8249] RAX: ffffffffffffffda RBX: 00007fd80a615fa0 RCX: 00007fd80a39ce59 [ 314.767657][ T8249] RDX: 00002000000000c0 RSI: 0000000080026f48 RDI: 0000000000000003 [ 314.767667][ T8249] RBP: 00007fd80b312090 R08: 0000000000000000 R09: 0000000000000000 [ 314.767677][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.767687][ T8249] R13: 00007fd80a616038 R14: 00007fd80a615fa0 R15: 00007ffc727bcde8 [ 314.767710][ T8249] [ 314.767725][ T8249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.787538][ T5738] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 314.799992][ T6182] udevd[6182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.800819][ T5738] usb 3-1: USB disconnect, device number 26 [ 314.914738][ T5708] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 315.043446][ T30] audit: type=1400 audit(1778643550.182:460): avc: denied { write } for pid=8222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.105708][ T5708] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 315.107522][ T5708] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.107538][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.107550][ T5708] usb 4-1: Product: syz [ 315.107559][ T5708] usb 4-1: Manufacturer: syz [ 315.107567][ T5708] usb 4-1: SerialNumber: syz [ 315.273443][ T8254] fuse: Bad value for 'group_id' [ 315.273457][ T8254] fuse: Bad value for 'group_id' [ 315.280013][ T30] audit: type=1400 audit(1778643550.404:461): avc: denied { mounton } for pid=8253 comm="syz.2.665" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 315.304313][ T30] audit: type=1400 audit(1778643550.423:462): avc: denied { write } for pid=8258 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.337314][ T8254] XFS (nullb0): Invalid superblock magic number [ 315.389077][ T8246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.835034][ T8268] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 315.835060][ T8268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.835220][ T8268] vhci_hcd vhci_hcd.0: Device attached [ 316.191347][ T8274] vhci_hcd vhci_hcd.0: port 0 already used [ 316.241285][ T8281] syz.2.667 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.510985][ T5738] usb 36-1: SetAddress Request (18) to port 0 [ 316.511352][ T5738] usb 36-1: new SuperSpeed USB device number 18 using vhci_hcd [ 316.565462][ T5622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 316.566234][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.582435][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.615694][ T8270] vhci_hcd: connection reset by peer [ 316.617579][ T7662] vhci_hcd vhci_hcd.1: stop threads [ 316.617646][ T7662] vhci_hcd vhci_hcd.1: release socket [ 316.617953][ T7662] vhci_hcd vhci_hcd.1: disconnect device [ 316.681845][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.045245][ T30] audit: type=1400 audit(1778643552.029:463): avc: denied { read } for pid=8291 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.064982][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.065323][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.344883][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 318.419269][ T5708] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 318.419325][ T5708] cdc_ncm 4-1:1.0: bind() failure [ 318.433985][ T5708] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 318.434026][ T5708] cdc_ncm 4-1:1.1: bind() failure [ 318.461010][ T5708] usb 4-1: USB disconnect, device number 32 [ 318.526122][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 318.532544][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.532573][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.532592][ T10] usb 5-1: Product: syz [ 318.532607][ T10] usb 5-1: Manufacturer: syz [ 318.532621][ T10] usb 5-1: SerialNumber: syz [ 318.795236][ T8295] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 318.965910][ T5809] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 319.153009][ T8310] netlink: 'syz.2.674': attribute type 8 has an invalid length. [ 319.227824][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.243451][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.258058][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.258122][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.306395][ T5809] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 319.326422][ T8313] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 319.340279][ T8313] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 319.354687][ T8313] netlink: 6 bytes leftover after parsing attributes in process `syz.0.675'. [ 319.363574][ T8313] netlink: 6 bytes leftover after parsing attributes in process `syz.0.675'. [ 319.376483][ T5809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.417728][ T5809] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 319.460868][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.482917][ T5809] usb 4-1: Product: syz [ 319.490987][ T5809] usb 4-1: Manufacturer: syz [ 319.506655][ T5809] usb 4-1: SerialNumber: syz [ 319.522921][ T8320] netlink: 'syz.0.677': attribute type 27 has an invalid length. [ 320.293748][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.302492][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.437100][ T5809] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 320.546959][ T5809] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 320.588140][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.595115][ T5614] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 320.628782][ T5809] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 321.283642][ T10] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 321.368728][ T10] cdc_ncm 5-1:1.0: bind() failure [ 321.804931][ T5809] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 321.814484][ T5809] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 321.824053][ T5809] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 321.840951][ T5809] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 321.848534][ T1561] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 321.865871][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 321.913037][ T10] cdc_ncm 5-1:1.1: bind() failure [ 321.940279][ T5809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 321.955353][ T30] audit: type=1400 audit(1778643556.571:464): avc: denied { ioctl } for pid=8338 comm="syz.4.684" path="net:[4026533153]" dev="nsfs" ino=4026533153 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 322.007671][ T5809] usb 4-1: USB disconnect, device number 33 [ 322.020504][ T1561] usb 1-1: Using ep0 maxpacket: 16 [ 322.036076][ T10] usb 5-1: USB disconnect, device number 33 [ 322.042232][ T5738] usb 36-1: device descriptor read/8, error -110 [ 322.075193][ T1561] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 322.099967][ T1561] usb 1-1: config 0 has no interface number 0 [ 322.136104][ T1561] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 322.157960][ T1561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.194875][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.196640][ T1561] usb 1-1: Product: syz [ 323.106018][ T1561] usb 1-1: Manufacturer: syz [ 323.113482][ T1561] usb 1-1: SerialNumber: syz [ 323.133721][ T1561] usb 1-1: config 0 descriptor?? [ 323.178921][ T1561] hub 1-1:0.132: bad descriptor, ignoring hub [ 323.205846][ T1561] hub 1-1:0.132: probe with driver hub failed with error -5 [ 323.255341][ T5708] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 323.269302][ T1561] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input28 [ 323.309925][ T5738] usb usb36-port1: attempt power cycle [ 323.450231][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 323.467915][ T5708] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 323.492734][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.495447][ T8353] sock: sock_timestamping_bind_phc: sock not bind to device [ 323.547747][ T8354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 323.554264][ T8354] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 323.588898][ T5708] usb 2-1: config 0 descriptor?? [ 323.610084][ T8354] vhci_hcd vhci_hcd.0: Device attached [ 323.656308][ T5809] usb 1-1: USB disconnect, device number 30 [ 323.710059][ T8357] vhci_hcd vhci_hcd.0: port 0 already used [ 323.894333][ T1561] usb 38-1: SetAddress Request (6) to port 0 [ 323.943605][ T1561] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 323.959890][ T5738] usb usb36-port1: unable to enumerate USB device [ 324.048877][ T5708] usb 2-1: string descriptor 0 read error: -71 [ 324.083660][ T5708] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 324.108093][ T5708] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 324.123234][ T30] audit: type=1400 audit(1778643558.574:465): avc: denied { ioctl } for pid=8361 comm="syz.3.687" path="socket:[19024]" dev="sockfs" ino=19024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.154820][ T8362] faux_driver vgem: [drm] Unknown color mode 135163; guessing buffer size. [ 324.168028][ T5708] usb-storage 2-1:0.0: USB Mass Storage device detected [ 324.190878][ T30] audit: type=1400 audit(1778643558.621:466): avc: denied { map } for pid=8361 comm="syz.3.687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 324.224836][ T5708] usb-storage 2-1:0.0: device ignored [ 324.311421][ T30] audit: type=1400 audit(1778643558.657:467): avc: denied { execute } for pid=8361 comm="syz.3.687" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 324.348386][ T5708] usb 2-1: USB disconnect, device number 24 [ 324.538871][ T8369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 324.545429][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 324.553518][ T8369] vhci_hcd vhci_hcd.0: Device attached [ 324.710750][ T8372] vhci_hcd vhci_hcd.0: port 0 already used [ 324.873954][ T8355] vhci_hcd: connection reset by peer [ 324.880629][ T7662] vhci_hcd vhci_hcd.2: stop threads [ 324.891638][ T7662] vhci_hcd vhci_hcd.2: release socket [ 324.903013][ T7662] vhci_hcd vhci_hcd.2: disconnect device [ 324.955892][ T5738] usb 34-1: SetAddress Request (10) to port 0 [ 324.962058][ T5738] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 325.053324][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 325.239195][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.259082][ T10] usb 5-1: config 0 has no interface number 0 [ 325.266566][ T8370] vhci_hcd: connection reset by peer [ 325.273116][ T7662] vhci_hcd vhci_hcd.0: stop threads [ 325.274612][ T10] usb 5-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.278524][ T7662] vhci_hcd vhci_hcd.0: release socket [ 325.301839][ T7662] vhci_hcd vhci_hcd.0: disconnect device [ 325.304562][ T10] usb 5-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.313279][ T5614] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 325.323736][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.329950][ T10] usb 5-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.349639][ T10] usb 5-1: config 0 interface 2 has no altsetting 0 [ 325.356703][ T10] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 325.365901][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.374329][ T8362] vcan0: tx drop: invalid da for name 0x0000000000040000 [ 325.399566][ T10] usb 5-1: config 0 descriptor?? [ 328.817562][ T8401] FAULT_INJECTION: forcing a failure. [ 328.817562][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 328.830612][ T10] usbhid 5-1:0.2: can't add hid device: -71 [ 328.836872][ T10] usbhid 5-1:0.2: probe with driver usbhid failed with error -71 [ 328.845012][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT(full) [ 328.845035][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.845045][ T8401] Call Trace: [ 328.845051][ T8401] [ 328.845058][ T8401] dump_stack_lvl+0x100/0x190 [ 328.845086][ T8401] should_fail_ex.cold+0x5/0xa [ 328.845110][ T8401] ? bpf_test_init.isra.0+0x88/0x100 [ 328.845129][ T8401] should_failslab+0xc2/0x120 [ 328.845149][ T8401] __kmalloc_noprof+0xe0/0x850 [ 328.845175][ T8401] ? __lock_acquire+0x4a5/0x2630 [ 328.845200][ T8401] bpf_test_init.isra.0+0x88/0x100 [ 328.845221][ T8401] bpf_prog_test_run_xdp+0x57e/0x1670 [ 328.845252][ T8401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.845280][ T8401] ? fput+0x79/0x100 [ 328.845304][ T8401] ? __bpf_prog_get+0x97/0x2a0 [ 328.845327][ T8401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 328.845349][ T8401] __sys_bpf+0x1725/0x4b90 [ 328.845370][ T8401] ? __pfx___sys_bpf+0x10/0x10 [ 328.845385][ T8401] ? proc_fail_nth_write+0x9f/0x220 [ 328.845404][ T8401] ? find_held_lock+0x2b/0x80 [ 328.845426][ T8401] ? find_held_lock+0x2b/0x80 [ 328.845442][ T8401] ? ksys_write+0x190/0x250 [ 328.845467][ T8401] ? ksys_write+0x190/0x250 [ 328.845490][ T8401] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 328.845515][ T8401] ? vfs_write+0x3/0x1070 [ 328.845533][ T8401] ? __fget_files+0x215/0x3d0 [ 328.845567][ T8401] ? fput+0x79/0x100 [ 328.845590][ T8401] ? ksys_write+0x1ac/0x250 [ 328.845609][ T8401] ? __pfx_ksys_write+0x10/0x10 [ 328.845632][ T8401] __x64_sys_bpf+0x7b/0xc0 [ 328.845648][ T8401] ? lockdep_hardirqs_on+0x78/0x100 [ 328.845671][ T8401] do_syscall_64+0x10b/0xf80 [ 328.845694][ T8401] ? clear_bhb_loop+0x40/0x90 [ 328.845715][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.845733][ T8401] RIP: 0033:0x7fd80a39ce59 [ 328.845748][ T8401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.845765][ T8401] RSP: 002b:00007fd80b312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.845783][ T8401] RAX: ffffffffffffffda RBX: 00007fd80a615fa0 RCX: 00007fd80a39ce59 [ 328.845793][ T8401] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 328.845803][ T8401] RBP: 00007fd80b312090 R08: 0000000000000000 R09: 0000000000000000 [ 328.845813][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.845822][ T8401] R13: 00007fd80a616038 R14: 00007fd80a615fa0 R15: 00007ffc727bcde8 [ 328.845845][ T8401] [ 328.852639][ T10] usb 5-1: USB disconnect, device number 34 [ 329.039527][ T5809] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 329.170168][ T30] audit: type=1400 audit(1778643563.209:468): avc: denied { write } for pid=8405 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 329.366988][ T5809] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.375383][ T5809] usb 1-1: config 0 has no interface number 0 [ 329.381896][ T5809] usb 1-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.395990][ T5809] usb 1-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.407539][ T5809] usb 1-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.434363][ T5809] usb 1-1: config 0 interface 2 has no altsetting 0 [ 329.441308][ T5809] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 329.450379][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.460858][ T5809] usb 1-1: config 0 descriptor?? [ 329.472789][ T1561] usb 38-1: device descriptor read/8, error -110 [ 329.559667][ T5724] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.732740][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 329.749677][ T5724] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 329.775161][ T5724] usb 2-1: config 0 has no interface number 0 [ 329.798257][ T5724] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 329.949533][ T8399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.694'. [ 329.966151][ T1561] usb usb38-port1: attempt power cycle [ 330.426005][ T5738] usb 34-1: device descriptor read/8, error -110 [ 330.625535][ T1561] usb usb38-port1: unable to enumerate USB device [ 330.905775][ T5738] usb usb34-port1: attempt power cycle [ 331.337077][ T1561] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 331.494553][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.494572][ T5724] usb 2-1: Product: syz [ 331.494581][ T5724] usb 2-1: Manufacturer: syz [ 331.494590][ T5724] usb 2-1: SerialNumber: syz [ 331.499712][ T5724] usb 2-1: config 0 descriptor?? [ 331.556645][ T1561] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 331.558260][ T5724] hub 2-1:0.132: bad descriptor, ignoring hub [ 331.591497][ T5724] hub 2-1:0.132: probe with driver hub failed with error -5 [ 331.604812][ T1561] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 331.604839][ T1561] usb 5-1: Product: syz [ 331.604854][ T1561] usb 5-1: Manufacturer: syz [ 331.604870][ T1561] usb 5-1: SerialNumber: syz [ 331.609637][ T5724] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input29 [ 331.616277][ T1561] usb 5-1: config 0 descriptor?? [ 331.649356][ T5738] usb usb34-port1: unable to enumerate USB device [ 331.762520][ T5809] usbhid 1-1:0.2: can't add hid device: -71 [ 331.791156][ T5809] usbhid 1-1:0.2: probe with driver usbhid failed with error -71 [ 331.841434][ T5809] usb 1-1: USB disconnect, device number 31 [ 331.912962][ T8429] sock: sock_timestamping_bind_phc: sock not bind to device [ 332.033169][ T8430] netlink: 6 bytes leftover after parsing attributes in process `syz.2.704'. [ 332.042165][ T8430] netlink: 6 bytes leftover after parsing attributes in process `syz.2.704'. [ 333.458930][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.023075][ T804] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 335.198836][ T1561] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 335.207207][ T1561] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 335.301710][ T1561] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 335.347315][ T1561] usb 5-1: USB disconnect, device number 35 [ 335.379425][ T30] audit: type=1400 audit(1778643568.960:469): avc: denied { read } for pid=8449 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.430309][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 335.441114][ T5600] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 335.442562][ T804] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 335.499663][ T804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.739404][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.850355][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.855258][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.871935][ T804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.885018][ T804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.904734][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.904803][ T5600] usb 2-1: device firmware changed [ 335.937000][ T5809] usb 2-1: USB disconnect, device number 25 [ 336.157321][ T5809] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 336.177336][ T804] usb 4-1: usb_control_msg returned -32 [ 336.199343][ T804] usbtmc 4-1:16.0: can't read capabilities [ 336.373094][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 336.415157][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.441096][ T5738] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 336.457788][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.540331][ T5809] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 336.540425][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.540492][ T5809] usb 2-1: SerialNumber: syz [ 336.721505][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 336.783860][ T5622] Bluetooth: hci0: unexpected event for opcode 0x042c [ 336.807371][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 336.807400][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 336.807427][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 336.807447][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 336.807481][ T5738] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 336.807499][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.813847][ T5738] usb 5-1: config 0 descriptor?? [ 336.933369][ T5809] usb 2-1: USB disconnect, device number 26 [ 337.029611][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 337.041014][ T5738] hdpvr 5-1:0.0: firmware version 0x1e dated , [ 337.213687][ T8477] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 337.231033][ T8477] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 337.260896][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 337.395423][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 337.437339][ T8457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8457 comm=syz.4.712 [ 337.582761][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.660944][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.745661][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.822897][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 337.897285][ T24] usb 3-1: SerialNumber: syz [ 338.056902][ T5738] hdpvr 5-1:0.0: device init failed [ 339.023420][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.119082][ T5738] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 339.131463][ T5738] usb 5-1: USB disconnect, device number 36 [ 339.144455][ T24] usb 3-1: 0:2 : does not exist [ 339.298350][ T24] usb 3-1: USB disconnect, device number 27 [ 339.655932][ T5738] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 339.731079][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.861565][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 339.870655][ T5738] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 339.914971][ T5738] usb 5-1: config 0 has no interface number 0 [ 339.924118][ T5738] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.936715][ T5738] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 339.954854][ T5738] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 339.961074][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.175026][ T5738] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 340.222152][ T5738] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.297724][ T5738] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 340.308450][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.316635][ T5738] usb 5-1: Product: syz [ 340.320827][ T5738] usb 5-1: Manufacturer: syz [ 340.325425][ T5738] usb 5-1: SerialNumber: syz [ 340.335578][ T5738] usb 5-1: config 0 descriptor?? [ 340.575661][ T5738] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 340.688547][ T30] audit: type=1400 audit(1778643573.863:470): avc: denied { execute } for pid=8499 comm="syz.0.725" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 341.884330][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.944308][ T30] audit: type=1400 audit(1778643575.026:471): avc: denied { append } for pid=8503 comm="syz.2.727" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.977698][ T30] audit: type=1400 audit(1778643575.053:472): avc: denied { ioctl } for pid=8503 comm="syz.2.727" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 341.980475][ T8439] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 342.124984][ T5738] usb 4-1: USB disconnect, device number 34 [ 342.305076][ T8513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.885839][ T5738] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 343.102931][ T5738] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 343.153411][ T5738] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.208149][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.216264][ T5738] usb 2-1: Product: syz [ 343.236207][ T5738] usb 2-1: Manufacturer: syz [ 343.271530][ T5738] usb 2-1: SerialNumber: syz [ 343.423571][ T30] audit: type=1400 audit(1778643576.383:473): avc: denied { write } for pid=8522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.583930][ T8520] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 343.750534][ T30] audit: type=1400 audit(1778643576.688:474): avc: denied { write } for pid=8536 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.953396][ T8540] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 343.973054][ T8540] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 344.128762][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.160805][ T5615] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 344.883498][ T804] usb 5-1: USB disconnect, device number 37 [ 345.579882][ T5809] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 346.100230][ T8516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.324382][ T8516] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 346.868715][ T5809] usb 1-1: device descriptor read/64, error -71 [ 346.891183][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.972013][ T8516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.028288][ T8516] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 347.169510][ T8516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.226747][ T8516] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 347.360086][ T8516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.373817][ T8559] FAULT_INJECTION: forcing a failure. [ 347.373817][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 347.428325][ T8516] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 347.445831][ T8559] CPU: 0 UID: 0 PID: 8559 Comm: syz.2.735 Not tainted syzkaller #0 PREEMPT(full) [ 347.445859][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.445869][ T8559] Call Trace: [ 347.445878][ T8559] [ 347.445885][ T8559] dump_stack_lvl+0x100/0x190 [ 347.445914][ T8559] should_fail_ex.cold+0x5/0xa [ 347.445940][ T8559] ? tomoyo_encode2+0xfb/0x3c0 [ 347.445964][ T8559] should_failslab+0xc2/0x120 [ 347.445984][ T8559] __kmalloc_noprof+0xe0/0x850 [ 347.446016][ T8559] tomoyo_encode2+0xfb/0x3c0 [ 347.446045][ T8559] tomoyo_encode+0x29/0x50 [ 347.446068][ T8559] tomoyo_realpath_from_path+0x18c/0x690 [ 347.446099][ T8559] tomoyo_path_number_perm+0x23c/0x580 [ 347.446127][ T8559] ? tomoyo_path_number_perm+0x22e/0x580 [ 347.446150][ T8559] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.446197][ T8559] ? find_held_lock+0x2b/0x80 [ 347.446215][ T8559] ? __fget_files+0x215/0x3d0 [ 347.446237][ T8559] ? hook_file_ioctl_common+0x149/0x410 [ 347.446264][ T8559] ? __fget_files+0x215/0x3d0 [ 347.446290][ T8559] ? __fget_files+0x21f/0x3d0 [ 347.446317][ T8559] security_file_ioctl+0xd3/0x230 [ 347.446342][ T8559] __x64_sys_ioctl+0xb7/0x210 [ 347.446362][ T8559] do_syscall_64+0x10b/0xf80 [ 347.446386][ T8559] ? clear_bhb_loop+0x40/0x90 [ 347.446407][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.446426][ T8559] RIP: 0033:0x7fd80a39ce59 [ 347.446441][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.446458][ T8559] RSP: 002b:00007fd80b2f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.446476][ T8559] RAX: ffffffffffffffda RBX: 00007fd80a616090 RCX: 00007fd80a39ce59 [ 347.446487][ T8559] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 347.446497][ T8559] RBP: 00007fd80b2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 347.446508][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.446518][ T8559] R13: 00007fd80a616128 R14: 00007fd80a616090 R15: 00007ffc727bcde8 [ 347.446542][ T8559] [ 347.446775][ T8559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.823289][ T8516] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 347.838424][ T8516] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 348.212145][ T5809] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 348.328622][ T30] audit: type=1400 audit(1778643580.916:475): avc: denied { write } for pid=8548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.363321][ T804] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 348.382963][ T8571] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 348.515197][ T804] usb 3-1: device descriptor read/64, error -71 [ 348.531456][ T30] audit: type=1400 audit(1778643581.100:476): avc: denied { write } for pid=8572 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.656048][ T5738] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 348.679274][ T5738] cdc_ncm 2-1:1.0: bind() failure [ 348.717430][ T5738] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 348.744457][ T5738] cdc_ncm 2-1:1.1: bind() failure [ 348.780759][ T5738] usb 2-1: USB disconnect, device number 27 [ 348.810141][ T804] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 348.972224][ T804] usb 3-1: device descriptor read/64, error -71 [ 349.104977][ T804] usb usb3-port1: attempt power cycle [ 349.302907][ T30] audit: type=1400 audit(1778643581.811:477): avc: denied { write } for pid=8578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.345458][ T8577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.490145][ T804] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 349.521810][ T30] audit: type=1400 audit(1778643582.014:478): avc: denied { write } for pid=8593 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.563498][ T804] usb 3-1: device descriptor read/8, error -71 [ 349.825852][ T804] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 349.858801][ T804] usb 3-1: device descriptor read/8, error -71 [ 349.880789][ T8600] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 349.894200][ T8600] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 349.904534][ T8600] netlink: 6 bytes leftover after parsing attributes in process `syz.3.740'. [ 349.913368][ T8600] netlink: 6 bytes leftover after parsing attributes in process `syz.3.740'. [ 349.988628][ T804] usb usb3-port1: unable to enumerate USB device [ 350.597934][ T30] audit: type=1400 audit(1778643583.011:479): avc: denied { write } for pid=8595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.695706][ T8620] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 350.716726][ T8620] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 351.580391][ T8624] xt_TCPMSS: Only works on TCP SYN packets [ 351.959843][ T5809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 352.019276][ T30] audit: type=1400 audit(1778643584.304:480): avc: denied { write } for pid=8629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.178993][ T5809] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 352.199352][ T5809] usb 4-1: config 0 has no interface number 0 [ 352.221981][ T5809] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 352.279392][ T5809] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 352.348510][ T5809] usb 4-1: config 0 interface 153 has no altsetting 0 [ 352.417358][ T8638] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 352.446619][ T5809] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 352.483949][ T30] audit: type=1400 audit(1778643584.673:481): avc: denied { mount } for pid=8634 comm="syz.1.749" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 352.582130][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.654730][ T5809] usb 4-1: Product: syz [ 352.710093][ T5809] usb 4-1: Manufacturer: syz [ 352.735735][ T30] audit: type=1400 audit(1778643584.673:482): avc: denied { mounton } for pid=8634 comm="syz.1.749" path="/159/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 352.783281][ T5809] usb 4-1: SerialNumber: syz [ 352.829603][ T8638] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 352.840705][ T8638] overlayfs: failed to look up (tracing) for ino (-66) [ 353.069666][ T5809] usb 4-1: config 0 descriptor?? [ 353.195053][ T5809] hub 4-1:0.153: bad descriptor, ignoring hub [ 353.285344][ T5809] hub 4-1:0.153: probe with driver hub failed with error -5 [ 353.336398][ T5809] sierra 4-1:0.153: Sierra USB modem converter detected [ 353.416469][ T8646] vivid-004: kernel_thread() failed [ 353.747568][ T5724] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 353.926799][ T30] audit: type=1400 audit(1778643586.086:483): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 353.953739][ T5809] usb 4-1: USB disconnect, device number 35 [ 353.960095][ T5809] sierra 4-1:0.153: device disconnected [ 354.018015][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 354.030939][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.066427][ T5724] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 354.085853][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.101916][ T8658] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 354.114902][ T8658] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 354.125525][ T8658] netlink: 6 bytes leftover after parsing attributes in process `syz.2.754'. [ 354.134348][ T8658] netlink: 6 bytes leftover after parsing attributes in process `syz.2.754'. [ 354.168227][ T5724] usb 1-1: Product: syz [ 354.193254][ T5724] usb 1-1: Manufacturer: syz [ 354.225165][ T5724] usb 1-1: SerialNumber: syz [ 354.242003][ T5724] usb 1-1: config 0 descriptor?? [ 354.257387][ T5724] cdc_ether 1-1:0.0: missing cdc header descriptor [ 354.284224][ T5724] usb 1-1: unsupported MDLM descriptors [ 354.296374][ T30] audit: type=1400 audit(1778643586.418:484): avc: denied { write } for pid=8637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.365588][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 354.370235][ T8672] all: renamed from lo (while UP) [ 354.410260][ T30] audit: type=1400 audit(1778643586.520:485): avc: denied { write } for pid=8674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.460468][ T30] audit: type=1400 audit(1778643586.575:486): avc: denied { append } for pid=8678 comm="syz.4.758" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.492448][ T5724] usb 1-1: USB disconnect, device number 34 [ 354.682056][ T30] audit: type=1400 audit(1778643586.741:487): avc: denied { read } for pid=8685 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.789060][ T30] audit: type=1400 audit(1778643586.815:488): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 355.296940][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 355.370223][ T30] audit: type=1400 audit(1778643587.415:489): avc: denied { write } for pid=8681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.588394][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 355.599798][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.611702][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.001823][ T30] audit: type=1400 audit(1778643587.840:490): avc: denied { map } for pid=8704 comm="syz.0.763" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 356.034913][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 356.045285][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.065201][ T24] usb 4-1: config 0 descriptor?? [ 356.106835][ T30] audit: type=1400 audit(1778643588.089:491): avc: denied { append } for pid=8711 comm="syz.2.765" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 356.155764][ T30] audit: type=1400 audit(1778643588.135:492): avc: denied { write } for pid=8708 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.249486][ T5809] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 356.294648][ T8718] openvswitch: netlink: Missing key (keys=40, expected=100) [ 356.392272][ T8720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.405561][ T8720] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 356.417007][ T8720] netlink: 6 bytes leftover after parsing attributes in process `syz.1.767'. [ 356.425841][ T8720] netlink: 6 bytes leftover after parsing attributes in process `syz.1.767'. [ 356.446600][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 356.459711][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 356.476901][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.526831][ T5809] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.543049][ T24] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 356.563599][ T5809] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 356.586980][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.618728][ T5809] usb 1-1: Product: syz [ 356.644109][ T5809] usb 1-1: Manufacturer: syz [ 356.663820][ T5809] usb 1-1: SerialNumber: syz [ 356.718705][ T5809] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 356.790331][ T5809] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 356.849511][ T5738] usb 4-1: USB disconnect, device number 36 [ 356.877673][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 356.965938][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.083316][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 357.091506][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.104902][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.140715][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.151427][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 357.161513][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.176345][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 357.185932][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 357.194139][ T24] usb 2-1: Manufacturer: syz [ 357.211574][ T24] usb 2-1: config 0 descriptor?? [ 357.657330][ T24] rc_core: IR keymap rc-hauppauge not found [ 357.694756][ T24] Registered IR keymap rc-empty [ 357.919969][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 357.949916][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 357.998085][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 358.026437][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 358.054234][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 358.148503][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.330798][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.379798][ T8724] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 358.404994][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 358.431718][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 358.970042][ T5724] usb 1-1: USB disconnect, device number 35 [ 359.278160][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.315243][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.336628][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.369236][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.391423][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.412681][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.446145][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.466731][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 359.515376][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 359.524910][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.552962][ T5809] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 359.602292][ T24] usb 2-1: USB disconnect, device number 28 [ 359.672169][ T5724] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 359.690608][ T5738] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 359.790112][ T5809] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.812536][ T5809] usb 3-1: config 0 has no interface number 0 [ 359.829898][ T5809] usb 3-1: config 0 interface 2 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.842271][ T5809] usb 3-1: config 0 interface 2 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.853295][ T5809] usb 3-1: config 0 interface 2 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.866868][ T5809] usb 3-1: config 0 interface 2 has no altsetting 0 [ 359.873853][ T5809] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 359.883691][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.893894][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 359.903020][ T5724] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 359.911414][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.921490][ T5809] usb 3-1: config 0 descriptor?? [ 359.926678][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.939057][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.949355][ T5724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.949827][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 359.962560][ T5724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.977425][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.978729][ T5738] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 359.994952][ T5738] usb 4-1: config 0 has no interface number 0 [ 360.003117][ T5738] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 360.015420][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.034360][ T5738] usb 4-1: Product: syz [ 360.043203][ T5738] usb 4-1: Manufacturer: syz [ 360.053631][ T5738] usb 4-1: SerialNumber: syz [ 360.066852][ T5738] usb 4-1: config 0 descriptor?? [ 360.080024][ T5738] hub 4-1:0.132: bad descriptor, ignoring hub [ 360.088066][ T5738] hub 4-1:0.132: probe with driver hub failed with error -5 [ 360.098476][ T5738] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input31 [ 360.263524][ T8754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.773'. [ 360.286529][ T5724] usb 1-1: usb_control_msg returned -32 [ 360.478791][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 361.695778][ T5724] usbtmc 1-1:16.0: can't read capabilities [ 361.712004][ T8760] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 361.726129][ T8760] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 361.742239][ T5724] usb 1-1: USB disconnect, device number 36 [ 361.775930][ T8759] netlink: 6 bytes leftover after parsing attributes in process `syz.4.778'. [ 361.841804][ T8759] netlink: 6 bytes leftover after parsing attributes in process `syz.4.778'. [ 361.944813][ T8747] sock: sock_timestamping_bind_phc: sock not bind to device [ 361.960416][ T5809] usbhid 3-1:0.2: can't add hid device: -71 [ 361.981910][ T5809] usbhid 3-1:0.2: probe with driver usbhid failed with error -71 [ 362.015961][ T5809] usb 3-1: USB disconnect, device number 32 [ 362.036687][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 362.036704][ T30] audit: type=1400 audit(1778643593.573:495): avc: denied { read } for pid=8766 comm="syz.2.780" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 362.118760][ T30] audit: type=1400 audit(1778643593.601:496): avc: denied { open } for pid=8766 comm="syz.2.780" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 362.205746][ T30] audit: type=1400 audit(1778643593.610:497): avc: denied { ioctl } for pid=8766 comm="syz.2.780" path="socket:[21385]" dev="sockfs" ino=21385 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 362.233330][ T5724] usb 4-1: USB disconnect, device number 37 [ 362.607492][ T5809] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 362.726645][ T5724] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 362.794950][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.890779][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.953304][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.972771][ T5809] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 362.995276][ T5724] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.012546][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.035028][ T5724] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.074651][ T5809] usb 5-1: config 0 descriptor?? [ 363.079886][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.091163][ T8784] FAULT_INJECTION: forcing a failure. [ 363.091163][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.121543][ T5809] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 363.129095][ T5724] usb 1-1: SerialNumber: syz [ 363.164761][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.3.785 Not tainted syzkaller #0 PREEMPT(full) [ 363.164787][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.164797][ T8784] Call Trace: [ 363.164804][ T8784] [ 363.164811][ T8784] dump_stack_lvl+0x100/0x190 [ 363.164838][ T8784] should_fail_ex.cold+0x5/0xa [ 363.164866][ T8784] _copy_from_user+0x2e/0xd0 [ 363.164894][ T8784] move_addr_to_kernel+0x65/0x170 [ 363.164917][ T8784] copy_msghdr_from_user+0x417/0x4f0 [ 363.164941][ T8784] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 363.164976][ T8784] ___sys_sendmsg+0x106/0x1e0 [ 363.165000][ T8784] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.165051][ T8784] __sys_sendmsg+0x170/0x220 [ 363.165070][ T8784] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.165097][ T8784] ? rcu_is_watching+0x12/0xc0 [ 363.165126][ T8784] do_syscall_64+0x10b/0xf80 [ 363.165150][ T8784] ? clear_bhb_loop+0x40/0x90 [ 363.165171][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.165188][ T8784] RIP: 0033:0x7f06a7b9ce59 [ 363.165203][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.165219][ T8784] RSP: 002b:00007f06a8a3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.165236][ T8784] RAX: ffffffffffffffda RBX: 00007f06a7e15fa0 RCX: 00007f06a7b9ce59 [ 363.165247][ T8784] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000005 [ 363.165257][ T8784] RBP: 00007f06a8a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 363.165266][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.165276][ T8784] R13: 00007f06a7e16038 R14: 00007f06a7e15fa0 R15: 00007fffa6643c58 [ 363.165299][ T8784] [ 363.726717][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 363.739339][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 365.647177][ T5724] usb 1-1: 0:2 : does not exist [ 365.839499][ T10] usb 5-1: USB disconnect, device number 38 [ 365.935514][ T5724] usb 1-1: USB disconnect, device number 37 [ 366.005016][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.128923][ T8798] tmpfs: Bad value for 'mpol' [ 366.209799][ T30] audit: type=1400 audit(1778643597.423:498): avc: denied { ioctl } for pid=8797 comm="syz.2.790" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 366.323796][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 366.452796][ T5724] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 366.510402][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 366.516865][ T8807] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 366.530257][ T8807] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 366.542194][ T8807] netlink: 6 bytes leftover after parsing attributes in process `syz.0.793'. [ 366.551004][ T8807] netlink: 6 bytes leftover after parsing attributes in process `syz.0.793'. [ 366.573904][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 366.587772][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.604009][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.624800][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.646557][ T5738] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 366.657020][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.669688][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 366.672822][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.694646][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.703583][ T5724] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 366.703612][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.711997][ T5724] usb 2-1: config 0 descriptor?? [ 366.731635][ T8800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.808416][ T8811] FAULT_INJECTION: forcing a failure. [ 366.808416][ T8811] name failslab, interval 1, probability 0, space 0, times 0 [ 366.831931][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.0.795 Not tainted syzkaller #0 PREEMPT(full) [ 366.831956][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.831973][ T8811] Call Trace: [ 366.831979][ T8811] [ 366.831987][ T8811] dump_stack_lvl+0x100/0x190 [ 366.832012][ T8811] should_fail_ex.cold+0x5/0xa [ 366.832035][ T8811] ? bpf_test_init.isra.0+0x88/0x100 [ 366.832052][ T8811] should_failslab+0xc2/0x120 [ 366.832070][ T8811] __kmalloc_noprof+0xe0/0x850 [ 366.832093][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 366.832101][ T8811] bpf_test_init.isra.0+0x88/0x100 [ 366.832124][ T8811] bpf_prog_test_run_skb+0x497/0x3540 [ 366.832150][ T8811] ? find_held_lock+0x2b/0x80 [ 366.832164][ T8811] ? __fget_files+0x121/0x3d0 [ 366.832188][ T8811] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 366.832209][ T8811] ? fput+0x79/0x100 [ 366.832231][ T8811] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 366.832250][ T8811] __sys_bpf+0x1725/0x4b90 [ 366.832269][ T8811] ? __pfx___sys_bpf+0x10/0x10 [ 366.832281][ T8811] ? proc_fail_nth_write+0x9f/0x220 [ 366.832298][ T8811] ? find_held_lock+0x2b/0x80 [ 366.832316][ T8811] ? find_held_lock+0x2b/0x80 [ 366.832329][ T8811] ? ksys_write+0x190/0x250 [ 366.832344][ T8811] ? ksys_write+0x190/0x250 [ 366.832363][ T8811] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 366.832384][ T8811] ? vfs_write+0x3/0x1070 [ 366.832399][ T8811] ? __fget_files+0x215/0x3d0 [ 366.832428][ T8811] ? fput+0x79/0x100 [ 366.832447][ T8811] ? ksys_write+0x1ac/0x250 [ 366.832463][ T8811] ? __pfx_ksys_write+0x10/0x10 [ 366.832482][ T8811] __x64_sys_bpf+0x7b/0xc0 [ 366.832496][ T8811] ? lockdep_hardirqs_on+0x78/0x100 [ 366.832516][ T8811] do_syscall_64+0x10b/0xf80 [ 366.832535][ T8811] ? clear_bhb_loop+0x40/0x90 [ 366.832554][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.832570][ T8811] RIP: 0033:0x7f69f179ce59 [ 366.832584][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.832598][ T8811] RSP: 002b:00007f69f26f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.832614][ T8811] RAX: ffffffffffffffda RBX: 00007f69f1a15fa0 RCX: 00007f69f179ce59 [ 366.832624][ T8811] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 366.832632][ T8811] RBP: 00007f69f26f3090 R08: 0000000000000000 R09: 0000000000000000 [ 366.832641][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.832650][ T8811] R13: 00007f69f1a16038 R14: 00007f69f1a15fa0 R15: 00007fff919c8348 [ 366.832670][ T8811] [ 367.140466][ T10] usb 5-1: usb_control_msg returned -32 [ 367.146653][ T10] usbtmc 5-1:16.0: can't read capabilities [ 367.323289][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 367.330038][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.345874][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.356522][ T5738] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 367.362118][ T5724] hid (null): unknown global tag 0xe [ 367.374816][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.389394][ T5724] hid (null): report_id 2029225129 is invalid [ 367.404515][ T5738] usb 3-1: config 0 descriptor?? [ 367.412321][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.423304][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.435582][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.446844][ T5809] usb 5-1: USB disconnect, device number 39 [ 367.533004][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.541508][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.550094][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.557185][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.566719][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.573781][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.581025][ T5724] wacom 0003:056A:0084.0008: unknown main item tag 0x0 [ 367.591815][ T5724] wacom 0003:056A:0084.0008: unknown global tag 0xe [ 367.598433][ T5724] wacom 0003:056A:0084.0008: item 0 4 1 14 parsing failed [ 367.607323][ T5724] wacom 0003:056A:0084.0008: parse failed [ 367.614887][ T5724] wacom 0003:056A:0084.0008: probe with driver wacom failed with error -22 [ 367.627130][ T5724] usb 2-1: USB disconnect, device number 29 [ 367.870137][ T30] audit: type=1400 audit(1778643598.955:499): avc: denied { append } for pid=8802 comm="syz.2.792" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 367.929946][ T5738] usbhid 3-1:0.0: can't add hid device: -71 [ 367.947449][ T5738] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 367.982403][ T5738] usb 3-1: USB disconnect, device number 33 [ 368.883591][ T30] audit: type=1400 audit(1778643599.204:500): avc: denied { bind } for pid=8821 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.081281][ T30] audit: type=1400 audit(1778643600.072:501): avc: denied { setopt } for pid=8829 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.086549][ T8830] overlayfs: missing 'lowerdir' [ 369.151895][ T30] audit: type=1400 audit(1778643600.072:502): avc: denied { write } for pid=8829 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.365444][ T8841] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 369.386847][ T8841] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 370.566707][ T5738] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 371.069714][ T8852] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 371.085294][ T8852] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 371.099827][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 371.100540][ T8853] xt_TCPMSS: Only works on TCP SYN packets [ 371.131453][ T5738] usb 1-1: config 6 has an invalid interface number: 220 but max is 0 [ 371.717468][ T5724] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 372.152333][ T5724] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 372.160740][ T5724] usb 2-1: config 0 has no interface number 0 [ 372.169177][ T5724] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 372.184429][ T5724] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 373.056206][ T8868] netlink: 96 bytes leftover after parsing attributes in process `syz.4.806'. [ 373.237162][ T5738] usb 1-1: config 6 has no interface number 0 [ 373.244538][ T5738] usb 1-1: config 6 interface 220 has no altsetting 0 [ 373.275849][ T5738] usb 1-1: string descriptor 0 read error: -71 [ 373.282370][ T5738] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 373.459960][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.155474][ T5724] usb 2-1: config 0 interface 153 has no altsetting 0 [ 374.164046][ T5724] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 374.175685][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.180556][ T5738] usb 1-1: can't set config #6, error -71 [ 374.208429][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 374.217154][ T5738] usb 1-1: USB disconnect, device number 38 [ 374.244310][ T5724] usb 2-1: Product: syz [ 374.275155][ T5724] usb 2-1: Manufacturer: syz [ 374.308718][ T5724] usb 2-1: SerialNumber: syz [ 374.447682][ T30] audit: type=1400 audit(1778643605.011:503): avc: denied { map } for pid=8887 comm="syz.4.808" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.469274][ T5724] usb 2-1: config 0 descriptor?? [ 374.476450][ T5724] usb 2-1: can't set config #0, error -71 [ 374.482257][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 374.489553][ T5724] usb 2-1: USB disconnect, device number 30 [ 374.499318][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.530550][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.560690][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 374.589584][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 374.619791][ T8906] overlayfs: failed lookup in lower (newroot/155, name='bus', err=-40): overlapping layers [ 374.735473][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.797826][ T24] usb 4-1: Product: syz [ 374.822567][ T24] usb 4-1: Manufacturer: syz [ 374.851894][ T24] usb 4-1: SerialNumber: syz [ 375.183394][ T5809] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 375.188331][ T30] audit: type=1400 audit(1778643605.011:504): avc: denied { execute } for pid=8887 comm="syz.4.808" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.758052][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 376.869885][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 376.882595][ T5809] usb 1-1: device descriptor read/64, error -71 [ 377.157451][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.173613][ T5809] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 377.350393][ T5809] usb 1-1: device descriptor read/64, error -71 [ 377.483821][ T5708] usb 4-1: USB disconnect, device number 38 [ 377.492652][ T5809] usb usb1-port1: attempt power cycle [ 377.873597][ T8947] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 377.894326][ T8947] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 379.361725][ T8948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 379.368258][ T8948] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 379.512300][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 379.538779][ T8948] vhci_hcd vhci_hcd.0: Device attached [ 379.554692][ T30] audit: type=1400 audit(1778643609.720:505): avc: denied { ioctl } for pid=8956 comm="syz.2.816" path="socket:[22250]" dev="sockfs" ino=22250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.925644][ T5738] usb 40-1: SetAddress Request (14) to port 0 [ 380.988065][ T5738] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 494.962197][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 494.969163][ C1] rcu: 0-...!: (0 ticks this GP) idle=e5ac/0/0x1 softirq=39124/39124 fqs=0 [ 494.978583][ C1] rcu: (detected by 1, t=10502 jiffies, g=41481, q=147 ncpus=2) [ 494.986294][ C1] Sending NMI from CPU 1 to CPUs 0: [ 494.986318][ C0] NMI backtrace for cpu 0 [ 494.986330][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 494.986345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.986353][ C0] RIP: 0010:lock_is_held_type+0x53/0x140 [ 494.986377][ C0] Code: 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d 1c 5f 80 08 8b 95 8c 0b 00 00 85 d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c 41 5d 48 c7 c7 c9 27 01 8e e8 10 18 00 00 65 ff 05 61 a6 80 08 8b 85 [ 494.986389][ C0] RSP: 0018:ffffc90000007e18 EFLAGS: 00000046 [ 494.986401][ C0] RAX: 00000000ffffffff RBX: ffff8880b84284d8 RCX: 0000000000000001 [ 494.986409][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b84284d8 [ 494.986418][ C0] RBP: ffffffff8e4955c0 R08: 0000000000000005 R09: 0000000000000000 [ 494.986426][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 494.986434][ C0] R13: 0000000000000046 R14: 0000000000000001 R15: ffff8880b8428650 [ 494.986443][ C0] FS: 0000000000000000(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 494.986457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.986466][ C0] CR2: 000055558dfe94e8 CR3: 00000000361cf000 CR4: 00000000003526f0 [ 494.986474][ C0] Call Trace: [ 494.986480][ C0] [ 494.986486][ C0] enqueue_hrtimer+0x24f/0x2f0 [ 494.986508][ C0] __hrtimer_run_queues+0x73d/0xa00 [ 494.986532][ C0] hrtimer_interrupt+0x3e5/0x940 [ 494.986549][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 494.986569][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 494.986587][ C0] [ 494.986591][ C0] [ 494.986595][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.986611][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 494.986627][ C0] Code: d6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 00 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 494.986639][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 494.986648][ C0] RAX: 0000000001d2ccf3 RBX: ffffffff8e4955c0 RCX: ffffffff8b8a9095 [ 494.986657][ C0] RDX: 0000000000000000 RSI: ffffffff8df21135 RDI: ffffffff8c1c3800 [ 494.986666][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 494.986674][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 494.986682][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7ae50 [ 494.986693][ C0] ? ct_kernel_exit+0x125/0x180 [ 494.986712][ C0] default_idle+0x9/0x10 [ 494.986730][ C0] default_idle_call+0x6c/0xb0 [ 494.986748][ C0] do_idle+0x464/0x590 [ 494.986762][ C0] ? __pfx_do_idle+0x10/0x10 [ 494.986777][ C0] cpu_startup_entry+0x4f/0x60 [ 494.986790][ C0] rest_init+0x251/0x260 [ 494.986802][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 494.986822][ C0] start_kernel+0x484/0x490 [ 494.986840][ C0] x86_64_start_reservations+0x24/0x30 [ 494.986858][ C0] x86_64_start_kernel+0x12b/0x130 [ 494.986876][ C0] common_startup_64+0x13e/0x148 [ 494.986899][ C0] [ 494.987313][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g41481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 495.296153][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 495.306110][ C1] rcu: RCU grace-period kthread stack dump: [ 495.311983][ C1] task:rcu_preempt state:R running task stack:28776 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 495.325462][ C1] Call Trace: [ 495.328732][ C1] [ 495.331658][ C1] __schedule+0x1295/0x67a0 [ 495.336176][ C1] ? __pfx___schedule+0x10/0x10 [ 495.341018][ C1] ? find_held_lock+0x2b/0x80 [ 495.345687][ C1] ? schedule+0x2bf/0x390 [ 495.350014][ C1] schedule+0xdd/0x390 [ 495.354077][ C1] schedule_timeout+0x127/0x280 [ 495.358919][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 495.364282][ C1] ? __pfx_process_timeout+0x10/0x10 [ 495.369560][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 495.375362][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 495.380821][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 495.385578][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 495.390859][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 495.395794][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 495.400993][ C1] rcu_gp_kthread+0x179/0x230 [ 495.405663][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.410855][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 495.416657][ C1] ? __kthread_parkme+0x18c/0x230 [ 495.421676][ C1] ? kthread+0x13a/0x450 [ 495.425911][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.431104][ C1] kthread+0x370/0x450 [ 495.435165][ C1] ? __pfx_kthread+0x10/0x10 [ 495.439752][ C1] ret_from_fork+0x72b/0xd50 [ 495.444339][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 495.449445][ C1] ? __switch_to+0x800/0x1100 [ 495.454120][ C1] ? __pfx_kthread+0x10/0x10 [ 495.458709][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.463482][ C1] [ 495.466492][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 495.472800][ C1] CPU: 1 UID: 0 PID: 8975 Comm: syz.4.821 Not tainted syzkaller #0 PREEMPT(full) [ 495.481987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.492033][ C1] RIP: 0010:write_comp_data+0x10/0x90 [ 495.497397][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 59 40 02 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d 30 40 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 495.516992][ C1] RSP: 0018:ffffc900035c7b38 EFLAGS: 00000202 [ 495.523047][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fc238d [ 495.531005][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 495.538963][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 495.546922][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 495.554878][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 495.562841][ C1] FS: 00007f5d97f266c0(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 495.571760][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.578332][ C1] CR2: 000000110c3ba1a3 CR3: 00000000352e6000 CR4: 00000000003526f0 [ 495.586298][ C1] Call Trace: [ 495.589564][ C1] [ 495.592483][ C1] smp_call_function_many_cond+0x5ad/0x1700 [ 495.598376][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 495.604099][ C1] ? clock_was_set+0x1c3/0x870 [ 495.608853][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 495.615182][ C1] ? mark_held_locks+0x40/0x70 [ 495.619943][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 495.625746][ C1] clock_was_set+0x62b/0x870 [ 495.630339][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 495.635438][ C1] ? rcu_is_watching+0x12/0xc0 [ 495.640201][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 495.646005][ C1] do_settimeofday64+0x330/0x4d0 [ 495.650940][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 495.656392][ C1] ? security_capable+0x80/0x260 [ 495.661321][ C1] ? hidinput_configure_usage+0x1010/0x7df0 [ 495.667214][ C1] ? capable+0xd3/0xf0 [ 495.671281][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 495.676562][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 495.682012][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 495.687983][ C1] ? rcu_is_watching+0x12/0xc0 [ 495.692759][ C1] do_syscall_64+0x10b/0xf80 [ 495.697366][ C1] ? clear_bhb_loop+0x40/0x90 [ 495.702058][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.707952][ C1] RIP: 0033:0x7f5d96f9ce59 [ 495.712362][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.731964][ C1] RSP: 002b:00007f5d97f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 495.740373][ C1] RAX: ffffffffffffffda RBX: 00007f5d97215fa0 RCX: 00007f5d96f9ce59 [ 495.748334][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 495.756301][ C1] RBP: 00007f5d97032d6f R08: 0000000000000000 R09: 0000000000000000 [ 495.764283][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.772247][ C1] R13: 00007f5d97216038 R14: 00007f5d97215fa0 R15: 00007ffc2a04aff8 [ 495.780224][ C1]